@cortexkit/aft-pi 0.64.0 → 0.65.0

package/dist/index.js

@@ -8082,7 +8082,14 @@ var TERMINAL_BASH_STATUSES = new Set(TERMINAL_BG_TASK_STATUSES);
 function isTerminalBashStatus(status, compatibilityAliases = false) {
   return typeof status === "string" && (TERMINAL_BASH_STATUSES.has(status) || compatibilityAliases && (status === "cancelled" || status === "timeout"));
 }
+
 // ../aft-bridge/dist/bash-format.js
+function formatUnknownPtyExit(taskId, data) {
+  if (data.status !== "fate_unknown" || data.status_reason !== "AFT could not read how it ended") {
+    return;
+  }
+  return `Task ${taskId}: exit status unknown (AFT could not read how it ended)`;
+}
 function isTerminalStatus(status) {
   return isTerminalBashStatus(status);
 }
@@ -8114,6 +8121,79 @@ function relativePathEscapesRoot(rel, platform = process.platform) {
   return rel === ".." || rel.startsWith("../") || platform === "win32" && rel.startsWith("..\\") || (platform === "win32" ? win32.isAbsolute(rel) : posix.isAbsolute(rel));
 }
 
+// ../aft-bridge/dist/wait-clock.js
+var SUSPEND_SKEW_MS = 1000;
+var RESUME_ALLOWANCE_MS = 1e4;
+var DEADLINE_POLL_MS = 250;
+
+class WaitClock {
+  wallNow;
+  awakeNow;
+  wall;
+  awake;
+  skew = 0;
+  elapsed;
+  suspendCount = 0;
+  lastSuspendEnd = Number.NEGATIVE_INFINITY;
+  constructor(wallNow = Date.now, awakeNow = () => performance.now()) {
+    this.wallNow = wallNow;
+    this.awakeNow = awakeNow;
+    this.wall = wallNow();
+    this.awake = awakeNow();
+    this.elapsed = this.awake;
+  }
+  now() {
+    const wall = this.wallNow();
+    const awake = this.awakeNow();
+    const active = Math.max(0, awake - this.awake);
+    this.skew = Math.max(0, this.skew + wall - this.wall - active);
+    this.elapsed += active;
+    if (this.skew >= SUSPEND_SKEW_MS) {
+      this.elapsed += this.skew;
+      this.lastSuspendEnd = this.elapsed;
+      this.skew = 0;
+      this.suspendCount++;
+    }
+    this.wall = wall;
+    this.awake = awake;
+    return this.elapsed;
+  }
+}
+
+class RequestDeadline {
+  clock;
+  allowResume;
+  deadline;
+  suspendCount;
+  resumed = false;
+  constructor(clock, timeoutMs, allowResume = true) {
+    this.clock = clock;
+    this.allowResume = allowResume;
+    this.deadline = clock.now() + timeoutMs;
+    this.suspendCount = clock.suspendCount;
+  }
+  remaining() {
+    const now = this.clock.now();
+    if (now >= this.deadline && this.allowResume && !this.resumed && this.clock.suspendCount > this.suspendCount && this.clock.lastSuspendEnd >= this.deadline) {
+      this.resumed = true;
+      this.deadline = now + RESUME_ALLOWANCE_MS;
+    }
+    return Math.max(0, this.deadline - now);
+  }
+}
+function deadlineTimer(scheduler, remaining, expired) {
+  let timer;
+  const check = () => {
+    const left = remaining();
+    if (left <= 0)
+      expired();
+    else
+      timer = scheduler.setTimeout(check, Math.min(left, DEADLINE_POLL_MS));
+  };
+  check();
+  return () => scheduler.clearTimeout(timer);
+}
+
 // ../aft-bridge/dist/bash-hints.js
 var DEFAULT_PRIMARY_WATCH_TIMEOUT_MS = 30000;
 var MAX_WATCH_TIMEOUT_MS = 1800000;
@@ -8141,7 +8221,8 @@ function watchPollDelayMs(elapsedMs) {
   return 1000;
 }
 var watchClock = {
-  now: () => performance.now(),
+  source: new WaitClock,
+  now: () => watchClock.source.now(),
   sleep: abortableSleep
 };
 function abortableSleep(ms, signal) {
@@ -8287,6 +8368,7 @@ var GREP_SEARCH_AFT_SEARCH_HINT = "DO NOT search code by running grep/rg in bash
 var GREP_SEARCH_GREP_HINT = "DO NOT search code by running grep/rg in bash — it is unindexed, unranked, and serial. Use the `grep` tool instead (indexed and ranked).";
 var GREP_SEARCH_HINT_PREFIX = "DO NOT search code by running grep/rg in bash —";
 var GREP_SEARCH_FRESHNESS_WINDOW_MS = 60000;
+var MTIME_CLOCK_SLACK_MS = 1;
 function maybeAppendConflictsHint(output) {
   if (!output.includes("Automatic merge failed; fix conflicts"))
     return output;
@@ -8294,15 +8376,15 @@ function maybeAppendConflictsHint(output) {
     return output;
   return output + CONFLICT_HINT;
 }
-function commandInvokesCodeSearch(command) {
-  const statements = splitTopLevelStatements(command);
+function commandInvokesCodeSearch(command, platform = process.platform) {
+  const statements = splitTopLevelStatements(command, platform);
   if (statements === null)
     return false;
   for (const statement of statements) {
-    const firstStage = firstPipelineStage(statement);
+    const firstStage = firstPipelineStage(statement, platform);
     if (firstStage === null)
       continue;
-    const firstToken = readShellToken(firstStage, skipSpaces(firstStage, 0));
+    const firstToken = readShellToken(firstStage, skipSpaces(firstStage, 0), platform);
     if (firstToken === null)
       continue;
     if (firstToken.token === "grep" || firstToken.token === "rg")
@@ -8310,42 +8392,43 @@ function commandInvokesCodeSearch(command) {
   }
   return false;
 }
-function maybeAppendGrepSearchHint(output, command, aftSearchRegistered, projectRoot) {
+function maybeAppendGrepSearchHint(output, command, aftSearchRegistered, projectRoot, platform = process.platform, workdir) {
   if (output === "")
     return output;
-  if (!commandInvokesCodeSearch(command))
+  if (!commandInvokesCodeSearch(command, platform))
     return output;
   if (output.includes(GREP_SEARCH_HINT_PREFIX))
     return output;
-  if (shouldSuppressGrepSearchHint(command, projectRoot))
+  if (shouldSuppressGrepSearchHint(command, projectRoot, platform, workdir))
     return output;
   const hint = aftSearchRegistered ? GREP_SEARCH_AFT_SEARCH_HINT : GREP_SEARCH_GREP_HINT;
   return `${output}
 
 ${hint}`;
 }
-function shouldSuppressGrepSearchHint(command, projectRoot) {
-  const statements = splitTopLevelStatements(command);
+function shouldSuppressGrepSearchHint(command, projectRoot, platform, workdir) {
+  const statements = splitTopLevelStatements(command, platform);
   if (statements === null)
     return false;
-  if (allSearchPathOperandsAreDynamic(statements))
+  if (allSearchPathOperandsAreDynamic(statements, platform))
     return true;
   const root = projectRoot?.trim();
   if (!root)
     return false;
-  const resolvedRoot = path.resolve(root);
-  let effectiveCwd = resolvedRoot;
+  const paths = platform === "win32" ? path.win32 : path.posix;
+  const resolvedRoot = paths.resolve(root);
+  let effectiveCwd = paths.resolve(resolvedRoot, workdir ?? ".");
   let sawCodeSearchStatement = false;
   for (const statement of statements) {
-    const firstStage = firstPipelineStage(statement);
+    const firstStage = firstPipelineStage(statement, platform);
     if (firstStage === null)
       continue;
-    const firstToken = readShellToken(firstStage, skipSpaces(firstStage, 0));
+    const firstToken = readShellToken(firstStage, skipSpaces(firstStage, 0), platform);
     if (firstToken === null)
       continue;
     const head = firstToken.token;
     if (head === "cd") {
-      effectiveCwd = nextCwdAfterCd(effectiveCwd, firstStage, firstToken.end);
+      effectiveCwd = nextCwdAfterCd(effectiveCwd, firstStage, firstToken.end, platform);
       continue;
     }
     if (head !== "grep" && head !== "rg")
@@ -8353,20 +8436,23 @@ function shouldSuppressGrepSearchHint(command, projectRoot) {
     sawCodeSearchStatement = true;
     if (effectiveCwd === null)
       continue;
-    if (!isDirInsideProject(resolvedRoot, effectiveCwd))
+    if (!isDirInsideProject(resolvedRoot, effectiveCwd, platform))
       continue;
-    const operands = collectPathOperands(firstStage, firstToken.end);
+    const operands = collectPathOperands(firstStage, firstToken.end, platform);
     if (operands.length === 0)
       return false;
     let sawInProjectOperand = false;
     for (const operand of operands) {
       if (isDynamicPathOperand(operand))
         continue;
-      const resolvedOperand = resolvePathOperand(effectiveCwd, operand);
-      if (!isPathInsideProject(resolvedRoot, effectiveCwd, operand))
+      const resolvedOperand = resolvePathOperand(effectiveCwd, operand, platform);
+      if (!isPathInsideProject(resolvedRoot, effectiveCwd, operand, platform))
+        continue;
+      const suppress = shouldSuppressResolvedPath(resolvedOperand);
+      if (suppress === undefined)
         continue;
       sawInProjectOperand = true;
-      if (shouldSuppressResolvedPath(resolvedOperand))
+      if (suppress)
         return true;
     }
     if (sawInProjectOperand)
@@ -8374,19 +8460,19 @@ function shouldSuppressGrepSearchHint(command, projectRoot) {
   }
   return sawCodeSearchStatement;
 }
-function allSearchPathOperandsAreDynamic(statements) {
+function allSearchPathOperandsAreDynamic(statements, platform) {
   let sawDynamicOnlySearch = false;
   for (const statement of statements) {
-    const firstStage = firstPipelineStage(statement);
+    const firstStage = firstPipelineStage(statement, platform);
     if (firstStage === null)
       continue;
-    const firstToken = readShellToken(firstStage, skipSpaces(firstStage, 0));
+    const firstToken = readShellToken(firstStage, skipSpaces(firstStage, 0), platform);
     if (firstToken === null)
       continue;
     const head = firstToken.token;
     if (head !== "grep" && head !== "rg")
       continue;
-    const operands = collectPathOperands(firstStage, firstToken.end);
+    const operands = collectPathOperands(firstStage, firstToken.end, platform);
     if (operands.length === 0)
       return false;
     if (operands.some((operand) => !isDynamicPathOperand(operand)))
@@ -8395,11 +8481,12 @@ function allSearchPathOperandsAreDynamic(statements) {
   }
   return sawDynamicOnlySearch;
 }
-function nextCwdAfterCd(currentCwd, firstStage, afterCd) {
+function nextCwdAfterCd(currentCwd, firstStage, afterCd, platform) {
+  const paths = platform === "win32" ? path.win32 : path.posix;
   let index = skipSpaces(firstStage, afterCd);
   let target = null;
   while (index < firstStage.length) {
-    const tokenResult = readShellToken(firstStage, index);
+    const tokenResult = readShellToken(firstStage, index, platform);
     if (tokenResult === null)
       break;
     const { token, end } = tokenResult;
@@ -8414,28 +8501,29 @@ function nextCwdAfterCd(currentCwd, firstStage, afterCd) {
     break;
   }
   if (target === null)
-    return path.resolve(os.homedir());
+    return paths.resolve(os.homedir());
   if (target.includes("$") || target.includes("`"))
     return null;
-  const expanded = expandTilde(target);
-  if (path.isAbsolute(expanded))
-    return path.resolve(expanded);
+  const expanded = expandTilde(target, platform);
+  if (paths.isAbsolute(expanded))
+    return paths.resolve(expanded);
   if (currentCwd === null)
     return null;
-  return path.resolve(currentCwd, expanded);
+  return paths.resolve(currentCwd, expanded);
 }
-function isDirInsideProject(resolvedRoot, dir) {
-  const rel = path.relative(resolvedRoot, path.resolve(dir));
-  return !relativePathEscapesRoot(rel);
+function isDirInsideProject(resolvedRoot, dir, platform) {
+  const paths = platform === "win32" ? path.win32 : path.posix;
+  const rel = paths.relative(resolvedRoot, paths.resolve(dir));
+  return !relativePathEscapesRoot(rel, platform);
 }
-function collectPathOperands(firstStage, startAfterCommand) {
+function collectPathOperands(firstStage, startAfterCommand, platform) {
   const operands = [];
   let index = skipSpaces(firstStage, startAfterCommand);
   let sawPattern = false;
   let optionsEnded = false;
   let optionValue;
   while (index < firstStage.length) {
-    const tokenResult = readShellToken(firstStage, index);
+    const tokenResult = readShellToken(firstStage, index, platform);
     if (tokenResult === null)
       break;
     const { token, end } = tokenResult;
@@ -8494,22 +8582,25 @@ function collectPathOperands(firstStage, startAfterCommand) {
 function isDynamicPathOperand(token) {
   return token.startsWith("~") || token.includes("$") || token.includes("`");
 }
-function expandTilde(target) {
+function expandTilde(target, platform) {
   if (!target.startsWith("~"))
     return target;
   if (target === "~" || target.startsWith("~/")) {
-    return path.join(os.homedir(), target.slice(1));
+    const paths = platform === "win32" ? path.win32 : path.posix;
+    return paths.join(os.homedir(), target.slice(1));
   }
   return target;
 }
-function resolvePathOperand(projectRoot, operand) {
-  const expanded = expandTilde(operand);
-  return path.isAbsolute(expanded) ? path.resolve(expanded) : path.resolve(projectRoot, expanded);
+function resolvePathOperand(projectRoot, operand, platform) {
+  const paths = platform === "win32" ? path.win32 : path.posix;
+  const expanded = expandTilde(operand, platform);
+  return paths.isAbsolute(expanded) ? paths.resolve(expanded) : paths.resolve(projectRoot, expanded);
 }
-function isPathInsideProject(resolvedRoot, baseCwd, operand) {
-  const resolved = resolvePathOperand(baseCwd, operand);
-  const rel = path.relative(resolvedRoot, resolved);
-  return !relativePathEscapesRoot(rel);
+function isPathInsideProject(resolvedRoot, baseCwd, operand, platform) {
+  const paths = platform === "win32" ? path.win32 : path.posix;
+  const resolved = resolvePathOperand(baseCwd, operand, platform);
+  const rel = paths.relative(resolvedRoot, resolved);
+  return !relativePathEscapesRoot(rel, platform);
 }
 function shouldSuppressResolvedPath(resolved) {
   try {
@@ -8517,12 +8608,12 @@ function shouldSuppressResolvedPath(resolved) {
     if (stats.isFile())
       return true;
     const ageMs = Date.now() - stats.mtimeMs;
-    return ageMs >= 0 && ageMs < GREP_SEARCH_FRESHNESS_WINDOW_MS;
+    return ageMs > -MTIME_CLOCK_SLACK_MS && ageMs < GREP_SEARCH_FRESHNESS_WINDOW_MS;
   } catch {
-    return false;
+    return;
   }
 }
-function splitTopLevelStatements(command) {
+function splitTopLevelStatements(command, platform = process.platform) {
   const statements = [];
   let start = 0;
   let quote = "none";
@@ -8541,7 +8632,7 @@ function splitTopLevelStatements(command) {
       continue;
     }
     if (quote === "double") {
-      if (ch === "\\")
+      if (ch === "\\" && backslashEscapesNext(command[index + 1], quote, platform))
         escaped = true;
       else if (ch === '"')
         quote = "none";
@@ -8552,7 +8643,7 @@ function splitTopLevelStatements(command) {
         inBacktick = false;
       continue;
     }
-    if (ch === "\\") {
+    if (ch === "\\" && backslashEscapesNext(command[index + 1], quote, platform)) {
       escaped = true;
       continue;
     }
@@ -8595,7 +8686,7 @@ function splitTopLevelStatements(command) {
   statements.push(command.slice(start));
   return statements;
 }
-function firstPipelineStage(command) {
+function firstPipelineStage(command, platform = process.platform) {
   let quote = "none";
   let firstPipeIndex;
   for (let index = 0;index < command.length; index++) {
@@ -8608,7 +8699,7 @@ function firstPipelineStage(command) {
     if (quote === "double") {
       if (ch === '"') {
         quote = "none";
-      } else if (ch === "\\") {
+      } else if (ch === "\\" && backslashEscapesNext(command[index + 1], quote, platform)) {
         index++;
       } else if (ch === "`") {
         return null;
@@ -8619,7 +8710,7 @@ function firstPipelineStage(command) {
       quote = "single";
     } else if (ch === '"') {
       quote = "double";
-    } else if (ch === "\\") {
+    } else if (ch === "\\" && backslashEscapesNext(command[index + 1], quote, platform)) {
       index++;
     } else if (ch === "`") {
       return null;
@@ -8635,7 +8726,7 @@ function firstPipelineStage(command) {
     return null;
   return command.slice(0, firstPipeIndex ?? command.length).trim();
 }
-function readShellToken(command, start) {
+function readShellToken(command, start, platform = process.platform) {
   let quote = "none";
   let token = "";
   let index = start;
@@ -8652,9 +8743,11 @@ function readShellToken(command, start) {
     if (quote === "double") {
       if (ch === '"') {
         quote = "none";
-      } else if (ch === "\\") {
+      } else if (ch === "\\" && backslashEscapesNext(command[index + 1], quote, platform)) {
         index++;
-        token += command[index] ?? "\\";
+        if (command[index] !== `
+`)
+          token += command[index];
       } else if (ch === "`") {
         return null;
       } else {
@@ -8670,7 +8763,7 @@ function readShellToken(command, start) {
       quote = "single";
     } else if (ch === '"') {
       quote = "double";
-    } else if (ch === "\\") {
+    } else if (ch === "\\" && backslashEscapesNext(command[index + 1], quote, platform)) {
       index++;
       token += command[index] ?? "\\";
     } else if (ch === "`") {
@@ -8683,6 +8776,11 @@ function readShellToken(command, start) {
     return null;
   return { token, end: index };
 }
+function backslashEscapesNext(next, quote, platform) {
+  if (quote === "double")
+    return next !== undefined && '$`"\\\n'.includes(next);
+  return platform !== "win32";
+}
 function isTokenBoundary(ch) {
   return ch === "|" || ch === ";" || ch === "&" || ch === "<" || ch === ">";
 }
@@ -8694,7 +8792,7 @@ function skipSpaces(input, start) {
 }
 // ../aft-bridge/dist/bash-host-fallback.js
 import { existsSync } from "node:fs";
-import { join as join4 } from "node:path";
+import { join as join3 } from "node:path";
 
 // ../aft-bridge/dist/child-process.js
 import { execFile as nodeExecFile, execFileSync as nodeExecFileSync, execSync as nodeExecSync, spawn as nodeSpawn, spawnSync as nodeSpawnSync } from "node:child_process";
@@ -8702,7 +8800,7 @@ import { execFile as nodeExecFile, execFileSync as nodeExecFileSync, execSync as
 // ../aft-bridge/dist/test-child-environment.js
 import { mkdirSync, realpathSync } from "node:fs";
 import { homedir as homedir3, tmpdir } from "node:os";
-import { dirname, isAbsolute as isAbsolute2, join as join2, relative as relative2, resolve as resolve2 } from "node:path";
+import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 var DIRECTORIES = [
   "HOME",
   "USERPROFILE",
@@ -8722,8 +8820,8 @@ function toolchainHomes(inherited) {
   if (!global[TOOLCHAINS]) {
     const home = process.platform === "win32" ? inherited.USERPROFILE || inherited.HOME || homedir3() : inherited.HOME || homedir3();
     global[TOOLCHAINS] = {
-      RUSTUP_HOME: inherited.RUSTUP_HOME || join2(home, ".rustup"),
-      CARGO_HOME: inherited.CARGO_HOME || join2(home, ".cargo")
+      RUSTUP_HOME: inherited.RUSTUP_HOME || join(home, ".rustup"),
+      CARGO_HOME: inherited.CARGO_HOME || join(home, ".cargo")
     };
   }
   return global[TOOLCHAINS];
@@ -8750,31 +8848,31 @@ function isolatedAftEnvironment(root, inherited = process.env) {
     "aft-cache"
   ];
   for (const [index, key] of DIRECTORIES.entries()) {
-    env[key] = join2(root, names[index]);
+    env[key] = join(root, names[index]);
     mkdirSync(env[key], { recursive: true });
   }
   delete env.AFT_ALLOW_PRODUCTION_MIGRATION;
-  createdRoots().add(resolve2(root));
+  createdRoots().add(resolve(root));
   return env;
 }
 function canonical(path) {
-  let ancestor = resolve2(path);
+  let ancestor = resolve(path);
   const tail = [];
   while (true) {
     try {
-      return join2(realpathSync(ancestor), ...tail);
+      return join(realpathSync(ancestor), ...tail);
     } catch {
       const parent = dirname(ancestor);
       if (parent === ancestor)
-        return resolve2(path);
-      tail.unshift(relative2(parent, ancestor));
+        return resolve(path);
+      tail.unshift(relative(parent, ancestor));
       ancestor = parent;
     }
   }
 }
 function within(path, root) {
-  const tail = relative2(canonical(root), canonical(path));
-  return tail === "" || !tail.startsWith("..") && !isAbsolute2(tail);
+  const tail = relative(canonical(root), canonical(path));
+  return tail === "" || !tail.startsWith("..") && !isAbsolute(tail);
 }
 function testChildEnvironment(env) {
   const root = process.env.AFT_TEST_ISOLATION_ROOT;
@@ -8850,7 +8948,7 @@ function withPathPrepended(env, dir, platform = process.platform) {
 
 // ../aft-bridge/dist/storage-paths.js
 import { homedir as homedir4, tmpdir as tmpdir2 } from "node:os";
-import { join as join3, resolve as resolve3 } from "node:path";
+import { join as join2, resolve as resolve2 } from "node:path";
 function environmentValue(context, name) {
   const value = (context.lookup ?? ((key) => process.env[key]))(name);
   return value !== undefined && value.length > 0 ? value : undefined;
@@ -8872,21 +8970,21 @@ function resolveDataHome(context = {}) {
       return localAppData;
     const userProfile = environmentValue(context, "USERPROFILE");
     if (userProfile)
-      return join3(userProfile, "AppData", "Local");
+      return join2(userProfile, "AppData", "Local");
   }
   const home = environmentValue(context, "HOME");
   if (home)
-    return join3(home, ".local", "share");
-  return join3(".local", "share");
+    return join2(home, ".local", "share");
+  return join2(".local", "share");
 }
 function resolveStoragePath(raw, context = {}) {
   let expanded = raw;
   if (raw === "~") {
     expanded = homeDir(context);
   } else if (raw.startsWith("~/") || raw.startsWith("~\\")) {
-    expanded = join3(homeDir(context), raw.slice(2));
+    expanded = join2(homeDir(context), raw.slice(2));
   }
-  return resolve3(context.currentDirectory ?? process.cwd(), expanded);
+  return resolve2(context.currentDirectory ?? process.cwd(), expanded);
 }
 function resolveCortexKitStorageRoot(context = {}) {
   const override = environmentValue(context, "AFT_STORAGE_DIR");
@@ -8894,8 +8992,8 @@ function resolveCortexKitStorageRoot(context = {}) {
     return resolveStoragePath(override, context);
   const legacyCache = environmentValue(context, "AFT_CACHE_DIR");
   if (legacyCache)
-    return join3(resolveStoragePath(legacyCache, context), "aft");
-  return resolveStoragePath(join3(resolveDataHome(context), "cortexkit", "aft"), context);
+    return join2(resolveStoragePath(legacyCache, context), "aft");
+  return resolveStoragePath(join2(resolveDataHome(context), "cortexkit", "aft"), context);
 }
 function resolveAftStorageRoot(configuredRoot, context = {}) {
   if (environmentValue(context, "AFT_STORAGE_DIR")) {
@@ -8906,14 +9004,14 @@ function resolveAftStorageRoot(configuredRoot, context = {}) {
   return resolveCortexKitStorageRoot(context);
 }
 function resolveAftLogPath(filename, configuredRoot, context = {}) {
-  return join3(resolveAftStorageRoot(configuredRoot, context), "logs", filename);
+  return join2(resolveAftStorageRoot(configuredRoot, context), "logs", filename);
 }
 function isTestEnvironment(context = {}) {
   return environmentValue(context, "BUN_TEST") === "1" || environmentValue(context, "NODE_ENV") === "test";
 }
 function resolvePluginLogPath(context = {}) {
   if (isTestEnvironment(context)) {
-    return join3(environmentValue(context, "TMPDIR") ?? tmpdir2(), `aft-plugin-tests-${process.pid}`, "logs", "aft-plugin-test.log");
+    return join2(environmentValue(context, "TMPDIR") ?? tmpdir2(), `aft-plugin-tests-${process.pid}`, "logs", "aft-plugin-test.log");
   }
   return resolveAftLogPath("aft-plugin.log", undefined, context);
 }
@@ -8948,8 +9046,8 @@ function hostFallbackEnvWithShims(env, platform) {
   const pathKey = pathKeyForPlatform(normalized, platform);
   const inherited = pathKey === undefined ? undefined : normalized[pathKey];
   const storageRoot = normalized.AFT_STORAGE_DIR ? resolveStoragePath(normalized.AFT_STORAGE_DIR) : resolveCortexKitStorageRoot();
-  const shimsDir = join4(storageRoot, "shims");
-  if (!existsSync(join4(shimsDir, platform === "win32" ? "gh.cmd" : "gh")))
+  const shimsDir = join3(storageRoot, "shims");
+  if (!existsSync(join3(shimsDir, platform === "win32" ? "gh.cmd" : "gh")))
     return normalized;
   const separator = platform === "win32" ? ";" : ":";
   const entries = (inherited ?? "").split(separator).filter((entry) => entry.length > 0);
@@ -9708,7 +9806,7 @@ async function cachedFileSha256(path) {
 }
 // ../aft-bridge/dist/bridge.js
 import { homedir as homedir5 } from "node:os";
-import { join as join5 } from "node:path";
+import { join as join4 } from "node:path";
 import { StringDecoder } from "node:string_decoder";
 
