@basou/cli 0.68.4 → 0.70.0

package/dist/program.js

@@ -28,7 +28,8 @@ import {
   prefixedUlid,
   readSessionYaml,
   readYamlFile,
-  replayEvents
+  replayEvents,
+  SessionFileNotAFileError
 } from "@basou/core";
 
 // src/lib/error-render.ts
@@ -126,7 +127,7 @@ function printSessionSkip(sid, reason) {
   const short = shortSessionId(sid);
   if (reason === "events_jsonl_unreadable") {
     console.error(`Warning: skipped suspect check for ${short}: events.jsonl unreadable`);
-  } else if (reason === "session_dir_not_directory") {
+  } else if (reason === "session_dir_not_directory" || reason === "session_yaml_not_a_file") {
     console.error(`Skipped ${sid}: ${reason}`);
   } else {
     console.error(`Skipped ${short}: ${reason}`);
@@ -147,6 +148,11 @@ function printSessionListSkip(sid, reason) {
     case "session_dir_not_directory":
       console.error(`Skipped ${sid}: not a directory (a symlink or a file is not followed)`);
       break;
+    case "session_yaml_not_a_file":
+      console.error(
+        `Skipped ${sid}: session.yaml is not a regular file (a symlink or anything else is not followed)`
+      );
+      break;
   }
 }
 function printTaskSkip(taskId, reason) {
@@ -423,7 +429,7 @@ async function doRunApprovalShow(idInput, options, ctx) {
       `Warning: session ${sessionId} is not a directory (a symlink or a file is not followed); its events are not shown`
     );
   } else {
-    for await (const ev of replayEvents(join(paths.sessions, sessionId), {
+    for await (const ev of replayEvents(paths, sessionId, {
       onWarning: (w) => printReplayWarning(w, sessionId)
     })) {
       if (isApprovalEvent(ev) && ev.approval_id === id) {
@@ -523,8 +529,7 @@ async function doRunApprovalResolve(idInput, options, ctx, decision) {
   const sessionLock = await acquireLock(paths, "session", approval.session_id);
   try {
     await assertSessionDirSafe(paths, approval.session_id);
-    const sessionDir = join(paths.sessions, approval.session_id);
-    for await (const ev of replayEvents(sessionDir, {
+    for await (const ev of replayEvents(paths, approval.session_id, {
       onWarning: (w) => printReplayWarning(w, approval.session_id)
     })) {
       if (isApprovalEvent(ev) && ev.approval_id === approval.id && (ev.type === "approval_approved" || ev.type === "approval_rejected" || ev.type === "approval_expired")) {
@@ -537,7 +542,8 @@ async function doRunApprovalResolve(idInput, options, ctx, decision) {
     let sessionStatus = null;
     try {
       sessionStatus = (await readSessionYaml(paths, approval.session_id)).session.status;
-    } catch {
+    } catch (error) {
+      if (error instanceof SessionFileNotAFileError) throw error;
       sessionStatus = null;
     }
     const attachable = sessionStatus === "initialized" || sessionStatus === "running" || sessionStatus === "waiting_approval";
@@ -1046,6 +1052,7 @@ import {
   readSessionYaml as readSessionYaml2,
   reimportPreservingId,
   SESSION_IMPORT_SCHEMA_VERSION,
+  SessionFileNotAFileError as SessionFileNotAFileError2,
   SessionImportPayloadSchema
 } from "@basou/core";
 
@@ -1219,10 +1226,11 @@ async function resolveImportTarget(ctx) {
 async function importDerivedSessions(paths, manifest, options, sourceKind, candidates, projectPaths, boundaryDeclared) {
   await assertSessionStoreSafe(paths);
   if (options.dryRun !== true) await assertLockStoreSafe2(paths);
-  const { byExternalId: existingByExternalId, notDirectories } = await loadExistingByExternalId(
-    paths,
-    sourceKind
-  );
+  const {
+    byExternalId: existingByExternalId,
+    notDirectories,
+    yamlNotFiles
+  } = await loadExistingByExternalId(paths, sourceKind);
   let notDirectoriesWarned = false;
   const seenThisRun = /* @__PURE__ */ new Set();
   const crossProjectCheck = boundaryDeclared;
@@ -1315,12 +1323,20 @@ async function importDerivedSessions(paths, manifest, options, sourceKind, candi
       }
       counts.replaced++;
     }
-    if (priors.length === 0 && notDirectories.length > 0 && !notDirectoriesWarned) {
+    if (priors.length === 0 && (notDirectories.length > 0 || yamlNotFiles.length > 0) && !notDirectoriesWarned) {
       notDirectoriesWarned = true;
-      const one = notDirectories.length === 1;
-      console.error(
-        `Import: ${notDirectories.join(", ")} ${one ? "is not a directory" : "are not directories"} (a symlink or a file is not followed), so ${one ? "it was" : "they were"} not checked for an earlier import; a session imported there may be imported again`
-      );
+      if (notDirectories.length > 0) {
+        const one = notDirectories.length === 1;
+        console.error(
+          `Import: ${notDirectories.join(", ")} ${one ? "is not a directory" : "are not directories"} (a symlink or a file is not followed), so ${one ? "it was" : "they were"} not checked for an earlier import; a session imported there may be imported again`
+        );
+      }
+      if (yamlNotFiles.length > 0) {
+        const one = yamlNotFiles.length === 1;
+        console.error(
+          `Import: the session.yaml of ${yamlNotFiles.join(", ")} ${one ? "is" : "are"} not a regular file (a symlink or anything else is not followed), so ${one ? "it was" : "they were"} not checked for an earlier import; a session imported there may be imported again`
+        );
+      }
     }
     const result = await importSessionFromJson(paths, manifest, payload, {
       dryRun: options.dryRun === true
@@ -1402,13 +1418,15 @@ async function loadExistingByExternalId(paths, sourceKind) {
   try {
     ({ dirs: sessionIds, notDirectories } = await enumerateSessionEntries(paths));
   } catch {
-    return { byExternalId, notDirectories: [] };
+    return { byExternalId, notDirectories: [], yamlNotFiles: [] };
   }
+  const yamlNotFiles = [];
   for (const sessionId of sessionIds) {
     let session;
     try {
       session = await readSessionYaml2(paths, sessionId);
-    } catch {
+    } catch (error) {
+      if (error instanceof SessionFileNotAFileError2) yamlNotFiles.push(sessionId);
       continue;
     }
     if (session.session.source.kind !== sourceKind) continue;
@@ -1423,7 +1441,7 @@ async function loadExistingByExternalId(paths, sourceKind) {
     const match = typeof label === "string" ? label.match(/^claude-code import (\S+)$/) : null;
     if (match?.[1] !== void 0) add(match[1], prior);
   }
-  return { byExternalId, notDirectories };
+  return { byExternalId, notDirectories, yamlNotFiles };
 }
 async function selectTranscriptFiles(projectsRoot, projectPaths, options) {
   if (options.session !== void 0) {
@@ -2956,9 +2974,8 @@ async function doRunChannelClear(face, options) {
 }
 
 // src/commands/decision.ts
-import { readFile as readFile3 } from "fs/promises";
 import { homedir as homedir3 } from "os";
-import { join as join7, resolve as resolve4 } from "path";
+import { resolve as resolve4 } from "path";
 import {
   AGENT_INFRA_DIRS as AGENT_INFRA_DIRS2,
   acquireLock as acquireLock2,
@@ -2969,7 +2986,7 @@ import {
   createAdHocSessionWithEvent,
   displayPath as displayPath4,
   EVENT_SCHEMA_VERSION as EVENT_SCHEMA_VERSION2,
-  findErrorCode as findErrorCode4,
+  findErrorCode as findErrorCode5,
   isValidPrefixedId,
   LOCAL_CLI_EVENT_SOURCE as LOCAL_CLI_EVENT_SOURCE2,
   loadSessionEntries,
@@ -2981,6 +2998,35 @@ import {
 } from "@basou/core";
 import { InvalidArgumentError as InvalidArgumentError2 } from "commander";
 
