@inerrata-corporation/errata 2.0.16-dev.3343 → 2.0.16-dev.3362

package/errata.mjs

@@ -960,7 +960,7 @@ function lemma(token) {
   }
   return token;
 }
-function tokenize(text, resolve7) {
+function tokenize(text, resolve8) {
   const matches = text.normalize("NFC").toLowerCase().match(TOKEN_RE) ?? [];
   const out2 = /* @__PURE__ */ new Set();
   for (const raw2 of matches) {
@@ -970,7 +970,7 @@ function tokenize(text, resolve7) {
       out2.add(token);
       continue;
     }
-    const canonical = resolve7(token);
+    const canonical = resolve8(token);
     out2.add(canonical ?? lemma(token));
   }
   return [...out2].sort();
@@ -16455,8 +16455,8 @@ function parsePackageLockJson(jsonText) {
   }
   const dependencies = [];
   for (const [path2, meta3] of Object.entries(packages)) {
-    const self = byPath.get(path2);
-    if (!self) continue;
+    const self2 = byPath.get(path2);
+    if (!self2) continue;
     const deps = meta3.dependencies;
     if (!deps || typeof deps !== "object") continue;
     const dependsOn = [];
@@ -16465,7 +16465,7 @@ function parsePackageLockJson(jsonText) {
       if (target) dependsOn.push(npmPurl(depName, target.version));
     }
     if (dependsOn.length > 0)
-      dependencies.push({ ref: npmPurl(self.name, self.version), dependsOn });
+      dependencies.push({ ref: npmPurl(self2.name, self2.version), dependsOn });
   }
   const directRaw = [];
   for (const [path2, meta3] of Object.entries(packages)) {
@@ -16936,9 +16936,9 @@ function pomSelf(text) {
   const group = (/<groupId>([^<]+)<\/groupId>/.exec(own)?.[1] ?? parentGroup)?.trim();
   const artifact = /<artifactId>([^<]+)<\/artifactId>/.exec(own)?.[1]?.trim();
   if (!group) return [];
-  const self = [{ ecosystem: "maven", kind: "namespace", value: group }];
-  if (artifact) self.push({ ecosystem: "maven", kind: "name", value: mavenName(group, artifact) });
-  return self;
+  const self2 = [{ ecosystem: "maven", kind: "namespace", value: group }];
+  if (artifact) self2.push({ ecosystem: "maven", kind: "name", value: mavenName(group, artifact) });
+  return self2;
 }
 function parseManifestSelf(path2, text) {
   const file2 = basename(path2);
@@ -16951,10 +16951,10 @@ function parseManifestSelf(path2, text) {
     }
     const name2 = obj && typeof obj === "object" ? obj["name"] : null;
     if (typeof name2 !== "string" || !name2.trim()) return [];
-    const self = [{ ecosystem: "npm", kind: "name", value: name2.trim() }];
+    const self2 = [{ ecosystem: "npm", kind: "name", value: name2.trim() }];
     const scope = /^(@[^/]+)\//.exec(name2.trim())?.[1];
-    if (scope) self.push({ ecosystem: "npm", kind: "namespace", value: scope });
-    return self;
+    if (scope) self2.push({ ecosystem: "npm", kind: "namespace", value: scope });
+    return self2;
   }
   if (file2 === "pom.xml") return pomSelf(text);
   if (file2 === "build.gradle" || file2 === "build.gradle.kts") {
@@ -17574,7 +17574,7 @@ var init_agents_md = __esm({
 });
 
 // ../../packages/context-writer/src/context-file.ts
-import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, renameSync, unlinkSync, writeFileSync as writeFileSync2 } from "node:fs";
 import { dirname as dirname2, join } from "node:path";
 function contextFilePath(root) {
   return join(root, ".errata", "context.md");
@@ -17584,7 +17584,13 @@ function writeContextFile(root, body2) {
   mkdirSync(dirname2(path2), { recursive: true });
   const text = `${body2.trim()}
 `;
-  writeFileSync2(path2, text, "utf8");
+  const temp = `${path2}.${process.pid}.tmp`;
+  try {
+    writeFileSync2(temp, text, { encoding: "utf8", mode: 384 });
+    renameSync(temp, path2);
+  } finally {
+    if (existsSync2(temp)) unlinkSync(temp);
+  }
   return contextHash(text);
 }
 function contextHash(body2) {
@@ -25065,7 +25071,7 @@ function buildSnapshot(opts) {
   const stillOpen = problems.filter((p) => p.attrs["resolvedAt"] == null);
   const allProblems = stillOpen.filter((p) => !isConstraintProblem(p));
   allProblems.sort((a, b) => b.lastUpdatedAt - a.lastUpdatedAt);
-  const recent2 = allProblems.slice(0, 8).map((p) => ({
+  const recent3 = allProblems.slice(0, 8).map((p) => ({
     node: p,
     anchors: opts.store.outEdges(p.id, ["MANIFESTED_IN", "EVIDENCED_BY"])
   }));
@@ -25138,10 +25144,10 @@ function buildSnapshot(opts) {
     packages: opts.profile.stack.map((name2) => ({ name: name2, node: matchNode(pkgNodes, pkgBase(name2)) })),
     tools: toolNodes.map((node2) => ({ name: String(node2.attrs["name"] ?? node2.description), node: node2 }))
   };
-  const causalNudge = recent2.length >= 2 && recent2.every(
+  const causalNudge = recent3.length >= 2 && recent3.every(
     (r) => opts.store.outEdges(r.node.id, ["CAUSED_BY"]).length === 0 && opts.store.inEdges(r.node.id, ["CAUSED_BY"]).length === 0
   );
-  const abstractUndomained = recent2.filter((r) => {
+  const abstractUndomained = recent3.filter((r) => {
     const grounded = opts.store.outEdges(r.node.id, ["ANCHORED_AT", "OCCURS_IN", "DEPENDS_ON"]).length > 0;
     const hasDomain = opts.store.outEdges(r.node.id, ["PERTAIN_TO"]).length > 0;
     return !grounded && !hasDomain;
@@ -25150,7 +25156,7 @@ function buildSnapshot(opts) {
   return {
     profile: opts.profile,
     profileContext,
-    recentProblems: recent2,
+    recentProblems: recent3,
     recentResolved,
     recentConstraints,
     regressions,
@@ -32169,7 +32175,11 @@ function contextCard(store, snapshot) {
   return deliveredCard(store, intent ? `${count} for \u201C${clipIntent(intent)}\u201D` : `${count} in context`, delivered);
 }
 function writeContextCard(root, hash2, card) {
-  writeFileSync6(join7(root, ".errata", CONTEXT_CARD_FILE), JSON.stringify({ hash: hash2, card }));
+  writeFileSync6(join7(root, ".errata", CONTEXT_CARD_FILE), JSON.stringify({
+    hash: hash2,
+    card,
+    line: card && recallCardEnabled() ? renderRecallLine(card) : null
+  }));
 }
 function readContextCard(root, hash2) {
   const path2 = join7(root, ".errata", CONTEXT_CARD_FILE);
@@ -32578,17 +32588,172 @@ var init_checkout_root = __esm({
   }
 });
 
+// src/process-identity.ts
+import { execFileSync } from "node:child_process";
+import { readFileSync as readFileSync10 } from "node:fs";
+function readProcessIdentity(pid, fresh = false) {
+  if (!Number.isSafeInteger(pid) || pid <= 0) return null;
+  if (pid === process.pid && self) return self;
+  const cached2 = recent.get(pid);
+  if (!fresh && cached2 && Date.now() - cached2.at < 1e3) return cached2.value;
+  try {
+    const run3 = (bin, args2) => execFileSync(bin, args2, {
+      encoding: "utf8",
+      windowsHide: true,
+      timeout: 3e3,
+      stdio: ["ignore", "pipe", "ignore"],
+      env: { ...process.env, LC_ALL: "C", TZ: "UTC" }
+    }).trim();
+    let value;
+    if (process.platform === "win32") {
+      const ticks = run3("powershell.exe", [
+        "-NoProfile",
+        "-NonInteractive",
+        "-Command",
+        `(Get-Process -Id ${pid} -ErrorAction Stop).StartTime.ToUniversalTime().Ticks`
+      ]);
+      if (!/^\d+$/.test(ticks)) return null;
+      value = { key: `win32:${ticks}`, bornAt: Number((BigInt(ticks) - 621355968000000000n) / 10000n) };
+    } else if (process.platform === "linux") {
+      const stat4 = readFileSync10(`/proc/${pid}/stat`, "utf8");
+      const ticks = stat4.slice(stat4.lastIndexOf(")") + 2).split(" ")[19];
+      const bootId = readFileSync10("/proc/sys/kernel/random/boot_id", "utf8").trim();
+      const boot = /^btime (\d+)$/m.exec(readFileSync10("/proc/stat", "utf8"))?.[1];
+      const hz = Number(run3("getconf", ["CLK_TCK"]));
+      if (!boot || !/^\d+$/.test(ticks) || !Number.isFinite(hz) || hz <= 0) return null;
+      value = { key: `linux:${bootId}:${ticks}`, bornAt: Number(boot) * 1e3 + Number(ticks) * 1e3 / hz };
+    } else if (process.platform === "darwin") {
+      const start2 = run3("ps", ["-p", String(pid), "-o", "lstart="]);
+      value = { key: `darwin:${start2}`, bornAt: Date.parse(`${start2} UTC`) };
+    } else return null;
+    if (!Number.isFinite(value.bornAt) || value.bornAt <= 0) return null;
+    if (pid === process.pid) self = value;
+    if (recent.size >= 64) recent.clear();
+    recent.set(pid, { at: Date.now(), value });
+    return value;
+  } catch {
+    return null;
+  }
+}
+var recent, self;
+var init_process_identity = __esm({
+  "src/process-identity.ts"() {
+    "use strict";
+    recent = /* @__PURE__ */ new Map();
+  }
+});
+
+// src/lock.ts
+import { existsSync as existsSync12, readFileSync as readFileSync11, unlinkSync as unlinkSync2 } from "node:fs";
+function daemonLockPayload(lock) {
+  return JSON.stringify({
+    pid: lock.pid,
+    webUiUrl: lock.webUiUrl,
+    startedAt: lock.processStartedAt,
+    ...lock.pid === process.pid ? { processIdentity: readProcessIdentity(lock.pid)?.key } : {},
+    ...lock.wokeAt !== void 0 ? { wokeAt: lock.wokeAt } : {},
+    ...lock.entry ? { entry: lock.entry } : {},
+    ...lock.version ? { version: lock.version } : {}
+  });
+}
+function isInstalledEntry(entry) {
+  return /\/node_modules\/@inerrata-corporation\/errata\//.test(normEntry(entry) + "/");
+}
+function foreignDaemonNote(lock, selfEntry) {
+  if (!lock.entry || normEntry(lock.entry) === normEntry(selfEntry)) return null;
+  const runningInstalled = isInstalledEntry(lock.entry);
+  const head2 = [
+    `launched from ${runningInstalled ? "the installed package" : "a LOCAL BUILD"}, not this one${lock.version ? ` (it is ${lock.version})` : ""}:`,
+    `  running: ${lock.entry}`,
+    `  this:    ${selfEntry}`
+  ];
+  return runningInstalled ? [...head2, "this CLI is a different bundle from the daemon it is talking to \u2014 its view may not match what the daemon runs."] : [...head2, "`errata update` does not replace it. To move onto the installed package: errata stop, then errata dash."];
+}
+function isProcessAlive(pid) {
+  if (!Number.isSafeInteger(pid) || pid <= 0) return false;
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (err2) {
+    return err2.code === "EPERM";
+  }
+}
+function readDaemonLock(lockPath) {
+  if (!existsSync12(lockPath)) return null;
+  try {
+    return parseDaemonLock(readFileSync11(lockPath, "utf8"));
+  } catch {
+    return null;
+  }
+}
+function parseDaemonLock(raw2) {
+  try {
+    const lock = JSON.parse(raw2);
+    return lock && Number.isSafeInteger(lock.pid) && lock.pid > 0 ? lock : null;
+  } catch {
+    return null;
+  }
+}
+function daemonLockState(lock, fresh = false) {
+  if (!lock || !isProcessAlive(lock.pid)) return "stale";
+  const identity = readProcessIdentity(lock.pid, fresh);
+  if (!identity) return "unknown";
+  if (lock.processIdentity) return lock.processIdentity === identity.key ? "running" : "stale";
+  if (!Number.isFinite(lock.startedAt) || lock.startedAt <= 0) return "unknown";
+  return identity.bornAt <= lock.startedAt ? "running" : "stale";
+}
+function isDaemonAlive(lockPath) {
+  return daemonLockState(readDaemonLock(lockPath)) === "running";
+}
+function daemonLockBlocksStartup(lockPath) {
+  return daemonLockState(readDaemonLock(lockPath), true) !== "stale";
+}
+function stopLockedDaemon(lockPath) {
+  let original;
+  try {
+    original = readFileSync11(lockPath, "utf8");
+  } catch {
+    return "missing";
+  }
+  const lock = parseDaemonLock(original);
+  if (!lock) return "unknown";
+  const state = daemonLockState(lock, true);
+  try {
+    if (readFileSync11(lockPath, "utf8") !== original) return "changed";
+  } catch {
+    return "changed";
+  }
+  if (state === "unknown") return "unknown";
+  if (state === "stale") {
+    unlinkSync2(lockPath);
+    return "stale";
+  }
+  process.kill(lock.pid, "SIGTERM");
+  return "signaled";
+}
+var normEntry;
+var init_lock = __esm({
+  "src/lock.ts"() {
+    "use strict";
+    init_process_identity();
+    normEntry = (p) => {
+      const s = p.replace(/\\/g, "/").replace(/\/+$/, "");
+      return /^[A-Za-z]:\//.test(s) ? s.toLowerCase() : s;
+    };
+  }
+});
+
 // src/registry.ts
-import { existsSync as existsSync12, readFileSync as readFileSync10, writeFileSync as writeFileSync9 } from "node:fs";
+import { existsSync as existsSync13, readFileSync as readFileSync12, writeFileSync as writeFileSync9 } from "node:fs";
 import { join as join11 } from "node:path";
 function registryPath() {
   return process.env["ERRATA_REGISTRY_PATH"] ?? join11(globalDir(), "workspaces.json");
 }
 function read() {
   const p = registryPath();
-  if (!existsSync12(p)) return { version: 1, workspaces: {} };
+  if (!existsSync13(p)) return { version: 1, workspaces: {} };
   try {
-    const parsed = JSON.parse(readFileSync10(p, "utf8"));
+    const parsed = JSON.parse(readFileSync12(p, "utf8"));
     return { version: 1, workspaces: parsed.workspaces ?? {} };
   } catch {
     return { version: 1, workspaces: {} };
@@ -32596,9 +32761,9 @@ function read() {
 }
 function registryCorrupt() {
   const p = registryPath();
-  if (!existsSync12(p)) return false;
+  if (!existsSync13(p)) return false;
   try {
-    JSON.parse(readFileSync10(p, "utf8"));
+    JSON.parse(readFileSync12(p, "utf8"));
     return false;
   } catch {
     return true;
@@ -32651,7 +32816,7 @@ function pruneMissingWorkspaces() {
   const reg = read();
   const removed = [];
   for (const [id, entry] of Object.entries(reg.workspaces)) {
-    if (!existsSync12(entry.path)) {
+    if (!existsSync13(entry.path)) {
       removed.push(entry);
       delete reg.workspaces[id];
     }
@@ -32660,19 +32825,14 @@ function pruneMissingWorkspaces() {
   return removed;
 }
 function workspaceStatus(entry) {
-  const missing = !existsSync12(entry.path);
+  const missing = !existsSync13(entry.path);
   const lockPath = workspacePaths(entry.path).daemonLock;
   let running = false;
   let webUiUrl = null;
-  if (existsSync12(lockPath)) {
-    try {
-      const lock = JSON.parse(readFileSync10(lockPath, "utf8"));
-      if (lock.pid && lock.webUiUrl && pidAlive(lock.pid)) {
-        running = true;
-        webUiUrl = lock.webUiUrl;
-      }
-    } catch {
-    }
+  const lock = readDaemonLock(lockPath);
+  if (lock?.webUiUrl && daemonLockState(lock) === "running") {
+    running = true;
+    webUiUrl = lock.webUiUrl;
   }
   return { ...entry, running, webUiUrl, missing };
 }
@@ -32682,19 +32842,12 @@ function listWorkspaces() {
 function listWorkspaceEntries() {
   return Object.values(read().workspaces).sort((a, b) => b.lastSeenAt - a.lastSeenAt);
 }
-function pidAlive(pid) {
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch (err2) {
-    return err2.code === "EPERM";
-  }
-}
 var init_registry = __esm({
   "src/registry.ts"() {
     "use strict";
     init_paths();
     init_checkout_root();
+    init_lock();
   }
 });
 
@@ -33991,7 +34144,7 @@ var init_dual_augment = __esm({
 
 // ../../packages/indexer/src/parse-cache.ts
 import { createHash as createHash6 } from "node:crypto";
-import { existsSync as existsSync13, mkdirSync as mkdirSync6, readFileSync as readFileSync11, readdirSync as readdirSync2, rmSync as rmSync2, statSync as statSync2, writeFileSync as writeFileSync10 } from "node:fs";
+import { existsSync as existsSync14, mkdirSync as mkdirSync6, readFileSync as readFileSync13, readdirSync as readdirSync2, rmSync as rmSync2, statSync as statSync2, writeFileSync as writeFileSync10 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
 import { join as join12 } from "node:path";
 function parseCacheDir() {
@@ -34006,7 +34159,7 @@ function entryPath(dir, key) {
 function readParseCache(dir, key) {
   const file2 = entryPath(dir, key);
   try {
-    const raw2 = readFileSync11(file2, "utf8");
+    const raw2 = readFileSync13(file2, "utf8");
     const parsed = JSON.parse(raw2);
     if (parsed.v !== PARSE_CACHE_VERSION || !Array.isArray(parsed.symbols)) return null;
     return { symbols: parsed.symbols, reExports: parsed.reExports ?? [] };
@@ -34035,7 +34188,7 @@ function sweepParseCacheOnce(dir, now = Date.now()) {
   sweptThisProcess = true;
   let removed = 0;
   try {
-    if (!existsSync13(dir)) return 0;
+    if (!existsSync14(dir)) return 0;
     for (const bucket of readdirSync2(dir)) {
       const bucketDir = join12(dir, bucket);
       let names;
@@ -34293,11 +34446,11 @@ var init_identity3 = __esm({
 });
 
