@cleocode/cleo 2026.6.14 → 2026.6.15

package/dist/cli/index.js

@@ -32559,16 +32559,16 @@ async function orchestrateClassify(request, context, projectRoot, taskId) {
   }
   try {
     const { getCleoCantWorkflowsDir } = await import("@cleocode/core/internal");
-    const { readFileSync: readFileSync21, readdirSync: readdirSync3, existsSync: existsSync22 } = await import("node:fs");
-    const { join: join38 } = await import("node:path");
+    const { readFileSync: readFileSync21, readdirSync: readdirSync3, existsSync: existsSync23 } = await import("node:fs");
+    const { join: join39 } = await import("node:path");
     const workflowsDir = getCleoCantWorkflowsDir();
     const combined = `${request} ${context ?? ""}`.toLowerCase();
     const matches = [];
-    if (existsSync22(workflowsDir)) {
+    if (existsSync23(workflowsDir)) {
       const files = readdirSync3(workflowsDir).filter((f) => f.endsWith(".cant"));
       for (const file of files) {
         try {
-          const src = readFileSync21(join38(workflowsDir, file), "utf-8");
+          const src = readFileSync21(join39(workflowsDir, file), "utf-8");
           const teamMatch = /^team\s+(\S+):/m.exec(src);
           if (!teamMatch) continue;
           const teamName = teamMatch[1];
@@ -32583,12 +32583,12 @@ async function orchestrateClassify(request, context, projectRoot, taskId) {
         }
       }
     }
-    const localCantDir = join38(projectRoot, CLEO_DIR_NAME2, WORKFLOWS_SUBDIR);
-    if (existsSync22(localCantDir)) {
+    const localCantDir = join39(projectRoot, CLEO_DIR_NAME2, WORKFLOWS_SUBDIR);
+    if (existsSync23(localCantDir)) {
       const files = readdirSync3(localCantDir).filter((f) => f.endsWith(".cant"));
       for (const file of files) {
         try {
-          const src = readFileSync21(join38(localCantDir, file), "utf-8");
+          const src = readFileSync21(join39(localCantDir, file), "utf-8");
           const teamMatch = /^team\s+(\S+):/m.exec(src);
           if (!teamMatch) continue;
           const teamName = teamMatch[1];
@@ -32783,11 +32783,11 @@ async function orchestrateAnalyzeParallelSafety(taskIds, projectRoot) {
     };
   }
 }
-async function handleWorktreeComplete(taskId, projectRoot, resolve12) {
+async function handleWorktreeComplete(taskId, projectRoot, resolve13) {
   try {
     const { completeWorktreeForTask } = await import("@cleocode/core/internal");
     const result = completeWorktreeForTask(taskId, projectRoot, {
-      resolve: resolve12 ?? "auto"
+      resolve: resolve13 ?? "auto"
     });
     if (result.outcome === "conflict") {
       return {
@@ -33447,10 +33447,10 @@ var init_orchestrate2 = __esm({
                   startTime
                 );
               const rawResolve = params.resolve;
-              const resolve12 = rawResolve === "manual" ? "manual" : rawResolve === "auto" ? "auto" : void 0;
+              const resolve13 = rawResolve === "manual" ? "manual" : rawResolve === "auto" ? "auto" : void 0;
               const p = {
                 taskId: params.taskId,
-                ...resolve12 !== void 0 ? { resolve: resolve12 } : {}
+                ...resolve13 !== void 0 ? { resolve: resolve13 } : {}
               };
               return wrapResult(
                 await coreOps2["worktree.complete"](p),
@@ -39833,7 +39833,7 @@ function wrapParseError(rawInput, parseErr, sourceLabel) {
   return new Error(`Invalid JSON in ${sourceLabel}: ${parseErr.message} (got: ${snippet2})`);
 }
 function readStdinJson(stdin2) {
-  return new Promise((resolve12, reject) => {
+  return new Promise((resolve13, reject) => {
     const chunks = [];
     stdin2.on("data", (chunk) => {
       chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
@@ -39844,7 +39844,7 @@ function readStdinJson(stdin2) {
     stdin2.on("end", () => {
       const raw = Buffer.concat(chunks).toString("utf8");
       try {
-        resolve12(JSON.parse(raw));
+        resolve13(JSON.parse(raw));
       } catch (err) {
         reject(wrapParseError(raw, err, "stdin"));
       }
@@ -41075,12 +41075,12 @@ var init_agent = __esm({
             transportConfig: {},
             isActive: true
           });
-          const { existsSync: existsSync22, mkdirSync: mkdirSync7, writeFileSync: writeFileSync7 } = await import("node:fs");
-          const { join: join38 } = await import("node:path");
-          const cantDir = join38(CLEO_DIR_NAME3, AGENTS_SUBDIR);
-          const cantPath = join38(cantDir, `${agentId}.cant`);
+          const { existsSync: existsSync23, mkdirSync: mkdirSync7, writeFileSync: writeFileSync7 } = await import("node:fs");
+          const { join: join39 } = await import("node:path");
+          const cantDir = join39(CLEO_DIR_NAME3, AGENTS_SUBDIR);
+          const cantPath = join39(cantDir, `${agentId}.cant`);
           let cantScaffolded = false;
-          if (!existsSync22(cantPath)) {
+          if (!existsSync23(cantPath)) {
             mkdirSync7(cantDir, { recursive: true });
             const role = classification ?? "specialist";
             const cantContent = `---
@@ -41140,7 +41140,7 @@ agent ${agentId}:
               data: {
                 agentId: credential.agentId,
                 displayName: credential.displayName,
-                cantFile: cantScaffolded ? cantPath : existsSync22(cantPath) ? cantPath : null,
+                cantFile: cantScaffolded ? cantPath : existsSync23(cantPath) ? cantPath : null,
                 cantScaffolded
               }
             },
@@ -41259,8 +41259,8 @@ agent ${agentId}:
         try {
           const { AgentRegistryAccessor } = await import("@cleocode/core/agents");
           const { createRuntime } = await import("@cleocode/runtime");
-          const { existsSync: existsSync22, readFileSync: readFileSync21 } = await import("node:fs");
-          const { join: join38 } = await import("node:path");
+          const { existsSync: existsSync23, readFileSync: readFileSync21 } = await import("node:fs");
+          const { join: join39 } = await import("node:path");
           await openCleoDb("project");
           const registry = new AgentRegistryAccessor(getProjectRoot25());
           const credential = await registry.get(args.agentId);
@@ -41280,8 +41280,8 @@ agent ${agentId}:
           }
           let profile = null;
           let cantValidation = null;
-          const cantPath = args.cant ?? join38(CLEO_DIR_NAME3, AGENTS_SUBDIR, `${args.agentId}.cant`);
-          if (existsSync22(cantPath)) {
+          const cantPath = args.cant ?? join39(CLEO_DIR_NAME3, AGENTS_SUBDIR, `${args.agentId}.cant`);
+          if (existsSync23(cantPath)) {
             profile = readFileSync21(cantPath, "utf-8");
             try {
               const cantModule = await import("@cleocode/cant");
@@ -41805,8 +41805,8 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
         try {
           const { AgentRegistryAccessor } = await import("@cleocode/core/agents");
           const { createRuntime } = await import("@cleocode/runtime");
-          const { existsSync: existsSync22 } = await import("node:fs");
-          const { join: join38 } = await import("node:path");
+          const { existsSync: existsSync23 } = await import("node:fs");
+          const { join: join39 } = await import("node:path");
           await openCleoDb("project");
           const registry = new AgentRegistryAccessor(getProjectRoot25());
           const credential = await registry.get(args.agentId);
@@ -41823,8 +41823,8 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           }
           await registry.update(args.agentId, { isActive: true });
           await registry.markUsed(args.agentId);
-          const cantPath = join38(CLEO_DIR_NAME3, AGENTS_SUBDIR, `${args.agentId}.cant`);
-          const hasProfile = existsSync22(cantPath);
+          const cantPath = join39(CLEO_DIR_NAME3, AGENTS_SUBDIR, `${args.agentId}.cant`);
+          const hasProfile = existsSync23(cantPath);
           const runtime = await createRuntime(registry, {
             agentId: args.agentId,
             pollIntervalMs: 5e3,
@@ -42617,10 +42617,10 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       async run({ args }) {
         let tempDir = null;
         try {
-          const { existsSync: existsSync22 } = await import("node:fs");
-          const { basename, resolve: resolve12 } = await import("node:path");
-          const resolvedPath = resolve12(args.path);
-          if (!existsSync22(resolvedPath)) {
+          const { existsSync: existsSync23 } = await import("node:fs");
+          const { basename, resolve: resolve13 } = await import("node:path");
+          const resolvedPath = resolve13(args.path);
+          if (!existsSync23(resolvedPath)) {
             cliOutput(
               {
                 success: false,
@@ -42745,11 +42745,11 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       },
       async run({ args }) {
         try {
-          const { existsSync: existsSync22, statSync: statSync2 } = await import("node:fs");
-          const { resolve: resolve12, basename, dirname: dirname12 } = await import("node:path");
+          const { existsSync: existsSync23, statSync: statSync2 } = await import("node:fs");
+          const { resolve: resolve13, basename, dirname: dirname14 } = await import("node:path");
           const { execFileSync: execFileSync5 } = await import("node:child_process");
-          const resolvedDir = resolve12(args.dir);
-          if (!existsSync22(resolvedDir) || !statSync2(resolvedDir).isDirectory()) {
+          const resolvedDir = resolve13(args.dir);
+          if (!existsSync23(resolvedDir) || !statSync2(resolvedDir).isDirectory()) {
             cliOutput(
               {
                 success: false,
@@ -42763,9 +42763,9 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
             process.exitCode = 4;
             return;
           }
-          const { join: join38 } = await import("node:path");
-          const personaPath = join38(resolvedDir, "persona.cant");
-          if (!existsSync22(personaPath)) {
+          const { join: join39 } = await import("node:path");
+          const personaPath = join39(resolvedDir, "persona.cant");
+          if (!existsSync23(personaPath)) {
             cliOutput(
               {
                 success: false,
@@ -42781,8 +42781,8 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
           }
           const agentName = basename(resolvedDir);
           const archiveName = `${agentName}.cantz`;
-          const archivePath = resolve12(archiveName);
-          const parentDir = dirname12(resolvedDir);
+          const archivePath = resolve13(archiveName);
+          const parentDir = dirname14(resolvedDir);
           try {
             execFileSync5("zip", ["-r", archivePath, agentName], {
               cwd: parentDir,
@@ -42812,7 +42812,7 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
               if (entry.isFile()) {
                 fileCount++;
               } else if (entry.isDirectory()) {
-                countFiles(join38(dirPath, entry.name));
+                countFiles(join39(dirPath, entry.name));
               }
             }
           };
@@ -43060,17 +43060,17 @@ Task ${args.taskId} reassigned to you by ${active.agentId}. Run: cleo show ${arg
       },
       async run({ args }) {
         try {
-          const { existsSync: existsSync22, readFileSync: readFileSync21, mkdirSync: mkdirSync7 } = await import("node:fs");
-          const { resolve: resolve12, join: join38 } = await import("node:path");
-          const specPath = resolve12(args.spec);
-          if (!existsSync22(specPath)) {
+          const { existsSync: existsSync23, readFileSync: readFileSync21, mkdirSync: mkdirSync7 } = await import("node:fs");
+          const { resolve: resolve13, join: join39 } = await import("node:path");
+          const specPath = resolve13(args.spec);
+          if (!existsSync23(specPath)) {
             cliError(`spec file not found: ${specPath}`, 4, { name: "E_NOT_FOUND" });
             process.exitCode = 4;
             return;
           }
           const specContent = readFileSync21(specPath, "utf-8");
           const projectRoot = getProjectRoot25();
-          const outputDir = args["output-dir"] ? resolve12(args["output-dir"]) : join38(projectRoot, ".cleo", "cant", "agents");
+          const outputDir = args["output-dir"] ? resolve13(args["output-dir"]) : join39(projectRoot, ".cleo", "cant", "agents");
           mkdirSync7(outputDir, { recursive: true });
           if (args["dry-run"]) {
             cliOutput(
@@ -44255,7 +44255,7 @@ async function _headlessPkceFlow(provider, authUrl, expectedState) {
   After approving, paste the full redirect URL (\u2026?code=\u2026&state=\u2026) or the code shown:
   `
   );
-  return new Promise((resolve12, reject) => {
+  return new Promise((resolve13, reject) => {
     process.stdin.setEncoding("utf8");
     process.stdin.once("data", (chunk) => {
       const parsed = parseAuthorizationInput(String(chunk));
@@ -44267,13 +44267,13 @@ async function _headlessPkceFlow(provider, authUrl, expectedState) {
         reject(new Error("OAuth state mismatch \u2014 pasted redirect does not match this login"));
         return;
       }
-      resolve12(parsed.code);
+      resolve13(parsed.code);
     });
     process.stdin.resume();
   });
 }
 async function _localCallbackPkceFlow(provider, authUrl, expectedState, port) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve13) => {
     const server = createServer((req, res) => {
       const url = new URL(req.url ?? "/", `http://localhost:${port}`);
       const code = url.searchParams.get("code");
@@ -44283,7 +44283,7 @@ async function _localCallbackPkceFlow(provider, authUrl, expectedState, port) {
       if (error) {
         res.end(`<h1>Authorization failed</h1><p>${error}</p><p>You may close this tab.</p>`);
         server.close();
-        resolve12({
+        resolve13({
           error: {
             code: "E_PKCE_AUTH_DENIED",
             codeName: "E_PKCE_AUTH_DENIED",
@@ -44295,7 +44295,7 @@ async function _localCallbackPkceFlow(provider, authUrl, expectedState, port) {
       if (!code || state !== expectedState) {
         res.end("<h1>Invalid callback</h1><p>You may close this tab.</p>");
         server.close();
-        resolve12({
+        resolve13({
           error: {
             code: "E_PKCE_INVALID_CALLBACK",
             codeName: "E_PKCE_INVALID_CALLBACK",
@@ -44306,7 +44306,7 @@ async function _localCallbackPkceFlow(provider, authUrl, expectedState, port) {
       }
       res.end("<h1>Authorized</h1><p>You may close this tab and return to your terminal.</p>");
       server.close();
-      resolve12({ code });
+      resolve13({ code });
     });
     server.listen(port, "localhost", () => {
       process.stderr.write("\n");
@@ -44411,7 +44411,7 @@ function _generateState() {
   return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 }
 function _findFreePort() {
-  return new Promise((resolve12, reject) => {
+  return new Promise((resolve13, reject) => {
     const srv = createServer();
     srv.listen(0, "localhost", () => {
       const addr = srv.address();
@@ -44421,7 +44421,7 @@ function _findFreePort() {
         return;
       }
       const port = addr.port;
-      srv.close(() => resolve12(port));
+      srv.close(() => resolve13(port));
     });
     srv.on("error", reject);
   });
@@ -44756,8 +44756,8 @@ function detectAuthType(provider, token) {
 async function promptYesNo(question) {
   const rl = createInterface2({ input: process.stdin, output: process.stderr });
   try {
-    const answer = await new Promise((resolve12) => {
-      rl.question(question, (a) => resolve12(a));
+    const answer = await new Promise((resolve13) => {
+      rl.question(question, (a) => resolve13(a));
     });
     const clean = answer.trim().toLowerCase();
     return clean === "y" || clean === "yes";
@@ -45689,12 +45689,12 @@ async function promptPassphrase() {
       "Cannot prompt for passphrase: stdin is not a TTY. Set the CLEO_BACKUP_PASSPHRASE environment variable for non-interactive use."
     );
   }
-  return new Promise((resolve12) => {
+  return new Promise((resolve13) => {
     process.stdout.write("Passphrase: ");
     const rl = readline2.createInterface({ input: process.stdin, output: process.stdout });
     rl.question("", (answer) => {
       rl.close();
-      resolve12(answer.trim());
+      resolve13(answer.trim());
     });
   });
 }
@@ -46804,11 +46804,11 @@ var init_caamp = __esm({
         }
         if (args["dry-run"]) {
           const { parseCaampBlocks } = await import("@cleocode/caamp");
-          const { existsSync: existsSync22 } = await import("node:fs");
+          const { existsSync: existsSync23 } = await import("node:fs");
           const { readFile: readFile9 } = await import("node:fs/promises");
           const dryResults = [];
           for (const filePath of filePaths) {
-            if (!existsSync22(filePath)) {
+            if (!existsSync23(filePath)) {
               dryResults.push({ filePath, exists: false, blockCount: 0, wouldRemove: 0 });
               continue;
             }
@@ -47767,11 +47767,11 @@ var init_check2 = __esm({
       },
       async run({ args }) {
         const { spawnSync } = await import("node:child_process");
-        const { existsSync: existsSync22 } = await import("node:fs");
-        const { join: join38, resolve: resolve12 } = await import("node:path");
+        const { existsSync: existsSync23 } = await import("node:fs");
+        const { join: join39, resolve: resolve13 } = await import("node:path");
         const strict = Boolean(args.strict);
         const jsonOnly = Boolean(args.json);
-        const repoRoot = resolve12(process.cwd());
+        const repoRoot = resolve13(process.cwd());
         const gates = [
           {
             id: "gate-1",
@@ -47815,8 +47815,8 @@ var init_check2 = __esm({
         const results = [];
         let anyFailed = false;
         for (const gate of gates) {
-          const scriptPath = join38(repoRoot, gate.script);
-          if (!existsSync22(scriptPath)) {
+          const scriptPath = join39(repoRoot, gate.script);
+          if (!existsSync23(scriptPath)) {
             results.push({
               id: gate.id,
               task: gate.task,
@@ -48270,9 +48270,9 @@ var init_code = __esm({
           async run({ args }) {
             await requireTreeSitter();
             const { smartOutline } = await import("@cleocode/core/internal");
-            const { join: join38 } = await import("node:path");
+            const { join: join39 } = await import("node:path");
             const root = process.cwd();
-            const absPath = args.file.startsWith("/") ? args.file : join38(root, args.file);
+            const absPath = args.file.startsWith("/") ? args.file : join39(root, args.file);
             const result = smartOutline(absPath, root);
             if (result.errors.length > 0 && result.symbols.length === 0) {
               cliError(result.errors.join(", "), 1, { name: "E_OUTLINE_FAILED" });
@@ -48363,9 +48363,9 @@ var init_code = __esm({
           async run({ args }) {
             await requireTreeSitter();
             const { smartUnfold } = await import("@cleocode/core/internal");
-            const { join: join38 } = await import("node:path");
+            const { join: join39 } = await import("node:path");
             const root = process.cwd();
-            const absPath = args.file.startsWith("/") ? args.file : join38(root, args.file);
+            const absPath = args.file.startsWith("/") ? args.file : join39(root, args.file);
             const result = smartUnfold(absPath, args.symbol, root);
             if (!result.found) {
               const errs = result.errors.length > 0 ? `: ${result.errors.join(", ")}` : "";
@@ -50070,14 +50070,246 @@ var init_current = __esm({
   }
 });
 