+// src/lib/input-file.ts
+import { readFile as readFile3 } from "fs/promises";
+import { findErrorCode as findErrorCode4 } from "@basou/core";
+function refuseDashInputFile(flag, value, alternative) {
+  if (value !== "-") return;
+  if (alternative === "stdin") {
+    throw new Error(
+      `${flag} - is refused: - is reserved for standard input. Omit ${flag} to read stdin, or pass ${flag} ./- to read a file named -.`
+    );
+  }
+  const toFile = "textFlag" in alternative ? `Write the text to a file and pass ${flag} <path>, or pass it with ${alternative.textFlag}` : `Write ${alternative.fileOnly} to a file and pass its path with ${flag}`;
+  throw new Error(
+    `${flag} - is refused: - is reserved for standard input, which this command does not read. ${toFile}; a file named - is read with ${flag} ./-.`
+  );
+}
+async function readInputFileText(flag, path) {
+  try {
+    return await readFile3(path, "utf8");
+  } catch (error) {
+    if (findErrorCode4(error, "ENOENT")) {
+      throw new Error(`${flag} names a file that does not exist`, { cause: error });
+    }
+    if (findErrorCode4(error, "EISDIR")) {
+      throw new Error(`${flag} names a directory, not a file`, { cause: error });
+    }
+    throw new Error(`Could not read the file ${flag} names`, { cause: error });
+  }
+}
+
 // src/commands/decision-gaps.ts
 import {
   basouPaths as basouPaths5,
@@ -3348,6 +3394,7 @@ async function runDecisionCapture(options, ctx = {}) {
   }
 }
 async function doRunDecisionCapture(options, ctx) {
+  refuseDashInputFile("--file", options.file, "stdin");
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveBasouRootForCommand(cwd, "decision capture");
   const paths = basouPaths6(repositoryRoot);
@@ -3509,9 +3556,8 @@ function isDecisionId(value) {
 async function decisionExists(paths, decisionId) {
   const entries = await loadSessionEntries(paths, { now: /* @__PURE__ */ new Date() });
   for (const entry of entries) {
-    const sessionDir = join7(paths.sessions, entry.sessionId);
     try {
-      for await (const ev of replayEvents2(sessionDir, {})) {
+      for await (const ev of replayEvents2(paths, entry.sessionId, {})) {
         if (ev.type === "decision_recorded" && ev.decision_id === decisionId) return true;
       }
     } catch {
@@ -3563,14 +3609,7 @@ function parseReason(raw) {
 }
 async function readCaptureInput(options, ctx) {
   if (options.file !== void 0) {
-    try {
-      return await readFile3(options.file, "utf8");
-    } catch (error) {
-      if (findErrorCode4(error, "ENOENT")) {
-        throw new Error(`Input file not found: ${options.file}`);
-      }
-      throw error;
-    }
+    return await readInputFileText("--file", options.file);
   }
   if (ctx.readInput !== void 0) {
     return await ctx.readInput();
@@ -3909,7 +3948,7 @@ async function assertWorkspaceInitialized4(basouRoot) {
   try {
     await assertBasouRootSafe4(basouRoot);
   } catch (error) {
-    if (findErrorCode4(error, "ENOENT")) {
+    if (findErrorCode5(error, "ENOENT")) {
       throw new Error("Workspace not initialized. Run 'basou init' first.");
     }
     throw error;
@@ -3920,7 +3959,7 @@ async function assertWorkspaceInitialized4(basouRoot) {
 import {
   assertBasouRootSafe as assertBasouRootSafe5,
   basouPaths as basouPaths7,
-  findErrorCode as findErrorCode5,
+  findErrorCode as findErrorCode6,
   readMarkdownFile as readMarkdownFile4,
   renderDecisions as renderDecisions2,
   renderWithMarkers as renderWithMarkers2,
@@ -3962,7 +4001,7 @@ async function assertWorkspaceInitialized5(basouRoot) {
   try {
     await assertBasouRootSafe5(basouRoot);
   } catch (error) {
-    if (findErrorCode5(error, "ENOENT")) {
+    if (findErrorCode6(error, "ENOENT")) {
       throw new Error("Workspace not initialized. Run 'basou init' first.");
     }
     throw error;
@@ -3972,7 +4011,7 @@ async function assertWorkspaceInitialized5(basouRoot) {
 // src/commands/exec.ts
 import { mkdir as mkdir2, rm as rm2 } from "fs/promises";
 import { homedir as homedir4 } from "os";
-import { join as join8 } from "path";
+import { join as join7 } from "path";
 import {
   acquireLock as acquireLock3,
   assertBasouRootSafe as assertBasouRootSafe6,
@@ -3983,17 +4022,37 @@ import {
   EVENT_SCHEMA_VERSION as EVENT_SCHEMA_VERSION3,
   finalizeSessionYaml,
   getSnapshot,
+  lstatSessionFile,
   overwriteYamlFile,
   parseDuration,
   prefixedUlid as prefixedUlid3,
   readManifest as readManifest6,
   readYamlFile as readYamlFile2,
   SESSION_SCHEMA_VERSION,
+  SessionFileNotAFileError as SessionFileNotAFileError3,
   SessionSchema,
   sanitizeWorkingDirectory,
   writeObservedDuration,
   writeYamlFile
 } from "@basou/core";
+
+// src/lib/signal-exit-code.ts
+import { constants } from "os";
+var PROMISED_SIGNAL_NUMBERS = {
+  SIGHUP: 1,
+  SIGINT: 2,
+  SIGQUIT: 3,
+  SIGKILL: 9,
+  SIGTERM: 15
+};
+var UNNUMBERED_SIGNAL_EXIT_CODE = 255;
+function signalToExitCode(sig) {
+  if (sig === null) return 1;
+  const num = PROMISED_SIGNAL_NUMBERS[sig] ?? constants.signals[sig];
+  return num === void 0 ? UNNUMBERED_SIGNAL_EXIT_CODE : 128 + num;
+}
+
+// src/commands/exec.ts
 function registerExecCommand(program) {
   program.command("exec <command> [args...]").description("Execute a command and record it as a Basou session").passThroughOptions().option("--timeout <duration>", "Kill the child after this duration (e.g. 30s, 5m, 1h)").option("--no-snapshot", "Skip git_snapshot before/after the command").option("--cwd <path>", "Run from a Basou root other than process.cwd()").option("-v, --verbose", "Show error causes").action(async (command, args, options) => {
     try {
@@ -4016,12 +4075,12 @@ async function runExec(command, args, options, ctx = {}) {
   const manifest = await readManifest6(paths);
   await assertSessionStoreSafe2(paths);
   const sessionId = prefixedUlid3("ses");
-  const sessionDir = join8(paths.sessions, sessionId);
+  const sessionDir = join7(paths.sessions, sessionId);
   const appendEvent = ctx.appendEvent ?? (async (_sessionDir, event) => {
     await coreAppendChainedEvent(paths, sessionId, event);
   });
   const startedAt = now().toISOString();
-  const sessionYamlPath = join8(sessionDir, "session.yaml");
+  const sessionYamlPath = join7(sessionDir, "session.yaml");
   const session = buildInitialSession({
     id: sessionId,
     command,
@@ -4070,7 +4129,7 @@ async function runExec(command, args, options, ctx = {}) {
   });
   const runningLock = await acquireLock3(paths, "session", sessionId);
   try {
-    await mutateSessionYaml(sessionYamlPath, (s) => {
+    await mutateSessionYaml(paths, sessionId, (s) => {
       s.session.status = "running";
     });
   } finally {
@@ -4190,18 +4249,6 @@ function decideFinalStatus(result, signalReceived) {
   if (result.exit_code === 0) return "completed";
   return "failed";
 }
-var SIGNUM_MAP = {
-  SIGHUP: 1,
-  SIGINT: 2,
-  SIGQUIT: 3,
-  SIGKILL: 9,
-  SIGTERM: 15
-};
-function signalToExitCode(sig) {
-  if (sig === null) return 1;
-  const num = SIGNUM_MAP[sig] ?? 1;
-  return 128 + num;
-}
 async function tryAppendGitSnapshot(sessionDir, sessionId, repoRoot, now, appendEvent) {
   let snapshot;
   try {
@@ -4259,7 +4306,14 @@ function buildInitialSession(input) {
     }
   };
 }
-async function mutateSessionYaml(filePath, mutator) {
+async function mutateSessionYaml(paths, sessionId, mutator) {
+  const kind = await lstatSessionFile(paths, sessionId, "session.yaml").catch((error) => {
+    throw new Error("Failed to read YAML file", { cause: error });
+  });
+  if (kind === "symlink" || kind === "not_a_file") {
+    throw new SessionFileNotAFileError3(sessionId, "session.yaml", kind);
+  }
+  const filePath = join7(paths.sessions, sessionId, "session.yaml");
   const raw = await readYamlFile2(filePath);
   const parsed = SessionSchema.parse(raw);
   mutator(parsed);
@@ -4313,7 +4367,7 @@ async function finalizeSessionAsFailed(paths, sessionDir, sessionId, appendEvent
 import {
   assertBasouRootSafe as assertBasouRootSafe7,
   basouPaths as basouPaths9,
-  findErrorCode as findErrorCode6,
+  findErrorCode as findErrorCode7,
   readMarkdownFile as readMarkdownFile5,
   renderHandoff as renderHandoff2,
   renderWithMarkers as renderWithMarkers3,
@@ -4371,7 +4425,7 @@ async function assertWorkspaceInitialized6(basouRoot) {
   try {
     await assertBasouRootSafe7(basouRoot);
   } catch (error) {
-    if (findErrorCode6(error, "ENOENT")) {
+    if (findErrorCode7(error, "ENOENT")) {
       throw new Error("Workspace not initialized. Run 'basou init' first.");
     }
     throw error;
@@ -4382,7 +4436,7 @@ async function assertWorkspaceInitialized6(basouRoot) {
 import { execFile } from "child_process";
 import { open as open2, readFile as readFile4, realpath as realpath4, stat as stat4 } from "fs/promises";
 import { homedir as homedir7 } from "os";
-import { join as join11 } from "path";
+import { join as join10 } from "path";
 import { fileURLToPath } from "url";
 import { promisify } from "util";
 import {
@@ -4543,15 +4597,15 @@ function describeCodexHookTrust(trust) {
 
 // src/lib/protocols-config.ts
 import { homedir as homedir5 } from "os";
-import { isAbsolute, join as join9, resolve as resolve5 } from "path";
+import { isAbsolute, join as join8, resolve as resolve5 } from "path";
 import { readYamlFile as readYamlFile3 } from "@basou/core";
-var DEFAULT_PROTOCOLS_CONFIG_PATH = join9(homedir5(), ".basou", "protocols.yaml");
-var DEFAULT_TARGET_PATH = join9(homedir5(), ".claude", "CLAUDE.md");
+var DEFAULT_PROTOCOLS_CONFIG_PATH = join8(homedir5(), ".basou", "protocols.yaml");
+var DEFAULT_TARGET_PATH = join8(homedir5(), ".claude", "CLAUDE.md");
 var ALLOWED_TOP_KEYS = /* @__PURE__ */ new Set(["version", "protocols"]);
 var ALLOWED_ENTRY_KEYS = /* @__PURE__ */ new Set(["source", "title"]);
 function expandTilde(p) {
   if (p === "~") return homedir5();
-  if (p.startsWith("~/")) return join9(homedir5(), p.slice(2));
+  if (p.startsWith("~/")) return join8(homedir5(), p.slice(2));
   return p;
 }
 function isRecord(value) {
@@ -4622,19 +4676,19 @@ async function loadProtocolsConfig(configPath = DEFAULT_PROTOCOLS_CONFIG_PATH) {
 import {
   assertBasouRootSafe as assertBasouRootSafe8,
   basouPaths as basouPaths10,
-  findErrorCode as findErrorCode7,
+  findErrorCode as findErrorCode8,
   renderOrientation as renderOrientation2,
   writeMarkdownFile as writeMarkdownFile4
 } from "@basou/core";
 
