@goondocks/myco 0.17.2 → 0.18.1

package/dist/{main-YFVBIRRK.js → main-5THODR77.js}

@@ -15,7 +15,7 @@ import {
   getEmbeddingQueueDepth,
   getUnembedded,
   markEmbedded
-} from "./chunk-BZDZORVP.js";
+} from "./chunk-LSP5HYOO.js";
 import {
   loadSecrets,
   readSecrets,
@@ -24,7 +24,7 @@ import {
 import {
   Anthropic,
   createEmbeddingProvider
-} from "./chunk-HPZ7YAMA.js";
+} from "./chunk-TCSVDQF5.js";
 import {
   buildTaskInstruction,
   closeOpenBatches,
@@ -72,24 +72,24 @@ import {
   setResponseSummary,
   updateCandidate,
   updateNotificationStatus
-} from "./chunk-RMJPQZGF.js";
+} from "./chunk-C3EGL5JX.js";
 import {
   fullTextSearch,
   hydrateSearchResults
-} from "./chunk-IGBHLFV5.js";
+} from "./chunk-TOER6RNC.js";
 import {
   copyTaskToUser,
   deleteUserTask,
   loadAllTasks,
   validateTaskName,
   writeUserTask
-} from "./chunk-3NCVCGUZ.js";
+} from "./chunk-RAV5YMRU.js";
 import {
   AgentTaskSchema,
   registerAgent,
   resolveDefinitionsDir,
   taskFromParsed
-} from "./chunk-F6C4IC6R.js";
+} from "./chunk-NI23QCHB.js";
 import {
   listTurnsByRun
 } from "./chunk-QLCD77AN.js";
@@ -106,23 +106,23 @@ import {
   listBufferSessionIds
 } from "./chunk-V7XG6V6C.js";
 import "./chunk-IB76KGBY.js";
-import "./chunk-CTF7TQMJ.js";
+import "./chunk-TLK46KKD.js";
 import "./chunk-SAKJMNSR.js";
-import "./chunk-VVGZL2HX.js";
+import "./chunk-WYOE4IAX.js";
 import {
   checkLocalProvider
-} from "./chunk-DT42247G.js";
+} from "./chunk-75AZFBFW.js";
 import {
   LmStudioBackend,
   OllamaBackend
-} from "./chunk-ML6GTPZU.js";
+} from "./chunk-CML4MCYF.js";
 import {
   countSpores,
   getSpore,
   insertSpore,
   listSpores,
   updateSporeStatus
-} from "./chunk-ZSJPI5MS.js";
+} from "./chunk-TZAXQKO6.js";
 import {
   closeSession,
   countSessions,
@@ -133,7 +133,7 @@ import {
   listSessions,
   updateSession,
   upsertSession
-} from "./chunk-25WHTV4N.js";
+} from "./chunk-RIDSOQDR.js";
 import {
   backfillUnsynced,
   countDeadLettered,
@@ -149,13 +149,13 @@ import {
   pruneOld,
   retryDeadLettered,
   syncRow
-} from "./chunk-C3C5QVLK.js";
+} from "./chunk-O3TRN3RC.js";
 import {
   EMBEDDING_DIMENSIONS,
   REST_SETTABLE_STATUSES,
   SCHEMA_VERSION,
   createSchema
-} from "./chunk-UTLWSKDV.js";
+} from "./chunk-CURS2TNP.js";
 import {
   CONFIG_FILENAME,
   MycoConfigSchema,
@@ -164,7 +164,7 @@ import {
   updateBackupConfig,
   updateConfig,
   updateTeamConfig
-} from "./chunk-XD3NEN3Q.js";
+} from "./chunk-2V7HR7HB.js";
 import {
   closeDatabase,
   getDatabase,
@@ -173,13 +173,13 @@ import {
 } from "./chunk-MYX5NCRH.js";
 import {
   resolveCliEntryPath
-} from "./chunk-XZWFMMJR.js";
+} from "./chunk-XWOQL4XN.js";
 import {
   getPluginVersion
-} from "./chunk-SI5BBQAT.js";
+} from "./chunk-W7WENJ6F.js";
 import {
   loadManifests
-} from "./chunk-EBIYONNZ.js";
+} from "./chunk-DPSLJ242.js";
 import {
   findPackageRoot
 } from "./chunk-LPUQPDC2.js";
@@ -213,6 +213,7 @@ import {
   PROMPT_PREVIEW_CHARS,
   PROMPT_VECTOR_OVER_FETCH,
   RELEASE_CHANNELS,
+  RESTART_REASON_FILENAME,
   RESTART_RESPONSE_FLUSH_MS,
   SEARCH_RESULTS_DEFAULT_LIMIT,
   SEARCH_SIMILARITY_THRESHOLD,
@@ -228,12 +229,13 @@ import {
   UPDATE_CONFIG_PATH,
   UPDATE_ERROR_PATH,
   UPDATE_SCRIPT_DELAY_SECONDS,
+  UPDATE_STAMP_FILENAME,
   USER_AGENT_ID,
   USER_AGENT_NAME,
   USER_TASK_SOURCE,
   epochSeconds,
   estimateTokens
-} from "./chunk-7DAH5GLC.js";
+} from "./chunk-CKJAWZQE.js";
 import {
   LOG_KINDS,
   kindToComponent
@@ -370,7 +372,7 @@ var DaemonServer = class {
     this.router.add(method, routePath, handler);
   }
   async start(port = 0) {
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve3, reject) => {
       this.server = http.createServer((req, res) => this.handleRequest(req, res));
       this.server.on("error", reject);
       this.server.listen(port, "127.0.0.1", () => {
@@ -378,20 +380,20 @@ var DaemonServer = class {
         this.port = addr.port;
         this.writeDaemonJson();
         this.logger.info(LOG_KINDS.DAEMON_PORT, "Server started", { port: this.port, dashboard: `http://localhost:${this.port}/` });
-        resolve();
+        resolve3();
       });
     });
   }
   async stop() {
-    return new Promise((resolve) => {
+    return new Promise((resolve3) => {
       this.removeDaemonJson();
       if (this.server) {
         this.server.close(() => {
           this.logger.info(LOG_KINDS.DAEMON_START, "Server stopped");
-          resolve();
+          resolve3();
         });
       } else {
-        resolve();
+        resolve3();
       }
     });
   }
@@ -539,14 +541,14 @@ var DaemonServer = class {
   }
 };
 function readBody(req) {
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve3, reject) => {
     let data = "";
     req.on("data", (chunk) => {
       data += chunk;
     });
     req.on("end", () => {
       try {
-        resolve(data ? JSON.parse(data) : {});
+        resolve3(data ? JSON.parse(data) : {});
       } catch (e) {
         reject(e);
       }
@@ -626,11 +628,11 @@ async function resolvePort(configPort, vaultPath) {
   return 0;
 }
 function isPortAvailable(port) {
-  return new Promise((resolve) => {
+  return new Promise((resolve3) => {
     const server = net.createServer();
-    server.once("error", () => resolve(false));
+    server.once("error", () => resolve3(false));
     server.once("listening", () => {
-      server.close(() => resolve(true));
+      server.close(() => resolve3(true));
     });
     server.listen(port, "127.0.0.1");
   });
@@ -639,6 +641,53 @@ function isPortAvailable(port) {
 // src/symbionts/adapter.ts
 import fs3 from "fs";
 import path3 from "path";
+
+// src/symbionts/parsers/standard-jsonl.ts
+var IMAGE_TEXT_REF_PATTERN = /\[Image: source: [^\]]+\]\n*/g;
+var StandardJsonlParser = class {
+  constructor(opts) {
+    this.opts = opts;
+  }
+  parseTurns(content) {
+    const lines = content.split("\n").filter(Boolean);
+    const turns = [];
+    let current = null;
+    for (const line of lines) {
+      let entry;
+      try {
+        entry = JSON.parse(line);
+      } catch {
+        continue;
+      }
+      const role = entry[this.opts.roleField];
+      const timestamp = this.opts.extractTimestamp ? entry.timestamp ?? "" : "";
+      if (role === "user") {
+        if (entry.isMeta === true) continue;
+        const msg = entry.message;
+        const blocks = Array.isArray(msg?.content) ? msg.content : [];
+        const hasText = blocks.some((b) => b.type === "text" && b.text?.trim());
+        if (!hasText) continue;
+        if (current) turns.push(current);
+        const rawPrompt = blocks.filter((b) => b.type === "text" && b.text).map((b) => b.text).join("\n");
+        const promptText = (this.opts.stripImageTextRefs ? rawPrompt.replace(IMAGE_TEXT_REF_PATTERN, "") : rawPrompt).trim().slice(0, PROMPT_PREVIEW_CHARS);
+        const images = blocks.filter((b) => b.type === "image" && b.source?.type === "base64" && b.source.data).map((b) => ({ data: b.source.data, mediaType: b.source.media_type ?? "image/png" }));
+        current = { prompt: promptText, toolCount: 0, timestamp, ...images.length > 0 ? { images } : {} };
+      } else if (role === "assistant" && current) {
+        const msg = entry.message;
+        if (Array.isArray(msg?.content)) {
+          const textParts = msg.content.filter((b) => b.type === "text" && b.text).map((b) => b.text);
+          const text = textParts.join("\n").trim();
+          if (text) current.aiResponse = text;
+          current.toolCount += msg.content.filter((b) => b.type === "tool_use").length;
+        }
+      }
+    }
+    if (current) turns.push(current);
+    return turns;
+  }
+};
+
+// src/symbionts/adapter.ts
 function findJsonlInSubdirs(baseDir, sessionId) {
   try {
     for (const entry of fs3.readdirSync(baseDir, { withFileTypes: true })) {
@@ -683,44 +732,8 @@ var EXT_TO_MIME = {
 function mimeTypeForExtension(ext) {
   return EXT_TO_MIME[ext.toLowerCase()] ?? "image/png";
 }
-var IMAGE_TEXT_REF_PATTERN = /\[Image: source: [^\]]+\]\n*/g;
 function parseJsonlTurns(content, opts) {
-  const lines = content.split("\n").filter(Boolean);
-  const turns = [];
-  let current = null;
-  for (const line of lines) {
-    let entry;
-    try {
-      entry = JSON.parse(line);
-    } catch {
-      continue;
-    }
-    const role = entry[opts.roleField];
-    const timestamp = opts.extractTimestamp ? entry.timestamp ?? "" : "";
-    if (role === "user") {
-      if (entry.isMeta === true) continue;
-      const msg = entry.message;
-      const blocks = Array.isArray(msg?.content) ? msg.content : [];
-      const hasText = blocks.some((b) => b.type === "text" && b.text?.trim());
-      if (!hasText && opts.skipToolResultUsers) continue;
-      if (!hasText) continue;
-      if (current) turns.push(current);
-      const rawPrompt = blocks.filter((b) => b.type === "text" && b.text).map((b) => b.text).join("\n");
-      const promptText = (opts.stripImageTextRefs ? rawPrompt.replace(IMAGE_TEXT_REF_PATTERN, "") : rawPrompt).trim().slice(0, PROMPT_PREVIEW_CHARS);
-      const images = blocks.filter((b) => b.type === "image" && b.source?.type === "base64" && b.source.data).map((b) => ({ data: b.source.data, mediaType: b.source.media_type ?? "image/png" }));
-      current = { prompt: promptText, toolCount: 0, timestamp, ...images.length > 0 ? { images } : {} };
-    } else if (role === "assistant" && current) {
-      const msg = entry.message;
-      if (Array.isArray(msg?.content)) {
-        const textParts = msg.content.filter((b) => b.type === "text" && b.text).map((b) => b.text);
-        const text = textParts.join("\n").trim();
-        if (text) current.aiResponse = text;
-        current.toolCount += msg.content.filter((b) => b.type === "tool_use").length;
-      }
-    }
-  }
-  if (current) turns.push(current);
-  return turns;
+  return new StandardJsonlParser(opts).parseTurns(content);
 }
 
