@dosu/cli 0.49.0 → 0.49.2

package/bin/dosu.js

@@ -2098,6 +2098,35 @@ var init_commander = __esm(() => {
   program = new Command;
 });
 
+// src/auth/session-errors.ts
+var SESSION_EXPIRED_CODE = "SESSION_EXPIRED", SESSION_PERSISTENCE_ERROR_CODE = "SESSION_PERSISTENCE_ERROR", SESSION_REFRESH_ERROR_CODE = "SESSION_REFRESH_ERROR", SessionExpiredError, SessionPersistenceError, SessionRefreshError;
+var init_session_errors = __esm(() => {
+  SessionExpiredError = class SessionExpiredError extends Error {
+    code = SESSION_EXPIRED_CODE;
+    constructor(options) {
+      super("Your Dosu session has expired. Run 'dosu login' to re-authenticate.", options);
+      this.name = "SessionExpiredError";
+    }
+  };
+  SessionPersistenceError = class SessionPersistenceError extends Error {
+    code = SESSION_PERSISTENCE_ERROR_CODE;
+    constructor(options) {
+      super("Could not safely save refreshed Dosu credentials. Ensure the Dosu config directory is writable, then retry.", options);
+      this.name = "SessionPersistenceError";
+    }
+  };
+  SessionRefreshError = class SessionRefreshError extends Error {
+    code = SESSION_REFRESH_ERROR_CODE;
+    status;
+    constructor(options = {}) {
+      const message = options.status ? `Could not refresh the Dosu session (authentication server returned status ${options.status}). Retry the command.` : "Could not reach the authentication server to refresh the Dosu session. Retry the command.";
+      super(message, options);
+      this.name = "SessionRefreshError";
+      this.status = options.status;
+    }
+  };
+});
+
 // src/config/identity.ts
 function getAccessTokenClaim(accessToken, claim) {
   try {
@@ -2330,6 +2359,160 @@ var init_config = __esm(() => {
   init_config_v1_migration();
 });
 
+// src/config/config-lock.ts
+import { randomUUID } from "node:crypto";
+import {
+  closeSync,
+  existsSync as existsSync2,
+  linkSync,
+  mkdirSync as mkdirSync2,
+  openSync,
+  readFileSync as readFileSync2,
+  statSync,
+  unlinkSync,
+  writeFileSync as writeFileSync2
+} from "node:fs";
+import { join as join2 } from "node:path";
+async function withConfigRefreshLock(task, options = {}) {
+  const release = await acquireConfigRefreshLock(options);
+  try {
+    return await task();
+  } finally {
+    release();
+  }
+}
+async function acquireConfigRefreshLock(options) {
+  const now = options.now ?? Date.now;
+  const sleep = options.sleep ?? defaultSleep;
+  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const retryDelayMs = options.retryDelayMs ?? DEFAULT_RETRY_DELAY_MS;
+  const staleAgeMs = options.staleAgeMs ?? DEFAULT_STALE_AGE_MS;
+  const isProcessAlive = options.isProcessAlive ?? defaultIsProcessAlive;
+  const ownerId = options.ownerId ?? randomUUID();
+  const configDir = getConfigDir();
+  const lockPath = join2(configDir, CONFIG_REFRESH_LOCK_FILENAME);
+  try {
+    if (!existsSync2(configDir))
+      mkdirSync2(configDir, { recursive: true, mode: 448 });
+  } catch (cause) {
+    throw new SessionPersistenceError({ cause });
+  }
+  const deadline = now() + Math.max(0, timeoutMs);
+  while (true) {
+    try {
+      createLockFile(lockPath, { owner_id: ownerId, pid: process.pid, created_at: now() });
+      return () => releaseOwnedLock(lockPath, ownerId);
+    } catch (cause) {
+      if (!hasErrorCode(cause, "EEXIST")) {
+        throw new SessionPersistenceError({ cause });
+      }
+    }
+    if (claimAndRemoveStaleLock(lockPath, staleAgeMs, now(), isProcessAlive, ownerId)) {
+      continue;
+    }
+    if (now() >= deadline) {
+      throw new SessionPersistenceError({
+        cause: new Error("Timed out waiting for another Dosu session refresh.")
+      });
+    }
+    await sleep(Math.max(1, retryDelayMs));
+  }
+}
+function createLockFile(lockPath, metadata) {
+  const fd = openSync(lockPath, "wx", 384);
+  try {
+    writeFileSync2(fd, JSON.stringify(metadata));
+  } catch (cause) {
+    try {
+      closeSync(fd);
+    } catch {}
+    try {
+      unlinkSync(lockPath);
+    } catch {}
+    throw cause;
+  }
+  try {
+    closeSync(fd);
+  } catch (cause) {
+    try {
+      unlinkSync(lockPath);
+    } catch {}
+    throw cause;
+  }
+}
+function releaseOwnedLock(lockPath, ownerId) {
+  try {
+    if (readLockMetadata(lockPath)?.owner_id === ownerId)
+      unlinkSync(lockPath);
+  } catch {}
+}
+function claimAndRemoveStaleLock(lockPath, staleAgeMs, now, isProcessAlive, ownerId) {
+  const claimPath = `${lockPath}.stale.${process.pid}.${ownerId}`;
+  try {
+    linkSync(lockPath, claimPath);
+    const metadata = readLockMetadata(claimPath);
+    let stale = false;
+    if (metadata && Number.isInteger(metadata.pid) && metadata.pid > 0) {
+      stale = !isProcessAlive(metadata.pid);
+    } else {
+      stale = now - statSync(claimPath).mtimeMs >= staleAgeMs;
+    }
+    if (!stale)
+      return false;
+    const current = statSync(lockPath);
+    const claimed = statSync(claimPath);
+    if (current.dev !== claimed.dev || current.ino !== claimed.ino)
+      return false;
+    unlinkSync(lockPath);
+    return true;
+  } catch (cause) {
+    return hasErrorCode(cause, "ENOENT");
+  } finally {
+    try {
+      unlinkSync(claimPath);
+    } catch {}
+  }
+}
+function readLockMetadata(lockPath) {
+  try {
+    const parsed = JSON.parse(readFileSync2(lockPath, "utf8"));
+    if (!isRecord3(parsed))
+      return;
+    if (typeof parsed.owner_id !== "string" || typeof parsed.pid !== "number" || typeof parsed.created_at !== "number") {
+      return;
+    }
+    return {
+      owner_id: parsed.owner_id,
+      pid: parsed.pid,
+      created_at: parsed.created_at
+    };
+  } catch {
+    return;
+  }
+}
+function defaultIsProcessAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (cause) {
+    return !hasErrorCode(cause, "ESRCH");
+  }
+}
+function defaultSleep(delayMs) {
+  return new Promise((resolve) => setTimeout(resolve, delayMs));
+}
+function hasErrorCode(value, code) {
+  return isRecord3(value) && value.code === code;
+}
+function isRecord3(value) {
+  return typeof value === "object" && value !== null;
+}
+var CONFIG_REFRESH_LOCK_FILENAME = "session-refresh.lock", DEFAULT_TIMEOUT_MS = 5000, DEFAULT_RETRY_DELAY_MS = 25, DEFAULT_STALE_AGE_MS = 30000;
+var init_config_lock = __esm(() => {
+  init_session_errors();
+  init_config();
+});
+
 // src/config/constants.ts
 function getWebAppURL() {
   return process.env.DOSU_WEB_APP_URL_OVERRIDE ?? "https://app.dosu.dev" ?? "";
@@ -2359,12 +2542,12 @@ class Client {
     if (isTokenExpired(this.config)) {
       await this.refreshToken();
     }
+    const requestAccessToken = this.config.active_account?.session.access_token;
     let resp = await this.doRequestOnce(method, path2, body);
     if (resp.status === 401 || resp.status === 403) {
-      try {
+      const currentAccessToken = this.config.active_account?.session.access_token;
+      if (!currentAccessToken || currentAccessToken === requestAccessToken) {
         await this.refreshToken();
-      } catch {
-        throw new SessionExpiredError;
       }
       resp = await this.doRequestOnce(method, path2, body);
     }
@@ -2405,36 +2588,34 @@ class Client {
     return this.doRequest("DELETE", path2);
   }
   async refreshToken() {
-    this.adoptNewerDiskTokens();
-    if (!this.config.active_account?.session.refresh_token) {
-      throw new Error("no refresh token available");
-    }
-    try {
-      await this.refreshTokenOnce();
-    } catch (err) {
-      if (!this.adoptNewerDiskTokens()) {
-        throw err;
+    const refreshTokenAtStart = this.config.active_account?.session.refresh_token;
+    if (!refreshTokenAtStart) {
+      throw new SessionExpiredError;
+    }
+    await withConfigRefreshLock(async () => {
+      const disk = loadConfig();
+      this.assertSameActiveAccount(disk);
+      const diskRefreshToken = disk.active_account?.session.refresh_token;
+      if (!diskRefreshToken)
+        throw new SessionExpiredError;
+      const diskHasNewerSession = diskRefreshToken !== refreshTokenAtStart;
+      if (diskHasNewerSession && !isTokenExpired(disk)) {
+        this.adoptConfig(disk);
+        return;
       }
-      await this.refreshTokenOnce();
-    }
-  }
-  adoptNewerDiskTokens() {
-    const disk = loadConfig();
-    this.assertSameActiveAccount(disk);
-    const diskSession = disk.active_account?.session;
-    const memorySession = this.config.active_account?.session;
-    if (!diskSession?.refresh_token || !memorySession || diskSession.refresh_token === memorySession.refresh_token) {
-      return false;
-    }
-    memorySession.access_token = diskSession.access_token;
-    memorySession.refresh_token = diskSession.refresh_token;
-    memorySession.expires_at = diskSession.expires_at;
-    return true;
+      const candidate = await this.refreshTokenOnce(disk);
+      try {
+        saveConfig(candidate);
+      } catch (cause) {
+        throw new SessionPersistenceError({ cause });
+      }
+      this.adoptConfig(candidate);
+    });
   }
-  async refreshTokenOnce() {
-    const session = this.config.active_account?.session;
+  async refreshTokenOnce(source) {
+    const session = source.active_account?.session;
     if (!session?.refresh_token)
-      throw new Error("no refresh token available");
+      throw new SessionExpiredError;
     const supabaseURL = getSupabaseURL();
     const oauthClientID = getAccessTokenOAuthClientID(session.access_token);
     const endpoint = oauthClientID ? `${supabaseURL}/auth/v1/oauth/token` : `${supabaseURL}/auth/v1/token?grant_type=refresh_token`;
@@ -2444,20 +2625,54 @@ class Client {
       refresh_token: session.refresh_token,
       client_id: oauthClientID
     }).toString() : JSON.stringify({ refresh_token: session.refresh_token });
-    const resp = await fetch(endpoint, {
-      method: "POST",
-      headers,
-      body
-    });
-    if (resp.status !== 200) {
-      throw new Error(`refresh failed with status ${resp.status}`);
+    const controller = new AbortController;
+    const timeout = setTimeout(() => controller.abort(), REFRESH_REQUEST_TIMEOUT_MS);
+    let resp;
+    try {
+      resp = await fetch(endpoint, {
+        method: "POST",
+        headers,
+        body,
+        signal: controller.signal
+      });
+    } catch (cause) {
+      clearTimeout(timeout);
+      throw new SessionRefreshError({ cause });
     }
-    const data = await resp.json();
-    this.assertSameActiveAccount(loadConfig());
-    session.access_token = data.access_token;
-    session.refresh_token = data.refresh_token;
-    session.expires_at = Math.floor(Date.now() / 1000) + data.expires_in;
-    saveConfig(this.config);
+    let data;
+    try {
+      if (resp.status !== 200) {
+        const errorCode = await readAuthErrorCode(resp);
+        if (REAUTHENTICATION_ERROR_CODES.has(errorCode ?? "") || !oauthClientID && errorCode === "validation_failed") {
+          throw new SessionExpiredError;
+        }
+        throw new SessionRefreshError({ status: resp.status });
+      }
+      data = await readRefreshResponse(resp);
+    } finally {
+      clearTimeout(timeout);
+    }
+    const latest = loadConfig();
+    this.assertSameActiveAccount(latest);
+    const latestSession = latest.active_account?.session;
+    if (!latestSession?.refresh_token)
+      throw new SessionExpiredError;
+    if (latestSession.refresh_token !== session.refresh_token) {
+      return latest;
+    }
+    return configWithSession(latest, {
+      access_token: data.access_token,
+      refresh_token: data.refresh_token,
+      expires_at: Math.floor(Date.now() / 1000) + data.expires_in
+    });
+  }
+  adoptConfig(source) {
+    this.config.mode = source.mode;
+    this.config.active_account = source.active_account ? {
+      ...source.active_account,
+      session: { ...source.active_account.session },
+      target: source.active_account.target ? { ...source.active_account.target } : undefined
+    } : undefined;
   }
   assertSameActiveAccount(disk) {
     const memoryUserID = getConfigUserID(this.config);
@@ -2514,6 +2729,49 @@ class Client {
     return resp.json();
   }
 }
+async function readAuthErrorCode(resp) {
+  try {
+    const data = await resp.json();
+    if (!isRecord4(data))
+      return;
+    const code = typeof data.error_code === "string" ? data.error_code : data.error;
+    return typeof code === "string" ? code : undefined;
+  } catch {
+    return;
+  }
+}
+async function readRefreshResponse(resp) {
+  let data;
+  try {
+    data = await resp.json();
+  } catch (cause) {
+    throw new SessionRefreshError({ cause, status: resp.status });
+  }
+  if (!isRecord4(data) || typeof data.access_token !== "string" || typeof data.refresh_token !== "string" || typeof data.expires_in !== "number" || !Number.isFinite(data.expires_in)) {
+    throw new SessionRefreshError({ status: resp.status });
+  }
+  return {
+    access_token: data.access_token,
+    refresh_token: data.refresh_token,
+    expires_in: data.expires_in
+  };
+}
+function configWithSession(source, session) {
+  const account = source.active_account;
+  if (!account)
+    throw new SessionExpiredError;
+  return {
+    ...source,
+    active_account: {
+      ...account,
+      session,
+      target: account.target ? { ...account.target } : undefined
+    }
+  };
+}
+function isRecord4(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
 async function readErrorBody(resp) {
   try {
     const text = await resp.text();
@@ -2522,15 +2780,18 @@ async function readErrorBody(resp) {
     return "";
   }
 }
-var SessionExpiredError;
+var REFRESH_REQUEST_TIMEOUT_MS = 1e4, REAUTHENTICATION_ERROR_CODES;
 var init_client = __esm(() => {
+  init_session_errors();
   init_config();
-  SessionExpiredError = class SessionExpiredError extends Error {
-    constructor() {
-      super("session expired");
-      this.name = "SessionExpiredError";
-    }
-  };
+  init_config_lock();
+  REAUTHENTICATION_ERROR_CODES = new Set([
+    "invalid_grant",
+    "refresh_token_already_used",
+    "refresh_token_not_found",
+    "session_expired",
+    "session_not_found"
+  ]);
 });
 