 // src/lib/hosts-config.ts
 import { homedir as homedir6 } from "os";
-import { isAbsolute as isAbsolute2, join as join10, resolve as resolve6 } from "path";
+import { isAbsolute as isAbsolute2, join as join9, resolve as resolve6 } from "path";
 import { readYamlFile as readYamlFile4 } from "@basou/core";
-var DEFAULT_HOSTS_CONFIG_PATH = join10(homedir6(), ".basou", "hosts.yaml");
+var DEFAULT_HOSTS_CONFIG_PATH = join9(homedir6(), ".basou", "hosts.yaml");
 function expandTilde2(p) {
   if (p === "~") return homedir6();
-  if (p.startsWith("~/")) return join10(homedir6(), p.slice(2));
+  if (p.startsWith("~/")) return join9(homedir6(), p.slice(2));
   return p;
 }
 function isRecord2(value) {
@@ -4779,7 +4833,7 @@ async function assertWorkspaceInitialized7(basouRoot) {
   try {
     await assertBasouRootSafe8(basouRoot);
   } catch (error) {
-    if (findErrorCode7(error, "ENOENT")) {
+    if (findErrorCode8(error, "ENOENT")) {
       throw new Error("Workspace not initialized. Run 'basou init' first.");
     }
     throw error;
@@ -5218,7 +5272,7 @@ function parseMinEdits(raw) {
   if (raw === void 0 || !/^\d+$/.test(raw)) return void 0;
   return Number(raw);
 }
-var DEFAULT_CLAUDE_SETTINGS_PATH = join11(homedir7(), ".claude", "settings.json");
+var DEFAULT_CLAUDE_SETTINGS_PATH = join10(homedir7(), ".claude", "settings.json");
 function resolveCliEntry() {
   return fileURLToPath(import.meta.url);
 }
@@ -5575,7 +5629,7 @@ function describeHookMode(tiers) {
   const gates = tiers.review ? "capture + review" : "capture";
   return `${enforcement}, ${gates}`;
 }
-var DEFAULT_CODEX_FACE_PATH = join11(homedir7(), ".codex", "AGENTS.md");
+var DEFAULT_CODEX_FACE_PATH = join10(homedir7(), ".codex", "AGENTS.md");
 var LEFTOVER_FACE_NOTE = (label) => `${label} still carries an orientation block rendered by an earlier basou (0.39 or before); every Codex session on this machine reads it. \`basou channel clear codex\` removes it.`;
 async function faceHasLeftoverOrientationBlock(facePath) {
   try {
@@ -5587,8 +5641,8 @@ async function faceHasLeftoverOrientationBlock(facePath) {
     return false;
   }
 }
-var DEFAULT_CODEX_HOOKS_PATH = join11(homedir7(), ".codex", "hooks.json");
-var DEFAULT_CODEX_CONFIG_PATH = join11(homedir7(), ".codex", "config.toml");
+var DEFAULT_CODEX_HOOKS_PATH = join10(homedir7(), ".codex", "hooks.json");
+var DEFAULT_CODEX_CONFIG_PATH = join10(homedir7(), ".codex", "config.toml");
 async function readHooksFile(path) {
   let raw;
   try {
@@ -5834,7 +5888,6 @@ function renderGitignoreWarning(error, verbose) {
 }
 