 // src/symbionts/claude-code.ts
@@ -874,10 +887,100 @@ function parseCursorText(content) {
   return turns;
 }
 
+// src/symbionts/parsers/codex-jsonl.ts
+function parseDataUrl(url) {
+  const match = url.match(/^data:([^;]+);base64,(.+)$/);
+  if (!match) return null;
+  return { mediaType: match[1], data: match[2] };
+}
+var IMAGE_WRAPPER_TAG = /^<\/?image\b[^>]*>$/;
+var CODEX_PROMPT_MARKER = "## My request for Codex:\n";
+function cleanCodexPromptText(text) {
+  if (IMAGE_WRAPPER_TAG.test(text.trim())) return "";
+  const idx = text.indexOf(CODEX_PROMPT_MARKER);
+  if (idx !== -1) return text.slice(idx + CODEX_PROMPT_MARKER.length);
+  return text;
+}
+var CodexJsonlParser = class {
+  parseTurns(content) {
+    const lines = content.split("\n").filter(Boolean);
+    const turns = [];
+    let current = null;
+    for (const line of lines) {
+      let entry;
+      try {
+        entry = JSON.parse(line);
+      } catch {
+        continue;
+      }
+      if (entry.type !== "response_item") continue;
+      const payload = entry.payload;
+      if (!payload) continue;
+      const payloadType = payload.type;
+      const timestamp = entry.timestamp ?? "";
+      if (payloadType === "function_call") {
+        if (current) current.toolCount++;
+        continue;
+      }
+      if (payloadType !== "message") continue;
+      const role = payload.role;
+      const blocks = Array.isArray(payload.content) ? payload.content : [];
+      if (role === "user") {
+        const textParts = blocks.filter((b) => b.type === "input_text" && b.text?.trim()).map((b) => cleanCodexPromptText(b.text)).filter((t) => t.trim());
+        if (textParts.length === 0) continue;
+        if (current) turns.push(current);
+        const promptText = textParts.join("\n").trim().slice(0, PROMPT_PREVIEW_CHARS);
+        const images = [];
+        for (const b of blocks) {
+          if (b.type === "input_image" && b.image_url) {
+            const parsed = parseDataUrl(b.image_url);
+            if (parsed) images.push(parsed);
+          }
+        }
+        current = { prompt: promptText, toolCount: 0, timestamp, ...images.length > 0 ? { images } : {} };
+      } else if (role === "assistant" && current) {
+        const textParts = blocks.filter((b) => b.type === "output_text" && b.text).map((b) => b.text);
+        const text = textParts.join("\n").trim();
+        if (text) current.aiResponse = text;
+      }
+    }
+    if (current) turns.push(current);
+    return turns;
+  }
+};
+
 // src/symbionts/codex.ts
+import fs5 from "fs";
 import path6 from "path";
 import os3 from "os";
 var TRANSCRIPT_BASE2 = path6.join(os3.homedir(), ".codex");
+var codexParser = new CodexJsonlParser();
+function findCodexTranscript(baseDir, sessionId) {
+  const sessionsDir = path6.join(baseDir, "sessions");
+  try {
+    return scanForSessionFile(sessionsDir, sessionId);
+  } catch {
+    return null;
+  }
+}
+function scanForSessionFile(dir, sessionId) {
+  let entries;
+  try {
+    entries = fs5.readdirSync(dir, { withFileTypes: true });
+  } catch {
+    return null;
+  }
+  for (const entry of entries) {
+    const fullPath = path6.join(dir, entry.name);
+    if (entry.isDirectory()) {
+      const found = scanForSessionFile(fullPath, sessionId);
+      if (found) return found;
+    } else if (entry.isFile() && entry.name.includes(sessionId) && entry.name.endsWith(".jsonl")) {
+      return fullPath;
+    }
+  }
+  return null;
+}
 var codexAdapter = {
   name: "codex",
   displayName: "Codex",
@@ -891,18 +994,12 @@ var codexAdapter = {
     toolInput: "tool_input",
     toolOutput: "tool_output"
   },
-  findTranscript: (sessionId) => findJsonlInSubdirs(TRANSCRIPT_BASE2, sessionId),
-  // Codex uses 'role' field (like Cursor), not 'type' (like Claude Code)
-  parseTurns: (content) => parseJsonlTurns(content, {
-    roleField: "role",
-    extractTimestamp: false,
-    skipToolResultUsers: false,
-    stripImageTextRefs: false
-  })
+  findTranscript: (sessionId) => findCodexTranscript(TRANSCRIPT_BASE2, sessionId),
+  parseTurns: (content) => codexParser.parseTurns(content)
 };
 
 // src/symbionts/gemini.ts
-import fs5 from "fs";
+import fs6 from "fs";
 import path7 from "path";
 import os4 from "os";
 var GEMINI_TMP = path7.join(os4.homedir(), ".gemini", "tmp");
@@ -922,15 +1019,15 @@ var geminiAdapter = {
   },
   findTranscript(sessionId) {
     try {
-      for (const project of fs5.readdirSync(GEMINI_TMP, { withFileTypes: true })) {
+      for (const project of fs6.readdirSync(GEMINI_TMP, { withFileTypes: true })) {
         if (!project.isDirectory()) continue;
         const chatsDir = path7.join(GEMINI_TMP, project.name, "chats");
         try {
-          for (const file of fs5.readdirSync(chatsDir)) {
+          for (const file of fs6.readdirSync(chatsDir)) {
             if (!file.endsWith(".json")) continue;
             if (file.includes(sessionId.slice(0, 8))) {
               try {
-                const data = JSON.parse(fs5.readFileSync(path7.join(chatsDir, file), "utf-8"));
+                const data = JSON.parse(fs6.readFileSync(path7.join(chatsDir, file), "utf-8"));
                 if (data.sessionId === sessionId) {
                   return path7.join(chatsDir, file);
                 }
@@ -984,7 +1081,7 @@ function parseGeminiJson(content) {
 }
 
 // src/symbionts/windsurf.ts
-import fs6 from "fs";
+import fs7 from "fs";
 import path8 from "path";
 import os5 from "os";
 var TRANSCRIPT_DIR = path8.join(os5.homedir(), ".windsurf", "transcripts");
@@ -1007,7 +1104,7 @@ var windsurfAdapter = {
   findTranscript(sessionId) {
     const candidate = path8.join(TRANSCRIPT_DIR, `${sessionId}.jsonl`);
     try {
-      fs6.accessSync(candidate);
+      fs7.accessSync(candidate);
       return candidate;
     } catch {
       return null;
@@ -1142,7 +1239,7 @@ function normalizeResponseParts(response) {
 }
 
 // src/symbionts/registry.ts
-import fs7 from "fs";
+import fs8 from "fs";
 var ALL_ADAPTERS = [
   claudeCodeAdapter,
   cursorAdapter,
@@ -1165,7 +1262,7 @@ var SymbiontRegistry = class {
       const filePath = adapter.findTranscript(sessionId);
       if (!filePath) continue;
       try {
-        const content = fs7.readFileSync(filePath, "utf-8");
+        const content = fs8.readFileSync(filePath, "utf-8");
         const turns = adapter.parseTurns(content);
         if (turns.length > 0) {
           return { turns, source: adapter.name };
@@ -1199,7 +1296,7 @@ var SymbiontRegistry = class {
    */
   parseTurnsFromPath(filePath) {
     try {
-      const content = fs7.readFileSync(filePath, "utf-8");
+      const content = fs8.readFileSync(filePath, "utf-8");
       const active = this.detectActiveAgent();
       const orderedAdapters = active ? [active, ...this.adapters.filter((a) => a !== active)] : this.adapters;
       for (const adapter of orderedAdapters) {
@@ -1599,12 +1696,34 @@ async function handleRestart(deps, body) {
 
