@moxt-ai/mobius 0.0.336 → 0.0.337

package/dist/runtime.js

@@ -55,30 +55,17 @@ import { realpathSync, statSync } from "node:fs";
 // src/util/process/executable.ts
 import { spawn } from "node:child_process";
 import { stat as stat2 } from "node:fs/promises";
-import { join as join6, resolve as resolve2 } from "node:path";
+import { join as join3, resolve as resolve2 } from "node:path";
 
-// src/util/platform/linux.ts
+// src/util/process/platform/linux.ts
 import { constants as constants2, readdirSync, readFileSync } from "node:fs";
 import { access as access2, readdir, readFile, realpath as realpath2, stat } from "node:fs/promises";
-import { isAbsolute, join as join2 } from "node:path";
+import { join } from "node:path";
 
-// src/util/platform/posix.ts
+// src/util/process/platform/posix.ts
 import { execFile } from "node:child_process";
 import { constants } from "node:fs";
-import { access, chmod, lstat, realpath, unlink } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-
-// src/util/filesystem/path-error.ts
-var LocalPathError = class extends Error {
-  code = "unsafe_local_path";
-  constructor(message, options = {}) {
-    super(message, options);
-    this.name = "LocalPathError";
-  }
-};
-
-// src/util/platform/posix.ts
+import { access, realpath } from "node:fs/promises";
 var PROCESS_TABLE_TIMEOUT_MILLISECONDS = 1e3;
 var PROCESS_TABLE_OUTPUT_LIMIT_BYTES = 1024 * 1024;
 function parseProcessTable(output2) {
@@ -158,22 +145,7 @@ function terminateProcess(child, signal) {
   }
   child.kill(signal);
 }
-async function removeControlSocket(path7) {
-  try {
-    await unlink(path7);
-  } catch (cause) {
-    if (!(cause instanceof Error) || !("code" in cause) || cause.code !== "ENOENT") {
-      throw cause;
-    }
-  }
-}
 var posixOperations = {
-  controlSocketPath: (installationHash) => join(tmpdir(), `mobius-${installationHash}.sock`),
-  prepareControlSocket: removeControlSocket,
-  secureControlSocket: async (path7) => {
-    await chmod(path7, 384);
-  },
-  removeControlSocket,
   pathDelimiter: ":",
   environmentValue: (environment, name2) => environment[name2],
   executableExtensions: () => [""],
@@ -185,21 +157,10 @@ var posixOperations = {
   executableLaunch: (command, args) => ({ command, arguments: args }),
   spawnOptions: { detached: true, windowsHide: true },
   signalCapturedProcesses,
-  terminateProcess,
-  validatePathPermissions: async (path7, directory, privateAccess, signal) => {
-    signal.throwIfAborted();
-    const metadata = await lstat(path7);
-    if (process.getuid === void 0 || metadata.uid !== process.getuid()) {
-      throw new LocalPathError("Path is not user-owned");
-    }
-    if (privateAccess) {
-      await chmod(path7, directory ? 448 : 384);
-    }
-    signal.throwIfAborted();
-  }
+  terminateProcess
 };
 
-// src/util/platform/linux.ts
+// src/util/process/platform/linux.ts
 function appendLinuxProcessTableEntry(entries, processId, encoded) {
   const closingParenthesis = encoded.lastIndexOf(")");
   if (!encoded.startsWith(`${processId.toString()} (`) || closingParenthesis < 0) {
@@ -229,7 +190,7 @@ async function readLinuxProcessTable() {
         appendLinuxProcessTableEntry(
           entries,
           processId,
-          await readFile(join2("/proc", directory.name, "stat"), "utf8")
+          await readFile(join("/proc", directory.name, "stat"), "utf8")
         );
       } catch {
       }
@@ -254,7 +215,7 @@ function readLinuxProcessTableSynchronously() {
         appendLinuxProcessTableEntry(
           entries,
           processId,
-          readFileSync(join2("/proc", directory.name, "stat"), "utf8")
+          readFileSync(join("/proc", directory.name, "stat"), "utf8")
         );
       } catch {
       }
@@ -287,7 +248,7 @@ async function readLinuxProcessTableWithFallback() {
 }
 function processExists2(processId) {
   try {
-    const encoded = readFileSync(join2("/proc", processId.toString(), "stat"), "utf8");
+    const encoded = readFileSync(join("/proc", processId.toString(), "stat"), "utf8");
     const closingParenthesis = encoded.lastIndexOf(")");
     if (closingParenthesis >= 0) {
       const processState = encoded.slice(closingParenthesis + 1).trimStart().charAt(0);
@@ -299,80 +260,25 @@ function processExists2(processId) {
   }
   return processExists(processId);
 }
-var linuxPlatform = {
+var linuxProcessPlatform = {
   ...posixOperations,
   readProcessTable: readLinuxProcessTableWithFallback,
   readProcessTableSynchronously: readLinuxProcessTableSynchronously,
-  processExists: processExists2,
-  claudeCodeExecutablePaths: (environment) => {
-    const homeDirectory = environment["HOME"];
-    return homeDirectory !== void 0 && isAbsolute(homeDirectory) ? [join2(homeDirectory, ".local", "bin", "claude")] : [];
-  }
+  processExists: processExists2
 };
 
-// src/util/platform/macos.ts
-import { isAbsolute as isAbsolute2, join as join4 } from "node:path";
-
-// src/util/platform/claude-desktop.ts
-import { readdirSync as readdirSync2 } from "node:fs";
-import { join as join3 } from "node:path";
-function installedDirectories(directory) {
-  try {
-    return readdirSync2(directory, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name);
-  } catch (cause) {
-    if (cause instanceof Error && "code" in cause && (cause.code === "ENOENT" || cause.code === "ENOTDIR" || cause.code === "EACCES")) {
-      return [];
-    }
-    throw cause;
-  }
-}
-function claudeDesktopExecutablePaths(roots, executablePaths) {
-  const paths = [];
-  for (const root of roots) {
-    const versions = installedDirectories(root).filter((version2) => /^\d+\.\d+\.\d+$/.test(version2)).toSorted((left, right) => right.localeCompare(left, "en", { numeric: true }));
-    for (const version2 of versions) {
-      const directory = join3(root, version2);
-      const installations = [
-        directory,
-        ...installedDirectories(directory).map((build) => join3(directory, build))
-      ];
-      for (const installation of installations) {
-        for (const executablePath of executablePaths) {
-          paths.push(join3(installation, ...executablePath));
-        }
-      }
-    }
-  }
-  return paths;
-}
-
-// src/util/platform/macos.ts
-var macosPlatform = {
+// src/util/process/platform/macos.ts
+var macosProcessPlatform = {
   ...posixOperations,
   readProcessTable: () => readProcessTableWithPs("/bin/ps"),
   readProcessTableSynchronously: () => [],
-  processExists,
-  claudeCodeExecutablePaths: (environment) => {
-    const paths = ["/opt/homebrew/bin/claude", "/usr/local/bin/claude"];
-    const homeDirectory = environment["HOME"];
-    if (homeDirectory !== void 0 && isAbsolute2(homeDirectory)) {
-      paths.unshift(join4(homeDirectory, ".local", "bin", "claude"));
-      paths.push(
-        ...claudeDesktopExecutablePaths(
-          [join4(homeDirectory, "Library", "Application Support", "Claude", "claude-code")],
-          [["claude.app", "Contents", "MacOS", "claude"], ["claude"]]
-        )
-      );
-    }
-    return paths;
-  }
+  processExists
 };
 