+// packages/cleo/src/cli/web-subsystem.ts
+import { execFileSync as execFileSync2, spawn as spawn2 } from "node:child_process";
+import { existsSync as existsSync11 } from "node:fs";
+import { mkdir, open, readFile as readFile3, rm, stat, writeFile } from "node:fs/promises";
+import { dirname as dirname5, join as join16, resolve as resolve4 } from "node:path";
+import { fileURLToPath as fileURLToPath3 } from "node:url";
+import { getCleoHome as getCleoHome2 } from "@cleocode/core";
+import { defineSubsystem } from "@cleocode/runtime/daemon";
+function resolveStudioDir() {
+  const envOverride = process.env["CLEO_STUDIO_DIR"];
+  if (envOverride !== void 0 && envOverride.length > 0 && existsSync11(envOverride)) {
+    return envOverride;
+  }
+  try {
+    const pkgRoot = resolve4(dirname5(fileURLToPath3(import.meta.url)), "..", "..", "..");
+    const bundled = join16(pkgRoot, "studio-dist");
+    if (existsSync11(join16(bundled, "index.js"))) {
+      return bundled;
+    }
+  } catch {
+  }
+  const projectRoot = process.env["CLEO_ROOT"] ?? process.cwd();
+  const devPath = join16(projectRoot, "packages", "studio", "build");
+  if (existsSync11(join16(devPath, "index.js"))) {
+    return devPath;
+  }
+  return void 0;
+}
+function resolveStudioStaticDir() {
+  const buildDir = resolveStudioDir();
+  if (buildDir === void 0) return void 0;
+  const clientDir = join16(buildDir, "client");
+  return existsSync11(clientDir) ? clientDir : void 0;
+}
+function getWebPaths() {
+  const cleoHome = getCleoHome2();
+  return {
+    pidFile: join16(cleoHome, "web-server.pid"),
+    configFile: join16(cleoHome, "web-server.json"),
+    logDir: join16(cleoHome, "logs"),
+    logFile: join16(cleoHome, "logs", "web-server.log")
+  };
+}
+function isWebProcessRunning(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function getWebStatus() {
+  const { pidFile, configFile } = getWebPaths();
+  try {
+    const pidStr = (await readFile3(pidFile, "utf-8")).trim();
+    const pid = Number.parseInt(pidStr, 10);
+    if (Number.isNaN(pid) || !isWebProcessRunning(pid)) {
+      return { running: false, pid: null, port: null, host: null, url: null };
+    }
+    let port = WEB_DEFAULT_PORT;
+    let host = WEB_DEFAULT_HOST;
+    try {
+      const config = JSON.parse(await readFile3(configFile, "utf-8"));
+      port = config.port ?? WEB_DEFAULT_PORT;
+      host = config.host ?? WEB_DEFAULT_HOST;
+    } catch {
+    }
+    return { running: true, pid, port, host, url: `http://${host}:${port}` };
+  } catch {
+    return { running: false, pid: null, port: null, host: null, url: null };
+  }
+}
+function createWebSubsystem(opts = {}) {
+  const port = opts.port ?? WEB_DEFAULT_PORT;
+  const host = opts.host ?? WEB_DEFAULT_HOST;
+  let live;
+  return defineSubsystem({
+    name: WEB_SUBSYSTEM_NAME,
+    async start() {
+      const { pidFile, configFile, logFile, logDir } = getWebPaths();
+      const existing = await getWebStatus();
+      if (existing.running && existing.pid !== null) {
+        const ctx2 = {
+          pid: existing.pid,
+          pidFile,
+          logFile,
+          port: existing.port ?? port,
+          host: existing.host ?? host
+        };
+        live = ctx2;
+        return ctx2;
+      }
+      const resolvedStudioDir = resolveStudioDir();
+      const studioDir = resolvedStudioDir ?? join16(process.env["CLEO_ROOT"] ?? process.cwd(), "packages", "studio", "build");
+      const webIndexPath = join16(studioDir, "index.js");
+      await mkdir(logDir, { recursive: true });
+      await writeFile(
+        configFile,
+        JSON.stringify({ port, host, startedAt: (/* @__PURE__ */ new Date()).toISOString() })
+      );
+      try {
+        await stat(webIndexPath);
+      } catch {
+        const projectRoot = process.env["CLEO_ROOT"] ?? process.cwd();
+        try {
+          execFileSync2("pnpm", ["--filter", "@cleocode/studio", "run", "build"], {
+            cwd: projectRoot,
+            stdio: "ignore"
+          });
+        } catch {
+          throw new Error(
+            `Studio build failed. Run: pnpm --filter @cleocode/studio run build
+Logs: ${logFile}`
+          );
+        }
+      }
+      const logFileHandle = await open(logFile, "a");
+      const serverProcess = spawn2("node", [webIndexPath], {
+        cwd: studioDir,
+        env: {
+          ...process.env,
+          HOST: host,
+          PORT: String(port),
+          CLEO_ROOT: process.env["CLEO_ROOT"] ?? process.cwd()
+        },
+        detached: true,
+        stdio: ["ignore", logFileHandle.fd, logFileHandle.fd]
+      });
+      serverProcess.unref();
+      const pidFileTmp = `${pidFile}.tmp`;
+      await writeFile(pidFileTmp, String(serverProcess.pid));
+      await rm(pidFile, { force: true });
+      await writeFile(pidFile, String(serverProcess.pid));
+      await rm(pidFileTmp, { force: true });
+      await logFileHandle.close();
+      let started = false;
+      for (let i = 0; i < STARTUP_POLL_ITERATIONS; i++) {
+        try {
+          const response = await fetch(`http://${host}:${port}/api/health`);
+          if (response.ok) {
+            started = true;
+            break;
+          }
+        } catch {
+        }
+        await new Promise((resolve13) => setTimeout(resolve13, 500));
+      }
+      if (!started) {
+        try {
+          process.kill(serverProcess.pid, "SIGTERM");
+        } catch {
+        }
+        await rm(pidFile, { force: true });
+        throw new Error("Studio web server failed to start within 15 seconds");
+      }
+      const ctx = {
+        pid: serverProcess.pid,
+        pidFile,
+        logFile,
+        port,
+        host
+      };
+      live = ctx;
+      return ctx;
+    },
+    healthProbe() {
+      if (live === void 0) {
+        const stopped = "stopped";
+        return {
+          child_id: WEB_SUBSYSTEM_NAME,
+          pid: 0,
+          state: stopped,
+          restart_count: 0,
+          detail: "not started"
+        };
+      }
+      const alive = isWebProcessRunning(live.pid);
+      const state = alive ? "running" : "stopped";
+      return {
+        child_id: WEB_SUBSYSTEM_NAME,
+        pid: alive ? live.pid : 0,
+        state,
+        restart_count: 0,
+        detail: alive ? `url=http://${live.host}:${live.port} pid=${live.pid}` : `pid=${live.pid} exited`
+      };
+    },
+    async shutdown(context) {
+      const { pidFile } = context;
+      if (!isWebProcessRunning(context.pid)) {
+        await rm(pidFile, { force: true });
+        live = void 0;
+        return;
+      }
+      try {
+        if (process.platform === "win32") {
+          spawn2("taskkill", ["/PID", String(context.pid), "/T"], { stdio: "ignore" });
+        } else {
+          process.kill(context.pid, "SIGTERM");
+        }
+      } catch {
+      }
+      for (let i = 0; i < SIGTERM_GRACE_ITERATIONS; i++) {
+        if (!isWebProcessRunning(context.pid)) break;
+        await new Promise((resolve13) => setTimeout(resolve13, 500));
+      }
+      if (isWebProcessRunning(context.pid)) {
+        try {
+          if (process.platform === "win32") {
+            spawn2("taskkill", ["/PID", String(context.pid), "/F", "/T"], { stdio: "ignore" });
+          } else {
+            process.kill(context.pid, "SIGKILL");
+          }
+        } catch {
+        }
+      }
+      await rm(pidFile, { force: true });
+      live = void 0;
+    }
+  });
+}
+var WEB_DEFAULT_PORT, WEB_DEFAULT_HOST, WEB_SUBSYSTEM_NAME, SIGTERM_GRACE_ITERATIONS, STARTUP_POLL_ITERATIONS;
+var init_web_subsystem = __esm({
+  "packages/cleo/src/cli/web-subsystem.ts"() {
+    "use strict";
+    WEB_DEFAULT_PORT = 3456;
+    WEB_DEFAULT_HOST = "127.0.0.1";
+    WEB_SUBSYSTEM_NAME = "cleo-web";
+    SIGTERM_GRACE_ITERATIONS = 60;
+    STARTUP_POLL_ITERATIONS = 30;
+  }
+});
+
 // packages/cleo/src/cli/commands/daemon.ts
 var daemon_exports = {};
 __export(daemon_exports, {
   daemonCommand: () => daemonCommand
 });
-import { existsSync as existsSync11 } from "node:fs";
-import { join as join16 } from "node:path";
-import { fileURLToPath as fileURLToPath3 } from "node:url";
+import { existsSync as existsSync12 } from "node:fs";
+import { join as join17 } from "node:path";
+import { fileURLToPath as fileURLToPath4 } from "node:url";
 import { getGCDaemonStatus, spawnGCDaemon, stopGCDaemon } from "@cleocode/core/gc/daemon.js";
 import {
   bootstrapDaemon as bootstrapSentientDaemon,
@@ -50086,9 +50318,9 @@ import {
 import { resolveLegacyCleoDir as resolveLegacyCleoDir2 } from "@cleocode/paths";
 import { serveGateway } from "@cleocode/runtime/gateway";
 async function blockUntilSignal(handle) {
-  await new Promise((resolve12) => {
+  await new Promise((resolve13) => {
     const onSignal = () => {
-      void handle.close().finally(resolve12);
+      void handle.close().finally(resolve13);
     };
     process.once("SIGTERM", onSignal);
     process.once("SIGINT", onSignal);
@@ -50151,10 +50383,10 @@ async function showDaemonStatus(cleoDir, projectRoot) {
   }
 }
 function resolveDaemonInstallerScript() {
-  const filePath = fileURLToPath3(import.meta.url);
-  const candidate1 = join16(filePath, "..", "..", "..", "scripts", "install-daemon-service.mjs");
-  if (existsSync11(candidate1)) return candidate1;
-  const candidate2 = join16(
+  const filePath = fileURLToPath4(import.meta.url);
+  const candidate1 = join17(filePath, "..", "..", "..", "scripts", "install-daemon-service.mjs");
+  if (existsSync12(candidate1)) return candidate1;
+  const candidate2 = join17(
     filePath,
     "..",
     "..",
@@ -50173,6 +50405,7 @@ var init_daemon2 = __esm({
     init_cli();
     init_subcommand_guard();
     init_renderers();
+    init_web_subsystem();
     DEFAULT_GATEWAY_HTTP_PORT = 7777;
     startCommand3 = defineCommand({
       meta: { name: "start", description: "Spawn the GC daemon as a detached background process" },
@@ -50228,13 +50461,13 @@ var init_daemon2 = __esm({
             {
               pid,
               cleoDir,
-              logs: join16(cleoDir, "logs", "gc.log"),
+              logs: join17(cleoDir, "logs", "gc.log"),
               message: `GC daemon started (PID ${pid})`
             },
             {
               command: "daemon",
               operation: "daemon.start",
-              message: `GC daemon started (PID ${pid}) \u2014 Logs: ${join16(cleoDir, "logs", "gc.log")}`
+              message: `GC daemon started (PID ${pid}) \u2014 Logs: ${join17(cleoDir, "logs", "gc.log")}`
             }
           );
         } catch (err) {
@@ -50427,7 +50660,13 @@ var init_daemon2 = __esm({
             process.exit(2);
           }
           const host = args.host ?? "127.0.0.1";
-          const handle = await serveGateway({ handler: createCliGatewayHandler(), port, host });
+          const studioStaticDir = resolveStudioStaticDir();
+          const handle = await serveGateway({
+            handler: createCliGatewayHandler(),
+            port,
+            host,
+            studioStaticDir
+          });
           cliOutput(
             {
               pid: process.pid,
@@ -50435,12 +50674,13 @@ var init_daemon2 = __esm({
               port: handle.port,
               scope: handle.scope,
               facade: "/v1",
+              studioUrl: studioStaticDir !== void 0 ? `http://${handle.host}:${handle.port}/studio/` : null,
               message: `HTTP gateway listening on http://${handle.host}:${handle.port}/v1`
             },
             {
               command: "daemon",
               operation: "daemon.serve",
-              message: `HTTP gateway listening on http://${handle.host}:${handle.port}/v1 (PID ${process.pid})`
+              message: studioStaticDir !== void 0 ? `HTTP gateway listening on http://${handle.host}:${handle.port}/v1 (Studio: http://${handle.host}:${handle.port}/studio/, PID ${process.pid})` : `HTTP gateway listening on http://${handle.host}:${handle.port}/v1 (PID ${process.pid})`
             }
           );
           await blockUntilSignal(handle);
@@ -51157,15 +51397,15 @@ var detect_drift_exports = {};
 __export(detect_drift_exports, {
   detectDriftCommand: () => detectDriftCommand
 });
-import { existsSync as existsSync12, readdirSync, readFileSync as readFileSync11 } from "node:fs";
-import { dirname as dirname5, join as join17 } from "node:path";
+import { existsSync as existsSync13, readdirSync, readFileSync as readFileSync11 } from "node:fs";
+import { dirname as dirname6, join as join18 } from "node:path";
 function findProjectRoot() {
   let currentDir = process.cwd();
   while (currentDir !== "/") {
-    if (existsSync12(join17(currentDir, "package.json"))) {
+    if (existsSync13(join18(currentDir, "package.json"))) {
       return currentDir;
     }
-    const parent = dirname5(currentDir);
+    const parent = dirname6(currentDir);
     if (parent === currentDir) break;
     currentDir = parent;
   }
@@ -51186,8 +51426,8 @@ var init_detect_drift = __esm({
       },
       async run() {
         const projectRoot = findProjectRoot();
-        const isCleoRepo = existsSync12(join17(projectRoot, "packages", "cleo", "src"));
-        const cleoSrcRoot = isCleoRepo ? join17(projectRoot, "packages", "cleo", "src") : join17(projectRoot, "src");
+        const isCleoRepo = existsSync13(join18(projectRoot, "packages", "cleo", "src"));
+        const cleoSrcRoot = isCleoRepo ? join18(projectRoot, "packages", "cleo", "src") : join18(projectRoot, "src");
         const safeRead2 = (filePath) => {
           try {
             return readFileSync11(filePath, "utf-8");
@@ -51201,8 +51441,8 @@ var init_detect_drift = __esm({
             checks: [],
             recommendations: []
           };
-          const injPath = join17(projectRoot, CLEO_DIR_NAME3, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
-          if (existsSync12(injPath)) {
+          const injPath = join18(projectRoot, CLEO_DIR_NAME3, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
+          if (existsSync13(injPath)) {
             const content = safeRead2(injPath);
             userResult.checks.push({
               name: "Agent injection",
@@ -51253,10 +51493,10 @@ var init_detect_drift = __esm({
           }
         };
         try {
-          const specPath = join17(projectRoot, "docs", "specs", "CLEO-OPERATION-CONSTITUTION.md");
-          const registryPath = join17(cleoSrcRoot, "dispatch", "registry.ts");
-          const dispatchDomainsDir = join17(cleoSrcRoot, "dispatch", "domains");
-          if (!existsSync12(specPath)) {
+          const specPath = join18(projectRoot, "docs", "specs", "CLEO-OPERATION-CONSTITUTION.md");
+          const registryPath = join18(cleoSrcRoot, "dispatch", "registry.ts");
+          const dispatchDomainsDir = join18(cleoSrcRoot, "dispatch", "domains");
+          if (!existsSync13(specPath)) {
             addCheck("Gateway-to-spec sync", "fail", "CLEO-OPERATION-CONSTITUTION.md missing", [
               {
                 severity: "error",
@@ -51266,7 +51506,7 @@ var init_detect_drift = __esm({
                 recommendation: "Create docs/specs/CLEO-OPERATION-CONSTITUTION.md with canonical operation definitions"
               }
             ]);
-          } else if (!existsSync12(registryPath) || !existsSync12(dispatchDomainsDir)) {
+          } else if (!existsSync13(registryPath) || !existsSync13(dispatchDomainsDir)) {
             addCheck("Gateway-to-spec sync", "fail", "Dispatch registry or domains missing", [
               {
                 severity: "error",
@@ -51324,9 +51564,9 @@ var init_detect_drift = __esm({
           ]);
         }
         try {
-          const cliDir = join17(cleoSrcRoot, "cli", "commands");
-          const coreDir = isCleoRepo ? join17(projectRoot, "packages", "core", "src") : join17(projectRoot, "src", "core");
-          if (!existsSync12(cliDir)) {
+          const cliDir = join18(cleoSrcRoot, "cli", "commands");
+          const coreDir = isCleoRepo ? join18(projectRoot, "packages", "core", "src") : join18(projectRoot, "src", "core");
+          if (!existsSync13(cliDir)) {
             addCheck("CLI-to-core sync", "fail", "CLI commands directory missing", [
               {
                 severity: "error",
@@ -51335,7 +51575,7 @@ var init_detect_drift = __esm({
                 recommendation: "Verify TypeScript source structure is intact"
               }
             ]);
-          } else if (!existsSync12(coreDir)) {
+          } else if (!existsSync13(coreDir)) {
             addCheck("CLI-to-core sync", "fail", "Core directory missing", [
               {
                 severity: "error",
@@ -51352,8 +51592,8 @@ var init_detect_drift = __esm({
           addCheck("CLI-to-core sync", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const domainsDir = join17(cleoSrcRoot, "dispatch", "domains");
-          if (!existsSync12(domainsDir)) {
+          const domainsDir = join18(cleoSrcRoot, "dispatch", "domains");
+          if (!existsSync13(domainsDir)) {
             addCheck("Domain handler coverage", "fail", "Dispatch domains directory missing", [
               {
                 severity: "error",
@@ -51370,8 +51610,8 @@ var init_detect_drift = __esm({
           addCheck("Domain handler coverage", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const matrixPath = join17(cleoSrcRoot, "dispatch", "lib", "capability-matrix.ts");
-          if (!existsSync12(matrixPath)) {
+          const matrixPath = join18(cleoSrcRoot, "dispatch", "lib", "capability-matrix.ts");
+          if (!existsSync13(matrixPath)) {
             addCheck("Capability matrix", "fail", "Capability matrix missing", [
               {
                 severity: "error",
@@ -51387,8 +51627,8 @@ var init_detect_drift = __esm({
           addCheck("Capability matrix", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const schemaPath = join17(projectRoot, "src", "store", "schema.ts");
-          if (!existsSync12(schemaPath)) {
+          const schemaPath = join18(projectRoot, "src", "store", "schema.ts");
+          if (!existsSync13(schemaPath)) {
             addCheck("Schema validation", "fail", "Schema definition missing", [
               {
                 severity: "error",
@@ -51422,10 +51662,10 @@ var init_detect_drift = __esm({
           addCheck("Schema validation", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const visionPath = join17(projectRoot, "docs", "concepts", "CLEO-VISION.md");
-          const specPath = join17(projectRoot, "docs", "specs", "CLEO-PORTABLE-PROJECT-BRAIN-SPEC.md");
+          const visionPath = join18(projectRoot, "docs", "concepts", "CLEO-VISION.md");
+          const specPath = join18(projectRoot, "docs", "specs", "CLEO-PORTABLE-PROJECT-BRAIN-SPEC.md");
           const issues = [];
-          if (!existsSync12(visionPath)) {
+          if (!existsSync13(visionPath)) {
             issues.push({
               severity: "error",
               category: "vision",
@@ -51434,7 +51674,7 @@ var init_detect_drift = __esm({
               recommendation: "Create docs/concepts/CLEO-VISION.md with project vision"
             });
           }
-          if (!existsSync12(specPath)) {
+          if (!existsSync13(specPath)) {
             issues.push({
               severity: "error",
               category: "spec",
@@ -51478,8 +51718,8 @@ var init_detect_drift = __esm({
           addCheck("Canonical identity", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const injectionPath = join17(projectRoot, CLEO_DIR_NAME3, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
-          if (!existsSync12(injectionPath)) {
+          const injectionPath = join18(projectRoot, CLEO_DIR_NAME3, TEMPLATES_SUBDIR, CLEO_INJECTION_MD);
+          if (!existsSync13(injectionPath)) {
             addCheck("Agent injection", "fail", "Agent injection template missing", [
               {
                 severity: "error",
@@ -51508,8 +51748,8 @@ var init_detect_drift = __esm({
           addCheck("Agent injection", "fail", `Error: ${getErrorMessage(e)}`);
         }
         try {
-          const exitCodesPath = join17(cleoSrcRoot, "dispatch", "lib", "exit-codes.ts");
-          if (!existsSync12(exitCodesPath)) {
+          const exitCodesPath = join18(cleoSrcRoot, "dispatch", "lib", "exit-codes.ts");
+          if (!existsSync13(exitCodesPath)) {
             addCheck("Exit codes", "fail", "Exit codes definition missing", [
               {
                 severity: "error",
@@ -52079,21 +52319,21 @@ var init_set_alias = __esm({
 });
 