 // src/daemon/update-checker.ts
 var import_yaml = __toESM(require_dist(), 1);
-import fs8 from "fs";
+import fs9 from "fs";
 import path9 from "path";
+import { execFileSync } from "child_process";
 import semver from "semver";
 var REGISTRY_FETCH_TIMEOUT_MS = 1e4;
+var devBuildCliEntry = null;
+function setDevBuildCliEntry(cliEntry) {
+  devBuildCliEntry = cliEntry;
+}
+function resolveMycoBinary() {
+  return devBuildCliEntry ?? "myco";
+}
 function isUpdateExempt() {
-  return Boolean(process.env.MYCO_CMD);
+  return devBuildCliEntry !== null;
+}
+function detectDevBuild(globalPrefix, cliEntry, realpath) {
+  if (!globalPrefix) return null;
+  if (!cliEntry) return null;
+  try {
+    const resolvedEntry = realpath(cliEntry);
+    const resolvedPrefix = realpath(globalPrefix);
+    if (resolvedEntry.startsWith(resolvedPrefix + path9.sep) || resolvedEntry === resolvedPrefix) {
+      return null;
+    }
+    return cliEntry;
+  } catch {
+    return null;
+  }
 }
 function defaultUpdateConfig() {
   return {
@@ -1614,7 +1733,7 @@ function defaultUpdateConfig() {
 }
 function readUpdateConfig() {
   try {
-    const raw = fs8.readFileSync(UPDATE_CONFIG_PATH, "utf-8");
+    const raw = fs9.readFileSync(UPDATE_CONFIG_PATH, "utf-8");
     const parsed = import_yaml.default.parse(raw);
     const channel = RELEASE_CHANNELS.includes(parsed?.channel) ? parsed.channel : DEFAULT_RELEASE_CHANNEL;
     const check_interval_hours = typeof parsed?.check_interval_hours === "number" && parsed.check_interval_hours > 0 ? parsed.check_interval_hours : UPDATE_CHECK_INTERVAL_HOURS;
@@ -1624,12 +1743,12 @@ function readUpdateConfig() {
   }
 }
 function writeUpdateConfig(config) {
-  fs8.mkdirSync(MYCO_GLOBAL_DIR, { recursive: true });
-  fs8.writeFileSync(UPDATE_CONFIG_PATH, import_yaml.default.stringify(config), "utf-8");
+  fs9.mkdirSync(MYCO_GLOBAL_DIR, { recursive: true });
+  fs9.writeFileSync(UPDATE_CONFIG_PATH, import_yaml.default.stringify(config), "utf-8");
 }
 function readCachedCheck() {
   try {
-    const raw = fs8.readFileSync(UPDATE_CHECK_CACHE_PATH, "utf-8");
+    const raw = fs9.readFileSync(UPDATE_CHECK_CACHE_PATH, "utf-8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -1637,7 +1756,7 @@ function readCachedCheck() {
 }
 function clearCachedCheck() {
   try {
-    fs8.unlinkSync(UPDATE_CHECK_CACHE_PATH);
+    fs9.unlinkSync(UPDATE_CHECK_CACHE_PATH);
   } catch {
   }
 }
@@ -1675,6 +1794,25 @@ function buildCheckResult(currentVersion, cache, config, error) {
     error
   };
 }
+function resolveGlobalPrefix() {
+  return execFileSync("npm", ["prefix", "-g"], { encoding: "utf-8", timeout: 5e3 }).trim();
+}
+function getInstalledVersion(globalPrefix) {
+  try {
+    const pkgPath = path9.join(
+      globalPrefix,
+      "lib",
+      "node_modules",
+      NPM_PACKAGE_NAME,
+      "package.json"
+    );
+    const raw = fs9.readFileSync(pkgPath, "utf-8");
+    const pkg = JSON.parse(raw);
+    return pkg.version ?? null;
+  } catch {
+    return null;
+  }
+}
 async function checkForUpdate(currentVersion) {
   const config = readUpdateConfig();
   const existingCache = readCachedCheck();
@@ -1717,8 +1855,8 @@ async function checkForUpdate(currentVersion) {
     channel: config.channel
   };
   try {
-    fs8.mkdirSync(path9.dirname(UPDATE_CHECK_CACHE_PATH), { recursive: true });
-    fs8.writeFileSync(UPDATE_CHECK_CACHE_PATH, JSON.stringify(freshCache, null, 2), "utf-8");
+    fs9.mkdirSync(path9.dirname(UPDATE_CHECK_CACHE_PATH), { recursive: true });
+    fs9.writeFileSync(UPDATE_CHECK_CACHE_PATH, JSON.stringify(freshCache, null, 2), "utf-8");
   } catch {
   }
   return buildCheckResult(currentVersion, freshCache, config, null);
@@ -1731,22 +1869,23 @@ function statusFromCache(currentVersion, cache, config) {
 }
 
 // src/daemon/update-installer.ts
-import fs9 from "fs";
+import fs10 from "fs";
 import os6 from "os";
 import path10 from "path";
 import { spawn as spawn2 } from "child_process";
 function generateUpdateScript(params) {
-  const { targetVersion, projectRoot, vaultDir } = params;
+  const { targetVersion, projectRoot, vaultDir, mycoBinary } = params;
   const packageSpec = `${NPM_PACKAGE_NAME}@${targetVersion}`;
   const quotedProjectRoot = JSON.stringify(projectRoot);
   const quotedVaultDir = JSON.stringify(vaultDir);
+  const quotedMycoBinary = JSON.stringify(mycoBinary);
   const quotedErrorPath = JSON.stringify(UPDATE_ERROR_PATH);
   const errorJson = JSON.stringify(
     JSON.stringify({ error: `npm install failed for ${packageSpec}` })
   );
   return `#!/bin/sh
 set -e
-MYCO="\${MYCO_CMD:-myco}"
+MYCO=${quotedMycoBinary}
 
 # Wait for daemon to exit cleanly
 sleep ${UPDATE_SCRIPT_DELAY_SECONDS}
@@ -1769,12 +1908,9 @@ fi
 rm -f "$0"
 `;
 }
-function spawnUpdateScript(params) {
-  fs9.mkdirSync(MYCO_GLOBAL_DIR, { recursive: true });
-  const scriptName = `myco-update-${Date.now()}.sh`;
-  const scriptPath = path10.join(os6.tmpdir(), scriptName);
-  const script = generateUpdateScript(params);
-  fs9.writeFileSync(scriptPath, script, { encoding: "utf-8", mode: 493 });
+function spawnDetachedScript(namePrefix, content) {
+  const scriptPath = path10.join(os6.tmpdir(), `${namePrefix}-${Date.now()}.sh`);
+  fs10.writeFileSync(scriptPath, content, { encoding: "utf-8", mode: 493 });
   const child = spawn2("/bin/sh", [scriptPath], {
     detached: true,
     stdio: "ignore"
@@ -1782,17 +1918,94 @@ function spawnUpdateScript(params) {
   child.unref();
   return scriptPath;
 }
+function spawnUpdateScript(params) {
+  fs10.mkdirSync(MYCO_GLOBAL_DIR, { recursive: true });
+  return spawnDetachedScript("myco-update", generateUpdateScript(params));
+}
+function generateRestartScript(params) {
+  const { projectRoot, vaultDir, runLocalUpdate, fromVersion, toVersion, mycoBinary } = params;
+  const quotedProjectRoot = JSON.stringify(projectRoot);
+  const quotedVaultDir = JSON.stringify(vaultDir);
+  const quotedMycoBinary = JSON.stringify(mycoBinary);
+  const reasonFile = JSON.stringify(path10.join(vaultDir, RESTART_REASON_FILENAME));
+  const reasonJson = JSON.stringify(JSON.stringify({
+    reason: "version_sync",
+    from_version: fromVersion,
+    to_version: toVersion,
+    local_update_ran: runLocalUpdate
+  }));
+  const updateBlock = runLocalUpdate ? `
+# Run local project update (hooks, symbionts, gitignore)
+"$MYCO" update --project ${quotedProjectRoot} || true` : "";
+  return `#!/bin/sh
+set -e
+MYCO=${quotedMycoBinary}
+
+# Wait for daemon to exit cleanly
+sleep ${UPDATE_SCRIPT_DELAY_SECONDS}
+${updateBlock}
+
+# Write restart reason for the new daemon to pick up
+echo ${reasonJson} > ${reasonFile}
+
+# Restart daemon
+"$MYCO" daemon --vault ${quotedVaultDir} &
+
+# Clean up this script
+rm -f "$0"
+`;
+}
+function spawnRestartScript(params) {
+  return spawnDetachedScript("myco-restart", generateRestartScript(params));
+}
 
 // src/daemon/api/update.ts
+import semver2 from "semver";
+import fs11 from "fs";
+import path11 from "path";
 var ChannelBodySchema = external_exports.object({
   channel: external_exports.enum(RELEASE_CHANNELS)
 });
 function createUpdateHandlers(deps) {
-  const { vaultDir, projectRoot, currentVersion, scheduleShutdown } = deps;
+  const { vaultDir, projectRoot, currentVersion, scheduleShutdown, globalPrefix } = deps;
+  let restartInitiated = false;
+  function isStampCurrent() {
+    try {
+      const stampPath = path11.join(vaultDir, UPDATE_STAMP_FILENAME);
+      const stamp = fs11.readFileSync(stampPath, "utf-8").trim();
+      return stamp === currentVersion;
+    } catch {
+      return false;
+    }
+  }
   async function handleUpdateStatus(_req) {
     if (isUpdateExempt()) {
       return { body: { exempt: true, running_version: currentVersion } };
     }
+    if (globalPrefix && !restartInitiated) {
+      const installedVersion = getInstalledVersion(globalPrefix);
+      if (installedVersion && semver2.valid(installedVersion) && semver2.valid(currentVersion) && semver2.gt(installedVersion, currentVersion)) {
+        restartInitiated = true;
+        const runLocalUpdate = !isStampCurrent();
+        spawnRestartScript({
+          projectRoot,
+          vaultDir,
+          runLocalUpdate,
+          fromVersion: currentVersion,
+          toVersion: installedVersion,
+          mycoBinary: resolveMycoBinary()
+        });
+        scheduleShutdown();
+        return {
+          body: {
+            restarting: true,
+            reason: "version_sync",
+            running_version: currentVersion,
+            installed_version: installedVersion
+          }
+        };
+      }
+    }
     const config = readUpdateConfig();
     const cache = readCachedCheck();
     if (isCacheStale(cache, config.check_interval_hours)) {
@@ -1836,7 +2049,12 @@ function createUpdateHandlers(deps) {
     if (!status || !status.update_available) {
       return { status: 400, body: { error: "no_update_available" } };
     }
-    spawnUpdateScript({ targetVersion: status.latest_version, projectRoot, vaultDir });
+    spawnUpdateScript({
+      targetVersion: status.latest_version,
+      projectRoot,
+      vaultDir,
+      mycoBinary: resolveMycoBinary()
+    });
     scheduleShutdown();
     return { body: { status: "applying", version: status.latest_version } };
   }
@@ -1877,8 +2095,8 @@ function createUpdateHandlers(deps) {
 }
 