 // node_modules/picocolors/picocolors.js
@@ -4739,18 +5000,18 @@ function isNpxInvocation(channel = INSTALL_CHANNEL, env = process.env) {
 function getVersionString() {
   return `v${VERSION}`;
 }
-var VERSION = "0.49.0", INSTALL_CHANNEL = "npm";
+var VERSION = "0.49.2", INSTALL_CHANNEL = "npm";
 
 // src/debug/logger.ts
 import {
   appendFileSync,
-  existsSync as existsSync2,
-  mkdirSync as mkdirSync2,
-  readFileSync as readFileSync2,
-  statSync,
-  writeFileSync as writeFileSync2
+  existsSync as existsSync3,
+  mkdirSync as mkdirSync3,
+  readFileSync as readFileSync3,
+  statSync as statSync2,
+  writeFileSync as writeFileSync3
 } from "node:fs";
-import { join as join2 } from "node:path";
+import { join as join3 } from "node:path";
 function redactSecrets(message) {
   let redacted = message;
   for (const key of SECRET_QUERY_KEYS) {
@@ -4770,29 +5031,29 @@ function ensureInit() {
 function resolveLogPath() {
   if (!logFilePath) {
     const dir = getConfigDir();
-    if (!existsSync2(dir)) {
-      mkdirSync2(dir, { recursive: true, mode: 448 });
+    if (!existsSync3(dir)) {
+      mkdirSync3(dir, { recursive: true, mode: 448 });
     }
-    logFilePath = join2(dir, LOG_FILENAME);
+    logFilePath = join3(dir, LOG_FILENAME);
   }
   return logFilePath;
 }
 function truncateIfNeeded() {
   try {
     const path2 = resolveLogPath();
-    if (!existsSync2(path2))
+    if (!existsSync3(path2))
       return;
-    const stat = statSync(path2);
+    const stat = statSync2(path2);
     if (stat.size <= MAX_LOG_SIZE)
       return;
-    const content = readFileSync2(path2);
+    const content = readFileSync3(path2);
     const start = content.length - TRUNCATE_KEEP;
     let lineStart = start;
     while (lineStart < content.length && content[lineStart] !== 10) {
       lineStart++;
     }
     lineStart = Math.min(lineStart + 1, content.length);
-    writeFileSync2(path2, content.subarray(lineStart), { mode: 384 });
+    writeFileSync3(path2, content.subarray(lineStart), { mode: 384 });
   } catch {}
 }
 function writeSessionHeader() {
@@ -4873,7 +5134,7 @@ var init_logger = __esm(() => {
 });
 
 // src/client/contract.ts
-var CLI_CONTRACT_HASH = "22c5cd2ce534";
+var CLI_CONTRACT_HASH = "de4d34216f45";
 
 // src/client/trpc.ts
 var exports_trpc = {};
@@ -4897,11 +5158,7 @@ function createTypedClient(config) {
         async headers() {
           if (isTokenExpired(config)) {
             logger.debug("trpc", "token expired, refreshing before request");
-            try {
-              await httpClient.refreshToken();
-            } catch {
-              throw new Error("session expired. Run 'dosu login' to re-authenticate");
-            }
+            await httpClient.refreshToken();
           }
           return {
             "Supabase-Access-Token": config.active_account?.session.access_token ?? "",
@@ -4909,13 +5166,13 @@ function createTypedClient(config) {
           };
         },
         async fetch(url, options) {
+          const requestAccessToken = new Headers(options?.headers).get("Supabase-Access-Token");
           const res = await globalThis.fetch(url, options);
           if (res.status === 401 || res.status === 403) {
             logger.debug("trpc", "got 401/403, attempting token refresh and retry");
-            try {
+            const currentAccessToken = config.active_account?.session.access_token;
+            if (!currentAccessToken || requestAccessToken === null || currentAccessToken === requestAccessToken) {
               await httpClient.refreshToken();
-            } catch {
-              return res;
             }
             return globalThis.fetch(url, {
               ...options,
@@ -8401,17 +8658,17 @@ var init_errors = __esm(() => {
 });
 