 // packages/cleo/src/viewer/pidfile.ts
-import { mkdir, readFile as readFile3, unlink, writeFile } from "node:fs/promises";
-import { dirname as dirname6, join as join18 } from "node:path";
-import { getCleoHome as getCleoHome2 } from "@cleocode/core/internal";
+import { mkdir as mkdir2, readFile as readFile4, unlink, writeFile as writeFile2 } from "node:fs/promises";
+import { dirname as dirname7, join as join19 } from "node:path";
+import { getCleoHome as getCleoHome3 } from "@cleocode/core/internal";
 function viewerPidFilePath() {
-  return join18(getCleoHome2(), "viewer.pid");
+  return join19(getCleoHome3(), "viewer.pid");
 }
 async function writeViewerPidFile(record) {
   const path6 = viewerPidFilePath();
-  await mkdir(dirname6(path6), { recursive: true });
-  await writeFile(path6, JSON.stringify(record, null, 2), "utf8");
+  await mkdir2(dirname7(path6), { recursive: true });
+  await writeFile2(path6, JSON.stringify(record, null, 2), "utf8");
   return path6;
 }
 async function readViewerPidFile() {
   try {
-    const raw = await readFile3(viewerPidFilePath(), "utf8");
+    const raw = await readFile4(viewerPidFilePath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.pid === "number" && typeof parsed.port === "number" && typeof parsed.host === "string" && typeof parsed.projectRoot === "string" && typeof parsed.startedAt === "number") {
       return parsed;
@@ -52182,17 +52422,17 @@ var init_port_allocator = __esm({
 
 // packages/cleo/src/viewer/server.ts
 import { createReadStream } from "node:fs";
-import { stat } from "node:fs/promises";
-import { dirname as dirname7, join as join19, normalize, resolve as resolve4 } from "node:path";
-import { fileURLToPath as fileURLToPath4 } from "node:url";
+import { stat as stat2 } from "node:fs/promises";
+import { dirname as dirname8, join as join20, normalize, resolve as resolve5 } from "node:path";
+import { fileURLToPath as fileURLToPath5 } from "node:url";
 import {
   createAttachmentStore as createAttachmentStore4,
   getProjectRoot as getProjectRoot39,
   searchAllProjectDocs as searchAllProjectDocs2
 } from "@cleocode/core/internal";
 function getViewerAssetsDir() {
-  const thisFile = fileURLToPath4(import.meta.url);
-  return resolve4(dirname7(thisFile), "..", "..", "assets", "viewer");
+  const thisFile = fileURLToPath5(import.meta.url);
+  return resolve5(dirname8(thisFile), "..", "..", "assets", "viewer");
 }
 function extOf(p) {
   const i = p.lastIndexOf(".");
@@ -52222,15 +52462,15 @@ function inferTitle(markdown, fallback) {
 }
 async function serveStatic(res, assetsDir, relPath) {
   const safeRel = normalize(relPath).replace(/^[\\/]+/, "");
-  const absPath = join19(assetsDir, safeRel);
-  const resolvedAssets = resolve4(assetsDir) + "/";
-  const resolvedAbs = resolve4(absPath);
-  if (`${resolvedAbs}/`.indexOf(resolvedAssets) !== 0 && resolvedAbs !== resolve4(assetsDir)) {
+  const absPath = join20(assetsDir, safeRel);
+  const resolvedAssets = resolve5(assetsDir) + "/";
+  const resolvedAbs = resolve5(absPath);
+  if (`${resolvedAbs}/`.indexOf(resolvedAssets) !== 0 && resolvedAbs !== resolve5(assetsDir)) {
     send(res, 404, "application/json", lafsErrorJson("E_NOT_FOUND", `not found: ${relPath}`));
     return;
   }
   try {
-    const s = await stat(absPath);
+    const s = await stat2(absPath);
     if (!s.isFile()) {
       send(res, 404, "application/json", lafsErrorJson("E_NOT_FOUND", `not found: ${relPath}`));
       return;
@@ -52421,15 +52661,15 @@ var init_server = __esm({
 });
 
 // packages/cleo/src/cli/docs-viewer-subsystem.ts
-import { mkdir as mkdir2 } from "node:fs/promises";
-import { join as join20 } from "node:path";
-import { getCleoHome as getCleoHome3 } from "@cleocode/core";
-import { defineSubsystem } from "@cleocode/runtime/daemon";
+import { mkdir as mkdir3 } from "node:fs/promises";
+import { join as join21 } from "node:path";
+import { getCleoHome as getCleoHome4 } from "@cleocode/core";
+import { defineSubsystem as defineSubsystem2 } from "@cleocode/runtime/daemon";
 function getViewerPaths() {
-  const cleoHome = getCleoHome3();
+  const cleoHome = getCleoHome4();
   return {
     pidFile: viewerPidFilePath(),
-    logFile: join20(cleoHome, "viewer.log"),
+    logFile: join21(cleoHome, "viewer.log"),
     logDir: cleoHome
   };
 }
@@ -52457,7 +52697,7 @@ function createDocsViewerSubsystem(opts = {}) {
   const host = opts.host ?? VIEWER_DEFAULT_HOST;
   const autoIncrement = !(opts.noAutoPort ?? false);
   let live;
-  return defineSubsystem({
+  return defineSubsystem2({
     name: VIEWER_SUBSYSTEM_NAME,
     async start() {
       const { pidFile, logDir } = getViewerPaths();
@@ -52472,7 +52712,7 @@ function createDocsViewerSubsystem(opts = {}) {
         live = ctx2;
         return ctx2;
       }
-      await mkdir2(logDir, { recursive: true });
+      await mkdir3(logDir, { recursive: true });
       const handle = await startViewer({
         startPort,
         endPort,
@@ -52526,9 +52766,9 @@ function createDocsViewerSubsystem(opts = {}) {
         process.kill(context.pid, "SIGTERM");
       } catch {
       }
-      for (let i = 0; i < SIGTERM_GRACE_ITERATIONS; i++) {
+      for (let i = 0; i < SIGTERM_GRACE_ITERATIONS2; i++) {
         if (!isViewerProcessRunning(context.pid)) break;
-        await new Promise((resolve12) => setTimeout(resolve12, 500));
+        await new Promise((resolve13) => setTimeout(resolve13, 500));
       }
       if (isViewerProcessRunning(context.pid)) {
         try {
@@ -52541,7 +52781,7 @@ function createDocsViewerSubsystem(opts = {}) {
     }
   });
 }
-var VIEWER_DEFAULT_PORT, VIEWER_DEFAULT_END_PORT, VIEWER_DEFAULT_HOST, VIEWER_SUBSYSTEM_NAME, SIGTERM_GRACE_ITERATIONS;
+var VIEWER_DEFAULT_PORT, VIEWER_DEFAULT_END_PORT, VIEWER_DEFAULT_HOST, VIEWER_SUBSYSTEM_NAME, SIGTERM_GRACE_ITERATIONS2;
 var init_docs_viewer_subsystem = __esm({
   "packages/cleo/src/cli/docs-viewer-subsystem.ts"() {
     "use strict";
@@ -52551,12 +52791,12 @@ var init_docs_viewer_subsystem = __esm({
     VIEWER_DEFAULT_END_PORT = 7800;
     VIEWER_DEFAULT_HOST = "127.0.0.1";
     VIEWER_SUBSYSTEM_NAME = "cleo-docs-viewer";
-    SIGTERM_GRACE_ITERATIONS = 20;
+    SIGTERM_GRACE_ITERATIONS2 = 20;
   }
 });
 