 // src/commands/note.ts
-import { readFile as readFile5 } from "fs/promises";
 import { homedir as homedir8 } from "os";
 import { resolve as resolve8 } from "path";
 import {
@@ -5844,7 +5897,7 @@ import {
   basouPaths as basouPaths12,
   createAdHocSessionWithEvent as createAdHocSessionWithEvent2,
   EVENT_SCHEMA_VERSION as EVENT_SCHEMA_VERSION4,
-  findErrorCode as findErrorCode8,
+  findErrorCode as findErrorCode9,
   LOCAL_CLI_EVENT_SOURCE as LOCAL_CLI_EVENT_SOURCE3,
   readManifest as readManifest8,
   resolveSessionId as resolveSessionId2,
@@ -6005,22 +6058,12 @@ async function readNoteBody(bodyArgument, options, ctx, cwd) {
   if (bodyArgument !== void 0 && options.file !== void 0) {
     throw new Error("Pass the note text either as an argument or with --file, not both.");
   }
+  refuseDashInputFile("--file", options.file, "stdin");
   if (bodyArgument !== void 0) {
     return { body: bodyArgument, source: "argument" };
   }
   if (options.file !== void 0) {
-    let raw;
-    try {
-      raw = await readFile5(resolve8(cwd, options.file), "utf8");
-    } catch (error) {
-      if (findErrorCode8(error, "ENOENT")) {
-        throw new Error("--file names a file that does not exist", { cause: error });
-      }
-      if (findErrorCode8(error, "EISDIR")) {
-        throw new Error("--file names a directory, not a file", { cause: error });
-      }
-      throw new Error("Could not read the file --file names", { cause: error });
-    }
+    const raw = await readInputFileText("--file", resolve8(cwd, options.file));
     return { body: dropTrailingNewlines(raw), source: "file" };
   }
   if (ctx.readInput !== void 0) {
@@ -6089,7 +6132,7 @@ async function assertWorkspaceInitialized8(basouRoot) {
   try {
     await assertBasouRootSafe9(basouRoot);
   } catch (error) {
-    if (findErrorCode8(error, "ENOENT")) {
+    if (findErrorCode9(error, "ENOENT")) {
       throw new Error("Workspace not initialized. Run 'basou init' first.");
     }
     throw error;
@@ -6206,7 +6249,7 @@ import {
   writeFileSync,
   writeSync
 } from "fs";
-import { basename as basename7, dirname as dirname7, isAbsolute as isAbsolute3, join as join12, relative as relative3, resolve as resolve9 } from "path";
+import { basename as basename7, dirname as dirname7, isAbsolute as isAbsolute3, join as join11, relative as relative3, resolve as resolve9 } from "path";
 import {
   appendBasouGitignore as appendBasouGitignore2,
   basouPaths as basouPaths13,
@@ -6587,7 +6630,7 @@ function classifySourceRoot(repositoryRoot, declaredPath) {
   } catch {
     return { path: declaredPath, kind: "unresolved" };
   }
-  return { path: declaredPath, kind: existsSync(join12(real, ".git")) ? "repo" : "non-repo" };
+  return { path: declaredPath, kind: existsSync(join11(real, ".git")) ? "repo" : "non-repo" };
 }
 async function doRunProjectAdopt(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
@@ -6691,7 +6734,7 @@ async function gatherRepoWiring(repositoryRoot, entry) {
   } catch {
     return { ...base, reachable: false, instructionFiles: [] };
   }
-  if (!existsSync(join12(real, ".git"))) {
+  if (!existsSync(join11(real, ".git"))) {
     return { ...base, reachable: false, instructionFiles: [] };
   }
   try {
@@ -6699,7 +6742,7 @@ async function gatherRepoWiring(repositoryRoot, entry) {
     for (const name of INSTRUCTION_FILES) {
       let present = true;
       try {
-        lstatSync(join12(real, name));
+        lstatSync(join11(real, name));
       } catch {
         present = false;
       }
@@ -6810,10 +6853,10 @@ function gatherRepoGitignore(repositoryRoot, entry) {
   } catch {
     return { ...base, reachable: false, currentLines: [] };
   }
-  if (!existsSync(join12(real, ".git"))) {
+  if (!existsSync(join11(real, ".git"))) {
     return { ...base, reachable: false, currentLines: [] };
   }
-  return { ...base, reachable: true, currentLines: readGitignoreLines(join12(real, ".gitignore")) };
+  return { ...base, reachable: true, currentLines: readGitignoreLines(join11(real, ".gitignore")) };
 }
 function hasErrorCode(error) {
   return error instanceof Error && typeof error.code === "string";
@@ -6827,7 +6870,7 @@ function readGitignoreLines(file) {
   }
 }
 function applyGitignorePlan(repositoryRoot, plan) {
-  const file = join12(realpathSync(resolve9(repositoryRoot, plan.path)), ".gitignore");
+  const file = join11(realpathSync(resolve9(repositoryRoot, plan.path)), ".gitignore");
   let existing = "";
   try {
     existing = readFileSync(file, "utf8");
@@ -6967,7 +7010,7 @@ function gatherRepoSymlinks(repositoryRoot, anchorReal, entry) {
     return { ...base, isAnchor: false, reachable: false, canonicalPresent: false, files: [] };
   }
   if (real === anchorReal) {
-    const anchorCanonical = join12(real, CANONICAL_FILE);
+    const anchorCanonical = join11(real, CANONICAL_FILE);
     const anchorState = anchorCanonicalState(anchorCanonical);
     if (anchorState === "absent") {
       return { ...base, isAnchor: true, reachable: true, canonicalPresent: false, files: [] };
@@ -6987,7 +7030,7 @@ function gatherRepoSymlinks(repositoryRoot, anchorReal, entry) {
       anchorCanonical,
       "self"
     ).map((spec) => {
-      const { state, actualTarget } = inspectSymlink(join12(real, spec.name), spec.target);
+      const { state, actualTarget } = inspectSymlink(join11(real, spec.name), spec.target);
       return {
         name: spec.name,
         expectedTarget: spec.target,
@@ -7004,16 +7047,16 @@ function gatherRepoSymlinks(repositoryRoot, anchorReal, entry) {
       files: anchorFiles
     };
   }
-  if (!existsSync(join12(real, ".git"))) {
+  if (!existsSync(join11(real, ".git"))) {
     return { ...base, isAnchor: false, reachable: false, canonicalPresent: false, files: [] };
   }
-  const canonicalFile = isSelf ? join12(real, CANONICAL_FILE) : join12(anchorReal, "agents", basename7(real), CANONICAL_FILE);
+  const canonicalFile = isSelf ? join11(real, CANONICAL_FILE) : join11(anchorReal, "agents", basename7(real), CANONICAL_FILE);
   if (!existsSync(canonicalFile)) {
     return { ...base, isAnchor: false, reachable: true, canonicalPresent: false, files: [] };
   }
   const files = expectedSymlinkTargets(real, canonicalFile, mode).map(
     (spec) => {
-      const { state, actualTarget } = inspectSymlink(join12(real, spec.name), spec.target);
+      const { state, actualTarget } = inspectSymlink(join11(real, spec.name), spec.target);
       return {
         name: spec.name,
         expectedTarget: spec.target,
@@ -7042,7 +7085,7 @@ function applySymlinkPlan(repositoryRoot, plan) {
   const created = [];
   const failed = [];
   for (const { name, target } of plan.toCreate) {
-    const filePath = join12(real, name);
+    const filePath = join11(real, name);
     try {
       mkdirSync(dirname7(filePath), { recursive: true });
       symlinkSync(target, filePath);
@@ -7076,7 +7119,7 @@ function gatherViewSymlinks(repositoryRoot, anchorReal, roster, viewDir) {
   if (!existsSync(canonicalFile)) return { kind: "missing-canonical", viewName };
   const files = expectedSymlinkTargets(viewDir, canonicalFile, "hub").map(
     (spec) => {
-      const { state, actualTarget } = inspectSymlink(join12(viewDir, spec.name), spec.target);
+      const { state, actualTarget } = inspectSymlink(join11(viewDir, spec.name), spec.target);
       return {
         name: spec.name,
         expectedTarget: spec.target,
@@ -7092,7 +7135,7 @@ function applyViewSymlinks(viewDir, files) {
   const failed = [];
   for (const f of files) {
     if (f.state !== "missing") continue;
-    const filePath = join12(viewDir, f.name);
+    const filePath = join11(viewDir, f.name);
     try {
       mkdirSync(dirname7(filePath), { recursive: true });
       symlinkSync(f.expectedTarget, filePath);
@@ -7314,7 +7357,7 @@ function resolveViewDir(repositoryRoot, viewPath) {
     return realpathSync(abs);
   } catch {
     try {
-      return join12(realpathSync(dirname7(abs)), basename7(abs));
+      return join11(realpathSync(dirname7(abs)), basename7(abs));
     } catch {
       return abs;
     }
@@ -7332,7 +7375,7 @@ function gatherViewRepo(repositoryRoot, viewDir, entry) {
     return { path: entry.path, reachable: false };
   }
   const linkName = basename7(repoReal);
-  const { state, actualTarget } = inspectSymlink(join12(viewDir, linkName), expectedTarget);
+  const { state, actualTarget } = inspectSymlink(join11(viewDir, linkName), expectedTarget);
   return {
     path: entry.path,
     reachable: true,
@@ -7346,7 +7389,7 @@ function applyViewPlan(viewDir, toCreate) {
   const created = [];
   const failed = [];
   for (const { name, target } of toCreate) {
-    const filePath = join12(viewDir, name);
+    const filePath = join11(viewDir, name);
     try {
       mkdirSync(dirname7(filePath), { recursive: true });
       symlinkSync(target, filePath);
@@ -7361,7 +7404,7 @@ var TOP_LEVEL_INSTRUCTION_FILES_LOWER = new Set(
   INSTRUCTION_FILES.filter((f) => !f.includes("/")).map((f) => f.toLowerCase())
 );
 function classifyViewLink(viewDir, name, rosterRealpaths) {
-  const filePath = join12(viewDir, name);
+  const filePath = join11(viewDir, name);
   let isLink;
   try {
     isLink = lstatSync(filePath).isSymbolicLink();
@@ -7390,7 +7433,7 @@ function classifyViewLink(viewDir, name, rosterRealpaths) {
   if (!isDir) {
     return { target, kind: existsSync(resolved) ? "non-repo" : "broken" };
   }
-  return { target, kind: existsSync(join12(resolved, ".git")) ? "repo" : "non-repo" };
+  return { target, kind: existsSync(join11(resolved, ".git")) ? "repo" : "non-repo" };
 }
 function gatherExistingViewLinks(viewDir, rosterRealpaths) {
   let names;
@@ -7415,7 +7458,7 @@ function pruneViewLinks(viewDir, toPrune, rosterRealpaths) {
   const pruned = [];
   const failed = [];
   for (const { name } of toPrune) {
-    const filePath = join12(viewDir, name);
+    const filePath = join11(viewDir, name);
     const c = classifyViewLink(viewDir, name, rosterRealpaths);
     if (c === null || c.kind !== "repo") {
       failed.push({
@@ -7628,10 +7671,10 @@ async function runProjectPreset(options, ctx = {}) {
   }
 }
 function canonicalFileFor(anchorReal, canonicalName) {
-  return join12(anchorReal, "agents", canonicalName, CANONICAL_FILE);
+  return join11(anchorReal, "agents", canonicalName, CANONICAL_FILE);
 }
 function canonicalLabelFor(canonicalName) {
-  return join12("agents", canonicalName, CANONICAL_FILE);
+  return join11("agents", canonicalName, CANONICAL_FILE);
 }
 async function gatherRepoPreset(repositoryRoot, anchorReal, entry) {
   const declared = {
@@ -7652,7 +7695,7 @@ async function gatherRepoPreset(repositoryRoot, anchorReal, entry) {
   if (real === anchorReal) {
     return { ...declared, isAnchor: true, reachable: true, canonicalPresent: false };
   }
-  if (!existsSync(join12(real, ".git"))) {
+  if (!existsSync(join11(real, ".git"))) {
     return { ...declared, isAnchor: false, reachable: false, canonicalPresent: false };
   }
   const canonicalName = basename7(real);
@@ -8034,24 +8077,24 @@ function gatherArchiveTeardown(repositoryRoot, manifest, target) {
   const instructionFiles = [];
   for (const name of INSTRUCTION_FILES) {
     try {
-      lstatSync(join12(real, name));
+      lstatSync(join11(real, name));
       instructionFiles.push(name);
     } catch {
     }
   }
   let ignored;
   try {
-    ignored = new Set(readGitignoreLines(join12(real, ".gitignore")).map((l) => l.trim()));
+    ignored = new Set(readGitignoreLines(join11(real, ".gitignore")).map((l) => l.trim()));
   } catch {
     ignored = /* @__PURE__ */ new Set();
   }
   const gitignorePatterns = INSTRUCTION_FILES.filter((p) => ignored.has(p) || ignored.has(`/${p}`));
-  const canonical2 = existsSync(join12(anchorReal, "agents", canonicalName, CANONICAL_FILE));
+  const canonical2 = existsSync(join11(anchorReal, "agents", canonicalName, CANONICAL_FILE));
   let viewLink = false;
   const viewPath = manifest.workspace.view;
   if (viewPath !== void 0) {
     try {
-      lstatSync(join12(resolveViewDir(repositoryRoot, viewPath), canonicalName));
+      lstatSync(join11(resolveViewDir(repositoryRoot, viewPath), canonicalName));
       viewLink = true;
     } catch {
     }
@@ -8065,11 +8108,11 @@ function gatherArchiveTeardown(repositoryRoot, manifest, target) {
   };
 }
 function teardownExpectedTargets(repoReal, anchorReal, canonicalName) {
-  const canonicalFile = join12(anchorReal, "agents", canonicalName, CANONICAL_FILE);
+  const canonicalFile = join11(anchorReal, "agents", canonicalName, CANONICAL_FILE);
   return expectedSymlinkTargets(repoReal, canonicalFile);
 }
 function viewLinkPointsAt(viewDir, name, repoReal) {
-  const filePath = join12(viewDir, name);
+  const filePath = join11(viewDir, name);
   try {
     if (!lstatSync(filePath).isSymbolicLink()) return false;
     const target = readlinkSync(filePath);
@@ -8080,7 +8123,7 @@ function viewLinkPointsAt(viewDir, name, repoReal) {
   }
 }
 function viewLinkPointsAtPath(viewDir, name, expectedRepoPath) {
-  const filePath = join12(viewDir, name);
+  const filePath = join11(viewDir, name);
   try {
     if (!lstatSync(filePath).isSymbolicLink()) return false;
     const target = readlinkSync(filePath);
@@ -8131,7 +8174,7 @@ function gatherRepoTeardown(repositoryRoot, manifest, target) {
   if (!isAnchor) {
     if (repoReal !== void 0) {
       for (const spec of teardownExpectedTargets(repoReal, anchorReal, canonicalName)) {
-        const { state, actualTarget } = inspectSymlink(join12(repoReal, spec.name), spec.target);
+        const { state, actualTarget } = inspectSymlink(join11(repoReal, spec.name), spec.target);
         if (isSelf) {
           if (state !== "missing")
             items.push({
@@ -8168,7 +8211,7 @@ function gatherRepoTeardown(repositoryRoot, manifest, target) {
       }
       let ignored;
       try {
-        ignored = new Set(readGitignoreLines(join12(repoReal, ".gitignore")).map((l) => l.trim()));
+        ignored = new Set(readGitignoreLines(join11(repoReal, ".gitignore")).map((l) => l.trim()));
         for (const p of INSTRUCTION_FILES) {
           if (ignored.has(p) || ignored.has(`/${p}`)) {
             items.push({
@@ -8191,7 +8234,7 @@ function gatherRepoTeardown(repositoryRoot, manifest, target) {
     const viewPath = manifest.workspace.view;
     if (viewPath !== void 0) {
       const viewDir = resolveViewDir(repositoryRoot, viewPath);
-      const linkPath = join12(viewDir, canonicalName);
+      const linkPath = join11(viewDir, canonicalName);
       let isLink = false;
       try {
         isLink = lstatSync(linkPath).isSymbolicLink();
@@ -8217,8 +8260,8 @@ function gatherRepoTeardown(repositoryRoot, manifest, target) {
         else items.push({ kind: "view-symlink", label: canonicalName, state: "removable" });
       }
     }
-    const canonicalFile = join12(anchorReal, "agents", canonicalName, CANONICAL_FILE);
-    const canonicalLabel = join12("agents", canonicalName, CANONICAL_FILE);
+    const canonicalFile = join11(anchorReal, "agents", canonicalName, CANONICAL_FILE);
+    const canonicalLabel = join11("agents", canonicalName, CANONICAL_FILE);
     let canonicalIsLink = false;
     try {
       canonicalIsLink = lstatSync(canonicalFile).isSymbolicLink();
@@ -8322,12 +8365,12 @@ function applyRepoTeardown(repositoryRoot, manifest, plan) {
   );
   for (const item of removable.filter((i) => i.kind === "instruction-symlink")) {
     const expected = expectedByName.get(item.label);
-    if (repoReal === null || expected === void 0 || inspectSymlink(join12(repoReal, item.label), expected).state !== "correct") {
+    if (repoReal === null || expected === void 0 || inspectSymlink(join11(repoReal, item.label), expected).state !== "correct") {
       changed(item.label);
       continue;
     }
     try {
-      unlinkSync(join12(repoReal, item.label));
+      unlinkSync(join11(repoReal, item.label));
       removed.push(item.label);
     } catch (error) {
       failed.push({ label: item.label, message: failureReason(error) });
@@ -8346,7 +8389,7 @@ function applyRepoTeardown(repositoryRoot, manifest, plan) {
       continue;
     }
     try {
-      unlinkSync(join12(viewDir, item.label));
+      unlinkSync(join11(viewDir, item.label));
       removed.push(`view/${item.label}`);
     } catch (error) {
       failed.push({ label: `view/${item.label}`, message: failureReason(error) });
@@ -8354,7 +8397,7 @@ function applyRepoTeardown(repositoryRoot, manifest, plan) {
   }
   const NOFOLLOW = fsConstants.O_NOFOLLOW ?? 0;
   for (const item of removable.filter((i) => i.kind === "canonical-block")) {
-    const canonicalFile = join12(anchorReal, "agents", canonicalName, CANONICAL_FILE);
+    const canonicalFile = join11(anchorReal, "agents", canonicalName, CANONICAL_FILE);
     try {
       if (lstatSync(canonicalFile).isSymbolicLink()) {
         changed(item.label);
@@ -8628,12 +8671,12 @@ function gatherRenameWiring(repositoryRoot, manifest, oldBasename) {
   } catch {
     return { canonicalDirOld: false, viewLinkOld: false };
   }
-  const canonicalDirOld = existsSync(join12(anchorReal, "agents", oldBasename));
+  const canonicalDirOld = existsSync(join11(anchorReal, "agents", oldBasename));
   let viewLinkOld = false;
   const viewPath = manifest.workspace.view;
   if (viewPath !== void 0) {
     try {
-      lstatSync(join12(resolveViewDir(repositoryRoot, viewPath), oldBasename));
+      lstatSync(join11(resolveViewDir(repositoryRoot, viewPath), oldBasename));
       viewLinkOld = true;
     } catch {
     }
@@ -8978,7 +9021,7 @@ async function doRunProjectSeedAnchor(options, ctx) {
     console.log("\u2139\uFE0F No repo roster declared \u2014 nothing to seed.");
     return;
   }
-  const anchorDoc = join12(repositoryRoot, CANONICAL_FILE);
+  const anchorDoc = join11(repositoryRoot, CANONICAL_FILE);
   if (pathPresent(anchorDoc)) {
     console.log(
       `\u2705 The anchor's own \`${CANONICAL_FILE}\` already exists \u2014 hand-maintained, left untouched.`
@@ -9040,7 +9083,7 @@ function regularFileSpokes(repoReal) {
   const out = [];
   for (const spoke of ["CLAUDE.md", ".github/copilot-instructions.md"]) {
     try {
-      const st = lstatSync(join12(repoReal, spoke));
+      const st = lstatSync(join11(repoReal, spoke));
       if (!st.isSymbolicLink() && st.isFile()) out.push(spoke);
     } catch {
     }
@@ -9086,8 +9129,8 @@ function gatherRetrofit(repositoryRoot, anchorReal, roster, argAbs, argReal, vie
     };
   }
   const isAnchor = argReal === anchorReal;
-  const reachable = existsSync(join12(argReal, ".git"));
-  const canonicalFile = join12(anchorReal, "agents", canonicalName, CANONICAL_FILE);
+  const reachable = existsSync(join11(argReal, ".git"));
+  const canonicalFile = join11(anchorReal, "agents", canonicalName, CANONICAL_FILE);
   return {
     path,
     declared,
@@ -9096,13 +9139,13 @@ function gatherRetrofit(repositoryRoot, anchorReal, roster, argAbs, argReal, vie
     reachable,
     canonicalName,
     ...viewCanonicalName !== void 0 ? { viewCanonicalName } : {},
-    agentsState: inspectAgentsState(join12(argReal, CANONICAL_FILE)),
+    agentsState: inspectAgentsState(join11(argReal, CANONICAL_FILE)),
     canonicalExists: pathPresent(canonicalFile),
     regularSpokes: regularFileSpokes(argReal)
   };
 }
 function relocateAgentsFile(repoReal, canonicalFile) {
-  const agentsFile = join12(repoReal, CANONICAL_FILE);
+  const agentsFile = join11(repoReal, CANONICAL_FILE);
   try {
     mkdirSync(dirname7(canonicalFile), { recursive: true });
   } catch (error) {
@@ -9218,7 +9261,7 @@ async function doRunProjectRetrofit(repo, options, ctx) {
   let failure;
   let partial = false;
   if (options.apply === true && plan.action === "relocate" && argReal !== void 0) {
-    const canonicalFile = join12(anchorReal, "agents", plan.canonicalName, CANONICAL_FILE);
+    const canonicalFile = join11(anchorReal, "agents", plan.canonicalName, CANONICAL_FILE);
     const res = relocateAgentsFile(argReal, canonicalFile);
     if (res.ok) {
       applied = true;
@@ -9418,7 +9461,7 @@ function renderProjectRetrofit(result) {
 }
 