-// src/util/platform/windows.ts
+// src/util/process/platform/windows.ts
 import { execFile as execFile2 } from "node:child_process";
 import { readFile as readFile2, realpath as realpath3 } from "node:fs/promises";
-import { dirname, extname, isAbsolute as isAbsolute3, join as join5, resolve } from "node:path";
-import { promisify } from "node:util";
+import { dirname, extname, join as join2, resolve } from "node:path";
 
 // src/util/process/process-error.ts
 var ProcessExecutionError = class extends Error {
@@ -384,28 +290,10 @@ var ProcessExecutionError = class extends Error {
   }
 };
 
-// src/util/platform/windows.ts
-var execute = promisify(execFile2);
+// src/util/process/platform/windows.ts
 function environmentValue(environment, name2) {
   return Object.entries(environment).find(([key]) => key.toUpperCase() === name2.toUpperCase())?.[1];
 }
-function desktopClaudeExecutablePaths(environment) {
-  const roots = [];
-  const localAppData = environmentValue(environment, "LOCALAPPDATA");
-  if (localAppData !== void 0 && isAbsolute3(localAppData)) {
-    const dataDirectory = join5(localAppData, "Claude-Data");
-    for (const installation of installedDirectories(dataDirectory)) {
-      if (installation.startsWith("claude_")) {
-        roots.push(join5(dataDirectory, installation, "claude-code"));
-      }
-    }
-  }
-  const appData = environmentValue(environment, "APPDATA");
-  if (appData !== void 0 && isAbsolute3(appData)) {
-    roots.push(join5(appData, "Claude", "claude-code"));
-  }
-  return claudeDesktopExecutablePaths(roots, [["claude.exe"]]);
-}
 function executableExtensions(executableName, environment) {
   if (/\.[a-zA-Z0-9]+$/.test(executableName)) {
     return [""];
@@ -464,7 +352,7 @@ function readProcessTable() {
   }
   return new Promise((resolveTable) => {
     execFile2(
-      join5(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe"),
+      join2(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe"),
       [
         "-NoLogo",
         "-NoProfile",
@@ -497,71 +385,7 @@ function terminateProcess2(child, signal) {
   }
   child.kill(signal);
 }
-var windowsPermissions = `
-$ErrorActionPreference = 'Stop'
-$ProgressPreference = 'SilentlyContinue'
-$item = Get-Item -LiteralPath $env:MOBIUS_PERMISSION_PATH -Force
-if (($item.Attributes -band [IO.FileAttributes]::ReparsePoint) -ne 0) { throw 'Unsafe path' }
-$sid = [Security.Principal.WindowsIdentity]::GetCurrent().User
-$acl = $item.GetAccessControl()
-$owner = $acl.GetOwner([Security.Principal.SecurityIdentifier])
-if ($owner -ne $sid -and -not ($owner.Value -eq 'S-1-5-32-544' -and ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator))) { throw 'Path is not user-owned' }
-if ($env:MOBIUS_PERMISSION_PRIVATE -eq '1') {
-    if ($item.PSIsContainer) {
-        $private = New-Object Security.AccessControl.DirectorySecurity
-        $rule = New-Object Security.AccessControl.FileSystemAccessRule($sid, 'FullControl', 'ContainerInherit,ObjectInherit', 'None', 'Allow')
-    } else {
-        $private = New-Object Security.AccessControl.FileSecurity
-        $rule = New-Object Security.AccessControl.FileSystemAccessRule($sid, 'FullControl', 'Allow')
-    }
-    $private.SetOwner($sid)
-    $private.SetAccessRuleProtection($true, $false)
-    $private.AddAccessRule($rule)
-    $item.SetAccessControl($private)
-}
-`;
-var windowsPermissionsTimeoutMs = 3e4;
-async function validatePathPermissions(path7, _directory, privateAccess, signal) {
-  signal.throwIfAborted();
-  const systemRoot = environmentValue(process.env, "SystemRoot");
-  if (systemRoot === void 0) {
-    throw new LocalPathError("Windows system directory is unavailable");
-  }
-  try {
-    await execute(
-      join5(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe"),
-      [
-        "-NoLogo",
-        "-NoProfile",
-        "-NonInteractive",
-        "-EncodedCommand",
-        Buffer.from(windowsPermissions, "utf16le").toString("base64")
-      ],
-      {
-        env: {
-          ...process.env,
-          MOBIUS_PERMISSION_PATH: path7,
-          MOBIUS_PERMISSION_PRIVATE: privateAccess ? "1" : "0"
-        },
-        windowsHide: true,
-        signal: AbortSignal.any([signal, AbortSignal.timeout(windowsPermissionsTimeoutMs)]),
-        timeout: windowsPermissionsTimeoutMs,
-        maxBuffer: 16384
-      }
-    );
-  } catch (cause) {
-    signal.throwIfAborted();
-    throw new LocalPathError("The local path permissions could not be secured", { cause });
-  }
-}
-var windowsPlatform = {
-  controlSocketPath: (installationHash) => `\\\\.\\pipe\\mobius-${installationHash}`,
-  prepareControlSocket: async () => {
-  },
-  secureControlSocket: async () => {
-  },
-  removeControlSocket: async () => {
-  },
+var windowsProcessPlatform = {
   pathDelimiter: ";",
   environmentValue,
   executableExtensions,
@@ -570,44 +394,29 @@ var windowsPlatform = {
   spawnOptions: { detached: false, windowsHide: true },
   signalCapturedProcesses: signalCapturedProcesses2,
   terminateProcess: terminateProcess2,
-  validatePathPermissions,
   readProcessTable,
   readProcessTableSynchronously: () => [],
-  processExists,
-  claudeCodeExecutablePaths: (environment) => {
-    const paths = [];
-    const userProfile = environmentValue(environment, "USERPROFILE");
-    if (userProfile !== void 0 && isAbsolute3(userProfile)) {
-      paths.push(join5(userProfile, ".local", "bin", "claude.exe"));
-    }
-    const localAppData = environmentValue(environment, "LOCALAPPDATA");
-    if (localAppData !== void 0 && isAbsolute3(localAppData)) {
-      paths.push(join5(localAppData, "Microsoft", "WinGet", "Links", "claude.exe"));
-    }
-    paths.push(...desktopClaudeExecutablePaths(environment));
-    return paths;
-  }
+  processExists
 };
 