 // ../../packages/indexer/src/pipeline.ts
-import { appendFileSync, readFileSync as readFileSync12, statSync as statSync3 } from "node:fs";
+import { appendFileSync, readFileSync as readFileSync14, statSync as statSync3 } from "node:fs";
 import { readdir } from "node:fs/promises";
 import { extname, join as join13, relative as relative2, sep } from "node:path";
 import { createHash as createHash7 } from "node:crypto";
-import { execFileSync } from "node:child_process";
+import { execFileSync as execFileSync2 } from "node:child_process";
 function nowTs() {
   return indexNow ?? Date.now();
 }
@@ -34433,7 +34586,7 @@ async function incrementalReindex(store, rootPath, workspaceId2, changedAbsPaths
   for (const rel of [...changedRelPaths]) {
     let h;
     try {
-      h = createHash7("sha256").update(readFileSync12(join13(rootPath, rel))).digest("hex");
+      h = createHash7("sha256").update(readFileSync14(join13(rootPath, rel))).digest("hex");
     } catch {
       continue;
     }
@@ -34488,7 +34641,7 @@ async function incrementalReindex(store, rootPath, workspaceId2, changedAbsPaths
     if (!provider) continue;
     let symbols;
     try {
-      symbols = provider.extractSymbols(readFileSync12(abs, "utf8"), abs);
+      symbols = provider.extractSymbols(readFileSync14(abs, "utf8"), abs);
     } catch {
       continue;
     }
@@ -34808,7 +34961,7 @@ async function runIndexer(store, opts) {
         report.filesSkipped++;
         continue;
       }
-      source = readFileSync12(f.absPath, "utf8");
+      source = readFileSync14(f.absPath, "utf8");
     } catch {
       report.filesSkipped++;
       continue;
@@ -34880,7 +35033,7 @@ async function runIndexer(store, opts) {
     const depth = fileNode.relPath.split("/").length;
     if (depth !== 3) continue;
     try {
-      const pkg = JSON.parse(readFileSync12(fileNode.absPath, "utf8"));
+      const pkg = JSON.parse(readFileSync14(fileNode.absPath, "utf8"));
       if (!pkg.name) continue;
       const pkgDir = fileNode.relPath.replace(/\/package\.json$/, "");
       const candidates = [
@@ -35298,7 +35451,7 @@ async function scan(root, current, ignores, providers, out2) {
 function gitListRelPaths(root, ignores) {
   let stdout;
   try {
-    stdout = execFileSync(
+    stdout = execFileSync2(
       "git",
       ["-C", root, "ls-files", "--cached", "--others", "--exclude-standard", "-z"],
       {
@@ -35356,7 +35509,7 @@ function upsertFile(store, id, f, workspaceId2, skip) {
   if (existing && fileUnchanged(existing.attrs, f, skip)) return;
   let contentHash;
   try {
-    contentHash = createHash7("sha256").update(readFileSync12(f.absPath)).digest("hex");
+    contentHash = createHash7("sha256").update(readFileSync14(f.absPath)).digest("hex");
   } catch {
   }
   const carried = { ...existing?.attrs ?? {} };
@@ -35973,13 +36126,13 @@ async function Module2(moduleArg = {}) {
       }
       readAsync = /* @__PURE__ */ __name(async (url2) => {
         if (isFileURI(url2)) {
-          return new Promise((resolve7, reject) => {
+          return new Promise((resolve8, reject) => {
             var xhr = new XMLHttpRequest();
             xhr.open("GET", url2, true);
             xhr.responseType = "arraybuffer";
             xhr.onload = () => {
               if (xhr.status == 200 || xhr.status == 0 && xhr.response) {
-                resolve7(xhr.response);
+                resolve8(xhr.response);
                 return;
               }
               reject(xhr.status);
@@ -36175,9 +36328,9 @@ async function Module2(moduleArg = {}) {
     __name(receiveInstantiationResult, "receiveInstantiationResult");
     var info2 = getWasmImports();
     if (Module["instantiateWasm"]) {
-      return new Promise((resolve7, reject) => {
+      return new Promise((resolve8, reject) => {
         Module["instantiateWasm"](info2, (mod, inst) => {
-          resolve7(receiveInstance(mod, inst));
+          resolve8(receiveInstance(mod, inst));
         });
       });
     }
@@ -37508,8 +37661,8 @@ async function Module2(moduleArg = {}) {
   if (runtimeInitialized) {
     moduleRtn = Module;
   } else {
-    moduleRtn = new Promise((resolve7, reject) => {
-      readyPromiseResolve = resolve7;
+    moduleRtn = new Promise((resolve8, reject) => {
+      readyPromiseResolve = resolve8;
       readyPromiseReject = reject;
     });
   }
@@ -39740,7 +39893,7 @@ ${JSON.stringify(symbolNames, null, 2)}`);
 // ../../packages/indexer/src/languages/tree-sitter-loader.ts
 import { fileURLToPath } from "node:url";
 import { dirname as dirname7, join as join14 } from "node:path";
-import { existsSync as existsSync14, readdirSync as readdirSync3 } from "node:fs";
+import { existsSync as existsSync15, readdirSync as readdirSync3 } from "node:fs";
 import { createRequire as createRequire2 } from "node:module";
 function entryDir() {
   try {
@@ -39755,7 +39908,7 @@ function entryDir() {
 function findWasmDir() {
   const here = entryDir();
   const seaWasm = join14(here, "resources", "wasm");
-  if (existsSync14(join14(seaWasm, "tree-sitter-typescript.wasm"))) return seaWasm;
+  if (existsSync15(join14(seaWasm, "tree-sitter-typescript.wasm"))) return seaWasm;
   let dir = here;
   for (let i2 = 0; i2 < 6; i2++) {
     const flat = join14(
@@ -39765,13 +39918,13 @@ function findWasmDir() {
       "tree-sitter-wasm",
       "wasm"
     );
-    if (existsSync14(join14(flat, "tree-sitter-typescript.wasm"))) return flat;
+    if (existsSync15(join14(flat, "tree-sitter-typescript.wasm"))) return flat;
     dir = dirname7(dir);
   }
   let root = here;
   for (let i2 = 0; i2 < 6; i2++) {
     const pnpmDir = join14(root, "node_modules", ".pnpm");
-    if (existsSync14(pnpmDir)) {
+    if (existsSync15(pnpmDir)) {
       for (const entry of readdirSync3(pnpmDir)) {
         if (entry.startsWith("@vscode+tree-sitter-wasm@")) {
           const candidate = join14(
@@ -39782,7 +39935,7 @@ function findWasmDir() {
             "tree-sitter-wasm",
             "wasm"
           );
-          if (existsSync14(join14(candidate, "tree-sitter-typescript.wasm"))) {
+          if (existsSync15(join14(candidate, "tree-sitter-typescript.wasm"))) {
             return candidate;
           }
         }
@@ -39797,17 +39950,17 @@ function findWasmDir() {
 function findRuntimeDir() {
   const here = entryDir();
   const seaRuntime = join14(here, "resources", "wasm");
-  if (existsSync14(join14(seaRuntime, "web-tree-sitter.wasm"))) return seaRuntime;
+  if (existsSync15(join14(seaRuntime, "web-tree-sitter.wasm"))) return seaRuntime;
   let dir = here;
   for (let i2 = 0; i2 < 6; i2++) {
     const flat = join14(dir, "node_modules", "web-tree-sitter");
-    if (existsSync14(join14(flat, "web-tree-sitter.wasm"))) return flat;
+    if (existsSync15(join14(flat, "web-tree-sitter.wasm"))) return flat;
     dir = dirname7(dir);
   }
   let root = here;
   for (let i2 = 0; i2 < 6; i2++) {
     const pnpmDir = join14(root, "node_modules", ".pnpm");
-    if (existsSync14(pnpmDir)) {
+    if (existsSync15(pnpmDir)) {
       for (const entry of readdirSync3(pnpmDir)) {
         if (entry.startsWith("web-tree-sitter@")) {
           const candidate = join14(
@@ -39816,7 +39969,7 @@ function findRuntimeDir() {
             "node_modules",
             "web-tree-sitter"
           );
-          if (existsSync14(join14(candidate, "web-tree-sitter.wasm"))) {
+          if (existsSync15(join14(candidate, "web-tree-sitter.wasm"))) {
             return candidate;
           }
         }
@@ -42765,7 +42918,7 @@ var init_src11 = __esm({
 });
 
 // src/reconcile.ts
-import { execFileSync as execFileSync2 } from "node:child_process";
+import { execFileSync as execFileSync3 } from "node:child_process";
 import { readdirSync as readdirSync4, statSync as statSync4 } from "node:fs";
 import { join as join15, relative as relative3, sep as sep2 } from "node:path";
 function indexerWouldScan(rel) {
@@ -42779,7 +42932,7 @@ function indexerWouldScan(rel) {
 function gitSourceFiles(root) {
   let stdout;
   try {
-    stdout = execFileSync2(
+    stdout = execFileSync3(
       "git",
       ["-C", root, "ls-files", "--cached", "--others", "--exclude-standard", "-z"],
       { encoding: "utf8", maxBuffer: 128 * 1024 * 1024, windowsHide: true, stdio: ["ignore", "pipe", "ignore"] }
@@ -42955,7 +43108,7 @@ __export(mcp_exports, {
   runTool: () => runTool,
   searchGraph: () => searchGraph
 });
-import { existsSync as existsSync15, readFileSync as readFileSync13 } from "node:fs";
+import { existsSync as existsSync16, readFileSync as readFileSync15 } from "node:fs";
 import { resolve as resolve3 } from "node:path";
 function collectEnrichmentPulls(store, opts = {}) {
   const pending = store.findNodesByLabel("Solution").filter((s) => s.attrs["enrichmentPending"] === true).filter((s) => !opts.onlyUnsurfaced || s.attrs["enrichmentSurfaced"] !== true);
@@ -42992,7 +43145,7 @@ function takeEnrichmentNudge(store) {
 ` + items;
 }
 function takeDiscriminatorNudge(path2) {
-  if (!path2 || !existsSync15(path2)) return null;
+  if (!path2 || !existsSync16(path2)) return null;
   let shared;
   try {
     shared = openGraphStore({ path: path2 });
@@ -43123,10 +43276,10 @@ function showNode(store, node2, maxLines) {
   if (!relPath) return { found: false, reason: "no file owner for node" };
   const workspaceRoot = process.cwd();
   const absPath = resolve3(workspaceRoot, relPath);
-  if (!existsSync15(absPath)) {
+  if (!existsSync16(absPath)) {
     return { found: false, reason: `file not found on disk: ${absPath}` };
   }
-  const source = readFileSync13(absPath, "utf8");
+  const source = readFileSync15(absPath, "utf8");
   const attrs = node2.attrs;
   let startByte = attrs["bodyStartByte"] ?? attrs["startByte"];
   let endByte = attrs["bodyEndByte"] ?? attrs["endByte"];
@@ -43845,7 +43998,7 @@ var init_mcp = __esm({
           const local = causalChain(store, { seedId: id, direction: "both", maxHops, limit });
           try {
             const path2 = sharedStorePath();
-            if (!existsSync15(path2)) return { found: true, ...local };
+            if (!existsSync16(path2)) return { found: true, ...local };
             const shared = openGraphStore({ path: path2 });
             try {
               if (!shared.getNode(id)) return { found: true, ...local };
@@ -44448,7 +44601,7 @@ var init_mcp = __esm({
         inputSchema: { type: "object", properties: {} },
         handler: () => {
           const path2 = sharedStorePath();
-          if (!existsSync15(path2)) return { count: 0, pending: [] };
+          if (!existsSync16(path2)) return { count: 0, pending: [] };
           const shared = openGraphStore({ path: path2 });
           try {
             const pending = pendingAbstractions(shared);
@@ -44476,7 +44629,7 @@ var init_mcp = __esm({
         },
         handler: (args2) => {
           const path2 = sharedStorePath();
-          if (!existsSync15(path2)) return { count: 0, pending: [] };
+          if (!existsSync16(path2)) return { count: 0, pending: [] };
           const shared = openGraphStore({ path: path2 });
           try {
             const pending = pendingDiscriminators(shared, {
@@ -44520,7 +44673,7 @@ var init_mcp = __esm({
         },
         handler: (args2) => {
           const path2 = sharedStorePath();
-          if (!existsSync15(path2)) return { count: 0, routes: [] };
+          if (!existsSync16(path2)) return { count: 0, routes: [] };
           const shared = openGraphStore({ path: path2 });
           try {
             const result = triageOf(shared, {
@@ -52407,11 +52560,11 @@ var init_tool_index = __esm({
 