 // packages/cleo/src/cli/commands/docs-viewer.ts
-import { spawn as spawn2 } from "node:child_process";
+import { spawn as spawn3 } from "node:child_process";
 function openInBrowser(url) {
   try {
     let cmd;
@@ -52571,7 +52811,7 @@ function openInBrowser(url) {
       cmd = "xdg-open";
       args = [url];
     }
-    spawn2(cmd, args, { detached: true, stdio: "ignore" }).unref();
+    spawn3(cmd, args, { detached: true, stdio: "ignore" }).unref();
   } catch {
   }
 }
@@ -52870,8 +53110,8 @@ __export(docs_exports, {
   _llmOutputCommand: () => _llmOutputCommand,
   docsCommand: () => docsCommand
 });
-import { appendFile, mkdir as mkdir3, readdir, readFile as readFile4, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname8, isAbsolute as isAbsolute2, join as join21, resolve as resolve5 } from "node:path";
+import { appendFile, mkdir as mkdir4, readdir, readFile as readFile5, writeFile as writeFile3 } from "node:fs/promises";
+import { dirname as dirname9, isAbsolute as isAbsolute2, join as join22, resolve as resolve6 } from "node:path";
 import { pushWarning as pushWarning3 } from "@cleocode/core";
 import { createDocsReadModel as createDocsReadModel2 } from "@cleocode/core/docs/docs-read-model";
 import {
@@ -52903,7 +53143,7 @@ async function readDocBodyFromStdin() {
   return buf.replace(/\r?\n$/, "");
 }
 async function getScriptNames(projectRoot) {
-  const scriptsDir = join21(projectRoot, "scripts");
+  const scriptsDir = join22(projectRoot, "scripts");
   try {
     const files = await readdir(scriptsDir);
     return files.filter((f) => f.endsWith(".sh")).map((f) => f.replace(".sh", "")).sort();
@@ -52912,7 +53152,7 @@ async function getScriptNames(projectRoot) {
   }
 }
 async function getIndexedCommands(projectRoot) {
-  const indexPath = join21(projectRoot, "docs", "commands", "COMMANDS-INDEX.json");
+  const indexPath = join22(projectRoot, "docs", "commands", "COMMANDS-INDEX.json");
   const index = await readJson(indexPath);
   if (!index) return [];
   return index.commands.map((c) => c.name).sort();
@@ -52945,8 +53185,8 @@ async function runGapCheck(_projectRoot, filterId) {
     const reviewFiles = files.filter((f) => f.endsWith(".md"));
     for (const file of reviewFiles) {
       if (filterId && !file.includes(filterId)) continue;
-      const filePath = join21(reviewDir, file);
-      const content = await readFile4(filePath, "utf-8");
+      const filePath = join22(reviewDir, file);
+      const content = await readFile5(filePath, "utf-8");
       const taskMatch = file.match(/^(T\d+)/);
       const taskId = taskMatch ? taskMatch[1] : "UNKNOWN";
       const gaps = [];
@@ -53240,9 +53480,9 @@ var init_docs3 = __esm({
                 })}
 `;
                 try {
-                  await mkdir3(join21(projectRoot, ".cleo", "audit"), { recursive: true });
+                  await mkdir4(join22(projectRoot, ".cleo", "audit"), { recursive: true });
                   await appendFile(
-                    join21(projectRoot, ".cleo", "audit", "similar-bypass.jsonl"),
+                    join22(projectRoot, ".cleo", "audit", "similar-bypass.jsonl"),
                     auditLine,
                     "utf-8"
                   );
@@ -53608,9 +53848,9 @@ var init_docs3 = __esm({
           });
           let writtenPath;
           if (typeof args.out === "string" && args.out.length > 0) {
-            const outPath = isAbsolute2(args.out) ? args.out : resolve5(projectRoot, args.out);
-            await mkdir3(dirname8(outPath), { recursive: true });
-            await writeFile2(outPath, result.content, "utf8");
+            const outPath = isAbsolute2(args.out) ? args.out : resolve6(projectRoot, args.out);
+            await mkdir4(dirname9(outPath), { recursive: true });
+            await writeFile3(outPath, result.content, "utf8");
             writtenPath = outPath;
           }
           if (args.json) {
@@ -53680,9 +53920,9 @@ var init_docs3 = __esm({
           });
           let writtenPath;
           if (typeof args.out === "string" && args.out.length > 0) {
-            const outPath = isAbsolute2(args.out) ? args.out : resolve5(projectRoot, args.out);
-            await mkdir3(dirname8(outPath), { recursive: true });
-            await writeFile2(outPath, result.content, "utf8");
+            const outPath = isAbsolute2(args.out) ? args.out : resolve6(projectRoot, args.out);
+            await mkdir4(dirname9(outPath), { recursive: true });
+            await writeFile3(outPath, result.content, "utf8");
             writtenPath = outPath;
           }
           if (args.json) {
@@ -53757,9 +53997,9 @@ var init_docs3 = __esm({
           });
           let writtenPath;
           if (typeof args.out === "string" && args.out.length > 0) {
-            const outPath = isAbsolute2(args.out) ? args.out : resolve5(projectRoot, args.out);
-            await mkdir3(dirname8(outPath), { recursive: true });
-            await writeFile2(outPath, result.content, "utf8");
+            const outPath = isAbsolute2(args.out) ? args.out : resolve6(projectRoot, args.out);
+            await mkdir4(dirname9(outPath), { recursive: true });
+            await writeFile3(outPath, result.content, "utf8");
             writtenPath = outPath;
           }
           if (args.json) {
@@ -53983,9 +54223,9 @@ var init_docs3 = __esm({
             base: args.base ?? void 0
           });
           if (typeof args.out === "string" && args.out.length > 0) {
-            const outPath = isAbsolute2(args.out) ? args.out : resolve5(projectRoot, args.out);
-            await mkdir3(dirname8(outPath), { recursive: true });
-            await writeFile2(outPath, result.merged, "utf8");
+            const outPath = isAbsolute2(args.out) ? args.out : resolve6(projectRoot, args.out);
+            await mkdir4(dirname9(outPath), { recursive: true });
+            await writeFile3(outPath, result.merged, "utf8");
             humanInfo(`Wrote merged content to ${outPath}`);
           }
           cliOutput(result, { command: "docs merge", operation: "docs.merge" });
@@ -54744,10 +54984,10 @@ var init_docs3 = __esm({
       async run({ args }) {
         const projectRoot = getProjectRoot40();
         const dirArg = String(args.dir);
-        const scanRoot = isAbsolute2(dirArg) ? dirArg : resolve5(projectRoot, dirArg);
+        const scanRoot = isAbsolute2(dirArg) ? dirArg : resolve6(projectRoot, dirArg);
         const dryRun = args["dry-run"] === true;
         const force = args.force === true;
-        const manifestPath = args["audit-manifest"] ? isAbsolute2(String(args["audit-manifest"])) ? String(args["audit-manifest"]) : resolve5(projectRoot, String(args["audit-manifest"])) : void 0;
+        const manifestPath = args["audit-manifest"] ? isAbsolute2(String(args["audit-manifest"])) ? String(args["audit-manifest"]) : resolve6(projectRoot, String(args["audit-manifest"])) : void 0;
         if (force) {
           const auditLine = `${JSON.stringify({
             ts: (/* @__PURE__ */ new Date()).toISOString(),
@@ -54756,9 +54996,9 @@ var init_docs3 = __esm({
           })}
 `;
           try {
-            await mkdir3(join21(projectRoot, ".cleo", "audit"), { recursive: true });
+            await mkdir4(join22(projectRoot, ".cleo", "audit"), { recursive: true });
             await appendFile(
-              join21(projectRoot, ".cleo", "audit", "import-force-bypass.jsonl"),
+              join22(projectRoot, ".cleo", "audit", "import-force-bypass.jsonl"),
               auditLine,
               "utf-8"
             );
@@ -55479,8 +55719,8 @@ var doctor_release_readiness_exports = {};
 __export(doctor_release_readiness_exports, {
   doctorReleaseReadinessCommand: () => doctorReleaseReadinessCommand
 });
-import { existsSync as existsSync13 } from "node:fs";
-import { join as join22, resolve as resolve6 } from "node:path";
+import { existsSync as existsSync14 } from "node:fs";
+import { join as join23, resolve as resolve7 } from "node:path";
 async function runCheck(name, cmd, args, cwd) {
   const { spawnSync } = await import("node:child_process");
   const start = Date.now();
@@ -55518,11 +55758,11 @@ var init_doctor_release_readiness = __esm({
       },
       async run({ args }) {
         const isHuman = args.human === true || !!process.stdout.isTTY && args.json !== true;
-        const repoRoot = resolve6(process.cwd());
+        const repoRoot = resolve7(process.cwd());
         const startTotal = Date.now();
         const checks = [];
-        const biomePath = join22(repoRoot, "node_modules", ".bin", "biome");
-        const biomeAvailable = existsSync13(biomePath);
+        const biomePath = join23(repoRoot, "node_modules", ".bin", "biome");
+        const biomeAvailable = existsSync14(biomePath);
         if (biomeAvailable) {
           checks.push(await runCheck("biome-lint", biomePath, ["ci", "."], repoRoot));
         } else {
@@ -55535,8 +55775,8 @@ var init_doctor_release_readiness = __esm({
             stderr: "biome not found in node_modules/.bin \u2014 skipping"
           });
         }
-        const changesetLintScript = join22(repoRoot, "scripts", "lint-changesets.mjs");
-        if (existsSync13(changesetLintScript)) {
+        const changesetLintScript = join23(repoRoot, "scripts", "lint-changesets.mjs");
+        if (existsSync14(changesetLintScript)) {
           checks.push(await runCheck("changeset-lint", "node", [changesetLintScript], repoRoot));
         } else {
           checks.push({
@@ -55548,8 +55788,8 @@ var init_doctor_release_readiness = __esm({
             stderr: "scripts/lint-changesets.mjs not found \u2014 skipping"
           });
         }
-        const changelogPath = join22(repoRoot, "CHANGELOG.md");
-        const changelogExists = existsSync13(changelogPath);
+        const changelogPath = join23(repoRoot, "CHANGELOG.md");
+        const changelogExists = existsSync14(changelogPath);
         const changelogCheck = {
           name: "changelog-exists",
           status: changelogExists ? "pass" : "fail",
@@ -55559,9 +55799,9 @@ var init_doctor_release_readiness = __esm({
           stderr: changelogExists ? "" : `CHANGELOG.md not found at ${changelogPath}`
         };
         checks.push(changelogCheck);
-        const packageJsonPath = join22(repoRoot, "package.json");
+        const packageJsonPath = join23(repoRoot, "package.json");
         let oidcCheck;
-        if (existsSync13(packageJsonPath)) {
+        if (existsSync14(packageJsonPath)) {
           try {
             const pkg = JSON.parse(
               await import("node:fs").then((m) => m.readFileSync(packageJsonPath, "utf8"))
@@ -55608,8 +55848,8 @@ var init_doctor_release_readiness = __esm({
           };
         }
         checks.push(oidcCheck);
-        const tagWorkflowPath = join22(repoRoot, ".github", "workflows", "auto-tag-on-release-merge.yml");
-        const tagWorkflowExists = existsSync13(tagWorkflowPath);
+        const tagWorkflowPath = join23(repoRoot, ".github", "workflows", "auto-tag-on-release-merge.yml");
+        const tagWorkflowExists = existsSync14(tagWorkflowPath);
         let tagTriggerCheck;
         if (tagWorkflowExists) {
           try {
@@ -55648,10 +55888,10 @@ var init_doctor_release_readiness = __esm({
           };
         }
         checks.push(tagTriggerCheck);
-        const tsconfigPath = join22(repoRoot, "tsconfig.json");
-        if (existsSync13(tsconfigPath)) {
-          const tscPath = join22(repoRoot, "node_modules", ".bin", "tsc");
-          if (existsSync13(tscPath)) {
+        const tsconfigPath = join23(repoRoot, "tsconfig.json");
+        if (existsSync14(tsconfigPath)) {
+          const tscPath = join23(repoRoot, "node_modules", ".bin", "tsc");
+          if (existsSync14(tscPath)) {
             checks.push(await runCheck("typecheck", tscPath, ["--noEmit"], repoRoot));
           } else {
             checks.push({
@@ -55679,8 +55919,8 @@ var init_doctor_release_readiness = __esm({
           { name: "json-stream-lint", script: "scripts/lint-json-stream-hygiene.mjs" }
         ];
         for (const lint of fastLintScripts) {
-          const scriptPath = join22(repoRoot, lint.script);
-          if (existsSync13(scriptPath)) {
+          const scriptPath = join23(repoRoot, lint.script);
+          if (existsSync14(scriptPath)) {
             checks.push(await runCheck(lint.name, "node", [scriptPath], repoRoot));
           } else {
             checks.push({
@@ -55941,8 +56181,8 @@ __export(migrate_agents_v2_exports, {
   walkAgentsDir: () => walkAgentsDir
 });
 import { createHash as createHash2 } from "node:crypto";
-import { appendFileSync as appendFileSync2, existsSync as existsSync14, mkdirSync as mkdirSync3, readdirSync as readdirSync2, readFileSync as readFileSync12 } from "node:fs";
-import { join as join23 } from "node:path";
+import { appendFileSync as appendFileSync2, existsSync as existsSync15, mkdirSync as mkdirSync3, readdirSync as readdirSync2, readFileSync as readFileSync12 } from "node:fs";
+import { join as join24 } from "node:path";
 import {
   ensureGlobalAgentRegistryDb,
   getGlobalAgentRegistryNativeDb,
@@ -55966,15 +56206,15 @@ function extractAgentName(source) {
   return headerMatch[1] ?? null;
 }
 function appendAuditLog(projectRoot, entry) {
-  const auditPath = join23(projectRoot, AUDIT_LOG_RELATIVE);
-  const auditDir = join23(auditPath, "..");
-  if (!existsSync14(auditDir)) {
+  const auditPath = join24(projectRoot, AUDIT_LOG_RELATIVE);
+  const auditDir = join24(auditPath, "..");
+  if (!existsSync15(auditDir)) {
     mkdirSync3(auditDir, { recursive: true });
   }
   appendFileSync2(auditPath, JSON.stringify(entry) + "\n", "utf8");
 }
 function walkAgentsDir(db, scanDir, projectRoot, summary, verbose) {
-  if (!existsSync14(scanDir)) return;
+  if (!existsSync15(scanDir)) return;
   let files;
   try {
     files = readdirSync2(scanDir).filter((f) => f.endsWith(".cant"));
@@ -55985,7 +56225,7 @@ function walkAgentsDir(db, scanDir, projectRoot, summary, verbose) {
     return;
   }
   for (const filename of files) {
-    const cantPath = join23(scanDir, filename);
+    const cantPath = join24(scanDir, filename);
     const relPath = cantPath.replace(`${projectRoot}/`, "");
     let sourceBytes;
     let sourceText;
@@ -56082,9 +56322,9 @@ async function runMigrateAgentsV2(projectRoot, verbose = true) {
   await ensureGlobalAgentRegistryDb();
   const db = getGlobalAgentRegistryNativeDb();
   try {
-    const canonicalDir = join23(projectRoot, ".cleo", "cant", "agents");
+    const canonicalDir = join24(projectRoot, ".cleo", "cant", "agents");
     walkAgentsDir(db, canonicalDir, projectRoot, summary, verbose);
-    const legacyDir = join23(projectRoot, ".cleo", "agents");
+    const legacyDir = join24(projectRoot, ".cleo", "agents");
     walkAgentsDir(db, legacyDir, projectRoot, summary, verbose);
   } finally {
     db.close();
@@ -56092,8 +56332,8 @@ async function runMigrateAgentsV2(projectRoot, verbose = true) {
   return summary;
 }
 function readMigrationConflicts(projectRoot) {
-  const auditPath = join23(projectRoot, AUDIT_LOG_RELATIVE);
-  if (!existsSync14(auditPath)) return [];
+  const auditPath = join24(projectRoot, AUDIT_LOG_RELATIVE);
+  if (!existsSync15(auditPath)) return [];
   let raw;
   try {
     raw = readFileSync12(auditPath, "utf8");
@@ -56177,7 +56417,7 @@ __export(doctor_exports, {
   doctorCommand: () => doctorCommand2
 });
 import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync4 } from "node:fs";
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 import { getProjectRoot as getProjectRoot45, pushWarning as pushWarning5 } from "@cleocode/core";
 import { renderInvariantAuditLines } from "@cleocode/core/doctor/invariant-audit-render.js";
 import {
@@ -56217,8 +56457,8 @@ async function scanTestFixturesInProd(projectRoot) {
 }
 async function quarantineTestFixtures(projectRoot, matches) {
   if (matches.length === 0) return 0;
-  const cleoDir = join24(projectRoot, ".cleo");
-  const quarantineDir = join24(
+  const cleoDir = join25(projectRoot, ".cleo");
+  const quarantineDir = join25(
     cleoDir,
     "quarantine",
     `fixture-scan-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}`
@@ -56226,7 +56466,7 @@ async function quarantineTestFixtures(projectRoot, matches) {
   mkdirSync4(quarantineDir, { recursive: true });
   const manifest = matches.map((m) => ({ ...m, quarantinedAt: (/* @__PURE__ */ new Date()).toISOString() }));
   writeFileSync4(
-    join24(quarantineDir, "manifest.jsonl"),
+    join25(quarantineDir, "manifest.jsonl"),
     manifest.map((m) => JSON.stringify(m)).join("\n") + "\n"
   );
   const { getNativeDb } = await import("@cleocode/core/store/sqlite.js");
@@ -56524,7 +56764,7 @@ var init_doctor = __esm({
           if (args["check-worktree-config"]) {
             const { execFileSync: execFile2 } = await import("node:child_process");
             const { join: pathJoin } = await import("node:path");
-            const { existsSync: existsSync22 } = await import("node:fs");
+            const { existsSync: existsSync23 } = await import("node:fs");
             const { detectAndHealCoreWorktreeLeak } = await import("@cleocode/worktree");
             const projectRoot = getProjectRoot45();
             let gitRoot = projectRoot;
@@ -56541,7 +56781,7 @@ var init_doctor = __esm({
             if (isDryRun) {
               const gitConfigPath = pathJoin(gitRoot, ".git", "config");
               let leakedValue;
-              if (existsSync22(gitConfigPath)) {
+              if (existsSync23(gitConfigPath)) {
                 try {
                   leakedValue = execFile2("git", ["config", "--file", gitConfigPath, "--get", "core.worktree"], {
                     encoding: "utf-8",
@@ -56876,8 +57116,8 @@ var init_doctor = __esm({
               );
               return;
             }
-            const archiveDir = join24(projectRoot, ".cleo", "backups");
-            const auditLogPath = join24(projectRoot, ".cleo", "audit", "worktree-prune.jsonl");
+            const archiveDir = join25(projectRoot, ".cleo", "backups");
+            const auditLogPath = join25(projectRoot, ".cleo", "audit", "worktree-prune.jsonl");
             const result = await pruneWorktreeOrphans(orphans, {
               archiveDir,
               auditLogPath,
@@ -57041,7 +57281,7 @@ __export(event_exports, {
   orchestratorCommand: () => orchestratorCommand
 });
 import { readdir as readdir2 } from "node:fs/promises";
-import { join as join25 } from "node:path";
+import { join as join26 } from "node:path";
 import { cwd as processCwd } from "node:process";
 import { appendEvent } from "@cleocode/core/events/event-bus.js";
 function resolveProjectRoot2(arg) {
@@ -57164,7 +57404,7 @@ var init_event = __esm({
         const agentIdFilter = args.agent;
         const showAll = args.all === true;
         const lines = parseInt(args.lines ?? "20", 10);
-        const eventsDir = join25(projectRoot, ".cleo", "agent-events");
+        const eventsDir = join26(projectRoot, ".cleo", "agent-events");
         try {
           let files = [];
           try {
@@ -57202,7 +57442,7 @@ var init_event = __esm({
           for (const file of filesToTail) {
             const agentId = file.replace(".jsonl", "");
             const { readFileSync: readFileSync21 } = await import("node:fs");
-            const content = readFileSync21(join25(eventsDir, file), "utf-8");
+            const content = readFileSync21(join26(eventsDir, file), "utf-8");
             const eventLines = content.trim().split("\n").filter(Boolean);
             const tail = eventLines.slice(-lines);
             if (jsonMode) {
@@ -57272,7 +57512,7 @@ var init_event = __esm({
         const epicFilter = args.epic;
         const follow = args.follow === true;
         const lines = parseInt(args.lines ?? "50", 10);
-        const eventsDir = join25(projectRoot, ".cleo", "agent-events");
+        const eventsDir = join26(projectRoot, ".cleo", "agent-events");
         let files = [];
         try {
           const entries = await readdir2(eventsDir);
@@ -57298,7 +57538,7 @@ var init_event = __esm({
           const agentId = file.replace(".jsonl", "");
           try {
             const { readFileSync: readFileSync21 } = await import("node:fs");
-            const content = readFileSync21(join25(eventsDir, file), "utf-8");
+            const content = readFileSync21(join26(eventsDir, file), "utf-8");
             const eventLines = content.trim().split("\n").filter(Boolean);
             const tail = eventLines.slice(-lines);
             if (jsonMode) {
@@ -57444,7 +57684,7 @@ var exodus_exports = {};
 __export(exodus_exports, {
   exodusCommand: () => exodusCommand
 });
-import { existsSync as existsSync15 } from "node:fs";
+import { existsSync as existsSync16 } from "node:fs";
 import { resolveDualScopeDbPath } from "@cleocode/core/store/dual-scope-db.js";
 import {
   archiveMigratedSources,
@@ -57625,7 +57865,7 @@ var init_exodus = __esm({
         );
         let archived = [];
         if (isDataContinuityOk(verifyResult)) {
-          const consumed = plan.sources.filter((s) => existsSync15(s.path));
+          const consumed = plan.sources.filter((s) => existsSync16(s.path));
           const archiveResult = archiveMigratedSources(consumed, process.cwd());
           archived = archiveResult.sources.filter((s) => s.action === "archived").map((s) => s.name);
           humanInfo(
@@ -58273,7 +58513,7 @@ __export(gateway_exports, {
   gatewayCommand: () => gatewayCommand,
   gatewayOpenapiSubCommand: () => gatewayOpenapiSubCommand
 });
-import { resolve as resolve7 } from "node:path";
+import { resolve as resolve8 } from "node:path";
 import { generateOpenApi, getProjectRoot as getProjectRoot46 } from "@cleocode/core";
 var gatewayOpenapiSubCommand, gatewayCommand;
 var init_gateway = __esm({
@@ -58306,7 +58546,7 @@ var init_gateway = __esm({
         const pathCount = Object.keys(doc.paths).length;
         if (typeof args.out === "string" && args.out.length > 0) {
           const { writeFileSync: writeFileSync7 } = await import("node:fs");
-          const target = resolve7(getProjectRoot46(), args.out);
+          const target = resolve8(getProjectRoot46(), args.out);
           writeFileSync7(target, json2, "utf8");
           cliOutput(
             { out: target, pathCount, version: doc.info.version, openapi: doc.openapi },
@@ -58387,7 +58627,7 @@ __export(gc_exports, {
   gcCommand: () => gcCommand
 });
 import { homedir as homedir4, tmpdir } from "node:os";
-import { join as join26 } from "node:path";
+import { join as join27 } from "node:path";
 import { pruneOrphanTempDirs, pruneOrphanWorktrees } from "@cleocode/core/gc/cleanup.js";
 import { runGC } from "@cleocode/core/gc/runner.js";
 import { readGCState } from "@cleocode/core/gc/state.js";
@@ -58464,7 +58704,7 @@ var init_gc = __esm({
       },
       async run({ args }) {
         const cleoDir = resolveLegacyCleoDir3(args["cleo-dir"]);
-        const statePath = join26(cleoDir, "gc-state.json");
+        const statePath = join27(cleoDir, "gc-state.json");
         try {
           const state = await readGCState(statePath);
           const diskStr = state.lastDiskUsedPct !== null ? `${state.lastDiskUsedPct.toFixed(1)}%` : "unknown";
@@ -58517,8 +58757,8 @@ var init_gc = __esm({
         }
       },
       async run({ args }) {
-        const xdgData = process.env["XDG_DATA_HOME"] ?? join26(homedir4(), ".local", "share");
-        const worktreesRoot = args["worktrees-root"] ?? join26(xdgData, "cleo", "worktrees");
+        const xdgData = process.env["XDG_DATA_HOME"] ?? join27(homedir4(), ".local", "share");
+        const worktreesRoot = args["worktrees-root"] ?? join27(xdgData, "cleo", "worktrees");
         const projectHash = args["project-hash"];
         const dryRun = args["dry-run"];
         const preserveRaw = args["preserve-tasks"];
@@ -58533,7 +58773,7 @@ var init_gc = __esm({
             dryRun
           });
           const dryLabel = dryRun ? " (dry run)" : "";
-          const humanMsg = `GC worktrees${dryLabel} \u2014 ${dryRun ? "Would remove" : "Removed"}: ${result.removed} director${result.removed === 1 ? "y" : "ies"}` + (result.errors.length > 0 ? `, ${result.errors.length} error(s)` : "");
+          const humanMsg = `GC worktrees${dryLabel} \u2014 ${dryRun ? "Would remove" : "Removed"}: ${result.removed} director${result.removed === 1 ? "y" : "ies"}` + (result.quarantined > 0 ? `, ${result.quarantined} quarantined (dirty/unpushed)` : "") + (result.errors.length > 0 ? `, ${result.errors.length} error(s)` : "");
           cliOutput(result, {
             command: "gc",
             operation: "gc.worktrees",
@@ -60166,9 +60406,9 @@ __export(init_exports, {
   isCredentialPoolEmpty: () => isCredentialPoolEmpty,
   maybeNudgeFirstRunLogin: () => maybeNudgeFirstRunLogin
 });
-import { existsSync as existsSync16, readFileSync as readFileSync13 } from "node:fs";
-import { join as join27 } from "node:path";
-import { fileURLToPath as fileURLToPath5 } from "node:url";
+import { existsSync as existsSync17, readFileSync as readFileSync13 } from "node:fs";
+import { join as join28 } from "node:path";
+import { fileURLToPath as fileURLToPath6 } from "node:url";
 import {
   CleoError as CleoError6,
   getWorkflowTemplatesDir as getCoreWorkflowTemplatesDir,
@@ -60180,12 +60420,12 @@ import { getCredentialPool } from "@cleocode/core/llm/credential-pool.js";
 import { getTemplatesByKind } from "@cleocode/core/templates/registry";
 function getGitignoreTemplate() {
   try {
-    const thisFile = fileURLToPath5(import.meta.url);
-    const packageRoot = join27(thisFile, "..", "..", "..", "..");
-    const localTemplatePath = join27(packageRoot, "templates", "cleo-gitignore");
-    const monorepoTemplatePath = join27(packageRoot, "..", "..", "templates", "cleo-gitignore");
-    const templatePath = existsSync16(localTemplatePath) ? localTemplatePath : monorepoTemplatePath;
-    if (existsSync16(templatePath)) {
+    const thisFile = fileURLToPath6(import.meta.url);
+    const packageRoot = join28(thisFile, "..", "..", "..", "..");
+    const localTemplatePath = join28(packageRoot, "templates", "cleo-gitignore");
+    const monorepoTemplatePath = join28(packageRoot, "..", "..", "templates", "cleo-gitignore");