-// src/util/platform/index.ts
+// src/util/process/platform/index.ts
 var fallbackPlatform = {
   ...posixOperations,
   readProcessTable: () => readProcessTableWithPs("/usr/bin/ps"),
   readProcessTableSynchronously: () => [],
-  processExists,
-  claudeCodeExecutablePaths: () => []
+  processExists
 };
 var platforms = /* @__PURE__ */ new Map([
-  ["linux", linuxPlatform],
-  ["darwin", macosPlatform],
-  ["win32", windowsPlatform]
+  ["linux", linuxProcessPlatform],
+  ["darwin", macosProcessPlatform],
+  ["win32", windowsProcessPlatform]
 ]);
-function platformSupportFor(platform2) {
+function processPlatformSupportFor(platform2) {
   return platforms.get(platform2) ?? fallbackPlatform;
 }
 
 // src/util/process/executable.ts
-var hostPlatform = platformSupportFor(process.platform);
+var hostPlatform = processPlatformSupportFor(process.platform);
 var DEFAULT_OUTPUT_LIMIT_BYTES = 16 * 1024;
 var PROCESS_GRACEFUL_STOP_TIMEOUT_MILLISECONDS = 1e3;
 var PROCESS_FORCED_STOP_TIMEOUT_MILLISECONDS = 5e3;
@@ -650,7 +459,7 @@ var ProcessResult = class {
 async function resolveExecutablePath(requestedPath2, platform2 = process.platform) {
   const absoluteRequestedPath = resolve2(requestedPath2);
   try {
-    const resolvedPath = await platformSupportFor(platform2).resolveExecutableTarget(absoluteRequestedPath);
+    const resolvedPath = await processPlatformSupportFor(platform2).resolveExecutableTarget(absoluteRequestedPath);
     const metadata = await stat2(resolvedPath);
     if (!metadata.isFile()) {
       return null;
@@ -670,7 +479,7 @@ async function resolveExecutablePath(requestedPath2, platform2 = process.platfor
   }
 }
 async function findExecutableOnPath(executableName, environment, platform2 = process.platform) {
-  const support = platformSupportFor(platform2);
+  const support = processPlatformSupportFor(platform2);
   const encodedPath = support.environmentValue(environment, "PATH") ?? "";
   const separator = support.pathDelimiter;
   const extensions = support.executableExtensions(executableName, environment);
@@ -679,7 +488,7 @@ async function findExecutableOnPath(executableName, environment, platform2 = pro
       continue;
     }
     for (const extension of extensions) {
-      const requestedPath2 = resolve2(join6(entry, `${executableName}${extension}`));
+      const requestedPath2 = resolve2(join3(entry, `${executableName}${extension}`));
       const executable = await resolveExecutablePath(requestedPath2, platform2);
       if (executable !== null) {
         return executable;
@@ -20920,7 +20729,7 @@ async function runCleanup(...actions) {
 }
 
 // src/acp/adapter/live-sessions.ts
-import { isAbsolute as isAbsolute4, resolve as resolve3 } from "node:path";
+import { isAbsolute, resolve as resolve3 } from "node:path";
 import { methods as methods3 } from "@agentclientprotocol/sdk";
 
 // ../mobius-sdk/src/protocol/platform/mobius-api.ts
@@ -23773,7 +23582,7 @@ var AcpSessionConnector = class {
 };
 
 // src/acp/adapter/live-sessions.ts
-var absolutePathSchema = external_exports.string().min(1).refine(isAbsolute4);
+var absolutePathSchema = external_exports.string().min(1).refine(isAbsolute);
 var targetSchema = external_exports.object({
   nativeSessionId: nativeSessionIdSchema,
   cwd: absolutePathSchema,
@@ -25103,7 +24912,7 @@ import { createHash as createHash3 } from "node:crypto";
 import { spawn as spawn2 } from "node:child_process";
 
 // src/acp/harness/codex/app-server-protocol.ts
-import { isAbsolute as isAbsolute5 } from "node:path";
+import { isAbsolute as isAbsolute2 } from "node:path";
 var boundedText = (maximum) => external_exports.string().max(maximum);
 var jsonValue = external_exports.lazy(() => external_exports.unknown());
 var requestIdSchema = external_exports.union([external_exports.number(), external_exports.string()]).refine((value) => typeof value === "number" || value.length <= 256);
@@ -25175,7 +24984,7 @@ var imageGenerationItemSchema = external_exports.object({
 });
 var threadItemSchema = external_exports.discriminatedUnion("type", [
   imageGenerationItemSchema,
-  external_exports.object({ type: external_exports.literal("imageView"), id: boundedText(256), path: boundedText(32768).refine(isAbsolute5) }),
+  external_exports.object({ type: external_exports.literal("imageView"), id: boundedText(256), path: boundedText(32768).refine(isAbsolute2) }),
   external_exports.object({
     id: boundedText(256),
     text: boundedText(1e6),
@@ -25653,7 +25462,7 @@ var CodexAppServerClient = class {
 import { createHash } from "node:crypto";
 
 // src/acp/content/raster.ts
-import { basename, isAbsolute as isAbsolute6, normalize } from "node:path";
+import { basename, isAbsolute as isAbsolute3, normalize } from "node:path";
 import { fileURLToPath } from "node:url";
 
 // src/storage/files/local-files.ts
@@ -25760,13 +25569,13 @@ function sniffRasterMime(bytes) {
 }
 async function resolveCanonicalPath(requested, signal) {
   signal.throwIfAborted();
-  if (!isAbsolute6(requested) || requested.includes("\0") || normalize(requested) !== requested) {
+  if (!isAbsolute3(requested) || requested.includes("\0") || normalize(requested) !== requested) {
     return null;
   }
   try {
     const target = await canonicalPath(requested);
     signal.throwIfAborted();
-    if (!isAbsolute6(target) || normalize(target) !== target) {
+    if (!isAbsolute3(target) || normalize(target) !== target) {
       return null;
     }
     return target;
@@ -25797,7 +25606,7 @@ function parseLocalImageUri(uri) {
       return null;
     }
   }
-  if (!isAbsolute6(trimmed) && /^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(trimmed)) {
+  if (!isAbsolute3(trimmed) && /^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(trimmed)) {
     return null;
   }
   return trimmed;
@@ -27063,12 +26872,12 @@ async function replayCodexHistory(client2, threadId, emit, signal) {
 
 // src/storage/session/temporary-session-event-cache.ts
 import { mkdtempSync, rmSync } from "node:fs";
-import { tmpdir as tmpdir2 } from "node:os";
-import { join as join8 } from "node:path";
+import { tmpdir } from "node:os";
+import { join as join5 } from "node:path";
 