 // ../aft-bridge/dist/command-timeouts.js
@@ -9846,6 +9944,7 @@ function compareSemver(a, b) {
 }
 var SYSTEM_CLOCK = {
   now: () => Date.now(),
+  awakeNow: () => performance.now(),
   setTimeout: (callback, ms) => setTimeout(callback, ms),
   clearTimeout: (timer) => clearTimeout(timer)
 };
@@ -9962,6 +10061,7 @@ class BinaryBridge {
   hangWindowMinMs;
   hangProbeTimeoutMs;
   clock;
+  waitClock;
   lateShellReplyGraceMs;
   maxRestarts;
   configured = false;
@@ -9998,6 +10098,7 @@ class BinaryBridge {
     this.hangWindowMinMs = options?.hangWindowMinMs ?? DEFAULT_MIN_HANG_WINDOW_MS;
     this.hangProbeTimeoutMs = options?.hangProbeTimeoutMs ?? DEFAULT_HANG_PROBE_TIMEOUT_MS;
     this.clock = options?.clock ?? SYSTEM_CLOCK;
+    this.waitClock = new WaitClock(() => this.clock.now(), () => this.clock.awakeNow?.() ?? this.clock.now());
     this.lateShellReplyGraceMs = options?.lateShellReplyGraceMs ?? DEFAULT_LATE_SHELL_REPLY_GRACE_MS;
     this.maxRestarts = options?.maxRestarts ?? 3;
     this.errorPrefix = options?.errorPrefix ?? "[aft-bridge]";
@@ -10364,11 +10465,17 @@ class BinaryBridge {
       const keepBridgeOnTimeout = passive || command === "bash_drain_completions" || options?.keepBridgeOnTimeout === true;
       const child = this.process;
       const response = await new Promise((resolve, reject) => {
-        const timer = this.clock.setTimeout(() => {
+        const deadline = new RequestDeadline(this.waitClock, effectiveTimeoutMs);
+        const expire = () => {
           const entry = this.pending.get(id);
           if (!entry)
             return;
-          if (keepBridgeOnTimeout && this.holdForLateShellReply(id, entry, effectiveTimeoutMs, requestSessionId)) {
+          const remaining = deadline.remaining();
+          if (remaining > 0) {
+            entry.timer = this.clock.setTimeout(expire, Math.min(remaining, DEADLINE_POLL_MS));
+            return;
+          }
+          if (keepBridgeOnTimeout && !deadline.resumed && this.holdForLateShellReply(id, entry, effectiveTimeoutMs, requestSessionId)) {
             return;
           }
           this.pending.delete(id);
@@ -10381,11 +10488,12 @@ class BinaryBridge {
             this.warnVia(timeoutMsg);
           }
           if (keepBridgeOnTimeout) {
-            entry.reject(new BridgeTransportTimeoutError(command, effectiveTimeoutMs, `${this.errorPrefix} Request "${command}" (id=${id}) timed out after ${effectiveTimeoutMs}ms`));
+            entry.reject(new BridgeTransportTimeoutError(command, effectiveTimeoutMs, `${this.errorPrefix} Request "${command}" (id=${id}) timed out after ${effectiveTimeoutMs}ms`, deadline.resumed && SHELL_TASK_COMMANDS.has(command) ? { kind: "unknown" } : undefined));
             return;
           }
           entry.reject(new Error(`${this.errorPrefix} request "${command}" timed out after ${effectiveTimeoutMs}ms (bridge busy/under load); bridge kept warm — retry. A timed-out mutation may still complete; inspect before repeating it.`));
-        }, effectiveTimeoutMs);
+        };
+        const timer = this.clock.setTimeout(expire, Math.min(effectiveTimeoutMs, DEADLINE_POLL_MS));
         const entry = {
           resolve,
           reject,
@@ -10616,11 +10724,11 @@ class BinaryBridge {
     })();
     const useFastembedBackend = semanticBackend === undefined || semanticBackend === "fastembed" || semanticBackend === "";
     const ortDir = typeof this.configOverrides._ort_dylib_dir === "string" && useFastembedBackend ? this.configOverrides._ort_dylib_dir : null;
-    const ortLibraryPath = ortDir == null ? null : join5(ortDir, this.platform === "win32" ? "onnxruntime.dll" : this.platform === "darwin" ? "libonnxruntime.dylib" : "libonnxruntime.so");
+    const ortLibraryPath = ortDir == null ? null : join4(ortDir, this.platform === "win32" ? "onnxruntime.dll" : this.platform === "darwin" ? "libonnxruntime.dylib" : "libonnxruntime.so");
     const env = { ...process.env };
     this.logVia(`bridge.spawnProcess: useFastembedBackend=${useFastembedBackend}, ` + `parentORT=${process.env.ORT_DYLIB_PATH ?? "(unset)"}, ` + `ortLibraryPath=${ortLibraryPath ?? "(none)"}`);
     if (useFastembedBackend) {
-      env.FASTEMBED_CACHE_DIR = process.env.FASTEMBED_CACHE_DIR || (typeof this.configOverrides.storage_dir === "string" ? join5(this.configOverrides.storage_dir, "semantic", "models") : join5(homedir5() || "", ".cache", "fastembed"));
+      env.FASTEMBED_CACHE_DIR = process.env.FASTEMBED_CACHE_DIR || (typeof this.configOverrides.storage_dir === "string" ? join4(this.configOverrides.storage_dir, "semantic", "models") : join4(homedir5() || "", ".cache", "fastembed"));
       if (process.env.ORT_DYLIB_PATH) {
         this.logVia(`ORT_DYLIB_PATH inherited from parent env: ${process.env.ORT_DYLIB_PATH}`);
       } else if (ortLibraryPath) {
@@ -10941,14 +11049,21 @@ class BinaryBridge {
     };
     entry.resolve = (response) => settle(shellOutcomeFromLateReply(response));
     this.clock.clearTimeout(entry.timer);
-    entry.timer = this.clock.setTimeout(() => {
+    const deadline = new RequestDeadline(this.waitClock, graceMs, false);
+    const expire = () => {
       if (this.pending.get(id) !== entry)
         return;
+      const remaining = deadline.remaining();
+      if (remaining > 0) {
+        entry.timer = this.clock.setTimeout(expire, Math.min(remaining, DEADLINE_POLL_MS));
+        return;
+      }
       this.pending.delete(id);
       entry.onSettled?.();
       this.warnVia(`Request "${entry.command}" (id=${id}) got no reply within ${graceMs}ms after its deadline`);
       settle({ kind: "unknown" });
-    }, graceMs);
+    };
+    entry.timer = this.clock.setTimeout(expire, Math.min(graceMs, DEADLINE_POLL_MS));
     return true;
   }
   accountForBashTaskResponse(command, response) {
@@ -11196,7 +11311,7 @@ class BinaryBridge {
 }
 // ../aft-bridge/dist/cache-paths.js
 import { homedir as homedir6 } from "node:os";
-import { join as join6 } from "node:path";
+import { join as join5 } from "node:path";
 function homeDir2(env) {
   return (process.platform === "win32" ? env.USERPROFILE || env.HOME : env.HOME) || homedir6();
 }
@@ -11204,20 +11319,20 @@ function getAftCacheRoot(env = process.env) {
   if (env.AFT_CACHE_DIR)
     return env.AFT_CACHE_DIR;
   if (process.platform === "win32") {
-    const base = env.LOCALAPPDATA || env.APPDATA || join6(homeDir2(env), "AppData", "Local");
-    return join6(base, "aft");
+    const base = env.LOCALAPPDATA || env.APPDATA || join5(homeDir2(env), "AppData", "Local");
+    return join5(base, "aft");
   }
-  const base = env.XDG_CACHE_HOME || join6(homeDir2(env), ".cache");
-  return join6(base, "aft");
+  const base = env.XDG_CACHE_HOME || join5(homeDir2(env), ".cache");
+  return join5(base, "aft");
 }
 function getAftBinaryCacheDir(env = process.env) {
-  return join6(getAftCacheRoot(env), "bin");
+  return join5(getAftCacheRoot(env), "bin");
 }
 function getAftLspPackagesDir(env = process.env) {
-  return join6(getAftCacheRoot(env), "lsp-packages");
+  return join5(getAftCacheRoot(env), "lsp-packages");
 }
 function getAftLspBinariesDir(env = process.env) {
-  return join6(getAftCacheRoot(env), "lsp-binaries");
+  return join5(getAftCacheRoot(env), "lsp-binaries");
 }
 // ../aft-bridge/dist/callgraph-format.js
 var UNRESOLVED_SUMMARY_NAME_LIMIT = 10;
@@ -11706,7 +11821,7 @@ function isFindReplaceOnlyEdit(args) {
 }
 // ../aft-bridge/dist/config-error.js
 import { homedir as homedir7 } from "node:os";
-import { isAbsolute as isAbsolute3, join as join7 } from "node:path";
+import { isAbsolute as isAbsolute2, join as join6 } from "node:path";
 var CONFIG_ERROR_RESTART_NOTE = "AFT reads its config only at startup, so restart the host after fixing it.";
 function formatConfigErrorMessage(detail) {
   const trimmed = detail.trim();
@@ -11716,10 +11831,10 @@ function formatConfigErrorMessage(detail) {
 function resolveSubcConnectionFilePath(raw, home = homedir7()) {
   const trimmed = raw.trim();
   if (trimmed.startsWith("~"))
-    return join7(home, trimmed.slice(1).replace(/^[/\\]/, ""));
-  if (isAbsolute3(trimmed))
+    return join6(home, trimmed.slice(1).replace(/^[/\\]/, ""));
+  if (isAbsolute2(trimmed))
     return trimmed;
-  return join7(home, trimmed);
+  return join6(home, trimmed);
 }
 function formatSubcConnectionMissingMessage(raw, resolved) {
   return `subc.connection_file is set to "${raw.trim()}" (resolved: ${resolved}) but no subc ` + `connection file exists there. Start the Subconscious daemon, correct the path, ` + `or remove subc.connection_file from your user config to use the standalone bridge.`;
@@ -11780,7 +11895,7 @@ function stripHarnessSpecificConfigKeys(value, keys) {
 }
 // ../aft-bridge/dist/config-tiers.js
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "node:fs";
-import { resolve as resolve4 } from "node:path";
+import { resolve as resolve3 } from "node:path";
 function readConfigTiers(opts) {
   const tiers = [];
   try {
@@ -11788,7 +11903,7 @@ function readConfigTiers(opts) {
       const doc = readFileSync2(opts.userConfigPath, "utf-8");
       tiers.push({
         tier: "user",
-        source: resolve4(opts.userConfigPath),
+        source: resolve3(opts.userConfigPath),
         doc
       });
     }
@@ -11798,7 +11913,7 @@ function readConfigTiers(opts) {
       const doc = readFileSync2(opts.projectConfigPath, "utf-8");
       tiers.push({
         tier: "project",
-        source: resolve4(opts.projectConfigPath),
+        source: resolve3(opts.projectConfigPath),
         doc
       });
     }
@@ -11814,7 +11929,7 @@ function formatDroppedKeyWarnings(dropped) {
 // ../aft-bridge/dist/config-watch.js
 import { createHash as createHash2 } from "node:crypto";
 import { closeSync as closeSync2, fstatSync, openSync as openSync2, readFileSync as readFileSync3, readSync as readSync2, realpathSync as realpathSync2, statSync as statSync3, watch } from "node:fs";
-import { basename, dirname as dirname2, resolve as resolve5 } from "node:path";
+import { basename, dirname as dirname2, resolve as resolve4 } from "node:path";
 var CONFIG_WATCH_DEBOUNCE_MS = 150;
 var CONFIG_LIVE_KEEP_NOTE = "AFT keeps using the last valid configuration until the file is fixed.";
 function pathKey(name) {
@@ -11869,6 +11984,7 @@ function aftLiveConfigKeys(resolveBash) {
     pathKey("revision_reads"),
     pathKey("inspect.diagnostics_timeout_ms"),
     pathKey("lsp.idle_minutes"),
+    pathKey("lsp.max_servers"),
     ...[
       "diagnostics",
       "todos",
@@ -11981,7 +12097,7 @@ function canonicalDirectory(dir) {
   try {
     return realpathSync2(dir);
   } catch {
-    return resolve5(dir);
+    return resolve4(dir);
   }
 }
 function watchAftConfigFiles(options) {
@@ -12001,6 +12117,7 @@ function watchAftConfigFiles(options) {
   const fallbackSeen = new Map;
   const watchImpl = options.watchImpl ?? watch;
   let rejectedRetries = 0;
+  let recheckAfterArming = false;
   const check = () => {
     if (retryTimer)
       clearTimeout(retryTimer);
@@ -12009,7 +12126,8 @@ function watchAftConfigFiles(options) {
     firstPendingAt = null;
     if (stopped)
       return;
-    revalidate();
+    if (revalidate())
+      recheckAfterArming = true;
     const seen = new Map;
     for (const path of options.paths) {
       const text = readTextOrNull(path);
@@ -12067,7 +12185,7 @@ function watchAftConfigFiles(options) {
     for (const path of options.paths) {
       try {
         const resolved = realpathSync2(path);
-        const target = resolved === resolve5(path) ? undefined : resolved;
+        const target = resolved === resolve4(path) ? undefined : resolved;
         if (targets.get(path) !== target) {
           if (target)
             targets.set(path, target);
@@ -12131,12 +12249,16 @@ function watchAftConfigFiles(options) {
     }
     return moved;
   }
-  revalidate();
+  recheckAfterArming = revalidate();
   if (options.checkAtStart)
     check();
   const revalidateTimer = setInterval(() => {
-    if (!stopped && revalidate())
+    if (stopped)
+      return;
+    const moved = revalidate();
+    if (moved || recheckAfterArming)
       schedule();
+    recheckAfterArming = moved;
   }, CONFIG_WATCH_REVALIDATE_MS);
   revalidateTimer.unref?.();
   return () => {
@@ -12179,6 +12301,10 @@ function aftLiveSecurityKeys(keys) {
         return minutes(next) > minutes(current);
       }
     },
+    {
+      key: pick("lsp.max_servers"),
+      loosens: (current, next) => (typeof next === "number" ? next : 8) > (typeof current === "number" ? current : 8)
+    },
     ...[
       "diagnostics",
       "todos",
@@ -12288,7 +12414,7 @@ function startLiveConfigReload(options) {
 import { createHash as createHash3, randomUUID } from "node:crypto";
 import { chmodSync, closeSync as closeSync3, copyFileSync, createWriteStream, existsSync as existsSync3, mkdirSync as mkdirSync2, openSync as openSync3, readdirSync, readFileSync as readFileSync4, renameSync as renameSync2, rmSync, statSync as statSync4, unlinkSync as unlinkSync2, writeSync } from "node:fs";
 import { hostname } from "node:os";
-import { join as join8 } from "node:path";
+import { join as join7 } from "node:path";
 import { Readable } from "node:stream";
 import { pipeline } from "node:stream/promises";
 
@@ -12404,7 +12530,7 @@ function getBinaryName() {
 function getCachedBinaryPath(version) {
   if (!version)
     return null;
-  const binaryPath = join8(getAftBinaryCacheDir(), version, getBinaryName());
+  const binaryPath = join7(getAftBinaryCacheDir(), version, getBinaryName());
   return existsSync3(binaryPath) ? binaryPath : null;
 }
 async function downloadBinary(version) {
@@ -12421,16 +12547,16 @@ async function downloadBinary(version) {
     return null;
   }
   const tag = rawTag.startsWith("v") ? rawTag : `v${rawTag}`;
-  const versionedCacheDir = join8(getAftBinaryCacheDir(), tag);
+  const versionedCacheDir = join7(getAftBinaryCacheDir(), tag);
   const binaryName = getBinaryName();
-  const binaryPath = join8(versionedCacheDir, binaryName);
+  const binaryPath = join7(versionedCacheDir, binaryName);
   if (existsSync3(binaryPath) && await isExpectedCachedBinary(binaryPath, tag)) {
     return binaryPath;
   }
   const downloadUrl = `https://github.com/${REPO}/releases/download/${tag}/${assetName}`;
   const checksumUrl = `https://github.com/${REPO}/releases/download/${tag}/checksums.sha256`;
   log(`Downloading AFT binary (${tag}) for ${platformKey}...`);
-  const lockPath = join8(versionedCacheDir, ".download.lock");
+  const lockPath = join7(versionedCacheDir, ".download.lock");
   let releaseLock = null;
   let binaryController = null;
   let checksumController = null;
@@ -12656,7 +12782,7 @@ function sweepStaleDownloadTemps(versionedCacheDir, binaryName) {
       if (!entry.isFile() || !entry.name.startsWith(tempPrefix) || !entry.name.endsWith(".tmp")) {
         continue;
       }
-      const tempPath = join8(versionedCacheDir, entry.name);
+      const tempPath = join7(versionedCacheDir, entry.name);
       const ageMs = Date.now() - statSync4(tempPath).mtimeMs;
       if (Math.abs(ageMs) > DOWNLOAD_LOCK_STALE_MS)
         unlinkSync2(tempPath);
@@ -12747,7 +12873,7 @@ import { dirname as dirname3 } from "node:path";
 
 // ../aft-bridge/dist/private-storage.js
 import { closeSync as closeSync4, constants, copyFileSync as copyFileSync2, fchmodSync, fstatSync as fstatSync2, lstatSync, mkdirSync as mkdirSync3, openSync as openSync4, readSync as readSync3, writeSync as writeSync2 } from "node:fs";
-import { isAbsolute as isAbsolute4, join as join9, parse, relative as relative3, resolve as resolve6, sep } from "node:path";
+import { isAbsolute as isAbsolute3, join as join8, parse, relative as relative2, resolve as resolve5, sep } from "node:path";
 var PRIVATE_FILE_MODE = 384;
 var PRIVATE_DIRECTORY_MODE = 448;
 function privateMkdirSync(path, recursive = true) {
@@ -12782,19 +12908,19 @@ function privateCopyFileSync(source, destination) {
 }
 var warned = new Set;
 function openPrivateStorageDir(root, path = root) {
-  const base = resolve6(root);
+  const base = resolve5(root);
   if (!root || base === parse(base).root) {
     throw new Error(`refusing filesystem root as private storage: ${base}`);
   }
-  const rel = relative3(base, resolve6(path));
-  if (rel === ".." || rel.startsWith(`..${sep}`) || isAbsolute4(rel))
+  const rel = relative2(base, resolve5(path));
+  if (rel === ".." || rel.startsWith(`..${sep}`) || isAbsolute3(rel))
     return;
   privateMkdirSync(path);
   if (process.platform === "win32")
     return;
   let current = base;
   for (const component of ["", ...rel.split(sep).filter(Boolean)]) {
-    current = join9(current, component);
+    current = join8(current, component);
     let fd;
     try {
       if (lstatSync(current).isSymbolicLink())
@@ -13047,21 +13173,23 @@ ${reflowText}`;
   }
   return " Auto-formatted.";
 }
-// ../../node_modules/.bun/@cortexkit+subc-client@0.21.2/node_modules/@cortexkit/subc-client/dist/client.js
+// ../../node_modules/.bun/@cortexkit+subc-client@0.24.5/node_modules/@cortexkit/subc-client/dist/client.js
 import { promises as fs3 } from "node:fs";
+import { createHash as createHash4 } from "node:crypto";
 import { debuglog } from "node:util";
 
-// ../../node_modules/.bun/@cortexkit+subc-client@0.21.2/node_modules/@cortexkit/subc-client/dist/auth.js
+// ../../node_modules/.bun/@cortexkit+subc-client@0.24.5/node_modules/@cortexkit/subc-client/dist/auth.js
 import { createHmac, randomBytes, timingSafeEqual } from "node:crypto";
 
-// ../../node_modules/.bun/@cortexkit+subc-client@0.21.2/node_modules/@cortexkit/subc-client/dist/socket.js
+// ../../node_modules/.bun/@cortexkit+subc-client@0.24.5/node_modules/@cortexkit/subc-client/dist/socket.js
 import net from "node:net";
 
-// ../../node_modules/.bun/@cortexkit+subc-client@0.21.2/node_modules/@cortexkit/subc-client/dist/envelope.js
+// ../../node_modules/.bun/@cortexkit+subc-client@0.24.5/node_modules/@cortexkit/subc-client/dist/envelope.js
 var PROTOCOL_VERSION = 2;
 var HEADER_LEN = 21;
 var FROZEN_PREFIX_LEN = 5;
 var MAX_FRAME_BODY_LEN = 64 * 1024 * 1024;
+var MAX_DELIVERED_FRAME_LEN = 4 * 1024 * 1024;
 var FrameType;
 (function(FrameType) {
   FrameType[FrameType["Request"] = 0] = "Request";
@@ -13099,6 +13227,8 @@ var FLAG_PRIORITY_SHIFT = 1;
 var FLAG_LAST = 8;
 var FLAG_ADMISSION_MASK = 48;
 var FLAG_ADMISSION_SHIFT = 4;
+var DAEMON_ORIGIN_FLAG = 64;
+var SUBSCRIPTION_FLAG = 128;
 var FLAG_RESERVED_MASK = 0;
 function buildFlags(binary, priority, last, admissionClass = AdmissionClass.Normal) {
   let flags = 0;
@@ -13233,7 +13363,7 @@ function encodeFrame(frame) {
   return output;
 }
 
-// ../../node_modules/.bun/@cortexkit+subc-client@0.21.2/node_modules/@cortexkit/subc-client/dist/socket.js
+// ../../node_modules/.bun/@cortexkit+subc-client@0.24.5/node_modules/@cortexkit/subc-client/dist/socket.js
 class SocketClosedError extends Error {
 }
 
@@ -13283,14 +13413,12 @@ class SubcSocket {
     sock.on("data", (chunk) => {
       this.chunks.push(chunk);
       this.buffered += chunk.length;
-      if (this.waiter) {
+      if (this.waiter && this.waiter.extendOnProgress && this.buffered < this.waiter.need) {
         if (this.waiter.immediate) {
           clearImmediate(this.waiter.immediate);
           this.waiter.immediate = null;
         }
-        if (this.waiter.extendOnProgress && this.buffered < this.waiter.need) {
-          this.armWaiterTimer(this.waiter);
-        }
+        this.armWaiterTimer(this.waiter);
       }
       this.tryServe();
     });
@@ -13307,12 +13435,18 @@ class SubcSocket {
     return this.sock.localPort ?? null;
   }
   static connect(host, port, deadlineMs) {
+    return SubcSocket.connectTo({ host, port }, `${host}:${port}`, deadlineMs);
+  }
+  static connectLocal(path, deadlineMs) {
+    return SubcSocket.connectTo({ path }, path, deadlineMs);
+  }
+  static connectTo(options, endpoint, deadlineMs) {
     return new Promise((resolve, reject) => {
-      const sock = net.connect({ host, port });
+      const sock = net.connect(options);
       sock.setNoDelay(true);
       const timer = setTimeout(() => {
         sock.destroy();
-        reject(new SocketTimeoutError(`timed out connecting to ${host}:${port}`));
+        reject(new SocketTimeoutError(`timed out connecting to ${endpoint}`));
       }, Math.max(0, deadlineMs - Date.now()));
       sock.once("connect", () => {
         clearTimeout(timer);
@@ -13529,7 +13663,7 @@ class SubcSocket {
   }
 }
 
-// ../../node_modules/.bun/@cortexkit+subc-client@0.21.2/node_modules/@cortexkit/subc-client/dist/auth.js
+// ../../node_modules/.bun/@cortexkit+subc-client@0.24.5/node_modules/@cortexkit/subc-client/dist/auth.js
 var NONCE_LEN = 32;
 var MAX_AUTH_MESSAGE_LEN = 4096;
 var SERVER_PROOF_DOMAIN = "subc-server-v1";
@@ -13603,7 +13737,7 @@ async function authenticateClient(sock, conn, deadlineMs) {
   await writeMessage(sock, { client_auth: Array.from(clientAuth) }, deadlineMs);
 }
 
-// ../../node_modules/.bun/@cortexkit+subc-client@0.21.2/node_modules/@cortexkit/subc-client/dist/connection-file.js
+// ../../node_modules/.bun/@cortexkit+subc-client@0.24.5/node_modules/@cortexkit/subc-client/dist/connection-file.js
 import { promises as fs2 } from "node:fs";
 var SCHEMA_VERSION = 1;
 var MIN_KEY_LEN = 32;
@@ -13650,7 +13784,10 @@ function verifyOwnerOnly(path, stat, expectedUid) {
 async function readConnectionFile(path) {
   return readConnectionFileForUid(path, process.geteuid?.());
 }
-async function readConnectionFileForUid(path, expectedUid) {
+async function readConnectionFileWithLocalEndpoint(path) {
+  return readConnectionFileForUid(path, process.geteuid?.(), true);
+}
+async function readConnectionFileForUid(path, expectedUid, includeLocalEndpoint = false) {
   const handle = await fs2.open(path, "r");
   let raw;
   try {
@@ -13689,13 +13826,26 @@ async function readConnectionFileForUid(path, expectedUid) {
     daemonVer: parsed.daemon_ver ?? ""
   };
   validate(info);
+  if (includeLocalEndpoint && parsed.local_endpoint != null) {
+    const endpoint = parsed.local_endpoint;
+    if (endpoint.kind === "unix" && typeof endpoint.path === "string" && endpoint.path.length > 0) {
+      info.localEndpoint = { kind: "unix", path: endpoint.path };
+    } else if (endpoint.kind === "pipe" && typeof endpoint.name === "string" && endpoint.name.length > 0) {
+      info.localEndpoint = { kind: "pipe", name: endpoint.name };
+    } else {
+      throw new ConnectionFileError("connection file local_endpoint must name a unix path or pipe name");
+    }
+  }
   return info;
 }
 