 // src/daemon/backup.ts
-import fs10 from "fs";
-import path11 from "path";
+import fs12 from "fs";
+import path12 from "path";
 var BACKUP_TABLES = [
   "sessions",
   "prompt_batches",
@@ -1893,6 +2111,7 @@ var BACKUP_TABLES = [
   "team_members"
 ];
 var BACKUP_EXTENSION = ".sql";
+var BACKUP_FILENAME_PATTERN = /^[A-Za-z0-9_-]+\.sql$/;
 var BACKUP_HEADER_TEMPLATE = "-- Myco backup";
 function escapeSql(value) {
   return value.replace(/'/g, "''");
@@ -1904,7 +2123,7 @@ function toSqlLiteral(value) {
   return `'${escapeSql(String(value))}'`;
 }
 function createBackup(db, backupDir, machineId) {
-  fs10.mkdirSync(backupDir, { recursive: true });
+  fs12.mkdirSync(backupDir, { recursive: true });
   const lines = [];
   const timestamp = epochSeconds();
   lines.push(`${BACKUP_HEADER_TEMPLATE}: machine_id=${machineId}, created_at=${timestamp}`);
@@ -1922,22 +2141,22 @@ function createBackup(db, backupDir, machineId) {
     }
     lines.push("");
   }
-  const filePath = path11.join(backupDir, `${machineId}${BACKUP_EXTENSION}`);
-  fs10.writeFileSync(filePath, lines.join("\n"), "utf-8");
+  const filePath = path12.join(backupDir, `${machineId}${BACKUP_EXTENSION}`);
+  fs12.writeFileSync(filePath, lines.join("\n"), "utf-8");
   return filePath;
 }
 function listBackups(backupDir) {
   let entries;
   try {
-    entries = fs10.readdirSync(backupDir);
+    entries = fs12.readdirSync(backupDir);
   } catch {
     return [];
   }
   const backups = [];
   for (const entry of entries) {
-    if (!entry.endsWith(BACKUP_EXTENSION)) continue;
-    const filePath = path11.join(backupDir, entry);
-    const stat = fs10.statSync(filePath);
+    if (!BACKUP_FILENAME_PATTERN.test(entry)) continue;
+    const filePath = path12.join(backupDir, entry);
+    const stat = fs12.statSync(filePath);
     backups.push({
       machine_id: entry.slice(0, -BACKUP_EXTENSION.length),
       file_name: entry,
@@ -1949,7 +2168,7 @@ function listBackups(backupDir) {
 }
 var INSERT_REGEX = /^INSERT OR IGNORE INTO (\w+)\s+\(([^)]+)\)\s+VALUES\s+\((.+)\);$/;
 function parseBackupFile(backupPath) {
-  const content = fs10.readFileSync(backupPath, "utf-8");
+  const content = fs12.readFileSync(backupPath, "utf-8");
   const inserts = [];
   for (const line of content.split("\n")) {
     const match = INSERT_REGEX.exec(line);
@@ -2033,7 +2252,7 @@ function restoreBackup(db, backupPath) {
 }
 
 // src/daemon/api/backup.ts
-import path12 from "path";
+import path13 from "path";
 function createBackupHandlers(deps) {
   async function handleCreateBackup(_req) {
     const filePath = createBackup(deps.db, deps.backupDir, deps.machineId);
@@ -2092,7 +2311,7 @@ function createBackupConfigHandlers(deps) {
   const { vaultDir } = deps;
   async function handleGetBackupConfig() {
     const cfg = loadConfig(vaultDir);
-    return { body: { dir: cfg.backup.dir ?? null, default_dir: path12.resolve(vaultDir, "backups") } };
+    return { body: { dir: cfg.backup.dir ?? null, default_dir: path13.resolve(vaultDir, "backups") } };
   }
   async function handlePutBackupConfig(req) {
     const { dir } = req.body;
@@ -2103,12 +2322,14 @@ function createBackupConfigHandlers(deps) {
 }
 
 // src/daemon/team-sync.ts
-var TeamSyncClient = class {
+var TeamSyncClient = class _TeamSyncClient {
   workerUrl;
   apiKey;
   machineId;
   syncProtocolVersion;
   fetchFn;
+  mcpToken = null;
+  mcpTokenHash = null;
   constructor(options) {
     this.workerUrl = options.workerUrl.replace(/\/+$/, "");
     this.apiKey = options.apiKey;
@@ -2116,6 +2337,14 @@ var TeamSyncClient = class {
     this.syncProtocolVersion = options.syncProtocolVersion;
     this.fetchFn = options.fetch ?? globalThis.fetch;
   }
+  // Must match getMcpTokenHash() in src/worker/src/mcp/auth.ts
+  static hashToken(token) {
+    let hash = 0;
+    for (let i = 0; i < token.length; i++) {
+      hash = (hash << 5) - hash + token.charCodeAt(i) | 0;
+    }
+    return Math.abs(hash).toString(16).padStart(8, "0").slice(0, 8);
+  }
   /**
    * Register this machine with the team worker.
    */
@@ -2125,7 +2354,12 @@ var TeamSyncClient = class {
       machine_id: this.machineId,
       sync_protocol_version: this.syncProtocolVersion
     });
-    return res;
+    const response = res;
+    if (response.mcp_token) {
+      this.mcpToken = response.mcp_token;
+      this.mcpTokenHash = _TeamSyncClient.hashToken(response.mcp_token);
+    }
+    return response;
   }
   /**
    * Push a batch of outbox records to the team worker.
@@ -2191,7 +2425,14 @@ var TeamSyncClient = class {
       if (!res.ok) {
         throw new Error(`Health check failed: ${res.status} ${res.statusText}`);
       }
-      return await res.json();
+      const data = await res.json();
+      if (data.mcp_token_hash && data.mcp_token_hash !== this.mcpTokenHash) {
+        try {
+          await this.connect({ machine_id: this.machineId });
+        } catch {
+        }
+      }
+      return data;
     } finally {
       clearTimeout(timer);
     }
@@ -2204,6 +2445,22 @@ var TeamSyncClient = class {
     return res;
   }
   // ---------------------------------------------------------------------------
+  // MCP token accessors
+  // ---------------------------------------------------------------------------
+  getMcpToken() {
+    return this.mcpToken;
+  }
+  getMcpEndpoint() {
+    if (!this.mcpToken) return null;
+    return `${this.workerUrl}/mcp`;
+  }
+  async rotateMcpToken() {
+    const result = await this.request("POST", "/mcp/rotate");
+    this.mcpToken = result.token;
+    this.mcpTokenHash = _TeamSyncClient.hashToken(result.token);
+    return result.token;
+  }
+  // ---------------------------------------------------------------------------
   // Internal
   // ---------------------------------------------------------------------------
   headers() {
@@ -2212,15 +2469,15 @@ var TeamSyncClient = class {
       "Content-Type": "application/json"
     };
   }
-  async request(method, path21, body) {
-    const res = await this.fetchFn(`${this.workerUrl}${path21}`, {
+  async request(method, path22, body) {
+    const res = await this.fetchFn(`${this.workerUrl}${path22}`, {
       method,
       headers: this.headers(),
       body: body !== void 0 ? JSON.stringify(body) : void 0
     });
     if (!res.ok) {
       const text = await res.text().catch(() => "");
-      throw new Error(`Team sync request ${method} ${path21} failed: ${res.status} ${text}`);
+      throw new Error(`Team sync request ${method} ${path22} failed: ${res.status} ${text}`);
     }
     return res.json();
   }
@@ -2228,7 +2485,7 @@ var TeamSyncClient = class {
 
 // src/daemon/api/team-connect.ts
 function createTeamHandlers(deps) {
-  const { vaultDir, machineId } = deps;
+  const { vaultDir, machineId, logger } = deps;
   async function handleConnect(req) {
     const { url, api_key } = req.body;
     if (!url || !api_key) {
@@ -2313,7 +2570,9 @@ function createTeamHandlers(deps) {
         deployed_worker_version: config.team.deployed_worker_version ?? null,
         worker_update_available: config.team.enabled ? config.team.deployed_worker_version !== getPluginVersion() : false,
         schema_version: SCHEMA_VERSION,
-        sync_protocol_version: SYNC_PROTOCOL_VERSION
+        sync_protocol_version: SYNC_PROTOCOL_VERSION,
+        mcp_token: client?.getMcpToken() ?? null,
+        mcp_endpoint: client?.getMcpEndpoint() ?? null
       }
     };
   }
@@ -2326,11 +2585,17 @@ function createTeamHandlers(deps) {
     return { body: { retried: count } };
   }
   async function handleUpgradeWorker(_req) {
-    const { upgradeWorker } = await import("./team-7X64J4Y6.js");
+    const { upgradeWorker } = await import("./team-DPNP2RN7.js");
+    logger.info("team-sync.upgrade.start", "Starting worker upgrade");
     const result = upgradeWorker(vaultDir);
     if (!result.success) {
+      logger.error("team-sync.upgrade.failed", "Worker upgrade failed", { error: result.error });
       return { status: 500, body: { error: result.error } };
     }
+    logger.info("team-sync.upgrade.complete", "Worker upgrade complete", {
+      worker_url: result.worker_url,
+      version: result.version
+    });
     if (result.worker_url && deps.getTeamClient()) {
       const secrets = readSecrets(vaultDir);
       const apiKey = secrets[TEAM_API_KEY_SECRET];
@@ -2345,7 +2610,28 @@ function createTeamHandlers(deps) {
     }
     return { body: result };
   }
-  return { handleConnect, handleDisconnect, handleStatus, handleBackfill, handleRetryFailed, handleUpgradeWorker };
+  async function handleRotateMcpToken(_req) {
+    const client = deps.getTeamClient();
+    if (!client) {
+      return {
+        status: 400,
+        body: { error: "Team sync not connected" }
+      };
+    }
+    try {
+      const token = await client.rotateMcpToken();
+      logger.info("team-sync.mcp-token.rotated", "MCP access token rotated");
+      return { body: { token } };
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      logger.error("team-sync.mcp-token.rotate-failed", "MCP token rotation failed", { error: message });
+      return {
+        status: 500,
+        body: { error: message }
+      };
+    }
+  }
+  return { handleConnect, handleDisconnect, handleStatus, handleBackfill, handleRetryFailed, handleUpgradeWorker, handleRotateMcpToken };
 }
 