 // src/storage/sqlite/local-databases.ts
 import { createHash as createHash2 } from "node:crypto";
-import { join as join7 } from "node:path";
+import { join as join4 } from "node:path";
 
 // src/generated/acp-session-store-migrations.ts
 var acpSessionStoreMigrations = [
@@ -27611,7 +27420,7 @@ function sql(strings, ...params) {
     return new SQL([new StringChunk(str)]);
   }
   _sql.raw = raw;
-  function join32(chunks, separator) {
+  function join34(chunks, separator) {
     const result = [];
     for (const [i, chunk] of chunks.entries()) {
       if (i > 0 && separator !== void 0) result.push(separator);
@@ -27619,7 +27428,7 @@ function sql(strings, ...params) {
     }
     return new SQL(result);
   }
-  _sql.join = join32;
+  _sql.join = join34;
   function identifier2(value) {
     return new Name(value);
   }
@@ -29340,7 +29149,7 @@ var SQLiteSelectBase = class extends TypedQueryBuilder {
       const baseTableName = this.tableName;
       const tableName = getTableLikeName(table);
       for (const item of extractUsedTable(table)) this.usedTables.add(item);
-      if (typeof tableName === "string" && this.config.joins?.some((join32) => join32.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
+      if (typeof tableName === "string" && this.config.joins?.some((join34) => join34.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
       if (!this.isPartialSelect) {
         if (Object.keys(this.joinsNotNullableMap).length === 1 && typeof baseTableName === "string") this.config.fields = { [baseTableName]: this.config.fields };
         if (typeof tableName === "string" && !is(table, SQL)) {
@@ -30886,7 +30695,7 @@ var SQLiteDialect = class {
       if (!joins2) return;
       const withEntries = Object.entries(joins2).filter(([_, v]) => v);
       if (!withEntries.length) return;
-      return sql.join(withEntries.map(([k2, join32]) => {
+      return sql.join(withEntries.map(([k2, join34]) => {
         const relation = tableConfig.relations[k2];
         const isSingle2 = is(relation, One);
         const targetTable = aliasedTable(relation.targetTable, `d${currentDepth + 1}`);
@@ -30897,7 +30706,7 @@ var SQLiteDialect = class {
           table: targetTable,
           mode: isSingle2 ? "first" : "many",
           schema,
-          queryConfig: join32,
+          queryConfig: join34,
           tableConfig: schema[relation.targetTableName],
           relationWhere: filter,
           isNested: true,
@@ -30911,7 +30720,7 @@ var SQLiteDialect = class {
           key: k2,
           selection: innerQuery.selection,
           isArray: !isSingle2,
-          isOptional: (relation.optional ?? false) || join32 !== true && !!join32.where
+          isOptional: (relation.optional ?? false) || join34 !== true && !!join34.where
         });
         const jsonColumns = sql.join(innerQuery.selection.map((s) => {
           return sql`${sql.raw(this.escapeString(s.key))}, ${s.selection ? sql`${jsonb}(${sql.identifier(s.key)})` : sql.identifier(s.key)}`;
@@ -31265,7 +31074,7 @@ var SQLiteUpdateBase = class {
   createJoin(joinType) {
     return ((table, on2) => {
       const tableName = getTableLikeName(table);
-      if (typeof tableName === "string" && this.config.joins.some((join32) => join32.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
+      if (typeof tableName === "string" && this.config.joins.some((join34) => join34.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
       if (typeof on2 === "function") {
         const from = this.config.from ? is(table, SQLiteTable) ? table[Table.Symbol.Columns] : is(table, Subquery) ? table._.selectedFields : is(table, SQLiteViewBase) ? table[ViewBaseConfig].selectedFields : void 0 : void 0;
         on2 = on2(new Proxy(this.config.table[Table.Symbol.Columns], new SelectionProxyHandler({
@@ -32049,8 +31858,8 @@ var LocalSqliteDatabase = class {
 function channelSessionDatabasePaths(stateDirectory, channelId) {
   const channelHash = createHash2("sha256").update(channelId).digest("hex");
   return {
-    events: join7(stateDirectory, "sessions", `${channelHash}.events.sqlite`),
-    sessions: join7(stateDirectory, "sessions", `${channelHash}.sqlite`)
+    events: join4(stateDirectory, "sessions", `${channelHash}.events.sqlite`),
+    sessions: join4(stateDirectory, "sessions", `${channelHash}.sqlite`)
   };
 }
 var openAcpSessionDatabase = (path7) => new LocalSqliteDatabase(path7, "ACP Session database", acpSessionStoreMigrations);
@@ -32228,11 +32037,11 @@ var SessionEventCacheTable = class {
 
 // src/storage/session/temporary-session-event-cache.ts
 function openTemporarySessionEventCache() {
-  const directory = mkdtempSync(join8(tmpdir2(), "mobius-preview-events-"));
+  const directory = mkdtempSync(join5(tmpdir(), "mobius-preview-events-"));
   const removeFiles = () => rmSync(directory, { recursive: true, force: true });
   try {
     return {
-      table: new SessionEventCacheTable(openSessionEventCacheDatabase(join8(directory, "events.sqlite"))),
+      table: new SessionEventCacheTable(openSessionEventCacheDatabase(join5(directory, "events.sqlite"))),
       removeFiles
     };
   } catch (error62) {
@@ -32742,13 +32551,13 @@ var RuntimeAgentDependencies = class {
 
 // src/daemon/pairing/pair-local-machine.ts
 import { hostname as hostname3 } from "node:os";
-import { basename as basename6, join as join24, resolve as resolve16 } from "node:path";
+import { basename as basename6, join as join26, resolve as resolve16 } from "node:path";
 import { fetch as fetch3 } from "undici";
 
 // package.json
 var package_default = {
   name: "@moxt-ai/mobius",
-  version: "0.0.336",
+  version: "0.0.337",
   description: "Mobius CLI for pairing and running local AI agent services.",
   type: "module",
   bin: {
@@ -32930,7 +32739,7 @@ import { existsSync as existsSync3 } from "node:fs";
 import * as fs3 from "node:fs/promises";
 import * as os3 from "node:os";
 import * as path6 from "node:path";
-import { promisify as promisify2 } from "node:util";
+import { promisify } from "node:util";
 import { agent as acpAgent, CreateElicitationResponse as CreateElicitationResponse2, methods as methods7, ndJsonStream, RequestError as RequestError6 } from "@agentclientprotocol/sdk";
 
 // ../../node_modules/.pnpm/@anthropic-ai+claude-agent-sdk@0.3.257_@anthropic-ai+sdk@0.122.0_zod@4.6.5__@modelconte_b0b90ed00d211c5955785f7de7f8dbf4/node_modules/@anthropic-ai/claude-agent-sdk/sdk.mjs
@@ -72296,7 +72105,7 @@ var SessionModeManager = class {
 