 // src/version/skill-update-check.ts
-import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync6, writeFileSync as writeFileSync5 } from "node:fs";
-import { join as join5 } from "node:path";
+import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync7, writeFileSync as writeFileSync6 } from "node:fs";
+import { join as join6 } from "node:path";
 function getCachePath2() {
-  return join5(getConfigDir(), CACHE_FILENAME2);
+  return join6(getConfigDir(), CACHE_FILENAME2);
 }
 function readSkillCache() {
   try {
     const path3 = getCachePath2();
-    if (!existsSync5(path3))
+    if (!existsSync6(path3))
       return null;
-    const data = JSON.parse(readFileSync6(path3, "utf-8"));
+    const data = JSON.parse(readFileSync7(path3, "utf-8"));
     if (typeof data.lastCheck === "number" && typeof data.latestSha === "string" && typeof data.installedSha === "string") {
       return data;
     }
@@ -8423,10 +8680,10 @@ function readSkillCache() {
 function writeSkillCache(cache) {
   try {
     const dir = getConfigDir();
-    if (!existsSync5(dir)) {
-      mkdirSync4(dir, { recursive: true, mode: 448 });
+    if (!existsSync6(dir)) {
+      mkdirSync5(dir, { recursive: true, mode: 448 });
     }
-    writeFileSync5(getCachePath2(), JSON.stringify(cache), { mode: 384 });
+    writeFileSync6(getCachePath2(), JSON.stringify(cache), { mode: 384 });
   } catch {}
 }
 function clearInstalledSha() {
@@ -8500,7 +8757,7 @@ var init_skill_update_check = __esm(() => {
 // src/commands/skill.ts
 import { exec as exec2, execSync as execSync2 } from "node:child_process";
 import { homedir } from "node:os";
-import { join as join6 } from "node:path";
+import { join as join7 } from "node:path";
 function skillAgentIDsForProviders(providerIDs) {
   return [
     ...new Set(providerIDs.map((providerID) => SKILL_AGENT_BY_PROVIDER[providerID]).filter((agent) => Boolean(agent)))
@@ -8511,17 +8768,17 @@ function skillInstallTargetForProvider(providerID) {
   if (!agentID)
     return null;
   if (agentID === "claude-code") {
-    const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR?.trim() || join6(homedir(), ".claude");
-    return { path: join6(claudeConfigDir, "skills", SKILL_NAME), symlink: true };
+    const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR?.trim() || join7(homedir(), ".claude");
+    return { path: join7(claudeConfigDir, "skills", SKILL_NAME), symlink: true };
   }
   if (agentID === "windsurf") {
     return {
-      path: join6(homedir(), ".codeium", "windsurf", "skills", SKILL_NAME),
+      path: join7(homedir(), ".codeium", "windsurf", "skills", SKILL_NAME),
       symlink: true
     };
   }
   return {
-    path: join6(homedir(), ".agents", "skills", SKILL_NAME),
+    path: join7(homedir(), ".agents", "skills", SKILL_NAME),
     symlink: false
   };
 }
@@ -8901,7 +9158,7 @@ var require_cjs = __commonJS((exports) => {
 var require_lib = __commonJS((exports, module) => {
   var __filename = "/home/runner/work/dosu-cli/dosu-cli/node_modules/write-file-atomic/lib/index.js";
   module.exports = writeFile;
-  module.exports.sync = writeFileSync6;
+  module.exports.sync = writeFileSync7;
   module.exports._getTmpname = getTmpname;
   module.exports._cleanupOnExit = cleanupOnExit;
   var fs7 = __require("fs");
@@ -9034,7 +9291,7 @@ var require_lib = __commonJS((exports, module) => {
     }
     return promise;
   }
-  function writeFileSync6(filename, data, options) {
+  function writeFileSync7(filename, data, options) {
     if (typeof options === "string") {
       options = { encoding: options };
     } else if (!options) {
@@ -9110,7 +9367,7 @@ var require_lib = __commonJS((exports, module) => {
 });
 
 // src/mcp/config-helpers.ts
-import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync7 } from "node:fs";
+import { existsSync as existsSync7, mkdirSync as mkdirSync6, readFileSync as readFileSync8 } from "node:fs";
 import { dirname as dirname2 } from "node:path";
 function mcpURL(deploymentID) {
   return `${getBackendURL()}/v1/mcp/deployments/${deploymentID}`;
@@ -9144,9 +9401,9 @@ function mcpRemoteServer(url, apiKey) {
   };
 }
 function loadJSONConfig(path3) {
-  if (!existsSync6(path3))
+  if (!existsSync7(path3))
     return {};
-  let data = readFileSync7(path3, "utf-8").trim();
+  let data = readFileSync8(path3, "utf-8").trim();
   if (!data)
     return {};
   if (path3.endsWith(".jsonc")) {
@@ -9209,8 +9466,8 @@ function saveJSONConfig(path3, cfg) {
 }
 function writeSecureFile(path3, content) {
   const dir = dirname2(path3);
-  if (!existsSync6(dir)) {
-    mkdirSync5(dir, { recursive: true, mode: 448 });
+  if (!existsSync7(dir)) {
+    mkdirSync6(dir, { recursive: true, mode: 448 });
   }
   writeFileAtomic.sync(path3, content, { mode: 384, chown: false });
 }
@@ -9251,21 +9508,21 @@ var init_config_helpers = __esm(() => {
 });
 
 // src/mcp/detect.ts
-import { existsSync as existsSync7 } from "node:fs";
+import { existsSync as existsSync8 } from "node:fs";
 import { homedir as homedir2, platform as platform2 } from "node:os";
-import { delimiter, dirname as dirname3, join as join7 } from "node:path";
+import { delimiter, dirname as dirname3, join as join8 } from "node:path";
 function isInstalled(paths) {
-  return paths.some((p2) => existsSync7(expandHome(p2)));
+  return paths.some((p2) => existsSync8(expandHome(p2)));
 }
 function expandHome(path3) {
   if (!path3.startsWith("~"))
     return path3;
-  return join7(homedir2(), path3.slice(1));
+  return join8(homedir2(), path3.slice(1));
 }
 function appSupportDir() {
   switch (platform2()) {
     case "darwin": {
-      return join7(homedir2(), "Library", "Application Support");
+      return join8(homedir2(), "Library", "Application Support");
     }
     case "win32": {
       return process.env.APPDATA ?? "";
@@ -9274,7 +9531,7 @@ function appSupportDir() {
       const xdg = process.env.XDG_CONFIG_HOME;
       if (xdg)
         return xdg;
-      return join7(homedir2(), ".config");
+      return join8(homedir2(), ".config");
     }
   }
 }
@@ -9283,8 +9540,8 @@ function findNpx() {
   for (const dir of (process.env.PATH ?? "").split(delimiter)) {
     if (!dir)
       continue;
-    const candidate = join7(dir, bin);
-    if (existsSync7(candidate))
+    const candidate = join8(dir, bin);
+    if (existsSync8(candidate))
       return candidate;
   }
   throw new Error("npx not found on PATH — Node.js is required (the MCP entry runs `npx mcp-remote`).");
@@ -9369,7 +9626,7 @@ var init_antigravity = __esm(() => {
 });
 
 // src/mcp/providers/claude.ts
-import { join as join8 } from "node:path";
+import { join as join9 } from "node:path";
 var ClaudeProvider = () => createJSONProvider({
   providerName: "Claude Code",
   providerID: "claude",
@@ -9378,24 +9635,24 @@ var ClaudeProvider = () => createJSONProvider({
   paths: ["~/.claude"],
   globalPath: "~/.claude.json",
   topKey: "mcpServers",
-  localConfigPath: (cwd) => join8(cwd, ".mcp.json")
+  localConfigPath: (cwd) => join9(cwd, ".mcp.json")
 });
 var init_claude = __esm(() => {
   init_base();
 });
 
 // src/mcp/providers/claude-desktop.ts
-import { join as join9 } from "node:path";
+import { join as join10 } from "node:path";
 function configPath() {
-  return join9(appSupportDir(), "Claude", "claude_desktop_config.json");
+  return join10(appSupportDir(), "Claude", "claude_desktop_config.json");
 }
 var ClaudeDesktopProvider = () => ({
   name: () => "Claude Desktop",
   id: () => "claude-desktop",
   supportsLocal: () => false,
   priority: () => 2,
-  detectPaths: () => [join9(appSupportDir(), "Claude")],
-  isInstalled: () => isInstalled([join9(appSupportDir(), "Claude")]),
+  detectPaths: () => [join10(appSupportDir(), "Claude")],
+  isInstalled: () => isInstalled([join10(appSupportDir(), "Claude")]),
   globalConfigPath: () => configPath(),
   isConfigured: () => isJSONKeyConfigured(configPath(), "mcpServers"),
   install(cfg, global) {
@@ -9425,14 +9682,14 @@ var init_claude_desktop = __esm(() => {
 });
 
 // src/mcp/providers/cline.ts
-import { join as join10 } from "node:path";
-var extensionDir = () => join10(appSupportDir(), "Code", "User", "globalStorage", "saoudrizwan.claude-dev"), ClineProvider = () => createJSONProvider({
+import { join as join11 } from "node:path";
+var extensionDir = () => join11(appSupportDir(), "Code", "User", "globalStorage", "saoudrizwan.claude-dev"), ClineProvider = () => createJSONProvider({
   providerName: "Cline",
   providerID: "cline",
   local: false,
   priorityValue: 11,
   paths: [extensionDir()],
-  globalPath: join10(extensionDir(), "settings", "cline_mcp_settings.json"),
+  globalPath: join11(extensionDir(), "settings", "cline_mcp_settings.json"),
   topKey: "mcpServers",
   buildServer: (cfg) => ({
     url: mcpURL(cfg.active_account.target.deployment_id),
@@ -9448,7 +9705,7 @@ var init_cline = __esm(() => {
 });
 