 // src/outbox.ts
 import {
-  existsSync as existsSync16,
+  existsSync as existsSync17,
   readdirSync as readdirSync5,
-  readFileSync as readFileSync14,
-  renameSync,
-  unlinkSync,
+  readFileSync as readFileSync16,
+  renameSync as renameSync2,
+  unlinkSync as unlinkSync3,
   writeFileSync as writeFileSync12
 } from "node:fs";
 import { join as join17 } from "node:path";
@@ -52425,12 +52578,12 @@ function enqueueOutbox(paths, payload) {
 }
 async function flushOutbox(paths, client, store) {
   ensureDir(paths.outbox);
-  const entries = existsSync16(paths.outbox) ? readdirSync5(paths.outbox) : [];
+  const entries = existsSync17(paths.outbox) ? readdirSync5(paths.outbox) : [];
   let uploaded = 0;
   let failed = 0;
   const quarantine = (abs, reason) => {
     try {
-      renameSync(abs, `${abs}.bad`);
+      renameSync2(abs, `${abs}.bad`);
       console.warn(`[errata] outbox: quarantined ${abs} (${reason})`);
     } catch {
     }
@@ -52439,7 +52592,7 @@ async function flushOutbox(paths, client, store) {
     const abs = join17(paths.outbox, f);
     let payload;
     try {
-      payload = JSON.parse(readFileSync14(abs, "utf8"));
+      payload = JSON.parse(readFileSync16(abs, "utf8"));
     } catch {
       failed++;
       quarantine(abs, "unparseable JSON");
@@ -52474,7 +52627,7 @@ async function flushOutbox(paths, client, store) {
           }
         }
       }
-      unlinkSync(abs);
+      unlinkSync3(abs);
       if (res.accepted === 0) uploaded++;
     } catch (err2) {
       failed++;
@@ -52484,7 +52637,7 @@ async function flushOutbox(paths, client, store) {
       }
     }
   }
-  const remainingFiles = existsSync16(paths.outbox) ? readdirSync5(paths.outbox).filter((e) => e.endsWith(".json")) : [];
+  const remainingFiles = existsSync17(paths.outbox) ? readdirSync5(paths.outbox).filter((e) => e.endsWith(".json")) : [];
   return { uploaded, failed, remaining: remainingFiles.length };
 }
 var init_outbox = __esm({
@@ -53050,12 +53203,17 @@ function buildWebUi(deps) {
       block,
       lastInjectedHash
     });
+    let systemMessage = null;
     if (sid && block && recallCardEnabled() && (decision || atPrompt)) {
       const card = readContextCard(deps.paths.root, block.hash);
-      if (card) rememberCard(sid, card);
+      if (card) {
+        rememberCard(sid, card);
+        if (decision && sid.startsWith("codex:")) systemMessage = renderRecallLine(card);
+      }
     }
     if (!decision) return c.json({});
     return c.json({
+      ...systemMessage ? { systemMessage } : {},
       hookSpecificOutput: {
         hookEventName: decision.hookEventName,
         additionalContext: decision.additionalContext
@@ -55573,9 +55731,9 @@ var require_dispatcher_base = __commonJS({
       }
       close(callback) {
         if (callback === void 0) {
-          return new Promise((resolve7, reject) => {
+          return new Promise((resolve8, reject) => {
             this.close((err2, data) => {
-              return err2 ? reject(err2) : resolve7(data);
+              return err2 ? reject(err2) : resolve8(data);
             });
           });
         }
@@ -55613,12 +55771,12 @@ var require_dispatcher_base = __commonJS({
           err2 = null;
         }
         if (callback === void 0) {
-          return new Promise((resolve7, reject) => {
+          return new Promise((resolve8, reject) => {
             this.destroy(err2, (err3, data) => {
               return err3 ? (
                 /* istanbul ignore next: should never error */
                 reject(err3)
-              ) : resolve7(data);
+              ) : resolve8(data);
             });
           });
         }
@@ -57885,8 +58043,8 @@ var require_util2 = __commonJS({
     function createDeferredPromise() {
       let res;
       let rej;
-      const promise2 = new Promise((resolve7, reject) => {
-        res = resolve7;
+      const promise2 = new Promise((resolve8, reject) => {
+        res = resolve8;
         rej = reject;
       });
       return { promise: promise2, resolve: res, reject: rej };
@@ -60027,12 +60185,12 @@ upgrade: ${upgrade}\r
           cb();
         }
       }
-      const waitForDrain = () => new Promise((resolve7, reject) => {
+      const waitForDrain = () => new Promise((resolve8, reject) => {
         assert2(callback === null);
         if (socket[kError]) {
           reject(socket[kError]);
         } else {
-          callback = resolve7;
+          callback = resolve8;
         }
       });
       socket.on("close", onDrain).on("drain", onDrain);
@@ -60669,12 +60827,12 @@ var require_client_h2 = __commonJS({
           cb();
         }
       }
-      const waitForDrain = () => new Promise((resolve7, reject) => {
+      const waitForDrain = () => new Promise((resolve8, reject) => {
         assert2(callback === null);
         if (socket[kError]) {
           reject(socket[kError]);
         } else {
-          callback = resolve7;
+          callback = resolve8;
         }
       });
       h2stream.on("close", onDrain).on("drain", onDrain);
@@ -61151,16 +61309,16 @@ var require_client = __commonJS({
         return this[kNeedDrain] < 2;
       }
       async [kClose]() {
-        return new Promise((resolve7) => {
+        return new Promise((resolve8) => {
           if (this[kSize]) {
-            this[kClosedResolve] = resolve7;
+            this[kClosedResolve] = resolve8;
           } else {
-            resolve7(null);
+            resolve8(null);
           }
         });
       }
       async [kDestroy](err2) {
-        return new Promise((resolve7) => {
+        return new Promise((resolve8) => {
           const requests = this[kQueue].splice(this[kPendingIdx]);
           for (let i2 = 0; i2 < requests.length; i2++) {
             const request = requests[i2];
@@ -61171,7 +61329,7 @@ var require_client = __commonJS({
               this[kClosedResolve]();
               this[kClosedResolve] = null;
             }
-            resolve7(null);
+            resolve8(null);
           };
           if (this[kHTTPContext]) {
             this[kHTTPContext].destroy(err2, callback);
@@ -61222,7 +61380,7 @@ var require_client = __commonJS({
         });
       }
       try {
-        const socket = await new Promise((resolve7, reject) => {
+        const socket = await new Promise((resolve8, reject) => {
           client[kConnector]({
             host,
             hostname: hostname3,
@@ -61234,7 +61392,7 @@ var require_client = __commonJS({
             if (err2) {
               reject(err2);
             } else {
-              resolve7(socket2);
+              resolve8(socket2);
             }
           });
         });
@@ -61570,8 +61728,8 @@ var require_pool_base = __commonJS({
         if (this[kQueue].isEmpty()) {
           await Promise.all(this[kClients].map((c) => c.close()));
         } else {
-          await new Promise((resolve7) => {
-            this[kClosedResolve] = resolve7;
+          await new Promise((resolve8) => {
+            this[kClosedResolve] = resolve8;
           });
         }
       }
@@ -62786,7 +62944,7 @@ var require_readable = __commonJS({
         if (this._readableState.closeEmitted) {
           return null;
         }
-        return await new Promise((resolve7, reject) => {
+        return await new Promise((resolve8, reject) => {
           if (this[kContentLength] > limit) {
             this.destroy(new AbortError());
           }
@@ -62799,7 +62957,7 @@ var require_readable = __commonJS({
             if (signal?.aborted) {
               reject(signal.reason ?? new AbortError());
             } else {
-              resolve7(null);
+              resolve8(null);
             }
           }).on("error", noop).on("data", function(chunk) {
             limit -= chunk.length;
@@ -62810,15 +62968,15 @@ var require_readable = __commonJS({
         });
       }
     };
-    function isLocked(self) {
-      return self[kBody] && self[kBody].locked === true || self[kConsume];
+    function isLocked(self2) {
+      return self2[kBody] && self2[kBody].locked === true || self2[kConsume];
     }
-    function isUnusable(self) {
-      return util.isDisturbed(self) || isLocked(self);
+    function isUnusable(self2) {
+      return util.isDisturbed(self2) || isLocked(self2);
     }
     async function consume(stream, type) {
       assert2(!stream[kConsume]);
-      return new Promise((resolve7, reject) => {
+      return new Promise((resolve8, reject) => {
         if (isUnusable(stream)) {
           const rState = stream._readableState;
           if (rState.destroyed && rState.closeEmitted === false) {
@@ -62835,7 +62993,7 @@ var require_readable = __commonJS({
             stream[kConsume] = {
               type,
               stream,
-              resolve: resolve7,
+              resolve: resolve8,
               reject,
               length: 0,
               body: []
@@ -62905,18 +63063,18 @@ var require_readable = __commonJS({
       return buffer;
     }
     function consumeEnd(consume2) {
-      const { type, body: body2, resolve: resolve7, stream, length } = consume2;
+      const { type, body: body2, resolve: resolve8, stream, length } = consume2;
       try {
         if (type === "text") {
-          resolve7(chunksDecode(body2, length));
+          resolve8(chunksDecode(body2, length));
         } else if (type === "json") {
-          resolve7(JSON.parse(chunksDecode(body2, length)));
+          resolve8(JSON.parse(chunksDecode(body2, length)));
         } else if (type === "arrayBuffer") {
-          resolve7(chunksConcat(body2, length).buffer);
+          resolve8(chunksConcat(body2, length).buffer);
         } else if (type === "blob") {
-          resolve7(new Blob(body2, { type: stream[kContentType] }));
+          resolve8(new Blob(body2, { type: stream[kContentType] }));
         } else if (type === "bytes") {
-          resolve7(chunksConcat(body2, length));
+          resolve8(chunksConcat(body2, length));
         }
         consumeFinish(consume2);
       } catch (err2) {
@@ -63173,9 +63331,9 @@ var require_api_request = __commonJS({
     };
     function request(opts, callback) {
       if (callback === void 0) {
-        return new Promise((resolve7, reject) => {
+        return new Promise((resolve8, reject) => {
           request.call(this, opts, (err2, data) => {
-            return err2 ? reject(err2) : resolve7(data);
+            return err2 ? reject(err2) : resolve8(data);
           });
         });
       }
@@ -63201,42 +63359,42 @@ var require_abort_signal = __commonJS({
     var { RequestAbortedError } = require_errors();
     var kListener = Symbol("kListener");
     var kSignal = Symbol("kSignal");
-    function abort2(self) {
-      if (self.abort) {
-        self.abort(self[kSignal]?.reason);
+    function abort2(self2) {
+      if (self2.abort) {
+        self2.abort(self2[kSignal]?.reason);
       } else {
-        self.reason = self[kSignal]?.reason ?? new RequestAbortedError();
+        self2.reason = self2[kSignal]?.reason ?? new RequestAbortedError();
       }
-      removeSignal(self);
+      removeSignal(self2);
     }
-    function addSignal(self, signal) {
-      self.reason = null;
-      self[kSignal] = null;
-      self[kListener] = null;
+    function addSignal(self2, signal) {
+      self2.reason = null;
+      self2[kSignal] = null;
+      self2[kListener] = null;
       if (!signal) {
         return;
       }
       if (signal.aborted) {
-        abort2(self);
+        abort2(self2);
         return;
       }
-      self[kSignal] = signal;
-      self[kListener] = () => {
-        abort2(self);
+      self2[kSignal] = signal;
+      self2[kListener] = () => {
+        abort2(self2);
       };
-      addAbortListener(self[kSignal], self[kListener]);
+      addAbortListener(self2[kSignal], self2[kListener]);
     }
-    function removeSignal(self) {
-      if (!self[kSignal]) {
+    function removeSignal(self2) {
+      if (!self2[kSignal]) {
         return;
       }
-      if ("removeEventListener" in self[kSignal]) {
-        self[kSignal].removeEventListener("abort", self[kListener]);
+      if ("removeEventListener" in self2[kSignal]) {
+        self2[kSignal].removeEventListener("abort", self2[kListener]);
       } else {
-        self[kSignal].removeListener("abort", self[kListener]);
+        self2[kSignal].removeListener("abort", self2[kListener]);
       }
-      self[kSignal] = null;
-      self[kListener] = null;
+      self2[kSignal] = null;
+      self2[kListener] = null;
     }
     module2.exports = {
       addSignal,
@@ -63398,9 +63556,9 @@ var require_api_stream = __commonJS({
     };
     function stream(opts, factory, callback) {
       if (callback === void 0) {
-        return new Promise((resolve7, reject) => {
+        return new Promise((resolve8, reject) => {
           stream.call(this, opts, factory, (err2, data) => {
-            return err2 ? reject(err2) : resolve7(data);
+            return err2 ? reject(err2) : resolve8(data);
           });
         });
       }
@@ -63685,9 +63843,9 @@ var require_api_upgrade = __commonJS({
     };
     function upgrade(opts, callback) {
       if (callback === void 0) {
-        return new Promise((resolve7, reject) => {
+        return new Promise((resolve8, reject) => {
           upgrade.call(this, opts, (err2, data) => {
-            return err2 ? reject(err2) : resolve7(data);
+            return err2 ? reject(err2) : resolve8(data);
           });
         });
       }
@@ -63779,9 +63937,9 @@ var require_api_connect = __commonJS({
     };
     function connect(opts, callback) {
       if (callback === void 0) {
-        return new Promise((resolve7, reject) => {
+        return new Promise((resolve8, reject) => {
           connect.call(this, opts, (err2, data) => {
-            return err2 ? reject(err2) : resolve7(data);
+            return err2 ? reject(err2) : resolve8(data);
           });
         });
       }
@@ -67643,7 +67801,7 @@ var require_fetch = __commonJS({
       function dispatch({ body: body2 }) {
         const url2 = requestCurrentURL(request);
         const agent = fetchParams.controller.dispatcher;
-        return new Promise((resolve7, reject) => agent.dispatch(
+        return new Promise((resolve8, reject) => agent.dispatch(
           {
             path: url2.pathname + url2.search,
             origin: url2.origin,
@@ -67719,7 +67877,7 @@ var require_fetch = __commonJS({
                 }
               }
               const onError = this.onError.bind(this);
-              resolve7({
+              resolve8({
                 status,
                 statusText,
                 headersList,
@@ -67765,7 +67923,7 @@ var require_fetch = __commonJS({
               for (let i2 = 0; i2 < rawHeaders.length; i2 += 2) {
                 headersList.append(bufferToLowerCasedHeaderName(rawHeaders[i2]), rawHeaders[i2 + 1].toString("latin1"), true);
               }
-              resolve7({
+              resolve8({
                 status,
                 statusText: STATUS_CODES[status],
                 headersList,
@@ -71404,8 +71562,8 @@ var require_util8 = __commonJS({
       return true;
     }
     function delay(ms) {
-      return new Promise((resolve7) => {
-        setTimeout(resolve7, ms).unref();
+      return new Promise((resolve8) => {
+        setTimeout(resolve8, ms).unref();
       });
     }
     module2.exports = {
@@ -72093,7 +72251,7 @@ __export(witness_ledger_exports, {
   summarizeWitnessLedger: () => summarizeWitnessLedger,
   witnessLedgerPath: () => witnessLedgerPath
 });
-import { appendFileSync as appendFileSync3, existsSync as existsSync25, readFileSync as readFileSync27, writeFileSync as writeFileSync20 } from "node:fs";
+import { appendFileSync as appendFileSync3, existsSync as existsSync26, readFileSync as readFileSync29, writeFileSync as writeFileSync20 } from "node:fs";
 import { join as join33 } from "node:path";
 function witnessLedgerPath(configDir) {
   return join33(configDir, "witness-ledger.jsonl");
@@ -72102,7 +72260,7 @@ function appendWitnessLedger(configDir, entry) {
   const path2 = witnessLedgerPath(configDir);
   try {
     appendFileSync3(path2, JSON.stringify(entry) + "\n");
-    const lines = readFileSync27(path2, "utf8").split("\n").filter(Boolean);
+    const lines = readFileSync29(path2, "utf8").split("\n").filter(Boolean);
     if (lines.length > LEDGER_MAX_LINES) {
       writeFileSync20(path2, lines.slice(-Math.floor(LEDGER_MAX_LINES / 2)).join("\n") + "\n");
     }
@@ -72111,9 +72269,9 @@ function appendWitnessLedger(configDir, entry) {
 }
 function readWitnessLedger(configDir) {
   const path2 = witnessLedgerPath(configDir);
-  if (!existsSync25(path2)) return [];
+  if (!existsSync26(path2)) return [];
   try {
-    return readFileSync27(path2, "utf8").split("\n").filter(Boolean).map((l) => JSON.parse(l)).filter((e) => typeof e.ts === "number" && typeof e.channel === "string");
+    return readFileSync29(path2, "utf8").split("\n").filter(Boolean).map((l) => JSON.parse(l)).filter((e) => typeof e.ts === "number" && typeof e.channel === "string");
   } catch {
     return [];
   }
@@ -72552,12 +72710,12 @@ var init_report_render = __esm({
 
 // src/cli.ts
 init_src6();
-import { closeSync as closeSync2, existsSync as existsSync36, openSync as openSync2, readFileSync as readFileSync37, renameSync as renameSync4, statSync as statSync10 } from "node:fs";
-import { join as join44, resolve as pathResolve2 } from "node:path";
+import { closeSync as closeSync2, existsSync as existsSync37, openSync as openSync2, readFileSync as readFileSync40, renameSync as renameSync6, statSync as statSync11 } from "node:fs";
+import { join as join47, resolve as pathResolve2 } from "node:path";
 import { spawn as spawn5 } from "node:child_process";
 
 // src/daemon.ts
-import { existsSync as existsSync27, writeFileSync as writeFileSync23 } from "node:fs";
+import { existsSync as existsSync28, writeFileSync as writeFileSync23 } from "node:fs";
 
 // ../../node_modules/.pnpm/@hono+node-server@1.19.11_hono@4.12.8/node_modules/@hono/node-server/dist/index.mjs
 import { createServer as createServerHTTP } from "http";
@@ -72987,7 +73145,7 @@ var responseViaResponseObject = async (res, outgoing, options = {}) => {
         });
         if (!chunk) {
           if (i2 === 1) {
-            await new Promise((resolve7) => setTimeout(resolve7));
+            await new Promise((resolve8) => setTimeout(resolve8));
             maxReadCount = 3;
             continue;
           }
@@ -73134,10 +73292,11 @@ var serve = (options, listeningListener) => {
 init_cloud_auth();
 init_webui();
 init_config();
+init_lock();
 
 // src/engine.ts
-import { execFileSync as execFileSync4 } from "node:child_process";
-import { existsSync as existsSync26, statSync as statSync8, appendFileSync as appendFileSync4, readdirSync as readdirSync10, renameSync as renameSync3, readFileSync as readFileSync29, writeFileSync as writeFileSync22 } from "node:fs";
+import { execFileSync as execFileSync5 } from "node:child_process";
+import { existsSync as existsSync27, statSync as statSync8, appendFileSync as appendFileSync4, readdirSync as readdirSync10, renameSync as renameSync4, readFileSync as readFileSync31, writeFileSync as writeFileSync22 } from "node:fs";
 import { basename as basename7, join as join35, relative as relative6, sep as sep4 } from "node:path";
 
 // src/source-watcher.ts
@@ -73874,9 +74033,9 @@ var NodeFsHandler = class {
     if (this.fsw.closed) {
       return;
     }
-    const dirname14 = sysPath.dirname(file2);
+    const dirname15 = sysPath.dirname(file2);
     const basename9 = sysPath.basename(file2);
-    const parent = this.fsw._getWatchedDir(dirname14);
+    const parent = this.fsw._getWatchedDir(dirname15);
     let prevStats = stats;
     if (parent.has(basename9))
       return;
@@ -73903,7 +74062,7 @@ var NodeFsHandler = class {
             prevStats = newStats2;
           }
         } catch (error48) {
-          this.fsw._remove(dirname14, basename9);
+          this.fsw._remove(dirname15, basename9);
         }
       } else if (parent.has(basename9)) {
         const at = newStats.atimeMs;
@@ -73999,7 +74158,7 @@ var NodeFsHandler = class {
         this._addToNodeFs(path2, initialAdd, wh, depth + 1);
       }
     }).on(EV.ERROR, this._boundHandleError);
-    return new Promise((resolve7, reject) => {
+    return new Promise((resolve8, reject) => {
       if (!stream)
         return reject();
       stream.once(STR_END, () => {
@@ -74008,7 +74167,7 @@ var NodeFsHandler = class {
           return;
         }
         const wasThrottled = throttler ? throttler.clear() : false;
-        resolve7(void 0);
+        resolve8(void 0);
         previous.getChildren().filter((item2) => {
           return item2 !== directory && !current.has(item2);
         }).forEach((item2) => {
@@ -74845,16 +75004,16 @@ function createSourceWatcher(targets, opts) {
 }
 function chokidarSourceWatcher(targets, ignored) {
   const w = esm_default.watch([...targets], { ignored, ignoreInitial: true, persistent: true });
-  const self = {
+  const self2 = {
     on(event, listener) {
       w.on(event, listener);
-      return self;
+      return self2;
     },
     add: (p) => void w.add(p),
     unwatch: (p) => void w.unwatch(p),
     close: () => w.close()
   };
-  return self;
+  return self2;
 }
 var NativeSourceWatcher = class extends EventEmitter2 {
   constructor(targets, ignored) {
@@ -75182,7 +75341,7 @@ init_review2();
 
 // src/turn.ts
 init_checkout_root();
-import { closeSync, existsSync as existsSync17, fstatSync, openSync, readdirSync as readdirSync6, readSync, realpathSync, statSync as statSync6 } from "node:fs";
+import { closeSync, existsSync as existsSync18, fstatSync, openSync, readdirSync as readdirSync6, readSync, realpathSync, statSync as statSync6 } from "node:fs";
 import { basename as basename5, delimiter, dirname as dirname10, join as join21, normalize as normalize3 } from "node:path";
 import { homedir as homedir4 } from "node:os";
 import { createHash as createHash16 } from "node:crypto";
@@ -75575,7 +75734,7 @@ function claudeProjectDir(cwd, home = homedir4()) {
 }
 function recentTranscripts(cwd, opts = {}) {
   const dir = claudeProjectDir(cwd, opts.home ?? homedir4());
-  if (!existsSync17(dir)) return [];
+  if (!existsSync18(dir)) return [];
   let names;
   try {
     names = readdirSync6(dir);
@@ -75602,7 +75761,7 @@ function recentTranscripts(cwd, opts = {}) {
 function subagentTranscripts(mainTranscriptPath, sessionId) {
   if (!mainTranscriptPath || !sessionId) return [];
   const dir = join21(dirname10(mainTranscriptPath), sessionId, "subagents");
-  if (!existsSync17(dir)) return [];
+  if (!existsSync18(dir)) return [];
   let names;
   try {
     names = readdirSync6(dir);
@@ -75686,7 +75845,7 @@ function codexRolloutsForCwd(cwd, opts = {}) {
   const owner = checkoutRootOf(cwd);
   const owners = /* @__PURE__ */ new Map();
   for (const root of codexSessionRoots(opts.env, opts.home)) {
-    if (!existsSync17(root)) {
+    if (!existsSync18(root)) {
       codexRolloutActivity.delete(root);
       continue;
     }
@@ -75787,7 +75946,7 @@ function geminiTranscriptsForCwd(cwd, opts = {}) {
   const hashes = geminiHashesFor(cwd);
   const out2 = [];
   for (const root of geminiSessionRoots(opts.env, opts.home)) {
-    if (!existsSync17(root)) continue;
+    if (!existsSync18(root)) continue;
     let slugs;
     try {
       slugs = readdirSync6(root);
@@ -75858,7 +76017,7 @@ function opencodeTranscriptsForCwd(cwd, opts = {}) {
   }
   const out2 = [];
   for (const root of opencodeSessionRoots(opts.env, opts.home)) {
-    if (!existsSync17(root)) continue;
+    if (!existsSync18(root)) continue;
     let names;
     try {
       names = readdirSync6(root);
@@ -75890,7 +76049,7 @@ init_src2();
 init_agent_signals();
 init_tool_index();
 init_src5();
-import { readFileSync as readFileSync15, writeFileSync as writeFileSync13 } from "node:fs";
+import { readFileSync as readFileSync17, writeFileSync as writeFileSync13 } from "node:fs";
 var NEG = /n['']t|\b(?:not|never|no|none|neither|nor|unrelated|irrelevant|would|might|could|if)\b/i;
 var CITE_GROUP_RE = /\(((?:[^()\n]|\([^()\n]*\)){1,200})\)/g;
 var HANDLE_RE = /\[([a-z0-9][\w-]{0,80})\]|((?:pat|sol|drc|dcause|dfix|dprob|dvuln|prob|claim|err)_[0-9a-f]{6,})/gi;
@@ -76629,7 +76788,7 @@ function writePrimingHandles(path2, nodes, now = Date.now()) {
 }
 function readPrimingHandles(path2) {
   try {
-    return JSON.parse(readFileSync15(path2, "utf8"));
+    return JSON.parse(readFileSync17(path2, "utf8"));
   } catch {
     return {};
   }
@@ -77109,7 +77268,7 @@ ${conversation}` }]
 // src/constraint-backfill.ts
 init_src5();
 init_src2();
-import { existsSync as existsSync18, readFileSync as readFileSync16, readdirSync as readdirSync7, writeFileSync as writeFileSync14 } from "node:fs";
+import { existsSync as existsSync19, readFileSync as readFileSync18, readdirSync as readdirSync7, writeFileSync as writeFileSync14 } from "node:fs";
 import { join as join22 } from "node:path";
 import { homedir as homedir5 } from "node:os";
 var BACKFILL_VERSION = 1;
@@ -77128,9 +77287,9 @@ function markerPath(configDir) {
 }
 function alreadyDone(configDir) {
   const p = markerPath(configDir);
-  if (!existsSync18(p)) return false;
+  if (!existsSync19(p)) return false;
   try {
-    const raw2 = JSON.parse(readFileSync16(p, "utf8"));
+    const raw2 = JSON.parse(readFileSync18(p, "utf8"));
     return raw2?.version === BACKFILL_VERSION;
   } catch {
     return false;
@@ -77140,7 +77299,7 @@ function replay(root) {
   const statements = /* @__PURE__ */ new Set();
   const citedByFix = /* @__PURE__ */ new Set();
   const dir = claudeProjectDir(root, homedir5());
-  if (!existsSync18(dir)) return { statements, citedByFix };
+  if (!existsSync19(dir)) return { statements, citedByFix };
   let names;
   try {
     names = readdirSync7(dir).filter((n) => n.endsWith(".jsonl"));
@@ -77150,7 +77309,7 @@ function replay(root) {
   for (const f of names) {
     let lines;
     try {
-      lines = readFileSync16(join22(dir, f), "utf8").split("\n");
+      lines = readFileSync18(join22(dir, f), "utf8").split("\n");
     } catch {
       continue;
     }
@@ -77277,7 +77436,7 @@ function backfillConstraintKind(store, opts) {
 // src/edge-repair.ts
 init_src();
 init_src5();
-import { existsSync as existsSync19, readFileSync as readFileSync17, writeFileSync as writeFileSync15 } from "node:fs";
+import { existsSync as existsSync20, readFileSync as readFileSync19, writeFileSync as writeFileSync15 } from "node:fs";
 import { join as join23 } from "node:path";
 function citeEdgeId(from, type, to) {
   return `edge_${digest({ from, type, to })}`.slice(0, 24);
@@ -77297,9 +77456,9 @@ function markerPath2(configDir) {
 }
 function alreadyDone2(configDir) {
   const p = markerPath2(configDir);
-  if (!existsSync19(p)) return false;
+  if (!existsSync20(p)) return false;
   try {
-    return JSON.parse(readFileSync17(p, "utf8"))?.version === EDGE_REPAIR_VERSION;
+    return JSON.parse(readFileSync19(p, "utf8"))?.version === EDGE_REPAIR_VERSION;
   } catch {
     return false;
   }
@@ -77362,7 +77521,7 @@ function repairInvalidEdges(store, opts) {
 init_reconcile();
 