 // src/daemon/api/session-lifecycle.ts
@@ -2425,8 +2711,8 @@ function createSessionLifecycleHandlers(deps) {
 }
 
 // src/daemon/api/skills.ts
-import fs11 from "fs";
-import path13 from "path";
+import fs13 from "fs";
+import path14 from "path";
 
 // src/db/queries/skill-usage.ts
 var USAGE_COLUMNS = [
@@ -2593,15 +2879,15 @@ function createSkillRecordDeleteHandler(deps) {
     if (result.body?.deleted) {
       const record = result.body;
       if (record.name) {
-        const projectRoot = path13.resolve(vaultDir, "..");
-        const skillDir = path13.resolve(projectRoot, ".agents", "skills", record.name);
+        const projectRoot = path14.resolve(vaultDir, "..");
+        const skillDir = path14.resolve(projectRoot, ".agents", "skills", record.name);
         try {
-          fs11.rmSync(skillDir, { recursive: true, force: true });
+          fs13.rmSync(skillDir, { recursive: true, force: true });
         } catch (err) {
           logger.warn(LOG_KINDS.PROCESSOR_BATCH, "Failed to remove skill directory", { name: record.name, error: String(err) });
         }
         try {
-          const { syncSkillSymlinks } = await import("./installer-45ZLP2RP.js");
+          const { syncSkillSymlinks } = await import("./installer-BWJED3ED.js");
           syncSkillSymlinks(projectRoot, record.name, { remove: true });
         } catch (err) {
           logger.warn(LOG_KINDS.PROCESSOR_BATCH, "Failed to remove skill symlinks", { name: record.name, error: String(err) });
@@ -2854,12 +3140,12 @@ async function handleGetModels(req) {
 
 // src/daemon/api/stats.ts
 import { createHash as createHash2 } from "crypto";
-import fs12 from "fs";
-import path14 from "path";
+import fs14 from "fs";
+import path15 from "path";
 function computeConfigHash(vaultDir) {
   try {
-    const configPath = path14.join(vaultDir, CONFIG_FILENAME);
-    const raw = fs12.readFileSync(configPath, "utf-8");
+    const configPath = path15.join(vaultDir, CONFIG_FILENAME);
+    const raw = fs14.readFileSync(configPath, "utf-8");
     return createHash2("md5").update(raw).digest("hex");
   } catch {
     return "";
@@ -4212,6 +4498,13 @@ var EmbeddingManager = class {
   searchVectors(query, options) {
     return this.vectorStore.search(query, options);
   }
+  /**
+   * Compute pairwise cosine similarity between all vectors in a namespace.
+   * Used by the evolve instruction builder to find semantically overlapping skills.
+   */
+  pairwiseSimilarity(namespace, threshold) {
+    return this.vectorStore.pairwiseSimilarity(namespace, threshold);
+  }
   // -------------------------------------------------------------------------
   // Private helpers
   // -------------------------------------------------------------------------
@@ -4482,6 +4775,48 @@ var SqliteVecVectorStore = class {
     const rows = this.embeddedIdsStmt.all(namespace);
     return rows.map((r) => r.record_id);
   }
+  /**
+   * Compute pairwise cosine similarity between all vectors in a namespace.
+   * Returns pairs above the threshold, sorted by similarity DESC.
+   *
+   * Uses sqlite-vec's KNN search: for each vector, find the top-K nearest
+   * neighbors within the same namespace. O(n * K) where K is small.
+   */
+  pairwiseSimilarity(namespace, threshold = 0.5) {
+    this.validateNamespace(namespace);
+    const ns = namespace;
+    const allRows = this.db.prepare(
+      `SELECT record_id, embedding FROM vec_${ns}`
+    ).all();
+    if (allRows.length < 2) return [];
+    const pairs = [];
+    const seen = /* @__PURE__ */ new Set();
+    const searchStmt = this.searchStmts.get(ns);
+    for (const row of allRows) {
+      const results = searchStmt.all(
+        row.embedding,
+        // Use the raw embedding as the query vector
+        allRows.length
+        // K = all rows to get exhaustive comparison
+      );
+      for (const match of results) {
+        if (match.record_id === row.record_id) continue;
+        const pairKey = [row.record_id, match.record_id].sort().join("|");
+        if (seen.has(pairKey)) continue;
+        seen.add(pairKey);
+        const similarity = cosineDistanceToSimilarity(match.distance);
+        if (similarity >= threshold) {
+          pairs.push({
+            idA: row.record_id,
+            idB: match.record_id,
+            similarity: Math.round(similarity * 1e3) / 1e3
+          });
+        }
+      }
+    }
+    pairs.sort((a, b) => b.similarity - a.similarity);
+    return pairs;
+  }
   // -------------------------------------------------------------------------
   // Lifecycle
   // -------------------------------------------------------------------------
@@ -4619,6 +4954,12 @@ function planMetadata(row) {
     ...row.source_path != null ? { source_path: row.source_path } : {}
   };
 }
+function skillRecordMetadata(row) {
+  return {
+    ...row.status != null ? { status: row.status } : {},
+    ...row.name != null ? { name: row.name } : {}
+  };
+}
 function metadataFor(namespace, row) {
   switch (namespace) {
     case "sessions":
@@ -4629,6 +4970,8 @@ function metadataFor(namespace, row) {
       return planMetadata(row);
     case "artifacts":
       return emptyMetadata();
+    case "skill_records":
+      return skillRecordMetadata(row);
   }
 }
 var SqliteRecordSource = class {
@@ -4643,6 +4986,9 @@ var SqliteRecordSource = class {
     if (namespace === "spores") {
       return this.getUnembeddedActiveSpores(limit);
     }
+    if (namespace === "skill_records") {
+      return this.getUnembeddedActiveSkillRecords(limit);
+    }
     const rows = getUnembedded(namespace, limit);
     const db = getDatabase();
     return rows.map((row) => {
@@ -4689,6 +5035,12 @@ var SqliteRecordSource = class {
         ).all();
         return rows.map((r) => r.id);
       }
+      case "skill_records": {
+        const rows = db.prepare(
+          `SELECT id FROM skill_records WHERE status = ?`
+        ).all(ACTIVE_STATUS2);
+        return rows.map((r) => r.id);
+      }
     }
   }
   /**
@@ -4743,7 +5095,7 @@ var SqliteRecordSource = class {
     assertValidTable(namespace);
     const db = getDatabase();
     const contentFilter = namespace === "sessions" ? " AND summary IS NOT NULL" : "";
-    const statusFilter = namespace === "spores" ? ` AND status = '${ACTIVE_STATUS2}'` : "";
+    const statusFilter = namespace === "spores" || namespace === "skill_records" ? ` AND status = '${ACTIVE_STATUS2}'` : "";
     const row = db.prepare(
       `SELECT COUNT(*) AS cnt FROM ${namespace} WHERE embedded = 0${contentFilter}${statusFilter}`
     ).get();
@@ -4768,20 +5120,36 @@ var SqliteRecordSource = class {
       metadata: sporeMetadata(row)
     }));
   }
+  /** Custom query for skill_records: embedded=0 AND status='active'. */
+  getUnembeddedActiveSkillRecords(limit) {
+    const db = getDatabase();
+    const rows = db.prepare(
+      `SELECT id, description AS text, status, name
+       FROM skill_records
+       WHERE embedded = 0 AND status = ?
+       ORDER BY created_at ASC
+       LIMIT ?`
+    ).all(ACTIVE_STATUS2, limit);
+    return rows.map((row) => ({
+      id: String(row.id),
+      text: row.text,
+      metadata: skillRecordMetadata(row)
+    }));
+  }
 };
 
 // src/daemon/database/manager.ts
-import fs14 from "fs";
+import fs16 from "fs";
 
 // src/db/queries/database.ts
-import fs13 from "fs";
+import fs15 from "fs";
 function pragmaScalar(name) {
   const db = getDatabase();
   return db.pragma(name, { simple: true });
 }
 function safeFileSize(filePath) {
   try {
-    return fs13.statSync(filePath).size;
+    return fs15.statSync(filePath).size;
   } catch (err) {
     if (err.code === "ENOENT") return 0;
     throw err;
@@ -5053,7 +5421,7 @@ var DatabaseMaintenanceManager = class {
   }
   async vacuum() {
     const size_before = this.fileSize();
-    const stats = await fs14.promises.statfs(this.vaultDir);
+    const stats = await fs16.promises.statfs(this.vaultDir);
     const free_bytes = Number(stats.bavail) * Number(stats.bsize);
     const required_bytes = size_before * VACUUM_FREE_SPACE_MULTIPLIER;
     if (free_bytes < required_bytes) {
@@ -5101,7 +5469,7 @@ var DatabaseMaintenanceManager = class {
   }
   fileSize() {
     try {
-      return fs14.statSync(this.dbPath).size;
+      return fs16.statSync(this.dbPath).size;
     } catch {
       return 0;
     }
@@ -5143,6 +5511,13 @@ function registerBuiltinDomains() {
       { id: "mycelium.spore.created", label: "New spore extracted", defaultMode: "summary", defaultLevel: "info" }
     ]
   });
+  register({
+    domain: "daemon",
+    label: "Daemon",
+    types: [
+      { id: "daemon.version_sync", label: "Version sync restart", defaultMode: "banner", defaultLevel: "info" }
+    ]
+  });
 }
 
 // src/daemon/api/notifications.ts
@@ -5487,6 +5862,9 @@ function testAnthropic() {
   return { ok: true };
 }
 