 // src/mcp/providers/cline-cli.ts
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 function clineDir() {
   return process.env.CLINE_DIR ?? expandHome("~/.cline");
 }
@@ -9458,7 +9715,7 @@ var ClineCliProvider = () => createJSONProvider({
   local: false,
   priorityValue: 12,
   paths: [clineDir()],
-  globalPath: join11(clineDir(), "data", "settings", "cline_mcp_settings.json"),
+  globalPath: join12(clineDir(), "data", "settings", "cline_mcp_settings.json"),
   topKey: "mcpServers",
   buildServer: (cfg) => ({
     url: mcpURL(cfg.active_account.target.deployment_id),
@@ -9474,20 +9731,20 @@ var init_cline_cli = __esm(() => {
 });
 
 // src/mcp/providers/codex.ts
-import { existsSync as existsSync8, readFileSync as readFileSync8 } from "node:fs";
-import { join as join12 } from "node:path";
+import { existsSync as existsSync9, readFileSync as readFileSync9 } from "node:fs";
+import { join as join13 } from "node:path";
 function codexHome() {
   return process.env.CODEX_HOME ?? expandHome("~/.codex");
 }
 function getConfigPath2(global) {
   if (global)
-    return join12(codexHome(), "config.toml");
-  return join12(process.cwd(), ".codex", "config.toml");
+    return join13(codexHome(), "config.toml");
+  return join13(process.cwd(), ".codex", "config.toml");
 }
 function readTOML(path3) {
-  if (!existsSync8(path3))
+  if (!existsSync9(path3))
     return "";
-  return readFileSync8(path3, "utf-8");
+  return readFileSync9(path3, "utf-8");
 }
 function writeTOML(path3, content) {
   writeSecureFile(path3, content);
@@ -9550,9 +9807,9 @@ var CodexProvider = () => ({
   priority: () => 8,
   detectPaths: () => ["~/.codex"],
   isInstalled: () => isInstalled(["~/.codex"]),
-  globalConfigPath: () => join12(codexHome(), "config.toml"),
+  globalConfigPath: () => join13(codexHome(), "config.toml"),
   isConfigured: () => {
-    const content = readTOML(join12(codexHome(), "config.toml"));
+    const content = readTOML(join13(codexHome(), "config.toml"));
     return content.includes("[mcp_servers.dosu]");
   },
   install(cfg, global) {
@@ -9574,10 +9831,10 @@ var init_codex = __esm(() => {
 });
 
 // src/mcp/providers/copilot.ts
-import { join as join13 } from "node:path";
+import { join as join14 } from "node:path";
 function globalPath() {
   if (process.env.XDG_CONFIG_HOME) {
-    return join13(process.env.XDG_CONFIG_HOME, "mcp-config.json");
+    return join14(process.env.XDG_CONFIG_HOME, "mcp-config.json");
   }
   return expandHome("~/.copilot/mcp-config.json");
 }
@@ -9608,7 +9865,7 @@ var CopilotProvider = () => ({
       };
       installJSONServer(globalPath(), "mcpServers", server);
     } else {
-      const configPath2 = join13(process.cwd(), ".vscode", "mcp.json");
+      const configPath2 = join14(process.cwd(), ".vscode", "mcp.json");
       const server = {
         type: "http",
         url,
@@ -9621,7 +9878,7 @@ var CopilotProvider = () => ({
     if (global) {
       removeJSONServer(globalPath(), "mcpServers");
     } else {
-      const configPath2 = join13(process.cwd(), ".vscode", "mcp.json");
+      const configPath2 = join14(process.cwd(), ".vscode", "mcp.json");
       removeJSONServer(configPath2, "servers");
     }
   }
@@ -9633,7 +9890,7 @@ var init_copilot = __esm(() => {
 });
 
 // src/mcp/providers/cursor.ts
-import { join as join14 } from "node:path";
+import { join as join15 } from "node:path";
 var CursorProvider = () => createJSONProvider({
   providerName: "Cursor",
   providerID: "cursor",
@@ -9646,7 +9903,7 @@ var CursorProvider = () => createJSONProvider({
     url: mcpURL(cfg.active_account.target.deployment_id),
     headers: mcpHeaders(cfg.active_account.target.api_key)
   }),
-  localConfigPath: (cwd) => join14(cwd, ".cursor", "mcp.json")
+  localConfigPath: (cwd) => join15(cwd, ".cursor", "mcp.json")
 });
 var init_cursor = __esm(() => {
   init_config_helpers();
@@ -9654,7 +9911,7 @@ var init_cursor = __esm(() => {
 });
 
 // src/mcp/providers/factory.ts
-import { join as join15 } from "node:path";
+import { join as join16 } from "node:path";
 var FactoryProvider = () => createJSONProvider({
   providerName: "Factory",
   providerID: "factory",
@@ -9663,14 +9920,14 @@ var FactoryProvider = () => createJSONProvider({
   paths: ["~/.factory"],
   globalPath: "~/.factory/mcp.json",
   topKey: "mcpServers",
-  localConfigPath: (cwd) => join15(cwd, ".factory", "mcp.json")
+  localConfigPath: (cwd) => join16(cwd, ".factory", "mcp.json")
 });
 var init_factory = __esm(() => {
   init_base();
 });
 
 // src/mcp/providers/gemini.ts
-import { join as join16 } from "node:path";
+import { join as join17 } from "node:path";
 var GeminiProvider = () => createJSONProvider({
   providerName: "Gemini CLI",
   providerID: "gemini",
@@ -9679,7 +9936,7 @@ var GeminiProvider = () => createJSONProvider({
   paths: ["~/.gemini"],
   globalPath: "~/.gemini/settings.json",
   topKey: "mcpServers",
-  localConfigPath: (cwd) => join16(cwd, ".gemini", "settings.json")
+  localConfigPath: (cwd) => join17(cwd, ".gemini", "settings.json")
 });
 var init_gemini = __esm(() => {
   init_base();
@@ -9729,14 +9986,14 @@ var init_manual = __esm(() => {
 });
 
 // src/mcp/providers/mcporter.ts
-import { existsSync as existsSync9 } from "node:fs";
-import { join as join17 } from "node:path";
+import { existsSync as existsSync10 } from "node:fs";
+import { join as join18 } from "node:path";
 function resolveGlobalConfigPath() {
   const jsonPath = expandHome("~/.mcporter/mcporter.json");
-  if (existsSync9(jsonPath))
+  if (existsSync10(jsonPath))
     return jsonPath;
   const jsoncPath = expandHome("~/.mcporter/mcporter.jsonc");
-  if (existsSync9(jsoncPath))
+  if (existsSync10(jsoncPath))
     return jsoncPath;
   return jsonPath;
 }
@@ -9757,7 +10014,7 @@ var MCPorterProvider = () => ({
   globalConfigPath: () => resolveGlobalConfigPath(),
   isConfigured: () => isJSONKeyConfigured(resolveGlobalConfigPath(), "mcpServers"),
   install(cfg, global) {
-    const configPath2 = global ? resolveGlobalConfigPath() : join17(process.cwd(), "config", "mcporter.json");
+    const configPath2 = global ? resolveGlobalConfigPath() : join18(process.cwd(), "config", "mcporter.json");
     const server = {
       type: "http",
       url: mcpEndpoint4(cfg),
@@ -9766,7 +10023,7 @@ var MCPorterProvider = () => ({
     installJSONServer(configPath2, "mcpServers", server);
   },
   remove(global) {
-    const configPath2 = global ? resolveGlobalConfigPath() : join17(process.cwd(), "config", "mcporter.json");
+    const configPath2 = global ? resolveGlobalConfigPath() : join18(process.cwd(), "config", "mcporter.json");
     removeJSONServer(configPath2, "mcpServers");
   }
 });
@@ -9777,7 +10034,7 @@ var init_mcporter = __esm(() => {
 });
 
 // src/mcp/providers/opencode.ts
-import { join as join18 } from "node:path";
+import { join as join19 } from "node:path";
 var OpenCodeProvider = () => createJSONProvider({
   providerName: "OpenCode",
   providerID: "opencode",
@@ -9792,7 +10049,7 @@ var OpenCodeProvider = () => createJSONProvider({
     enabled: true,
     headers: mcpHeaders(cfg.active_account.target.api_key)
   }),
-  localConfigPath: (cwd) => join18(cwd, "opencode.json")
+  localConfigPath: (cwd) => join19(cwd, "opencode.json")
 });
 var init_opencode = __esm(() => {
   init_config_helpers();
@@ -9800,16 +10057,16 @@ var init_opencode = __esm(() => {
 });
 
 // src/mcp/providers/vscode.ts
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 var VSCodeProvider = () => createJSONProvider({
   providerName: "VS Code",
   providerID: "vscode",
   local: true,
   priorityValue: 6,
-  paths: [join19(appSupportDir(), "Code")],
-  globalPath: join19(appSupportDir(), "Code", "User", "mcp.json"),
+  paths: [join20(appSupportDir(), "Code")],
+  globalPath: join20(appSupportDir(), "Code", "User", "mcp.json"),
   topKey: "servers",
-  localConfigPath: (cwd) => join19(cwd, ".vscode", "mcp.json")
+  localConfigPath: (cwd) => join20(cwd, ".vscode", "mcp.json")
 });
 var init_vscode = __esm(() => {
   init_detect();
@@ -9818,14 +10075,14 @@ var init_vscode = __esm(() => {
 