 // src/pass-ledger.ts
-import { appendFileSync as appendFileSync2, existsSync as existsSync20, readFileSync as readFileSync18, writeFileSync as writeFileSync16 } from "node:fs";
+import { appendFileSync as appendFileSync2, existsSync as existsSync21, readFileSync as readFileSync20, writeFileSync as writeFileSync16 } from "node:fs";
 import { join as join24 } from "node:path";
 
 // src/isolate-census.ts
@@ -77415,7 +77574,7 @@ function appendPassLedger(configDir, kind, durationMs, counts) {
       return;
     }
     appendsSinceTrim.set(path2, 0);
-    const lines = readFileSync18(path2, "utf8").split("\n").filter(Boolean);
+    const lines = readFileSync20(path2, "utf8").split("\n").filter(Boolean);
     const keptByKind = /* @__PURE__ */ new Map();
     const kept = [];
     for (let i2 = lines.length - 1; i2 >= 0; i2--) {
@@ -77438,9 +77597,9 @@ function appendPassLedger(configDir, kind, durationMs, counts) {
 }
 function readPassLedger(configDir) {
   const path2 = passLedgerPath(configDir);
-  if (!existsSync20(path2)) return [];
+  if (!existsSync21(path2)) return [];
   try {
-    return readFileSync18(path2, "utf8").split("\n").filter(Boolean).map((l) => JSON.parse(l)).filter(
+    return readFileSync20(path2, "utf8").split("\n").filter(Boolean).map((l) => JSON.parse(l)).filter(
       (e) => typeof e?.ts === "number" && typeof e?.kind === "string" && typeof e?.durationMs === "number"
     ).map((e) => ({ ...e, counts: e.counts ?? {} }));
   } catch {
@@ -77727,8 +77886,8 @@ var PassWorker = class {
       const id = this.nextId++;
       try {
         await this.ready;
-        return await new Promise((resolve7, reject) => {
-          this.pending.set(id, { resolve: resolve7, reject });
+        return await new Promise((resolve8, reject) => {
+          this.pending.set(id, { resolve: resolve8, reject });
           this.worker.postMessage({ id, kind, ...payload !== void 0 ? { payload } : {} });
         });
       } finally {
@@ -77762,12 +77921,12 @@ var PassWorker = class {
     });
     noteIsolateSpawned();
     this.worker = worker;
-    this.ready = new Promise((resolve7, reject) => {
+    this.ready = new Promise((resolve8, reject) => {
       const onReady = (m) => {
         if (m?.ready) {
           worker.off("message", onReady);
           worker.off("error", onErr);
-          resolve7();
+          resolve8();
         }
       };
       const onErr = (err2) => reject(err2);
@@ -77812,11 +77971,11 @@ init_outbox();
 init_src10();
 init_src();
 init_src2();
-import { readFileSync as readFileSync19 } from "node:fs";
+import { readFileSync as readFileSync21 } from "node:fs";
 import { join as join25 } from "node:path";
 function loadClaimIgnorePatterns(workspaceRoot) {
   try {
-    return readFileSync19(join25(workspaceRoot, ".errataignore"), "utf8").split(/\r?\n/).map((l) => l.trim()).filter((l) => l.length > 0 && !l.startsWith("#")).map((l) => l.toLowerCase());
+    return readFileSync21(join25(workspaceRoot, ".errataignore"), "utf8").split(/\r?\n/).map((l) => l.trim()).filter((l) => l.length > 0 && !l.startsWith("#")).map((l) => l.toLowerCase());
   } catch {
     return [];
   }
@@ -78193,8 +78352,8 @@ async function pullCloudTriage(shared, cloud, profile, limit = 50) {
 
 // src/retrieval-stack.ts
 init_src();
-import { execFileSync as execFileSync3 } from "node:child_process";
-import { existsSync as existsSync21, readFileSync as readFileSync20, statSync as statSync7 } from "node:fs";
+import { execFileSync as execFileSync4 } from "node:child_process";
+import { existsSync as existsSync22, readFileSync as readFileSync22, statSync as statSync7 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
 import { join as join26 } from "node:path";
 var RETRIEVAL_STACK_CAP = 24;
@@ -78486,7 +78645,7 @@ function mavenGroupIsSelfDisclosing(name2, selfTokens) {
 function loadRegistryPolicy(root, env2 = process.env, repoLocator) {
   const read2 = (p) => {
     try {
-      return readFileSync20(p, "utf8");
+      return readFileSync22(p, "utf8");
     } catch {
       return null;
     }
@@ -78712,7 +78871,7 @@ function readDirectDependencies(root) {
   for (const c of LOCKFILES) {
     if (familiesSeen.has(c.family)) continue;
     const p = join26(root, c.file);
-    if (!existsSync21(p)) continue;
+    if (!existsSync22(p)) continue;
     try {
       const s = statSync7(p);
       stamps.push(`${c.file}:${s.mtimeMs}:${s.size}`);
@@ -78732,7 +78891,7 @@ function readDirectDependencies(root) {
   const direct = [];
   for (const { c, path: path2 } of found) {
     try {
-      direct.push(...c.parse(readFileSync20(path2, "utf8")).direct ?? []);
+      direct.push(...c.parse(readFileSync22(path2, "utf8")).direct ?? []);
     } catch {
     }
   }
@@ -78741,7 +78900,7 @@ function readDirectDependencies(root) {
 }
 function manifestPaths(root) {
   try {
-    const out2 = execFileSync3("git", ["-C", root, "ls-files", "-z"], {
+    const out2 = execFileSync4("git", ["-C", root, "ls-files", "-z"], {
       encoding: "utf8",
       maxBuffer: 128 * 1024 * 1024,
       windowsHide: true,
@@ -78775,14 +78934,14 @@ function manifestPaths(root) {
     "project.godot"
   ];
   return {
-    paths: ROOT_MANIFESTS.filter((f) => existsSync21(join26(root, f))),
+    paths: ROOT_MANIFESTS.filter((f) => existsSync22(join26(root, f))),
     tracked: false,
     truncated: false
   };
 }
 var WORKSPACE_MARKERS = ["pnpm-workspace.yaml", "lerna.json", "go.work", "settings.gradle", "settings.gradle.kts"];
 function rootDeclaresWorkspace(root, texts) {
-  if (WORKSPACE_MARKERS.some((f) => existsSync21(join26(root, f)))) return true;
+  if (WORKSPACE_MARKERS.some((f) => existsSync22(join26(root, f)))) return true;
   return /"workspaces"\s*:/.test(texts.get("package.json") ?? "") || /<modules>/.test(texts.get("pom.xml") ?? "") || /^\s*\[workspace\]/m.test(texts.get("Cargo.toml") ?? "");
 }
 var EMPTY_SCAN = { deps: [], self: [], complete: true };
@@ -78800,7 +78959,7 @@ function scanManifests(root) {
     try {
       const s = statSync7(abs);
       stamps.push(`${rel}:${s.mtimeMs}:${s.size}`);
-      texts.set(rel, readFileSync20(abs, "utf8"));
+      texts.set(rel, readFileSync22(abs, "utf8"));
     } catch {
     }
   }
@@ -78829,11 +78988,11 @@ function readManifestDependencies(root) {
 }
 
 // src/git-sensor.ts
-import { existsSync as existsSync22, readFileSync as readFileSync21, watch as fsWatch } from "node:fs";
+import { existsSync as existsSync23, readFileSync as readFileSync23, watch as fsWatch } from "node:fs";
 import { join as join27 } from "node:path";
 function readFirstLine(path2) {
   try {
-    return readFileSync21(path2, "utf8").split(/\r?\n/, 1)[0].trim();
+    return readFileSync23(path2, "utf8").split(/\r?\n/, 1)[0].trim();
   } catch {
     return null;
   }
@@ -78852,13 +79011,13 @@ function readGitRefState(gitDir) {
   return {
     branch,
     sha: sha2,
-    mergeHeadExists: existsSync22(join27(gitDir, "MERGE_HEAD")),
-    origHeadExists: existsSync22(join27(gitDir, "ORIG_HEAD"))
+    mergeHeadExists: existsSync23(join27(gitDir, "MERGE_HEAD")),
+    origHeadExists: existsSync23(join27(gitDir, "ORIG_HEAD"))
   };
 }
 function shaFromPackedRefs(gitDir, ref) {
   try {
-    for (const line of readFileSync21(join27(gitDir, "packed-refs"), "utf8").split(/\r?\n/)) {
+    for (const line of readFileSync23(join27(gitDir, "packed-refs"), "utf8").split(/\r?\n/)) {
       const [sha2, name2] = line.split(/\s+/);
       if (name2 === ref && sha2) return sha2;
     }
@@ -78892,7 +79051,7 @@ function startGitSensor(gitDir, onEvent, opts = {}) {
   const settle = () => {
     if (timer) clearTimeout(timer);
     timer = setTimeout(() => {
-      if (existsSync22(join27(gitDir, "index.lock"))) {
+      if (existsSync23(join27(gitDir, "index.lock"))) {
         settle();
         return;
       }
@@ -78923,7 +79082,7 @@ function startGitSensor(gitDir, onEvent, opts = {}) {
 // src/git-delta.ts
 import { execFile } from "node:child_process";
 function git(repoDir, args2) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve8, reject) => {
     execFile(
       "git",
       ["-C", repoDir, ...args2],
@@ -78934,7 +79093,7 @@ function git(repoDir, args2) {
         // git-sensor runs on every commit/checkout.
         windowsHide: true
       },
-      (err2, stdout) => err2 ? reject(err2) : resolve7(stdout)
+      (err2, stdout) => err2 ? reject(err2) : resolve8(stdout)
     );
   });
 }
@@ -79127,7 +79286,7 @@ var TelemetryRecorder = class {
 };
 
 // src/file-activity.ts
-import { readFileSync as readFileSync23 } from "node:fs";
+import { readFileSync as readFileSync25 } from "node:fs";
 import { join as join29 } from "node:path";
 import { createHash as createHash17 } from "node:crypto";
 
@@ -79880,7 +80039,7 @@ init_git_remote();
 // src/history-bundle.ts
 init_src();
 import { execFile as execFile2 } from "node:child_process";
-import { readFileSync as readFileSync22 } from "node:fs";
+import { readFileSync as readFileSync24 } from "node:fs";
 import { join as join28 } from "node:path";
 var DEFAULT_MAX_TOKENS = 6e3;
 var FILE_LIST_CAP = 60;
@@ -79916,7 +80075,7 @@ function pathAllowedByFloor(path2) {
 function loadRepoIgnore(root, extraPatterns = []) {
   let source = "";
   try {
-    source = readFileSync22(join28(root, ".errataignore"), "utf8");
+    source = readFileSync24(join28(root, ".errataignore"), "utf8");
   } catch {
     source = "";
   }
@@ -80092,12 +80251,12 @@ function headerPaths(diff) {
   return out2.filter((p) => p !== "/dev/null");
 }
 function git2(repoDir, args2) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve8, reject) => {
     execFile2(
       "git",
       ["-C", repoDir, ...args2],
       { encoding: "utf8", maxBuffer: 64 * 1024 * 1024, windowsHide: true },
-      (err2, stdout) => err2 ? reject(err2) : resolve7(stdout)
+      (err2, stdout) => err2 ? reject(err2) : resolve8(stdout)
     );
   });
 }
@@ -80209,7 +80368,7 @@ function readActivityBranch(root) {
   try {
     const gitDir = resolveGitDir(root);
     if (!gitDir) return null;
-    const head2 = readFileSync23(join29(gitDir, "HEAD"), "utf8").trim();
+    const head2 = readFileSync25(join29(gitDir, "HEAD"), "utf8").trim();
     const branch = head2.startsWith("ref: refs/heads/") ? head2.slice(16) : /^[a-f0-9]{40,64}$/i.test(head2) ? "HEAD" : null;
     return branch && branch.length <= 256 && !/[\x00-\x1f\x7f]/.test(branch) ? branch : null;
   } catch {
@@ -80366,11 +80525,11 @@ var FileActivityReporter = class {
 
 // src/skills.ts
 import {
-  existsSync as existsSync23,
+  existsSync as existsSync24,
   mkdirSync as mkdirSync7,
-  readFileSync as readFileSync24,
+  readFileSync as readFileSync26,
   readdirSync as readdirSync8,
-  unlinkSync as unlinkSync2,
+  unlinkSync as unlinkSync4,
   writeFileSync as writeFileSync17
 } from "node:fs";
 import { basename as basename6, join as join30 } from "node:path";
@@ -80378,9 +80537,9 @@ function skillFileName(id) {
   return `${id.replace(/[^A-Za-z0-9_.-]/g, "_")}.md`;
 }
 function readSkillManifest(manifestPath) {
-  if (!existsSync23(manifestPath)) return [];
+  if (!existsSync24(manifestPath)) return [];
   try {
-    const parsed = JSON.parse(readFileSync24(manifestPath, "utf8"));
+    const parsed = JSON.parse(readFileSync26(manifestPath, "utf8"));
     return (parsed.skills ?? []).map((s) => ({
       title: s.title ?? "",
       layer: s.layer ?? "technique",
@@ -80431,7 +80590,7 @@ async function syncSkills(paths, client, seed, pins = [], techSeed) {
     if (!f.endsWith(".md")) continue;
     if (keep.has(basename6(f))) continue;
     try {
-      unlinkSync2(join30(paths.skillsDir, f));
+      unlinkSync4(join30(paths.skillsDir, f));
       pruned++;
     } catch {
     }
@@ -80449,10 +80608,10 @@ async function syncSkills(paths, client, seed, pins = [], techSeed) {
 init_src2();
 import {
   cpSync,
-  existsSync as existsSync24,
+  existsSync as existsSync25,
   lstatSync,
   mkdirSync as mkdirSync8,
-  readFileSync as readFileSync25,
+  readFileSync as readFileSync27,
   readdirSync as readdirSync9,
   rmSync as rmSync3,
   symlinkSync,
@@ -80509,7 +80668,7 @@ function skillCiteHandle(s) {
   return priorHandle({ id: s.id, description: s.title });
 }
 function reconcileNamespaced(dir, keep) {
-  if (!existsSync24(dir)) return 0;
+  if (!existsSync25(dir)) return 0;
   let pruned = 0;
   for (const name2 of readdirSync9(dir)) {
     if (!name2.startsWith(SKILL_NS) || keep.has(name2)) continue;
@@ -80523,7 +80682,7 @@ function reconcileNamespaced(dir, keep) {
 }
 function linkOrCopy(linkPath, target) {
   try {
-    if (existsSync24(linkPath) || safeLstat(linkPath)) rmSync3(linkPath, { recursive: true, force: true });
+    if (existsSync25(linkPath) || safeLstat(linkPath)) rmSync3(linkPath, { recursive: true, force: true });
   } catch {
   }
   try {
@@ -80552,7 +80711,7 @@ function emitAndProjectSkills(root, skills) {
   for (const s of skills) {
     let body2;
     try {
-      body2 = readFileSync25(s.bodyPath, "utf8");
+      body2 = readFileSync27(s.bodyPath, "utf8");
     } catch {
       continue;
     }
@@ -80572,7 +80731,7 @@ function emitAndProjectSkills(root, skills) {
   reconcileNamespaced(agentsSkillsDir, keep);
   let projected = 0;
   for (const h of HARNESS_SKILL_DIRS) {
-    if (!existsSync24(join31(root, h.configDir))) continue;
+    if (!existsSync25(join31(root, h.configDir))) continue;
     const dir = join31(root, h.skillsDir);
     mkdirSync8(dir, { recursive: true });
     for (const slug2 of slugs) {
@@ -80585,9 +80744,9 @@ function emitAndProjectSkills(root, skills) {
   return { slugs, emitted, projected };
 }
 function emitInputsFromManifest(erretaDir, manifestPath) {
-  if (!existsSync24(manifestPath)) return [];
+  if (!existsSync25(manifestPath)) return [];
   try {
-    const parsed = JSON.parse(readFileSync25(manifestPath, "utf8"));
+    const parsed = JSON.parse(readFileSync27(manifestPath, "utf8"));
     return (parsed.skills ?? []).filter((s) => Boolean(s.id && s.file)).map((s) => ({
       id: s.id,
       title: s.title ?? s.id,
@@ -80610,7 +80769,7 @@ function ensureSkillGitignore(root) {
   const path2 = join31(root, ".gitignore");
   let current = "";
   try {
-    current = existsSync24(path2) ? readFileSync25(path2, "utf8") : "";
+    current = existsSync25(path2) ? readFileSync27(path2, "utf8") : "";
   } catch {
     return;
   }
@@ -80628,7 +80787,7 @@ ${GITIGNORE_LINES.join("\n")}
 var INTENT_TTL_MS = 15 * 60 * 1e3;
 function createIntentState(ttlMs = INTENT_TTL_MS) {
   const bySession = /* @__PURE__ */ new Map();
-  let recent2 = null;
+  let recent3 = null;
   const live3 = (s, nowMs) => s !== void 0 && nowMs - s.atMs < ttlMs;
   return {
     set(sessionId, text, nowMs) {
@@ -80636,8 +80795,8 @@ function createIntentState(ttlMs = INTENT_TTL_MS) {
       if (!trimmed) return false;
       const prev = bySession.get(sessionId);
       bySession.set(sessionId, { text: trimmed, atMs: nowMs });
-      const changed = !(recent2 && recent2.text === trimmed);
-      recent2 = { sessionId, text: trimmed, atMs: nowMs };
+      const changed = !(recent3 && recent3.text === trimmed);
+      recent3 = { sessionId, text: trimmed, atMs: nowMs };
       if (!changed && prev && prev.text === trimmed) return false;
       return changed;
     },
@@ -80646,12 +80805,12 @@ function createIntentState(ttlMs = INTENT_TTL_MS) {
       return live3(s, nowMs) ? s.text : void 0;
     },
     mostRecent(nowMs) {
-      if (!recent2) return void 0;
-      return nowMs - recent2.atMs < ttlMs ? recent2.text : void 0;
+      if (!recent3) return void 0;
+      return nowMs - recent3.atMs < ttlMs ? recent3.text : void 0;
     },
     clear(sessionId) {
       bySession.delete(sessionId);
-      if (recent2?.sessionId === sessionId) recent2 = null;
+      if (recent3?.sessionId === sessionId) recent3 = null;
     }
   };
 }
@@ -80659,19 +80818,19 @@ function createIntentState(ttlMs = INTENT_TTL_MS) {
 // src/working-file-state.ts
 function createWorkingFileState() {
   const bySession = /* @__PURE__ */ new Map();
-  let recent2 = null;
+  let recent3 = null;
   return {
     set(sessionId, rel) {
       bySession.set(sessionId, rel);
-      if (rel === recent2) return false;
-      recent2 = rel;
+      if (rel === recent3) return false;
+      recent3 = rel;
       return true;
     },
     get(sessionId) {
       return bySession.get(sessionId);
     },
     mostRecent() {
-      return recent2;
+      return recent3;
     }
   };
 }
@@ -80713,7 +80872,7 @@ init_paths();
 init_profile2();
 