 // src/commands/protocol.ts
-import { readFile as readFile6, stat as stat5 } from "fs/promises";
+import { readFile as readFile5, stat as stat5 } from "fs/promises";
 import {
   carryForwardProtocolStamp,
   PROTOCOL_END as PROTOCOL_END2,
@@ -9475,7 +9518,7 @@ async function readProtocolSources(entries) {
   for (const entry of entries) {
     let content;
     try {
-      content = await readFile6(entry.source, "utf8");
+      content = await readFile5(entry.source, "utf8");
     } catch (error) {
       if (error instanceof Error && error.code === "ENOENT") {
         throw new Error(
@@ -9601,7 +9644,7 @@ async function doRunProtocolUnsync(options) {
 import {
   assertBasouRootSafe as assertBasouRootSafe10,
   basouPaths as basouPaths14,
-  findErrorCode as findErrorCode10,
+  findErrorCode as findErrorCode11,
   loadPortfolioConfig as loadPortfolioConfig5,
   readManifest as readManifest10
 } from "@basou/core";
@@ -9610,20 +9653,20 @@ import { InvalidArgumentError as InvalidArgumentError4 } from "commander";
 // src/commands/refresh-watch.ts
 import { readdir as readdir3, stat as stat6 } from "fs/promises";
 import { homedir as homedir9 } from "os";
-import { join as join13 } from "path";
+import { join as join12 } from "path";
 import {
   assertApprovalStoreSafe as assertApprovalStoreSafe2,
   assertLockStoreSafe as assertLockStoreSafe4,
   assertTaskStoreSafe as assertTaskStoreSafe2,
-  findErrorCode as findErrorCode9
+  findErrorCode as findErrorCode10
 } from "@basou/core";
 var DEFAULT_WATCH_INTERVAL_SEC = 30;
 var MIN_WATCH_INTERVAL_SEC = 5;
 var MAX_WATCH_INTERVAL_SEC = 86400;
 function watchedRoots(ctx) {
   return [
-    ctx.codexSessionsDir ?? join13(homedir9(), ".codex", "sessions"),
-    ctx.claudeProjectsDir ?? join13(homedir9(), ".claude", "projects")
+    ctx.codexSessionsDir ?? join12(homedir9(), ".codex", "sessions"),
+    ctx.claudeProjectsDir ?? join12(homedir9(), ".claude", "projects")
   ];
 }
 async function scanSourceLogs(roots) {
@@ -9633,11 +9676,11 @@ async function scanSourceLogs(roots) {
     try {
       entries = await readdir3(dir, { withFileTypes: true });
     } catch (error) {
-      if (findErrorCode9(error, "ENOENT") || findErrorCode9(error, "ENOTDIR")) return;
+      if (findErrorCode10(error, "ENOENT") || findErrorCode10(error, "ENOTDIR")) return;
       throw new Error("Failed to read a source log directory", { cause: error });
     }
     for (const entry of entries) {
-      const full = join13(dir, entry.name);
+      const full = join12(dir, entry.name);
       if (entry.isDirectory()) {
         await walk(full);
       } else if (entry.isFile() && entry.name.endsWith(".jsonl")) {
@@ -9645,7 +9688,7 @@ async function scanSourceLogs(roots) {
           const info = await stat6(full);
           out.set(full, { mtimeMs: info.mtimeMs, size: info.size });
         } catch (error) {
-          if (findErrorCode9(error, "ENOENT")) continue;
+          if (findErrorCode10(error, "ENOENT")) continue;
           throw new Error("Failed to stat a source log file", { cause: error });
         }
       }
@@ -9979,7 +10022,7 @@ async function assertWorkspaceInitialized9(basouRoot) {
   try {
     await assertBasouRootSafe10(basouRoot);
   } catch (error) {
-    if (findErrorCode10(error, "ENOENT")) {
+    if (findErrorCode11(error, "ENOENT")) {
       throw new Error("Workspace not initialized. Run 'basou init' first.");
     }
     throw error;
@@ -9991,7 +10034,7 @@ import { isAbsolute as isAbsolute4, resolve as resolve10 } from "path";
 import {
   assertBasouRootSafe as assertBasouRootSafe11,
   basouPaths as basouPaths15,
-  findErrorCode as findErrorCode11,
+  findErrorCode as findErrorCode12,
   renderReport,
   writeMarkdownFile as writeMarkdownFile6
 } from "@basou/core";
@@ -10043,7 +10086,7 @@ async function assertWorkspaceInitialized10(basouRoot) {
   try {
     await assertBasouRootSafe11(basouRoot);
   } catch (error) {
-    if (findErrorCode11(error, "ENOENT")) {
+    if (findErrorCode12(error, "ENOENT")) {
       throw new Error("Workspace not initialized. Run 'basou init' first.");
     }
     throw error;
@@ -10051,7 +10094,6 @@ async function assertWorkspaceInitialized10(basouRoot) {
 }
 