+    const templatePath = existsSync17(localTemplatePath) ? localTemplatePath : monorepoTemplatePath;
+    if (existsSync17(templatePath)) {
       return readFileSync13(templatePath, "utf-8");
     }
   } catch {
@@ -60679,7 +60919,7 @@ var issue_exports = {};
 __export(issue_exports, {
   issueCommand: () => issueCommand
 });
-import { execFileSync as execFileSync2 } from "node:child_process";
+import { execFileSync as execFileSync3 } from "node:child_process";
 import { addIssue, BUILD_CONFIG } from "@cleocode/core/internal";
 async function handleIssueType(issueType, opts) {
   let result;
@@ -60702,7 +60942,7 @@ async function handleIssueType(issueType, opts) {
   if (opts["open"] && typeof result.url === "string" && result.url.startsWith("https://")) {
     const issueNumber = result.url.match(/(\d+)$/)?.[1] ?? "unknown";
     try {
-      execFileSync2("gh", ["issue", "view", issueNumber, "--repo", CLEO_REPO, "--web"], {
+      execFileSync3("gh", ["issue", "view", issueNumber, "--repo", CLEO_REPO, "--web"], {
         stdio: ["pipe", "pipe", "pipe"]
       });
     } catch {
@@ -61597,7 +61837,7 @@ function makeLlmSubcommand(opts) {
     }
   });
 }
-var API_KEY_FLAG_DEPRECATION, addCommand7, listCommand11, removeCommand4, useCommand, profileCommand, testCommand, whoamiCommand, listProvidersCommand, contextEnginesListCommand, contextEnginesCommand, loginCommand2, refreshCatalogCommand, llmCommand;
+var API_KEY_FLAG_DEPRECATION, addCommand7, listCommand11, removeCommand4, useCommand, profileCommand, testCommand, whoamiCommand, listProvidersCommand, contextEnginesListCommand, contextEnginesCommand, loginCommand2, refreshCatalogCommand, providersCommand, healthCommand4, fitCommand, llmCommand;
 var init_llm3 = __esm({
   "packages/cleo/src/cli/commands/llm.ts"() {
     "use strict";
@@ -61995,6 +62235,170 @@ var init_llm3 = __esm({
         }
       }
     });
+    providersCommand = defineCommand({
+      meta: {
+        name: "providers",
+        description: "Show provisioning state, reachability, and resolver scores for all builtin LLM providers (DHQ-081)."
+      },
+      args: {
+        json: {
+          type: "boolean",
+          description: "Output as JSON"
+        },
+        role: {
+          type: "string",
+          description: "Role to compute scores against (default: consolidation). One of: consolidation, judgement, hygiene, extraction, derivation."
+        }
+      },
+      async run({ args }) {
+        const { enumerateProvisionedProviders, roleTierFor } = await import(
+          /* webpackIgnore: true */
+          "@cleocode/core/llm/cross-provider-selector"
+        );
+        const typedArgs = args;
+        const role = typeof typedArgs["role"] === "string" ? typedArgs["role"] : "consolidation";
+        const taskTier = roleTierFor(role);
+        const providers = await enumerateProvisionedProviders(taskTier);
+        const provisioned = providers.filter((p) => p.provisioningState === "provisioned");
+        const winner = provisioned.length > 0 ? provisioned.reduce(
+          (best, p) => (p.resolverScore ?? -Infinity) > (best.resolverScore ?? -Infinity) ? p : best
+        ) : null;
+        const envelope = {
+          providers,
+          implicitFallbackWouldUse: "anthropic",
+          explainCrossProvider: {
+            winner: winner?.id ?? null,
+            scores: Object.fromEntries(providers.map((p) => [p.id, p.resolverScore ?? 0])),
+            reason: winner ? `${winner.id} (tier: ${winner.tier}, score: ${winner.resolverScore}) selected as best provisioned provider for role '${role}'` : `No provisioned provider found; falling back to anthropic implicit fallback`
+          }
+        };
+        if (isHumanOutput() && !typedArgs["json"]) {
+          const lines = ["", "LLM Providers \u2014 Provisioning State", "=".repeat(40)];
+          for (const p of providers) {
+            const star = p.id === winner?.id ? " \u2605" : "";
+            const runnable = p.machineRunnable === null ? "" : ` [local:${p.machineRunnable ? "up" : "down"}]`;
+            lines.push(
+              `  ${p.id.padEnd(12)}  ${p.provisioningState.padEnd(16)}  score:${String(p.resolverScore ?? "-").padStart(4)}  ${p.reachabilityState}${runnable}${star}`
+            );
+          }
+          if (winner) {
+            lines.push(
+              "",
+              `Winner: ${winner.id} \u2014 would pick model: ${winner.wouldPickModel ?? "unknown"}`
+            );
+          }
+          humanLine(lines.join("\n"));
+        } else {
+          cliOutput(envelope, { command: "llm-providers", operation: "llm.providers" });
+        }
+      }
+    });
+    healthCommand4 = defineCommand({
+      meta: {
+        name: "health",
+        description: "Show lightweight provisioning health for all builtin LLM providers (DHQ-081). Alias for cleo llm providers --brief."
+      },
+      args: {
+        json: {
+          type: "boolean",
+          description: "Output as JSON"
+        }
+      },
+      async run({ args }) {
+        const { enumerateProvisionedProviders } = await import(
+          /* webpackIgnore: true */
+          "@cleocode/core/llm/cross-provider-selector"
+        );
+        const typedArgs = args;
+        const providers = await enumerateProvisionedProviders("frontier");
+        const healthEnvelope = {
+          providers: providers.map((p) => ({
+            id: p.id,
+            displayName: p.displayName,
+            provisioningState: p.provisioningState,
+            reachabilityState: p.reachabilityState,
+            machineRunnable: p.machineRunnable
+          })),
+          implicitFallbackWouldUse: "anthropic"
+        };
+        if (isHumanOutput() && !typedArgs["json"]) {
+          const lines = ["", "LLM Health", "=".repeat(30)];
+          for (const p of healthEnvelope.providers) {
+            const icon = p.provisioningState === "provisioned" ? "\u2713" : "\u2717";
+            const runnable = p.machineRunnable === null ? "" : ` [local:${p.machineRunnable ? "up" : "down"}]`;
+            lines.push(
+              `  ${icon} ${p.id.padEnd(12)}  ${p.provisioningState.padEnd(16)}  ${p.reachabilityState}${runnable}`
+            );
+          }
+          humanLine(lines.join("\n"));
+        } else {
+          cliOutput(healthEnvelope, { command: "llm-health", operation: "llm.health" });
+        }
+      }
+    });
+    fitCommand = defineCommand({
+      meta: {
+        name: "fit",
+        description: "Rank 2\u20133 best-fit local open-weight models for this machine (RAM/VRAM check). Wizard building block for local Ollama setup."
+      },
+      args: {
+        json: {
+          type: "boolean",
+          description: "Output as JSON (LAFS envelope)"
+        },
+        "ollama-url": {
+          type: "string",
+          description: "Override Ollama base URL (default: http://localhost:11434)"
+        }
+      },
+      async run({ args }) {
+        const { rankLocalModelFit } = await import(
+          /* webpackIgnore: true */
+          "@cleocode/core/llm/local-model-fit"
+        );
+        const typedArgs = args;
+        const ollamaBaseUrl = typeof typedArgs["ollama-url"] === "string" ? typedArgs["ollama-url"] : "http://localhost:11434";
+        const envelope = await rankLocalModelFit({ ollamaBaseUrl });
+        if (isHumanOutput() && !typedArgs["json"]) {
+          const lines = ["", "Local Model Fit \u2014 Hardware Summary", "=".repeat(42)];
+          const hw = envelope.hardware;
+          lines.push(`  RAM total   : ${hw.totalRamGb.toFixed(1)} GB`);
+          lines.push(`  RAM avail   : ${hw.availableRamGb.toFixed(1)} GB`);
+          if (hw.vramTotalGb !== null) {
+            lines.push(`  VRAM total  : ${hw.vramTotalGb.toFixed(1)} GB (${hw.vramMethod})`);
+            lines.push(
+              `  VRAM free   : ${hw.vramFreeGb !== null ? hw.vramFreeGb.toFixed(1) + " GB" : "unknown"}`
+            );
+          } else {
+            lines.push(`  VRAM        : not detected (${hw.vramMethod})`);
+          }
+          lines.push(`  Ollama      : ${envelope.ollamaRunning ? "running" : "not running"}`);
+          if (envelope.pulledModels.length > 0) {
+            lines.push(`  Pulled      : ${envelope.pulledModels.map((m) => m.name).join(", ")}`);
+          }
+          lines.push("");
+          if (envelope.noRecommendationReason) {
+            lines.push("  No local model recommendations:");
+            lines.push(`  ${envelope.noRecommendationReason}`);
+          } else {
+            lines.push("Recommended Models", "-".repeat(42));
+            for (let i = 0; i < envelope.recommendations.length; i++) {
+              const rec = envelope.recommendations[i];
+              const pulled = rec.alreadyPulled ? " [already pulled]" : "";
+              lines.push(`  ${i + 1}. ${rec.candidate.displayName}${pulled}  (fit: ${rec.fitTier})`);
+              for (const reason of rec.reasons) {
+                lines.push(`       \u2022 ${reason}`);
+              }
+              lines.push(`     pull: ${rec.pullCommand}`);
+              lines.push("");
+            }
+          }
+          humanLine(lines.join("\n"));
+        } else {
+          cliOutput(envelope, { command: "llm-fit", operation: "llm.fit" });
+        }
+      }
+    });
     llmCommand = defineCommand({
       meta: {
         name: "llm",
@@ -62004,8 +62408,11 @@ var init_llm3 = __esm({
         add: addCommand7,
         "context-engines": contextEnginesCommand,
         cost: costCommand,
+        fit: fitCommand,
+        health: healthCommand4,
         list: listCommand11,
         login: loginCommand2,
+        providers: providersCommand,
         remove: removeCommand4,
         stream: streamCommand,
         use: useCommand,
@@ -62090,14 +62497,14 @@ async function readStdin() {
   if (process.stdin.isTTY) {
     return "";
   }
-  return new Promise((resolve12, reject) => {
+  return new Promise((resolve13, reject) => {
     let data = "";
     process.stdin.setEncoding("utf-8");
     process.stdin.on("data", (chunk) => {
       data += chunk;
     });
     process.stdin.on("end", () => {
-      resolve12(data.trim());
+      resolve13(data.trim());
     });
     process.stdin.on("error", reject);
   });
@@ -64478,7 +64885,7 @@ var nexus_exports = {};
 __export(nexus_exports, {
   nexusCommand: () => nexusCommand
 });
-import { appendFile as appendFile2, mkdir as mkdir4 } from "node:fs/promises";
+import { appendFile as appendFile2, mkdir as mkdir5 } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
 import path4 from "node:path";
 import { getProjectRoot as getProjectRoot53 } from "@cleocode/core";
@@ -64490,7 +64897,7 @@ async function appendDeprecationTelemetry(op, replacement) {
   try {
     const dateStr = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
     const dir = path4.join(homedir5(), ".local", "state", "cleo", "nexus-deprecation");
-    await mkdir4(dir, { recursive: true });
+    await mkdir5(dir, { recursive: true });
     const record = JSON.stringify({ ts: (/* @__PURE__ */ new Date()).toISOString(), op, replacement }) + "\n";
     await appendFile2(path4.join(dir, `${dateStr}.jsonl`), record, "utf8");
   } catch {
@@ -65692,13 +66099,13 @@ var init_nexus3 = __esm({
           if (!skipPrompt) {
             const { createInterface: createInterface5 } = await import("node:readline");
             const rl = createInterface5({ input: process.stdin, output: process.stdout });
-            const confirmed = await new Promise((resolve12) => {
+            const confirmed = await new Promise((resolve13) => {
               rl.question(
                 `
 [nexus] Delete ${matchCount} project(s) from the registry? [y/N] `,
                 (answer) => {
                   rl.close();
-                  resolve12(answer.trim().toLowerCase() === "y");
+                  resolve13(answer.trim().toLowerCase() === "y");
                 }
               );
             });
@@ -66997,7 +67404,7 @@ __export(orchestrate_exports, {
   formatRollupTable: () => formatRollupTable,
   orchestrateCommand: () => orchestrateCommand
 });
-import { execFileSync as execFileSync3 } from "node:child_process";
+import { execFileSync as execFileSync4 } from "node:child_process";
 import { orchestration } from "@cleocode/core";
 import { BUILD_CONFIG as BUILD_CONFIG2, getProjectRoot as getProjectRoot54 } from "@cleocode/core/internal";
 function formatRollupTable(rollup) {
@@ -67106,7 +67513,7 @@ var init_orchestrate3 = __esm({
           let blocked = false;
           let note = "merge queue not enabled";
           try {
-            const raw = execFileSync3(
+            const raw = execFileSync4(
               "gh",
               ["api", `repos/${repo}/merge-queue`, "--jq", ".entries | length"],
               { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"], timeout: 15e3 }
@@ -68579,8 +68986,8 @@ var project_exports = {};
 __export(project_exports, {
   projectCommand: () => projectCommand
 });
-import { existsSync as existsSync17, statSync } from "node:fs";
-import { resolve as resolve8 } from "node:path";
+import { existsSync as existsSync18, statSync } from "node:fs";
+import { resolve as resolve9 } from "node:path";
 import { moveProject, projectLifecycle, renameProject } from "@cleocode/core";
 function formatSuccessSection(header, icon, items) {
   const prefix = icon ? `${icon} ` : "";
@@ -68621,8 +69028,8 @@ var init_project = __esm({
       async run({ args }) {
         const newPathRaw = args["newPath"];
         const dryRun = args["dry-run"] ?? false;
-        const newPath = resolve8(newPathRaw);
-        if (!dryRun && existsSync17(newPath) && statSync(newPath).isFile()) {
+        const newPath = resolve9(newPathRaw);
+        if (!dryRun && existsSync18(newPath) && statSync(newPath).isFile()) {
           cliOutput(formatErrorSection("E_INVALID_PATH", `newPath is not a directory: ${newPath}`), {
             command: "project",
             operation: "project.move"
@@ -69299,7 +69706,7 @@ var relates_exports = {};
 __export(relates_exports, {
   relatesCommand: () => relatesCommand
 });
-import { readFile as readFile5 } from "node:fs/promises";
+import { readFile as readFile6 } from "node:fs/promises";
 var suggestCommand2, addCommand8, addBatchCommand2, discoverCommand3, removeCommand5, listCommand17, relatesCommand;
 var init_relates = __esm({
   "packages/cleo/src/cli/commands/relates.ts"() {
@@ -69394,15 +69801,15 @@ var init_relates = __esm({
         }
       },
       async run({ args }) {
-        const input2 = args.file === "-" ? await new Promise((resolve12, reject) => {
+        const input2 = args.file === "-" ? await new Promise((resolve13, reject) => {
           let data = "";
           process.stdin.setEncoding("utf8");
           process.stdin.on("data", (chunk) => {
             data += chunk;
           });
-          process.stdin.on("end", () => resolve12(data));
+          process.stdin.on("end", () => resolve13(data));
           process.stdin.on("error", reject);
-        }) : await readFile5(args.file, "utf8");
+        }) : await readFile6(args.file, "utf8");
         const parsed = JSON.parse(input2);
         const payload = Array.isArray(parsed) ? { relations: parsed } : parsed;
         await dispatchFromCli(
@@ -69921,12 +70328,26 @@ var init_release3 = __esm({
           type: "boolean",
           description: "Reconcile a rollback rather than a publish (deferred to T9528)"
         },
+        /**
+         * T11977 / DHQ-080: tag-driven path dry-run.
+         *
+         * When the release plan file is absent (tag-driven publish with no prior
+         * `cleo release plan`), `--dry-run` synthesises the minimal plan from the
+         * git tag + CHANGELOG.md + merged-PR history and prints the derivation
+         * WITHOUT writing to the DB. Safe to run against the live project — produces
+         * no side effects.
+         */
+        "dry-run": {
+          type: "boolean",
+          description: "On tag-driven path (no plan file): synthesise and print the plan derivation without writing to DB"
+        },
         json: { type: "boolean", description: "Emit LAFS envelope" }
       },
       async run({ args }) {
         const result = await release3.releaseReconcileV2(args.version, {
           fromWorkflow: args["from-workflow"] === true,
-          rollback: args.rollback === true
+          rollback: args.rollback === true,
+          dryRun: args["dry-run"] === true
         });
         if (result.success) {
           cliOutput(result.data, { command: "release", operation: "release.reconcile" });
@@ -71194,8 +71615,8 @@ var revert_exports = {};
 __export(revert_exports, {
   revertCommand: () => revertCommand
 });
-import { readFile as readFile6 } from "node:fs/promises";
-import { join as join28 } from "node:path";
+import { readFile as readFile7 } from "node:fs/promises";
+import { join as join29 } from "node:path";
 import { cwd as processCwd2 } from "node:process";
 import { E_RECEIPT_NOT_FOUND } from "@cleocode/core/sentient/chain-walker.js";
 import { SENTIENT_STATE_FILE } from "@cleocode/core/sentient/daemon.js";
@@ -71220,7 +71641,7 @@ async function loadOwnerAttestation(attestationFilePath) {
   let raw;
   if (attestationFilePath) {
     try {
-      raw = await readFile6(attestationFilePath, "utf-8");
+      raw = await readFile7(attestationFilePath, "utf-8");
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
       throw new Error(`Failed to read attestation file "${attestationFilePath}": ${message}`);
@@ -71248,9 +71669,9 @@ async function loadOwnerAttestation(attestationFilePath) {
   return obj;
 }
 async function loadOwnerPubkeys(projectRoot) {
-  const path6 = join28(projectRoot, OWNER_PUBKEYS_FILE);
+  const path6 = join29(projectRoot, OWNER_PUBKEYS_FILE);
   try {
-    const raw = await readFile6(path6, "utf-8");
+    const raw = await readFile7(path6, "utf-8");
     const parsed = JSON.parse(raw);
     if (Array.isArray(parsed)) {
       return new Set(parsed.filter((k) => typeof k === "string"));
@@ -71332,7 +71753,7 @@ var init_revert = __esm({
         if (attestation && allowedPubkeys.size > 0 && !allowedPubkeys.has(attestation.ownerPubkey)) {
           emitFailure2(
             E_OWNER_ATTESTATION_REQUIRED,
-            `Attestation pubkey "${attestation.ownerPubkey}" is not in the owner allowlist at ${join28(projectRoot, OWNER_PUBKEYS_FILE)}`,
+            `Attestation pubkey "${attestation.ownerPubkey}" is not in the owner allowlist at ${join29(projectRoot, OWNER_PUBKEYS_FILE)}`,
             jsonMode
           );
         }
@@ -71385,7 +71806,7 @@ ${lines}`
             identity,
             includeHuman
           });
-          const statePath = join28(projectRoot, SENTIENT_STATE_FILE);
+          const statePath = join29(projectRoot, SENTIENT_STATE_FILE);
           const state = await readSentientState(statePath);
           emitSuccess(
             {
@@ -71945,8 +72366,8 @@ __export(self_update_exports, {
   selfUpdateCommand: () => selfUpdateCommand
 });
 import { execFile } from "node:child_process";
-import { readFile as readFile7 } from "node:fs/promises";
-import { join as join29 } from "node:path";
+import { readFile as readFile8 } from "node:fs/promises";
+import { join as join30 } from "node:path";
 import * as readline3 from "node:readline";
 import { promisify } from "node:util";
 import {
@@ -71954,14 +72375,14 @@ import {
   CleoError as CleoError10,
   checkAllRegisteredProjects as checkAllRegisteredProjects2,
   checkStorageMigration,
-  getCleoHome as getCleoHome4,
+  getCleoHome as getCleoHome5,
   getRuntimeDiagnostics as getRuntimeDiagnostics2,
   runUpgrade
 } from "@cleocode/core/internal";
 async function getCurrentVersion() {
-  const cleoHome = getCleoHome4();
+  const cleoHome = getCleoHome5();
   try {
-    const content = await readFile7(join29(cleoHome, "VERSION"), "utf-8");
+    const content = await readFile8(join30(cleoHome, "VERSION"), "utf-8");
     return (content.split("\n")[0] ?? "unknown").trim();
   } catch {
     return "unknown";
@@ -72006,7 +72427,7 @@ async function getDistTagVersion(tag) {
   }
 }
 async function writeRuntimeVersionMetadata(mode, source, version) {
-  const cleoHome = getCleoHome4();
+  const cleoHome = getCleoHome5();
   const lines = [
     version,
     `mode=${mode}`,
@@ -72014,8 +72435,8 @@ async function writeRuntimeVersionMetadata(mode, source, version) {
     `installed=${(/* @__PURE__ */ new Date()).toISOString()}`
   ];
   await import("node:fs/promises").then(
-    ({ writeFile: writeFile4, mkdir: mkdir6 }) => mkdir6(cleoHome, { recursive: true }).then(
-      () => writeFile4(join29(cleoHome, "VERSION"), `${lines.join("\n")}
+    ({ writeFile: writeFile4, mkdir: mkdir7 }) => mkdir7(cleoHome, { recursive: true }).then(
+      () => writeFile4(join30(cleoHome, "VERSION"), `${lines.join("\n")}
 `, "utf-8")
     )
   );
@@ -72053,11 +72474,11 @@ async function runPostUpdateDiagnostics(opts) {
         input: process.stdin,
         output: process.stdout
       });
-      shouldMigrate = await new Promise((resolve12) => {
+      shouldMigrate = await new Promise((resolve13) => {
         rl.question("  Do you want to run the upgrade now? [Y/n] ", (answer) => {
           rl.close();
           const clean = answer.trim().toLowerCase();
-          resolve12(clean === "" || clean === "y" || clean === "yes");
+          resolve13(clean === "" || clean === "y" || clean === "yes");
         });
       });
     }
@@ -72495,7 +72916,7 @@ __export(sentient_exports, {
   promptAcceptExecution: () => promptAcceptExecution,
   sentientCommand: () => sentientCommand
 });
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 import { cwd as processCwd3, stdin, stdout } from "node:process";
 import { createInterface as createInterface4 } from "node:readline/promises";
 import {
@@ -72584,7 +73005,7 @@ var init_sentient3 = __esm({
             return;
           }
           if (dryRun) {
-            const statePath2 = join30(projectRoot, SENTIENT_STATE_FILE2);
+            const statePath2 = join31(projectRoot, SENTIENT_STATE_FILE2);
             const outcome = await safeRunTick({ projectRoot, statePath: statePath2, dryRun: true });
             emitSuccess2(
               { dryRun: true, outcome },
@@ -72700,7 +73121,7 @@ Logs:  ${logPath}`
         const jsonMode = args.json === true;
         const dryRun = args["dry-run"] === true;
         try {
-          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join31(projectRoot, SENTIENT_STATE_FILE2);
           const outcome = await safeRunTick({ projectRoot, statePath, dryRun });
           emitSuccess2(
             { outcome, dryRun },
@@ -72792,7 +73213,7 @@ Logs:  ${logPath}`
             return;
           }
           await db.update(tasks).set({ status: "pending", updatedAt: now }).where(eq2(tasks.id, id)).run();
-          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join31(projectRoot, SENTIENT_STATE_FILE2);
           const state = await readSentientState2(statePath);
           await patchSentientState(statePath, {
             tier2Stats: {
@@ -72888,7 +73309,7 @@ Logs:  ${logPath}`
             return;
           }
           await db.update(tasks).set({ status: "cancelled", cancellationReason: reason, cancelledAt: now, updatedAt: now }).where(eq2(tasks.id, id)).run();
-          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join31(projectRoot, SENTIENT_STATE_FILE2);
           const state = await readSentientState2(statePath);
           await patchSentientState(statePath, {
             tier2Stats: {
@@ -72933,7 +73354,7 @@ Logs:  ${logPath}`
         const projectRoot = resolveProjectRoot5(args.project);
         const jsonMode = args.json === true;
         try {
-          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join31(projectRoot, SENTIENT_STATE_FILE2);
           const outcome = await safeRunProposeTick({ projectRoot, statePath });
           emitSuccess2(
             { outcome },
@@ -72953,7 +73374,7 @@ Logs:  ${logPath}`
         const projectRoot = resolveProjectRoot5(args.project);
         const jsonMode = args.json === true;
         try {
-          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join31(projectRoot, SENTIENT_STATE_FILE2);
           const updated = await patchSentientState(statePath, { tier2Enabled: true });
           emitSuccess2({ tier2Enabled: updated.tier2Enabled }, jsonMode, "Tier-2 proposals enabled");
         } catch (err) {
@@ -72972,7 +73393,7 @@ Logs:  ${logPath}`
         const projectRoot = resolveProjectRoot5(args.project);
         const jsonMode = args.json === true;
         try {
-          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join31(projectRoot, SENTIENT_STATE_FILE2);
           const updated = await patchSentientState(statePath, { tier2Enabled: false });
           emitSuccess2({ tier2Enabled: updated.tier2Enabled }, jsonMode, "Tier-2 proposals disabled");
         } catch (err) {
@@ -73003,7 +73424,7 @@ Logs:  ${logPath}`
         const projectRoot = resolveProjectRoot5(args.project);
         const jsonMode = args.json === true;
         try {
-          const statePath = join30(projectRoot, SENTIENT_STATE_FILE2);
+          const statePath = join31(projectRoot, SENTIENT_STATE_FILE2);
           const state = await readSentientState2(statePath);
           emitSuccess2(
             {
@@ -73785,7 +74206,7 @@ async function promptOwnerAuthPassword(sessionName) {
     terminal: true
   });
   process.stderr.write(`[cleo] Enter owner-auth password for session "${sessionName}": `);
-  const password = await new Promise((resolve12) => {
+  const password = await new Promise((resolve13) => {
     if (process.stdin.setRawMode) {
       process.stdin.setRawMode(
         true
@@ -73803,10 +74224,10 @@ async function promptOwnerAuthPassword(sessionName) {
           );
         }
         process.stderr.write("\n");
-        resolve12(pw);
+        resolve13(pw);
       } else if (ch === "") {
         process.stderr.write("\n[cleo] Cancelled.\n");
-        resolve12("");
+        resolve13("");
       } else if (ch === "\x7F" || ch === "\b") {
         pw = pw.slice(0, -1);
       } else {
@@ -76726,12 +77147,12 @@ var init_telemetry2 = __esm({
 