 // src/witness-queue.ts
-import { readFileSync as readFileSync26, renameSync as renameSync2, writeFileSync as writeFileSync19 } from "node:fs";
+import { readFileSync as readFileSync28, renameSync as renameSync3, writeFileSync as writeFileSync19 } from "node:fs";
 import { dirname as dirname11, join as join32 } from "node:path";
 var WITNESS_QUEUE_CAP = 500;
 var WITNESS_TTL_MS = 14 * 24 * 60 * 60 * 1e3;
@@ -80724,7 +80883,7 @@ function witnessQueuePath(workspaceConfigDir) {
 function loadWitnessQueueWithLosses(path2) {
   let raw2;
   try {
-    raw2 = JSON.parse(readFileSync26(path2, "utf8"));
+    raw2 = JSON.parse(readFileSync28(path2, "utf8"));
   } catch (err2) {
     const absent = err2?.code === "ENOENT";
     return { queue: [], fileUnreadable: !absent, malformedEntries: 0 };
@@ -80739,7 +80898,7 @@ function saveWitnessQueue(path2, queue) {
   try {
     const tmp = join32(dirname11(path2), `.${Date.now()}.witness-queue.tmp`);
     writeFileSync19(tmp, JSON.stringify(queue), "utf8");
-    renameSync2(tmp, path2);
+    renameSync3(tmp, path2);
   } catch {
   }
 }
@@ -81045,7 +81204,7 @@ function maybeFlushDigests() {
 
 // src/liveness-watch.ts
 init_src5();
-import { readFileSync as readFileSync28, writeFileSync as writeFileSync21 } from "node:fs";
+import { readFileSync as readFileSync30, writeFileSync as writeFileSync21 } from "node:fs";
 import { join as join34 } from "node:path";
 
 // src/loop-lag.ts
@@ -81054,7 +81213,7 @@ var RECENT_PASS_LIMIT = 12;
 var active = /* @__PURE__ */ new Map();
 var nextPassId = 1;
 var started = false;
-var recent = [];
+var recent2 = [];
 function markPass(name2) {
   const id = nextPassId++;
   const startedAt = Date.now();
@@ -81064,8 +81223,8 @@ function markPass(name2) {
     if (ended) return;
     ended = true;
     active.delete(id);
-    recent.unshift({ name: name2, ms: Date.now() - startedAt, endedAt: Date.now() });
-    if (recent.length > RECENT_PASS_LIMIT) recent.pop();
+    recent2.unshift({ name: name2, ms: Date.now() - startedAt, endedAt: Date.now() });
+    if (recent2.length > RECENT_PASS_LIMIT) recent2.pop();
   };
 }
 function oldestActive() {
@@ -81079,7 +81238,7 @@ function passState() {
     current: oldest?.name ?? "idle",
     runningMs: oldest === null ? null : now - oldest.startedAt,
     active: [...active.values()].map((p) => ({ name: p.name, runningMs: now - p.startedAt })),
-    recent: [...recent]
+    recent: [...recent2]
   };
 }
 function describeHolders(running, finished, windowStart, now) {
@@ -81098,7 +81257,7 @@ function startLoopLagMonitor(thresholdMs = 1e3) {
     const now = Date.now();
     const lag = now - last - HEARTBEAT_MS;
     if (lag > thresholdMs) {
-      const who = describeHolders(active.values(), recent, last, now);
+      const who = describeHolders(active.values(), recent2, last, now);
       console.warn(
         `[loop-lag] ${(/* @__PURE__ */ new Date()).toISOString()} event loop held ~${(lag / 1e3).toFixed(1)}s during "${who}"`
       );
@@ -81181,7 +81340,7 @@ function alarmStatePath(configDir) {
 }
 function loadAlarmState(configDir) {
   try {
-    const raw2 = JSON.parse(readFileSync28(alarmStatePath(configDir), "utf8"));
+    const raw2 = JSON.parse(readFileSync30(alarmStatePath(configDir), "utf8"));
     return new Map(Object.entries(raw2).filter((e) => typeof e[1] === "number"));
   } catch {
     return /* @__PURE__ */ new Map();
@@ -81342,8 +81501,8 @@ function createWatchBreaker(deps) {
         windows2.set(watchedPath, w);
       }
       w.dispatched++;
-      const self = evPath == null || evPath === "" || typeof evPath === "string" && normalizeWatchPath(evPath) === normalizeWatchPath(watchedPath);
-      if (!self) return;
+      const self2 = evPath == null || evPath === "" || typeof evPath === "string" && normalizeWatchPath(evPath) === normalizeWatchPath(watchedPath);
+      if (!self2) return;
       w.self++;
       if (!w.tripped && !quarantined.has(watchedPath) && w.self >= BREAKER_TRIP_SELF_EVENTS) {
         w.tripped = true;
@@ -81358,7 +81517,7 @@ function createWatchBreaker(deps) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.16-dev.3343" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.16-dev.3362" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;
@@ -81370,8 +81529,8 @@ var CODEX_SWEEP_LOOKBACK_MS = 10 * 6e4;
 function appendIdentityAudit(path2, record2, line) {
   if (!record2.accepted && record2.score <= 0) return;
   try {
-    if (existsSync26(path2) && statSync8(path2).size >= IDENTITY_AUDIT_MAX_BYTES) {
-      renameSync3(path2, `${path2}.1`);
+    if (existsSync27(path2) && statSync8(path2).size >= IDENTITY_AUDIT_MAX_BYTES) {
+      renameSync4(path2, `${path2}.1`);
     }
     appendFileSync4(path2, line);
   } catch {
@@ -81380,7 +81539,7 @@ function appendIdentityAudit(path2, record2, line) {
 var yieldToLoop = () => new Promise((r) => setImmediate(r));
 function loadTurnCursors(path2) {
   try {
-    const raw2 = JSON.parse(readFileSync29(path2, "utf8"));
+    const raw2 = JSON.parse(readFileSync31(path2, "utf8"));
     return new Map(
       Object.entries(raw2).map(([k, v]) => [k, typeof v === "string" ? v : String(v?.uuid ?? "")])
     );
@@ -81390,7 +81549,7 @@ function loadTurnCursors(path2) {
 }
 function loadTurnOffsets(path2) {
   try {
-    const raw2 = JSON.parse(readFileSync29(path2, "utf8"));
+    const raw2 = JSON.parse(readFileSync31(path2, "utf8"));
     const out2 = /* @__PURE__ */ new Map();
     for (const [k, v] of Object.entries(raw2)) {
       const off = typeof v === "object" && v !== null ? v.offset : void 0;
@@ -81413,7 +81572,7 @@ function saveTurnCursors(path2, cursors, offsets) {
 function gitSourceWatchTargets(root) {
   const SOURCE = /\.(ts|tsx|js|jsx|mjs|cjs|py)$/i;
   try {
-    const lsOut = execFileSync4("git", ["-C", root, "ls-files", "-z"], {
+    const lsOut = execFileSync5("git", ["-C", root, "ls-files", "-z"], {
       encoding: "utf8",
       maxBuffer: 128 * 1024 * 1024,
       windowsHide: true,
@@ -81423,7 +81582,7 @@ function gitSourceWatchTargets(root) {
     if (sourceFiles.length === 0) throw new Error("no tracked source");
     let ignoredDirs = [];
     try {
-      const igOut = execFileSync4(
+      const igOut = execFileSync5(
         "git",
         ["-C", root, "ls-files", "--others", "--ignored", "--exclude-standard", "--directory", "-z"],
         { encoding: "utf8", maxBuffer: 256 * 1024 * 1024, windowsHide: true, stdio: ["ignore", "pipe", "ignore"] }
@@ -81695,7 +81854,7 @@ function createWorkspaceEngine(opts) {
       );
     };
     const gitDir = join35(opts.workspaceRoot, ".git");
-    if (existsSync26(gitDir)) {
+    if (existsSync27(gitDir)) {
       stopGit = startGitSensor(gitDir, (ev) => {
         void handleGitEvent(ev).catch((err2) => {
           console.warn("[errata] git event handler failed:", err2);
@@ -82496,7 +82655,7 @@ function createWorkspaceEngine(opts) {
             let anchorReadFailed = false;
             if (p.location) {
               try {
-                fileText = readFileSync29(join35(opts.workspaceRoot, p.location.path), "utf8");
+                fileText = readFileSync31(join35(opts.workspaceRoot, p.location.path), "utf8");
               } catch {
                 anchorReadFailed = true;
               }
@@ -82656,7 +82815,7 @@ function createWorkspaceEngine(opts) {
                     const headSha = readGitRefState(join35(opts.workspaceRoot, ".git")).sha ?? void 0;
                     enclosing = {
                       line: p.location.line,
-                      fileText: readFileSync29(join35(opts.workspaceRoot, anchorPath), "utf8"),
+                      fileText: readFileSync31(join35(opts.workspaceRoot, anchorPath), "utf8"),
                       ...headSha ? { headSha } : {}
                     };
                   } catch {
@@ -83238,7 +83397,7 @@ function createWorkspaceEngine(opts) {
       }
       turns = next.turns;
       nextOffset = next.nextOffset;
-      await new Promise((resolve7) => setImmediate(resolve7));
+      await new Promise((resolve8) => setImmediate(resolve8));
     }
   };
   const seenMessageIds = /* @__PURE__ */ new Set();
@@ -83785,7 +83944,7 @@ B: ${b}`,
         console.log(
           "[errata] sync skipped \u2014 cloud sync consent is off (enable with `errata consent sync on`)"
         );
-        const pending = existsSync26(paths.outbox) ? readdirSync10(paths.outbox).filter((f) => f.endsWith(".json")).length : 0;
+        const pending = existsSync27(paths.outbox) ? readdirSync10(paths.outbox).filter((f) => f.endsWith(".json")).length : 0;
         return { uploaded: 0, failed: 0, remaining: pending };
       }
       const onDisk = loadProfile(opts.workspaceRoot);
@@ -83793,7 +83952,7 @@ B: ${b}`,
         console.log(
           "[errata] sync held \u2014 this repo is already on errata in another workspace; run `errata link` to join it or create your own project"
         );
-        const pending = existsSync26(paths.outbox) ? readdirSync10(paths.outbox).filter((f) => f.endsWith(".json")).length : 0;
+        const pending = existsSync27(paths.outbox) ? readdirSync10(paths.outbox).filter((f) => f.endsWith(".json")).length : 0;
         return { uploaded: 0, failed: 0, remaining: pending };
       }
       try {
@@ -83865,6 +84024,7 @@ B: ${b}`,
 
 // src/daemon.ts
 async function startDaemon(opts) {
+  const processStartedAt = Date.now();
   const cfg = loadConfig();
   const merged = { ...cfg, cloudUrl: opts.cloudUrl ?? cfg.cloudUrl };
   if (opts.apiKey) {
@@ -83888,7 +84048,7 @@ async function startDaemon(opts) {
   const writeLockFile = (url2) => {
     writeFileSync23(
       engine.paths.daemonLock,
-      JSON.stringify({ pid: process.pid, webUiUrl: url2, startedAt: Date.now() }),
+      daemonLockPayload({ pid: process.pid, webUiUrl: url2, processStartedAt, version: DAEMON_VERSION }),
       "utf8"
     );
   };
@@ -83929,7 +84089,7 @@ async function startDaemon(opts) {
       );
       await engine.stop();
       try {
-        if (existsSync27(engine.paths.daemonLock)) {
+        if (existsSync28(engine.paths.daemonLock)) {
         }
       } catch {
       }
@@ -83937,9 +84097,9 @@ async function startDaemon(opts) {
   };
 }
 async function listenServer(fetchFn, port) {
-  return new Promise((resolve7) => {
+  return new Promise((resolve8) => {
     const server = serve({ fetch: fetchFn, hostname: "127.0.0.1", port }, (info2) => {
-      resolve7({ server, port: info2.port });
+      resolve8({ server, port: info2.port });
     });
   });
 }
@@ -84130,7 +84290,7 @@ function instanceReceiptSequence(n) {
 // src/multi.ts
 init_dist();
 init_src5();
-import { existsSync as existsSync33, readFileSync as readFileSync34, unlinkSync as unlinkSync3, writeFileSync as writeFileSync25 } from "node:fs";
+import { existsSync as existsSync33, readFileSync as readFileSync35, unlinkSync as unlinkSync5, writeFileSync as writeFileSync25 } from "node:fs";
 import { resolve as pathResolve } from "node:path";
 
 // src/principle-sync.ts
@@ -84159,7 +84319,7 @@ init_reconcile();
 
 // src/lockfile-auto.ts
 init_src();
-import { existsSync as existsSync28, readFileSync as readFileSync30 } from "node:fs";
+import { existsSync as existsSync29, readFileSync as readFileSync32 } from "node:fs";
 import { join as join36 } from "node:path";
 
 // src/package-index.ts
@@ -84310,10 +84470,10 @@ function runLockfilePass(opts) {
   ];
   for (const c of candidates) {
     const p = join36(opts.root, c.file);
-    if (!existsSync28(p)) continue;
+    if (!existsSync29(p)) continue;
     let sbom;
     try {
-      sbom = c.parse(readFileSync30(p, "utf8"));
+      sbom = c.parse(readFileSync32(p, "utf8"));
     } catch {
       continue;
     }
@@ -84373,7 +84533,7 @@ function noveltyAgainst(node2, neighbors, opts = {}) {
 init_profile2();
 
 // src/public-symbols.ts
-import { readFileSync as readFileSync31, readdirSync as readdirSync11, existsSync as existsSync29 } from "node:fs";
+import { readFileSync as readFileSync33, readdirSync as readdirSync11, existsSync as existsSync30 } from "node:fs";
 import { join as join37 } from "node:path";
 var HEAD_BYTES = 8 * 1024;
 var INDEX_TTL_MS = 10 * 60 * 1e3;
@@ -84408,9 +84568,9 @@ function internalPackageNames(workspaceRoot) {
   const names = /* @__PURE__ */ new Set();
   const tryRead = (dir) => {
     const pj = join37(dir, "package.json");
-    if (!existsSync29(pj)) return;
+    if (!existsSync30(pj)) return;
     try {
-      const name2 = JSON.parse(readFileSync31(pj, "utf8")).name;
+      const name2 = JSON.parse(readFileSync33(pj, "utf8")).name;
       if (typeof name2 === "string" && name2.length > 0) names.add(name2);
     } catch {
     }
@@ -84418,7 +84578,7 @@ function internalPackageNames(workspaceRoot) {
   tryRead(workspaceRoot);
   for (const group of ["packages", "apps"]) {
     const groupDir = join37(workspaceRoot, group);
-    if (!existsSync29(groupDir)) continue;
+    if (!existsSync30(groupDir)) continue;
     try {
       for (const entry of readdirSync11(groupDir)) tryRead(join37(groupDir, entry));
     } catch {
@@ -84439,7 +84599,7 @@ function publicSymbolIndex(store, workspaceRoot, deps = {}) {
   }
   const readHead = deps.readHead ?? ((absPath) => {
     try {
-      return readFileSync31(absPath, "utf8").slice(0, HEAD_BYTES);
+      return readFileSync33(absPath, "utf8").slice(0, HEAD_BYTES);
     } catch {
       return "";
     }
@@ -85152,8 +85312,8 @@ var ConsolidateWorker = class {
       const id = this.nextId++;
       try {
         await this.ready;
-        return await new Promise((resolve7, reject) => {
-          this.pending.set(id, { resolve: resolve7, reject });
+        return await new Promise((resolve8, reject) => {
+          this.pending.set(id, { resolve: resolve8, reject });
           this.worker.postMessage({ ...req, id });
         });
       } finally {
@@ -85182,12 +85342,12 @@ var ConsolidateWorker = class {
     });
     noteIsolateSpawned();
     this.worker = worker;
-    this.ready = new Promise((resolve7, reject) => {
+    this.ready = new Promise((resolve8, reject) => {
       const onReady = (m) => {
         if (m?.ready) {
           worker.off("message", onReady);
           worker.off("error", onErr);
-          resolve7();
+          resolve8();
         }
       };
       const onErr = (err2) => {
@@ -85266,63 +85426,13 @@ function cloudTargetDrift(daemon, shell2) {
   return out2;
 }
 