 // src/commands/review.ts
-import { readFile as readFile7 } from "fs/promises";
 import { homedir as homedir10 } from "os";
 import { resolve as resolve11 } from "path";
 import {
@@ -10060,7 +10102,7 @@ import {
   buildReviewRecordedEvent,
   buildReviewRecordLabel,
   createAdHocSessionWithEvent as createAdHocSessionWithEvent3,
-  findErrorCode as findErrorCode12,
+  findErrorCode as findErrorCode13,
   findUnbindableRepos,
   parseReviewRecordInput,
   readManifest as readManifest11,
@@ -10136,6 +10178,7 @@ async function runReviewRecord(options, ctx = {}) {
   }
 }
 async function doRunReviewRecord(options, ctx) {
+  refuseDashInputFile("--file", options.file, "stdin");
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveBasouRootForCommand(cwd, "review record");
   const paths = basouPaths16(repositoryRoot);
@@ -10194,14 +10237,7 @@ ${detail}
 }
 async function readReviewInput(options, ctx) {
   if (options.file !== void 0) {
-    try {
-      return await readFile7(options.file, "utf8");
-    } catch (error) {
-      if (findErrorCode12(error, "ENOENT")) {
-        throw new Error(`Input file not found: ${options.file}`);
-      }
-      throw error;
-    }
+    return await readInputFileText("--file", options.file);
   }
   if (ctx.readInput !== void 0) {
     return await ctx.readInput();
@@ -10276,7 +10312,7 @@ async function assertWorkspaceInitialized11(basouRoot) {
   try {
     await assertBasouRootSafe12(basouRoot);
   } catch (error) {
-    if (findErrorCode12(error, "ENOENT")) {
+    if (findErrorCode13(error, "ENOENT")) {
       throw new Error("Workspace not initialized. Run 'basou init' first.");
     }
     throw error;
@@ -10488,9 +10524,9 @@ function unattachedLines(u) {
 }
 
 // src/commands/run.ts
-import { mkdir as mkdir3, readFile as readFile8, rm as rm3 } from "fs/promises";
+import { mkdir as mkdir3, readFile as readFile6, rm as rm3 } from "fs/promises";
 import { homedir as homedir11 } from "os";
-import { join as join14 } from "path";
+import { join as join13 } from "path";
 import {
   acquireLock as acquireLock5,
   assertBasouRootSafe as assertBasouRootSafe13,
@@ -10505,6 +10541,7 @@ import {
   findBasouSessionStartHook as findBasouSessionStartHook2,
   getDiff,
   getSnapshot as getSnapshot2,
+  lstatSessionFile as lstatSessionFile2,
   overwriteYamlFile as overwriteYamlFile2,
   prefixedUlid as prefixedUlid4,
   readManifest as readManifest12,
@@ -10512,6 +10549,7 @@ import {
   resolveClaudeCodeCommand,
   resolveCodexCommand,
   SESSION_SCHEMA_VERSION as SESSION_SCHEMA_VERSION2,
+  SessionFileNotAFileError as SessionFileNotAFileError4,
   SessionSchema as SessionSchema2,
   sanitizeRelatedFiles,
   sanitizeWorkingDirectory as sanitizeWorkingDirectory2,
@@ -10571,12 +10609,12 @@ async function runTrackedTool(args, options, ctx, adapter) {
   const manifest = await readManifest12(paths);
   await assertSessionStoreSafe3(paths);
   const sessionId = prefixedUlid4("ses");
-  const sessionDir = join14(paths.sessions, sessionId);
+  const sessionDir = join13(paths.sessions, sessionId);
   const appendEvent = ctx.appendEvent ?? (async (_sessionDir, event) => {
     await coreAppendChainedEvent2(paths, sessionId, event);
   });
   const startedAt = now().toISOString();
-  const sessionYamlPath = join14(sessionDir, "session.yaml");
+  const sessionYamlPath = join13(sessionDir, "session.yaml");
   const session = buildInitialSession2({
     id: sessionId,
     command,
@@ -10627,7 +10665,7 @@ async function runTrackedTool(args, options, ctx, adapter) {
   });
   const runningLock = await acquireLock5(paths, "session", sessionId);
   try {
-    await mutateSessionYaml2(sessionYamlPath, (s) => {
+    await mutateSessionYaml2(paths, sessionId, (s) => {
       s.session.status = "running";
     });
   } finally {
@@ -10759,7 +10797,7 @@ async function runTrackedTool(args, options, ctx, adapter) {
     s.session.related_files = relatedFiles;
   });
   if (result.exit_code !== null) return result.exit_code;
-  return signalToExitCode2(signalReceived ?? result.signal);
+  return signalToExitCode(signalReceived ?? result.signal);
 }
 function decideFinalStatus2(result, signalReceived) {
   if (signalReceived === "SIGINT" || signalReceived === "SIGTERM") return "interrupted";
@@ -10769,18 +10807,6 @@ function decideFinalStatus2(result, signalReceived) {
   if (result.exit_code === 0) return "completed";
   return "failed";
 }
-var SIGNUM_MAP2 = {
-  SIGHUP: 1,
-  SIGINT: 2,
-  SIGQUIT: 3,
-  SIGKILL: 9,
-  SIGTERM: 15
-};
-function signalToExitCode2(sig) {
-  if (sig === null) return 1;
-  const num = SIGNUM_MAP2[sig] ?? 1;
-  return 128 + num;
-}
 async function tryAppendGitSnapshot2(sessionDir, sessionId, repoRoot, now, appendEvent) {
   let snapshot;
   try {
@@ -10885,7 +10911,14 @@ function buildInitialSession2(input) {
     }
   };
 }
-async function mutateSessionYaml2(filePath, mutator) {
+async function mutateSessionYaml2(paths, sessionId, mutator) {
+  const kind = await lstatSessionFile2(paths, sessionId, "session.yaml").catch((error) => {
+    throw new Error("Failed to read YAML file", { cause: error });
+  });
+  if (kind === "symlink" || kind === "not_a_file") {
+    throw new SessionFileNotAFileError4(sessionId, "session.yaml", kind);
+  }
+  const filePath = join13(paths.sessions, sessionId, "session.yaml");
   const raw = await readYamlFile5(filePath);
   const parsed = SessionSchema2.parse(raw);
   mutator(parsed);
@@ -10938,7 +10971,7 @@ async function noteCodexHookStatusPreSpawn(_cwd, ctx) {
   const hooksPath = ctx.codexHooksPath ?? DEFAULT_CODEX_HOOKS_PATH;
   let location;
   try {
-    location = findBasouSessionStartHook2(JSON.parse(await readFile8(hooksPath, "utf8")));
+    location = findBasouSessionStartHook2(JSON.parse(await readFile6(hooksPath, "utf8")));
   } catch (error) {
     if (!(error instanceof Error && error.code === "ENOENT")) return null;
     location = null;
@@ -10952,8 +10985,8 @@ async function noteCodexHookStatusPreSpawn(_cwd, ctx) {
 }
 