-// ../../node_modules/.bun/@cortexkit+subc-client@0.21.2/node_modules/@cortexkit/subc-client/dist/launch-nonce.js
+// ../../node_modules/.bun/@cortexkit+subc-client@0.24.5/node_modules/@cortexkit/subc-client/dist/launch-nonce.js
 import { closeSync as closeSync5, fstatSync as fstatSync3, readSync as readSync4 } from "node:fs";
+import { connect } from "node:net";
 var SUBC_LAUNCH_NONCE_ENV = "SUBC_LAUNCH_NONCE";
 var SUBC_LAUNCH_NONCE_FD_ENV = "SUBC_LAUNCH_NONCE_FD";
+var SUBC_LAUNCH_NONCE_PIPE_ENV = "SUBC_LAUNCH_NONCE_PIPE";
+var SUBC_LAUNCH_NONCE_PIPE_FALLBACK_ENV = "SUBC_LAUNCH_NONCE_PIPE_FALLBACK";
 class LaunchNonceError extends Error {
   name = "LaunchNonceError";
   kind;
@@ -13714,9 +13864,21 @@ class LaunchNonceError extends Error {
     this.foundInode = details.foundInode;
   }
 }
-function launchNonceOrUndefined() {
-  const result = processCell().result();
-  return result.ok ? result.nonce ?? undefined : undefined;
+function isLaunchNonceError(error) {
+  return error instanceof Error && error.name === "LaunchNonceError" && typeof error.kind === "string";
+}
+async function launchNonceAsync() {
+  const cell = processCell();
+  return unwrap(await (cell.resultAsync?.() ?? cell.result()));
+}
+async function launchNonceOrUndefinedAsync() {
+  try {
+    return await launchNonceAsync();
+  } catch (error) {
+    if (isLaunchNonceError(error))
+      return;
+    throw error;
+  }
 }
 var PROCESS_CELL_KEY = Symbol.for("@cortexkit/subc-client/launch-nonce/v1");
 function processCell() {
@@ -13736,20 +13898,60 @@ function unwrap(result) {
 
 class LaunchNonceCell {
   cached;
+  pending;
   descriptorReads = 0;
   lookup;
   platform;
   stat;
-  constructor(lookup, platform = process.platform, stat = (fd) => fstatSync3(fd, { bigint: true })) {
+  pipeReader;
+  constructor(lookup, platform = process.platform, stat = (fd) => fstatSync3(fd, { bigint: true }), pipeReader = readLaunchNoncePipe) {
     this.lookup = lookup;
     this.platform = platform;
     this.stat = stat;
+    this.pipeReader = pipeReader;
   }
   result() {
+    if (this.cached === undefined && this.platform === "win32" && this.lookup(SUBC_LAUNCH_NONCE_PIPE_ENV) !== undefined) {
+      const fallback = this.permittedPipeFallback();
+      if (fallback === undefined) {
+        throw new LaunchNonceError("PipeNeedsAsync", "call launchNonceAsync() before the synchronous reader when SUBC_LAUNCH_NONCE_PIPE is set");
+      }
+      this.cached = { ok: true, nonce: fallback };
+    }
     if (this.cached === undefined)
       this.cached = this.read();
     return this.cached;
   }
+  async resultAsync() {
+    if (this.cached !== undefined)
+      return this.cached;
+    if (this.pending !== undefined)
+      return this.pending;
+    const named = this.platform === "win32" ? this.lookup(SUBC_LAUNCH_NONCE_PIPE_ENV) : undefined;
+    if (named === undefined)
+      return this.result();
+    const fallback = this.permittedPipeFallback();
+    this.pending = this.pipeReader(named).then((nonce) => ({ ok: true, nonce: fallback !== undefined && nonce.value !== fallback.value ? fallback : nonce }), (error) => {
+      if (fallback !== undefined)
+        return { ok: true, nonce: fallback };
+      if (!isLaunchNonceError(error))
+        throw error;
+      return { ok: false, error };
+    }).then((result) => {
+      this.cached ??= result;
+      return this.cached;
+    });
+    return this.pending;
+  }
+  permittedPipeFallback() {
+    if (this.lookup(SUBC_LAUNCH_NONCE_PIPE_FALLBACK_ENV) !== "env")
+      return;
+    const value = this.lookup(SUBC_LAUNCH_NONCE_ENV);
+    return value ? makeLaunchNonce(value, "env") : undefined;
+  }
+  async getAsync() {
+    return unwrap(await this.resultAsync());
+  }
   get() {
     return unwrap(this.result());
   }
@@ -13880,8 +14082,198 @@ function closeQuietly(fd) {
     closeSync5(fd);
   } catch {}
 }
+async function readLaunchNoncePipe(name, connector = (path) => connect(path), openWindowMs = 500, readWindowMs = 2000) {
+  const deadline = Date.now() + openWindowMs;
+  for (;; ) {
+    try {
+      const bytes = await pipeAttempt(name, connector, Math.max(1, deadline - Date.now()), readWindowMs);
+      if (bytes.length === 0)
+        throw new LaunchNonceError("PipeEmpty", "the launch nonce named pipe is empty");
+      let value;
+      try {
+        value = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+      } catch {
+        throw new LaunchNonceError("PipeNotUtf8", "the launch nonce named pipe held bytes that are not UTF-8");
+      }
+      return makeLaunchNonce(value, "pipe");
+    } catch (error) {
+      if (isLaunchNonceError(error))
+        throw error;
+      const busy = error?.code === "EBUSY" || errnoOf(error) === 231;
+      if (!busy || Date.now() >= deadline) {
+        throw new LaunchNonceError("PipeNotOpen", "SUBC_LAUNCH_NONCE_PIPE names a pipe that could not be opened", { errno: errnoOf(error) });
+      }
+      await new Promise((resolve) => setTimeout(resolve, Math.min(10, Math.max(1, deadline - Date.now()))));
+    }
+  }
+}
+function pipeAttempt(name, connector, openWindowMs, readWindowMs) {
+  return new Promise((resolve, reject) => {
+    let socket;
+    try {
+      socket = connector(name);
+    } catch (error) {
+      reject(error);
+      return;
+    }
+    let connected = false;
+    let settled = false;
+    let size = 0;
+    const chunks = [];
+    let timer = setTimeout(() => finish(new LaunchNonceError("PipeNotOpen", "launch nonce pipe open timed out")), openWindowMs);
+    function finish(error) {
+      if (settled)
+        return;
+      settled = true;
+      clearTimeout(timer);
+      socket.destroy();
+      if (error !== undefined)
+        reject(error);
+      else
+        resolve(Buffer.concat(chunks));
+    }
+    socket.once("connect", () => {
+      connected = true;
+      clearTimeout(timer);
+      timer = setTimeout(() => finish(new LaunchNonceError("PipeUnreadable", "launch nonce pipe read timed out")), readWindowMs);
+    });
+    socket.on("data", (chunk) => {
+      size += chunk.length;
+      if (size > 4096) {
+        finish(new LaunchNonceError("PipeUnreadable", "launch nonce pipe exceeded its byte limit"));
+        return;
+      }
+      chunks.push(Buffer.from(chunk));
+    });
+    socket.once("end", () => finish());
+    socket.once("error", (error) => finish(connected ? new LaunchNonceError("PipeUnreadable", "could not read the launch nonce from the named pipe", { errno: errnoOf(error) }) : error));
+    socket.once("close", () => {
+      if (!settled)
+        finish(new LaunchNonceError("PipeUnreadable", "launch nonce pipe closed before EOF"));
+    });
+  });
+}
+
+// ../../node_modules/.bun/@cortexkit+subc-client@0.24.5/node_modules/@cortexkit/subc-client/dist/request-gate.js
+class Lane {
+  limit;
+  used = 0;
+  waiters = [];
+  failure;
+  constructor(limit) {
+    this.limit = limit;
+  }
+  acquire(timeoutMs, signal) {
+    if (this.failure)
+      return Promise.reject(this.failure);
+    if (signal?.aborted)
+      return Promise.reject(new Error("request cancelled before write"));
+    if (timeoutMs !== undefined && timeoutMs <= 0)
+      return Promise.reject(new Error("request deadline elapsed waiting for a slot"));
+    if (this.used < this.limit && this.waiters.length === 0) {
+      this.used++;
+      return Promise.resolve(this.releaser());
+    }
+    return new Promise((resolve, reject) => {
+      let timer;
+      const clean = () => {
+        if (timer !== undefined)
+          clearTimeout(timer);
+        signal?.removeEventListener("abort", abort);
+      };
+      const waiter = {
+        grant: () => {
+          clean();
+          resolve(this.releaser());
+        },
+        fail: (error) => {
+          clean();
+          reject(error);
+        }
+      };
+      const abort = () => {
+        const index = this.waiters.indexOf(waiter);
+        if (index < 0)
+          return;
+        this.waiters.splice(index, 1);
+        waiter.fail(new Error("request cancelled before write"));
+      };
+      this.waiters.push(waiter);
+      signal?.addEventListener("abort", abort, { once: true });
+      if (timeoutMs !== undefined)
+        timer = setTimeout(() => {
+          const index = this.waiters.indexOf(waiter);
+          if (index < 0)
+            return;
+          this.waiters.splice(index, 1);
+          waiter.fail(new Error("request deadline elapsed waiting for a slot"));
+        }, timeoutMs);
+    });
+  }
+  close(error) {
+    this.failure = error;
+    for (const waiter of this.waiters.splice(0))
+      waiter.fail(error);
+  }
+  releaser() {
+    let released = false;
+    return () => {
+      if (released)
+        return;
+      released = true;
+      const waiter = this.waiters.shift();
+      if (waiter)
+        waiter.grant();
+      else
+        this.used--;
+    };
+  }
+}
 
-// ../../node_modules/.bun/@cortexkit+subc-client@0.21.2/node_modules/@cortexkit/subc-client/dist/route-handle.js
+class RequestGate {
+  total;
+  watches;
+  slots = new Set;
+  closed = new AbortController;
+  get signal() {
+    return this.closed.signal;
+  }
+  constructor(requestWindow, watchWindow) {
+    this.total = new Lane(requestWindow);
+    if (watchWindow !== undefined)
+      this.watches = new Lane(watchWindow);
+  }
+  async acquire(watch, timeoutMs, signal) {
+    const deadline = timeoutMs === undefined ? undefined : Date.now() + timeoutMs;
+    const watchRelease = watch && this.watches ? await this.watches.acquire(timeoutMs, signal) : undefined;
+    try {
+      const totalRelease = await this.total.acquire(deadline === undefined ? undefined : deadline - Date.now(), signal);
+      const slot = {
+        inFlight: false,
+        release: () => {
+          if (!this.slots.delete(slot))
+            return;
+          totalRelease();
+          watchRelease?.();
+        }
+      };
+      this.slots.add(slot);
+      return slot;
+    } catch (error) {
+      watchRelease?.();
+      throw error;
+    }
+  }
+  close(error) {
+    this.total.close(error);
+    this.watches?.close(error);
+    this.closed.abort(error);
+    for (const slot of this.slots)
+      slot.release();
+  }
+}
+
+// ../../node_modules/.bun/@cortexkit+subc-client@0.24.5/node_modules/@cortexkit/subc-client/dist/route-handle.js
 var connectionToken = new WeakMap;
 var reverseRequests = new WeakMap;
 
@@ -13974,10 +14366,13 @@ function sameRouteHandle(left, right) {
   return left === right;
 }
 
-// ../../node_modules/.bun/@cortexkit+subc-client@0.21.2/node_modules/@cortexkit/subc-client/dist/client.js
+// ../../node_modules/.bun/@cortexkit+subc-client@0.24.5/node_modules/@cortexkit/subc-client/dist/client.js
 var debug = debuglog("subc-client");
 var DEFAULT_HANDSHAKE_TIMEOUT_MS = 1e4;
 var DEFAULT_REQUEST_TIMEOUT_MS = 30000;
+var DEFAULT_SLEEP_GRACE_MS = 15000;
+var SLEEP_DETECTION_THRESHOLD_MS = 2000;
+var MIN_REQUEST_BUDGET_MS = 1;
 var TIMEOUT_ARBITRATION_GRACE_MS = 50;
 var LIVENESS_PROBE_WINDOW_MS = 2000;
 var REQUEST_DEADLINE_MARKER = "request_deadline";
@@ -14013,6 +14408,14 @@ class SubcCallError extends Error {
   }
 }
 