 // src/mcp/providers/windsurf.ts
 import { homedir as homedir3 } from "node:os";
-import { join as join20 } from "node:path";
+import { join as join21 } from "node:path";
 var WindsurfProvider = () => createJSONProvider({
   providerName: "Windsurf",
   providerID: "windsurf",
   local: false,
   priorityValue: 9,
-  paths: [join20(homedir3(), ".codeium", "windsurf")],
-  globalPath: join20(homedir3(), ".codeium", "windsurf", "mcp_config.json"),
+  paths: [join21(homedir3(), ".codeium", "windsurf")],
+  globalPath: join21(homedir3(), ".codeium", "windsurf", "mcp_config.json"),
   topKey: "mcpServers"
 });
 var init_windsurf = __esm(() => {
@@ -9834,12 +10091,12 @@ var init_windsurf = __esm(() => {
 
 // src/mcp/providers/zed.ts
 import { platform as platform3 } from "node:os";
-import { join as join21 } from "node:path";
+import { join as join22 } from "node:path";
 function zedConfigDir() {
   const os2 = platform3();
   if (os2 === "darwin" || os2 === "win32")
-    return join21(appSupportDir(), "Zed");
-  return join21(appSupportDir(), "zed");
+    return join22(appSupportDir(), "Zed");
+  return join22(appSupportDir(), "zed");
 }
 var ZedProvider = () => createJSONProvider({
   providerName: "Zed",
@@ -9847,7 +10104,7 @@ var ZedProvider = () => createJSONProvider({
   local: true,
   priorityValue: 10,
   paths: [zedConfigDir()],
-  globalPath: join21(zedConfigDir(), "settings.json"),
+  globalPath: join22(zedConfigDir(), "settings.json"),
   topKey: "context_servers",
   buildServer: (cfg) => ({
     source: "custom",
@@ -9855,7 +10112,7 @@ var ZedProvider = () => createJSONProvider({
     url: mcpURL(cfg.active_account.target.deployment_id),
     headers: mcpHeaders(cfg.active_account.target.api_key)
   }),
-  localConfigPath: (cwd) => join21(cwd, ".zed", "settings.json")
+  localConfigPath: (cwd) => join22(cwd, ".zed", "settings.json")
 });
 var init_zed = __esm(() => {
   init_config_helpers();
@@ -9914,14 +10171,14 @@ var init_providers = __esm(() => {
 });
 
 // src/rules/installer.ts
-import { existsSync as existsSync10, mkdirSync as mkdirSync6, readFileSync as readFileSync9, unlinkSync, writeFileSync as writeFileSync6 } from "node:fs";
+import { existsSync as existsSync11, mkdirSync as mkdirSync7, readFileSync as readFileSync10, unlinkSync as unlinkSync2, writeFileSync as writeFileSync7 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
-import { dirname as dirname4, join as join22 } from "node:path";
+import { dirname as dirname4, join as join23 } from "node:path";
 function claudeConfigDir() {
-  return process.env.CLAUDE_CONFIG_DIR || join22(homedir4(), ".claude");
+  return process.env.CLAUDE_CONFIG_DIR || join23(homedir4(), ".claude");
 }
 function codexHome2() {
-  return process.env.CODEX_HOME || join22(homedir4(), ".codex");
+  return process.env.CODEX_HOME || join23(homedir4(), ".codex");
 }
 function isRuleAgent(agent) {
   return Object.hasOwn(RULE_TARGETS, agent);
@@ -9947,17 +10204,17 @@ async function fetchDosuRule(fetchImpl = globalThis.fetch) {
   return normalizeRule(FALLBACK_DOSU_RULE);
 }
 function ensureParent(path3) {
-  mkdirSync6(dirname4(path3), { recursive: true });
+  mkdirSync7(dirname4(path3), { recursive: true });
 }
 function writeIfChanged(path3, content) {
-  if (!existsSync10(path3)) {
+  if (!existsSync11(path3)) {
     ensureParent(path3);
-    writeFileSync6(path3, content, "utf-8");
+    writeFileSync7(path3, content, "utf-8");
     return "created";
   }
-  if (readFileSync9(path3, "utf-8") === content)
+  if (readFileSync10(path3, "utf-8") === content)
     return "unchanged";
-  writeFileSync6(path3, content, "utf-8");
+  writeFileSync7(path3, content, "utf-8");
   return "updated";
 }
 function findSection(content) {
@@ -9983,14 +10240,14 @@ function buildSection(content, lineEnding = `
   return `${DOSU_RULE_SECTION_START}${lineEnding}${body}${lineEnding}${DOSU_RULE_SECTION_END}`;
 }
 function upsertSection(path3, content) {
-  if (!existsSync10(path3)) {
+  if (!existsSync11(path3)) {
     const section2 = buildSection(content);
     ensureParent(path3);
-    writeFileSync6(path3, `${section2}
+    writeFileSync7(path3, `${section2}
 `, "utf-8");
     return "created";
   }
-  const existing = readFileSync9(path3, "utf-8");
+  const existing = readFileSync10(path3, "utf-8");
   const lineEnding = lineEndingFor(existing);
   const section = buildSection(content, lineEnding);
   const location = findSection(existing);
@@ -10003,7 +10260,7 @@ function upsertSection(path3, content) {
   }
   if (next === existing)
     return "unchanged";
-  writeFileSync6(path3, next, "utf-8");
+  writeFileSync7(path3, next, "utf-8");
   return "updated";
 }
 function installRuleForAgent(agent, content) {
@@ -10020,22 +10277,22 @@ function removeRuleForAgent(agent) {
     return null;
   const target = RULE_TARGETS[agent];
   const path3 = target.path();
-  if (!existsSync10(path3))
+  if (!existsSync11(path3))
     return { agent, path: path3, action: "not_found" };
   if (target.kind === "file") {
-    unlinkSync(path3);
+    unlinkSync2(path3);
     return { agent, path: path3, action: "removed" };
   }
-  const existing = readFileSync9(path3, "utf-8");
+  const existing = readFileSync10(path3, "utf-8");
   const lineEnding = lineEndingFor(existing);
   const location = findSection(existing);
   if (!location)
     return { agent, path: path3, action: "not_found" };
   const next = (existing.slice(0, location.start) + existing.slice(location.end + DOSU_RULE_SECTION_END.length)).replace(/(?:\r?\n){3,}/g, `${lineEnding}${lineEnding}`).replace(/^(?:\r?\n)+/, "").trimEnd();
   if (!next) {
-    unlinkSync(path3);
+    unlinkSync2(path3);
   } else {
-    writeFileSync6(path3, `${next}${lineEnding}`, "utf-8");
+    writeFileSync7(path3, `${next}${lineEnding}`, "utf-8");
   }
   return { agent, path: path3, action: "removed" };
 }
@@ -10045,7 +10302,7 @@ alwaysApply: true
 
 `, DOSU_RULE_URLS, FALLBACK_DOSU_RULE = `The team you are assisting maintains shared knowledge in Dosu: consult it to build on prior work, and contribute durable knowledge so future teammates and agents do not have to rediscover it. Always use only tools currently listed by the server.
 
-When \`read_knowledge\` is listed, call it before non-trivial code or documentation work involving architecture, conventions, prior decisions, gotchas, incidents, ownership, or branch history. **If unsure whether relevant context exists, read first.** Pass \`repo\` and \`branch\` when available. Skip generic questions, trivial or self-contained edits, and context already injected by Dosu. Treat results as leads and verify them against current code and state.
+When \`read_knowledge\` is listed, call it before non-trivial code or documentation work involving architecture, conventions, prior decisions, gotchas, incidents, ownership, or branch history. **If unsure whether relevant context exists, read first.** Pass \`repo\` and \`branch\` when available. Skip generic questions, trivial or self-contained edits, and context already injected by Dosu.
 
 When \`write_knowledge\` is listed, use it after the task for durable, non-obvious knowledge that future work would otherwise have to rediscover. Do not save task or PR summaries, progress, test results, obvious facts, speculation, duplicates, or sensitive data. **If nothing durable was learned, do not write.**
 
@@ -10063,36 +10320,36 @@ var init_installer = __esm(() => {
   RULE_TARGETS = {
     claude: {
       kind: "file",
-      path: () => join22(claudeConfigDir(), "rules", "dosu.md")
+      path: () => join23(claudeConfigDir(), "rules", "dosu.md")
     },
     cursor: {
       kind: "file",
-      path: () => join22(homedir4(), ".cursor", "rules", "dosu.mdc"),
+      path: () => join23(homedir4(), ".cursor", "rules", "dosu.mdc"),
       cursorFrontmatter: true
     },
     codex: {
       kind: "section",
-      path: () => join22(codexHome2(), "AGENTS.md")
+      path: () => join23(codexHome2(), "AGENTS.md")
     },
     opencode: {
       kind: "section",
-      path: () => join22(homedir4(), ".config", "opencode", "AGENTS.md")
+      path: () => join23(homedir4(), ".config", "opencode", "AGENTS.md")
     },
     gemini: {
       kind: "section",
-      path: () => join22(homedir4(), ".gemini", "GEMINI.md")
+      path: () => join23(homedir4(), ".gemini", "GEMINI.md")
     },
     antigravity: {
       kind: "section",
-      path: () => join22(homedir4(), ".gemini", "GEMINI.md")
+      path: () => join23(homedir4(), ".gemini", "GEMINI.md")
     }
   };
 });
 