+// src/daemon/task-scheduling.ts
+import { resolve } from "path";
+
 // src/daemon/task-scheduler.ts
 function resolveSchedule(yamlSchedule, configOverride) {
   if (!configOverride?.schedule) return yamlSchedule;
@@ -5544,8 +5922,12 @@ async function registerScheduledTasks(powerManager, deps) {
     logger.info(LOG_KINDS.AGENT_RUN, "Scheduled agent tasks disabled globally (agent.scheduled_tasks_enabled: false)");
     return;
   }
-  const { loadAllTasks: loadAllTasks2 } = await import("./registry-TFQ22Z7N.js");
+  const { loadAllTasks: loadAllTasks2 } = await import("./registry-O2NZLO3V.js");
   const allTasks = Array.from(loadAllTasks2(definitionsDir, vaultDir).values());
+  const taskAgentMap = /* @__PURE__ */ new Map();
+  for (const task of allTasks) {
+    taskAgentMap.set(task.name, task.agent);
+  }
   const initialLastRuns = {};
   try {
     const recentRuns = getDatabase().prepare(
@@ -5566,9 +5948,10 @@ async function registerScheduledTasks(powerManager, deps) {
       else runningTasks.delete(name);
     },
     runTask: async (taskName) => {
-      const { runAgent } = await import("./executor-NXKJU5KW.js");
+      const { runAgent } = await import("./executor-UYIZC3L5.js");
       const taskConfig = config.agent.tasks?.[taskName];
-      const built = buildTaskInstruction(taskName, taskConfig?.params);
+      const projectRoot = resolve(vaultDir, "..");
+      const built = buildTaskInstruction(taskName, taskConfig?.params, taskAgentMap.get(taskName), projectRoot, embeddingManager);
       if (isInstructionRequiredTask(taskName) && !built) {
         logger.info(
           LOG_KINDS.AGENT_RUN,
@@ -5735,7 +6118,7 @@ function createMcpProxyHandlers(deps) {
       name: USER_AGENT_NAME,
       created_at: now
     });
-    const { insertResolutionEvent } = await import("./resolution-events-HGKIJOTA.js");
+    const { insertResolutionEvent } = await import("./resolution-events-XWYLLDRK.js");
     const resolutionId = `res-${randomBytes(RESOLUTION_ID_RANDOM_BYTES).toString("hex")}`;
     insertResolutionEvent({
       id: resolutionId,
@@ -5817,6 +6200,7 @@ function createMcpProxyHandlers(deps) {
 }
 
 // src/daemon/api/agent-runs.ts
+import { resolve as resolve2 } from "path";
 var AGENT_RUNS_DEFAULT_LIMIT = 50;
 var AgentRunBody = external_exports.object({
   task: external_exports.string().optional(),
@@ -5843,9 +6227,11 @@ function createAgentRunHandlers(deps) {
       let built;
       try {
         const taskParams = mycoConfig.agent.tasks?.[task]?.params;
-        built = buildTaskInstruction(task, taskParams);
+        const projectRoot = resolve2(vaultDir, "..");
+        built = buildTaskInstruction(task, taskParams, agentId, projectRoot, embeddingManager);
       } catch {
-        built = buildTaskInstruction(task);
+        const projectRoot = resolve2(vaultDir, "..");
+        built = buildTaskInstruction(task, void 0, agentId, projectRoot, embeddingManager);
       }
       instruction = built?.instruction;
       runContext = built?.context;
@@ -5860,7 +6246,7 @@ function createAgentRunHandlers(deps) {
         };
       }
     }
-    const { runAgent } = await import("./executor-NXKJU5KW.js");
+    const { runAgent } = await import("./executor-UYIZC3L5.js");
     const resultPromise = runAgent(vaultDir, {
       task,
       instruction,
@@ -5929,8 +6315,8 @@ function createAgentRunHandlers(deps) {
 }
 
 // src/daemon/api/attachments.ts
-import fs15 from "fs";
-import path15 from "path";
+import fs17 from "fs";
+import path16 from "path";
 var ATTACHMENT_MEDIA_TYPES = {
   png: "image/png",
   jpg: "image/jpeg",
@@ -5950,14 +6336,14 @@ function createAttachmentHandler(deps) {
       const contentType2 = att.media_type ?? "application/octet-stream";
       return { status: 200, headers: { "Content-Type": contentType2 }, body: att.data };
     }
-    const filePath = path15.join(vaultDir, "attachments", filename);
+    const filePath = path16.join(vaultDir, "attachments", filename);
     let diskData;
     try {
-      diskData = fs15.readFileSync(filePath);
+      diskData = fs17.readFileSync(filePath);
     } catch {
       return { status: 404, body: { error: "not_found" } };
     }
-    const ext = path15.extname(filename).slice(1).toLowerCase();
+    const ext = path16.extname(filename).slice(1).toLowerCase();
     const contentType = ATTACHMENT_MEDIA_TYPES[ext] ?? "application/octet-stream";
     return { status: 200, headers: { "Content-Type": contentType }, body: diskData };
   }
@@ -5965,19 +6351,19 @@ function createAttachmentHandler(deps) {
 }
 
 // src/daemon/log-reconcile.ts
-import fs16 from "fs";
-import path16 from "path";
+import fs18 from "fs";
+import path17 from "path";
 function reconcileLogBuffer(logDir, sinceTimestamp) {
   let replayed = 0;
   const files = [];
   for (let i = 3; i >= 1; i--) {
-    const rotated = path16.join(logDir, `daemon.${i}.log`);
-    if (fs16.existsSync(rotated)) files.push(rotated);
+    const rotated = path17.join(logDir, `daemon.${i}.log`);
+    if (fs18.existsSync(rotated)) files.push(rotated);
   }
-  const current = path16.join(logDir, "daemon.log");
-  if (fs16.existsSync(current)) files.push(current);
+  const current = path17.join(logDir, "daemon.log");
+  if (fs18.existsSync(current)) files.push(current);
   for (const file of files) {
-    const content = fs16.readFileSync(file, "utf-8");
+    const content = fs18.readFileSync(file, "utf-8");
     for (const line of content.split("\n")) {
       if (!line.trim()) continue;
       try {
@@ -6256,8 +6642,8 @@ function registerPowerJobs(powerManager, deps) {
 }
 
 // src/daemon/reconciliation.ts
-import fs17 from "fs";
-import path17 from "path";
+import fs19 from "fs";
+import path18 from "path";
 
 // src/daemon/event-handlers.ts
 var TOOL_INPUT_STORE_LIMIT = 4e3;
@@ -6426,10 +6812,10 @@ function createReconciler({ bufferDir, logger }) {
   function reconcileSession(sessionId) {
     if (reconciledSessions.has(sessionId)) return;
     reconciledSessions.add(sessionId);
-    const bufferPath = path17.join(bufferDir, `${sessionId}.jsonl`);
+    const bufferPath = path18.join(bufferDir, `${sessionId}.jsonl`);
     let content;
     try {
-      content = fs17.readFileSync(bufferPath, "utf-8").trim();
+      content = fs19.readFileSync(bufferPath, "utf-8").trim();
     } catch {
       return;
     }
@@ -6498,7 +6884,7 @@ function createReconciler({ bufferDir, logger }) {
 }
 
 // src/daemon/stop-processing.ts
-import fs18 from "fs";
+import fs20 from "fs";
 
 // src/daemon/capture-images.ts
 var SESSION_SHORT_LEN = 6;
@@ -6535,6 +6921,78 @@ function captureBatchImages(input) {
   }
 }
 