 // src/acp/harness/claude/upstream/dist/acp-agent.js
 var CLAUDE_CONFIG_DIR = process.env.CLAUDE_CONFIG_DIR ?? path6.join(os3.homedir(), ".claude");
-var execFileAsync = promisify2(execFile3);
+var execFileAsync = promisify(execFile3);
 var ZERO_USAGE = Object.freeze({
   input_tokens: 0,
   output_tokens: 0,
@@ -77063,6 +76872,237 @@ var ClaudeAgentConnection = class extends EndpointAgentConnection {
   }
 };
 
+// src/util/platform/linux.ts
+import { isAbsolute as isAbsolute8, join as join13 } from "node:path";
+
+// src/util/platform/posix.ts
+import { chmod, lstat as lstat2, unlink as unlink2 } from "node:fs/promises";
+import { tmpdir as tmpdir2 } from "node:os";
+import { join as join12 } from "node:path";
+
+// src/util/filesystem/path-error.ts
+var LocalPathError = class extends Error {
+  code = "unsafe_local_path";
+  constructor(message, options = {}) {
+    super(message, options);
+    this.name = "LocalPathError";
+  }
+};
+
+// src/util/platform/posix.ts
+async function removeControlSocket(path7) {
+  try {
+    await unlink2(path7);
+  } catch (cause) {
+    if (!(cause instanceof Error) || !("code" in cause) || cause.code !== "ENOENT") {
+      throw cause;
+    }
+  }
+}
+var posixOperations2 = {
+  controlSocketPath: (installationHash) => join12(tmpdir2(), `mobius-${installationHash}.sock`),
+  prepareControlSocket: removeControlSocket,
+  secureControlSocket: async (path7) => {
+    await chmod(path7, 384);
+  },
+  removeControlSocket,
+  validatePathPermissions: async (path7, directory, privateAccess, signal) => {
+    signal.throwIfAborted();
+    const metadata = await lstat2(path7);
+    if (process.getuid === void 0 || metadata.uid !== process.getuid()) {
+      throw new LocalPathError("Path is not user-owned");
+    }
+    if (privateAccess) {
+      await chmod(path7, directory ? 448 : 384);
+    }
+    signal.throwIfAborted();
+  }
+};
+
+// src/util/platform/linux.ts
+var linuxPlatform = {
+  ...posixOperations2,
+  claudeCodeExecutablePaths: (environment) => {
+    const homeDirectory = environment["HOME"];
+    return homeDirectory !== void 0 && isAbsolute8(homeDirectory) ? [join13(homeDirectory, ".local", "bin", "claude")] : [];
+  }
+};
+
+// src/util/platform/macos.ts
+import { isAbsolute as isAbsolute9, join as join15 } from "node:path";
+
+// src/util/platform/claude-desktop.ts
+import { readdirSync as readdirSync3 } from "node:fs";
+import { join as join14 } from "node:path";
+function installedDirectories(directory) {
+  try {
+    return readdirSync3(directory, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name);
+  } catch (cause) {
+    if (cause instanceof Error && "code" in cause && (cause.code === "ENOENT" || cause.code === "ENOTDIR" || cause.code === "EACCES")) {
+      return [];
+    }
+    throw cause;
+  }
+}
+function claudeDesktopExecutablePaths(roots, executablePaths) {
+  const paths = [];
+  for (const root of roots) {
+    const versions = installedDirectories(root).filter((version2) => /^\d+\.\d+\.\d+$/.test(version2)).toSorted((left, right) => right.localeCompare(left, "en", { numeric: true }));
+    for (const version2 of versions) {
+      const directory = join14(root, version2);
+      const installations = [
+        directory,
+        ...installedDirectories(directory).map((build) => join14(directory, build))
+      ];
+      for (const installation of installations) {
+        for (const executablePath of executablePaths) {
+          paths.push(join14(installation, ...executablePath));
+        }
+      }
+    }
+  }
+  return paths;
+}
+
+// src/util/platform/macos.ts
+var macosPlatform = {
+  ...posixOperations2,
+  claudeCodeExecutablePaths: (environment) => {
+    const paths = ["/opt/homebrew/bin/claude", "/usr/local/bin/claude"];
+    const homeDirectory = environment["HOME"];
+    if (homeDirectory !== void 0 && isAbsolute9(homeDirectory)) {
+      paths.unshift(join15(homeDirectory, ".local", "bin", "claude"));
+      paths.push(
+        ...claudeDesktopExecutablePaths(
+          [join15(homeDirectory, "Library", "Application Support", "Claude", "claude-code")],
+          [["claude.app", "Contents", "MacOS", "claude"], ["claude"]]
+        )
+      );
+    }
+    return paths;
+  }
+};
+
+// src/util/platform/windows.ts
+import { execFile as execFile4 } from "node:child_process";
+import { isAbsolute as isAbsolute10, join as join16 } from "node:path";
+import { promisify as promisify2 } from "node:util";
+var execute = promisify2(execFile4);
+function environmentValue2(environment, name2) {
+  return Object.entries(environment).find(([key]) => key.toUpperCase() === name2.toUpperCase())?.[1];
+}
+function desktopClaudeExecutablePaths(environment) {
+  const roots = [];
+  const localAppData = environmentValue2(environment, "LOCALAPPDATA");
+  if (localAppData !== void 0 && isAbsolute10(localAppData)) {
+    const dataDirectory = join16(localAppData, "Claude-Data");
+    for (const installation of installedDirectories(dataDirectory)) {
+      if (installation.startsWith("claude_")) {
+        roots.push(join16(dataDirectory, installation, "claude-code"));
+      }
+    }
+  }
+  const appData = environmentValue2(environment, "APPDATA");
+  if (appData !== void 0 && isAbsolute10(appData)) {
+    roots.push(join16(appData, "Claude", "claude-code"));
+  }
+  return claudeDesktopExecutablePaths(roots, [["claude.exe"]]);
+}
+var windowsPermissions = `
+$ErrorActionPreference = 'Stop'
+$ProgressPreference = 'SilentlyContinue'
+$item = Get-Item -LiteralPath $env:MOBIUS_PERMISSION_PATH -Force
+if (($item.Attributes -band [IO.FileAttributes]::ReparsePoint) -ne 0) { throw 'Unsafe path' }
+$sid = [Security.Principal.WindowsIdentity]::GetCurrent().User
+$acl = $item.GetAccessControl()
+$owner = $acl.GetOwner([Security.Principal.SecurityIdentifier])
+if ($owner -ne $sid -and -not ($owner.Value -eq 'S-1-5-32-544' -and ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator))) { throw 'Path is not user-owned' }
+if ($env:MOBIUS_PERMISSION_PRIVATE -eq '1') {
+    if ($item.PSIsContainer) {
+        $private = New-Object Security.AccessControl.DirectorySecurity
+        $rule = New-Object Security.AccessControl.FileSystemAccessRule($sid, 'FullControl', 'ContainerInherit,ObjectInherit', 'None', 'Allow')
+    } else {
+        $private = New-Object Security.AccessControl.FileSecurity
+        $rule = New-Object Security.AccessControl.FileSystemAccessRule($sid, 'FullControl', 'Allow')
+    }
+    $private.SetOwner($sid)
+    $private.SetAccessRuleProtection($true, $false)
+    $private.AddAccessRule($rule)
+    $item.SetAccessControl($private)
+}
+`;
+var windowsPermissionsTimeoutMs = 3e4;
+async function validatePathPermissions(path7, _directory, privateAccess, signal) {
+  signal.throwIfAborted();
+  const systemRoot = environmentValue2(process.env, "SystemRoot");
+  if (systemRoot === void 0) {
+    throw new LocalPathError("Windows system directory is unavailable");
+  }
+  try {
+    await execute(
+      join16(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe"),
+      [
+        "-NoLogo",
+        "-NoProfile",
+        "-NonInteractive",
+        "-EncodedCommand",
+        Buffer.from(windowsPermissions, "utf16le").toString("base64")
+      ],
+      {
+        env: {
+          ...process.env,
+          MOBIUS_PERMISSION_PATH: path7,
+          MOBIUS_PERMISSION_PRIVATE: privateAccess ? "1" : "0"
+        },
+        windowsHide: true,
+        signal: AbortSignal.any([signal, AbortSignal.timeout(windowsPermissionsTimeoutMs)]),
+        timeout: windowsPermissionsTimeoutMs,
+        maxBuffer: 16384
+      }
+    );
+  } catch (cause) {
+    signal.throwIfAborted();
+    throw new LocalPathError("The local path permissions could not be secured", { cause });
+  }
+}
+var windowsPlatform = {
+  controlSocketPath: (installationHash) => `\\\\.\\pipe\\mobius-${installationHash}`,
+  prepareControlSocket: async () => {
+  },
+  secureControlSocket: async () => {
+  },
+  removeControlSocket: async () => {
+  },
+  validatePathPermissions,
+  claudeCodeExecutablePaths: (environment) => {
+    const paths = [];
+    const userProfile = environmentValue2(environment, "USERPROFILE");
+    if (userProfile !== void 0 && isAbsolute10(userProfile)) {
+      paths.push(join16(userProfile, ".local", "bin", "claude.exe"));
+    }
+    const localAppData = environmentValue2(environment, "LOCALAPPDATA");
+    if (localAppData !== void 0 && isAbsolute10(localAppData)) {
+      paths.push(join16(localAppData, "Microsoft", "WinGet", "Links", "claude.exe"));
+    }
+    paths.push(...desktopClaudeExecutablePaths(environment));
+    return paths;
+  }
+};
+
+// src/util/platform/index.ts
+var fallbackPlatform2 = {
+  ...posixOperations2,
+  claudeCodeExecutablePaths: () => []
+};
+var platforms2 = /* @__PURE__ */ new Map([
+  ["linux", linuxPlatform],
+  ["darwin", macosPlatform],
+  ["win32", windowsPlatform]
+]);
+function platformSupportFor(platform2) {
+  return platforms2.get(platform2) ?? fallbackPlatform2;
+}
+
 // src/agent/discovery/version-output.ts
 function normalizeVersionOutput(output2) {
   return output2.trim().split(/\r?\n/, 1)[0]?.trim().slice(0, 128) ?? "";
@@ -78160,7 +78200,7 @@ var CodexAgentSpecification = class extends InProcessAcpAgentSpecification {
 