-// src/lock.ts
-import { existsSync as existsSync30, readFileSync as readFileSync32 } from "node:fs";
-function daemonLockPayload(lock) {
-  return JSON.stringify({
-    pid: lock.pid,
-    webUiUrl: lock.webUiUrl,
-    startedAt: lock.processStartedAt,
-    ...lock.wokeAt !== void 0 ? { wokeAt: lock.wokeAt } : {},
-    ...lock.entry ? { entry: lock.entry } : {},
-    ...lock.version ? { version: lock.version } : {}
-  });
-}
-var normEntry = (p) => {
-  const s = p.replace(/\\/g, "/").replace(/\/+$/, "");
-  return /^[A-Za-z]:\//.test(s) ? s.toLowerCase() : s;
-};
-function isInstalledEntry(entry) {
-  return /\/node_modules\/@inerrata-corporation\/errata\//.test(normEntry(entry) + "/");
-}
-function foreignDaemonNote(lock, selfEntry) {
-  if (!lock.entry || normEntry(lock.entry) === normEntry(selfEntry)) return null;
-  const runningInstalled = isInstalledEntry(lock.entry);
-  const head2 = [
-    `launched from ${runningInstalled ? "the installed package" : "a LOCAL BUILD"}, not this one${lock.version ? ` (it is ${lock.version})` : ""}:`,
-    `  running: ${lock.entry}`,
-    `  this:    ${selfEntry}`
-  ];
-  return runningInstalled ? [...head2, "this CLI is a different bundle from the daemon it is talking to \u2014 its view may not match what the daemon runs."] : [...head2, "`errata update` does not replace it. To move onto the installed package: errata stop, then errata dash."];
-}
-function isProcessAlive(pid) {
-  if (!pid || pid <= 0) return false;
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch (err2) {
-    return err2.code === "EPERM";
-  }
-}
-function readDaemonLock(lockPath) {
-  if (!existsSync30(lockPath)) return null;
-  try {
-    const lock = JSON.parse(readFileSync32(lockPath, "utf8"));
-    return typeof lock.pid === "number" ? lock : null;
-  } catch {
-    return null;
-  }
-}
-function isDaemonAlive(lockPath) {
-  const lock = readDaemonLock(lockPath);
-  return lock !== null && isProcessAlive(lock.pid);
-}
-
 // src/multi.ts
+init_lock();
 init_config();
 
 // src/update.ts
 import { spawn as spawn2 } from "node:child_process";
+import { isAbsolute as isAbsolute5, join as join38 } from "node:path";
 var PACKAGE_NAME = "@inerrata-corporation/errata";
 function parse3(v) {
   const m = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z][0-9A-Za-z.-]*))?/.exec(v.trim());
@@ -85442,13 +85552,40 @@ function startUpdatePoller(opts) {
   };
 }
 function runNpmInstall(channel) {
-  return new Promise((resolve7) => {
+  return new Promise((resolve8) => {
     const child = spawn2("npm", ["install", "-g", `${PACKAGE_NAME}@${channel}`], {
       stdio: "inherit",
       shell: true
     });
-    child.on("close", (code) => resolve7(code ?? 1));
-    child.on("error", () => resolve7(1));
+    child.on("close", (code) => resolve8(code ?? 1));
+    child.on("error", () => resolve8(1));
+  });
+}
+async function runInstalledHookRefresh() {
+  const root = await new Promise((resolve8) => {
+    const child = spawn2("npm", ["root", "-g"], {
+      shell: true,
+      windowsHide: true,
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: 15e3
+    });
+    let output = "";
+    child.stdout.on("data", (chunk) => {
+      output += chunk;
+      if (output.length > 32768) child.kill();
+    });
+    child.on("error", () => resolve8(""));
+    child.on("close", (code) => resolve8(code === 0 ? output.trim() : ""));
+  });
+  if (!isAbsolute5(root)) return 1;
+  return new Promise((resolve8) => {
+    const child = spawn2(process.execPath, [join38(root, PACKAGE_NAME, "errata.mjs"), "install-hooks", "codex", "--refresh-existing"], {
+      windowsHide: true,
+      stdio: "inherit",
+      timeout: 3e4
+    });
+    child.on("error", () => resolve8(1));
+    child.on("close", (code) => resolve8(code ?? 1));
   });
 }
 
@@ -85463,7 +85600,7 @@ function liveCloudClient(src) {
   let current = null;
   let currentKey = "";
   let checkedAt = -Infinity;
-  const resolve7 = () => {
+  const resolve8 = () => {
     const t = now();
     if (current && t - checkedAt < recheckMs) return current;
     checkedAt = t;
@@ -85483,7 +85620,7 @@ function liveCloudClient(src) {
   };
   return new Proxy({}, {
     get(_target, prop) {
-      const client = resolve7();
+      const client = resolve8();
       const value = Reflect.get(client, prop, client);
       return typeof value === "function" ? value.bind(client) : value;
     }
@@ -85918,7 +86055,7 @@ async function syncHistoryRevision(opts) {
       changed += result.changed;
       remaining = result.remaining;
       if (!remaining || Date.now() - started2 >= (opts.budgetMs ?? 45e3)) break;
-      await new Promise((resolve7) => setImmediate(resolve7));
+      await new Promise((resolve8) => setImmediate(resolve8));
     }
     return { changed, remaining };
   })();
@@ -86021,8 +86158,8 @@ async function syncHistoryRevisionPage(opts) {
 init_src7();
 init_src();
 import { execFile as execFile5 } from "node:child_process";
-import { readFileSync as readFileSync33 } from "node:fs";
-import { join as join38 } from "node:path";
+import { readFileSync as readFileSync34 } from "node:fs";
+import { join as join39 } from "node:path";
 import { promisify as promisify3 } from "node:util";
 
 // src/history-walk.ts
@@ -86422,8 +86559,8 @@ var GitBlobReader = class {
     if (this.failed) return Promise.reject(this.failed);
     if (/[\r\n]/.test(spec)) return Promise.resolve(null);
     const proc = this.start();
-    return new Promise((resolve7, reject) => {
-      this.queue.push({ resolve: resolve7, reject });
+    return new Promise((resolve8, reject) => {
+      this.queue.push({ resolve: resolve8, reject });
       proc.stdin.write(`${spec}
 `);
     });
@@ -86437,14 +86574,14 @@ var GitBlobReader = class {
     const proc = this.proc;
     this.proc = null;
     if (!proc || proc.exitCode !== null) return Promise.resolve();
-    return new Promise((resolve7) => {
+    return new Promise((resolve8) => {
       const timer = setTimeout(() => {
         proc.kill();
-        resolve7();
+        resolve8();
       }, timeoutMs);
       proc.once("exit", () => {
         clearTimeout(timer);
-        resolve7();
+        resolve8();
       });
       proc.stdin.end();
     });
@@ -86569,7 +86706,7 @@ async function defaultGit(root, args2) {
 function readIgnoreLines(root, profile) {
   let lines = [];
   try {
-    lines = readFileSync33(join38(root, ".errataignore"), "utf8").split("\n");
+    lines = readFileSync34(join39(root, ".errataignore"), "utf8").split("\n");
   } catch {
   }
   return [...lines, ...profile.ignoreExtra ?? []].map((l) => l.trim()).filter((l) => l && !l.startsWith("#"));
@@ -86998,9 +87135,9 @@ async function startHistoryStage(root, input, client, walk11 = {}) {
 // src/link-flow.ts
 init_cloud_auth();
 import { createHash as createHash19 } from "node:crypto";
-import { execFileSync as execFileSync5 } from "node:child_process";
+import { execFileSync as execFileSync6 } from "node:child_process";
 import { existsSync as existsSync31, writeFileSync as writeFileSync24 } from "node:fs";
-import { join as join39 } from "node:path";
+import { join as join40 } from "node:path";
 
 // src/device-poll.ts
 var THROTTLED_POLL_MIN_WAIT_MS = 11e3;
@@ -87089,7 +87226,7 @@ async function loginOAuthDevice(opts) {
   let deviceSession = null;
   let approvedInstallation = null;
   while (Date.now() < deadline) {
-    await (opts.sleep ?? ((ms) => new Promise((resolve7) => setTimeout(resolve7, ms))))(waitMs);
+    await (opts.sleep ?? ((ms) => new Promise((resolve8) => setTimeout(resolve8, ms))))(waitMs);
     waitMs = intervalMs;
     const poll = await fetchDevicePoll(fetchFn, device.token, {
       method: "POST",
@@ -87214,7 +87351,7 @@ async function loginOAuthLoopback(opts) {
   const state = randomState();
   const scope = opts.scope ?? DEFAULT_OAUTH_SCOPE;
   const { code, redirectUri, clientId } = await new Promise(
-    (resolve7, reject) => {
+    (resolve8, reject) => {
       const server = createServer((req, res) => {
         const u = new URL(req.url ?? "/", "http://127.0.0.1");
         if (u.pathname !== "/callback") {
@@ -87237,7 +87374,7 @@ async function loginOAuthLoopback(opts) {
         res.writeHead(200, { "content-type": "text/html" });
         res.end("<html><body>inErrata: you're logged in. You can close this tab.</body></html>");
         server.close();
-        resolve7({ code: code2, redirectUri: `http://127.0.0.1:${port}/callback`, clientId: activeClientId });
+        resolve8({ code: code2, redirectUri: `http://127.0.0.1:${port}/callback`, clientId: activeClientId });
       });
       let activeClientId = oauthClientId();
       server.on("error", reject);
@@ -87336,7 +87473,7 @@ async function linkThroughConsole(opts) {
   const deadline = Date.now() + Math.min(code.expires_in * 1e3, opts.timeoutMs ?? Number.POSITIVE_INFINITY);
   let intervalMs = Math.max(2, code.interval ?? 5) * 1e3;
   let waitMs = intervalMs;
-  const sleep = opts.sleep ?? ((ms) => new Promise((resolve7) => setTimeout(resolve7, ms)));
+  const sleep = opts.sleep ?? ((ms) => new Promise((resolve8) => setTimeout(resolve8, ms)));
   while (Date.now() < deadline) {
     await sleep(waitMs);
     waitMs = intervalMs;
@@ -87386,7 +87523,7 @@ async function linkThroughConsole(opts) {
 function collectRepoFacts(root) {
   const git3 = (args2) => {
     try {
-      return execFileSync5("git", args2, { cwd: root, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+      return execFileSync6("git", args2, { cwd: root, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
     } catch {
       return null;
     }
@@ -87458,7 +87595,7 @@ function applyLinkDecision(root, profile, config2, decision, now = Date.now) {
   delete nextProfile.projectLinkHold;
   let wroteIgnore = false;
   if (decision.writeIgnoreStarter !== false) {
-    const target = join39(root, ".errataignore");
+    const target = join40(root, ".errataignore");
     if (!existsSync31(target)) {
       writeFileSync24(target, IGNORE_STARTER, "utf8");
       wroteIgnore = true;
@@ -87474,11 +87611,11 @@ init_registry();
 // src/adopt.ts
 init_git_remote();
 import { existsSync as existsSync32 } from "node:fs";
-import { dirname as dirname12, join as join40 } from "node:path";
+import { dirname as dirname12, join as join41 } from "node:path";
 function findGitRoot(absPath) {
   let dir = absPath;
   for (let depth = 0; depth < 64; depth++) {
-    if (existsSync32(join40(dir, ".git"))) return dir;
+    if (existsSync32(join41(dir, ".git"))) return dir;
     const parent = dirname12(dir);
     if (parent === dir) return null;
     dir = parent;
@@ -87820,9 +87957,9 @@ function ownerOf(records, absPath) {
 }
 async function startMultiDaemon(opts = {}) {
   const lockPath = globalDaemonLock();
-  if (opts.enforceSingleton !== false && isDaemonAlive(lockPath)) {
+  if (opts.enforceSingleton !== false && daemonLockBlocksStartup(lockPath)) {
     throw new Error(
-      `an errata daemon is already running (lock: ${lockPath}). Run \`errata stop\` first, or attach to the running one.`
+      `a daemon lock is live or its process ownership cannot be verified (lock: ${lockPath}). Run \`errata doctor\` to inspect it, or \`errata stop\` to stop a verified owner.`
     );
   }
   const cfg = loadConfig();
@@ -88771,7 +88908,7 @@ async function startMultiDaemon(opts = {}) {
   const packageAutoAll = async () => {
     const out2 = /* @__PURE__ */ new Map();
     for (const r of records) {
-      await new Promise((resolve7) => setImmediate(resolve7));
+      await new Promise((resolve8) => setImmediate(resolve8));
       const done = markPass(`package-index:${r.entry.name}`);
       try {
         out2.set(
@@ -89509,8 +89646,8 @@ async function startMultiDaemon(opts = {}) {
       clearInterval(anchorPull);
       clearTimeout(codexWakeBoot);
       try {
-        const cur = readFileSync34(lockPath, "utf8");
-        if (JSON.parse(cur).pid === process.pid) unlinkSync3(lockPath);
+        const cur = readFileSync35(lockPath, "utf8");
+        if (JSON.parse(cur).pid === process.pid) unlinkSync5(lockPath);
       } catch {
       }
       await new Promise(
@@ -89870,6 +90007,7 @@ function openInBrowser(url2) {
 // src/cli.ts
 init_paths();
 init_checkout_root();
+init_lock();
 
 // src/cli-args.ts
 var BURST_VALUE_FLAGS = /* @__PURE__ */ new Set(["--limit", "--hops", "--max-hops"]);
@@ -89932,7 +90070,7 @@ import { spawnSync } from "node:child_process";
 
 // src/codex-runtime.ts
 import { readdirSync as readdirSync12, statSync as statSync9 } from "node:fs";
-import { join as join41 } from "node:path";
+import { join as join42 } from "node:path";
 function resolveCodexExecutable(options = {}) {
   const platform = options.platform ?? process.platform;
   const env2 = options.env ?? process.env;
@@ -89947,13 +90085,13 @@ function resolveCodexExecutable(options = {}) {
   };
   for (const dir of (env2["PATH"] ?? env2["Path"] ?? "").split(";")) {
     if (!dir.trim()) continue;
-    const path2 = join41(dir.trim().replace(/^"|"$/g, ""), "codex.exe");
+    const path2 = join42(dir.trim().replace(/^"|"$/g, ""), "codex.exe");
     if (fileTime(path2) !== null) return path2;
   }
   if (!env2["LOCALAPPDATA"]) return "codex";
-  const root = join41(env2["LOCALAPPDATA"], "OpenAI", "Codex", "bin");
+  const root = join42(env2["LOCALAPPDATA"], "OpenAI", "Codex", "bin");
   try {
-    const candidates = readdirSync12(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => join41(root, entry.name, "codex.exe")).map((path2) => ({ path: path2, mtime: fileTime(path2) })).filter((candidate) => candidate.mtime !== null).sort((a, b) => b.mtime - a.mtime || a.path.localeCompare(b.path));
+    const candidates = readdirSync12(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => join42(root, entry.name, "codex.exe")).map((path2) => ({ path: path2, mtime: fileTime(path2) })).filter((candidate) => candidate.mtime !== null).sort((a, b) => b.mtime - a.mtime || a.path.localeCompare(b.path));
     return candidates[0]?.path ?? "codex";
   } catch {
     return "codex";
@@ -90069,12 +90207,14 @@ async function diagnoseInstallation(cfg, dependencies) {
 
 // src/codex-doctor.ts
 import { spawn as spawn4 } from "node:child_process";
+import { readFileSync as readFileSync37, statSync as statSync10 } from "node:fs";
+import { join as join44 } from "node:path";
 import { createInterface } from "node:readline";
 
 // src/codex-hooks.ts
-import { existsSync as existsSync34, mkdirSync as mkdirSync9, readFileSync as readFileSync35, writeFileSync as writeFileSync26 } from "node:fs";
+import { existsSync as existsSync34, mkdirSync as mkdirSync9, readFileSync as readFileSync36, renameSync as renameSync5, unlinkSync as unlinkSync6, writeFileSync as writeFileSync26 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
-import { join as join42 } from "node:path";
+import { join as join43 } from "node:path";
 
 // src/hook-commands.ts
 function hookCurlCommand(port, path2 = "/api/hook") {
@@ -90098,15 +90238,27 @@ function buildCodexHooksToml(port, options) {
   };
   if (!Number.isInteger(port) || port < 1 || port > 65535) throw new Error("Invalid hook port");
   const command = (platform === "win32" ? "& " : "") + quote(options.nodePath) + " " + quote(options.relayPath) + " " + port;
-  const handlers = ["SessionStart", "UserPromptSubmit", "PreToolUse", "PostToolUse", "Stop"].map(
-    (event) => "[[hooks." + event + "]]\n" + (["UserPromptSubmit", "Stop"].includes(event) ? "" : 'matcher = ".*"\n') + "\n[[hooks." + event + '.hooks]]\ntype = "command"\ncommand = ' + JSON.stringify(command) + "\ntimeout = 10\n" + (event === "Stop" ? "" : "additionalContextLimit = 5000\n")
+  const status = {
+    SessionStart: "errata: loading workspace priors",
+    UserPromptSubmit: "errata: checking workspace priors",
+    PreToolUse: "errata: checking relevant priors",
+    PostToolUse: "errata: capturing feedback and checking priors",
+    Stop: "errata: capturing session feedback"
+  };
+  const handlers = Object.keys(status).map(
+    (event) => "[[hooks." + event + "]]\n" + (["UserPromptSubmit", "Stop"].includes(event) ? "" : 'matcher = ".*"\n') + "\n[[hooks." + event + '.hooks]]\ntype = "command"\ncommand = ' + JSON.stringify(command) + "\nstatusMessage = " + JSON.stringify(status[event]) + "\ntimeout = 10\n" + (event === "Stop" ? "" : "additionalContextLimit = 5000\n")
   );
   return CODEX_HOOKS_BEGIN + "\n" + handlers.join("\n") + CODEX_HOOKS_END + "\n";
 }
 