 // src/commands/session.ts
-import { readFile as readFile9 } from "fs/promises";
-import { basename as basename8, isAbsolute as isAbsolute5, join as join15, relative as relative4, sep as sep3 } from "path";
+import { readFile as readFile7 } from "fs/promises";
+import { basename as basename8, isAbsolute as isAbsolute5, join as join14, relative as relative4, sep as sep3 } from "path";
 import {
   acquireLock as acquireLock6,
   appendEventToExistingSession as appendEventToExistingSession3,
@@ -10963,10 +10996,11 @@ import {
   displayPath as displayPath5,
   EVENT_SCHEMA_VERSION as EVENT_SCHEMA_VERSION6,
   enumerateSessionEntries as enumerateSessionEntries2,
-  findErrorCode as findErrorCode13,
+  findErrorCode as findErrorCode14,
   importSessionFromJson as importSessionFromJson2,
   LOCAL_CLI_EVENT_SOURCE as LOCAL_CLI_EVENT_SOURCE4,
   loadSessionEntries as loadSessionEntries2,
+  lstatSessionFile as lstatSessionFile3,
   normalizeSessionTimestamps,
   readAllEvents,
   readManifest as readManifest13,
@@ -10976,6 +11010,7 @@ import {
   resolveSessionId as resolveSessionId3,
   resolveTaskId,
   SESSION_IMPORT_SCHEMA_VERSION as SESSION_IMPORT_SCHEMA_VERSION2,
+  SessionFileNotAFileError as SessionFileNotAFileError5,
   SessionImportPayloadSchema as SessionImportPayloadSchema2,
   SessionSchema as SessionSchema3,
   SessionStatusSchema,
@@ -11085,20 +11120,28 @@ async function doRunSessionShow(idInput, options, ctx) {
   const paths = basouPaths19(repositoryRoot);
   await assertWorkspaceInitialized12(paths.root);
   const sessionId = await resolveSessionId3(paths, idInput);
-  const sessionDir = join15(paths.sessions, sessionId);
-  const sessionYamlPath = join15(sessionDir, "session.yaml");
+  const sessionDir = join14(paths.sessions, sessionId);
+  const sessionYamlPath = join14(sessionDir, "session.yaml");
+  const yamlKind = await lstatSessionFile3(paths, sessionId, "session.yaml").catch(
+    (error) => {
+      throw new Error("Failed to read session", { cause: error });
+    }
+  );
+  if (yamlKind === "symlink" || yamlKind === "not_a_file") {
+    throw new SessionFileNotAFileError5(sessionId, "session.yaml", yamlKind);
+  }
   let session;
   try {
     const raw = await readYamlFile6(sessionYamlPath);
     session = SessionSchema3.parse(normalizeSessionTimestamps(raw));
   } catch (error) {
-    if (findErrorCode13(error, "ENOENT")) {
+    if (findErrorCode14(error, "ENOENT")) {
       throw new Error(`Session not found: ${idInput}`);
     }
     throw new Error("Failed to read session", { cause: error });
   }
   let eventsLostLines = 0;
-  const events = await readAllEvents(sessionDir, {
+  const events = await readAllEvents(paths, sessionId, {
     onWarning: (w) => {
       if (w.kind === "malformed_json" || w.kind === "schema_violation") eventsLostLines++;
       printReplayWarning(w, sessionId);
@@ -11356,7 +11399,7 @@ async function assertWorkspaceInitialized12(basouRoot) {
   try {
     await assertBasouRootSafe14(basouRoot);
   } catch (error) {
-    if (findErrorCode13(error, "ENOENT")) {
+    if (findErrorCode14(error, "ENOENT")) {
       throw new Error("Workspace not initialized. Run 'basou init' first.");
     }
     throw error;
@@ -11392,6 +11435,7 @@ async function runSessionImport(options, ctx = {}) {
   }
 }
 async function doRunSessionImport(options, ctx) {
+  refuseDashInputFile("--from", options.from, { fileOnly: "the JSON" });
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForSession(cwd, "import");
   const paths = basouPaths19(repositoryRoot);
@@ -11425,12 +11469,12 @@ async function doRunSessionImport(options, ctx) {
 }
 async function readInputFile(path) {
   try {
-    return await readFile9(path, "utf8");
+    return await readFile7(path, "utf8");
   } catch (error) {
-    if (findErrorCode13(error, "ENOENT")) {
+    if (findErrorCode14(error, "ENOENT")) {
       throw new Error("Import source not found", { cause: error });
     }
-    if (findErrorCode13(error, "EISDIR")) {
+    if (findErrorCode14(error, "EISDIR")) {
       throw new Error("Import source is not a file", { cause: error });
     }
     throw new Error("Failed to read import source", { cause: error });
@@ -11505,9 +11549,7 @@ async function doRunSessionNote(sessionIdInput, options, ctx) {
   if (hasBody && hasFromFile) {
     throw new Error("--body and --from-file are mutually exclusive");
   }
-  if (hasFromFile && options.fromFile === "-") {
-    throw new Error("--from-file - (stdin) is not supported in v0.1");
-  }
+  refuseDashInputFile("--from-file", options.fromFile, { textFlag: "--body" });
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForSession(cwd, "note");
   const paths = basouPaths19(repositoryRoot);
@@ -11542,12 +11584,12 @@ async function doRunSessionNote(sessionIdInput, options, ctx) {
 }
 async function readNoteFile(path) {
   try {
-    return await readFile9(path, "utf8");
+    return await readFile7(path, "utf8");
   } catch (error) {
-    if (findErrorCode13(error, "ENOENT")) {
+    if (findErrorCode14(error, "ENOENT")) {
       throw new Error("Note source not found", { cause: error });
     }
-    if (findErrorCode13(error, "EISDIR")) {
+    if (findErrorCode14(error, "EISDIR")) {
       throw new Error("Note source is not a file", { cause: error });
     }
     throw new Error("Failed to read note source", { cause: error });
@@ -11617,7 +11659,7 @@ async function doRunSessionRechain(options, ctx) {
     }
   }
   const tamperedCount = rows.filter(
-    (r) => r.reason === "tampered" || r.reason === "symlink" || r.reason === "not_a_directory"
+    (r) => r.reason === "tampered" || r.reason === "symlink" || r.reason === "not_a_directory" || r.reason === "events_not_a_file" || r.reason === "yaml_not_a_file"
   ).length;
   const errorCount = rows.filter((r) => r.status === "error").length;
   if (options.json === true) {
@@ -11645,6 +11687,10 @@ function renderRechainRow(row, dryRun) {
       if (row.reason === "symlink" || row.reason === "not_a_directory") {
         return `skipped (${row.reason === "symlink" ? "SYMLINK" : "NOT A DIRECTORY"} \u2014 not followed; inspect with 'basou verify')`;
       }
+      if (row.reason === "events_not_a_file" || row.reason === "yaml_not_a_file") {
+        const file = row.reason === "events_not_a_file" ? "events.jsonl" : "session.yaml";
+        return `skipped (${file} NOT A REGULAR FILE \u2014 not followed; inspect with 'basou verify')`;
+      }
       return `skipped (${row.reason})`;
     case "error":
       return `error (${row.message})`;
@@ -11660,7 +11706,7 @@ import {
   assertBasouRootSafe as assertBasouRootSafe15,
   basouPaths as basouPaths20,
   computeWorkStats,
-  findErrorCode as findErrorCode14
+  findErrorCode as findErrorCode15
 } from "@basou/core";
 function registerStatsCommand(program) {
   program.command("stats").description("Report how much the AI worked (output volume + time proxies) across sessions").option("--by-source", "Break the totals down by session source kind").option("--by-day", "Break billable time and volume down by calendar day").option("--json", "Output the full stats as JSON").option("-v, --verbose", "Show error causes").action(async (options) => {
@@ -11769,7 +11815,7 @@ async function assertWorkspaceInitialized13(basouRoot) {
   try {
     await assertBasouRootSafe15(basouRoot);
   } catch (error) {
-    if (findErrorCode14(error, "ENOENT")) {
+    if (findErrorCode15(error, "ENOENT")) {
       throw new Error("Workspace not initialized. Run 'basou init' first.");
     }
     throw error;
@@ -11781,7 +11827,7 @@ import {
   assertBasouRootSafe as assertBasouRootSafe16,
   basouPaths as basouPaths21,
   buildStatusSnapshot,
-  findErrorCode as findErrorCode15,
+  findErrorCode as findErrorCode16,
   readManifest as readManifest14,
   writeStatus
 } from "@basou/core";
@@ -11805,7 +11851,7 @@ async function doRunStatus(options, ctx) {
   try {
     await assertBasouRootSafe16(paths.root);
   } catch (error) {
-    if (findErrorCode15(error, "ENOENT")) {
+    if (findErrorCode16(error, "ENOENT")) {
       throw new Error("Workspace not initialized. Run 'basou init' first.");
     }
     throw error;
@@ -11814,7 +11860,7 @@ async function doRunStatus(options, ctx) {
   try {
     manifest = await readManifest14(paths);
   } catch (error) {
-    if (findErrorCode15(error, "ENOENT")) {
+    if (findErrorCode16(error, "ENOENT")) {
       throw new Error("Workspace not initialized. Run 'basou init' first.");
     }
     const gateMessage = formatVersionGateMessage(error);
@@ -11852,8 +11898,7 @@ function formatVersionGateMessage(error) {
 }
 