+// src/daemon/plan-capture.ts
+import { createHash as createHash4 } from "crypto";
+import os7 from "os";
+import path19 from "path";
+function extractTaggedPlans(text, tags) {
+  const results = [];
+  for (const tag of tags) {
+    const regex = new RegExp(`<${tag}>\\n?([\\s\\S]*?)\\n?</${tag}>`, "g");
+    let match;
+    while ((match = regex.exec(text)) !== null) {
+      const content = match[1].trim();
+      if (content) results.push({ tag, content });
+    }
+  }
+  return results;
+}
+var TRANSCRIPT_SOURCE_PREFIX = "transcript:";
+var FILE_WRITE_TOOLS = /* @__PURE__ */ new Set([
+  "Write",
+  "Edit",
+  "Create",
+  "write",
+  "edit",
+  "patch",
+  "create"
+]);
+var HEADING_REGEX = /^#\s+(.+)$/m;
+var PLAN_ID_HASH_LENGTH = 16;
+function isInPlanDirectory(filePath, watchDirs, projectRoot) {
+  const abs = path19.isAbsolute(filePath) ? filePath : path19.resolve(projectRoot, filePath);
+  return watchDirs.some((dir) => {
+    const expanded = dir.startsWith("~/") ? path19.join(os7.homedir(), dir.slice(2)) : dir;
+    const absDir = path19.isAbsolute(expanded) ? expanded : path19.resolve(projectRoot, expanded);
+    const prefix = absDir.endsWith(path19.sep) ? absDir : absDir + path19.sep;
+    return abs === absDir || abs.startsWith(prefix);
+  });
+}
+function isPlanWriteEvent(toolName, toolInput, config) {
+  if (!FILE_WRITE_TOOLS.has(toolName)) return null;
+  const filePath = toolInput?.file_path ?? toolInput?.path ?? toolInput?.filePath;
+  if (typeof filePath !== "string") return null;
+  if (!isInPlanDirectory(filePath, config.watchDirs, config.projectRoot)) return null;
+  if (config.extensions?.length) {
+    const ext = path19.extname(filePath).toLowerCase();
+    if (!config.extensions.includes(ext)) return null;
+  }
+  return filePath;
+}
+function parsePlanTitle(content, filename) {
+  const match = HEADING_REGEX.exec(content);
+  if (match) return match[1].trim();
+  return filename ?? null;
+}
+function capturePlan(input) {
+  const now = Math.floor(Date.now() / 1e3);
+  const contentHash = createHash4(CONTENT_HASH_ALGORITHM).update(input.content).digest("hex");
+  const id = createHash4("md5").update(input.sourcePath).digest("hex").slice(0, PLAN_ID_HASH_LENGTH);
+  const title = parsePlanTitle(input.content, path19.basename(input.sourcePath));
+  return upsertPlan({
+    id,
+    title,
+    content: input.content,
+    source_path: input.sourcePath,
+    session_id: input.sessionId,
+    prompt_batch_id: input.promptBatchId ?? null,
+    content_hash: contentHash,
+    status: "active",
+    created_at: now,
+    updated_at: now
+  });
+}
+
 // src/daemon/skill-usage.ts
 import crypto from "crypto";
 var SKILL_USAGE_DETECTION_ENABLED = false;
@@ -6604,14 +7062,14 @@ function createStopProcessor(deps) {
   const StopBody = external_exports.object({
     session_id: external_exports.string(),
     user: external_exports.string().optional(),
-    transcript_path: external_exports.string().optional(),
-    last_assistant_message: external_exports.string().optional()
+    transcript_path: external_exports.string().nullish(),
+    last_assistant_message: external_exports.string().nullish()
   });
   async function triggerTitleSummary(sessionId) {
     if (config.agent.summary_batch_interval <= 0) return;
     if (config.agent.event_tasks_enabled === false) return;
     try {
-      const { runAgent } = await import("./executor-NXKJU5KW.js");
+      const { runAgent } = await import("./executor-UYIZC3L5.js");
       runAgent(vaultDir, {
         task: "title-summary",
         instruction: `Process session ${sessionId} only`,
@@ -6701,7 +7159,7 @@ function createStopProcessor(deps) {
         let transcriptText = null;
         if (hookTranscriptPath) {
           try {
-            transcriptText = fs18.readFileSync(hookTranscriptPath, "utf-8");
+            transcriptText = fs20.readFileSync(hookTranscriptPath, "utf-8");
           } catch {
           }
         }
@@ -6727,6 +7185,33 @@ function createStopProcessor(deps) {
         logger.warn(LOG_KINDS.PROCESSOR_BATCH, "Failed to populate batch responses", { error: String(err) });
       }
     }
+    if (deps.planTags.length > 0) {
+      for (const turn of allTurns) {
+        if (!turn.aiResponse) continue;
+        const taggedPlans = extractTaggedPlans(turn.aiResponse, deps.planTags);
+        for (const { tag, content } of taggedPlans) {
+          try {
+            capturePlan({
+              sourcePath: `${TRANSCRIPT_SOURCE_PREFIX}${tag}`,
+              content,
+              sessionId,
+              promptBatchId: latestBatch?.id ?? null
+            });
+            logger.info(LOG_KINDS.CAPTURE_PLAN, "Plan captured from transcript tag", {
+              session_id: sessionId,
+              tag,
+              content_length: content.length
+            });
+          } catch (err) {
+            logger.warn(LOG_KINDS.CAPTURE_PLAN, "Failed to capture plan from transcript tag", {
+              session_id: sessionId,
+              tag,
+              error: err.message
+            });
+          }
+        }
+      }
+    }
     if (!hasTitle) {
       triggerTitleSummary(sessionId);
     }
@@ -6766,11 +7251,18 @@ function createStopProcessor(deps) {
   }
   const handleStopRoute = async (req) => {
     const { session_id: sessionId, user, transcript_path: hookTranscriptPath, last_assistant_message: lastAssistantMessage } = StopBody.parse(req.body);
-    if (!registry.getSession(sessionId)) {
+    const existingSessionMeta = registry.getSession(sessionId);
+    if (!hookTranscriptPath && !existingSessionMeta) {
+      logger.info(LOG_KINDS.HOOKS_STOP, "Stop ignored \u2014 ephemeral sub-invocation", {
+        session_id: sessionId
+      });
+      return { body: { ok: true, ignored: "ephemeral-sub-invocation" } };
+    }
+    if (!existingSessionMeta) {
       registry.register(sessionId, { started_at: (/* @__PURE__ */ new Date()).toISOString() });
       logger.debug(LOG_KINDS.LIFECYCLE_AUTO_REGISTER, "Auto-registered session from stop event", { session_id: sessionId });
     }
-    const sessionMeta = registry.getSession(sessionId);
+    const sessionMeta = existingSessionMeta ?? registry.getSession(sessionId);
     logger.info(LOG_KINDS.HOOKS_STOP, "Stop received", {
       session_id: sessionId,
       has_transcript_path: !!hookTranscriptPath,
@@ -6781,7 +7273,9 @@ function createStopProcessor(deps) {
       transcript_path: hookTranscriptPath ?? null,
       last_message_preview: lastAssistantMessage?.slice(0, LOG_MESSAGE_PREVIEW_CHARS) ?? null
     });
-    const run = () => processStopEvent(sessionId, user, sessionMeta, hookTranscriptPath, lastAssistantMessage).catch((err) => {
+    const normalizedTranscriptPath = hookTranscriptPath ?? void 0;
+    const normalizedAssistantMessage = lastAssistantMessage ?? void 0;
+    const run = () => processStopEvent(sessionId, user, sessionMeta, normalizedTranscriptPath, normalizedAssistantMessage).catch((err) => {
       logger.error(LOG_KINDS.PROCESSOR_SESSION, "Stop processing failed", { session_id: sessionId, error: err.message });
     });
     const prev = activeStopProcessing ?? Promise.resolve();
@@ -6801,69 +7295,8 @@ function createStopProcessor(deps) {
 }
 
 // src/daemon/event-dispatch.ts
-import fs19 from "fs";
-import path19 from "path";
-
-// src/daemon/plan-capture.ts
-import { createHash as createHash4 } from "crypto";
-import os7 from "os";
-import path18 from "path";
-var FILE_WRITE_TOOLS = /* @__PURE__ */ new Set([
-  "Write",
-  "Edit",
-  "Create",
-  "write",
-  "edit",
-  "patch",
-  "create"
-]);
-var HEADING_REGEX = /^#\s+(.+)$/m;
-var PLAN_ID_HASH_LENGTH = 16;
-function isInPlanDirectory(filePath, watchDirs, projectRoot) {
-  const abs = path18.isAbsolute(filePath) ? filePath : path18.resolve(projectRoot, filePath);
-  return watchDirs.some((dir) => {
-    const expanded = dir.startsWith("~/") ? path18.join(os7.homedir(), dir.slice(2)) : dir;
-    const absDir = path18.isAbsolute(expanded) ? expanded : path18.resolve(projectRoot, expanded);
-    const prefix = absDir.endsWith(path18.sep) ? absDir : absDir + path18.sep;
-    return abs === absDir || abs.startsWith(prefix);
-  });
-}
-function isPlanWriteEvent(toolName, toolInput, config) {
-  if (!FILE_WRITE_TOOLS.has(toolName)) return null;
-  const filePath = toolInput?.file_path ?? toolInput?.path ?? toolInput?.filePath;
-  if (typeof filePath !== "string") return null;
-  if (!isInPlanDirectory(filePath, config.watchDirs, config.projectRoot)) return null;
-  if (config.extensions?.length) {
-    const ext = path18.extname(filePath).toLowerCase();
-    if (!config.extensions.includes(ext)) return null;
-  }
-  return filePath;
-}
-function parsePlanTitle(content, filename) {
-  const match = HEADING_REGEX.exec(content);
-  if (match) return match[1].trim();
-  return filename ?? null;
-}
-function capturePlan(input) {
-  const now = Math.floor(Date.now() / 1e3);
-  const contentHash = createHash4(CONTENT_HASH_ALGORITHM).update(input.content).digest("hex");
-  const id = createHash4("md5").update(input.sourcePath).digest("hex").slice(0, PLAN_ID_HASH_LENGTH);
-  const title = parsePlanTitle(input.content, path18.basename(input.sourcePath));
-  return upsertPlan({
-    id,
-    title,
-    content: input.content,
-    source_path: input.sourcePath,
-    session_id: input.sessionId,
-    prompt_batch_id: input.promptBatchId ?? null,
-    content_hash: contentHash,
-    status: "active",
-    created_at: now,
-    updated_at: now
-  });
-}
-
-// src/daemon/event-dispatch.ts
+import fs21 from "fs";
+import path20 from "path";
 var EventBody = external_exports.object({ type: external_exports.string(), session_id: external_exports.string() }).passthrough();
 function createEventDispatcher(deps) {
   const {
@@ -6902,7 +7335,7 @@ function createEventDispatcher(deps) {
       reconcileSession(event.session_id);
     }
     if (!sessionBuffers.has(event.session_id)) {
-      const bufferDir = path19.join(vaultDir, "buffer");
+      const bufferDir = path20.join(vaultDir, "buffer");
       sessionBuffers.set(event.session_id, new EventBuffer(bufferDir, event.session_id));
     }
     sessionBuffers.get(event.session_id).append(event);
@@ -6956,10 +7389,10 @@ function createEventDispatcher(deps) {
       );
       if (planFilePath) {
         const captureSessionId = event.session_id;
-        fs19.promises.readFile(planFilePath, "utf-8").then((planContent) => {
+        fs21.promises.readFile(planFilePath, "utf-8").then((planContent) => {
           const latestBatch = getLatestBatch(captureSessionId);
           capturePlan({
-            sourcePath: path19.relative(projectRoot, planFilePath),
+            sourcePath: path20.relative(projectRoot, planFilePath),
             content: planContent,
             sessionId: captureSessionId,
             promptBatchId: latestBatch?.id ?? null
@@ -7101,14 +7534,14 @@ function createEventDispatcher(deps) {
 }
 