 // src/codex-hook-relay.ts
 var CODEX_RELAY_SOURCE = String.raw`// errata-managed: regenerated by errata install-hooks codex
-import { readFileSync } from 'node:fs';
+import { mkdirSync, readFileSync, renameSync, statSync, writeFileSync } from 'node:fs';
+import { createHash } from 'node:crypto';
+import { join } from 'node:path';
+const workspaceRoot = null;
+// Stdout closing early is not delivery. Never stamp a receipt on EPIPE.
+process.stdout.on('error', () => process.exit(0));
 
 try {
   const payload = JSON.parse(readFileSync(0, 'utf8') || '{}');
@@ -90118,43 +90270,124 @@ try {
   if (!Number.isInteger(port) || port < 1 || port > 65535) process.exit(0);
   const contexts = [];
   const messages = [];
+  const hash = (text) => createHash('sha256').update(text).digest('hex');
+  const boundedRead = (path, max) => statSync(path).size <= max ? readFileSync(path, 'utf8') : '';
+  const stateDir = workspaceRoot && join(workspaceRoot, '.errata', 'codex-hook-state');
+  const statePath = stateDir && typeof payload.session_id === 'string' && payload.session_id
+    ? join(stateDir, hash(payload.session_id) + '.json') : null;
+  let previous = {};
+  try {
+    if (statePath) {
+      const saved = JSON.parse(boundedRead(statePath, 4096));
+      if (saved && typeof saved === 'object') previous = saved;
+    }
+  } catch {}
+  let receipt = null;
   const post = async (endpoint, relay = false) => {
     try {
       const response = await fetch('http://127.0.0.1:' + port + '/api/' + endpoint, {
         method: 'POST', headers: { 'Content-Type': 'application/json' },
         body: JSON.stringify(payload), signal: AbortSignal.timeout(2000),
       });
-      if (!response.ok || !relay) return;
+      if (!response.ok) return false;
+      if (!relay) return true;
       const result = await response.json();
       const context = result.hookSpecificOutput?.additionalContext;
       if (typeof context === 'string' && context.trim()) contexts.push(context);
-      // The user-visible recall card; Codex renders it inline as '↳ Hook · …'.
+      // Codex exposes systemMessage to the UI/event stream; styling is host-owned.
       if (typeof result.systemMessage === 'string' && result.systemMessage.trim()) messages.push(result.systemMessage);
-    } catch { /* An unavailable daemon must never block the agent. */ }
+      return true;
+    } catch { return false; /* An unavailable daemon must never block the agent. */ }
   };
   if (event === 'PreToolUse' || event === 'PostToolUse') await post('hook', true);
   // Stop sees the final assistant message, including turns with no tools.
   if (event === 'PostToolUse' || event === 'Stop') await post('turn');
-  if (['SessionStart', 'UserPromptSubmit', 'PostToolUse'].includes(event)) {
-    // Run after capture, so changes already rendered by the daemon arrive now.
-    // Background extraction finishing later arrives at the next tool boundary.
+  if (['SessionStart', 'UserPromptSubmit'].includes(event)) {
+    // Wake/route the engine, bounded independently of context delivery. Older
+    // daemons may stamp their HTTP dedup gate before a timed-out response arrives;
+    // that gate is deliberately NOT authoritative for this file-based relay.
+    await post('context-inject', !workspaceRoot);
+  }
+  if (workspaceRoot && ['SessionStart', 'UserPromptSubmit', 'PostToolUse'].includes(event)) {
+    let body = '';
+    try { body = boundedRead(join(workspaceRoot, '.errata', 'context.md'), 128 * 1024).trim(); } catch {}
+    if (body) {
+      const digest = hash(body.replace(/\r\n?/g, '\n')).slice(0, 16);
+      // Receipt is local to this graph + session, survives daemon restarts, and
+      // records stdout emission, not a server's intention to send a response.
+      if (event === 'SessionStart' || previous.hash !== digest) {
+        contexts.push('Errata loaded the maintained local workspace context. This block REPLACES any earlier errata context block in this conversation. It is the latest saved snapshot; the daemon maintains it as work proceeds.\n\n' + body);
+        if (!/^(0|off|false|no)$/i.test((process.env.ERRATA_RECALL_CARD || '').trim())) {
+          try {
+            const card = JSON.parse(boundedRead(join(workspaceRoot, '.errata', 'context-card.json'), 128 * 1024));
+            if (card.hash === digest && typeof card.line === 'string' && card.line) messages.push(card.line);
+          } catch { /* Never show a card for a different snapshot. */ }
+        }
+        receipt = { hash: digest, at: Date.now() };
+      }
+    } else if (event === 'SessionStart' || !previous.unavailable) {
+      messages.push('errata: workspace priors are unavailable; run errata doctor in this checkout.');
+      receipt = { unavailable: true, at: Date.now() };
+    }
+  } else if (!workspaceRoot && event === 'PostToolUse') {
     await post('context-inject', true);
   }
   if (contexts.length || messages.length) {
-    process.stdout.write(JSON.stringify({
+    await new Promise((resolve) => process.stdout.write(JSON.stringify({
       ...(messages.length ? { systemMessage: messages.join('\n\n') } : {}),
       ...(contexts.length ? { hookSpecificOutput: {
         hookEventName: event, additionalContext: contexts.join('\n\n'),
       } } : {}),
+    }), (error) => {
+      if (!error && receipt && statePath) {
+        try {
+          mkdirSync(stateDir, { recursive: true });
+          const temp = statePath + '.' + process.pid + '.tmp';
+          writeFileSync(temp, JSON.stringify(receipt), { mode: 0o600 });
+          renameSync(temp, statePath);
+        } catch { /* Read-only workspace: retry next time rather than drop context. */ }
+      }
+      resolve();
     }));
   }
 } catch { /* Invalid input is also fail-open. */ }
 `;
+function buildCodexRelaySource(workspaceRoot) {
+  return CODEX_RELAY_SOURCE.replace("const workspaceRoot = null;", () => `const workspaceRoot = ${JSON.stringify(workspaceRoot)};`);
+}
 
 // src/codex-hooks.ts
+init_checkout_root();
 var CODEX_HOOK_REVIEW_HELP = "Codex desktop: Settings > Hooks, select this project, expand each event and Trust the Errata hook. CLI users can use /hooks.";
-function hasCodexConfig(root, codexHome = process.env["CODEX_HOME"] || join42(homedir7(), ".codex")) {
-  return existsSync34(join42(root, ".codex")) || existsSync34(codexHome);
+function writeRelay(file2, source) {
+  if (existsSync34(file2) && readFileSync36(file2, "utf8") === source) return;
+  const temp = `${file2}.${process.pid}.tmp`;
+  try {
+    writeFileSync26(temp, source, { encoding: "utf8", mode: 384 });
+    renameSync5(temp, file2);
+  } finally {
+    if (existsSync34(temp)) unlinkSync6(temp);
+  }
+}
+function refreshCodexRelay(root) {
+  const config2 = join43(root, ".codex", "config.toml");
+  if (!existsSync34(config2)) return "absent";
+  const existing = readFileSync36(config2, "utf8");
+  if (!existing.includes(CODEX_HOOKS_BEGIN) && !existing.includes(CODEX_HOOKS_END)) return "absent";
+  replaceCodexHooks(existing, "");
+  const relay = join43(root, ".codex", "hooks", "errata-relay.mjs");
+  const prior = existsSync34(relay) ? readFileSync36(relay, "utf8") : "";
+  if (prior && !prior.startsWith("// errata-managed: regenerated by errata install-hooks codex")) {
+    throw new Error("Codex relay is not Errata-managed; preserved it. Run errata install-hooks codex to explicitly replace it.");
+  }
+  const source = buildCodexRelaySource(checkoutRootOf(root));
+  if (prior === source) return "current";
+  mkdirSync9(join43(root, ".codex", "hooks"), { recursive: true });
+  writeRelay(relay, source);
+  return "updated";
+}
+function hasCodexConfig(root, codexHome = process.env["CODEX_HOME"] || join43(homedir7(), ".codex")) {
+  return existsSync34(join43(root, ".codex")) || existsSync34(codexHome);
 }
 function replaceCodexHooks(existing, block) {
   const begin = existing.indexOf(CODEX_HOOKS_BEGIN);
@@ -90170,20 +90403,43 @@ function replaceCodexHooks(existing, block) {
   return existing.trimEnd() + (existing.trim() ? "\n\n" : "") + block;
 }
 function writeCodexHooks(root, port, nodePath = process.execPath) {
-  const dir = join42(root, ".codex");
-  const file2 = join42(dir, "config.toml");
-  const relay = join42(dir, "hooks", "errata-relay.mjs");
+  const dir = join43(root, ".codex");
+  const file2 = join43(dir, "config.toml");
+  const relay = join43(dir, "hooks", "errata-relay.mjs");
   const block = buildCodexHooksToml(port, { nodePath, relayPath: relay });
-  const final = replaceCodexHooks(existsSync34(file2) ? readFileSync35(file2, "utf8") : "", block);
-  mkdirSync9(join42(dir, "hooks"), { recursive: true });
-  writeFileSync26(relay, CODEX_RELAY_SOURCE, "utf8");
-  writeFileSync26(file2, final, "utf8");
+  const final = replaceCodexHooks(existsSync34(file2) ? readFileSync36(file2, "utf8") : "", block);
+  mkdirSync9(join43(dir, "hooks"), { recursive: true });
+  writeRelay(relay, buildCodexRelaySource(checkoutRootOf(root)));
+  if (!existsSync34(file2) || readFileSync36(file2, "utf8") !== final) writeFileSync26(file2, final, "utf8");
   return file2;
 }
 
 // src/codex-doctor.ts
+init_checkout_root();
+function inspectCodexRelay(cwd) {
+  const root = nearestGitRoot(cwd) ?? cwd;
+  try {
+    const source = readFileSync37(join44(root, ".codex", "hooks", "errata-relay.mjs"), "utf8");
+    if (source === buildCodexRelaySource(checkoutRootOf(root))) {
+      return { id: "codex_relay", status: "pass", detail: "Installed Codex relay matches this Errata version" };
+    }
+  } catch {
+  }
+  return { id: "codex_relay", status: "fail", detail: "Codex relay is missing or outdated; run errata install-hooks codex --refresh-existing, or errata install-hooks codex for a new setup" };
+}
+function inspectCodexContext(cwd) {
+  const root = checkoutRootOf(nearestGitRoot(cwd) ?? cwd);
+  try {
+    const file2 = join44(root, ".errata", "context.md");
+    if (statSync10(file2).size <= 128 * 1024 && readFileSync37(file2, "utf8").trim()) {
+      return { id: "codex_context", status: "pass", detail: "Saved workspace context is readable by the relay; this does not prove live daemon freshness" };
+    }
+  } catch {
+  }
+  return { id: "codex_context", status: "fail", detail: "No usable saved workspace context; run errata start here and check the daemon log if context.md remains unavailable" };
+}
 function readCodexHookState(cwd, options = {}) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve8, reject) => {
     const child = spawn4(options.bin ?? resolveCodexExecutable(), options.args ?? ["app-server", "--stdio"], {
       cwd,
       windowsHide: true,
@@ -90199,9 +90455,14 @@ function readCodexHookState(cwd, options = {}) {
       settled = true;
       clearTimeout(timer);
       lines.close();
+      const reap = setTimeout(() => child.kill("SIGKILL"), 1e3);
+      reap.unref();
+      child.once("close", () => {
+        clearTimeout(reap);
+        if (error48) reject(error48);
+        else resolve8({ ...hooks, features });
+      });
       child.kill();
-      if (error48) reject(error48);
-      else resolve7({ ...hooks, features });
     };
     const timer = setTimeout(() => finish(new Error("Codex hook inspection timed out")), options.timeoutMs ?? 1e4);
     const send = (id, method, params) => {
@@ -90266,10 +90527,11 @@ function assessCodexHooks(state, platform = process.platform) {
   return checks.length ? checks : check2("pass", "Codex discovers enabled, trusted Errata hooks; verify live context and capture in a session");
 }
 async function diagnoseCodexHooks(cwd) {
+  const local = [inspectCodexRelay(cwd), inspectCodexContext(cwd)];
   try {
-    return assessCodexHooks(await readCodexHookState(cwd));
+    return [...local, ...assessCodexHooks(await readCodexHookState(cwd))];
   } catch (error48) {
-    return [{ id: "codex_hooks", status: "fail", detail: error48 instanceof Error ? error48.message : "Cannot verify Codex hooks" }];
+    return [...local, { id: "codex_hooks", status: "fail", detail: error48 instanceof Error ? error48.message : "Cannot verify Codex hooks" }];
   }
 }
 
@@ -90343,10 +90605,51 @@ function consolidationGapMs(lastPassMs, policy) {
   return Math.max(policy.baseFloorMs, lastPassMs * policy.dutyFactor);
 }
 
+// src/codex-hook-refresh.ts
+init_checkout_root();
+import { existsSync as existsSync35, readdirSync as readdirSync13, readFileSync as readFileSync38 } from "node:fs";
+import { dirname as dirname13, join as join45, resolve as resolve7 } from "node:path";
+init_registry();
+function codexHookRoots(roots) {
+  const found = new Set(roots.map((root) => resolve7(root)));
+  for (const root of [...found]) {
+    const main2 = mainCheckoutOfWorktree(root) ?? root;
+    found.add(main2);
+    const dir = join45(main2, ".git", "worktrees");
+    if (!existsSync35(dir)) continue;
+    let names;
+    try {
+      names = readdirSync13(dir);
+    } catch {
+      continue;
+    }
+    for (const name2 of names) {
+      try {
+        const checkout = dirname13(readFileSync38(join45(dir, name2, "gitdir"), "utf8").trim());
+        if (mainCheckoutOfWorktree(checkout) === main2) found.add(checkout);
+      } catch {
+      }
+    }
+  }
+  return [...found];
+}
+function refreshInstalledCodexRelays(roots = listWorkspaceEntries().map((entry) => entry.path)) {
+  const results = [];
+  for (const root of codexHookRoots(roots)) {
+    try {
+      const status = refreshCodexRelay(root);
+      if (status !== "absent") results.push({ root, status });
+    } catch (error48) {
+      results.push({ root, status: "error", detail: error48 instanceof Error ? error48.message : String(error48) });
+    }
+  }
+  return results;
+}
+
 // src/claude-statusline.ts
-import { existsSync as existsSync35, mkdirSync as mkdirSync10, readFileSync as readFileSync36, writeFileSync as writeFileSync27 } from "node:fs";
+import { existsSync as existsSync36, mkdirSync as mkdirSync10, readFileSync as readFileSync39, writeFileSync as writeFileSync27 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
-import { dirname as dirname13, join as join43 } from "node:path";
+import { dirname as dirname14, join as join46 } from "node:path";
 var STATUSLINE_RELAY_SOURCE = String.raw`// errata-managed: regenerated by errata init / install-hooks claude
 import { readFileSync } from 'node:fs';
 