+class DaemonUnavailableError extends SubcCallError {
+  recovery = "user_action_required";
+  constructor(cause) {
+    super("not_sent", "CortexKit's daemon is not running or can't be reached on this computer, so this tool call was not sent. Retrying won't start it. Stop calling CortexKit tools and ask the user to start the daemon (run `ck setup`, or restart the CortexKit service), then try again after they confirm it is running.", errorCode(cause), cause);
+    this.name = "DaemonUnavailableError";
+  }
+}
+
 class SubcError extends Error {
   code;
   detail;
@@ -14137,6 +14540,14 @@ class SubcClient {
   reconnecting = null;
   generation = 1;
   routeOpenGateInstance;
+  requestGates;
+  wireSlots;
+  get gates() {
+    return this.requestGates ??= new Map;
+  }
+  get slots() {
+    return this.wireSlots ??= new Map;
+  }
   readerActive = false;
   constructor(sock, currentConn, opts) {
     this.sock = sock;
@@ -14152,8 +14563,15 @@ class SubcClient {
   }
   static async connect(opts) {
     const normalized = normalizeConnectOptions(opts);
-    const opened = await SubcClient.openConnection(normalized);
-    return new SubcClient(opened.sock, opened.conn, normalized);
+    try {
+      const opened = await SubcClient.openConnection(normalized);
+      return new SubcClient(opened.sock, opened.conn, normalized);
+    } catch (err) {
+      if (errorCode(err) === "ENOENT" || errorCode(err) === "ECONNREFUSED") {
+        throw new DaemonUnavailableError(err);
+      }
+      throw err;
+    }
   }
   async catalogList(moduleId) {
     const body = this.encode(moduleId === undefined ? { op: "catalog.list" } : { op: "catalog.list", module_id: moduleId });
@@ -14189,17 +14607,23 @@ class SubcClient {
   }
   async sendRouteOpen(target, identity, opts = {}) {
     const scope = validatedRouteScope(opts.scope);
-    const consumerIdentity = routeOpenConsumerIdentity(opts);
+    const consumerIdentity = await routeOpenConsumerIdentity(opts);
     const reverseRequests = opts.reverseRequests ?? new ReverseRequestRegistry;
     reverseRequests.seal();
     const consumerCapabilities = reverseRequests.capabilities();
     const body = this.encode({
       op: "route.open",
+      busy_refusals: true,
       target,
       identity,
       ...consumerIdentity ? { consumer_identity: consumerIdentity } : {},
       ...consumerCapabilities.length > 0 ? { consumer_capabilities: consumerCapabilities } : {},
-      ...scope ? { scope: { owner: scope.owner, ref: scope.ref, scope_epoch: scope.scopeEpoch } } : {}
+      ...scope ? { scope: {
+        owner: scope.owner,
+        ref: scope.ref,
+        scope_epoch: scope.scopeEpoch,
+        ...scope.bindProof !== undefined ? { bind_proof: scope.bindProof } : {}
+      } } : {}
     });
     let installed = null;
     const install = (frame) => {
@@ -14210,6 +14634,8 @@ class SubcClient {
         throw new SubcError(`route.open returned no route handle: ${JSON.stringify(parsed)}`);
       }
       installed = this.installRoute(parsed.route_channel, parsed.route_epoch, reverseRequests);
+      if (parsed.request_window !== undefined)
+        this.gates.set(installed, new RequestGate(parsed.request_window, parsed.watch_window));
       this.routeModules.set(parsed.route_channel, target.module_id);
       return true;
     };
@@ -14239,7 +14665,7 @@ class SubcClient {
     const bytes = binary ? requireBinaryBody(body) : body instanceof Uint8Array ? body : this.encode(body);
     const priority = opts.priority ?? Priority.Interactive;
     const admission = opts.admissionClass ?? AdmissionClass.Normal;
-    const reply = await this.send(handle, bytes, priority, admission, opts.timeoutMs, opts.onProgress, undefined, undefined, binary, opts.signal);
+    const reply = await this.send(handle, bytes, priority, admission, opts.timeoutMs, opts.onProgress, undefined, undefined, binary, opts.signal, validatedSleepGraceMs(opts.sleepGraceMs ?? this.opts.sleepGraceMs ?? DEFAULT_SLEEP_GRACE_MS));
     return this.decodeReply(reply);
   }
   async call(moduleId, method, params, opts = {}) {
@@ -14255,10 +14681,12 @@ class SubcClient {
   }
   async managedCall(moduleId, body, opts) {
     let retriedUnknownChannel = false;
+    const startedAt = opts.timeoutMs === undefined ? undefined : this.opts.now();
+    let attemptOpts = opts;
     for (;; ) {
-      const routeHandle = await this.cachedRouteHandle(moduleId, opts);
+      const routeHandle = await this.cachedRouteHandle(moduleId, attemptOpts);
       try {
-        return await this.managedRequest(routeHandle, body, opts);
+        return await this.managedRequest(routeHandle, body, attemptOpts);
       } catch (err) {
         if (!(err instanceof SubcCallError))
           throw this.terminalCallError("managed call failed", err);
@@ -14268,6 +14696,15 @@ class SubcClient {
           this.evictRouteHandle(routeHandle);
           continue;
         }
+        if (isDataPlaneDrainRefusal(err.code) && !retriedUnknownChannel && !this.closeStarted && !opts.signal?.aborted) {
+          const remainingMs = opts.timeoutMs === undefined || startedAt === undefined ? undefined : opts.timeoutMs - (this.opts.now() - startedAt);
+          if (remainingMs === undefined || remainingMs > 0) {
+            retriedUnknownChannel = true;
+            this.evictRouteHandle(routeHandle);
+            attemptOpts = remainingMs === undefined ? opts : { ...opts, timeoutMs: remainingMs };
+            continue;
+          }
+        }
         if (deadBindCode && retriedUnknownChannel) {
           this.evictRouteHandle(routeHandle);
         }
@@ -14297,6 +14734,8 @@ class SubcClient {
   }
   subscribe(handle, body, onEvent, opts = {}) {
     this.assertLiveHandle(handle);
+    if (this.gates.has(handle))
+      return this.subscribeGated(handle, body, onEvent, opts);
     const bytes = body instanceof Uint8Array ? body : this.encode(body);
     const priority = opts.priority ?? Priority.Interactive;
     const admission = opts.admissionClass ?? AdmissionClass.Normal;
@@ -14304,22 +14743,43 @@ class SubcClient {
     const key = pendingKey(handle, corr);
     let subscriptionPending = null;
     let resolveClosed = null;
+    let resolveEnded;
+    const ended = new Promise((resolve) => {
+      resolveEnded = resolve;
+    });
+    const endFailure = (err, frame) => {
+      if (frame?.header.ty === FrameType.Error) {
+        const error = err;
+        resolveEnded({ kind: "error", code: error.code, message: error.message, detail: error.detail });
+      } else if (err instanceof SubcError && err.closeReason && err.closeReason !== "connection_lost") {
+        resolveEnded({ kind: "route_closed", reason: err.closeReason });
+      } else {
+        resolveEnded({ kind: "connection_lost" });
+      }
+    };
     const closed = new Promise((resolve, reject) => {
       if (this.closedErr) {
+        endFailure(this.closedErr);
         reject(this.closedErr);
         return;
       }
       resolveClosed = resolve;
       subscriptionPending = {
         handle,
-        resolve: () => resolve(),
-        reject,
+        resolve: (frame) => {
+          resolveEnded(frame.header.ty === FrameType.Response ? { kind: "response", body: frame.body } : { kind: "stream_end" });
+          resolve();
+        },
+        reject: (err, frame) => {
+          endFailure(err, frame);
+          reject(err);
+        },
         onProgress: onEvent,
         timer: null,
         subscription: true
       };
       this.pending.set(key, subscriptionPending);
-      const frame = buildFrame(FrameType.Request, buildFlags(false, priority, false, admission), handle.channel, handle.epoch, corr, bytes);
+      const frame = buildFrame(FrameType.Request, buildFlags(false, priority, false, admission) | SUBSCRIPTION_FLAG, handle.channel, handle.epoch, corr, bytes);
       writeBorrowed(this.sock, encodeFrame(frame), Date.now() + DEFAULT_REQUEST_TIMEOUT_MS).catch((err) => {
         const pending = this.pending.get(key);
         if (pending)
@@ -14332,11 +14792,14 @@ class SubcClient {
         return;
       cancelled = true;
       if (subscriptionPending && resolveClosed)
-        this.settle(key, subscriptionPending, resolveClosed);
+        this.settle(key, subscriptionPending, () => {
+          resolveEnded({ kind: "cancelled" });
+          resolveClosed?.();
+        });
       if (this.isLiveHandle(handle))
         this.cancel(handle, corr, priority);
     };
-    return { unsubscribe, closed };
+    return { unsubscribe, closed, ended };
   }
   attachCancelSignal(signal, key, handle, corr, priority) {
     if (!handle)
@@ -14402,7 +14865,7 @@ class SubcClient {
     this.sendRouteGoodbye(handle);
   }
   async closeManagedRoute(target, identity, opts = {}) {
-    const key = routeCacheKey(target, identity, routeOpenConsumerIdentity(opts), (opts.reverseRequests ?? new ReverseRequestRegistry).capabilities(), validatedRouteScope(opts.scope));
+    const key = routeCacheKey(target, identity, await routeOpenConsumerIdentity(opts), (opts.reverseRequests ?? new ReverseRequestRegistry).capabilities(), validatedRouteScope(opts.scope));
     const cached = this.routes.get(key);
     if (!cached)
       return;
@@ -14455,10 +14918,21 @@ class SubcClient {
     });
   }
   static async openConnection(opts) {
-    const conn = await readConnectionFile(opts.connectionFile);
+    const conn = opts.transport === "local" ? await readConnectionFileWithLocalEndpoint(opts.connectionFile) : await readConnectionFile(opts.connectionFile);
     const deadline = Date.now() + (opts.handshakeTimeoutMs ?? DEFAULT_HANDSHAKE_TIMEOUT_MS);
     const endpoint = conn.endpoints[0];
-    const sock = await SubcSocket.connect(endpoint.host, endpoint.port, deadline);
+    let sock;
+    if (opts.transport === "local") {
+      const local = conn.localEndpoint;
+      if (!local)
+        throw new SubcError("connection file has no local_endpoint", "local_endpoint_absent");
+      if (local.kind === "unix" !== (process.platform !== "win32")) {
+        throw new SubcError("unsupported local endpoint kind on this platform", "local_endpoint_unsupported");
+      }
+      sock = await SubcSocket.connectLocal(local.kind === "unix" ? local.path : local.name, deadline);
+    } else {
+      sock = await SubcSocket.connect(endpoint.host, endpoint.port, deadline);
+    }
     try {
       await authenticateClient(sock, conn, deadline);
     } catch (err) {
@@ -14470,7 +14944,125 @@ class SubcClient {
   async controlRpc(body, acceptFrame, onLateResponse) {
     return this.send(null, body, Priority.Interactive, AdmissionClass.Normal, undefined, undefined, acceptFrame, onLateResponse);
   }
-  send(handle, body, priority, admission, timeoutMs, onProgress, acceptFrame, onLateResponse, binary = false, signal) {
+  send(...args) {
+    const [handle, body, priority, admission, timeoutMs, onProgress, acceptFrame, onLateResponse, binary, signal, sleepGraceMs] = args;
+    if (!handle || !this.gates.has(handle))
+      return this.sendAttempt(...args);
+    return this.gatedRequest(handle, false, timeoutMs, signal, (slot, remaining) => this.sendAttempt(handle, body, priority, admission, remaining, onProgress, acceptFrame, onLateResponse, binary, signal, sleepGraceMs, slot));
+  }
+  async gatedRequest(handle, watch, timeoutMs, signal, attempt) {
+    const gate = this.gates.get(handle);
+    const deadline = this.opts.now() + (timeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS);
+    let slot;
+    try {
+      slot = await gate.acquire(watch, deadline - this.opts.now(), signal);
+    } catch (error) {
+      throw this.notSentCallError("request was not sent while waiting for a route slot", error);
+    }
+    let delay = 25;
+    let busyDeadlineError;
+    try {
+      for (;; ) {
+        if (gate.signal.aborted)
+          throw gate.signal.reason;
+        if (signal?.aborted)
+          throw this.notSentCallError("request cancelled before write", signal.reason);
+        this.assertLiveHandle(handle);
+        const budget = deadline - this.opts.now();
+        if (budget < MIN_REQUEST_BUDGET_MS)
+          throw busyDeadlineError ?? this.notSentCallError("request deadline elapsed before write", new Error("less than 1ms remains before the request deadline"));
+        try {
+          return await attempt(slot, budget);
+        } catch (error) {
+          const refusal = error instanceof SubcError ? error : error instanceof SubcCallError && error.cause instanceof SubcError ? error.cause : undefined;
+          if (!refusal || !isRouteBusyRetryable(errorFrameFlags.get(refusal) ?? 0, refusal.code, this.gates.get(handle) === gate))
+            throw error;
+          const exhausted = () => new SubcCallError("not_sent", `daemon refused before forwarding: ${refusal.message}`, "route_busy", refusal);
+          busyDeadlineError = exhausted();
+          const remaining = deadline - this.opts.now();
+          if (remaining <= 0 || signal?.aborted)
+            throw exhausted();
+          const ms = Math.min(remaining, delay * (0.5 + this.opts.random() * 0.5));
+          delay = Math.min(1000, delay * 2);
+          const proceed = await this.busySleep(ms, gate.signal, signal);
+          if (gate.signal.aborted)
+            throw gate.signal.reason;
+          if (!proceed || this.opts.now() >= deadline)
+            throw exhausted();
+        }
+      }
+    } finally {
+      if (!slot.inFlight)
+        slot.release();
+    }
+  }
+  async busySleep(ms, closed, signal) {
+    if (closed.aborted || signal?.aborted)
+      return false;
+    let abort;
+    const cancelled = new Promise((resolve) => {
+      abort = () => resolve(false);
+    });
+    closed.addEventListener("abort", abort, { once: true });
+    signal?.addEventListener("abort", abort, { once: true });
+    try {
+      return await Promise.race([this.opts.sleep(ms).then(() => true), cancelled]);
+    } finally {
+      closed.removeEventListener("abort", abort);
+      signal?.removeEventListener("abort", abort);
+    }
+  }
+  subscribeGated(handle, body, onEvent, opts) {
+    const bytes = body instanceof Uint8Array ? body : this.encode(body);
+    const priority = opts.priority ?? Priority.Interactive;
+    const admission = opts.admissionClass ?? AdmissionClass.Normal;
+    const abort = new AbortController;
+    let current;
+    let cancelled = false;
+    let resolveClosed;
+    let rejectClosed;
+    let resolveEnded;
+    const closed = new Promise((resolve, reject) => {
+      resolveClosed = resolve;
+      rejectClosed = reject;
+    });
+    const ended = new Promise((resolve) => {
+      resolveEnded = resolve;
+    });
+    this.gatedRequest(handle, true, undefined, abort.signal, (slot, remaining) => this.sendAttempt(handle, bytes, priority, admission, remaining, onEvent, undefined, undefined, false, undefined, undefined, slot, true, (key, pending, corr) => {
+      current = { key, pending, corr };
+    })).then((frame) => {
+      if (cancelled)
+        return;
+      resolveEnded(frame.header.ty === FrameType.Response ? { kind: "response", body: frame.body } : { kind: "stream_end" });
+      resolveClosed();
+    }, (error) => {
+      if (cancelled)
+        return;
+      if (error instanceof SubcError && error.closeReason)
+        resolveEnded(error.closeReason === "connection_lost" ? { kind: "connection_lost" } : { kind: "route_closed", reason: error.closeReason });
+      else if (error instanceof SubcError || error instanceof SubcCallError)
+        resolveEnded({ kind: "error", code: error.code, message: error.message, detail: error.detail });
+      else
+        resolveEnded({ kind: "connection_lost" });
+      rejectClosed(error);
+    });
+    return { closed, ended, unsubscribe: () => {
+      if (cancelled)
+        return;
+      cancelled = true;
+      abort.abort();
+      if (current && this.pending.get(current.key) === current.pending) {
+        const { key, pending, corr } = current;
+        this.settle(key, pending, () => pending.reject(new SubcError("subscription cancelled")));
+        if (this.isLiveHandle(handle))
+          this.cancel(handle, corr, priority);
+      }
+      resolveEnded({ kind: "cancelled" });
+      resolveClosed();
+    } };
+  }
+  sendAttempt(handle, body, priority, admission, timeoutMs, onProgress, acceptFrame, onLateResponse, binary = false, signal, sleepGraceMs = this.opts.sleepGraceMs ?? DEFAULT_SLEEP_GRACE_MS, slot, subscription = false, registered) {
     if (handle)
       this.assertLiveHandle(handle);
     if (this.closedErr)
@@ -14484,7 +15076,7 @@ class SubcClient {
     const key = pendingKey(handle, corr);
     const channel = handle?.channel ?? 0;
     const epoch = handle?.epoch ?? 0;
-    const frame = buildFrame(FrameType.Request, buildFlags(binary, priority, false, admission), channel, epoch, corr, body);
+    const frame = buildFrame(FrameType.Request, buildFlags(binary, priority, false, admission) | (subscription ? SUBSCRIPTION_FLAG : 0), channel, epoch, corr, body);
     return new Promise((resolve, reject) => {
       const ms = timeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
       const pending = {
@@ -14494,11 +15086,27 @@ class SubcClient {
         onProgress,
         timer: null,
         acceptFrame,
-        onLateResponse
+        onLateResponse,
+        slot,
+        subscription
       };
-      pending.timer = setTimeout(() => this.arbitrateTimeout(key, pending, channel, corr, ms), ms);
+      if (!subscription)
+        this.armRequestTimeout(key, pending, channel, corr, ms, sleepGraceMs);
       this.pending.set(key, pending);
-      writeBorrowed(this.sock, encodeFrame(frame), Date.now() + ms).catch((error) => {
+      registered?.(key, pending, corr);
+      if (slot && handle) {
+        slot.inFlight = true;
+        this.slots.set(key, { handle, slot });
+      }
+      const write = writeTrackedBorrowed(this.sock, encodeFrame(frame), Date.now() + ms);
+      if (slot && !write.queued) {
+        this.slots.delete(key);
+        slot.inFlight = false;
+        slot.release();
+      }
+      write.completed.catch((error) => {
+        if (error instanceof SocketWriteNotQueuedError || error instanceof SocketWriteQueuedError)
+          error = error.cause ?? error;
         const current = this.pending.get(key);
         if (current)
           this.rejectPending(key, current, error instanceof Error ? error : new SubcError(String(error)));
@@ -14507,10 +15115,16 @@ class SubcClient {
         this.attachCancelSignal(signal, key, handle, corr, priority);
     });
   }
+  armRequestTimeout(key, pending, channel, corr, ms, sleepGraceMs) {
+    pending.sleepGrace = { wallStartMs: Date.now(), awakeStartMs: performance.now(), ms: sleepGraceMs, used: false };
+    pending.timer = setTimeout(() => this.arbitrateTimeout(key, pending, channel, corr, ms), ms);
+  }
   arbitrateTimeout(key, pending, channel, corr, ms) {
     const settleAsTimeout = () => {
       if (pending.onLateResponse)
         this.lateResponses.set(key, pending.onLateResponse);
+      if (pending.slot?.inFlight && pending.handle && this.isLiveHandle(pending.handle))
+        this.cancel(pending.handle, corr);
       this.rejectPending(key, pending, new SubcError(this.timeoutMessage(channel, corr, ms), REQUEST_DEADLINE_MARKER));
     };
     const graceDeadline = Date.now() + this.opts.timeoutArbitrationGraceMs;
@@ -14522,6 +15136,17 @@ class SubcClient {
         setImmediate(arbitrate);
         return;
       }
+      const sleep = pending.sleepGrace;
+      if (sleep && !sleep.used && sleep.ms > 0) {
+        const wallElapsed = Date.now() - sleep.wallStartMs;
+        const awakeElapsed = performance.now() - sleep.awakeStartMs;
+        const sleptMs = wallElapsed - awakeElapsed;
+        if (sleptMs > SLEEP_DETECTION_THRESHOLD_MS) {
+          sleep.used = true;
+          pending.timer = setTimeout(() => this.arbitrateTimeout(key, pending, channel, corr, ms), sleep.ms);
+          return;
+        }
+      }
       settleAsTimeout();
     };
     setImmediate(arbitrate);
@@ -14532,7 +15157,7 @@ class SubcClient {
     const priority = opts.priority ?? Priority.Interactive;
     const admission = opts.admissionClass ?? AdmissionClass.Normal;
     try {
-      const reply = await this.sendManaged(handle, bytes, priority, admission, opts.timeoutMs, opts.onProgress, binary, opts.signal);
+      const reply = await this.sendManaged(handle, bytes, priority, admission, opts.timeoutMs, opts.onProgress, binary, opts.signal, validatedSleepGraceMs(opts.sleepGraceMs ?? this.opts.sleepGraceMs ?? DEFAULT_SLEEP_GRACE_MS));
       return this.decodeReply(reply);
     } catch (error) {
       if (error instanceof SubcCallError)
@@ -14540,7 +15165,13 @@ class SubcClient {
       throw this.terminalCallError("managed call failed", error);
     }
   }
-  sendManaged(handle, body, priority, admission, timeoutMs, onProgress, binary = false, signal) {
+  sendManaged(...args) {
+    const [handle, body, priority, admission, timeoutMs, onProgress, binary, signal, sleepGraceMs] = args;
+    if (!this.gates.has(handle))
+      return this.sendManagedAttempt(...args);
+    return this.gatedRequest(handle, false, timeoutMs, signal, (slot, remaining) => this.sendManagedAttempt(handle, body, priority, admission, remaining, onProgress, binary, signal, sleepGraceMs, slot));
+  }
+  sendManagedAttempt(handle, body, priority, admission, timeoutMs, onProgress, binary = false, signal, sleepGraceMs = this.opts.sleepGraceMs ?? DEFAULT_SLEEP_GRACE_MS, slot) {
     try {
       this.assertLiveHandle(handle);
     } catch (error) {
@@ -14574,12 +15205,22 @@ class SubcClient {
         reject,
         onProgress,
         timer: null,
-        classifyFailure
+        classifyFailure,
+        slot
       };
-      pending.timer = setTimeout(() => this.arbitrateTimeout(key, pending, handle.channel, corr, ms), ms);
+      this.armRequestTimeout(key, pending, handle.channel, corr, ms, sleepGraceMs);
       this.pending.set(key, pending);
+      if (slot) {
+        slot.inFlight = true;
+        this.slots.set(key, { handle, slot });
+      }
       const write = writeTrackedBorrowed(this.sock, encodeFrame(frame), Date.now() + ms);
       handedToSocket = write.queued;
+      if (slot && !write.queued) {
+        this.slots.delete(key);
+        slot.inFlight = false;
+        slot.release();
+      }
       write.completed.catch((error) => {
         const current = this.pending.get(key);
         if (current)
@@ -14596,7 +15237,7 @@ class SubcClient {
       throw new SubcCallError("terminal", "managed call requires a BindIdentity in SubcClient.connect({ identity }) or call(..., { identity })", "missing_identity");
     }
     const target = { kind: opts.targetKind ?? this.opts.targetKind, module_id: moduleId };
-    const consumerIdentity = routeOpenConsumerIdentity(opts);
+    const consumerIdentity = await routeOpenConsumerIdentity(opts);
     const reverseRequests = opts.reverseRequests ?? new ReverseRequestRegistry;
     reverseRequests.seal();
     const key = routeCacheKey(target, identity, consumerIdentity, reverseRequests.capabilities(), scope);
@@ -14681,6 +15322,7 @@ class SubcClient {
       if ("handle" in outcome) {
         const { handle } = outcome;
         if (cached.closed) {
+          this.failHandle(handle, new SubcError("route closed during route.open", "route_closed", undefined, "closed_by_caller"));
           this.liveRoutes.delete(handle.channel);
           this.sendRouteGoodbye(handle);
           throw this.routeClosedDuringOpen();
@@ -14804,6 +15446,9 @@ class SubcClient {
         return;
       } catch (err) {
         if (!isConsumerReconnectTransient(err) || attempt >= this.opts.reconnectBackoff.maxAttempts) {
+          if (isConsumerReconnectTransient(err) && !(err instanceof AuthError)) {
+            throw new DaemonUnavailableError(err);
+          }
           if (err instanceof AuthError && attempt > 1) {
             throw new AuthError(`reconnect gave up after ${attempt} attempts: ${err.message} — the connection file and the daemon's key disagree persistently ` + `(daemon restarting in a loop, split connection-file paths, or a genuinely foreign daemon on this port); ` + `check the daemon, then restart this host app`);
           }
@@ -14926,6 +15571,16 @@ class SubcClient {
     }
     const key = pendingKey(handle, frame.header.corr);
     const pending = this.pending.get(key);
+    if (frame.header.ty === FrameType.Response || frame.header.ty === FrameType.Error || frame.header.ty === FrameType.StreamEnd) {
+      const record = this.slots.get(key);
+      if (record) {
+        this.slots.delete(key);
+        record.slot.inFlight = false;
+        const busy = frame.header.ty === FrameType.Error && pending?.slot === record.slot && isRouteBusyRetryable(frame.header.flags, this.errorFromFrame(frame).code, !!handle && this.gates.has(handle));
+        if (!busy)
+          record.slot.release();
+      }
+    }
     if (pending) {
       if (pending.acceptFrame && !pending.acceptFrame(frame))
         return;
@@ -14941,7 +15596,7 @@ class SubcClient {
           this.settle(key, pending, () => pending.resolve(frame));
           return;
         case FrameType.Error:
-          this.settle(key, pending, () => pending.reject(this.errorFromFrame(frame)));
+          this.settle(key, pending, () => pending.reject(this.errorFromFrame(frame), frame));
           return;
         default:
           return;
@@ -15078,6 +15733,14 @@ class SubcClient {
     return this.legacyChannelReasons.get(channel) ?? "unknown";
   }
   failHandle(handle, error) {
+    this.gates.get(handle)?.close(error);
+    this.gates.delete(handle);
+    for (const [key, record] of this.slots) {
+      if (sameRouteHandle(record.handle, handle)) {
+        record.slot.release();
+        this.slots.delete(key);
+      }
+    }
     for (const [key, pending] of this.pending) {
       if (pending.handle && sameRouteHandle(pending.handle, handle))
         this.rejectPending(key, pending, error);
@@ -15087,6 +15750,10 @@ class SubcClient {
     const routeError = err instanceof SubcError && err.closeReason ? err : new SubcError(err.message, errorCode(err), undefined, this.closeStarted ? "closed_by_caller" : "connection_lost");
     if (!this.closedErr)
       this.closedErr = err;
+    for (const gate of this.gates.values())
+      gate.close(routeError);
+    this.gates.clear();
+    this.slots.clear();
     this.routeEndReasons.clear();
     this.legacyChannelReasons.clear();
     this.routeModules.clear();
@@ -15120,6 +15787,9 @@ class SubcClient {
     return this.ingressEpochDropCount;
   }
   installRoute(channel, epoch, reverseRequests = new ReverseRequestRegistry) {
+    const previous = this.liveRoutes.get(channel);
+    if (previous && this.gates.has(previous))
+      this.failHandle(previous, new SubcError("route replaced", "route_closed", undefined, "closed_by_caller"));
     const handle = createRouteHandle(channel, epoch, this.connectionToken, reverseRequests);
     this.routeEndReasons.delete(channel);
     this.legacyChannelReasons.delete(channel);
@@ -15190,9 +15860,15 @@ function isRetryableRouteOpenCode(code) {
     return false;
   if (code === "target_flow_unsupported")
     return false;
+  if (code === "target_federated_unsupported")
+    return false;
   if (code === "target_agent_run_unsupported")
     return false;
-  return code === "module_reloading" || code === "module_warming" || code === "target_unavailable" || code === "module_timeout" || code === "scope_not_synced" || code === "scope_changed";
+  if (code === "scope_bind_proof_required" || code === "scope_bind_proof_mismatch")
+    return false;
+  if (code === "scope_epoch_in_use")
+    return false;
+  return code === "module_reloading" || code === "module_warming" || code === "target_unavailable" || code === "module_timeout" || code === "scope_not_synced" || code === "scope_changed" || code === "session_address_unavailable" || code === "bind_busy";
 }
 function equalJitter(delayMs, random) {
   const half = delayMs / 2;
@@ -15229,6 +15905,12 @@ var STALE_ROUTE_EPOCH = "stale_route_epoch";
 function isEstablishedRouteDead(_flags, code) {
   return code === UNKNOWN_CHANNEL || code === STALE_ROUTE_EPOCH;
 }
+function isRouteBusyRetryable(flags, code, routeOptedIn) {
+  return routeOptedIn && (flags & DAEMON_ORIGIN_FLAG) !== 0 && code === "route_busy";
+}
+function isDataPlaneDrainRefusal(code) {
+  return code === "module_reloading";
+}
 async function connectionFileExists(path) {
   try {
     await fs3.access(path);
@@ -15240,6 +15922,7 @@ async function connectionFileExists(path) {
 function normalizeConnectOptions(opts) {
   return {
     connectionFile: opts.connectionFile,
+    transport: opts.transport ?? "tcp",
     handshakeTimeoutMs: opts.handshakeTimeoutMs,
     identity: opts.identity,
     targetKind: opts.targetKind ?? DEFAULT_MANAGED_TARGET_KIND,
@@ -15249,11 +15932,18 @@ function normalizeConnectOptions(opts) {
     random: opts.random ?? Math.random,
     routeOpenRetryDeadlineMs: opts.routeOpenRetryDeadlineMs ?? ROUTE_OPEN_RETRY_DEADLINE_MS,
     timeoutArbitrationGraceMs: opts.timeoutArbitrationGraceMs ?? TIMEOUT_ARBITRATION_GRACE_MS,
+    sleepGraceMs: validatedSleepGraceMs(opts.sleepGraceMs ?? DEFAULT_SLEEP_GRACE_MS),
     bodyReadTimeoutMs: opts.bodyReadTimeoutMs,
     livenessProbeWindowMs: opts.livenessProbeWindowMs ?? LIVENESS_PROBE_WINDOW_MS,
     onControlPush: opts.onControlPush
   };
 }
+function validatedSleepGraceMs(ms) {
+  if (!Number.isFinite(ms) || ms < 0 || ms > 2147483647) {
+    throw new RangeError("sleepGraceMs must be finite and in 0..2147483647 milliseconds");
+  }
+  return ms;
+}
 function isValidCapabilityIdentifier(identifier) {
   if (/\s/u.test(identifier))
     return false;
@@ -15276,7 +15966,13 @@ function isValidCapabilityIdentifier(identifier) {
 function routeCacheKey(target, identity, consumerIdentity, consumerCapabilities, scope) {
   const consumerPart = consumerIdentity ? `${consumerIdentity.module_id}\x00${consumerIdentity.launch_nonce}` : "";
   const capabilitiesPart = [...consumerCapabilities].sort().join("\x00");
-  const scopePart = scope ? JSON.stringify([scope.owner.kind, scope.owner.kind === "reserved" ? scope.owner.module_id : null, scope.ref, scope.scopeEpoch]) : "";
+  const scopePart = scope ? JSON.stringify([
+    scope.owner.kind,
+    scope.owner.kind === "reserved" ? scope.owner.module_id : null,
+    scope.ref,
+    scope.scopeEpoch,
+    scope.bindProof === undefined ? null : createHash4("sha256").update(scope.bindProof).digest("hex")
+  ]) : "";
   return `${target.kind}\x00${target.module_id}\x00${identity.project_root}\x00${identity.harness}\x00${identity.session}\x00${consumerPart}\x00${capabilitiesPart}\x00${scopePart}`;
 }
 function validatedRouteScope(scope) {
@@ -15294,13 +15990,18 @@ function validatedRouteScope(scope) {
   if (!Number.isSafeInteger(scope.scopeEpoch) || scope.scopeEpoch < 0) {
     throw new SubcError("scope.scopeEpoch must be a safe non-negative integer", "invalid_scope");
   }
-  return { owner: { ...scope.owner }, ref: scope.ref, scopeEpoch: scope.scopeEpoch };
+  return {
+    owner: { ...scope.owner },
+    ref: scope.ref,
+    scopeEpoch: scope.scopeEpoch,
+    ...scope.bindProof !== undefined ? { bindProof: scope.bindProof } : {}
+  };
 }
-function routeOpenConsumerIdentity(opts = {}) {
+async function routeOpenConsumerIdentity(opts = {}) {
   if (opts.consumerIdentity !== undefined)
     return opts.consumerIdentity ?? undefined;
   const moduleId = process.env[SUBC_MODULE_ID_ENV];
-  const launchNonce = launchNonceOrUndefined()?.value;
+  const launchNonce = (await launchNonceOrUndefinedAsync())?.value;
   if (!moduleId || !launchNonce)
     return;
   return { module_id: moduleId, launch_nonce: launchNonce };
@@ -15753,19 +16454,19 @@ function getLifecycleRegistry() {
 