 // src/setup/agents-md-step.ts
 import { execSync as execSync3 } from "node:child_process";
-import { existsSync as existsSync11, readFileSync as readFileSync10, writeFileSync as writeFileSync7 } from "node:fs";
-import { join as join23 } from "node:path";
+import { existsSync as existsSync12, readFileSync as readFileSync11, writeFileSync as writeFileSync8 } from "node:fs";
+import { join as join24 } from "node:path";
 function inGitWorkTree(cwd = process.cwd()) {
   try {
     const stdout2 = execSync3("git rev-parse --is-inside-work-tree", {
@@ -10130,14 +10387,14 @@ function findSection2(content) {
   return { start, end };
 }
 function upsertDosuAgentsSection(cwd = process.cwd(), content = FALLBACK_DOSU_RULE) {
-  const path3 = join23(cwd, "AGENTS.md");
-  if (!existsSync11(path3)) {
+  const path3 = join24(cwd, "AGENTS.md");
+  if (!existsSync12(path3)) {
     const section2 = buildDosuAgentsSection(content);
-    writeFileSync7(path3, `${section2}
+    writeFileSync8(path3, `${section2}
 `);
     return { path: path3, action: "created" };
   }
-  const existing = readFileSync10(path3, "utf-8");
+  const existing = readFileSync11(path3, "utf-8");
   const lineEnding = lineEndingFor2(existing);
   const section = renderDosuAgentsSection(content, lineEnding);
   const location = findSection2(existing);
@@ -10149,7 +10406,7 @@ function upsertDosuAgentsSection(cwd = process.cwd(), content = FALLBACK_DOSU_RU
   }
   if (next === existing)
     return { path: path3, action: "unchanged" };
-  writeFileSync7(path3, next);
+  writeFileSync8(path3, next);
   return { path: path3, action: "updated" };
 }
 async function stepUpdateAgentsMd(cwd = process.cwd(), content) {
@@ -10178,19 +10435,19 @@ var init_agents_md_step = __esm(() => {
 });
 
 // src/telemetry/settings.ts
-import { randomUUID } from "node:crypto";
+import { randomUUID as randomUUID2 } from "node:crypto";
 import {
-  existsSync as existsSync12,
+  existsSync as existsSync13,
   lstatSync,
-  mkdirSync as mkdirSync7,
-  readFileSync as readFileSync11,
+  mkdirSync as mkdirSync8,
+  readFileSync as readFileSync12,
   renameSync as renameSync2,
-  unlinkSync as unlinkSync2,
-  writeFileSync as writeFileSync8
+  unlinkSync as unlinkSync3,
+  writeFileSync as writeFileSync9
 } from "node:fs";
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 function getTelemetrySettingsPath() {
-  return join24(getConfigDir(), TELEMETRY_SETTINGS_FILENAME);
+  return join25(getConfigDir(), TELEMETRY_SETTINGS_FILENAME);
 }
 function loadTelemetrySettings() {
   return readTelemetrySettings().settings;
@@ -10228,7 +10485,7 @@ function getOrCreateInstallID() {
   }
   if (current.status !== "current" && current.status !== "missing")
     return;
-  const installID = randomUUID();
+  const installID = randomUUID2();
   const settings2 = current.status === "current" ? current.settings : emptyTelemetrySettings();
   settings2.install_id = installID;
   return writeTelemetrySettings(settings2) ? installID : undefined;
@@ -10238,7 +10495,7 @@ function resetInstallID() {
   if (current.status !== "current" && current.status !== "missing")
     return;
   const settings2 = current.status === "current" ? current.settings : emptyTelemetrySettings();
-  const installID = randomUUID();
+  const installID = randomUUID2();
   settings2.install_id = installID;
   return writeTelemetrySettings(settings2) ? installID : undefined;
 }
@@ -10258,7 +10515,7 @@ function readTelemetrySettings() {
   }
   let content;
   try {
-    content = readFileSync11(path3, "utf-8");
+    content = readFileSync12(path3, "utf-8");
   } catch {
     return { status: "error", settings: disabledTelemetrySettings() };
   }
@@ -10268,7 +10525,7 @@ function readTelemetrySettings() {
   } catch {
     return { status: "invalid", settings: disabledTelemetrySettings() };
   }
-  if (!isRecord3(raw))
+  if (!isRecord5(raw))
     return { status: "invalid", settings: disabledTelemetrySettings() };
   if (raw.schema_version !== TELEMETRY_SCHEMA_VERSION) {
     const status = "schema_version" in raw ? "unsupported" : "invalid";
@@ -10288,11 +10545,11 @@ function readTelemetrySettings() {
 function writeTelemetrySettings(settings2) {
   const path3 = getTelemetrySettingsPath();
   const dir = getConfigDir();
-  const temporaryPath = `${path3}.${process.pid}.${randomUUID()}.tmp`;
+  const temporaryPath = `${path3}.${process.pid}.${randomUUID2()}.tmp`;
   try {
-    if (!existsSync12(dir))
-      mkdirSync7(dir, { recursive: true, mode: 448 });
-    writeFileSync8(temporaryPath, `${JSON.stringify(settings2, null, 2)}
+    if (!existsSync13(dir))
+      mkdirSync8(dir, { recursive: true, mode: 448 });
+    writeFileSync9(temporaryPath, `${JSON.stringify(settings2, null, 2)}
 `, {
       flag: "wx",
       mode: 384
@@ -10301,7 +10558,7 @@ function writeTelemetrySettings(settings2) {
     return true;
   } catch {
     try {
-      unlinkSync2(temporaryPath);
+      unlinkSync3(temporaryPath);
     } catch {}
     return false;
   }
@@ -10323,7 +10580,7 @@ function isEnabledEnvironmentFlag(value) {
 function isUUID(value) {
   return /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value);
 }
-function isRecord3(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isErrorCode(error, code) {
@@ -10336,11 +10593,11 @@ var init_settings = __esm(() => {
 });
 
 // src/telemetry/debug-id.ts
-var BUNDLE_DEBUG_ID_PLACEHOLDER = "3772d842-939e-9b04-6475-6e2164756e21";
+var BUNDLE_DEBUG_ID_PLACEHOLDER = "20790a5a-a63f-06a4-6475-6e2164756e21";
 
 // src/telemetry/telemetry.ts
-import { randomUUID as randomUUID2 } from "node:crypto";
-import { existsSync as existsSync13 } from "node:fs";
+import { randomUUID as randomUUID3 } from "node:crypto";
+import { existsSync as existsSync14 } from "node:fs";
 import { request as httpRequest2 } from "node:http";
 import { request as httpsRequest } from "node:https";
 import { isAbsolute, relative, resolve, sep } from "node:path";
@@ -10479,7 +10736,7 @@ function parseOwnedStackLine(originalLine, packageRoot) {
     return;
   }
   try {
-    if (!existsSync13(resolvedPath))
+    if (!existsSync14(resolvedPath))
       return;
   } catch {
     return;
@@ -10487,15 +10744,16 @@ function parseOwnedStackLine(originalLine, packageRoot) {
   return { filename, lineno: Number(match[2]), colno: Number(match[3]) };
 }
 function sanitizeError(error) {
-  const data = safeRead(error, "data");
-  const typeCandidate = safeRead(error, "name");
-  const codeCandidates = [safeRead(data, "code"), safeRead(error, "code")];
+  const normalizedError = domainErrorFromCauseChain(error) ?? error;
+  const data = safeRead(normalizedError, "data");
+  const typeCandidate = safeRead(normalizedError, "name");
+  const codeCandidates = [safeRead(data, "code"), safeRead(normalizedError, "code")];
   const statusCandidates = [
     safeRead(data, "httpStatus"),
-    safeRead(error, "status"),
-    safeRead(error, "statusCode")
+    safeRead(normalizedError, "status"),
+    safeRead(normalizedError, "statusCode")
   ];
-  const exitCodeCandidate = safeRead(error, "exitCode");
+  const exitCodeCandidate = safeRead(normalizedError, "exitCode");
   const code = codeCandidates.find(validErrorCode);
   const status = statusCandidates.find(validStatus);
   const exitCode = typeof exitCodeCandidate === "number" && Number.isFinite(exitCodeCandidate) ? normalizeExitCode(exitCodeCandidate) : undefined;
@@ -10503,10 +10761,25 @@ function sanitizeError(error) {
     type: validErrorType(typeCandidate) ? typeCandidate : "Error",
     ...code ? { code } : {},
     ...status ? { status } : {},
-    frames: parseStack(safeRead(error, "stack")),
+    frames: parseStack(safeRead(normalizedError, "stack")),
     ...exitCode === undefined ? {} : { exitCode }
   };
 }
+function domainErrorFromCauseChain(error) {
+  const seen = new Set;
+  let current = error;
+  for (let depth = 0;depth < 5 && objectLike(current); depth += 1) {
+    if (seen.has(current))
+      return;
+    seen.add(current);
+    const code = safeRead(current, "code");
+    if (code === "SESSION_EXPIRED" || code === "SESSION_PERSISTENCE_ERROR" || code === "SESSION_REFRESH_ERROR") {
+      return current;
+    }
+    current = safeRead(current, "cause");
+  }
+  return;
+}
 function durationBucket(durationMs) {
   const duration = Number.isFinite(durationMs) ? Math.max(0, durationMs) : 0;
   if (duration < 100)
@@ -10867,7 +11140,7 @@ function createCommandTelemetry(settings2, dependencies = {}) {
   const env = dependencies.env ?? process.env;
   const fetcher = dependencies.fetch;
   const now = dependencies.now ?? Date.now;
-  const generateUuid = dependencies.randomUUID ?? randomUUID2;
+  const generateUuid = dependencies.randomUUID ?? randomUUID3;
   const writeStderr = dependencies.stderr ?? ((payload) => process.stderr.write(`${payload}
 `));
   const webAppURL = dependencies.webAppURL ?? getWebAppURL;
@@ -10935,7 +11208,7 @@ function createCommandTelemetry(settings2, dependencies = {}) {
           }
         }
       }
-      if (!disabled && result === "failure" && error && sentryDsn) {
+      if (!disabled && result === "failure" && error && shouldSendToSentry(error) && sentryDsn) {
         const id = eventId(generateUuid);
         const envelope = id ? buildSentryEnvelope({
           dsn: sentryDsn,
@@ -10991,6 +11264,9 @@ function createCommandTelemetry(settings2, dependencies = {}) {
     }
   };
 }
+function shouldSendToSentry(error) {
+  return !["SESSION_EXPIRED", "SESSION_PERSISTENCE_ERROR"].includes(error.code ?? "");
+}
 var REQUEST_TIMEOUT_MS = 500, MAX_RESPONSE_BYTES, MAX_STACK_FRAMES = 20, UNKNOWN_COMMAND = "unknown", FALLBACK_INSTALL_ID = "00000000-0000-4000-8000-000000000000", BUNDLE_CODE_FILE = "app:///bin/dosu.js", CLI_PACKAGE_ROOT, SAFE_ERROR_TYPES, SAFE_ERROR_CODES;
 var init_telemetry = __esm(() => {
   MAX_RESPONSE_BYTES = 1024 * 1024;
@@ -11006,6 +11282,8 @@ var init_telemetry = __esm(() => {
     "RangeError",
     "ReferenceError",
     "SessionExpiredError",
+    "SessionPersistenceError",
+    "SessionRefreshError",
     "SyntaxError",
     "TRPCClientError",
     "TypeError"
@@ -11052,6 +11330,9 @@ var init_telemetry = __esm(() => {
     "PAYMENT_REQUIRED",
     "PRECONDITION_FAILED",
     "SERVICE_UNAVAILABLE",
+    "SESSION_EXPIRED",
+    "SESSION_PERSISTENCE_ERROR",
+    "SESSION_REFRESH_ERROR",
     "TIMEOUT",
     "TOO_MANY_REQUESTS",
     "UNAUTHORIZED",
@@ -11363,11 +11644,11 @@ var init_agent_kickoff = __esm(() => {
 });
 