@@ -90379,8 +90682,8 @@ function removeProjectStatusLine(settings) {
   return true;
 }
 function userClaudeSettingsPath() {
-  const base = process.env["CLAUDE_CONFIG_DIR"] ?? join43(homedir8(), ".claude");
-  return join43(base, "settings.json");
+  const base = process.env["CLAUDE_CONFIG_DIR"] ?? join46(homedir8(), ".claude");
+  return join46(base, "settings.json");
 }
 function ensureUserStatusLine(opts) {
   const env2 = opts.env ?? process.env;
@@ -90388,9 +90691,9 @@ function ensureUserStatusLine(opts) {
   if (off === "0" || off === "off" || off === "false" || off === "no") return "disabled";
   const settingsPath = opts.userSettingsPath ?? userClaudeSettingsPath();
   let settings = {};
-  if (existsSync35(settingsPath)) {
+  if (existsSync36(settingsPath)) {
     try {
-      const parsed = JSON.parse(readFileSync36(settingsPath, "utf8"));
+      const parsed = JSON.parse(readFileSync39(settingsPath, "utf8"));
       if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return "unreadable";
       settings = parsed;
     } catch {
@@ -90398,15 +90701,15 @@ function ensureUserStatusLine(opts) {
     }
   }
   if (settings["statusLine"] !== void 0 && !isErrataStatusLine(settings["statusLine"])) return "kept-own";
-  const relay = join43(opts.relayDir, STATUSLINE_RELAY_FILE);
+  const relay = join46(opts.relayDir, STATUSLINE_RELAY_FILE);
   mkdirSync10(opts.relayDir, { recursive: true });
-  if (!existsSync35(relay) || readFileSync36(relay, "utf8") !== STATUSLINE_RELAY_SOURCE) {
+  if (!existsSync36(relay) || readFileSync39(relay, "utf8") !== STATUSLINE_RELAY_SOURCE) {
     writeFileSync27(relay, STATUSLINE_RELAY_SOURCE, "utf8");
   }
   const next = buildStatusLine(opts.port, opts.nodePath ?? process.execPath, relay);
   if (JSON.stringify(settings["statusLine"]) === JSON.stringify(next)) return "unchanged";
   settings["statusLine"] = next;
-  mkdirSync10(dirname13(settingsPath), { recursive: true });
+  mkdirSync10(dirname14(settingsPath), { recursive: true });
   writeFileSync27(settingsPath, JSON.stringify(settings, null, 2) + "\n", "utf8");
   return "installed";
 }
@@ -90830,14 +91133,14 @@ async function cmdInit() {
   if (!skipHooks) {
     console.log("");
     console.log("installing harness hooks...");
-    const { existsSync: existsSync37 } = await import("node:fs");
-    const { join: join45 } = await import("node:path");
+    const { existsSync: existsSync38 } = await import("node:fs");
+    const { join: join48 } = await import("node:path");
     try {
       await installClaudeHooks(port);
     } catch (err2) {
       console.warn(`  \u26A0\uFE0F  Claude hook install failed: ${err2 instanceof Error ? err2.message : err2}`);
     }
-    if (existsSync37(join45(ROOT, ".cursor"))) {
+    if (existsSync38(join48(ROOT, ".cursor"))) {
       try {
         await installCursorMcpConfig();
       } catch (err2) {
@@ -90921,6 +91224,7 @@ async function cmdNotifyTest() {
   }
 }
 async function cmdStart() {
+  refreshExistingCodexHooks();
   if (!loadProfile(ROOT)) {
     const cfg = loadConfig();
     const locator = detectRepoLocator(ROOT);
@@ -90943,6 +91247,9 @@ async function cmdStart() {
   const lockPath = globalDaemonLock();
   const running = isDaemonAlive(lockPath) ? readDaemonLock(lockPath) : null;
   const where = profile ? `${profile.name} (${profile.id})` : ROOT;
+  if (!running && daemonLockState(readDaemonLock(lockPath), true) === "unknown") {
+    throw new Error(`Cannot verify the daemon process owning ${lockPath}; leaving it untouched. Run errata doctor to inspect it.`);
+  }
   if (running) {
     console.log(`errata: workspace registered; attached to the running daemon`);
     console.log(`  workspace: ${where}`);
@@ -91027,9 +91334,9 @@ async function cmdStatus() {
     console.log(`    stack:     ${profile.stack.join(", ") || "(none)"}`);
     console.log(`    languages: ${profile.languages.join(", ") || "(none)"}`);
   }
-  console.log(`  graph db:  ${existsSync36(paths.castalia) ? "yes" : "no"} (${paths.castalia})`);
-  console.log(`  event log: ${existsSync36(paths.eventLog) ? "yes" : "no"} (${paths.eventLog})`);
-  if (existsSync36(paths.castalia)) {
+  console.log(`  graph db:  ${existsSync37(paths.castalia) ? "yes" : "no"} (${paths.castalia})`);
+  console.log(`  event log: ${existsSync37(paths.eventLog) ? "yes" : "no"} (${paths.eventLog})`);
+  if (existsSync37(paths.castalia)) {
     try {
       const { openGraphStore: openGraphStore2 } = await Promise.resolve().then(() => (init_src5(), src_exports2));
       const store = openGraphStore2({ path: paths.castalia });
@@ -91365,6 +91672,9 @@ async function cmdUpdate(args2) {
 `);
   const code = await runNpmInstall(channel);
   if (code === 0) {
+    if (await runInstalledHookRefresh() !== 0) {
+      console.warn("[!] Package updated, but some Codex relays could not be refreshed. Run `errata install-hooks codex --refresh-existing`; daemon startup also retries.");
+    }
     console.log(`
 [OK] updated to ${status.latest}. Restart the daemon to run it:`);
     console.log(`  errata stop      (autostart relaunches it at next logon, or run 'errata dash')`);
@@ -91997,11 +92307,11 @@ async function cmdInstallationProfile(args2) {
 }
 async function cmdReview() {
   const paths = workspacePaths(ROOT);
-  if (!existsSync36(paths.reviewQueue)) {
+  if (!existsSync37(paths.reviewQueue)) {
     console.log("(review queue empty)");
     return;
   }
-  const queue = JSON.parse(readFileSync37(paths.reviewQueue, "utf8"));
+  const queue = JSON.parse(readFileSync40(paths.reviewQueue, "utf8"));
   if (queue.length === 0) {
     console.log("(review queue empty)");
     return;
@@ -92672,7 +92982,7 @@ async function gatherRepo(store, ws) {
   };
 }
 async function gatherReportData(generatedAt) {
-  const { existsSync: existsSync37 } = await import("node:fs");
+  const { existsSync: existsSync38 } = await import("node:fs");
   const { openGraphStore: openGraphStore2 } = await Promise.resolve().then(() => (init_src5(), src_exports2));
   const cfg = loadConfig();
   const outbound = cfg.consent.sync ? "auto" : "off";
@@ -92680,7 +92990,7 @@ async function gatherReportData(generatedAt) {
   for (const ws of listWorkspaces()) {
     if (ws.missing) continue;
     const dbPath = workspacePaths(ws.path).castalia;
-    if (!existsSync37(dbPath)) continue;
+    if (!existsSync38(dbPath)) continue;
     let store = null;
     try {
       store = openGraphStore2({ path: dbPath });
@@ -92724,8 +93034,8 @@ async function cmdReport(args2) {
   const outDir = workspacePaths(ROOT).configDir;
   mkdirSync11(outDir, { recursive: true });
   const files = renderReport2(data, { includeFutureVerbs });
-  for (const f of files) writeFileSync28(join44(outDir, f.name), f.html, "utf8");
-  const indexPath = join44(outDir, "report.html");
+  for (const f of files) writeFileSync28(join47(outDir, f.name), f.html, "utf8");
+  const indexPath = join47(outDir, "report.html");
   console.log(`report \u2192 ${indexPath}`);
   console.log(
     `  ${data.repos.length} repo(s) \xB7 ${files.length} file(s) \xB7 ${data.rollup.nodes.toLocaleString("en-US")} nodes`
@@ -92733,31 +93043,20 @@ async function cmdReport(args2) {
   console.log(`  open: file://${indexPath.replace(/\\/g, "/")}`);
 }
 async function cmdStop() {
-  const { unlinkSync: unlinkSync4 } = await import("node:fs");
   const lockPath = [globalDaemonLock(), workspacePaths(ROOT).daemonLock].find((p) => readDaemonLock(p) !== null);
   if (!lockPath) {
     console.log(`no daemon lock found \u2014 nothing to stop`);
     return;
   }
-  const lock = readDaemonLock(lockPath);
-  if (!isProcessAlive(lock.pid)) {
-    try {
-      unlinkSync4(lockPath);
-      console.log(`removed stale lock (pid ${lock.pid} not running)`);
-    } catch {
-    }
-    return;
-  }
   try {
-    process.kill(lock.pid, "SIGTERM");
-    console.log(`sent SIGTERM to daemon (pid ${lock.pid})`);
+    const result = stopLockedDaemon(lockPath);
+    if (result === "signaled") console.log(`sent SIGTERM to the verified daemon process`);
+    else if (result === "stale") console.log(`removed stale daemon lock; no process was signaled`);
+    else if (result === "missing") console.log(`no daemon lock found \u2014 nothing to stop`);
+    else throw new Error(`daemon lock ownership is ${result}; no process was signaled and the lock was preserved`);
   } catch (err2) {
-    console.warn(`could not signal pid ${lock.pid}: ${err2 instanceof Error ? err2.message : err2}`);
-    try {
-      unlinkSync4(lockPath);
-      console.log(`removed stale lock file`);
-    } catch {
-    }
+    console.warn(`could not stop daemon: ${err2 instanceof Error ? err2.message : err2}`);
+    process.exitCode = 1;
   }
 }
 async function cmdMcp(args2) {
@@ -92768,9 +93067,9 @@ async function cmdMcp(args2) {
   await runMcpServer2(ROOT, { toolNameStyle: grokCompatibility ? "bare" : "prefixed" });
 }
 function selfArgv(sub) {
-  const self = process.execPath;
-  if (/errata(\.exe)?$/i.test(self)) return { cmd: self, args: [sub] };
-  return { cmd: self, args: [...process.execArgv, process.argv[1] ?? "", sub] };
+  const self2 = process.execPath;
+  if (/errata(\.exe)?$/i.test(self2)) return { cmd: self2, args: [sub] };
+  return { cmd: self2, args: [...process.execArgv, process.argv[1] ?? "", sub] };
 }
 function spawnDaemonDetached(options = {}) {
   const { cmd: cmd2, args: args2 } = selfArgv("dash");
@@ -92780,7 +93079,7 @@ function spawnDaemonDetached(options = {}) {
   try {
     const logPath = daemonLogPath();
     try {
-      if (statSync10(logPath).size > 5 * 1024 * 1024) renameSync4(logPath, `${logPath}.1`);
+      if (statSync11(logPath).size > 5 * 1024 * 1024) renameSync6(logPath, `${logPath}.1`);
     } catch {
     }
     out2 = openSync2(logPath, "a");
@@ -92805,11 +93104,11 @@ function spawnDaemonDetached(options = {}) {
 }
 function ensureSingletonRunning(options = {}) {
   try {
-    if (isDaemonAlive(globalDaemonLock())) return true;
+    if (daemonLockBlocksStartup(globalDaemonLock())) return true;
     spawnDaemonDetached(options);
     void (async () => {
       if (await waitForDaemon(globalDaemonLock(), 8e3)) return;
-      if (isDaemonAlive(globalDaemonLock())) return;
+      if (daemonLockBlocksStartup(globalDaemonLock())) return;
       spawnDaemonDetached(options);
       await waitForDaemon(globalDaemonLock(), 8e3);
     })();
@@ -92830,6 +93129,10 @@ async function cmdInstallHooks(args2) {
       await installCursorMcpConfig();
       return;
     case "codex":
+      if (args2.includes("--refresh-existing")) {
+        if (!refreshExistingCodexHooks()) process.exitCode = 1;
+        return;
+      }
       await installCodexHooks(port);
       return;
     case "opencode":
@@ -92845,24 +93148,24 @@ async function cmdInstallHooks(args2) {
   }
 }
 async function installOpencodePlugin(port) {
-  const { mkdirSync: mkdirSync11, existsSync: existsSync37, readFileSync: readFileSync38, writeFileSync: writeFileSync28 } = await import("node:fs");
-  const { join: join45 } = await import("node:path");
-  const dir = join45(ROOT, ".opencode", "plugin");
-  if (!existsSync37(dir)) mkdirSync11(dir, { recursive: true });
-  const file2 = join45(dir, "inerrata.js");
-  if (existsSync37(file2)) {
-    const head2 = readFileSync38(file2, "utf8").split("\n")[0] ?? "";
+  const { mkdirSync: mkdirSync11, existsSync: existsSync38, readFileSync: readFileSync41, writeFileSync: writeFileSync28 } = await import("node:fs");
+  const { join: join48 } = await import("node:path");
+  const dir = join48(ROOT, ".opencode", "plugin");
+  if (!existsSync38(dir)) mkdirSync11(dir, { recursive: true });
+  const file2 = join48(dir, "inerrata.js");
+  if (existsSync38(file2)) {
+    const head2 = readFileSync41(file2, "utf8").split("\n")[0] ?? "";
     if (head2.trim() !== OPENCODE_PLUGIN_MARKER) {
       console.error(`refusing to overwrite ${file2}: not an errata-managed plugin (line 1 lacks the marker)`);
       process.exit(2);
     }
   }
   writeFileSync28(file2, buildOpencodePluginSource(port, { version: DAEMON_VERSION }), "utf8");
-  const cfgFile = join45(ROOT, "opencode.json");
+  const cfgFile = join48(ROOT, "opencode.json");
   let cfg = { $schema: "https://opencode.ai/config.json" };
-  if (existsSync37(cfgFile)) {
+  if (existsSync38(cfgFile)) {
     try {
-      cfg = JSON.parse(readFileSync38(cfgFile, "utf8"));
+      cfg = JSON.parse(readFileSync41(cfgFile, "utf8"));
     } catch {
       console.error(`refusing to touch invalid JSON at ${cfgFile} \u2014 fix it and re-run`);
       process.exit(2);
@@ -92900,15 +93203,15 @@ function ensureStatusLine(port) {
   }
 }
 async function installClaudeHooks(port) {
-  const { mkdirSync: mkdirSync11, existsSync: existsSync37, readFileSync: readFileSync38, writeFileSync: writeFileSync28 } = await import("node:fs");
-  const { join: join45 } = await import("node:path");
-  const dir = join45(ROOT, ".claude");
-  if (!existsSync37(dir)) mkdirSync11(dir, { recursive: true });
-  const file2 = join45(dir, "settings.json");
+  const { mkdirSync: mkdirSync11, existsSync: existsSync38, readFileSync: readFileSync41, writeFileSync: writeFileSync28 } = await import("node:fs");
+  const { join: join48 } = await import("node:path");
+  const dir = join48(ROOT, ".claude");
+  if (!existsSync38(dir)) mkdirSync11(dir, { recursive: true });
+  const file2 = join48(dir, "settings.json");
   let settings = {};
-  if (existsSync37(file2)) {
+  if (existsSync38(file2)) {
     try {
-      settings = JSON.parse(readFileSync38(file2, "utf8"));
+      settings = JSON.parse(readFileSync41(file2, "utf8"));
     } catch {
       console.error(`refusing to overwrite invalid JSON at ${file2}`);
       process.exit(2);
@@ -92960,7 +93263,7 @@ async function installClaudeHooks(port) {
   console.log(`installed Claude Code hooks \u2192 ${file2}`);
   console.log(`  ${ensureStatusLine(port)}`);
   await installClaudeMcpConfig();
-  const claudeMd = join45(ROOT, "CLAUDE.md");
+  const claudeMd = join48(ROOT, "CLAUDE.md");
   const recall = writeManagedBlock(claudeMd, { body: RECALL_FIRST_BLOCK });
   if (recall.kind === "collision") {
     console.warn(
@@ -92972,15 +93275,15 @@ async function installClaudeHooks(port) {
   console.log(`  endpoint: http://127.0.0.1:${port}/api/hook`);
 }
 async function installClaudeMcpConfig() {
-  const { mkdirSync: mkdirSync11, existsSync: existsSync37, readFileSync: readFileSync38, writeFileSync: writeFileSync28 } = await import("node:fs");
-  const { join: join45, dirname: dirname14 } = await import("node:path");
-  const file2 = join45(ROOT, ".mcp.json");
-  const dir = dirname14(file2);
-  if (!existsSync37(dir)) mkdirSync11(dir, { recursive: true });
+  const { mkdirSync: mkdirSync11, existsSync: existsSync38, readFileSync: readFileSync41, writeFileSync: writeFileSync28 } = await import("node:fs");
+  const { join: join48, dirname: dirname15 } = await import("node:path");
+  const file2 = join48(ROOT, ".mcp.json");
+  const dir = dirname15(file2);
+  if (!existsSync38(dir)) mkdirSync11(dir, { recursive: true });
   let cfg = {};
-  if (existsSync37(file2)) {
+  if (existsSync38(file2)) {
     try {
-      cfg = JSON.parse(readFileSync38(file2, "utf8"));
+      cfg = JSON.parse(readFileSync41(file2, "utf8"));
     } catch {
       console.error(`refusing to overwrite invalid JSON at ${file2}`);
       process.exit(2);
@@ -92994,15 +93297,15 @@ async function installClaudeMcpConfig() {
   console.log(`  Tools: errata.search / locate / neighbors / callers_of / what_uses / show / similar`);
 }
 async function installCursorMcpConfig() {
-  const { mkdirSync: mkdirSync11, existsSync: existsSync37, readFileSync: readFileSync38, writeFileSync: writeFileSync28 } = await import("node:fs");
-  const { join: join45 } = await import("node:path");
-  const dir = join45(ROOT, ".cursor");
-  if (!existsSync37(dir)) mkdirSync11(dir, { recursive: true });
-  const file2 = join45(dir, "mcp.json");
+  const { mkdirSync: mkdirSync11, existsSync: existsSync38, readFileSync: readFileSync41, writeFileSync: writeFileSync28 } = await import("node:fs");
+  const { join: join48 } = await import("node:path");
+  const dir = join48(ROOT, ".cursor");
+  if (!existsSync38(dir)) mkdirSync11(dir, { recursive: true });
+  const file2 = join48(dir, "mcp.json");
   let cfg = {};
-  if (existsSync37(file2)) {
+  if (existsSync38(file2)) {
     try {
-      cfg = JSON.parse(readFileSync38(file2, "utf8"));
+      cfg = JSON.parse(readFileSync41(file2, "utf8"));
     } catch {
       console.error(`refusing to overwrite invalid JSON at ${file2}`);
       process.exit(2);
@@ -93021,7 +93324,7 @@ async function installCodexHooks(port) {
   const gitRoot = nearestGitRoot(process.cwd());
   const hookRoot = gitRoot && mainCheckoutOfWorktree(gitRoot) ? gitRoot : ROOT;
   const file2 = writeCodexHooks(hookRoot, port);
-  const instructions = writeManagedBlock(join44(hookRoot, "AGENTS.md"), {
+  const instructions = writeManagedBlock(join47(hookRoot, "AGENTS.md"), {
     body: AGENTS_POINTER_BODY,
     stable: true
   });
@@ -93039,6 +93342,21 @@ async function installCodexHooks(port) {
   console.log("  Run `errata doctor` here to check hook discovery and trust; installation alone is not activation.");
   console.log("  Respect an explicit [features] hooks = false setting (older builds use codex_hooks).");
   console.log("  Older Codex versions may not support every event; update if hooks do not fire.");
+  for (const check2 of await diagnoseCodexHooks(hookRoot)) {
+    console.log(`  ${check2.status === "pass" ? "\u2713" : "!"} ${check2.detail}`);
+  }
+}
+function refreshExistingCodexHooks() {
+  let ok = true;
+  const roots = [...listWorkspaceEntries().map((entry) => entry.path), process.cwd()];
+  for (const result of refreshInstalledCodexRelays(roots)) {
+    if (result.status === "updated") console.log(`updated existing Codex relay \u2192 ${result.root} (hook definitions preserved)`);
+    if (result.status === "error") {
+      ok = false;
+      console.warn(`Codex relay refresh needs attention in ${result.root}: ${result.detail}`);
+    }
+  }
+  return ok;
 }
 async function refreshLinkedCodexHooks(args2) {
   if (args2.includes("--skip-hooks") || !hasCodexConfig(ROOT)) return;
@@ -93193,6 +93511,7 @@ function installLogTimestamps() {
 async function cmdDash(args2) {
   process.title = "errata-daemon";
   installLogTimestamps();
+  refreshExistingCodexHooks();
   const portIdx = args2.indexOf("--port");
   const port = portIdx >= 0 && args2[portIdx + 1] ? Number(args2[portIdx + 1]) : 7891;
   const reindexOnStart = !args2.includes("--no-reindex");
@@ -93347,7 +93666,7 @@ async function cmdDash(args2) {
   const hotspotScanMark = /* @__PURE__ */ new Map();
   const HOTSPOT_FANIN = 20;
   const runNightlyPass = async (dueIds) => {
-    const yieldToLoop2 = () => new Promise((resolve7) => setImmediate(resolve7));
+    const yieldToLoop2 = () => new Promise((resolve8) => setImmediate(resolve8));
     const fullReclusterPass = nightlyCount++ % FULL_RECLUSTER_EVERY === 0;
     const m = dueIds ? await handle2.nightlyFor(dueIds) : await handle2.nightlyAll();
     let skillsLearned = 0;
@@ -93425,9 +93744,9 @@ async function cmdDash(args2) {
       await yieldToLoop2();
       try {
         const items = selectDurableMemory(handle2.sharedStore, r.engine.profile, {
-          atCommit: readGitRefState(join44(r.root, ".git")).sha ?? void 0
+          atCommit: readGitRefState(join47(r.root, ".git")).sha ?? void 0
         });
-        const res = bleedRules(join44(r.root, ".claude", "rules"), items);
+        const res = bleedRules(join47(r.root, ".claude", "rules"), items);
         if (res.written || res.pruned) {
           console.log(
             `[rules:${r.entry.name}] ${res.written} collective principle(s) \u2192 .claude/rules` + (res.pruned ? `, ${res.pruned} pruned` : "")