 // src/agent/specification/vendors/pi-agent.ts
 import { createHash as createHash4 } from "node:crypto";
-import { join as join20 } from "node:path";
+import { join as join22 } from "node:path";
 import {
   methods as methods11
 } from "@agentclientprotocol/sdk";
@@ -78175,7 +78215,7 @@ import {
 import { spawnSync } from "node:child_process";
 import { randomUUID as randomUUID10 } from "node:crypto";
 import { existsSync as existsSync7, readdirSync as readdirSync6, readFileSync as readFileSync8, realpathSync as realpathSync4, statSync as statSync4, unlinkSync as unlinkSync2 } from "node:fs";
-import { basename as basename5, dirname as dirname8, isAbsolute as isAbsolute13, join as join19 } from "node:path";
+import { basename as basename5, dirname as dirname8, isAbsolute as isAbsolute13, join as join21 } from "node:path";
 import { RequestError as RequestError10 } from "@agentclientprotocol/sdk";
 
 // src/acp/harness/pi/upstream/dist/pi-rpc/process.js
@@ -78633,7 +78673,7 @@ function maybeAuthRequiredError(err) {
 }
 
 // src/acp/harness/pi/upstream/dist/acp/paths.js
-import { join as join15 } from "node:path";
+import { join as join17 } from "node:path";
 
 // src/acp/harness/pi/upstream/dist/acp/environment.js
 import { homedir as homedir2 } from "node:os";
@@ -78643,10 +78683,10 @@ function environmentHome(environment) {
 
 // src/acp/harness/pi/upstream/dist/acp/paths.js
 function getPiAcpDir(environment = process.env) {
-  return join15(environmentHome(environment), ".pi", "pi-acp");
+  return join17(environmentHome(environment), ".pi", "pi-acp");
 }
 function getPiAcpSessionMapPath(environment = process.env) {
-  return join15(getPiAcpDir(environment), "session-map.json");
+  return join17(getPiAcpDir(environment), "session-map.json");
 }
 
 // src/acp/harness/pi/upstream/dist/acp/pi-commands.js
@@ -78691,15 +78731,15 @@ function toAvailableCommandsFromPiGetCommands(data, opts) {
 