 // src/setup/logs-handoff.ts
-import { existsSync as existsSync14, readdirSync, statSync as statSync2 } from "node:fs";
+import { existsSync as existsSync15, readdirSync, statSync as statSync3 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { join as join25 } from "node:path";
+import { join as join26 } from "node:path";
 function countJsonlFiles(root, cap = COUNT_CAP) {
-  if (!existsSync14(root))
+  if (!existsSync15(root))
     return { count: 0, capped: false };
   let count = 0;
   const stack = [root];
@@ -11382,7 +11663,7 @@ function countJsonlFiles(root, cap = COUNT_CAP) {
       continue;
     }
     for (const entry of entries) {
-      const path3 = join25(dir, entry.name);
+      const path3 = join26(dir, entry.name);
       if (entry.isDirectory()) {
         stack.push(path3);
       } else if (entry.isFile() && entry.name.endsWith(".jsonl")) {
@@ -11396,23 +11677,23 @@ function countJsonlFiles(root, cap = COUNT_CAP) {
 }
 function detectLogSources(home = process.env.HOME || homedir5()) {
   const roots = {
-    cursor: join25(home, ".cursor", "projects"),
-    claude: join25(home, ".claude", "projects"),
-    codex: join25(home, ".codex", "sessions")
+    cursor: join26(home, ".cursor", "projects"),
+    claude: join26(home, ".claude", "projects"),
+    codex: join26(home, ".codex", "sessions")
   };
   const hits = [];
   for (const source of LOG_SOURCES) {
     const root = roots[source];
     if (source === "cursor") {
-      if (!existsSync14(root))
+      if (!existsSync15(root))
         continue;
       let count = 0;
       let capped = false;
       try {
         for (const proj of readdirSync(root)) {
-          const transcripts = join25(root, proj, "agent-transcripts");
+          const transcripts = join26(root, proj, "agent-transcripts");
           try {
-            if (!statSync2(transcripts).isDirectory())
+            if (!statSync3(transcripts).isDirectory())
               continue;
           } catch {
             continue;
@@ -11941,7 +12222,7 @@ async function startOAuthFlow(signal, path3 = "/cli/auth", params = {}, onAuthUR
       logger.debug("auth.flow", "Browser unavailable — returning to caller for fallback");
       return { browserOpened: false };
     }
-    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS2;
     const timeoutMinutes = Math.round(timeoutMs / 60000);
     const timeout = new Promise((_2, reject) => {
       timeoutId = setTimeout(() => {
@@ -11969,11 +12250,11 @@ function buildAuthURL(callbackURL, path3, extraParams) {
   const params = new URLSearchParams({ callback: callbackURL, ...extraParams });
   return `${webAppURL}${path3}?${params}`;
 }
-var DEFAULT_TIMEOUT_MS;
+var DEFAULT_TIMEOUT_MS2;
 var init_flow = __esm(() => {
   init_logger();
   init_server();
-  DEFAULT_TIMEOUT_MS = 8 * 60 * 1000;
+  DEFAULT_TIMEOUT_MS2 = 8 * 60 * 1000;
 });
 
 // src/setup/flow.ts
@@ -11986,12 +12267,12 @@ __export(exports_flow2, {
   runInstallSkill: () => runInstallSkill,
   cliAuthFailureReason: () => cliAuthFailureReason
 });
-import { randomUUID as randomUUID3 } from "node:crypto";
+import { randomUUID as randomUUID4 } from "node:crypto";
 function trackInBackground(tracking) {
   tracking.catch(() => {});
 }
 async function runSetup(opts = {}) {
-  const onboardingRunID = randomUUID3();
+  const onboardingRunID = randomUUID4();
   logger.info("setup", `Setup flow started${opts.deploymentID ? ` deployment=${opts.deploymentID}` : ""}${opts.mode ? ` mode=${opts.mode}` : ""}`);
   intro("Dosu CLI Setup");
   trackInBackground(trackCliOnboardingPreAuthEvent(onboardingRunID, "cli_onboarding_launch_attempted", {
@@ -12611,8 +12892,8 @@ var init_flow2 = __esm(() => {
 });
 
 // src/commands/insights.ts
-import { existsSync as existsSync15, mkdirSync as mkdirSync8, readdirSync as readdirSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync9 } from "node:fs";
-import { dirname as dirname5, join as join26 } from "node:path";
+import { existsSync as existsSync16, mkdirSync as mkdirSync9, readdirSync as readdirSync2, unlinkSync as unlinkSync4, writeFileSync as writeFileSync10 } from "node:fs";
+import { dirname as dirname5, join as join27 } from "node:path";
 function shuffled(arr) {
   const copy2 = [...arr];
   for (let i2 = copy2.length - 1;i2 > 0; i2--) {
@@ -12716,17 +12997,17 @@ function makeAskFn(cfg) {
   };
 }
 function insightsDir() {
-  return join26(getConfigDir(), "insights");
+  return join27(getConfigDir(), "insights");
 }
 function reportPath(timestamp) {
   const dir = insightsDir();
   if (!timestamp)
-    return join26(dir, "latest.html");
+    return join27(dir, "latest.html");
   const iso = timestamp.toISOString().slice(0, 19).replace(/:/g, "-");
-  return join26(dir, `report-${iso}Z.html`);
+  return join27(dir, `report-${iso}Z.html`);
 }
 function pruneOldReports(dir, keepN) {
-  if (!existsSync15(dir))
+  if (!existsSync16(dir))
     return;
   let entries;
   try {
@@ -12738,7 +13019,7 @@ function pruneOldReports(dir, keepN) {
   const reports = entries.filter((f2) => REPORT_FILE_PATTERN.test(f2)).sort().reverse();
   for (const f2 of reports.slice(keepN)) {
     try {
-      unlinkSync3(join26(dir, f2));
+      unlinkSync4(join27(dir, f2));
     } catch (err) {
       logger.debug("insights", `failed to prune ${f2}: ${err instanceof Error ? err.message : err}`);
     }
@@ -12811,9 +13092,9 @@ function defaultRunner(cfg) {
     render: renderHTML,
     writeFile: (path3, content) => {
       const dir = dirname5(path3);
-      if (!existsSync15(dir))
-        mkdirSync8(dir, { recursive: true, mode: 448 });
-      writeFileSync9(path3, content, { mode: 384 });
+      if (!existsSync16(dir))
+        mkdirSync9(dir, { recursive: true, mode: 448 });
+      writeFileSync10(path3, content, { mode: 384 });
     },
     prune: pruneOldReports,
     openInBrowser: async (path3) => {
@@ -13644,13 +13925,13 @@ var init_flow3 = __esm(() => {
 init_commander();
 init_client();
 import {
-  closeSync,
+  closeSync as closeSync2,
   constants,
   fstatSync,
-  openSync,
-  readFileSync as readFileSync14,
+  openSync as openSync2,
+  readFileSync as readFileSync15,
   readSync,
-  unlinkSync as unlinkSync4
+  unlinkSync as unlinkSync5
 } from "node:fs";
 
 // src/commands/analytics.ts
@@ -13874,8 +14155,8 @@ init_commander();
 init_trpc();
 init_logger();
 var import_picocolors9 = __toESM(require_picocolors(), 1);
-import { existsSync as existsSync4, readFileSync as readFileSync4, rmSync, writeFileSync as writeFileSync4 } from "node:fs";
-import { dirname, join as join4 } from "node:path";
+import { existsSync as existsSync5, readFileSync as readFileSync5, rmSync, writeFileSync as writeFileSync5 } from "node:fs";
+import { dirname, join as join5 } from "node:path";
 