 // ../aft-bridge/dist/project-identity.js
 import { realpathSync as realpathSync3 } from "node:fs";
-import { posix as posix2, resolve as resolve7, win32 as win322 } from "node:path";
+import { posix as posix3, resolve as resolve6, win32 as win323 } from "node:path";
 function canonicalizeProjectRoot(dir) {
   const trimmed = trimProjectRootSeparators(dir);
   let canonical;
   try {
     canonical = realpathSync3(trimmed);
   } catch {
-    canonical = resolve7(trimmed);
+    canonical = resolve6(trimmed);
   }
   return normalizeWindowsRoot(canonical);
 }
 function trimProjectRootSeparators(dir, platform = process.platform) {
-  const root = (platform === "win32" ? win322 : posix2).parse(dir).root;
+  const root = (platform === "win32" ? win323 : posix3).parse(dir).root;
   const trimmed = dir.replace(/[/\\]+$/, "");
   return trimmed.length < root.length ? root : trimmed;
 }
@@ -16564,6 +17265,8 @@ class SubcTransportPool {
   harness;
   connectionFile;
   handshakeTimeoutMs;
+  clock;
+  waitClock;
   consumerIdentity;
   hostScopes;
   hostScopeCache = new Map;
@@ -16606,6 +17309,13 @@ class SubcTransportPool {
   editSlotSurvives;
   editSlotSurvivesCaptured = false;
   constructor(options) {
+    this.clock = options.clock ?? {
+      now: () => Date.now(),
+      awakeNow: () => performance.now(),
+      setTimeout: (callback, ms) => setTimeout(callback, ms),
+      clearTimeout: (timer) => clearTimeout(timer)
+    };
+    this.waitClock = new WaitClock(() => this.clock.now(), () => this.clock.awakeNow?.() ?? this.clock.now());
     this.connectionFile = options.connectionFile;
     this.harness = options.harness;
     this.handshakeTimeoutMs = options.handshakeTimeoutMs;
@@ -17232,11 +17942,12 @@ class SubcTransportPool {
     this.stopUnusedHostScopeRetry(record.identity.session);
   }
   async routeRequest(identity, body, timeoutMs, onProgress, expectedGeneration, abortSignal) {
-    const callStartedAt = performance.now();
+    const callStartedAt = this.waitClock.now();
     const callDeadlineMs = timeoutMs ?? SUBC_DEFAULT_REQUEST_TIMEOUT_MS;
+    const deadline = new RequestDeadline(this.waitClock, callDeadlineMs);
     let scheduledDelayMs = 0;
-    const spentMs = () => Math.max(performance.now() - callStartedAt, scheduledDelayMs);
-    const remainingMs = () => callDeadlineMs - spentMs();
+    const spentMs = () => Math.max(this.waitClock.now() - callStartedAt, scheduledDelayMs);
+    const remainingMs = () => deadline.remaining() - Math.max(0, scheduledDelayMs - (this.waitClock.now() - callStartedAt));
     const root = asCanonicalRootPath(identity.project_root);
     let generation = expectedGeneration;
     if (this.lifecycleEnabled()) {
@@ -17257,12 +17968,12 @@ class SubcTransportPool {
           const remaining = remainingMs();
           if (remaining <= 0)
             throw keyChanged ?? callDeadlinePassedError(undefined, callDeadlineMs);
-          let timer;
+          let cancelTimer;
           try {
             const acquired = await Promise.race([
               this.ensureClient(),
               new Promise((resolve) => {
-                timer = setTimeout(() => resolve(CALL_DEADLINE_EXPIRED), remaining);
+                cancelTimer = deadlineTimer(this.clock, remainingMs, () => resolve(CALL_DEADLINE_EXPIRED));
               })
             ]);
             if (acquired === CALL_DEADLINE_EXPIRED) {
@@ -17277,22 +17988,22 @@ class SubcTransportPool {
             if (spentMs() + this.nextRouteReopenDelayMs() >= callDeadlineMs)
               throw error;
           } finally {
-            clearTimeout(timer);
+            cancelTimer?.();
           }
           const { delayMs, wait } = this.waitForRouteReopenBackoff();
           scheduledDelayMs = spentMs() + delayMs;
-          let retryTimer;
+          let cancelRetryTimer;
           try {
             const waited = await Promise.race([
               wait,
               new Promise((resolve) => {
-                retryTimer = setTimeout(() => resolve(CALL_DEADLINE_EXPIRED), callDeadlineMs - (performance.now() - callStartedAt));
+                cancelRetryTimer = deadlineTimer(this.clock, remainingMs, () => resolve(CALL_DEADLINE_EXPIRED));
               })
             ]);
             if (waited === CALL_DEADLINE_EXPIRED)
               throw keyChanged;
           } finally {
-            clearTimeout(retryTimer);
+            cancelRetryTimer?.();
           }
         }
         this.assertRecordLive(record);
@@ -17335,9 +18046,9 @@ class SubcTransportPool {
         const remaining = remainingMs();
         if (remaining <= 0)
           throw callDeadlinePassedError(lastRefusal, callDeadlineMs);
-        let timer;
+        let cancelTimer;
         const expired = new Promise((resolve) => {
-          timer = setTimeout(() => resolve(CALL_DEADLINE_EXPIRED), remaining);
+          cancelTimer = deadlineTimer(this.clock, remainingMs, () => resolve(CALL_DEADLINE_EXPIRED));
         });
         try {
           const opened = await Promise.race([openRoute(), expired]);
@@ -17346,7 +18057,7 @@ class SubcTransportPool {
           }
           return opened;
         } finally {
-          clearTimeout(timer);
+          cancelTimer?.();
         }
       };
       const openRouteAfterReloadWindow = async () => {
@@ -17425,6 +18136,7 @@ class SubcTransportPool {
           try {
             request = client.request(route, body, {
               timeoutMs: Math.ceil(requestTimeoutMs),
+              ...deadline.resumed ? { sleepGraceMs: 0 } : {},
               onProgress
             });
           } catch (error) {
@@ -17552,6 +18264,7 @@ class SubcTransportPool {
     this.connecting = this.connectFn({
       connectionFile: this.connectionFile,
       handshakeTimeoutMs: this.handshakeTimeoutMs,
+      sleepGraceMs: RESUME_ALLOWANCE_MS,
       onControlPush: (push) => {
         if (owner && this.client === owner)
           this.onScopeRouteClose(push);
@@ -18553,7 +19266,7 @@ function taskIdFromError(error) {
   return;
 }
 // ../aft-bridge/dist/feature-config.js
-import { createHash as createHash4 } from "node:crypto";
+import { createHash as createHash5 } from "node:crypto";
 import { createRequire } from "node:module";
 var CANONICAL_TOOLS = [
   "aft_callgraph",
@@ -18614,12 +19327,7 @@ var RETIRED_IDLE_CHECKOUT_HOURS = [
   "idle.checkout_hours"
 ];
 var DATA_LAYER_KEYS_REFUSED_FROM = [0, 65];
-var DATA_LAYER_RETIRED_PATHS = [
-  "views.callgraph_copies",
-  "views.enabled",
-  "views.idle_checkout_hours",
-  "worktree.ram_overlay"
-];
+var DATA_LAYER_RETIRED_PATHS = ["views.idle_checkout_hours"];
 var IDLE_CHECKOUT_HOURS_DEFAULT = 168;
 var IDLE_CHECKOUT_HOURS_MIN = 1;
 var IDLE_CHECKOUT_HOURS_MAX = 24 * 365;
@@ -18646,7 +19354,10 @@ function readRunningRelease() {
   return [0, 0];
 }
 var runningRelease;
+var runningReleaseOverrideForTest;
 function getRunningRelease() {
+  if (runningReleaseOverrideForTest)
+    return runningReleaseOverrideForTest;
   runningRelease ??= readRunningRelease();
   return runningRelease;
 }
@@ -18675,7 +19386,7 @@ function removedBlockKeyErrors(value, release, refuseRetired) {
   const paths = REMOVED_OPENCODE_PATHS.filter((path) => hasPath(value, path));
   if (refuseRetired)
     paths.push(...refusedRetiredNames(value));
-  if (releaseAtLeast(release, DATA_LAYER_KEYS_REFUSED_FROM))
+  if (refuseRetired && releaseAtLeast(release, DATA_LAYER_KEYS_REFUSED_FROM))
     paths.push(...DATA_LAYER_RETIRED_PATHS.filter((path) => hasPath(value, path)));
   return paths.map((path) => `removed_config_key:${path}; run npx @cortexkit/aft doctor --fix`);
 }
@@ -18699,7 +19410,10 @@ var REFUSED_RETIRED_PATHS = [
   "experimental.bash",
   "idle.lsp_ttl_minutes",
   "inspect.tier2_soft_deadline_ms",
-  "inspect.max_drill_down_items"
+  "inspect.max_drill_down_items",
+  "views.callgraph_copies",
+  "views.enabled",
+  "worktree.ram_overlay"
 ];
 function refusedRetiredNames(block) {
   const names = REFUSED_RETIRED_PATHS.filter((path) => hasPath(block, path));
@@ -18897,8 +19611,9 @@ function translateDataLayerPaths(map, prefix, out) {
     }
   }
   for (const path of REMOVED_DATA_LAYER_PATHS) {
-    if (hasPath(map, path))
-      out.removedKeys.push(`${prefix}${path}`);
+    const [container, leaf] = path.split(".");
+    if (container && leaf && takeNested(map, container, leaf).found)
+      recordRetired(out, prefix, path);
   }
 }
 function translateExperimentalPaths(map, prefix, out) {
@@ -19148,7 +19863,7 @@ var NO_EFFECT_RETIRED_NOTES = [
   ]
 ];
 function noEffectNote(key) {
-  return NO_EFFECT_RETIRED_NOTES.find(([path]) => namesPath(key, path))?.[1];
+  return [...NO_EFFECT_RETIRED_NOTES, ...REMOVED_DATA_LAYER_NOTES].find(([path]) => namesPath(key, path))?.[1];
 }
 function namesPath(key, path) {
   return key === path || key.endsWith(`.${path}`);
@@ -19169,26 +19884,7 @@ var REMOVED_DATA_LAYER_NOTES = [
 ];
 function retiredIdleCheckoutHoursNote() {
   const [retired, replacement] = RETIRED_IDLE_CHECKOUT_HOURS;
-  return `${retired} is now ${replacement}; from ${refusedFromVersion()} AFT refuses a config file that still sets ${retired}.`;
-}
-function removedConfigKeysNoticeMessage(configPath, translation) {
-  const removed = translation.removedKeys ?? [];
-  if (removed.length === 0)
-    return "";
-  const parts = [
-    `${configPath} sets removed keys (${removed.join(", ")}); AFT ignores them, and from ${refusedFromVersion()} it refuses a config file that sets them. Run \`npx @cortexkit/aft doctor --fix\` to remove them.`
-  ];
-  for (const [path, note] of REMOVED_DATA_LAYER_NOTES) {
-    if (removed.some((key) => namesPath(key, path)))
-      parts.push(note);
-  }
-  return parts.join(" ");
-}
-function removedConfigKeysNoticeDigest(translation) {
-  return noticeDigest({
-    notice: "removed_data_layer_keys_v1",
-    keys: sortedUnique(translation.removedKeys)
-  });
+  return `${retired} is now ${replacement}; from ${refusedFromVersion()} AFT refuses a user config file that still sets ${retired}.`;
 }
 function legacyConfigNoticeMessage(configPath, translation) {
   const equivalents = translation.retiredKeys.filter((key) => noEffectNote(key) === undefined);
@@ -19202,13 +19898,10 @@ function legacyConfigNoticeMessage(configPath, translation) {
       parts.push(retiredIdleCheckoutHoursNote());
     }
   }
-  for (const [, note] of NO_EFFECT_RETIRED_NOTES) {
+  for (const [, note] of [...NO_EFFECT_RETIRED_NOTES, ...REMOVED_DATA_LAYER_NOTES]) {
     if (noEffect.has(note))
       parts.push(note);
   }
-  const removed = removedConfigKeysNoticeMessage(configPath, translation);
-  if (removed)
-    parts.push(removed);
   return parts.join(" ");
 }
 function translateConfigDocument(map, tier) {
@@ -19216,7 +19909,6 @@ function translateConfigDocument(map, tier) {
     warnings: [],
     legacyInput: false,
     retiredKeys: [],
-    removedKeys: [],
     retiredEnabledFalse: false
   };
   translateBlock(map, tier === "user", "base", out);
@@ -19227,7 +19919,6 @@ function translateConfigDocument(map, tier) {
     }
   }
   out.retiredKeys = sortedUnique(out.retiredKeys);
-  out.removedKeys = sortedUnique(out.removedKeys);
   return out;
 }
 function unknownDisabledTools(disabled) {
@@ -19266,7 +19957,8 @@ function projectBlock(block) {
   for (const path of [
     ...RETIRED_PATHS.map(([retired]) => retired),
     ...REMOVED_NO_EFFECT_PATHS,
-    ...DATA_LAYER_RETIRED_PATHS
+    ...DATA_LAYER_RETIRED_PATHS,
+    ...REMOVED_DATA_LAYER_PATHS
   ]) {
     const dot = path.indexOf(".");
     if (dot < 0) {
@@ -19346,7 +20038,7 @@ function canonicalJson(value) {
   return JSON.stringify(value);
 }
 function noticeDigest(projection) {
-  return createHash4("sha256").update(canonicalJson(projection), "utf8").digest("hex");
+  return createHash5("sha256").update(canonicalJson(projection), "utf8").digest("hex");
 }
 var SEMANTIC_COST_NOTICE = "AFT indexes now default on; the local semantic backend may download an ONNX runtime and model and use CPU. Run npx @cortexkit/aft setup to change indexes.semantic.";
 var SEMANTIC_COST_NOTICE_DIGEST = noticeDigest({ notice: "semantic_default_cost_v1" });
@@ -20219,9 +20911,9 @@ async function createConcreteAftTransportPool(opts) {
 var LIFECYCLE_STATE = Symbol.for("@cortexkit/aft-bridge/location-lifecycle/v1");
 var RELEASE_LOCATION = Symbol.for("@cortexkit/aft-bridge/location-release/v1");
 // ../aft-bridge/dist/lsp-github-install.js
-import { createHash as createHash5, randomBytes as randomBytes2 } from "node:crypto";
+import { createHash as createHash6, randomBytes as randomBytes2 } from "node:crypto";
 import { closeSync as closeSync6, copyFileSync as copyFileSync3, createReadStream as createReadStream2, createWriteStream as createWriteStream2, existsSync as existsSync6, lstatSync as lstatSync2, mkdirSync as mkdirSync4, openSync as openSync5, readdirSync as readdirSync2, readFileSync as readFileSync5, readlinkSync, readSync as readSync5, realpathSync as realpathSync4, renameSync as renameSync3, rmSync as rmSync2, statSync as statSync6, unlinkSync as unlinkSync3, writeFileSync as writeFileSync2 } from "node:fs";
-import { dirname as dirname4, join as join11, relative as relative4, resolve as resolve8 } from "node:path";
+import { dirname as dirname4, join as join10, relative as relative3, resolve as resolve7 } from "node:path";
 import { Readable as Readable2 } from "node:stream";
 import { pipeline as pipeline2 } from "node:stream/promises";
 
@@ -20440,13 +21132,13 @@ function detectHostPlatform() {
 
 // ../aft-bridge/dist/tar-executable.js
 import { existsSync as existsSync5 } from "node:fs";
-import { join as join10 } from "node:path";
+import { join as join9 } from "node:path";
 function windowsTarExecutable(options = {}) {
   const platform = options.platform ?? process.platform;
   if (platform !== "win32")
     return "tar";
   const env = options.env ?? process.env;
-  const systemTar = join10(env.SystemRoot ?? "C:\\Windows", "System32", "tar.exe");
+  const systemTar = join9(env.SystemRoot ?? "C:\\Windows", "System32", "tar.exe");
   return (options.exists ?? existsSync5)(systemTar) ? systemTar : "tar";
 }
 function extractionCommand(args, privateStorage) {
@@ -20490,14 +21182,14 @@ function createGithubInstaller(services) {
     return getAftLspBinariesDir();
   }
   function ghPackageDir(spec) {
-    return join11(ghCacheRoot(), spec.id);
+    return join10(ghCacheRoot(), spec.id);
   }
   function ghBinDir(spec) {
     const platform = detectHostPlatform()?.platform ?? "linux";
     return dirname4(ghBinaryPath(spec, platform));
   }
   function ghExtractDir(spec) {
-    return join11(ghPackageDir(spec), "extracted");
+    return join10(ghPackageDir(spec), "extracted");
   }
   const INSTALLED_META_FILE = ".aft-installed";
   const INSTALL_FAILED_FILE = ".aft-install-failed.json";
@@ -20505,8 +21197,9 @@ function createGithubInstaller(services) {
   const INSTALL_LOCK_WAIT_MS = 10 * 60 * 1000;
   const INSTALL_LOCK_POLL_INTERVAL_MS = 1000;
   const INSTALL_LOCK_WAIT_TIMEOUT_REASON = "install lock held by another process for 10 minutes";
+  const SMOKE_TIMEOUT_MS = 2000;
   function installFailureMarkerPath(spec) {
-    return join11(ghPackageDir(spec), INSTALL_FAILED_FILE);
+    return join10(ghPackageDir(spec), INSTALL_FAILED_FILE);
   }
   function readInstallFailureMarker(spec) {
     try {
@@ -20550,15 +21243,15 @@ function createGithubInstaller(services) {
     const meta = readGithubInstalledMetaIn(ghPackageDir(spec));
     if (spec.layout === "distribution" && meta?.layout === "distribution" && isSafeVersion(meta.version)) {
       const arch = detectHostPlatform()?.arch ?? "x64";
-      return join11(ghExtractDir(spec), spec.binaryPathInArchive(platform, arch, stripTagV(meta.version)));
+      return join10(ghExtractDir(spec), spec.binaryPathInArchive(platform, arch, stripTagV(meta.version)));
     }
     const ext = platform === "win32" ? ".exe" : "";
-    return join11(ghPackageDir(spec), "bin", `${spec.binary}${ext}`);
+    return join10(ghPackageDir(spec), "bin", `${spec.binary}${ext}`);
   }
   function isGithubInstalled(spec, platform) {
     for (const candidate of ghBinaryCandidates(spec, platform)) {
       try {
-        if (statSync6(join11(ghBinDir(spec), candidate)).isFile())
+        if (statSync6(join10(ghBinDir(spec), candidate)).isFile())
           return true;
       } catch {}
     }
@@ -20571,7 +21264,7 @@ function createGithubInstaller(services) {
   }
   function readGithubInstalledMetaIn(installDir) {
     try {
-      const path = join11(installDir, INSTALLED_META_FILE);
+      const path = join10(installDir, INSTALLED_META_FILE);
       if (!statSync6(path).isFile())
         return null;
       const parsed = JSON.parse(readFileSync5(path, "utf8"));
@@ -20602,7 +21295,7 @@ function createGithubInstaller(services) {
         ...layout ? { layout } : {},
         ...smoke ? { smoke } : {}
       };
-      const path = join11(installDir, INSTALLED_META_FILE);
+      const path = join10(installDir, INSTALLED_META_FILE);
       const tempPath = `${path}.tmp-${process.pid}-${randomBytes2(6).toString("hex")}`;
       try {
         writeFileSync2(tempPath, JSON.stringify(meta), { encoding: "utf8", flag: "wx" });
@@ -20618,7 +21311,7 @@ function createGithubInstaller(services) {
   const MAX_EXTRACT_BYTES = 1024 * 1024 * 1024;
   function sha256OfFile(path) {
     return new Promise((resolve, reject) => {
-      const hash = createHash5("sha256");
+      const hash = createHash6("sha256");
       const stream = createReadStream2(path);
       stream.on("error", reject);
       stream.on("data", (chunk) => hash.update(chunk));
@@ -20626,7 +21319,7 @@ function createGithubInstaller(services) {
     });
   }
   function sha256OfFileSync(path) {
-    const hash = createHash5("sha256");
+    const hash = createHash6("sha256");
     const fd = openSync5(path, "r");
     try {
       const buffer = Buffer.allocUnsafe(1024 * 1024);
@@ -20854,7 +21547,7 @@ function createGithubInstaller(services) {
         throw new Error(`failed to read staging dir ${dir}: ${err}`);
       }
       for (const entry of entries) {
-        const full = join11(dir, entry);
+        const full = join10(dir, entry);
         let lst;
         try {
           lst = lstatSync2(full);
@@ -20866,7 +21559,7 @@ function createGithubInstaller(services) {
           try {
             target = readlinkSync(full);
           } catch {}
-          throw new Error(`archive contains symlink ${relative4(realStagingRoot, full)} → ${target}; rejecting (zip-slip defense)`);
+          throw new Error(`archive contains symlink ${relative3(realStagingRoot, full)} → ${target}; rejecting (zip-slip defense)`);
         }
         let realFull;
         try {
@@ -20874,8 +21567,8 @@ function createGithubInstaller(services) {
         } catch (err) {
           throw new Error(`failed to realpath ${full}: ${err}`);
         }
-        const rel = relative4(realStagingRoot, realFull);
-        if (relativePathEscapesRoot(rel) || resolve8(realStagingRoot, rel) !== realFull) {
+        const rel = relative3(realStagingRoot, realFull);
+        if (relativePathEscapesRoot(rel) || resolve7(realStagingRoot, rel) !== realFull) {
           throw new Error(`archive entry escapes staging root: ${full} → ${realFull} (zip-slip defense)`);
         }
         if (lst.isDirectory()) {
@@ -21015,7 +21708,7 @@ function createGithubInstaller(services) {
   }
   function quarantineCachedGithubInstall(spec, reason) {
     const packageDir = ghPackageDir(spec);
-    const dest = join11(ghCacheRoot(), ".quarantine", encodeURIComponent(spec.id), `${Date.now()}`);
+    const dest = join10(ghCacheRoot(), ".quarantine", encodeURIComponent(spec.id), `${Date.now()}`);
     warn(`[lsp] tofu_mismatch ${spec.id}: ${reason}; quarantining ${packageDir} -> ${dest}`);
     try {
       mkdirSync4(dirname4(dest), { recursive: true });
@@ -21025,7 +21718,7 @@ function createGithubInstaller(services) {
       warn(`[lsp] tofu_mismatch ${spec.id}: failed to quarantine cache entry: ${err}`);
     }
   }
-  async function smokeGithubBinary(spec, binaryPath) {
+  async function smokeGithubBinary(spec, binaryPath, timeoutMs = SMOKE_TIMEOUT_MS) {
     return new Promise((resolveSmoke) => {
       let child;
       let settled = false;
@@ -21045,8 +21738,8 @@ function createGithubInstaller(services) {
       const timer = setTimeout(() => {
         child?.kill("SIGKILL");
         child?.unref();
-        finish("timeout", "exceeded 2000 ms; keeping install");
-      }, 2000);
+        finish("timeout", `exceeded ${timeoutMs} ms; keeping install`);
+      }, timeoutMs);
       const capture = (chunk) => {
         const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
         const available = 64 * 1024 - output.length;
@@ -21070,19 +21763,19 @@ function createGithubInstaller(services) {
   function hasRequiredRuntime(spec, extractDir, version) {
     return (spec.requiredRuntimePaths?.(stripTagV(version)) ?? []).every(({ path, kind }) => {
       try {
-        const info = statSync6(join11(extractDir, path));
+        const info = statSync6(join10(extractDir, path));
         return kind === "file" ? info.isFile() : info.isDirectory();
       } catch {
         return false;
       }
     });
   }
-  function validateCachedGithubInstall(spec, platform) {
+  function validateCachedGithubInstall(spec, platform, smokeTimeoutMs = SMOKE_TIMEOUT_MS) {
     const lease = acquireInstallLock(spec.githubRepo);
     if (!lease)
       return null;
     try {
-      const validation = validateCachedGithubInstallUnderLock(spec, platform);
+      const validation = validateCachedGithubInstallUnderLock(spec, platform, smokeTimeoutMs);
       if (typeof validation !== "boolean")
         return validation.finally(() => lease.release());
       lease.release();
@@ -21092,10 +21785,10 @@ function createGithubInstaller(services) {
       throw err;
     }
   }
-  function validateCachedGithubInstallUnderLock(spec, platform) {
+  function validateCachedGithubInstallUnderLock(spec, platform, smokeTimeoutMs = SMOKE_TIMEOUT_MS) {
     const packageDir = ghPackageDir(spec);
     const meta = readGithubInstalledMetaIn(packageDir);
-    const binaryPath = ghBinaryCandidates(spec, platform).map((candidate) => join11(ghBinDir(spec), candidate)).find((candidate) => {
+    const binaryPath = ghBinaryCandidates(spec, platform).map((candidate) => join10(ghBinDir(spec), candidate)).find((candidate) => {
       try {
         return statSync6(candidate).isFile();
       } catch {
@@ -21125,7 +21818,7 @@ function createGithubInstaller(services) {
         quarantineCachedGithubInstall(spec, "missing required runtime files");
         return false;
       }
-      const verdict = await smokeGithubBinary(spec, binaryPath);
+      const verdict = await smokeGithubBinary(spec, binaryPath, smokeTimeoutMs);
       if (verdict === "failed") {
         quarantineCachedGithubInstall(spec, "cached binary failed runtime smoke check");
         return false;
@@ -21171,7 +21864,7 @@ function createGithubInstaller(services) {
     }
     const pkgDir = ghPackageDir(spec);
     const extractDir = ghExtractDir(spec);
-    const archivePath = join11(pkgDir, expected.name);
+    const archivePath = join10(pkgDir, expected.name);
     log(`[lsp] downloading ${spec.id} ${tag} → ${matchingAsset.url}`);
     try {
       await downloadFile(matchingAsset.url, archivePath, fetchImpl, matchingAsset.size, signal);
@@ -21207,7 +21900,7 @@ function createGithubInstaller(services) {
     const binaryRelativePath = spec.binaryPathInArchive(platform, arch, version);
     try {
       await extractArchiveSafely(archivePath, extractDir, expected.archive, async (stagingDir) => {
-        const stagedBinary = join11(stagingDir, binaryRelativePath);
+        const stagedBinary = join10(stagingDir, binaryRelativePath);
         if (!existsSync6(stagedBinary) || !statSync6(stagedBinary).isFile()) {
           throw new Error(`extracted binary not found at ${stagedBinary}`);
         }
@@ -21237,7 +21930,7 @@ function createGithubInstaller(services) {
         unlinkSync3(archivePath);
       } catch {}
     }
-    const innerBinaryPath = join11(extractDir, binaryRelativePath);
+    const innerBinaryPath = join10(extractDir, binaryRelativePath);
     const targetBinary = spec.layout === "distribution" ? innerBinaryPath : ghBinaryPath(spec, platform);
     mkdirSync4(dirname4(targetBinary), { recursive: true });
     try {
@@ -21364,6 +22057,7 @@ function createGithubInstaller(services) {
     let installsStarted = 0;
     const lockWaitTimeoutMs = Math.max(0, options.__lockWaitTimeoutMsForTests ?? INSTALL_LOCK_WAIT_MS);
     const lockPollIntervalMs = Math.max(1, options.__lockPollIntervalMsForTests ?? INSTALL_LOCK_POLL_INTERVAL_MS);
+    const smokeTimeoutMs = Math.max(1, options.__smokeTimeoutMsForTests ?? SMOKE_TIMEOUT_MS);
     function notifyCachedBinDirsChanged(directory) {
       try {
         options.onCachedBinDirsChanged?.(directory);
@@ -21376,7 +22070,7 @@ function createGithubInstaller(services) {
       while (true) {
         if (signal.aborted)
           return null;
-        const validation = await withInstallLock(spec.githubRepo, async () => validateCachedGithubInstallUnderLock(spec, platform));
+        const validation = await withInstallLock(spec.githubRepo, async () => validateCachedGithubInstallUnderLock(spec, platform, smokeTimeoutMs));
         if (validation !== null)
           return validation;
         if (signal.aborted)
@@ -21405,7 +22099,7 @@ function createGithubInstaller(services) {
     }
     for (const spec of GITHUB_LSP_TABLE) {
       const controller = new AbortController;
-      const validation = isGithubInstalled(spec, host.platform) ? validateCachedGithubInstall(spec, host.platform) : false;
+      const validation = isGithubInstalled(spec, host.platform) ? validateCachedGithubInstall(spec, host.platform, smokeTimeoutMs) : false;
       if (validation === true)
         cachedBinDirs.push(ghBinDir(spec));
       const cacheReady = (validation === null ? retryBusyCacheValidation(spec, host.platform, controller.signal) : Promise.resolve(validation)).then((healthy) => {
@@ -21460,7 +22154,7 @@ function createGithubInstaller(services) {
         const currentHost = detectHostPlatform();
         if (!currentHost)
           return [];
-        const directories = await Promise.all(GITHUB_LSP_TABLE.map(async (spec) => isGithubInstalled(spec, currentHost.platform) && await validateCachedGithubInstall(spec, currentHost.platform) ? ghBinDir(spec) : null));
+        const directories = await Promise.all(GITHUB_LSP_TABLE.map(async (spec) => isGithubInstalled(spec, currentHost.platform) && await validateCachedGithubInstall(spec, currentHost.platform, smokeTimeoutMs) ? ghBinDir(spec) : null));
         return directories.filter((directory) => directory !== null);
       }
     };
@@ -21531,7 +22225,7 @@ import { stat as stat2 } from "node:fs/promises";
 // ../aft-bridge/dist/npm-resolver.js
 import { readdirSync as readdirSync3, statSync as statSync7 } from "node:fs";
 import { homedir as homedir9 } from "node:os";
-import { dirname as dirname5, isAbsolute as isAbsolute5, join as join12 } from "node:path";
+import { dirname as dirname5, isAbsolute as isAbsolute4, join as join11 } from "node:path";
 function defaultDeps() {
   return {
     platform: process.platform,
@@ -21558,16 +22252,16 @@ function npmFromPath(deps) {
   const separator = deps.platform === "win32" ? ";" : ":";
   for (const entry of raw.split(separator)) {
     const dir = entry.trim().replace(/^"|"$/g, "");
-    if (!dir || !isAbsolute5(dir))
+    if (!dir || !isAbsolute4(dir))
       continue;
-    if (isFile(join12(dir, name)))
+    if (isFile(join11(dir, name)))
       return dir;
   }
   return null;
 }
 function npmAdjacentToNode(deps) {
   const dir = dirname5(deps.execPath);
-  return isFile(join12(dir, npmBinaryName(deps.platform))) ? dir : null;
+  return isFile(join11(dir, npmBinaryName(deps.platform))) ? dir : null;
 }
 function highestVersionedNodeBin(installsDir, name) {
   let entries;
@@ -21576,8 +22270,8 @@ function highestVersionedNodeBin(installsDir, name) {
   } catch {
     return null;
   }
-  const candidates = entries.filter((v) => isFile(join12(installsDir, v, "bin", name))).sort((a, b) => compareVersionsDesc(a, b));
-  return candidates.length > 0 ? join12(installsDir, candidates[0], "bin") : null;
+  const candidates = entries.filter((v) => isFile(join11(installsDir, v, "bin", name))).sort((a, b) => compareVersionsDesc(a, b));
+  return candidates.length > 0 ? join11(installsDir, candidates[0], "bin") : null;
 }
 function compareVersionsDesc(a, b) {
   const pa = a.replace(/^v/, "").split(".").map((n) => Number.parseInt(n, 10));
@@ -21602,22 +22296,22 @@ function wellKnownNpmDirs(deps) {
     const programFiles = env.ProgramFiles || "C:\\Program Files";
     const appData = env.APPDATA;
     const localAppData = env.LOCALAPPDATA;
-    push(join12(programFiles, "nodejs"));
+    push(join11(programFiles, "nodejs"));
     if (appData)
-      push(join12(appData, "npm"));
+      push(join11(appData, "npm"));
     if (localAppData)
-      push(join12(localAppData, "Volta", "bin"));
+      push(join11(localAppData, "Volta", "bin"));
     if (env.NVM_SYMLINK)
       push(env.NVM_SYMLINK);
   } else {
     if (env.NVM_BIN)
       push(env.NVM_BIN);
-    push(highestVersionedNodeBin(join12(home, ".nvm", "versions", "node"), name));
-    push(highestVersionedNodeBin(join12(home, ".local", "share", "mise", "installs", "node"), name));
-    push(highestVersionedNodeBin(join12(home, ".asdf", "installs", "nodejs"), name));
-    push(join12(home, ".volta", "bin"));
-    push(join12(home, ".asdf", "shims"));
-    const systemDirs = deps.systemNpmDirs ?? (platform === "darwin" ? ["/opt/homebrew/bin", "/usr/local/bin"] : ["/usr/local/bin", "/usr/bin", join12(home, ".local", "bin")]);
+    push(highestVersionedNodeBin(join11(home, ".nvm", "versions", "node"), name));
+    push(highestVersionedNodeBin(join11(home, ".local", "share", "mise", "installs", "node"), name));
+    push(highestVersionedNodeBin(join11(home, ".asdf", "installs", "nodejs"), name));
+    push(join11(home, ".volta", "bin"));
+    push(join11(home, ".asdf", "shims"));
+    const systemDirs = deps.systemNpmDirs ?? (platform === "darwin" ? ["/opt/homebrew/bin", "/usr/local/bin"] : ["/usr/local/bin", "/usr/bin", join11(home, ".local", "bin")]);
     for (const dir of systemDirs)
       push(dir);
   }
@@ -21627,12 +22321,12 @@ function resolveNpm(deps = defaultDeps()) {
   const name = npmBinaryName(deps.platform);
   const onPath = npmFromPath(deps);
   if (onPath)
-    return { command: join12(onPath, name), binDir: onPath };
+    return { command: join11(onPath, name), binDir: onPath };
   const adjacent = npmAdjacentToNode(deps);
   if (adjacent)
-    return { command: join12(adjacent, name), binDir: adjacent };
+    return { command: join11(adjacent, name), binDir: adjacent };
   for (const dir of wellKnownNpmDirs(deps)) {
-    const candidate = join12(dir, name);
+    const candidate = join11(dir, name);
     if (isFile(candidate))
       return { command: candidate, binDir: dir };
   }
@@ -21641,15 +22335,15 @@ function resolveNpm(deps = defaultDeps()) {
 function npmCandidates(deps = defaultDeps()) {
   const name = npmBinaryName(deps.platform);
   const dirs = [
-    ...(deps.env.PATH ?? "").split(deps.platform === "win32" ? ";" : ":").filter(isAbsolute5),
+    ...(deps.env.PATH ?? "").split(deps.platform === "win32" ? ";" : ":").filter(isAbsolute4),
     dirname5(deps.execPath),
     ...wellKnownNpmDirs(deps)
   ];
   return [...new Set(dirs)].flatMap((binDir) => {
     return [
-      join12(binDir, name),
-      join12(binDir, "node_modules", "npm", "bin", "npm-cli.js"),
-      join12(binDir, "..", "lib", "node_modules", "npm", "bin", "npm-cli.js")
+      join11(binDir, name),
+      join11(binDir, "node_modules", "npm", "bin", "npm-cli.js"),
+      join11(binDir, "..", "lib", "node_modules", "npm", "bin", "npm-cli.js")
     ].filter(isFile).map((command) => ({ command, binDir }));
   });
 }
@@ -21818,7 +22512,7 @@ function terminateNpmProcessTree(child, invocation, env = process.env, gracePeri
     };
     child.once("exit", onChildExit);
     const systemRoot = env.SystemRoot ?? env.SYSTEMROOT;
-    const taskkill = systemRoot ? join12(systemRoot, "System32", "taskkill.exe") : "taskkill.exe";
+    const taskkill = systemRoot ? join11(systemRoot, "System32", "taskkill.exe") : "taskkill.exe";
     try {
       killer = spawn(taskkill, ["/pid", String(child.pid), "/t", "/f"], {
         stdio: "ignore",
@@ -21949,7 +22643,7 @@ async function lspNpmInstallInvocation(npm, target, before, clock = SYSTEM_CLOCK
 }
 // ../aft-bridge/dist/lsp-npm-selection.js
 import { readFile, realpath, stat as stat3 } from "node:fs/promises";
-import { dirname as dirname6, join as join13, resolve as resolve9 } from "node:path";
+import { dirname as dirname6, join as join12, resolve as resolve8 } from "node:path";
 var LSP_NPM_REFUSAL = "AFT can't install language servers with the npm at <path> (<reason>). Put a real npm 7 or newer first on PATH; pinning a server version won't help.";
 function lspNpmRefusal(path, reason) {
   return LSP_NPM_REFUSAL.replace("<path>", path).replace("<reason>", reason);
@@ -21964,13 +22658,13 @@ async function genuineNpm(candidate) {
   const windowsShim = /\.(?:cmd|bat)$/i.test(executable);
   let current = dirname6(executable);
   if (windowsShim)
-    current = join13(current, "node_modules", "npm");
+    current = join12(current, "node_modules", "npm");
   for (;; ) {
     try {
-      const pkg = JSON.parse(await readFile(join13(current, "package.json"), "utf8"));
+      const pkg = JSON.parse(await readFile(join12(current, "package.json"), "utf8"));
       const bin = typeof pkg.bin === "string" ? pkg.bin : pkg.bin?.npm;
       if (pkg.name === "npm" && typeof bin === "string") {
-        const cli = await realpath(resolve9(current, bin));
+        const cli = await realpath(resolve8(current, bin));
         if (!windowsShim && cli !== executable)
           return { reason: "not npm: command is not npm's declared CLI" };
         const major = /^(\d+)\.\d+\.\d+$/.exec(pkg.version)?.[1];
@@ -21979,7 +22673,7 @@ async function genuineNpm(candidate) {
         if (Number(major) < 7)
           return { reason: `old npm: ${pkg.version} (requires npm 7 or newer)` };
         if (windowsShim || process.platform === "win32" && /\.[cm]?js$/i.test(cli)) {
-          const node = join13(candidate.binDir ?? dirname6(executable), "node.exe");
+          const node = join12(candidate.binDir ?? dirname6(executable), "node.exe");
           if (!(await stat3(node)).isFile())
             return { reason: "probe failed: adjacent Node is missing" };
           return { npm: { command: node, binDir: dirname6(node), cliPath: cli }, reason: "" };
@@ -22071,12 +22765,12 @@ function shouldInterruptWaitsForMessage(detachOnUserMessage, operatorText) {
 // ../aft-bridge/dist/migration.js
 import { closeSync as closeSync8, existsSync as existsSync9, mkdirSync as mkdirSync5, openSync as openSync7, readFileSync as readFileSync8, renameSync as renameSync5, rmSync as rmSync3, statSync as statSync8, unlinkSync as unlinkSync4, writeFileSync as writeFileSync4 } from "node:fs";
 import { homedir as homedir12, tmpdir as tmpdir3 } from "node:os";
-import { basename as basename2, dirname as dirname9, join as join16, resolve as resolve11 } from "node:path";
+import { basename as basename2, dirname as dirname9, join as join15, resolve as resolve10 } from "node:path";
 