 // src/acp/harness/pi/upstream/dist/acp/pi-sessions.js
 import { closeSync as closeSync2, existsSync as existsSync4, openSync as openSync2, readdirSync as readdirSync4, readFileSync as readFileSync3, readSync as readSync2, statSync as statSync3 } from "node:fs";
-import { isAbsolute as isAbsolute11, join as join16, resolve as resolve10 } from "node:path";
+import { isAbsolute as isAbsolute11, join as join18, resolve as resolve10 } from "node:path";
 var DEFAULT_TAIL_BYTES = 256 * 1024;
 var DEFAULT_HEAD_BYTES = 64 * 1024;
 function getPiAgentDir(environment) {
   const configured = environment["PI_CODING_AGENT_DIR"];
-  return configured ? resolve10(configured) : join16(environmentHome(environment), ".pi", "agent");
+  return configured ? resolve10(configured) : join18(environmentHome(environment), ".pi", "agent");
 }
 function readSessionDirFromSettings(agentDir) {
-  const settingsPath = join16(agentDir, "settings.json");
+  const settingsPath = join18(agentDir, "settings.json");
   try {
     if (!existsSync4(settingsPath)) {
       return null;
@@ -78720,7 +78760,7 @@ function readSessionDirFromSettings(agentDir) {
 }
 function getPiSessionsDir(environment = process.env) {
   const agentDir = getPiAgentDir(environment);
-  return readSessionDirFromSettings(agentDir) ?? join16(agentDir, "sessions");
+  return readSessionDirFromSettings(agentDir) ?? join18(agentDir, "sessions");
 }
 function getPiSessionDiscoveryDirs(environment) {
   const discoveryDirectories = [getPiSessionsDir(environment)];
@@ -78731,7 +78771,7 @@ function getPiSessionDiscoveryDirs(environment) {
       if (!entry.isDirectory()) {
         continue;
       }
-      const directory = join16(mobiusSessionsRoot, entry.name);
+      const directory = join18(mobiusSessionsRoot, entry.name);
       if (!discoveryDirectories.includes(directory)) {
         discoveryDirectories.push(directory);
       }
@@ -78748,7 +78788,7 @@ function walkJsonlFiles(dir, out2) {
   }
   for (const e of entries) {
     const name2 = typeof e.name === "string" ? e.name : String(e.name);
-    const p = join16(dir, name2);
+    const p = join18(dir, name2);
     if (e.isDirectory()) {
       walkJsonlFiles(p, out2);
     } else if (e.isFile() && name2.endsWith(".jsonl")) {
@@ -79017,7 +79057,7 @@ function findPiSession(sessionId, environment = process.env) {
 
 // src/acp/harness/pi/upstream/dist/acp/pi-settings.js
 import { existsSync as existsSync5, readFileSync as readFileSync4 } from "node:fs";
-import { join as join17, resolve as resolve11 } from "node:path";
+import { join as join19, resolve as resolve11 } from "node:path";
 function isObject2(x) {
   return Boolean(x) && typeof x === "object" && !Array.isArray(x);
 }
@@ -79046,7 +79086,7 @@ function readJsonFile(path7) {
   }
 }
 function getMergedSettings(cwd, environment) {
-  const globalSettingsPath = join17(getAgentDir(environment), "settings.json");
+  const globalSettingsPath = join19(getAgentDir(environment), "settings.json");
   const projectSettingsPath = resolve11(cwd, ".pi", "settings.json");
   const global2 = readJsonFile(globalSettingsPath);
   const project = readJsonFile(projectSettingsPath);
@@ -79054,7 +79094,7 @@ function getMergedSettings(cwd, environment) {
 }
 function getAgentDir(environment = process.env) {
   const configured = environment["PI_CODING_AGENT_DIR"];
-  return configured ? resolve11(configured) : join17(environmentHome(environment), ".pi", "agent");
+  return configured ? resolve11(configured) : join19(environmentHome(environment), ".pi", "agent");
 }
 function getEnableSkillCommands(cwd, environment = process.env) {
   const merged = getMergedSettings(cwd, environment);
@@ -79310,7 +79350,7 @@ var SessionStore = class {
 
 // src/acp/harness/pi/upstream/dist/acp/slash-commands.js
 import { existsSync as existsSync6, readdirSync as readdirSync5, readFileSync as readFileSync6 } from "node:fs";
-import { join as join18, resolve as resolve12 } from "node:path";
+import { join as join20, resolve as resolve12 } from "node:path";
 function parseFrontmatter(content) {
   const frontmatter = {};
   if (!content.startsWith("---")) {
@@ -79338,7 +79378,7 @@ function loadCommandsFromDir(dir, source, subdir = "") {
   try {
     const entries = readdirSync5(dir, { withFileTypes: true });
     for (const entry of entries) {
-      const fullPath = join18(dir, entry.name);
+      const fullPath = join20(dir, entry.name);
       if (entry.isDirectory()) {
         const newSubdir = subdir ? `${subdir}:${entry.name}` : entry.name;
         commands.push(...loadCommandsFromDir(fullPath, source, newSubdir));
@@ -79378,7 +79418,7 @@ function loadCommandsFromDir(dir, source, subdir = "") {
 }
 function loadSlashCommands(cwd, environment = process.env) {
   const commands = [];
-  const userDir = join18(environmentHome(environment), ".pi", "agent", "prompts");
+  const userDir = join20(environmentHome(environment), ".pi", "agent", "prompts");
   const projectDir = resolve12(cwd, ".pi", "prompts");
   commands.push(...loadCommandsFromDir(userDir, "user"));
   commands.push(...loadCommandsFromDir(projectDir, "project"));
@@ -81025,7 +81065,7 @@ ${JSON.stringify(stats, null, 2)}`;
             if (piPath) {
               const resolved = realpathSync4(piPath);
               const pkgRoot = dirname8(dirname8(resolved));
-              const p = join19(pkgRoot, "CHANGELOG.md");
+              const p = join21(pkgRoot, "CHANGELOG.md");
               if (existsSync7(p)) {
                 return p;
               }
@@ -81036,7 +81076,7 @@ ${JSON.stringify(stats, null, 2)}`;
             const npmRoot = spawnSync("npm", ["root", "-g"], { encoding: "utf-8" });
             const root = String(npmRoot.stdout ?? "").trim();
             if (root) {
-              const p = join19(root, "@earendil-works", "pi-coding-agent", "CHANGELOG.md");
+              const p = join21(root, "@earendil-works", "pi-coding-agent", "CHANGELOG.md");
               if (existsSync7(p)) {
                 return p;
               }
@@ -81130,7 +81170,7 @@ ${JSON.stringify(stats, null, 2)}`;
           return { stopReason: "end_turn" };
         }
         const safeSessionId = session.sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
-        const outputPath = join19(session.cwd, `pi-session-${safeSessionId}.html`);
+        const outputPath = join21(session.cwd, `pi-session-${safeSessionId}.html`);
         let resultPath = "";
         try {
           const result2 = await session.proc.exportHtml(outputPath);
@@ -81844,7 +81884,7 @@ function buildStartupInfo(opts) {
     md.push("");
   };
   const contextItems = [];
-  const contextPath = join19(opts.cwd, "AGENTS.md");
+  const contextPath = join21(opts.cwd, "AGENTS.md");
   if (existsSync7(contextPath)) {
     contextItems.push(contextPath);
   }
@@ -81853,7 +81893,7 @@ function buildStartupInfo(opts) {
   const pushSkillFromRoot = (root) => {
     try {
       for (const e of readdirSync6(root)) {
-        const p = join19(root, e);
+        const p = join21(root, e);
         try {
           const st2 = statSync4(p);
           if (st2.isFile() && e.toLowerCase().endsWith(".md")) {
@@ -81878,7 +81918,7 @@ function buildStartupInfo(opts) {
           if (name2 === "node_modules" || name2 === ".git") {
             continue;
           }
-          const p = join19(dir, name2);
+          const p = join21(dir, name2);
           let st2;
           try {
             st2 = statSync4(p);
@@ -81895,16 +81935,16 @@ function buildStartupInfo(opts) {
     } catch {
     }
   };
-  const globalSkillsDir = join19(getAgentDir(opts.environment), "skills");
+  const globalSkillsDir = join21(getAgentDir(opts.environment), "skills");
   pushSkillFromRoot(globalSkillsDir);
   const home = opts.environment["HOME"] ?? opts.environment["USERPROFILE"] ?? "";
-  const legacyAgentsSkillsDir = join19(home, ".agents", "skills");
+  const legacyAgentsSkillsDir = join21(home, ".agents", "skills");
   pushSkillFromRoot(legacyAgentsSkillsDir);
-  const projectSkillsDir = join19(opts.cwd, ".pi", "skills");
+  const projectSkillsDir = join21(opts.cwd, ".pi", "skills");
   pushSkillFromRoot(projectSkillsDir);
   addSection("Skills", skillsItems);
   const promptsItems = [];
-  const promptsDir = join19(home, ".pi", "agent", "prompts");
+  const promptsDir = join21(home, ".pi", "agent", "prompts");
   try {
     const prompts = readdirSync6(promptsDir).filter((f) => f.endsWith(".md"));
     for (const f of prompts) {
@@ -81914,17 +81954,17 @@ function buildStartupInfo(opts) {
   }
   addSection("Prompts", promptsItems);
   const extItems = [];
-  const extDir = join19(home, ".pi", "agent", "extensions");
+  const extDir = join21(home, ".pi", "agent", "extensions");
   try {
     const exts = readdirSync6(extDir).filter((f) => f.endsWith(".ts") || f.endsWith(".js"));
     for (const f of exts) {
-      extItems.push(join19(extDir, f));
+      extItems.push(join21(extDir, f));
     }
   } catch {
   }
   const settingsPaths = [
-    join19(getAgentDir(opts.environment), "settings.json"),
-    join19(opts.cwd, ".pi", "settings.json")
+    join21(getAgentDir(opts.environment), "settings.json"),
+    join21(opts.cwd, ".pi", "settings.json")
   ];
   for (const settingsPath of settingsPaths) {
     try {
@@ -82122,7 +82162,7 @@ var PiAgentSpecification = class extends InProcessAcpAgentSpecification {
   // keeps the adapter's opt-in capability flag enabled for every launch it owns.
   createLaunchEnvironment = async (_agent, context) => {
     const workspaceHash = createHash4("sha256").update(context.defaultWorkspace).digest("hex").slice(0, 24);
-    const sessionDirectory = join20(context.dataDirectory, "agents", "pi", "sessions", workspaceHash);
+    const sessionDirectory = join22(context.dataDirectory, "agents", "pi", "sessions", workspaceHash);
     return Object.freeze({
       PI_ACP_ENABLE_EMBEDDED_CONTEXT: "true",
       MOBIUS_PI_SESSION_DIR: sessionDirectory
@@ -82855,7 +82895,7 @@ async function publishAgentCatalog(config2, signal) {
 }
 