 // src/setup/github-step.ts
 init_dist8();
@@ -14743,20 +15024,20 @@ ${dim(`deployment ${deployment_id}`)}`);
 init_config();
 init_logger();
 var import_picocolors8 = __toESM(require_picocolors(), 1);
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "node:fs";
-import { join as join3 } from "node:path";
+import { existsSync as existsSync4, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "node:fs";
+import { join as join4 } from "node:path";
 var CACHE_FILENAME = "pending-tasks.json";
 var CHECK_INTERVAL_MS = 60000;
 var FETCH_TIMEOUT_MS = 5000;
 function getCachePath() {
-  return join3(getConfigDir(), CACHE_FILENAME);
+  return join4(getConfigDir(), CACHE_FILENAME);
 }
 function readPendingTasks() {
   try {
     const path3 = getCachePath();
-    if (!existsSync3(path3))
+    if (!existsSync4(path3))
       return { tasks: [] };
-    const data = JSON.parse(readFileSync3(path3, "utf-8"));
+    const data = JSON.parse(readFileSync4(path3, "utf-8"));
     if (Array.isArray(data?.tasks)) {
       return { tasks: data.tasks };
     }
@@ -14768,10 +15049,10 @@ function readPendingTasks() {
 function writePendingTasks(cache) {
   try {
     const dir = getConfigDir();
-    if (!existsSync3(dir)) {
-      mkdirSync3(dir, { recursive: true, mode: 448 });
+    if (!existsSync4(dir)) {
+      mkdirSync4(dir, { recursive: true, mode: 448 });
     }
-    writeFileSync3(getCachePath(), JSON.stringify(cache), { mode: 384 });
+    writeFileSync4(getCachePath(), JSON.stringify(cache), { mode: 384 });
   } catch {}
 }
 function addPendingTask(task) {
@@ -15010,12 +15291,12 @@ function loadFindings(findingsPath) {
     console.error(import_picocolors9.default.red("Run the Dosu audit in your coding agent first (it writes .dosu/audit.json)."));
     process.exit(1);
   };
-  if (!existsSync4(findingsPath)) {
+  if (!existsSync5(findingsPath)) {
     fail();
   }
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync4(findingsPath, "utf-8"));
+    parsed = JSON.parse(readFileSync5(findingsPath, "utf-8"));
   } catch {
     fail();
   }
@@ -15025,21 +15306,21 @@ function loadFindings(findingsPath) {
   return parsed;
 }
 function cleanupFindings(findingsPath, cwd = process.cwd()) {
-  const gitignorePath = join4(cwd, ".gitignore");
+  const gitignorePath = join5(cwd, ".gitignore");
   try {
-    const content = existsSync4(gitignorePath) ? readFileSync4(gitignorePath, "utf-8") : "";
+    const content = existsSync5(gitignorePath) ? readFileSync5(gitignorePath, "utf-8") : "";
     const hasEntry = content.split(/\r?\n/).some((line) => /^\.dosu\/?$/.test(line.trim()));
     if (!hasEntry) {
       const sep = content === "" || content.endsWith(`
 `) ? "" : `
 `;
-      writeFileSync4(gitignorePath, `${content}${sep}.dosu/
+      writeFileSync5(gitignorePath, `${content}${sep}.dosu/
 `);
     }
   } catch (err) {
     logger.warn("audit", `could not update .gitignore: ${errText(err)}`);
   }
-  const defaultDir = join4(cwd, ".dosu");
+  const defaultDir = join5(cwd, ".dosu");
   if (dirname(findingsPath) !== defaultDir)
     return;
   try {
@@ -15082,7 +15363,7 @@ function auditCommand() {
     const nonInteractive = Boolean(opts.tasks);
     const client = createTypedClient(cfg);
     const dataSourceId = await ensureSyncedRepo(cfg, client, detected, opts.dataSourceId, nonInteractive);
-    const findingsPath = opts.findings ?? join4(process.cwd(), ".dosu", "audit.json");
+    const findingsPath = opts.findings ?? join5(process.cwd(), ".dosu", "audit.json");
     const findings = loadFindings(findingsPath);
     if (!opts.dataSourceId && findings.repo?.slug && findings.repo.slug !== detected.slug) {
       console.error(import_picocolors9.default.red(`Audit was run on ${findings.repo.slug}, but the current repo is ${detected.slug}. ` + `Run 'dosu audit' from ${findings.repo.slug} so the PR targets the audited repo.`));
@@ -15257,7 +15538,7 @@ init_commander();
 init_trpc();
 init_logger();
 var import_picocolors11 = __toESM(require_picocolors(), 1);
-import { readFileSync as readFileSync5 } from "node:fs";
+import { readFileSync as readFileSync6 } from "node:fs";
 function requireConfig5() {
   const cfg = requireLoginConfig();
   if (!cfg.active_account?.target?.space_id) {
@@ -15278,7 +15559,7 @@ async function getKnowledgeStoreId(client, spaceId) {
 }
 function readBody(opts) {
   if (opts.bodyFile)
-    return readFileSync5(opts.bodyFile, "utf-8");
+    return readFileSync6(opts.bodyFile, "utf-8");
   return opts.body;
 }
 var IMPORT_ALREADY_IN_PROGRESS_CODE = "IMPORT_ALREADY_IN_PROGRESS";
@@ -16012,7 +16293,7 @@ init_dist();
 init_commander();
 init_trpc();
 var import_picocolors19 = __toESM(require_picocolors(), 1);
-import { readFileSync as readFileSync12 } from "node:fs";
+import { readFileSync as readFileSync13 } from "node:fs";
 function requireConfig10() {
   return requireLoginConfig();
 }
@@ -16188,7 +16469,7 @@ function reviewCommand() {
     let body = opts.body;
     if (opts.bodyFile) {
       try {
-        body = readFileSync12(opts.bodyFile, "utf-8");
+        body = readFileSync13(opts.bodyFile, "utf-8");
       } catch (err) {
         console.error(import_picocolors19.default.red(`Failed to read --body-file: ${err.message}`));
         process.exit(1);
@@ -16977,8 +17258,8 @@ init_skill_update_check();
 init_config();
 init_logger();
 var import_picocolors25 = __toESM(require_picocolors(), 1);
-import { existsSync as existsSync16, mkdirSync as mkdirSync9, readFileSync as readFileSync13, writeFileSync as writeFileSync10 } from "node:fs";
-import { join as join27 } from "node:path";
+import { existsSync as existsSync17, mkdirSync as mkdirSync10, readFileSync as readFileSync14, writeFileSync as writeFileSync11 } from "node:fs";
+import { join as join28 } from "node:path";
 var CACHE_FILENAME3 = "update-check.json";
 var CHECK_INTERVAL_MS3 = 6 * 60 * 60 * 1000;
 var FETCH_TIMEOUT_MS3 = 1000;
@@ -17005,14 +17286,14 @@ function isNewerVersion(latest, current) {
   return false;
 }
 function getCachePath3() {
-  return join27(getConfigDir(), CACHE_FILENAME3);
+  return join28(getConfigDir(), CACHE_FILENAME3);
 }
 function readCache() {
   try {
     const path3 = getCachePath3();
-    if (!existsSync16(path3))
+    if (!existsSync17(path3))
       return null;
-    const data = JSON.parse(readFileSync13(path3, "utf-8"));
+    const data = JSON.parse(readFileSync14(path3, "utf-8"));
     if (typeof data.lastCheck === "number" && isValidVersion(data.latestVersion)) {
       return data;
     }
@@ -17024,10 +17305,10 @@ function readCache() {
 function writeCache(cache) {
   try {
     const dir = getConfigDir();
-    if (!existsSync16(dir)) {
-      mkdirSync9(dir, { recursive: true, mode: 448 });
+    if (!existsSync17(dir)) {
+      mkdirSync10(dir, { recursive: true, mode: 448 });
     }
-    writeFileSync10(getCachePath3(), JSON.stringify(cache), { mode: 384 });
+    writeFileSync11(getCachePath3(), JSON.stringify(cache), { mode: 384 });
   } catch {}
 }
 async function fetchLatestVersion() {
@@ -17162,7 +17443,7 @@ function loadConfigForTelemetry() {
   let fd;
   try {
     const nonblocking = typeof constants.O_NONBLOCK === "number" ? constants.O_NONBLOCK : 0;
-    fd = openSync(getConfigPath(), constants.O_RDONLY | nonblocking);
+    fd = openSync2(getConfigPath(), constants.O_RDONLY | nonblocking);
     const file = fstatSync(fd);
     if (!file.isFile() || file.size > MAX_TELEMETRY_CONFIG_BYTES)
       return;
@@ -17176,7 +17457,7 @@ function loadConfigForTelemetry() {
   } finally {
     if (fd !== undefined) {
       try {
-        closeSync(fd);
+        closeSync2(fd);
       } catch {}
     }
   }
@@ -17541,7 +17822,7 @@ Use 'dosu mcp add <agent>' to add Dosu MCP to a tool.`);
     const logPath = logger.getLogPath();
     if (opts.clear) {
       try {
-        unlinkSync4(logPath);
+        unlinkSync5(logPath);
         console.log("Log file deleted.");
       } catch {
         console.log("No log file to delete.");
@@ -17551,7 +17832,7 @@ Use 'dosu mcp add <agent>' to add Dosu MCP to a tool.`);
     if (opts.tail !== undefined) {
       const n2 = typeof opts.tail === "string" ? parseInt(opts.tail, 10) || 50 : 50;
       try {
-        const content = readFileSync14(logPath, "utf-8");
+        const content = readFileSync15(logPath, "utf-8");
         const lines = content.split(`
 `);
         console.log(lines.slice(-n2).join(`
@@ -17617,4 +17898,4 @@ execute().catch((err) => {
   process.exit(1);
 });
 
-//# debugId=3772d842-939e-9b04-6475-6e2164756e21
+//# debugId=20790a5a-a63f-06a4-6475-6e2164756e21