 // ../aft-bridge/dist/paths.js
 import { existsSync as existsSync7, readFileSync as readFileSync6, realpathSync as realpathSync5, renameSync as renameSync4, writeFileSync as writeFileSync3 } from "node:fs";
 import { homedir as homedir10 } from "node:os";
-import { dirname as dirname7, isAbsolute as isAbsolute6, join as join14, resolve as resolve10 } from "node:path";
+import { dirname as dirname7, isAbsolute as isAbsolute5, join as join13, resolve as resolve9 } from "node:path";
 function homeDir3() {
   if (process.platform === "win32")
     return process.env.USERPROFILE || process.env.HOME || homedir10();
@@ -22084,18 +22778,18 @@ function homeDir3() {
 }
 function configHome() {
   const xdg = process.env.XDG_CONFIG_HOME;
-  if (xdg && isAbsolute6(xdg))
+  if (xdg && isAbsolute5(xdg))
     return xdg;
-  return join14(homeDir3(), ".config");
+  return join13(homeDir3(), ".config");
 }
 function legacyOpenCodeConfigDir() {
   const envDir = process.env.OPENCODE_CONFIG_DIR?.trim();
   if (envDir)
-    return resolve10(envDir);
-  return join14(configHome(), "opencode");
+    return resolve9(envDir);
+  return join13(configHome(), "opencode");
 }
 function legacyPiAgentDir() {
-  return join14(homeDir3(), ".pi", "agent");
+  return join13(homeDir3(), ".pi", "agent");
 }
 function legacySources(basePath, label, harness) {
   return [
@@ -22104,10 +22798,10 @@ function legacySources(basePath, label, harness) {
   ];
 }
 function resolveCortexKitUserConfigPath() {
-  return join14(configHome(), "cortexkit", "aft.jsonc");
+  return join13(configHome(), "cortexkit", "aft.jsonc");
 }
 function resolveCortexKitProjectConfigPath(projectDirectory) {
-  return join14(projectDirectory, ".cortexkit", "aft.jsonc");
+  return join13(projectDirectory, ".cortexkit", "aft.jsonc");
 }
 function resolveProjectConfigReadPath(projectDirectory, operatingHarness) {
   const canonical = resolveCortexKitProjectConfigPath(projectDirectory);
@@ -22134,14 +22828,14 @@ function resolveCortexKitConfigPaths(projectDirectory) {
 }
 function resolveLegacyAftConfigSources(projectDirectory) {
   const project = [
-    ...legacySources(join14(projectDirectory, ".opencode", "aft"), "OpenCode project", "opencode"),
-    ...legacySources(join14(projectDirectory, ".pi", "aft"), "Pi project", "pi")
+    ...legacySources(join13(projectDirectory, ".opencode", "aft"), "OpenCode project", "opencode"),
+    ...legacySources(join13(projectDirectory, ".pi", "aft"), "Pi project", "pi")
   ];
   const identity = (path) => {
     try {
       return realpathSync5(path);
     } catch {
-      return resolve10(path);
+      return resolve9(path);
     }
   };
   const protectedPaths = new Set([
@@ -22150,18 +22844,18 @@ function resolveLegacyAftConfigSources(projectDirectory) {
   ].map(identity));
   return {
     user: [
-      ...legacySources(join14(legacyOpenCodeConfigDir(), "aft"), "OpenCode user", "opencode"),
-      ...legacySources(join14(legacyPiAgentDir(), "aft"), "Pi user", "pi")
+      ...legacySources(join13(legacyOpenCodeConfigDir(), "aft"), "OpenCode user", "opencode"),
+      ...legacySources(join13(legacyPiAgentDir(), "aft"), "Pi user", "pi")
     ].filter((source) => !protectedPaths.has(identity(source.path))),
     project
   };
 }
 function resolveHarnessStoragePath(storageRoot, harness, ...segments) {
-  return join14(storageRoot, harness, ...segments);
+  return join13(storageRoot, harness, ...segments);
 }
 function repairRootScopedStorageFile(storageRoot, harness, fileName) {
   const harnessPath = resolveHarnessStoragePath(storageRoot, harness, fileName);
-  const rootPath = join14(storageRoot, fileName);
+  const rootPath = join13(storageRoot, fileName);
   if (existsSync7(harnessPath) || !existsSync7(rootPath))
     return harnessPath;
   try {
@@ -22250,15 +22944,15 @@ function decodeFileUrl(target) {
 import { closeSync as closeSync7, existsSync as existsSync8, promises as fsPromises, openSync as openSync6, readFileSync as readFileSync7, readSync as readSync6 } from "node:fs";
 import { createRequire as createRequire2 } from "node:module";
 import { homedir as homedir11 } from "node:os";
-import { delimiter, dirname as dirname8, isAbsolute as isAbsolute7, join as join15 } from "node:path";
+import { delimiter, dirname as dirname8, isAbsolute as isAbsolute6, join as join14 } from "node:path";
 var ensureBinaryForResolver = ensureBinary;
 var npmPlatformPackageReader = null;
 var cacheCopiesInFlight = new Map;
 function copyToVersionedCache(npmBinaryPath, version) {
   const tag = version.startsWith("v") ? version : `v${version}`;
   const ext = process.platform === "win32" ? ".exe" : "";
-  const versionedDir = join15(getAftBinaryCacheDir(), tag);
-  const cachedPath = join15(versionedDir, `aft${ext}`);
+  const versionedDir = join14(getAftBinaryCacheDir(), tag);
+  const cachedPath = join14(versionedDir, `aft${ext}`);
   if (existsSync8(cachedPath) && isTrustedCachedBinary(cachedPath, version))
     return { cachedPath };
   const existing = cacheCopiesInFlight.get(cachedPath);
@@ -22304,7 +22998,7 @@ function homeDirFromEnv(env) {
   return (process.platform === "win32" ? env.USERPROFILE || env.HOME : env.HOME) || homedir11();
 }
 function cachedBinaryPathFromEnv(version, env, ext) {
-  const binaryPath = join15(getAftBinaryCacheDir(env), version, `aft${ext}`);
+  const binaryPath = join14(getAftBinaryCacheDir(env), version, `aft${ext}`);
   return existsSync8(binaryPath) ? binaryPath : null;
 }
 async function probeBinaryCandidateOffThread(binaryPath, source, expectedVersion) {
@@ -22324,9 +23018,9 @@ function pathCandidates(env, ext) {
   const seen = new Set;
   const candidates = [];
   for (const dir of rawPath.split(delimiter)) {
-    if (!dir || !isAbsolute7(dir))
+    if (!dir || !isAbsolute6(dir))
       continue;
-    const candidate = join15(dir, `aft${ext}`);
+    const candidate = join14(dir, `aft${ext}`);
     if (seen.has(candidate))
       continue;
     seen.add(candidate);
@@ -22404,7 +23098,7 @@ function npmPlatformPackage(ext) {
     const req = createRequire2(import.meta.url);
     const manifestPath = req.resolve(`@cortexkit/aft-${platformKey()}/package.json`);
     const manifest = JSON.parse(readFileSync7(manifestPath, "utf8"));
-    const binaryPath = join15(dirname8(manifestPath), "bin", `aft${ext}`);
+    const binaryPath = join14(dirname8(manifestPath), "bin", `aft${ext}`);
     if (typeof manifest.version !== "string" || !existsSync8(binaryPath))
       return null;
     return { binaryPath, version: normalizeBareVersion(manifest.version) };
@@ -22471,7 +23165,7 @@ async function findProbedBinary(expectedVersion, env) {
     if (usable)
       return { path: usable, source: "PATH" };
   }
-  const cargoPath = join15(homeDirFromEnv(env), ".cargo", "bin", `aft${ext}`);
+  const cargoPath = join14(homeDirFromEnv(env), ".cargo", "bin", `aft${ext}`);
   if (existsSync8(cargoPath)) {
     const usable = await probeBinaryCandidateOffThread(cargoPath, "cargo", pluginVersion);
     if (usable)
@@ -22570,9 +23264,9 @@ function dataHome() {
   if (process.env.XDG_DATA_HOME)
     return process.env.XDG_DATA_HOME;
   if (process.platform === "win32") {
-    return process.env.LOCALAPPDATA || process.env.APPDATA || join16(homeDir4(), "AppData", "Local");
+    return process.env.LOCALAPPDATA || process.env.APPDATA || join15(homeDir4(), "AppData", "Local");
   }
-  return join16(homeDir4(), ".local", "share");
+  return join15(homeDir4(), ".local", "share");
 }
 function homeDir4() {
   if (process.platform === "win32")
@@ -22581,8 +23275,8 @@ function homeDir4() {
 }
 function resolveLegacyStorageRoot(harness) {
   if (harness === "pi")
-    return join16(homeDir4(), ".pi", "agent", "aft");
-  return join16(dataHome(), "opencode", "storage", "plugin", "aft");
+    return join15(homeDir4(), ".pi", "agent", "aft");
+  return join15(dataHome(), "opencode", "storage", "plugin", "aft");
 }
 function stripJsoncForParse(input) {
   let out = "";
@@ -22712,7 +23406,7 @@ function acquireConfigMigrationLock(lockDir) {
 }
 function atomicCopyConfigFile(sourcePath, targetPath) {
   mkdirSync5(dirname9(targetPath), { recursive: true });
-  const tmpPath = join16(dirname9(targetPath), `.${basename2(targetPath)}.${process.pid}.${Date.now()}.${Math.random().toString(16).slice(2)}.tmp`);
+  const tmpPath = join15(dirname9(targetPath), `.${basename2(targetPath)}.${process.pid}.${Date.now()}.${Math.random().toString(16).slice(2)}.tmp`);
   let fd = null;
   try {
     fd = openSync7(tmpPath, "wx", 384);
@@ -22734,7 +23428,7 @@ function atomicCopyConfigFile(sourcePath, targetPath) {
 }
 function atomicWriteConfigFile(targetPath, content) {
   mkdirSync5(dirname9(targetPath), { recursive: true });
-  const tmpPath = join16(dirname9(targetPath), `.${basename2(targetPath)}.${process.pid}.${Date.now()}.${Math.random().toString(16).slice(2)}.tmp`);
+  const tmpPath = join15(dirname9(targetPath), `.${basename2(targetPath)}.${process.pid}.${Date.now()}.${Math.random().toString(16).slice(2)}.tmp`);
   let fd = null;
   try {
     fd = openSync7(tmpPath, "wx", 384);
@@ -22853,8 +23547,8 @@ function visibleConfigMigrationWarning(scope, targetPath, paths, reason) {
 }
 function migrateAftConfigFile(opts) {
   const warnings = [];
-  const resolvedTarget = resolve11(opts.targetPath);
-  const existingSources = opts.legacySources.filter((source) => existsSync9(source.path) && resolve11(source.path) !== resolvedTarget);
+  const resolvedTarget = resolve10(opts.targetPath);
+  const existingSources = opts.legacySources.filter((source) => existsSync9(source.path) && resolve10(source.path) !== resolvedTarget);
   const info = opts.logger?.info ?? opts.logger?.log;
   if (existingSources.length === 0) {
     return { migrated: false, conflict: false, targetPath: opts.targetPath, warnings };
@@ -22916,12 +23610,12 @@ function spawnErrorLabel(error) {
   return [code, error.message].filter(Boolean).join(": ");
 }
 function migrationLogPath(newRoot, harness, logger) {
-  const desired = join16(newRoot, "logs", "migration", `${harness}-${Date.now()}.jsonl`);
+  const desired = join15(newRoot, "logs", "migration", `${harness}-${Date.now()}.jsonl`);
   try {
     mkdirSync5(dirname9(desired), { recursive: true });
     return desired;
   } catch (err) {
-    const fallback = join16(tmpdir3(), `aft-migration-${harness}-${Date.now()}.jsonl`);
+    const fallback = join15(tmpdir3(), `aft-migration-${harness}-${Date.now()}.jsonl`);
     logger?.warn?.(`Failed to create AFT migration log directory ${dirname9(desired)}: ${err instanceof Error ? err.message : String(err)}. ` + `Using fallback log path ${fallback}.`);
     return fallback;
   }
@@ -22981,13 +23675,13 @@ async function ensureStorageMigrated(opts) {
 // ../aft-bridge/dist/migration-notices.js
 import { readFileSync as readFileSync9, renameSync as renameSync6, rmdirSync, statSync as statSync9, writeFileSync as writeFileSync5 } from "node:fs";
 import { homedir as homedir13 } from "node:os";
-import { dirname as dirname10, join as join17, resolve as resolve12 } from "node:path";
+import { dirname as dirname10, join as join16, resolve as resolve11 } from "node:path";
 function migrationNoticeStorePath(env = process.env) {
-  const stateHome = env.XDG_STATE_HOME && env.XDG_STATE_HOME.length > 0 ? env.XDG_STATE_HOME : join17(homedir13(), ".local", "state");
-  return join17(stateHome, "cortexkit", "aft", "migration-notices.json");
+  const stateHome = env.XDG_STATE_HOME && env.XDG_STATE_HOME.length > 0 ? env.XDG_STATE_HOME : join16(homedir13(), ".local", "state");
+  return join16(stateHome, "cortexkit", "aft", "migration-notices.json");
 }
 function noticeKey(configPath, digest) {
-  return `${resolve12(configPath)}|${MIGRATION_POLICY_ID}|${digest}`;
+  return `${resolve11(configPath)}|${MIGRATION_POLICY_ID}|${digest}`;
 }
 function readRecords(storePath) {
   try {
@@ -23181,7 +23875,7 @@ function probeOnnxRuntimeLoadable(libPath, arch = process.arch) {
 // ../aft-bridge/dist/onnx-runtime.js
 import { randomBytes as randomBytes3 } from "node:crypto";
 import { chmodSync as chmodSync2, closeSync as closeSync10, copyFileSync as copyFileSync4, createWriteStream as createWriteStream3, existsSync as existsSync11, lstatSync as lstatSync3, openSync as openSync9, readdirSync as readdirSync4, readFileSync as readFileSync10, readlinkSync as readlinkSync2, realpathSync as realpathSync7, renameSync as renameSync7, rmSync as rmSync4, statSync as statSync10, symlinkSync, unlinkSync as unlinkSync5, writeFileSync as writeFileSync6 } from "node:fs";
-import { basename as basename3, dirname as dirname11, isAbsolute as isAbsolute8, join as join18, relative as relative5, resolve as resolve13, win32 as win323 } from "node:path";
+import { basename as basename3, dirname as dirname11, isAbsolute as isAbsolute7, join as join17, relative as relative4, resolve as resolve12, win32 as win324 } from "node:path";
 import { Readable as Readable3 } from "node:stream";
 import { pipeline as pipeline3 } from "node:stream/promises";
 var ORT_VERSION = "1.24.4";
@@ -23269,7 +23963,7 @@ function resolveOnnxRuntime(storageDir, seams) {
 }
 async function findCachedOnnxRuntime(ortVersionDir, libName) {
   const resolvedOrtDir = resolveCachedOnnxRuntimeDir(ortVersionDir, libName);
-  const libPath = join18(resolvedOrtDir, libName);
+  const libPath = join17(resolvedOrtDir, libName);
   if (existsSync11(libPath)) {
     const meta = readOnnxInstalledMeta(ortVersionDir);
     if (meta?.sha256) {
@@ -23294,7 +23988,7 @@ async function findCachedOnnxRuntime(ortVersionDir, libName) {
 }
 async function resolveOnnxRuntimeUncoalesced(storageDir, seams) {
   const info = seams.platformInfo !== undefined ? seams.platformInfo : getPlatformInfo();
-  const ortVersionDir = join18(storageDir, "onnxruntime", ORT_VERSION);
+  const ortVersionDir = join17(storageDir, "onnxruntime", ORT_VERSION);
   const libName = info?.libName ?? "libonnxruntime.dylib";
   const cached = await findCachedOnnxRuntime(ortVersionDir, libName);
   if (cached)
@@ -23308,9 +24002,9 @@ async function resolveOnnxRuntimeUncoalesced(storageDir, seams) {
     warn(`ONNX Runtime auto-download not available for ${process.platform}/${process.arch}. Install manually: ${getManualInstallHint()}`);
     return null;
   }
-  const onnxBaseDir = join18(storageDir, "onnxruntime");
+  const onnxBaseDir = join17(storageDir, "onnxruntime");
   openPrivateStorageDir(storageDir, onnxBaseDir);
-  const lockPath = join18(onnxBaseDir, ONNX_LOCK_FILE);
+  const lockPath = join17(onnxBaseDir, ONNX_LOCK_FILE);
   const pollMs = seams.lockPollMs ?? LOCK_POLL_MS;
   const deadline = Date.now() + LOCK_WAIT_MS;
   let announcedWait = false;
@@ -23355,7 +24049,7 @@ function cleanupAbandonedStagingDirs(onnxBaseDir) {
     for (const entry of entries) {
       if (!entry.startsWith(`${ORT_VERSION}.tmp.`))
         continue;
-      const stagingDir = join18(onnxBaseDir, entry);
+      const stagingDir = join17(onnxBaseDir, entry);
       const parts = entry.split(".");
       const pidStr = parts[parts.length - 2];
       const pid = pidStr ? Number.parseInt(pidStr, 10) : NaN;
@@ -23392,7 +24086,7 @@ function cleanupAbandonedStagingDirs(onnxBaseDir) {
 }
 function cleanupIncompleteTargetIfUnowned(ortDir) {
   try {
-    if (existsSync11(ortDir) && !existsSync11(join18(ortDir, ONNX_INSTALLED_META_FILE))) {
+    if (existsSync11(ortDir) && !existsSync11(join17(ortDir, ONNX_INSTALLED_META_FILE))) {
       log(`[onnx] removing half-populated install dir ${ortDir} (no meta file)`);
       rmSync4(ortDir, { recursive: true, force: true });
     }
@@ -23420,14 +24114,14 @@ function parseOnnxVersionFromDirectoryPath(value) {
   return null;
 }
 function isPathInsideRoot(root, candidate) {
-  const rel = relative5(root, candidate);
-  return rel === "" || !rel.startsWith("../") && !rel.startsWith("..\\") && rel !== ".." && !isAbsolute8(rel) && !win323.isAbsolute(rel);
+  const rel = relative4(root, candidate);
+  return rel === "" || !rel.startsWith("../") && !rel.startsWith("..\\") && rel !== ".." && !isAbsolute7(rel) && !win324.isAbsolute(rel);
 }
 function detectOnnxVersion(libDir, libName) {
   try {
     const entries = readdirSync4(libDir);
     try {
-      const resolved = parseOnnxVersionFromPath(realpathSync7(join18(libDir, libName)));
+      const resolved = parseOnnxVersionFromPath(realpathSync7(join17(libDir, libName)));
       if (resolved && resolved !== INVALID_ORT_VERSION)
         return resolved;
     } catch {}
@@ -23441,7 +24135,7 @@ function detectOnnxVersion(libDir, libName) {
       if (version)
         return version;
     }
-    const base = join18(libDir, libName);
+    const base = join17(libDir, libName);
     if (existsSync11(base)) {
       try {
         const real = realpathSync7(base);
@@ -23481,18 +24175,18 @@ function pathEntriesForPlatform() {
   return pathEnvValue().split(delimiter).map((entry) => entry.trim().replace(/^"|"$/g, "")).filter((entry) => {
     if (!entry || entry === "." || entry.includes("\x00"))
       return false;
-    return isAbsolute8(entry) || win323.isAbsolute(entry);
+    return isAbsolute7(entry) || win324.isAbsolute(entry);
   });
 }
 function isWindowsSystem32Directory(dir) {
   if (process.platform !== "win32")
     return false;
-  const normalizedDir = win323.resolve(dir).replace(/[\\/]+$/, "").toLowerCase();
+  const normalizedDir = win324.resolve(dir).replace(/[\\/]+$/, "").toLowerCase();
   const windowsRoots = [process.env.SystemRoot, process.env.windir, "C:\\Windows"];
   return windowsRoots.some((root) => {
     if (!root)
       return false;
-    return normalizedDir === win323.resolve(root, "System32").replace(/[\\/]+$/, "").toLowerCase();
+    return normalizedDir === win324.resolve(root, "System32").replace(/[\\/]+$/, "").toLowerCase();
   });
 }
 function directoryContainsLibrary(dir, libName) {
@@ -23508,10 +24202,10 @@ function directoryContainsLibrary(dir, libName) {
   }
 }
 function resolveCachedOnnxRuntimeDir(ortVersionDir, libName) {
-  if (existsSync11(join18(ortVersionDir, libName)))
+  if (existsSync11(join17(ortVersionDir, libName)))
     return ortVersionDir;
-  const libSubdir = join18(ortVersionDir, "lib");
-  if (existsSync11(join18(libSubdir, libName)))
+  const libSubdir = join17(ortVersionDir, "lib");
+  if (existsSync11(join17(libSubdir, libName)))
     return libSubdir;
   return ortVersionDir;
 }
@@ -23526,12 +24220,12 @@ function findSystemOnnxRuntime(libName, searchPathsOverride) {
   } else if (process.platform === "win32") {
     const programFiles = process.env.ProgramFiles ?? "C:\\Program Files";
     const programFilesX86 = process.env["ProgramFiles(x86)"] ?? "C:\\Program Files (x86)";
-    searchPaths.push(join18(programFiles, "onnxruntime", "lib"), join18(programFiles, "Microsoft ONNX Runtime", "lib"), join18(programFiles, "Microsoft Machine Learning", "lib"), join18(programFilesX86, "onnxruntime", "lib"), ...(() => {
+    searchPaths.push(join17(programFiles, "onnxruntime", "lib"), join17(programFiles, "Microsoft ONNX Runtime", "lib"), join17(programFiles, "Microsoft Machine Learning", "lib"), join17(programFilesX86, "onnxruntime", "lib"), ...(() => {
       const nugetPaths = [];
       const userProfile = process.env.USERPROFILE ?? "";
       if (!userProfile)
         return nugetPaths;
-      const nugetPackageDir = join18(userProfile, ".nuget", "packages", "microsoft.ml.onnxruntime");
+      const nugetPackageDir = join17(userProfile, ".nuget", "packages", "microsoft.ml.onnxruntime");
       if (!existsSync11(nugetPackageDir))
         return nugetPaths;
       try {
@@ -23540,7 +24234,7 @@ function findSystemOnnxRuntime(libName, searchPathsOverride) {
             continue;
           if (entry.name === "__globalPackagesFolder" || entry.name.startsWith("."))
             continue;
-          nugetPaths.push(join18(nugetPackageDir, entry.name, "runtimes", "win-x64", "native"), join18(nugetPackageDir, entry.name, "runtimes", "win-arm64", "native"));
+          nugetPaths.push(join17(nugetPackageDir, entry.name, "runtimes", "win-x64", "native"), join17(nugetPackageDir, entry.name, "runtimes", "win-arm64", "native"));
         }
       } catch (err) {
         warn(`Failed to scan NuGet ONNX Runtime cache ${nugetPackageDir}: ${err instanceof Error ? err.message : String(err)}`);
@@ -23552,7 +24246,7 @@ function findSystemOnnxRuntime(libName, searchPathsOverride) {
   const normalizeCase = process.platform === "win32" || process.platform === "darwin";
   const seen = new Set;
   const uniquePaths = searchPaths.filter((p) => {
-    let key = resolve13(p).replace(/[/\\]+$/, "");
+    let key = resolve12(p).replace(/[/\\]+$/, "");
     if (normalizeCase)
       key = key.toLowerCase();
     if (seen.has(key))
@@ -23562,7 +24256,7 @@ function findSystemOnnxRuntime(libName, searchPathsOverride) {
   });
   const unknownVersionPaths = [];
   for (const dir of uniquePaths) {
-    const libPath = join18(dir, libName);
+    const libPath = join17(dir, libName);
     if (process.platform === "win32") {
       if (!directoryContainsLibrary(dir, libName))
         continue;
@@ -23641,19 +24335,19 @@ function validateExtractedTree(stagingRoot) {
   const walk = (dir) => {
     const entries = readdirSync4(dir);
     for (const entry of entries) {
-      const fullPath = join18(dir, entry);
+      const fullPath = join17(dir, entry);
       const lst = lstatSync3(fullPath);
       if (lst.isSymbolicLink()) {
         const linkTarget = readlinkSync2(fullPath);
-        const resolvedTarget = resolve13(dirname11(fullPath), linkTarget);
-        const rel = relative5(realRoot, resolvedTarget);
-        if (relativePathEscapesRoot(rel) || win323.isAbsolute(rel)) {
+        const resolvedTarget = resolve12(dirname11(fullPath), linkTarget);
+        const rel = relative4(realRoot, resolvedTarget);
+        if (relativePathEscapesRoot(rel) || win324.isAbsolute(rel)) {
           throw new Error(`extracted symlink ${fullPath} points outside staging root: ${linkTarget}`);
         }
         continue;
       }
-      const rel = relative5(realRoot, fullPath);
-      if (relativePathEscapesRoot(rel) || win323.isAbsolute(rel)) {
+      const rel = relative4(realRoot, fullPath);
+      if (relativePathEscapesRoot(rel) || win324.isAbsolute(rel)) {
         throw new Error(`extracted entry ${fullPath} escapes staging root`);
       }
       if (lst.isDirectory()) {
@@ -23678,11 +24372,11 @@ async function downloadOnnxRuntime(info, targetDir) {
   const url = `https://github.com/${ORT_REPO}/releases/download/v${ORT_VERSION}/${info.assetName}.${info.archiveType === "tgz" ? "tgz" : "zip"}`;
   log(`Downloading ONNX Runtime v${ORT_VERSION} for ${process.platform}/${process.arch}...`);
   const tmpDir = `${targetDir}.tmp.${process.pid}.${Date.now().toString(36)}${randomBytes3(4).toString("hex")}`;
-  const extractionRoot = join18(tmpDir, "extract");
-  const stagedInstallDir = join18(tmpDir, "install");
+  const extractionRoot = join17(tmpDir, "extract");
+  const stagedInstallDir = join17(tmpDir, "install");
   try {
     privateMkdirSync(extractionRoot);
-    const archivePath = join18(tmpDir, `onnxruntime.${info.archiveType}`);
+    const archivePath = join17(tmpDir, `onnxruntime.${info.archiveType}`);
     await downloadFileWithCap(url, archivePath);
     const archiveSha256 = await sha256File(archivePath);
     log(`ONNX Runtime archive sha256=${archiveSha256}`);
@@ -23695,7 +24389,7 @@ async function downloadOnnxRuntime(info, targetDir) {
       unlinkSync5(archivePath);
     } catch {}
     validateExtractedTree(extractionRoot);
-    const extractedDir = join18(extractionRoot, info.assetName, "lib");
+    const extractedDir = join17(extractionRoot, info.assetName, "lib");
     if (!existsSync11(extractedDir)) {
       throw new Error(`Expected directory not found: ${extractedDir}`);
     }
@@ -23703,7 +24397,7 @@ async function downloadOnnxRuntime(info, targetDir) {
     const realFiles = [];
     const symlinks = [];
     for (const libFile of libFiles) {
-      const src = join18(extractedDir, libFile);
+      const src = join17(extractedDir, libFile);
       try {
         const stat = lstatSync3(src);
         log(`ORT extract: ${libFile} — isSymlink=${stat.isSymbolicLink()}, isFile=${stat.isFile()}, size=${stat.size}`);
@@ -23718,14 +24412,14 @@ async function downloadOnnxRuntime(info, targetDir) {
       }
     }
     copyOnnxLibraries(info, extractedDir, stagedInstallDir, realFiles, symlinks);
-    const libPath = join18(stagedInstallDir, info.libName);
+    const libPath = join17(stagedInstallDir, info.libName);
     const libHash = await sha256File(libPath);
     if (libHash !== info.librarySha256) {
       throw new Error(`onnx runtime library hash mismatch at ${libPath}: sha256 ${libHash}, ` + `expected the pinned ${info.librarySha256} for ${info.assetName}`);
     }
     writeOnnxInstalledMeta(stagedInstallDir, ORT_VERSION, libHash, archiveSha256);
     publishOnnxRuntime(stagedInstallDir, targetDir);
-    writeStampedFileDigest(join18(targetDir, info.libName), libHash);
+    writeStampedFileDigest(join17(targetDir, info.libName), libHash);
     rmSync4(tmpDir, { recursive: true, force: true });
     log(`ONNX Runtime v${ORT_VERSION} installed to ${targetDir}`);
     return targetDir;
@@ -23767,8 +24461,8 @@ function copyOnnxLibraries(info, extractedDir, targetDir, realFiles, symlinks, c
   const requiredLibs = new Set([info.libName]);
   privateMkdirSync(targetDir);
   for (const libFile of realFiles) {
-    const src = join18(extractedDir, libFile);
-    const dst = join18(targetDir, libFile);
+    const src = join17(extractedDir, libFile);
+    const dst = join17(targetDir, libFile);
     try {
       if (copyFile === copyFileSync4)
         privateCopyFileSync(src, dst);
@@ -23787,12 +24481,12 @@ function copyOnnxLibraries(info, extractedDir, targetDir, realFiles, symlinks, c
   }
   const targetRoot = realpathSync7(targetDir);
   for (const link of symlinks) {
-    const dst = join18(targetDir, link.name);
+    const dst = join17(targetDir, link.name);
     try {
       unlinkSync5(dst);
     } catch {}
-    const dstForContainment = join18(targetRoot, link.name);
-    const resolvedTarget = resolve13(dirname11(dstForContainment), link.target);
+    const dstForContainment = join17(targetRoot, link.name);
+    const resolvedTarget = resolve12(dirname11(dstForContainment), link.target);
     if (!isPathInsideRoot(targetRoot, resolvedTarget)) {
       const message = `ONNX Runtime symlink ${link.name} points outside install dir: ${link.target}`;
       if (requiredLibs.has(link.name)) {
@@ -23812,7 +24506,7 @@ function copyOnnxLibraries(info, extractedDir, targetDir, realFiles, symlinks, c
       log(`ORT extract: failed to symlink optional ${link.name}: ${symlinkErr}`);
     }
   }
-  const requiredPath = join18(targetDir, info.libName);
+  const requiredPath = join17(targetDir, info.libName);
   if (!existsSync11(requiredPath)) {
     rmSync4(targetDir, { recursive: true, force: true });
     throw new Error(`Required ONNX Runtime library missing after install: ${requiredPath}`);
@@ -23840,7 +24534,7 @@ function writeOnnxInstalledMeta(installDir, version, sha256, archiveSha256) {
       ...sha256 ? { sha256 } : {},
       archiveSha256
     };
-    writeFileSync6(join18(installDir, ONNX_INSTALLED_META_FILE), JSON.stringify(meta), {
+    writeFileSync6(join17(installDir, ONNX_INSTALLED_META_FILE), JSON.stringify(meta), {
       encoding: "utf8",
       mode: PRIVATE_FILE_MODE
     });
@@ -23849,7 +24543,7 @@ function writeOnnxInstalledMeta(installDir, version, sha256, archiveSha256) {
   }
 }
 function readOnnxInstalledMeta(installDir) {
-  const path = join18(installDir, ONNX_INSTALLED_META_FILE);
+  const path = join17(installDir, ONNX_INSTALLED_META_FILE);
   try {
     if (!statSync10(path).isFile())
       return null;
@@ -25705,7 +26399,7 @@ function isBgCompletion(value) {
 function formatCompletion(completion) {
   const status = formatStatus(completion);
   const duration = formatDuration(completion);
-  const header = `- task ${completion.task_id} (${status}${duration ? `, ${duration}` : ""})`;
+  const header = formatUnknownPtyExit(completion.task_id, completion) ?? `- task ${completion.task_id} (${status}${duration ? `, ${duration}` : ""})`;
   const previewBlock = formatOutputPreview(completion);
   const descendantWarning = completion.live_descendants_summary ? `    ${completion.live_descendants_summary}` : "";
   const captureWarning = completion.output_incomplete || completion.status === "failed" && completion.status_reason ? `    [${completion.status_reason || "PTY output may be incomplete"}]` : "";
@@ -25772,9 +26466,9 @@ import {
 // package.json
 var package_default = {
   name: "@cortexkit/aft-pi",
-  version: "0.64.0",
+  version: "0.65.0",
   type: "module",
-  description: "Pi coding agent extension for Agent File Tools (AFT) — tree-sitter and LSP-powered code analysis",
+  description: "Pi coding agent extension for Agent Foundational Toolkit (AFT) — tree-sitter and LSP-powered code analysis",
   main: "dist/index.js",
   types: "dist/index.d.ts",
   license: "MIT",
@@ -25796,18 +26490,18 @@ var package_default = {
     "test:e2e": "bun test src/__tests__/e2e/"
   },
   dependencies: {
-    "@cortexkit/aft-bridge": "0.64.0",
+    "@cortexkit/aft-bridge": "0.65.0",
     "comment-json": "^5.0.0",
     diff: "^8.0.4",
     zod: "^4.4.3"
   },
   optionalDependencies: {
-    "@cortexkit/aft-darwin-arm64": "0.64.0",
-    "@cortexkit/aft-darwin-x64": "0.64.0",
-    "@cortexkit/aft-linux-arm64": "0.64.0",
-    "@cortexkit/aft-linux-x64": "0.64.0",
-    "@cortexkit/aft-win32-arm64": "0.64.0",
-    "@cortexkit/aft-win32-x64": "0.64.0"
+    "@cortexkit/aft-darwin-arm64": "0.65.0",
+    "@cortexkit/aft-darwin-x64": "0.65.0",
+    "@cortexkit/aft-linux-arm64": "0.65.0",
+    "@cortexkit/aft-linux-x64": "0.65.0",
+    "@cortexkit/aft-win32-arm64": "0.65.0",
+    "@cortexkit/aft-win32-x64": "0.65.0"
   },
   devDependencies: {
     "@earendil-works/pi-coding-agent": "^0.80.2",
@@ -26010,11 +26704,11 @@ function coerceAftStatus(response) {
       warm_entries: readNumber(symbolCache.warm_entries)
     },
     storage_dir: readNullableString(response.storage_dir),
-    checkpoints_total: readNumber(response.checkpoints_total),
+    checkpoints_total: readOptionalNumber(response.checkpoints_total),
     session: {
       id: readString(session.id, "__default__"),
       tracked_files: readNumber(session.tracked_files),
-      checkpoints: readNumber(session.checkpoints)
+      checkpoints: readOptionalNumber(session.checkpoints)
     },
     compression: readCompression(response.compression),
     status_bar: readStatusBar(response.status_bar ?? response.status_bar_values)
@@ -26100,7 +26794,7 @@ import { Type } from "typebox";
 // src/config.ts
 import { existsSync as existsSync12, readFileSync as readFileSync11 } from "node:fs";
 import { homedir as homedir14 } from "node:os";
-import { isAbsolute as isAbsolute9 } from "node:path";
+import { isAbsolute as isAbsolute8 } from "node:path";
 var import_comment_json = __toESM(require_src2(), 1);
 