 // packages/cleo/src/cli/commands/templates/lib.ts
 import { readFileSync as readFileSync14 } from "node:fs";
-import { isAbsolute as isAbsolute3, resolve as resolve9 } from "node:path";
+import { isAbsolute as isAbsolute3, resolve as resolve10 } from "node:path";
 import { getProjectRoot as getProjectRoot58 } from "@cleocode/core";
 import { resolveSourcePathAbsolute } from "@cleocode/core/templates/registry";
 function resolveProjectRoot6(raw) {
   if (typeof raw === "string" && raw.length > 0) {
-    return isAbsolute3(raw) ? raw : resolve9(process.cwd(), raw);
+    return isAbsolute3(raw) ? raw : resolve10(process.cwd(), raw);
   }
   return getProjectRoot58();
 }
@@ -76752,8 +77173,8 @@ var init_lib = __esm({
 });
 
 // packages/cleo/src/cli/commands/templates/diff.ts
-import { existsSync as existsSync18, readFileSync as readFileSync15 } from "node:fs";
-import { join as join31 } from "node:path";
+import { existsSync as existsSync19, readFileSync as readFileSync15 } from "node:fs";
+import { join as join32 } from "node:path";
 import { getTemplateById } from "@cleocode/core/templates/registry";
 function unifiedDiff(a, b) {
   const aLines = a.length === 0 ? [] : a.split("\n");
@@ -76823,7 +77244,7 @@ var init_diff = __esm({
         let rendered;
         try {
           projectRoot = resolveProjectRoot6(args["project"]);
-          installPath = join31(projectRoot, entry.installPath);
+          installPath = join32(projectRoot, entry.installPath);
           const source = readTemplateSource(entry);
           rendered = applySubstitution(entry, source).rendered;
         } catch (err) {
@@ -76834,7 +77255,7 @@ var init_diff = __esm({
           process.exit(1 /* GENERAL_ERROR */);
           return;
         }
-        if (!existsSync18(installPath)) {
+        if (!existsSync19(installPath)) {
           const missingResult = {
             id,
             installPath,
@@ -76873,8 +77294,8 @@ ${unifiedDiff("", rendered)}`
 });
 