 // src/daemon/main.ts
-import fs20 from "fs";
+import fs22 from "fs";
 import os8 from "os";
-import path20 from "path";
+import path21 from "path";
 function killStaleDaemon(vaultDir, logger) {
-  const daemonJsonPath = path20.join(vaultDir, "daemon.json");
+  const daemonJsonPath = path21.join(vaultDir, "daemon.json");
   try {
-    if (!fs20.existsSync(daemonJsonPath)) return;
-    const info = JSON.parse(fs20.readFileSync(daemonJsonPath, "utf-8"));
+    if (!fs22.existsSync(daemonJsonPath)) return;
+    const info = JSON.parse(fs22.readFileSync(daemonJsonPath, "utf-8"));
     if (!info.pid) return;
     if (info.pid === process.pid) return;
     try {
@@ -7117,7 +7550,7 @@ function killStaleDaemon(vaultDir, logger) {
       logger.info(LOG_KINDS.DAEMON_START, "Killed stale daemon", { pid: info.pid });
     } catch {
     }
-    fs20.unlinkSync(daemonJsonPath);
+    fs22.unlinkSync(daemonJsonPath);
   } catch {
   }
 }
@@ -7127,18 +7560,19 @@ async function main() {
     process.stderr.write("Usage: mycod --vault <path>\n");
     process.exit(1);
   }
-  const vaultDir = path20.resolve(vaultArg);
+  const vaultDir = path21.resolve(vaultArg);
   loadSecrets(vaultDir);
   const config = loadConfig(vaultDir);
   const manifests = loadManifests();
   const symbiontPlanDirs = manifests.flatMap((m) => m.capture?.planDirs ?? []);
+  const symbiontPlanTags = [...new Set(manifests.flatMap((m) => m.capture?.planTags ?? []))];
   const projectRoot = process.cwd();
   let planWatchConfig = {
     watchDirs: [.../* @__PURE__ */ new Set([...symbiontPlanDirs, ...config.capture.plan_dirs ?? []])],
     projectRoot,
     extensions: config.capture.artifact_extensions
   };
-  const logger = new DaemonLogger(path20.join(vaultDir, "logs"), {
+  const logger = new DaemonLogger(path21.join(vaultDir, "logs"), {
     level: config.daemon.log_level
   });
   if (config.daemon.log_level === "debug") {
@@ -7150,12 +7584,68 @@ async function main() {
     embedding_provider: config.embedding.provider
   });
   logger.info(LOG_KINDS.CAPTURE_PLAN, "Plan watch directories", { dirs: planWatchConfig.watchDirs });
+  if (symbiontPlanTags.length > 0) {
+    logger.info(LOG_KINDS.CAPTURE_PLAN, "Plan transcript tags", { tags: symbiontPlanTags });
+  }
   const machineId = getMachineId(vaultDir);
   logger.info(LOG_KINDS.DAEMON_START, "Machine ID resolved", { machine_id: machineId });
+  let globalPrefix = null;
+  try {
+    globalPrefix = resolveGlobalPrefix();
+    logger.debug(LOG_KINDS.DAEMON_START, "npm global prefix resolved", { prefix: globalPrefix });
+  } catch (err) {
+    logger.warn(LOG_KINDS.DAEMON_START, "Failed to resolve npm global prefix", {
+      error: err.message
+    });
+  }
+  const devCliEntry = detectDevBuild(
+    globalPrefix,
+    process.argv[1],
+    fs22.realpathSync
+  );
+  if (devCliEntry) {
+    setDevBuildCliEntry(devCliEntry);
+    globalPrefix = null;
+    logger.info(LOG_KINDS.DAEMON_START, "Dev build detected; update checks exempted", {
+      cli_entry: devCliEntry
+    });
+  }
   const db = initDatabase(vaultDbPath(vaultDir));
   createSchema(db, machineId);
   registerBuiltinDomains();
   logger.info(LOG_KINDS.DAEMON_START, "SQLite initialized", { vault: vaultDir });
+  {
+    const reasonPath = path21.join(vaultDir, RESTART_REASON_FILENAME);
+    try {
+      if (fs22.existsSync(reasonPath)) {
+        const raw = JSON.parse(fs22.readFileSync(reasonPath, "utf-8"));
+        fs22.unlinkSync(reasonPath);
+        if (raw.reason === "version_sync" && raw.to_version) {
+          const message = raw.local_update_ran ? "Restarted and updated local project hooks." : "Restarted to pick up the latest version.";
+          notify(vaultDir, {
+            domain: "daemon",
+            type: "daemon.version_sync",
+            title: `Updated to v${raw.to_version}`,
+            message,
+            metadata: {
+              from_version: raw.from_version ?? "unknown",
+              to_version: raw.to_version,
+              local_update_ran: raw.local_update_ran ?? false
+            }
+          });
+          logger.info(LOG_KINDS.DAEMON_START, "Version sync restart detected", {
+            from: raw.from_version,
+            to: raw.to_version,
+            local_update: raw.local_update_ran
+          });
+        }
+      }
+    } catch (err) {
+      logger.warn(LOG_KINDS.DAEMON_START, "Failed to read restart-reason file", {
+        error: err.message
+      });
+    }
+  }
   initTeamContext(config.team.enabled, machineId);
   logger.setPersistFn((entry) => {
     const { timestamp, level, kind, component, message, ...rest } = entry;
@@ -7171,13 +7661,13 @@ async function main() {
   });
   const lastLogTimestamp = getMaxTimestamp();
   if (lastLogTimestamp) {
-    const logDir = path20.join(vaultDir, "logs");
+    const logDir = path21.join(vaultDir, "logs");
     const replayedCount = reconcileLogBuffer(logDir, lastLogTimestamp);
     if (replayedCount > 0) {
       logger.info(LOG_KINDS.DAEMON_RECONCILE, `Replayed ${replayedCount} log entries from buffer`, { replayed: replayedCount });
     }
   }
-  const vectorsDbPath = path20.join(vaultDir, "vectors.db");
+  const vectorsDbPath = path21.join(vaultDir, "vectors.db");
   const vectorStore = new SqliteVecVectorStore(vectorsDbPath);
   const llmProvider = createEmbeddingProvider(config.embedding);
   const embeddingProvider = new EmbeddingProviderAdapter(llmProvider, config.embedding);
@@ -7187,7 +7677,7 @@ async function main() {
   const databaseManager = new DatabaseMaintenanceManager(vaultDbPath(vaultDir), vaultDir, logger);
   let definitionsDir;
   try {
-    const { registerBuiltInAgentsAndTasks, resolveDefinitionsDir: resolveDefinitionsDir2 } = await import("./loader-NEX3UF6U.js");
+    const { registerBuiltInAgentsAndTasks, resolveDefinitionsDir: resolveDefinitionsDir2 } = await import("./loader-SKKUMT5C.js");
     definitionsDir = resolveDefinitionsDir2();
     await registerBuiltInAgentsAndTasks(definitionsDir, vaultDir);
     logger.info(LOG_KINDS.AGENT_TASK, "Built-in agents and tasks registered");
@@ -7213,10 +7703,10 @@ async function main() {
   }
   let uiDir = null;
   {
-    const root = findPackageRoot(path20.dirname(new URL(import.meta.url).pathname));
+    const root = findPackageRoot(path21.dirname(new URL(import.meta.url).pathname));
     if (root) {
-      const candidate = path20.join(root, "dist", "ui");
-      if (fs20.existsSync(candidate)) uiDir = candidate;
+      const candidate = path21.join(root, "dist", "ui");
+      if (fs22.existsSync(candidate)) uiDir = candidate;
     }
   }
   if (uiDir) {
@@ -7249,7 +7739,7 @@ async function main() {
       (p) => createPerProjectAdapter(p, claudeCodeAdapter.parseTurns)
     )
   });
-  const bufferDir = path20.join(vaultDir, "buffer");
+  const bufferDir = path21.join(vaultDir, "buffer");
   const sessionBuffers = /* @__PURE__ */ new Map();
   const reconciler = createReconciler({ bufferDir, logger });
   reconciler.runStartupReconciliation();
@@ -7260,7 +7750,8 @@ async function main() {
     embeddingManager,
     logger,
     config,
-    vaultDir
+    vaultDir,
+    planTags: symbiontPlanTags
   });
   const sessionLifecycle = createSessionLifecycleHandlers({
     registry,
@@ -7335,11 +7826,12 @@ async function main() {
   server.registerRoute("POST", "/api/log", createLogIngestionHandler(logger));
   server.registerRoute("GET", "/api/models", async (req) => handleGetModels(req));
   server.registerRoute("POST", "/api/restart", async (req) => handleRestart({ vaultDir, progressTracker }, req.body));
-  const updateProjectRoot = path20.dirname(vaultDir);
+  const updateProjectRoot = path21.dirname(vaultDir);
   const updateHandlers = createUpdateHandlers({
     vaultDir,
     projectRoot: updateProjectRoot,
     currentVersion: server.version,
+    globalPrefix,
     scheduleShutdown: () => {
       setTimeout(() => {
         process.kill(process.pid, "SIGTERM");
@@ -7399,7 +7891,7 @@ async function main() {
   server.registerRoute("GET", "/api/mcp/sessions", mcpProxy.handleSessions);
   server.registerRoute("GET", "/api/mcp/team", mcpProxy.handleTeam);
   const rawBackupDir = config.backup.dir;
-  const backupDir = rawBackupDir ? path20.resolve(rawBackupDir.startsWith("~/") ? path20.join(os8.homedir(), rawBackupDir.slice(2)) : rawBackupDir) : path20.resolve(vaultDir, "backups");
+  const backupDir = rawBackupDir ? path21.resolve(rawBackupDir.startsWith("~/") ? path21.join(os8.homedir(), rawBackupDir.slice(2)) : rawBackupDir) : path21.resolve(vaultDir, "backups");
   const backupHandlers = createBackupHandlers({ db, backupDir, machineId });
   server.registerRoute("POST", "/api/backup", backupHandlers.handleCreateBackup);
   server.registerRoute("GET", "/api/backups", backupHandlers.handleListBackups);
@@ -7412,6 +7904,7 @@ async function main() {
   const teamHandlers = createTeamHandlers({
     vaultDir,
     machineId,
+    logger,
     getTeamClient: teamSync.getTeamClient,
     setTeamClient: teamSync.setTeamClient
   });
@@ -7421,6 +7914,7 @@ async function main() {
   server.registerRoute("POST", "/api/team/backfill", teamHandlers.handleBackfill);
   server.registerRoute("POST", "/api/team/retry-failed", teamHandlers.handleRetryFailed);
   server.registerRoute("POST", "/api/team/upgrade-worker", teamHandlers.handleUpgradeWorker);
+  server.registerRoute("POST", "/api/team/rotate-mcp-token", teamHandlers.handleRotateMcpToken);
   server.registerRoute("GET", "/api/search", createSearchHandler({ embeddingManager, getTeamClient: teamSync.getTeamClient, machineId }));
   server.registerRoute("GET", "/api/activity", handleGetFeed);
   server.registerRoute("GET", "/api/embedding/status", async () => handleGetEmbeddingStatus(vaultDir));
@@ -7493,4 +7987,4 @@ export {
   handleUserPrompt,
   main
 };
-//# sourceMappingURL=main-YFVBIRRK.js.map
+//# sourceMappingURL=main-5THODR77.js.map