 // src/commands/task.ts
-import { readFile as readFile10 } from "fs/promises";
-import { join as join16 } from "path";
+import { readFile as readFile8 } from "fs/promises";
 import {
   archiveTask,
   assertBasouRootSafe as assertBasouRootSafe17,
@@ -11863,7 +11908,7 @@ import {
   deleteTask,
   editTask,
   enumerateArchivedTaskIds,
-  findErrorCode as findErrorCode16,
+  findErrorCode as findErrorCode17,
   loadSessionEntries as loadSessionEntries3,
   loadTaskEntries,
   prefixedUlid as prefixedUlid5,
@@ -11950,9 +11995,7 @@ async function doRunTaskNew(options, ctx) {
   if (options.description !== void 0 && options.fromFile !== void 0) {
     throw new Error("--description and --from-file are mutually exclusive");
   }
-  if (options.fromFile === "-") {
-    throw new Error("--from-file - (stdin) is not supported in v0.1");
-  }
+  refuseDashInputFile("--from-file", options.fromFile, { textFlag: "--description" });
   const initialStatus = options.status ?? "planned";
   if (options.completedAt !== void 0 && !isTerminalStatusForCli(initialStatus)) {
     throw new Error("--completed-at requires --status done or cancelled");
@@ -12180,9 +12223,8 @@ async function doRunTaskShow(idInput, options, ctx) {
   const events = [];
   const linkedSessionIds = new Set(doc.task.task.linked_sessions);
   for (const s of sessions) {
-    const sessionDir = join16(paths.sessions, s.sessionId);
     try {
-      for await (const ev of replayEvents3(sessionDir, {
+      for await (const ev of replayEvents3(paths, s.sessionId, {
         onWarning: (w) => printReplayWarning(w, s.sessionId)
       })) {
         if ((ev.type === "task_created" || ev.type === "task_status_changed" || ev.type === "task_reconciled" || ev.type === "task_linkage_refreshed" || ev.type === "task_deleted" || ev.type === "task_archived") && ev.task_id === taskId) {
@@ -12869,12 +12911,12 @@ function parsePositiveInt2(raw) {
 }
 async function readDescriptionFile(path) {
   try {
-    return await readFile10(path, "utf8");
+    return await readFile8(path, "utf8");
   } catch (error) {
-    if (findErrorCode16(error, "ENOENT")) {
+    if (findErrorCode17(error, "ENOENT")) {
       throw new Error("Description source not found", { cause: error });
     }
-    if (findErrorCode16(error, "EISDIR")) {
+    if (findErrorCode17(error, "EISDIR")) {
       throw new Error("Description source is not a file", { cause: error });
     }
     throw new Error("Failed to read description source", { cause: error });
@@ -12887,7 +12929,7 @@ async function assertWorkspaceInitialized14(basouRoot) {
   try {
     await assertBasouRootSafe17(basouRoot);
   } catch (error) {
-    if (findErrorCode16(error, "ENOENT")) {
+    if (findErrorCode17(error, "ENOENT")) {
       throw new Error("Workspace not initialized. Run 'basou init' first.");
     }
     throw error;
@@ -12978,7 +13020,7 @@ import {
   assertBasouRootSafe as assertBasouRootSafe18,
   basouPaths as basouPaths23,
   enumerateSessionEntries as enumerateSessionEntries3,
-  findErrorCode as findErrorCode17,
+  findErrorCode as findErrorCode18,
   resolveSessionId as resolveSessionId5,
   verifyEventsChain
 } from "@basou/core";
@@ -13065,7 +13107,7 @@ async function assertWorkspaceInitialized15(basouRoot) {
   try {
     await assertBasouRootSafe18(basouRoot);
   } catch (error) {
-    if (findErrorCode17(error, "ENOENT")) {
+    if (findErrorCode18(error, "ENOENT")) {
       throw new Error("Workspace not initialized. Run 'basou init' first.");
     }
     throw error;
@@ -13075,11 +13117,11 @@ async function assertWorkspaceInitialized15(basouRoot) {
 // src/commands/view.ts
 import { spawn } from "child_process";
 import { createHash as createHash2 } from "crypto";
-import { basename as basename11, dirname as dirname9, join as join20, resolve as resolve14 } from "path";
+import { basename as basename11, dirname as dirname9, join as join17, resolve as resolve14 } from "path";
 import {
   assertBasouRootSafe as assertBasouRootSafe19,
   basouPaths as basouPaths25,
-  findErrorCode as findErrorCode19,
+  findErrorCode as findErrorCode20,
   loadPortfolioConfig as loadPortfolioConfig6,
   readManifest as readManifest19
 } from "@basou/core";
@@ -13089,7 +13131,7 @@ import { InvalidArgumentError as InvalidArgumentError8 } from "commander";
 import { createReadStream as createReadStream2 } from "fs";
 import { readdir as readdir4, stat as stat7 } from "fs/promises";
 import { homedir as homedir12 } from "os";
-import { basename as basename9, dirname as dirname8, join as join17 } from "path";
+import { basename as basename9, dirname as dirname8, join as join15 } from "path";
 import { createInterface as createInterface2 } from "readline";
 import { basouPaths as basouPaths24, readManifest as readManifest16 } from "@basou/core";
 function uncapturedTotal(result) {
@@ -13101,8 +13143,8 @@ async function checkPortfolioCoverage(workspaces, ctx = {}) {
     ctx.portfolioConfigPath
   );
   const listedDirs = new Set([...roots].map((root) => encodeProjectDir(root)));
-  const claudeProjectsDir = ctx.claudeProjectsDir ?? join17(homedir12(), ".claude", "projects");
-  const codexSessionsDir = ctx.codexSessionsDir ?? join17(homedir12(), ".codex", "sessions");
+  const claudeProjectsDir = ctx.claudeProjectsDir ?? join15(homedir12(), ".claude", "projects");
+  const codexSessionsDir = ctx.codexSessionsDir ?? join15(homedir12(), ".codex", "sessions");
   const tally = new Tally(roots);
   const absentTrees = [];
   const claudeFiles = await listClaudeTranscripts(claudeProjectsDir);
@@ -13240,7 +13282,7 @@ async function isDirEntry(parent, entry) {
   if (entry.isDirectory()) return true;
   if (!entry.isSymbolicLink()) return false;
   try {
-    return (await stat7(join17(parent, entry.name))).isDirectory();
+    return (await stat7(join15(parent, entry.name))).isDirectory();
   } catch {
     return false;
   }
@@ -13255,7 +13297,7 @@ async function listClaudeTranscripts(projectsRoot) {
   const files = [];
   for (const entry of entries) {
     if (!await isDirEntry(projectsRoot, entry)) continue;
-    const full = join17(projectsRoot, entry.name);
+    const full = join15(projectsRoot, entry.name);
     let names;
     try {
       names = await readdir4(full);
@@ -13263,7 +13305,7 @@ async function listClaudeTranscripts(projectsRoot) {
       continue;
     }
     for (const name of names) {
-      if (name.endsWith(".jsonl")) files.push(join17(full, name));
+      if (name.endsWith(".jsonl")) files.push(join15(full, name));
     }
   }
   return files.sort();
@@ -13278,7 +13320,7 @@ async function listCodexRollouts(sessionsRoot) {
       return;
     }
     for (const entry of entries) {
-      const full = join17(dir, entry.name);
+      const full = join15(dir, entry.name);
       if (entry.isDirectory()) await walk(full);
       else if (entry.isFile() && entry.name.startsWith("rollout-") && entry.name.endsWith(".jsonl")) {
         found.push(full);
@@ -13409,7 +13451,7 @@ function inertLines(result) {
 // src/lib/portfolio-safety.ts
 import { execFile as execFile2 } from "child_process";
 import { lstat as lstat3, realpath as realpath5 } from "fs/promises";
-import { isAbsolute as isAbsolute6, join as join18, relative as relative5, resolve as resolve12, sep as sep4 } from "path";
+import { isAbsolute as isAbsolute6, join as join16, relative as relative5, resolve as resolve12, sep as sep4 } from "path";
 import { promisify as promisify2 } from "util";
 import { readManifest as readManifest17 } from "@basou/core";
 var execFileAsync2 = promisify2(execFile2);
@@ -13433,7 +13475,7 @@ function isBasouPath(p) {
 async function inspectRepo(repoPath) {
   let hasEntry = false;
   try {
-    await lstat3(join18(repoPath, ".basou"));
+    await lstat3(join16(repoPath, ".basou"));
     hasEntry = true;
   } catch (error) {
     if (errorCode2(error) !== "ENOENT") {
@@ -13587,7 +13629,7 @@ function formatSafetyReport(result) {
 
 // src/lib/view-server.ts
 import { createServer } from "http";
-import { basename as basename10, join as join19, resolve as resolve13 } from "path";
+import { basename as basename10, resolve as resolve13 } from "path";
 import {
   boardLivePage,
   boardPage,
@@ -13595,7 +13637,7 @@ import {
   boardPageUnavailable,
   computeWorkStats as computeWorkStats2,
   enumerateApprovals as enumerateApprovals2,
-  findErrorCode as findErrorCode18,
+  findErrorCode as findErrorCode19,
   inspectSessionEntry as inspectSessionEntry2,
   isLazyExpired as isLazyExpired2,
   loadApproval as loadApproval2,
@@ -13609,7 +13651,9 @@ import {
   renderDecisions as renderDecisions3,
   renderHandoff as renderHandoff3,
   resolveViewLanguageFromPaths,
+  SessionFileNotAFileError as SessionFileNotAFileError6,
   SessionIdSchema,
+  SessionNotADirectoryError,
   summarizeOrientation,
   tryRemoteUrl
 } from "@basou/core";
@@ -15544,7 +15588,7 @@ async function overview(ws, nowProvider, resolveRemoteUrl) {
   try {
     manifest = await readManifest18(ws.paths);
   } catch (error) {
-    if (findErrorCode18(error, "ENOENT")) {
+    if (findErrorCode19(error, "ENOENT")) {
       return { initialized: false, repoRoot: ws.repoRoot };
     }
     throw error;
@@ -15612,10 +15656,7 @@ async function sessionDetail(ws, sessionId) {
   }
   const entry = await inspectSessionEntry2(ws.paths, sessionId);
   if (entry === "symlink" || entry === "not_a_directory") {
-    throw new HttpError(
-      404,
-      `Session ${sessionId} is not a directory; a symlink or a file there is not followed`
-    );
+    throw new HttpError(404, new SessionNotADirectoryError(sessionId, entry).message);
   }
   let session;
   try {
@@ -15624,10 +15665,11 @@ async function sessionDetail(ws, sessionId) {
     if (error instanceof Error && error.message === "YAML file not found") {
       throw new HttpError(404, "Session not found");
     }
+    if (error instanceof SessionFileNotAFileError6) throw new HttpError(404, error.message);
     throw error;
   }
   try {
-    const events = await readAllEvents2(join19(ws.paths.sessions, sessionId));
+    const events = await readAllEvents2(ws.paths, sessionId);
     return { session, events };
   } catch {
     return { session, events: [], degraded: true };
@@ -15892,7 +15934,7 @@ async function viewBoardOf(root, paths) {
     own = void 0;
   }
   if (own?.visibility !== "private") return { why: "no_board" };
-  return { recordsDir: join20(root, dirname9(DEFAULT_BOARD_PATH), "records") };
+  return { recordsDir: join17(root, dirname9(DEFAULT_BOARD_PATH), "records") };
 }
 async function buildPortfolioDeps(workspaceFlags, ctx, cwd) {
   const specs = workspaceFlags.length > 0 ? workspaceFlags.map((p) => ({ path: resolve14(cwd, p) })) : await loadPortfolioConfig6(ctx.portfolioConfigPath);
@@ -15954,7 +15996,7 @@ async function startListening(port, deps) {
   try {
     return await startViewServer({ port, deps });
   } catch (error) {
-    if (findErrorCode19(error, "EADDRINUSE")) {
+    if (findErrorCode20(error, "EADDRINUSE")) {
       throw new Error(`Port ${port} is already in use. Pass --port <n> to choose another.`, {
         cause: error
       });
@@ -16007,7 +16049,7 @@ async function assertWorkspaceInitialized16(basouRoot) {
   try {
     await assertBasouRootSafe19(basouRoot);
   } catch (error) {
-    if (findErrorCode19(error, "ENOENT")) {
+    if (findErrorCode20(error, "ENOENT")) {
       throw new Error("Workspace not initialized. Run 'basou init' first.");
     }
     throw error;
@@ -16046,7 +16088,7 @@ function installExperimentalNotice(program, names = EXPERIMENTAL_COMMANDS, write
 function readBuildStamp() {
   if (false) return void 0;
   try {
-    return JSON.parse('{"version":"0.68.4","commit":"89725f6","committedAt":"2026-10-15T20:46:14+09:00"}');
+    return JSON.parse('{"version":"0.70.0","commit":"60d302a","committedAt":"2026-10-16T17:39:30+09:00"}');
   } catch {
     return void 0;
   }