 // packages/cleo/src/cli/commands/templates/install.ts
-import { existsSync as existsSync19, mkdirSync as mkdirSync5, readFileSync as readFileSync16, writeFileSync as writeFileSync5 } from "node:fs";
-import { dirname as dirname9, join as join32 } from "node:path";
+import { existsSync as existsSync20, mkdirSync as mkdirSync5, readFileSync as readFileSync16, writeFileSync as writeFileSync5 } from "node:fs";
+import { dirname as dirname10, join as join33 } from "node:path";
 import { getTemplateById as getTemplateById2 } from "@cleocode/core/templates/registry";
 var templatesInstallCommand;
 var init_install = __esm({
@@ -76928,7 +77349,7 @@ var init_install = __esm({
         let substituted;
         try {
           projectRoot = resolveProjectRoot6(args["project"]);
-          installPath = join32(projectRoot, entry.installPath);
+          installPath = join33(projectRoot, entry.installPath);
           const source = readTemplateSource(entry);
           const sub = applySubstitution(entry, source);
           rendered = sub.rendered;
@@ -76941,7 +77362,7 @@ var init_install = __esm({
           process.exit(1 /* GENERAL_ERROR */);
           return;
         }
-        if (existsSync19(installPath)) {
+        if (existsSync20(installPath)) {
           const current = readFileSync16(installPath, "utf8");
           if (current === rendered) {
             const noopResult = {
@@ -76959,7 +77380,7 @@ var init_install = __esm({
           }
         }
         try {
-          mkdirSync5(dirname9(installPath), { recursive: true });
+          mkdirSync5(dirname10(installPath), { recursive: true });
           writeFileSync5(installPath, rendered, "utf8");
         } catch (err) {
           const message = err instanceof Error ? err.message : String(err);
@@ -77090,8 +77511,8 @@ var init_show3 = __esm({
 });
 
 // packages/cleo/src/cli/commands/templates/upgrade.ts
-import { existsSync as existsSync20, mkdirSync as mkdirSync6, readFileSync as readFileSync17, writeFileSync as writeFileSync6 } from "node:fs";
-import { dirname as dirname10, join as join33 } from "node:path";
+import { existsSync as existsSync21, mkdirSync as mkdirSync6, readFileSync as readFileSync17, writeFileSync as writeFileSync6 } from "node:fs";
+import { dirname as dirname11, join as join34 } from "node:path";
 import { getTemplateById as getTemplateById4 } from "@cleocode/core/templates/registry";
 var templatesUpgradeCommand;
 var init_upgrade2 = __esm({
@@ -77153,7 +77574,7 @@ var init_upgrade2 = __esm({
         let rendered;
         try {
           projectRoot = resolveProjectRoot6(args["project"]);
-          installPath = join33(projectRoot, entry.installPath);
+          installPath = join34(projectRoot, entry.installPath);
           const source = readTemplateSource(entry);
           rendered = applySubstitution(entry, source).rendered;
         } catch (err) {
@@ -77166,7 +77587,7 @@ var init_upgrade2 = __esm({
         }
         const previewOnly = args["diff"] === true;
         const accept = args["accept"] === true;
-        const current = existsSync20(installPath) ? readFileSync17(installPath, "utf8") : null;
+        const current = existsSync21(installPath) ? readFileSync17(installPath, "utf8") : null;
         const diffBody = current === null ? "" : current === rendered ? "" : unifiedDiff(current, rendered);
         let outcome;
         let reason;
@@ -77201,7 +77622,7 @@ var init_upgrade2 = __esm({
         }
         if (shouldWrite) {
           try {
-            mkdirSync6(dirname10(installPath), { recursive: true });
+            mkdirSync6(dirname11(installPath), { recursive: true });
             writeFileSync6(installPath, rendered, "utf8");
           } catch (err) {
             const message = err instanceof Error ? err.message : String(err);
@@ -77716,7 +78137,7 @@ __export(transcript_exports, {
   transcriptCommand: () => transcriptCommand
 });
 import { homedir as homedir6 } from "node:os";
-import { join as join34 } from "node:path";
+import { join as join35 } from "node:path";
 import { getProjectRoot as getProjectRoot60 } from "@cleocode/core";
 import {
   parseDurationMs,
@@ -77770,7 +78191,7 @@ var init_transcript = __esm({
           }
           return;
         }
-        const projectsDir = args["projects-dir"] ?? join34(homedir6(), ".claude", "projects");
+        const projectsDir = args["projects-dir"] ?? join35(homedir6(), ".claude", "projects");
         try {
           const result = await scanTranscripts(projectsDir);
           cliOutput(
@@ -78076,7 +78497,7 @@ var init_transcript = __esm({
           process.exit(2);
           return;
         }
-        const projectsDir = args["projects-dir"] ?? join34(homedir6(), ".claude", "projects");
+        const projectsDir = args["projects-dir"] ?? join35(homedir6(), ".claude", "projects");
         try {
           const pruneResult = await pruneTranscripts({
             olderThanMs,
@@ -78130,6 +78551,131 @@ var init_transcript = __esm({
   }
 });
 
+// packages/cleo/src/cli/lib/gateway-auto-start.ts
+var gateway_auto_start_exports = {};
+__export(gateway_auto_start_exports, {
+  GATEWAY_DEFAULT_HOST: () => GATEWAY_DEFAULT_HOST,
+  GATEWAY_DEFAULT_PORT: () => GATEWAY_DEFAULT_PORT,
+  GATEWAY_WAIT_TIMEOUT_MS: () => GATEWAY_WAIT_TIMEOUT_MS,
+  pollPort: () => pollPort,
+  probePort: () => probePort,
+  shouldAutoStartGateway: () => shouldAutoStartGateway,
+  spawnGatewayIfDown: () => spawnGatewayIfDown
+});
+import { once } from "node:events";
+import { createWriteStream } from "node:fs";
+import { mkdir as mkdir6 } from "node:fs/promises";
+import * as net from "node:net";
+import { dirname as dirname12, join as join36 } from "node:path";
+import { fileURLToPath as fileURLToPath7 } from "node:url";
+import { spawnWrapped } from "@cleocode/core/resources/spawn-wrapper.js";
+function shouldAutoStartGateway(config) {
+  if (config === null || config === void 0) return true;
+  const daemon = config["daemon"];
+  if (daemon === null || daemon === void 0) return true;
+  if (typeof daemon !== "object") return true;
+  const daemonObj = daemon;
+  const autoStart = daemonObj["autoStart"];
+  if (autoStart === false) return false;
+  return true;
+}
+function probePort(port, host = GATEWAY_DEFAULT_HOST) {
+  return new Promise((resolve13) => {
+    const socket = net.connect({ port, host });
+    socket.once("connect", () => {
+      socket.destroy();
+      resolve13(true);
+    });
+    socket.once("error", () => {
+      socket.destroy();
+      resolve13(false);
+    });
+  });
+}
+async function pollPort(port, host, timeoutMs) {
+  const deadline = Date.now() + timeoutMs;
+  let delay = POLL_INITIAL_DELAY_MS;
+  while (Date.now() < deadline) {
+    const ok = await probePort(port, host);
+    if (ok) return true;
+    const remaining = deadline - Date.now();
+    const wait = Math.min(delay, remaining, POLL_MAX_DELAY_MS);
+    if (wait <= 0) break;
+    await new Promise((r) => setTimeout(r, wait));
+    delay = Math.min(delay * 2, POLL_MAX_DELAY_MS);
+  }
+  return probePort(port, host);
+}
+function resolveCliEntryPath() {
+  const thisDir = dirname12(fileURLToPath7(import.meta.url));
+  const pkgRoot = join36(thisDir, "..", "..", "..", "..", "..");
+  return join36(pkgRoot, "dist", "cli", "index.js");
+}
+async function spawnGatewayIfDown(opts = {}) {
+  const port = opts.port ?? GATEWAY_DEFAULT_PORT;
+  const host = opts.host ?? GATEWAY_DEFAULT_HOST;
+  const waitTimeoutMs = opts.waitTimeoutMs ?? GATEWAY_WAIT_TIMEOUT_MS;
+  if (await probePort(port, host)) {
+    return { reachable: true, spawned: false };
+  }
+  let cliEntry;
+  try {
+    cliEntry = opts.cliEntryPath ?? resolveCliEntryPath();
+  } catch (err) {
+    const reason = `gateway auto-start: cannot resolve CLI entry path \u2014 ${err instanceof Error ? err.message : String(err)}`;
+    return { reachable: false, spawned: false, reason };
+  }
+  let outFd = "ignore";
+  let errFd = "ignore";
+  try {
+    const { getCleoLogDir } = await import("@cleocode/core");
+    const logDir = getCleoLogDir();
+    await mkdir6(logDir, { recursive: true });
+    const outStream = createWriteStream(join36(logDir, "gateway.log"), { flags: "a" });
+    const errStream = createWriteStream(join36(logDir, "gateway.err"), { flags: "a" });
+    await Promise.all([once(outStream, "open"), once(errStream, "open")]);
+    outFd = outStream;
+    errFd = errStream;
+  } catch {
+  }
+  const spawnArgs = ["daemon", "serve"];
+  if (port !== GATEWAY_DEFAULT_PORT) spawnArgs.push("--port", String(port));
+  if (host !== GATEWAY_DEFAULT_HOST) spawnArgs.push("--host", host);
+  try {
+    const { child } = spawnWrapped(
+      process.execPath,
+      [cliEntry, ...spawnArgs],
+      {
+        detached: true,
+        stdio: ["ignore", outFd, errFd],
+        env: { ...process.env, CLEO_GATEWAY_AUTO_STARTED: "1" }
+      },
+      { scopeClass: "daemon", scopeId: "gateway" }
+    );
+    child.unref();
+  } catch (err) {
+    const reason = `gateway auto-start: spawn failed \u2014 ${err instanceof Error ? err.message : String(err)}`;
+    return { reachable: false, spawned: false, reason };
+  }
+  const reachable = await pollPort(port, host, waitTimeoutMs);
+  return {
+    reachable,
+    spawned: true,
+    reason: reachable ? void 0 : "gateway did not become reachable within the timeout"
+  };
+}
+var GATEWAY_DEFAULT_PORT, GATEWAY_DEFAULT_HOST, GATEWAY_WAIT_TIMEOUT_MS, POLL_INITIAL_DELAY_MS, POLL_MAX_DELAY_MS;
+var init_gateway_auto_start = __esm({
+  "packages/cleo/src/cli/lib/gateway-auto-start.ts"() {
+    "use strict";
+    GATEWAY_DEFAULT_PORT = 7777;
+    GATEWAY_DEFAULT_HOST = "127.0.0.1";
+    GATEWAY_WAIT_TIMEOUT_MS = 1e4;
+    POLL_INITIAL_DELAY_MS = 100;
+    POLL_MAX_DELAY_MS = 1e3;
+  }
+});
+
 // packages/cleo/src/cli/lib/pi-tui-loader.ts
 function shapeCheck(candidate) {
   if (candidate === null || typeof candidate !== "object") return null;
@@ -78558,7 +79104,7 @@ async function fetchTaskRows(baseUrl) {
   }
 }
 function runInteractiveLoop(piTui, component, refresh) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve13) => {
     const terminal = new piTui.ProcessTerminal();
     const tui = new piTui.TUI(terminal);
     tui.addChild(component);
@@ -78574,7 +79120,7 @@ function runInteractiveLoop(piTui, component, refresh) {
         component.teardownWorkerPanel();
         dispose();
         tui.stop();
-        resolve12();
+        resolve13();
         return { consume: true };
       }
       if (data === "\x1B[C" || data === "l" || data === "	") {
@@ -78626,13 +79172,35 @@ async function runCockpit(options = {}, sink = (line) => process.stdout.write(`$
   const baseUrl = options.baseUrl ?? DEFAULT_TUI_BASE_URL;
   const dispatch = options.dispatch ?? dispatchWorker;
   const subscribe = options.subscribe ?? subscribeOrchestrateEvents;
-  const rows = await fetchTaskRows(baseUrl);
+  let gatewayAutoStarted = false;
+  const autoStart = options.autoStart !== false;
+  let rows = await fetchTaskRows(baseUrl);
+  if (rows === null && autoStart) {
+    let port;
+    let host;
+    try {
+      const u = new URL(baseUrl);
+      const parsed = Number.parseInt(u.port, 10);
+      port = Number.isFinite(parsed) && parsed > 0 ? parsed : void 0;
+      host = u.hostname || void 0;
+    } catch {
+    }
+    const spawnResult = await spawnGatewayIfDown({
+      ...options.spawnOpts ?? {},
+      ...port !== void 0 ? { port } : {},
+      ...host !== void 0 ? { host } : {}
+    });
+    if (spawnResult.reachable) {
+      gatewayAutoStarted = spawnResult.spawned;
+      rows = await fetchTaskRows(baseUrl);
+    }
+  }
   if (rows === null) {
     sink("CLEO cockpit: the daemon gateway is not reachable.");
     sink(`  Tried: ${baseUrl}/v1`);
     sink("  Start it with:  cleo daemon serve");
     sink("  (override the target with:  cleo tui --base-url <url>)");
-    return { outcome: "daemon-down", baseUrl, piTui: false };
+    return { outcome: "daemon-down", baseUrl, piTui: false, gatewayAutoStarted };
   }
   const board = buildKanbanBoard(rows);
   const piTuiOk = await isPiTuiAvailable();
@@ -78642,16 +79210,16 @@ async function runCockpit(options = {}, sink = (line) => process.stdout.write(`$
     if (!piTuiOk) {
       sink("");
       sink(PI_TUI_INSTALL_HINT);
-      return { outcome: "degraded-pi", baseUrl, piTui: false };
+      return { outcome: "degraded-pi", baseUrl, piTui: false, gatewayAutoStarted };
     }
-    return { outcome: "rendered", baseUrl, piTui: false };
+    return { outcome: "rendered", baseUrl, piTui: false, gatewayAutoStarted };
   }
   const piTui = await loadPiTui();
   if (piTui === null) {
     for (const line of renderKanbanBoardText(board)) sink(line);
     sink("");
     sink(PI_TUI_INSTALL_HINT);
-    return { outcome: "degraded-pi", baseUrl, piTui: false };
+    return { outcome: "degraded-pi", baseUrl, piTui: false, gatewayAutoStarted };
   }
   const component = new KanbanBoardComponent(board, { baseUrl, dispatch, subscribe });
   const refresh = async () => {
@@ -78659,12 +79227,13 @@ async function runCockpit(options = {}, sink = (line) => process.stdout.write(`$
     if (fresh !== null) component.setBoard(buildKanbanBoard(fresh));
   };
   await runInteractiveLoop(piTui, component, refresh);
-  return { outcome: "rendered", baseUrl, piTui: true };
+  return { outcome: "rendered", baseUrl, piTui: true, gatewayAutoStarted };
 }
 var DEFAULT_TUI_BASE_URL, DISPATCHABLE_LANES, KanbanBoardComponent;
 var init_cockpit = __esm({
   "packages/cleo/src/cli/lib/tui/cockpit.ts"() {
     "use strict";
+    init_gateway_auto_start();
     init_pi_tui_loader();
     init_dispatch();
     init_kanban_board();
@@ -79415,7 +79984,7 @@ var upgrade_exports = {};
 __export(upgrade_exports, {
   upgradeCommand: () => upgradeCommand
 });
-import { resolve as resolve10 } from "node:path";
+import { resolve as resolve11 } from "node:path";
 import { CleoError as CleoError12, diagnoseUpgrade, runUpgrade as runUpgrade2, upgradeWorkflows as upgradeWorkflows2 } from "@cleocode/core/internal";
 var workflowsSubcommand, upgradeCommand;
 var init_upgrade3 = __esm({
@@ -79455,7 +80024,7 @@ var init_upgrade3 = __esm({
           const dryRun = args["dry-run"] === true || args.check === true;
           const force = args.force === true && !dryRun;
           const result = await upgradeWorkflows2({
-            projectRoot: resolve10(process.cwd()),
+            projectRoot: resolve11(process.cwd()),
             templatesDir: getWorkflowTemplatesDir2(),
             dryRun,
             force
@@ -79709,223 +80278,38 @@ var init_verify = __esm({
   }
 });
 