 // ../../node_modules/.bun/zod@4.4.3/node_modules/zod/v4/core/core.js
@@ -30966,9 +31660,9 @@ var ConfigureWarningsDeliveryEnum = _enum(["toast", "log", "chat"]);
 var IndexKindSchema = _enum(["search", "semantic", "callgraph"]);
 function isSupportedAbsoluteIndexPath(path) {
   if (path === "~" || path.startsWith("~/") || path.startsWith("~\\")) {
-    return isAbsolute9(homedir14());
+    return isAbsolute8(homedir14());
   }
-  return isAbsolute9(path);
+  return isAbsolute8(path);
 }
 var IndexRootSchema = object({
   path: string2().refine(isSupportedAbsoluteIndexPath, {
@@ -31025,6 +31719,7 @@ var LspServerEntrySchema = object({
   initialization_options: unknown().optional()
 });
 var LspConfigSchema = object({
+  max_servers: number2().int().nonnegative().optional(),
   idle_minutes: union([
     number2().int().transform((value) => Math.min(1440, Math.max(5, value))),
     literal("never")
@@ -31108,7 +31803,7 @@ var SubcConfigSchema = object({
   connection_file: string2().optional()
 });
 var GhShimConfigSchema = object({
-  binary_path: string2().trim().refine(isAbsolute9, "gh_shim.binary_path must be absolute").optional()
+  binary_path: string2().trim().refine(isAbsolute8, "gh_shim.binary_path must be absolute").optional()
 });
 var RemoteExecConfigSchema = object({
   enabled: boolean2().optional(),
@@ -31159,13 +31854,6 @@ var IdleConfigSchema = object({
   root_ttl_minutes: number2().int().optional().transform((value) => value === undefined ? undefined : clampIdleRootTtlMinutes(value)),
   checkout_hours: number2().int().optional().transform((value) => value === undefined ? undefined : clampIdleCheckoutHours(value))
 });
-var ViewsConfigSchema = object({
-  enabled: boolean2().optional(),
-  callgraph_copies: number2().int().optional()
-});
-var WorktreeConfigSchema = object({
-  ram_overlay: boolean2().optional()
-});
 var BackupConfigSchema = object({
   enabled: boolean2().optional(),
   max_depth: number2().int().positive().optional(),
@@ -31186,12 +31874,10 @@ var AftConfigFieldsSchema = object({
   indexes: IndexesConfigSchema.optional(),
   index: IndexConfigSchema.optional(),
   storage: object({ cache_dir: string2().nullable().optional() }).optional(),
-  views: ViewsConfigSchema.optional(),
   callgraph_chunk_size: number2().optional(),
   inspect: InspectConfigSchema.optional(),
   idle: IdleConfigSchema.optional(),
   backup: BackupConfigSchema.optional(),
-  worktree: WorktreeConfigSchema.optional(),
   sandbox: SandboxConfigSchema.optional(),
   bash: BashConfigSchema.optional(),
   experimental: ExperimentalConfigSchema.optional(),
@@ -31347,6 +32033,9 @@ function loadConfigFromPath(configPath, tier) {
     throw new ConfigRejectedError(["invalid_config_document"], configPath);
   }
   const removed = removedConfigKeyErrors(cleanConfig, undefined, false);
+  if (tier === "user") {
+    removed.push(...removedConfigKeyErrors(cleanConfig).filter((error) => [...REMOVED_DATA_LAYER_PATHS, ...DATA_LAYER_RETIRED_PATHS].some((path) => error.endsWith(`${path}; run npx @cortexkit/aft doctor --fix`))));
+  }
   if (removed.length) {
     throw new ConfigRejectedError(removed);
   }
@@ -31373,14 +32062,7 @@ function loadConfigFromPath(configPath, tier) {
     if (translation.legacyInput) {
       log2(`Config ${configPath} uses retired keys (${translation.retiredKeys.join(", ")}); applied their current equivalents in memory`);
     }
-    if (translation.removedKeys.length > 0) {
-      configLoadNotices.push({
-        configPath,
-        digest: removedConfigKeysNoticeDigest(translation),
-        message: removedConfigKeysNoticeMessage(configPath, translation)
-      });
-    }
-  } else if (translation.legacyInput || translation.removedKeys.length > 0) {
+  } else if (translation.legacyInput) {
     configLoadNotices.push({
       configPath,
       digest: noticeDigest(projection),
@@ -31465,6 +32147,9 @@ function mergeSemanticConfig(base, override) {
 }
 function mergeLspConfig(base, override) {
   const projectSafe = {};
+  if (override?.max_servers !== undefined && override.max_servers <= (base?.max_servers ?? 8)) {
+    projectSafe.max_servers = override.max_servers;
+  }
   if (override?.python !== undefined)
     projectSafe.python = override.python;
   if (override?.diagnostics_on_edit !== undefined) {
@@ -31485,15 +32170,6 @@ function mergeLspConfig(base, override) {
     return;
   return Object.fromEntries(Object.entries(lsp).filter(([, v]) => v !== undefined));
 }
-function mergeWorktreeConfig(baseWorktree, overrideWorktree) {
-  if (baseWorktree === undefined && overrideWorktree === undefined)
-    return;
-  if (overrideWorktree === undefined)
-    return baseWorktree;
-  if (baseWorktree === undefined)
-    return overrideWorktree;
-  return { ...baseWorktree, ...overrideWorktree };
-}
 function mergeIdleConfig(baseIdle, overrideIdle) {
   const merged = {
     root_ttl_minutes: overrideIdle?.root_ttl_minutes ?? baseIdle?.root_ttl_minutes,
@@ -31609,11 +32285,9 @@ var PROJECT_SAFE_TOP_LEVEL_FIELDS = new Set([
   "revision_reads",
   "validate_on_edit",
   "configure_warnings_delivery",
-  "views",
   "callgraph_chunk_size",
   "inspect",
   "idle",
-  "worktree",
   "git",
   "pi",
   "experimental",
@@ -31728,22 +32402,18 @@ function mergeConfigs(base, override) {
     bash.project_env = projectEnv;
   }
   const inspect = mergeInspectConfig(base.inspect, override.inspect);
-  const worktree = mergeWorktreeConfig(base.worktree, override.worktree);
   const idle = mergeIdleConfig(base.idle, override.idle);
   const sandbox = mergeSandboxConfig(base.sandbox, override.sandbox);
   const remoteExec = mergeRemoteExecConfig(base.remote_exec, override.remote_exec);
   const backup = mergeProjectBackupConfig(base.backup, override.backup);
   const pi = mergePiConfig(base.pi, override.pi);
-  const views = base.views !== undefined || override.views !== undefined ? { ...base.views, ...override.views } : undefined;
   const bridge = base.bridge;
   const safeOverride = pickProjectSafeFields(override);
   delete safeOverride.indexes;
   delete safeOverride.bash;
   delete safeOverride.inspect;
-  delete safeOverride.worktree;
   delete safeOverride.idle;
   delete safeOverride.pi;
-  delete safeOverride.views;
   return {
     ...base,
     ...safeOverride,
@@ -31752,13 +32422,11 @@ function mergeConfigs(base, override) {
     ...lsp ? { lsp } : {},
     ...bash !== undefined ? { bash } : {},
     ...inspect !== undefined ? { inspect } : {},
-    ...worktree !== undefined ? { worktree } : {},
     ...idle !== undefined ? { idle } : {},
     ...sandbox !== undefined ? { sandbox } : {},
     ...remoteExec !== undefined ? { remote_exec: remoteExec } : {},
     ...backup !== undefined ? { backup } : {},
     ...pi !== undefined ? { pi } : {},
-    ...views !== undefined ? { views } : {},
     experimental,
     semantic,
     search,
@@ -32076,7 +32744,7 @@ function detectPiHarness(api) {
 // src/omp-approval.ts
 import { realpathSync as realpathSync8 } from "node:fs";
 import { homedir as homedir15 } from "node:os";
-import { basename as basename4, dirname as dirname12, isAbsolute as isAbsolute10, join as join19, relative as relative6, resolve as resolve14, sep as sep2 } from "node:path";
+import { basename as basename4, dirname as dirname12, isAbsolute as isAbsolute9, join as join18, relative as relative5, resolve as resolve13, sep as sep2 } from "node:path";
 var OMP_TOOL_TIERS = {
   read: "read",
   grep: "read",
@@ -32121,7 +32789,7 @@ function expandPath(value) {
   if (decoded === "~")
     return homedir15();
   if (decoded.startsWith("~/") || decoded.startsWith(`~${sep2}`))
-    return resolve14(homedir15(), decoded.slice(2));
+    return resolve13(homedir15(), decoded.slice(2));
   return decoded;
 }
 function realLocation(path) {
@@ -32129,7 +32797,7 @@ function realLocation(path) {
   let current = path;
   for (;; ) {
     try {
-      return missing.length > 0 ? join19(realpathSync8(current), ...missing) : realpathSync8(current);
+      return missing.length > 0 ? join18(realpathSync8(current), ...missing) : realpathSync8(current);
     } catch (error) {
       if (error.code !== "ENOENT")
         throw error;
@@ -32149,11 +32817,11 @@ function namesOutsidePath(root, value) {
   const expanded = expandPath(value);
   if (expanded.startsWith("file:"))
     return false;
-  const absolute = isAbsolute10(expanded) ? expanded : resolve14(root, expanded);
-  if (relativePathEscapesRoot(relative6(root, absolute)))
+  const absolute = isAbsolute9(expanded) ? expanded : resolve13(root, expanded);
+  if (relativePathEscapesRoot(relative5(root, absolute)))
     return true;
   try {
-    return relativePathEscapesRoot(relative6(realLocation(root), realLocation(absolute)));
+    return relativePathEscapesRoot(relative5(realLocation(root), realLocation(absolute)));
   } catch {
     return true;
   }
@@ -32724,8 +33392,8 @@ function renderInner(s, error, theme, innerWidth) {
   left2.push(kv("symbol cache", `${formatCountShort(s.symbol_cache.local_entries)} local · ${formatCountShort(s.symbol_cache.warm_entries)} warm`, theme));
   right2.push(theme.fg("muted", "Current session"));
   right2.push(kv("tracked files", String(s.session.tracked_files), theme));
-  right2.push(kv("checkpoints", String(s.session.checkpoints), theme));
-  right2.push(kv("all-session", String(s.checkpoints_total), theme));
+  right2.push(kv("checkpoints", s.session.checkpoints?.toString() ?? "—", theme));
+  right2.push(kv("all-session", s.checkpoints_total?.toString() ?? "—", theme));
   for (const line of renderColumns(left2, right2, colWidth))
     lines.push(line);
   lines.push("");
@@ -32888,7 +33556,7 @@ function registerStatusCommand(pi, ctx) {
 
 // src/lsp-auto-install.ts
 import { existsSync as existsSync15, mkdirSync as mkdirSync7, renameSync as renameSync10, rmSync as rmSync7, statSync as statSync12, writeFileSync as writeFileSync9 } from "node:fs";
-import { join as join22 } from "node:path";
+import { join as join21 } from "node:path";
 
 // src/lsp-cache.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
@@ -32903,7 +33571,7 @@ import {
   unlinkSync as unlinkSync6,
   writeFileSync as writeFileSync8
 } from "node:fs";
-import { join as join20 } from "node:path";
+import { join as join19 } from "node:path";
 
 // src/atomic-file.ts
 import { randomUUID as randomUUID2 } from "node:crypto";
@@ -32926,18 +33594,18 @@ function lspCacheRoot() {
   return getAftLspPackagesDir();
 }
 function lspPackageDir(npmPackage) {
-  return join20(lspCacheRoot(), encodeURIComponent(npmPackage));
+  return join19(lspCacheRoot(), encodeURIComponent(npmPackage));
 }
 function lspBinaryPath(npmPackage, binary) {
-  return join20(lspPackageDir(npmPackage), "node_modules", ".bin", binary);
+  return join19(lspPackageDir(npmPackage), "node_modules", ".bin", binary);
 }
 function lspBinDir(npmPackage) {
-  return join20(lspPackageDir(npmPackage), "node_modules", ".bin");
+  return join19(lspPackageDir(npmPackage), "node_modules", ".bin");
 }
 function isInstalled(npmPackage, binary) {
   for (const candidate of lspBinaryCandidates(binary)) {
     try {
-      if (statSync11(join20(lspBinDir(npmPackage), candidate)).isFile())
+      if (statSync11(join19(lspBinDir(npmPackage), candidate)).isFile())
         return true;
     } catch {}
   }
@@ -32957,13 +33625,13 @@ function writeInstalledMetaIn(installDir, version, sha256) {
       installedAt: new Date().toISOString(),
       ...sha256 ? { sha256 } : {}
     };
-    writeAtomicFile(join20(installDir, INSTALLED_META_FILE), JSON.stringify(meta));
+    writeAtomicFile(join19(installDir, INSTALLED_META_FILE), JSON.stringify(meta));
   } catch (err) {
     log2(`[lsp-cache] failed to write installed-meta in ${installDir}: ${err}`);
   }
 }
 function readInstalledMetaIn(installDir) {
-  const path = join20(installDir, INSTALLED_META_FILE);
+  const path = join19(installDir, INSTALLED_META_FILE);
   try {
     if (!statSync11(path).isFile())
       return null;
@@ -32987,7 +33655,7 @@ function readInstalledMeta(packageKey) {
   return readInstalledMetaIn(lspPackageDir(packageKey));
 }
 function lockPath(npmPackage) {
-  return join20(lspPackageDir(npmPackage), ".aft-installing");
+  return join19(lspPackageDir(npmPackage), ".aft-installing");
 }
 var STALE_LOCK_MS2 = 30 * 60 * 1000;
 function acquireInstallLock(lockKey) {
@@ -33118,7 +33786,7 @@ var AUTO_INSTALL_STAMP_FILE = "last-lsp-autoinstall.json";
 var AUTO_INSTALL_WINDOW_MS = 60 * 1000;
 var AUTO_INSTALL_LOCK_STALE_MS = 30 * 60 * 1000;
 function autoInstallStampPath() {
-  return join20(aftCacheBase(), AUTO_INSTALL_STAMP_FILE);
+  return join19(aftCacheBase(), AUTO_INSTALL_STAMP_FILE);
 }
 function hasRecentAutoInstallStamp(path) {
   try {
@@ -33219,7 +33887,7 @@ function claimLspAutoInstallPass() {
 }
 var VERSION_CHECK_FILE = ".aft-version-check";
 function readVersionCheck(npmPackage) {
-  const file = join20(lspPackageDir(npmPackage), VERSION_CHECK_FILE);
+  const file = join19(lspPackageDir(npmPackage), VERSION_CHECK_FILE);
   try {
     const raw = readFileSync12(file, "utf8");
     const parsed = JSON.parse(raw);
@@ -33236,7 +33904,7 @@ function readVersionCheck(npmPackage) {
 }
 function writeVersionCheck(npmPackage, latest) {
   mkdirSync6(lspPackageDir(npmPackage), { recursive: true });
-  const file = join20(lspPackageDir(npmPackage), VERSION_CHECK_FILE);
+  const file = join19(lspPackageDir(npmPackage), VERSION_CHECK_FILE);
   const record = {
     last_checked: new Date().toISOString(),
     latest_eligible: latest
@@ -33353,7 +34021,7 @@ function isVersionSupported(spec, version) {
 
 // src/lsp-project-relevance.ts
 import { existsSync as existsSync14, readdirSync as readdirSync5, readFileSync as readFileSync13 } from "node:fs";
-import { join as join21 } from "node:path";
+import { join as join20 } from "node:path";
 var MAX_WALK_DIRS = 200;
 var MAX_WALK_DEPTH = 4;
 var NOISE_DIRS = new Set([
@@ -33370,7 +34038,7 @@ function hasRootMarker(projectRoot, rootMarkers) {
   if (!rootMarkers)
     return false;
   for (const marker of rootMarkers) {
-    if (existsSync14(join21(projectRoot, marker)))
+    if (existsSync14(join20(projectRoot, marker)))
       return true;
   }
   return false;
@@ -33394,7 +34062,7 @@ function hasPackageJsonDep(projectRoot, depNames) {
 }
 function readPackageJson(projectRoot) {
   try {
-    const raw = readFileSync13(join21(projectRoot, "package.json"), "utf8");
+    const raw = readFileSync13(join20(projectRoot, "package.json"), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed !== "object" || parsed === null)
       return null;
@@ -33424,7 +34092,7 @@ function relevantExtensionsInProject(projectRoot, extToServer) {
     for (const entry of entries) {
       if (entry.isDirectory()) {
         if (current.depth < MAX_WALK_DEPTH && !NOISE_DIRS.has(entry.name.toLowerCase())) {
-          queue.push({ dir: join21(current.dir, entry.name), depth: current.depth + 1 });
+          queue.push({ dir: join20(current.dir, entry.name), depth: current.depth + 1 });
         }
         continue;
       }
@@ -33557,7 +34225,7 @@ async function resolveTargetVersion(spec, config, fetchImpl = fetch) {
 }
 function ensureInstallAnchor(cwd) {
   try {
-    const stub = join22(cwd, "package.json");
+    const stub = join21(cwd, "package.json");
     if (!existsSync15(stub)) {
       writeFileSync9(stub, `${JSON.stringify({ name: "aft-lsp-cache", version: "0.0.0", private: true })}
 `);
@@ -33784,10 +34452,10 @@ function sha256OfFileSync(path) {
 }
 function quarantineCachedNpmInstall(spec, reason) {
   const packageDir = lspPackageDir(spec.npm);
-  const dest = join22(packageDir, "..", ".quarantine", encodeURIComponent(spec.npm), `${Date.now()}`);
+  const dest = join21(packageDir, "..", ".quarantine", encodeURIComponent(spec.npm), `${Date.now()}`);
   warn2(`[lsp] tofu_mismatch ${spec.npm}: ${reason}; quarantining ${packageDir} -> ${dest}`);
   try {
-    mkdirSync7(join22(dest, ".."), { recursive: true });
+    mkdirSync7(join21(dest, ".."), { recursive: true });
     rmSync7(dest, { recursive: true, force: true });
     renameSync10(packageDir, dest);
   } catch (err) {
@@ -34522,7 +35190,7 @@ import { Type as Type4 } from "typebox";
 // src/tools/hoisted.ts
 import { stat as stat4 } from "node:fs/promises";
 import { homedir as homedir16 } from "node:os";
-import { isAbsolute as isAbsolute11, relative as relative7, resolve as resolve15, sep as sep3 } from "node:path";
+import { isAbsolute as isAbsolute10, relative as relative6, resolve as resolve14, sep as sep3 } from "node:path";
 import {
   renderDiff as renderDiff2
 } from "@earendil-works/pi-coding-agent";
@@ -34700,7 +35368,7 @@ function modelSupportsImages(extCtx) {
 }
 var NON_VISION_IMAGE_NOTE = "[Current model does not support images. The image will be omitted from this request.]";
 function containsPath(parent, child) {
-  const rel = relative7(parent, child);
+  const rel = relative6(parent, child);
   return !relativePathEscapesRoot(rel);
 }
 function normalizePathInput(path) {
@@ -34710,13 +35378,13 @@ function normalizePathInput(path) {
   if (decoded === "~")
     return homedir16();
   if (decoded.startsWith(`~${sep3}`) || decoded.startsWith("~/")) {
-    return resolve15(homedir16(), decoded.slice(2));
+    return resolve14(homedir16(), decoded.slice(2));
   }
   return decoded;
 }
 function absoluteSearchPath(cwd, target) {
   const expanded = normalizePathInput(target);
-  return isAbsolute11(expanded) ? expanded : resolve15(cwd, expanded);
+  return isAbsolute10(expanded) ? expanded : resolve14(cwd, expanded);
 }
 async function searchPathExists(cwd, target) {
   try {
@@ -34772,7 +35440,7 @@ async function assertExternalDirectoryPermission(extCtx, target, options = {}) {
   if (!target)
     return;
   const expanded = normalizePathInput(target);
-  const absoluteTarget = isAbsolute11(expanded) ? expanded : resolve15(extCtx.cwd, expanded);
+  const absoluteTarget = isAbsolute10(expanded) ? expanded : resolve14(extCtx.cwd, expanded);
   if (containsPath(extCtx.cwd, absoluteTarget))
     return;
   if (options.restrictToProjectRoot === false)
@@ -34781,7 +35449,7 @@ async function assertExternalDirectoryPermission(extCtx, target, options = {}) {
 }
 async function assertExternalReadPermission(ctx, extCtx, target, restrictToProjectRoot = ctx.config.restrict_to_project_root ?? false) {
   const expanded = normalizePathInput(target);
-  const absoluteTarget = isAbsolute11(expanded) ? expanded : resolve15(extCtx.cwd, expanded);
+  const absoluteTarget = isAbsolute10(expanded) ? expanded : resolve14(extCtx.cwd, expanded);
   if (!restrictToProjectRoot || containsPath(extCtx.cwd, absoluteTarget))
     return;
   try {
@@ -36187,6 +36855,7 @@ DO NOT use bash for code search or code exploration. If you are about to run gre
         }
       }
       const bridgeCommand = spawnContext.command;
+      const workdir = spawnContext.cwd ?? params.workdir;
       let streamed = "";
       let usedHostFallback = false;
       let response;
@@ -36194,7 +36863,7 @@ DO NOT use bash for code search or code exploration. If you are about to run gre
         response = await withOutsidePermissionOperation(() => callBashWithPermissionLoop(bridge, {
           command: bridgeCommand,
           timeout,
-          workdir: spawnContext.cwd ?? params.workdir,
+          workdir,
           env: spawnContext.env,
           description: params.description,
           background: effectiveBackground,
@@ -36286,7 +36955,7 @@ DO NOT use bash for code search or code exploration. If you are about to run gre
         task_id: taskId
       };
       const output = response.output ?? "";
-      return bashResult(usedHostFallback || isPowerShell ? output : withBashHints(output, bridgeCommand, aftSearchRegistered, extCtx.cwd), details);
+      return bashResult(usedHostFallback || isPowerShell ? output : withBashHints(output, bridgeCommand, aftSearchRegistered, extCtx.cwd, workdir), details);
     },
     renderCall(args, theme, context) {
       return renderBashCall(asString2(args?.command), asString2(args?.description), theme, context);
@@ -36314,8 +36983,8 @@ function registerBashCompanionTools(pi, ctx, enabled = { bashStatus: true, bashW
     pi.registerTool(createBashKillTool(ctx));
   }
 }
-function withBashHints(output, command, aftSearchRegistered, projectRoot) {
-  return maybeAppendGrepSearchHint(maybeAppendConflictsHint(output), command, aftSearchRegistered, projectRoot);
+function withBashHints(output, command, aftSearchRegistered, projectRoot, workdir) {
+  return maybeAppendGrepSearchHint(maybeAppendConflictsHint(output), command, aftSearchRegistered, projectRoot, undefined, workdir);
 }
 function createBashStatusTool(ctx) {
   return {
@@ -36816,7 +37485,7 @@ function formatWaitSummary(taskId, waited, details, watchRole) {
 async function formatBashStatus(extCtx, taskId, details, requestedOutputMode, watchRole) {
   const exit = typeof details.exit_code === "number" ? ` (exit ${details.exit_code})` : "";
   const dur = typeof details.duration_ms === "number" ? ` ${Math.round(details.duration_ms / 1000)}s` : "";
-  let text = `Task ${taskId}: ${details.status}${exit}${dur}`;
+  let text = formatUnknownPtyExit(taskId, details) ?? `Task ${taskId}: ${details.status}${exit}${dur}`;
   if (details.live_descendants_summary) {
     text += ` · ${details.live_descendants_summary}`;
   }
@@ -37122,7 +37791,7 @@ function registerFsTools(pi, ctx, surface) {
           recursive: coerceBoolean(params.recursive)
         }, extCtx);
         if (response.success === false) {
-          throw new Error(response.text || response.message || "delete failed");
+          throw toolErrorFromResponse("delete", response);
         }
         const deletedEntries = response.deleted ?? [];
         const skipped = response.skipped_files ?? [];
@@ -38398,7 +39067,7 @@ function registerSafetyTool(pi, ctx) {
 
 // src/tools/semantic.ts
 import { homedir as homedir17 } from "node:os";
-import { isAbsolute as isAbsolute12, resolve as resolve16 } from "node:path";
+import { isAbsolute as isAbsolute11, resolve as resolve15 } from "node:path";
 import { Type as Type13 } from "typebox";
 var FILESYSTEM_SCAN_STATUS = "answered by a filesystem scan";
 function semanticHonestyNote(response, theme) {
@@ -38421,8 +39090,8 @@ function selectedProjectRoot(cwd, pathArg) {
   const target = pathArg?.trim();
   if (!target)
     return canonicalizeProjectRoot(cwd);
-  const expanded = target === "~" ? homedir17() : /^~[/\\]/u.test(target) ? resolve16(homedir17(), target.slice(2)) : target;
-  return canonicalizeProjectRoot(isAbsolute12(expanded) ? expanded : resolve16(cwd, expanded));
+  const expanded = target === "~" ? homedir17() : /^~[/\\]/u.test(target) ? resolve15(homedir17(), target.slice(2)) : target;
+  return canonicalizeProjectRoot(isAbsolute11(expanded) ? expanded : resolve15(cwd, expanded));
 }
 function continuityKey(projectRoot, query, includeTests, topK) {
   return JSON.stringify([
@@ -39019,93 +39688,52 @@ function registerShutdownCleanup(fn) {
 }
 
 // src/workflow-hints.ts
-var HEADING = "## IMPORTANT NOTICE about your tools";
+var HEADING = "# Agent Foundational Toolkit";
 function hashlineTagSourceHint(bashRewritesMintTags, isRegistered = () => true) {
   return `**Hashline edit tags**: ${hashlineTagSourceSentence(bashRewritesMintTags, isRegistered)}`;
 }
 var HASHLINE_TAG_SOURCE_HINT = hashlineTagSourceHint(true);
 function buildWorkflowHints(opts) {
-  const sections = [];
-  const grepName = "grep";
-  const bashName = "bash";
-  const hasOutline = !opts.absentTools.has("aft_outline");
-  const hasZoom = !opts.absentTools.has("aft_zoom");
-  const readName = "read";
-  const hasRead = !opts.absentTools.has(readName);
-  const hasGrep = !opts.absentTools.has(grepName);
-  const hasSearch = !opts.absentTools.has("aft_search");
-  const hasNavigate = !opts.absentTools.has("aft_callgraph");
-  const hasInspect = !opts.absentTools.has("aft_inspect");
-  const hasBash = !opts.absentTools.has(bashName);
-  const hasBgBash = opts.bashBackgroundEnabled && hasBash && !opts.absentTools.has("bash_status");
-  const hasWatch = !opts.absentTools.has("bash_watch");
-  const hasWrite = !opts.absentTools.has("bash_write");
-  if (hasBash && opts.bashCompressionEnabled) {
-    sections.push([
-      "**Test/build output**: bash output is auto-compressed for non-piped commands. Piped commands run verbatim and show the pipeline's output. For AFT's test/build summary, run the runner without filters:",
-      "- `bun test | grep fail` → run `bun test`",
-      "- `cargo test 2>&1 | tail -20` → run `cargo test`",
-      "- `npm run build | head -50` → run `npm run build`"
-    ].join(`
-`));
+  const has = (name) => !opts.absentTools.has(name);
+  const hasBash = has("bash");
+  const hasBackground = hasBash && opts.bashBackgroundEnabled && has("bash_watch") && has("bash_status");
+  const finding = [];
+  if (has("aft_search")) {
+    finding.push("start with aft_search; it takes concepts, identifiers, regex and literals.");
   }
-  if (hasOutline && hasZoom) {
-    sections.push(`**Web/URL access**: \`aft_outline({ target: "<url>" })\` first for structure, then \`aft_zoom({ batch: [{ target: "<url>", symbols: "<heading>" }] })\` for the specific section.`);
-  }
-  if (hasOutline && (hasGrep || hasSearch) && (hasZoom || hasRead)) {
-    const searchName = hasSearch ? "aft_search" : grepName;
-    const locate = hasSearch ? "`aft_search` is the primary code-search tool: one call auto-routes concepts, identifiers, regex, error strings, and literals." : `\`${grepName}\` (the tool — indexed and ranked) locates code.`;
-    const zoomSteer = hasZoom ? ", or `aft_zoom`" : "";
-    const searchSteer = hasSearch ? `use \`aft_search\` (concepts, identifiers, regex, literals), \`${readName}\`, \`aft_outline\`${zoomSteer} instead` : `use the \`${grepName}\` tool, \`${readName}\`, \`aft_outline\`${zoomSteer} instead`;
-    const bashSteer = hasBash ? ` If you are about to run grep, rg, sed, awk, find, or cat through ${bashName} to locate or read code: STOP — ${searchSteer}.` : "";
-    sections.push([
-      `**Code exploration**: ${locate} Then \`aft_outline\` for structure → \`${hasZoom ? "aft_zoom" : readName}\` for symbol(s). DO NOT run \`grep\`/\`rg\`/\`find\`/\`sed\`/\`cat\` through \`bash\` to locate or read code — the bash path is unindexed, unranked, serial, and routinely surfaces the wrong hit. Keep \`bash\` for shell facts (git state, file metadata, processes).${bashSteer} Reflex translations:`,
-      `- \`grep -rn "handleAuth" src/\` in bash → \`${searchName}({ query: "handleAuth" })\``,
-      `- \`find . -name "*.ts" | xargs grep watcher\` in bash → \`${searchName}({ query: "watcher invalidation" })\` (concepts work too)`,
-      `- \`sed -n '100,160p' app.ts\` / \`cat app.ts\` in bash → \`${readName}({ path: "app.ts", startLine: 100, endLine: 160 })\``
-    ].join(`
-`));
+  if (has("aft_outline") && has("aft_zoom") && has("read")) {
+    finding.push(`${finding.length ? "Then " : ""}aft_outline for structure, aft_zoom for named symbols, read for line ranges.`);
   }
-  if (hasInspect) {
-    sections.push("**Codebase health & diagnostics**: AFT does not surface compile/type errors automatically after edits — pull them with `aft_inspect`. Run it after a batch of edits and before you run tests or commit, when starting in unfamiliar code, or before a refactor/review. One call summarizes diagnostics (compile/type errors), TODOs, metrics, dead code, unused exports, and duplicates; pass `sections` for focused drill-down and `scope` to actively pull diagnostics for a specific file or directory. Its diagnostics are a fast checkpoint, not the authority — a clean `tsc` / `cargo check` / `pyright` run is the real gate. Dead code, unused exports, duplicates, cycles and complexity are computed only when you call aft_inspect, and the call waits until they are current; nothing refreshes them in the background, so run it again after further edits instead of polling.");
-    sections.push("**AFT status bar**: tool results may end with a one-line health bar `[AFT E<errors> W<warnings> | T<todos>]` — an IDE-style glance that appears when a count changes. `E`/`W` are live LSP diagnostics for files touched this session (your universal compile-error signal across every language with an LSP). Dead code, unused exports and duplicates are not on the bar; run `aft_inspect` for them. A `?` in place of a number means that count has no value yet (not zero). When `E>0`, you likely just introduced errors; investigate before moving on.");
-  }
-  if (hasNavigate) {
-    sections.push([
-      "Use `aft_callgraph` for code-relationship questions instead of grep + read chains:",
-      "- `callers` — find all call sites before changing a function signature",
-      "- `impact` — blast radius (which functions/files will need updates)",
-      "- `trace_to` — how execution reaches this code; each path runs back to a root labelled main, test, attribute, public API, or no caller found",
-      "- `trace_to_symbol` — shortest call path from one symbol to another",
-      "- `trace_data` — follow a value through assignments and parameters across files"
-    ].join(`
-`));
-  }
-  if (hasBgBash && hasWatch) {
-    sections.push([
-      `**Long-running commands** (builds, installs, full test suites): run them in the FOREGROUND — use \`${bashName}({ command, wait: true })\` when you know it is long and need the result before anything else; if you send a new message, the wait detaches to background; otherwise omit \`wait\` so auto-promote can hand you a reminder while you work.`,
-      "- `background: true` is ONLY for when you have OTHER useful work to do while it runs: start it, do the other work, and the completion reminder delivers the result (or spawn a subagent for the side work). Do NOT background a command and then immediately `bash_watch` it — that spends a whole extra turn waiting for something foreground returns in one.",
-      "- `bash_watch` is for blocking on an ALREADY-backgrounded task once you've run out of parallel work (sync — the user can interrupt), or reacting to a specific early output line (async: background:true + pattern). Never loop `bash_status` to wait — it's a one-shot inspector."
-    ].join(`
-`));
+  if (hasBash) {
+    finding.push("Don't find or read code with grep, find, sed or cat in bash.");
   }
-  if (hasBgBash && hasWrite) {
-    sections.push(`**PTY / interactive commands**: PTY mode is for interactive REPLs and terminal apps (python, node, bash itself, vim). Start with \`${bashName}({ command: "python", pty: true, background: true })\`, read the screen with \`bash_status({ task_id, output_mode: "screen" })\`, and send input with \`bash_write({ task_id, input: "..." })\`.`);
+  const commands = [];
+  if (hasBash && opts.bashCompressionEnabled) {
+    commands.push("don't pipe test or build output into tail, grep or head; AFT already shortens it.");
   }
-  if (opts.hashlineEffective === true) {
-    sections.push(hashlineTagSourceHint(hasBash && opts.bashRewriteEnabled !== false, (name) => !opts.absentTools.has(name)));
+  if (hasBackground) {
+    commands.push("Pass wait: true when you need a long command's result before anything else; a new message from the user detaches the wait.", "Otherwise a long command moves to the background and a reminder brings its result.", "Block on it with bash_watch only when nothing else is left; bash_watch with background: true and a pattern tells you when a line appears.", "Never loop bash_status.");
   }
-  if (sections.length === 0) {
+  const sections = [
+    finding.length ? `**Finding code**: ${finding.join(" ")}` : "",
+    has("aft_callgraph") ? "**Relationships**: aft_callgraph for callers, impact, and execution or data-flow traces." : "",
+    has("aft_outline") && has("aft_zoom") ? "**Web pages**: aft_outline with a URL as target, then aft_zoom on a heading." : "",
+    "",
+    has("aft_inspect") ? "**After edits**: run aft_inspect for diagnostics; the project's typecheck and tests are the final check." : "",
+    has("aft_inspect") ? "**Status bar**: `[AFT E.. W.. | T..]` appears when a count changes. E above 0 usually means your last edit broke something; `?` means unknown, not zero." : "",
+    commands.length ? `**Commands**: ${commands.join(" ")}` : ""
+  ];
+  const hashline = opts.hashlineEffective === true ? hashlineTagSourceHint(hasBash && opts.bashRewriteEnabled !== false, has) : "";
+  if (!sections.some(Boolean) && !hashline)
     return null;
-  }
-  sections.unshift(`You are equipped with a non-standard tool set: indexed code search, symbol-level reading, structural editing, and code analysis that are faster, more precise, and far cheaper in tokens than stitching together command-line utilities in bash. Always reach for these tools first.
-
-**Parallel tool calls**: when several read-only operations are independent, emit them in ONE response instead of serializing — file reads, structure and symbol lookups, code search, diagnostics, and git status/diff/log. Sequence only when a call depends on a prior result or when a command mutates state.`);
-  return `${HEADING}
-
-${sections.join(`
+  sections[3] = "**Parallel calls**: send independent read-only calls in one response.";
+  const text = `${HEADING}
 
+${sections.filter(Boolean).join(`
 `)}`;
+  return hashline ? `${text}
+
+${hashline}` : text;
 }
 function buildHintsFromConfig(config, absentTools, hashlineEffective = false) {
   const bashCfg = resolveBashConfig(config);
@@ -39216,12 +39844,12 @@ var PLUGIN_VERSION = (() => {
     return "0.0.0";
   }
 })();
-var ANNOUNCEMENT_VERSION = "0.64.0";
+var ANNOUNCEMENT_VERSION = "0.65.0";
 var ANNOUNCEMENT_FEATURES = [
-  "A new index store makes AFT much faster: call graphs build 26x faster, edits reach the call graph about 9x faster, dead-code checks run 4x faster, and the index takes 4x less disk and 3x less memory.",
-  "All worktrees of a repository share one index, so a new worktree is ready in under a second. `npx @cortexkit/aft cache prune-legacy` lists the old index folders and can remove them.",
-  "`trace_to` labels each root it reaches: main, test, attribute, public API, or no caller found.",
-  "Dead code, unused exports, duplicates, cycles and complexity run only when `aft_inspect` is called; the status bar shows errors, warnings and TODOs."
+  "OpenCode 2: AFT's read-only tools also work inside Code Mode as `tools.aft.code.*`.",
+  "TypeScript monorepos run one language server per TypeScript version instead of one per package; `lsp.max_servers` caps the total.",
+  "Search and grep stay light on large growing files, and shell waits survive the computer going to sleep.",
+  "`views.enabled`, `views.callgraph_copies` and `worktree.ram_overlay` are now refused in user config; `npx @cortexkit/aft doctor --fix` removes them."
 ];
 var ANNOUNCEMENT_FOOTER = "Join us on Discord: https://discord.gg/DSa65w8wuf";
 var pendingEagerWarnings = new Map;