-// packages/cleo/src/cli/web-subsystem.ts
-import { execFileSync as execFileSync4, spawn as spawn3 } from "node:child_process";
-import { mkdir as mkdir5, open, readFile as readFile8, rm, stat as stat2, writeFile as writeFile3 } from "node:fs/promises";
-import { join as join35 } from "node:path";
-import { getCleoHome as getCleoHome5 } from "@cleocode/core";
-import { defineSubsystem as defineSubsystem2 } from "@cleocode/runtime/daemon";
-function getWebPaths() {
-  const cleoHome = getCleoHome5();
-  return {
-    pidFile: join35(cleoHome, "web-server.pid"),
-    configFile: join35(cleoHome, "web-server.json"),
-    logDir: join35(cleoHome, "logs"),
-    logFile: join35(cleoHome, "logs", "web-server.log")
-  };
-}
-function isWebProcessRunning(pid) {
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function getWebStatus() {
-  const { pidFile, configFile } = getWebPaths();
-  try {
-    const pidStr = (await readFile8(pidFile, "utf-8")).trim();
-    const pid = Number.parseInt(pidStr, 10);
-    if (Number.isNaN(pid) || !isWebProcessRunning(pid)) {
-      return { running: false, pid: null, port: null, host: null, url: null };
-    }
-    let port = WEB_DEFAULT_PORT;
-    let host = WEB_DEFAULT_HOST;
-    try {
-      const config = JSON.parse(await readFile8(configFile, "utf-8"));
-      port = config.port ?? WEB_DEFAULT_PORT;
-      host = config.host ?? WEB_DEFAULT_HOST;
-    } catch {
-    }
-    return { running: true, pid, port, host, url: `http://${host}:${port}` };
-  } catch {
-    return { running: false, pid: null, port: null, host: null, url: null };
-  }
-}
-function createWebSubsystem(opts = {}) {
-  const port = opts.port ?? WEB_DEFAULT_PORT;
-  const host = opts.host ?? WEB_DEFAULT_HOST;
-  let live;
-  return defineSubsystem2({
-    name: WEB_SUBSYSTEM_NAME,
-    async start() {
-      const { pidFile, configFile, logFile, logDir } = getWebPaths();
-      const existing = await getWebStatus();
-      if (existing.running && existing.pid !== null) {
-        const ctx2 = {
-          pid: existing.pid,
-          pidFile,
-          logFile,
-          port: existing.port ?? port,
-          host: existing.host ?? host
-        };
-        live = ctx2;
-        return ctx2;
-      }
-      const projectRoot = process.env["CLEO_ROOT"] ?? process.cwd();
-      const studioDir = process.env["CLEO_STUDIO_DIR"] ?? join35(projectRoot, "packages", "studio", "build");
-      const webIndexPath = join35(studioDir, "index.js");
-      await mkdir5(logDir, { recursive: true });
-      await writeFile3(
-        configFile,
-        JSON.stringify({ port, host, startedAt: (/* @__PURE__ */ new Date()).toISOString() })
-      );
-      try {
-        await stat2(webIndexPath);
-      } catch {
-        try {
-          execFileSync4("pnpm", ["--filter", "@cleocode/studio", "run", "build"], {
-            cwd: projectRoot,
-            stdio: "ignore"
-          });
-        } catch {
-          throw new Error(
-            `Studio build failed. Run: pnpm --filter @cleocode/studio run build
-Logs: ${logFile}`
-          );
-        }
-      }
-      const logFileHandle = await open(logFile, "a");
-      const serverProcess = spawn3("node", [webIndexPath], {
-        cwd: studioDir,
-        env: {
-          ...process.env,
-          HOST: host,
-          PORT: String(port),
-          CLEO_ROOT: projectRoot
-        },
-        detached: true,
-        stdio: ["ignore", logFileHandle.fd, logFileHandle.fd]
-      });
-      serverProcess.unref();
-      const pidFileTmp = `${pidFile}.tmp`;
-      await writeFile3(pidFileTmp, String(serverProcess.pid));
-      await rm(pidFile, { force: true });
-      await writeFile3(pidFile, String(serverProcess.pid));
-      await rm(pidFileTmp, { force: true });
-      await logFileHandle.close();
-      let started = false;
-      for (let i = 0; i < STARTUP_POLL_ITERATIONS; i++) {
-        try {
-          const response = await fetch(`http://${host}:${port}/api/health`);
-          if (response.ok) {
-            started = true;
-            break;
-          }
-        } catch {
-        }
-        await new Promise((resolve12) => setTimeout(resolve12, 500));
-      }
-      if (!started) {
-        try {
-          process.kill(serverProcess.pid, "SIGTERM");
-        } catch {
-        }
-        await rm(pidFile, { force: true });
-        throw new Error("Studio web server failed to start within 15 seconds");
-      }
-      const ctx = {
-        pid: serverProcess.pid,
-        pidFile,
-        logFile,
-        port,
-        host
-      };
-      live = ctx;
-      return ctx;
-    },
-    healthProbe() {
-      if (live === void 0) {
-        const stopped = "stopped";
-        return {
-          child_id: WEB_SUBSYSTEM_NAME,
-          pid: 0,
-          state: stopped,
-          restart_count: 0,
-          detail: "not started"
-        };
-      }
-      const alive = isWebProcessRunning(live.pid);
-      const state = alive ? "running" : "stopped";
-      return {
-        child_id: WEB_SUBSYSTEM_NAME,
-        pid: alive ? live.pid : 0,
-        state,
-        restart_count: 0,
-        detail: alive ? `url=http://${live.host}:${live.port} pid=${live.pid}` : `pid=${live.pid} exited`
-      };
-    },
-    async shutdown(context) {
-      const { pidFile } = context;
-      if (!isWebProcessRunning(context.pid)) {
-        await rm(pidFile, { force: true });
-        live = void 0;
-        return;
-      }
-      try {
-        if (process.platform === "win32") {
-          spawn3("taskkill", ["/PID", String(context.pid), "/T"], { stdio: "ignore" });
-        } else {
-          process.kill(context.pid, "SIGTERM");
-        }
-      } catch {
-      }
-      for (let i = 0; i < SIGTERM_GRACE_ITERATIONS2; i++) {
-        if (!isWebProcessRunning(context.pid)) break;
-        await new Promise((resolve12) => setTimeout(resolve12, 500));
-      }
-      if (isWebProcessRunning(context.pid)) {
-        try {
-          if (process.platform === "win32") {
-            spawn3("taskkill", ["/PID", String(context.pid), "/F", "/T"], { stdio: "ignore" });
-          } else {
-            process.kill(context.pid, "SIGKILL");
-          }
-        } catch {
-        }
-      }
-      await rm(pidFile, { force: true });
-      live = void 0;
-    }
-  });
-}
-var WEB_DEFAULT_PORT, WEB_DEFAULT_HOST, WEB_SUBSYSTEM_NAME, SIGTERM_GRACE_ITERATIONS2, STARTUP_POLL_ITERATIONS;
-var init_web_subsystem = __esm({
-  "packages/cleo/src/cli/web-subsystem.ts"() {
-    "use strict";
-    WEB_DEFAULT_PORT = 3456;
-    WEB_DEFAULT_HOST = "127.0.0.1";
-    WEB_SUBSYSTEM_NAME = "cleo-web";
-    SIGTERM_GRACE_ITERATIONS2 = 60;
-    STARTUP_POLL_ITERATIONS = 30;
-  }
-});
-
 // packages/cleo/src/cli/commands/web.ts
 var web_exports = {};
 __export(web_exports, {
+  buildStudioUrl: () => buildStudioUrl,
+  openBrowser: () => openBrowser,
   webCommand: () => webCommand
 });
 import { spawn as spawn4 } from "node:child_process";
 import { rm as rm2 } from "node:fs/promises";
 import { CleoError as CleoError13, formatError as formatError5 } from "@cleocode/core";
+function buildStudioUrl(port, host) {
+  return `http://${host}:${port}`;
+}
+function openBrowser(url) {
+  try {
+    if (process.platform === "linux") {
+      spawn4("xdg-open", [url], { detached: true, stdio: "ignore" }).unref();
+    } else if (process.platform === "darwin") {
+      spawn4("open", [url], { detached: true, stdio: "ignore" }).unref();
+    } else if (process.platform === "win32") {
+      spawn4("cmd", ["/c", "start", "", url], { detached: true, stdio: "ignore" }).unref();
+    }
+  } catch {
+  }
+}
 var startCommand9, stopCommand6, restartCommand, statusCommand19, openCommand3, webCommand;
 var init_web = __esm({
   "packages/cleo/src/cli/commands/web.ts"() {
     "use strict";
     init_src2();
     init_dist();
+    init_gateway_auto_start();
     init_renderers();
     init_web_subsystem();
     startCommand9 = defineCommand({
@@ -80081,17 +80465,7 @@ var init_web = __esm({
             );
           }
           const url = status.url;
-          const platform = process.platform;
-          try {
-            if (platform === "linux") {
-              spawn4("xdg-open", [url], { detached: true, stdio: "ignore" }).unref();
-            } else if (platform === "darwin") {
-              spawn4("open", [url], { detached: true, stdio: "ignore" }).unref();
-            } else if (platform === "win32") {
-              spawn4("cmd", ["/c", "start", "", url], { detached: true, stdio: "ignore" }).unref();
-            }
-          } catch {
-          }
+          openBrowser(url);
           cliOutput({ url }, { command: "web", message: `Open browser to: ${url}` });
         } catch (err) {
           if (err instanceof CleoError13) {
@@ -80103,7 +80477,17 @@ var init_web = __esm({
       }
     });
     webCommand = defineCommand({
-      meta: { name: "web", description: "Manage CLEO Web UI server" },
+      meta: { name: "web", description: "Open CLEO Studio in the browser (starts gateway on demand)" },
+      args: {
+        port: {
+          type: "string",
+          description: `Gateway port (default ${GATEWAY_DEFAULT_PORT})`
+        },
+        host: {
+          type: "string",
+          description: `Gateway host (default ${GATEWAY_DEFAULT_HOST})`
+        }
+      },
       subCommands: {
         start: startCommand9,
         stop: stopCommand6,
@@ -80111,10 +80495,34 @@ var init_web = __esm({
         status: statusCommand19,
         open: openCommand3
       },
-      async run({ cmd, rawArgs }) {
+      async run({ cmd, rawArgs, args }) {
         const firstArg = rawArgs?.find((a) => !a.startsWith("-"));
         if (firstArg && cmd.subCommands && firstArg in cmd.subCommands) return;
-        await showUsage(cmd);
+        const portArg = args.port;
+        const hostArg = args.host;
+        const port = portArg !== void 0 && portArg.length > 0 ? Number.parseInt(portArg, 10) : GATEWAY_DEFAULT_PORT;
+        const host = hostArg ?? GATEWAY_DEFAULT_HOST;
+        let autoStart = true;
+        try {
+          const { getRawConfig } = await import("@cleocode/core");
+          const cfg = await getRawConfig();
+          autoStart = shouldAutoStartGateway(cfg);
+        } catch {
+        }
+        const studioUrl = buildStudioUrl(port, host);
+        if (autoStart) {
+          await spawnGatewayIfDown({ port, host });
+        }
+        openBrowser(studioUrl);
+        const urlNotice = `Opening Studio: ${studioUrl}
+`;
+        process.stderr.write(urlNotice);
+        const installNote = "  Note: Studio static bundle ships in T11979 (parallel lane).\n  If the page is blank, the bundle may not yet be deployed in this install.\n";
+        process.stderr.write(installNote);
+        cliOutput(
+          { url: studioUrl, port, host, gatewayAutoStart: autoStart },
+          { command: "web", message: `Studio URL: ${studioUrl}` }
+        );
       }
     });
   }
@@ -80126,7 +80534,7 @@ __export(workgraph_exports, {
   workgraphCommand: () => workgraphCommand
 });
 import { readFileSync as readFileSync19 } from "node:fs";
-import { resolve as resolve11 } from "node:path";
+import { resolve as resolve12 } from "node:path";
 var validateCommand10, applyCommand, planCommand4, structureCommand, statusCommand20, workgraphCommand;
 var init_workgraph2 = __esm({
   "packages/cleo/src/cli/commands/workgraph.ts"() {
@@ -80147,7 +80555,7 @@ var init_workgraph2 = __esm({
       async run({ args }) {
         const { validateWorkGraphScaffold } = await import("@cleocode/core/workgraph");
         const { cliOutput: cliOutput2 } = await Promise.resolve().then(() => (init_renderers(), renderers_exports));
-        const filePath = resolve11(String(args.file));
+        const filePath = resolve12(String(args.file));
         let raw;
         try {
           raw = readFileSync19(filePath, "utf-8");
@@ -80192,7 +80600,7 @@ var init_workgraph2 = __esm({
       async run({ args }) {
         const { applyWorkGraphScaffold } = await import("@cleocode/core/workgraph");
         const { cliOutput: cliOutput2 } = await Promise.resolve().then(() => (init_renderers(), renderers_exports));
-        const filePath = resolve11(String(args.file));
+        const filePath = resolve12(String(args.file));
         let raw;
         try {
           raw = readFileSync19(filePath, "utf-8");
@@ -80347,12 +80755,12 @@ __export(worktree_exports, {
 import readline4 from "node:readline";
 import { getProjectRoot as getProjectRoot61, listWorktrees as listWorktrees2 } from "@cleocode/core/internal";
 async function promptYesNo2(question) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve13) => {
     const rl = readline4.createInterface({ input: process.stdin, output: process.stdout });
     rl.question(`${question} [y/N]: `, (answer) => {
       rl.close();
       const trimmed = answer.trim().toLowerCase();
-      resolve12(trimmed === "y" || trimmed === "yes");
+      resolve13(trimmed === "y" || trimmed === "yes");
     });
   });
 }
@@ -80693,8 +81101,8 @@ init_describe_context();
 init_field_context();
 init_format_context();
 import { readFileSync as readFileSync20 } from "node:fs";
-import { dirname as dirname11, join as join37 } from "node:path";
-import { fileURLToPath as fileURLToPath6 } from "node:url";
+import { dirname as dirname13, join as join38 } from "node:path";
+import { fileURLToPath as fileURLToPath8 } from "node:url";
 import { enforceNodeVersion } from "@cleocode/paths";
 
 // packages/cleo/src/cli/generated/command-manifest.ts
@@ -81638,7 +82046,7 @@ var COMMAND_MANIFEST = [
   {
     exportName: "webCommand",
     name: "web",
-    description: "Manage CLEO Web UI server",
+    description: "Open CLEO Studio in the browser (starts gateway on demand)",
     load: async () => (await Promise.resolve().then(() => (init_web(), web_exports))).webCommand
   },
   {
@@ -81819,14 +82227,14 @@ function lazyCommand(meta, loader2) {
 init_did_you_mean();
 
 // packages/cleo/src/cli/lib/first-run-detection.ts
-import { existsSync as existsSync21 } from "node:fs";
-import { join as join36 } from "node:path";
+import { existsSync as existsSync22 } from "node:fs";
+import { join as join37 } from "node:path";
 async function detectFirstRun() {
   const envKey = process.env["ANTHROPIC_API_KEY"];
   if (typeof envKey === "string" && envKey.length > 0) return false;
   const { getCleoPlatformPaths } = await import("@cleocode/paths");
-  const configPath = join36(getCleoPlatformPaths().config, "config.json");
-  if (existsSync21(configPath)) return false;
+  const configPath = join37(getCleoPlatformPaths().config, "config.json");
+  if (existsSync22(configPath)) return false;
   try {
     const { getCredentialPool: getCredentialPool2 } = await import("@cleocode/core/llm/credential-pool.js");
     const pool = getCredentialPool2();
@@ -81837,7 +82245,7 @@ async function detectFirstRun() {
   return true;
 }
 function waitForEnterOrTimeout(timeoutMs) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve13) => {
     let resolved = false;
     const finish = () => {
       if (resolved) return;
@@ -81849,7 +82257,7 @@ function waitForEnterOrTimeout(timeoutMs) {
         process.stdin.pause();
       } catch {
       }
-      resolve12();
+      resolve13();
     };
     const onData = (chunk) => {
       const s = typeof chunk === "string" ? chunk : chunk.toString("utf8");
@@ -81947,7 +82355,7 @@ async function resolveSubCommandForHelp(cmd, rawArgs) {
 init_summary_context();
 enforceNodeVersion();
 function getPackageVersion() {
-  const pkgPath = join37(dirname11(fileURLToPath6(import.meta.url)), "../../package.json");
+  const pkgPath = join38(dirname13(fileURLToPath8(import.meta.url)), "../../package.json");
   const pkg = JSON.parse(readFileSync20(pkgPath, "utf-8"));
   return pkg.version;
 }
@@ -82030,6 +82438,19 @@ Valid modes: ${validModes.join(", ")}
   }
   setSummaryMode(summaryFlag);
   setDescribeMode(describeFlag);
+  if (argv.length === 0 && process.stdout.isTTY === true) {
+    const { runCockpit: runCockpit2 } = await Promise.resolve().then(() => (init_cockpit(), cockpit_exports));
+    let autoStart = true;
+    try {
+      const { getRawConfig } = await import("@cleocode/core");
+      const cfg = await getRawConfig();
+      const { shouldAutoStartGateway: shouldAutoStartGateway2 } = await Promise.resolve().then(() => (init_gateway_auto_start(), gateway_auto_start_exports));
+      autoStart = shouldAutoStartGateway2(cfg);
+    } catch {
+    }
+    await runCockpit2({ autoStart });
+    return;
+  }
   const isHelpOrVersion = argv.length === 0 || argv[0] === "--help" || argv[0] === "-h" || argv[0] === "--version" || argv[0] === "-V" || argv[0] === "help";
   if (argv[0] === "--version" || argv[0] === "-V") {
     const { cliOutput: cliOutput2 } = await Promise.resolve().then(() => (init_renderers(), renderers_exports));