 // src/runtime/config.ts
-import { join as join22, resolve as resolve14 } from "node:path";
+import { join as join24, resolve as resolve14 } from "node:path";
 
 // src/util/serial-task-queue.ts
 var SerialTaskQueue = class {
@@ -82928,19 +82968,19 @@ var LocalAgentCatalog = class {
 
 // src/storage/state-directory.ts
 import { homedir as homedir3 } from "node:os";
-import { join as join21, resolve as resolve13 } from "node:path";
+import { join as join23, resolve as resolve13 } from "node:path";
 var stateRootSchema = external_exports.string().brand();
 function readStateDirectory(environment = process.env) {
   const configured = environment["MOBIUS_STATE_DIRECTORY"]?.trim();
   return stateRootSchema.parse(
-    configured !== void 0 && configured.length > 0 ? resolve13(configured) : join21(homedir3(), ".mobius")
+    configured !== void 0 && configured.length > 0 ? resolve13(configured) : join23(homedir3(), ".mobius")
   );
 }
 
 // src/runtime/config.ts
 function loadDefaultWorkspace(dataDirectory, environment = process.env) {
   const { MOBIUS_DEFAULT_WORKSPACE: configuredWorkspace } = environment;
-  return configuredWorkspace ?? join22(dataDirectory, "workspace");
+  return configuredWorkspace ?? join24(dataDirectory, "workspace");
 }
 var RuntimeLocalContext = class {
   environment;
@@ -83049,7 +83089,7 @@ import { resolve as resolve15 } from "node:path";
 // src/storage/installation/installation-files.ts
 import { createHash as createHash5, randomUUID as randomUUID12 } from "node:crypto";
 import { mkdir as mkdir4, open as open5, readdir as readdir5, rename as rename3, unlink as unlink3, writeFile } from "node:fs/promises";
-import { dirname as dirname9, join as join23 } from "node:path";
+import { dirname as dirname9, join as join25 } from "node:path";
 
 // src/util/node-error.ts
 function isNodeError(error62, code) {
@@ -83072,23 +83112,23 @@ var STATE_ROOT_ENTRY_NAMES = new Set(Object.values(STATE_ROOT_LAYOUT));
 // src/storage/installation/installation-files.ts
 var MAXIMUM_FILE_BYTES = 16 * 1024;
 function applicationDirectory(root, applicationId) {
-  return join23(root, STATE_ROOT_LAYOUT.installations, applicationId);
+  return join25(root, STATE_ROOT_LAYOUT.installations, applicationId);
 }
 function installationPointerPath(applicationDirectory2) {
-  return join23(applicationDirectory2, "current.json");
+  return join25(applicationDirectory2, "current.json");
 }
 var installationDirectorySchema = external_exports.string().brand();
 function installationDirectory(applicationDirectory2, installationId2) {
-  return installationDirectorySchema.parse(join23(applicationDirectory2, installationId2));
+  return installationDirectorySchema.parse(join25(applicationDirectory2, installationId2));
 }
 function connectionDirectory(installationDirectory2) {
-  return join23(installationDirectory2, "connections");
+  return join25(installationDirectory2, "connections");
 }
 function connectionFilePath(connectionDirectory2, connectionId2) {
-  return join23(connectionDirectory2, `${connectionId2}.json`);
+  return join25(connectionDirectory2, `${connectionId2}.json`);
 }
 function channelIndexFilePath(installationDirectory2, channelId) {
-  return join23(installationDirectory2, "channels", `mci_${createHash5("sha256").update(channelId).digest("hex")}.json`);
+  return join25(installationDirectory2, "channels", `mci_${createHash5("sha256").update(channelId).digest("hex")}.json`);
 }
 async function readInstallationFile(path7) {
   let handle;
@@ -83110,7 +83150,7 @@ async function readInstallationFile(path7) {
 async function writeInstallationFile(path7, text2, signal) {
   signal.throwIfAborted();
   const directory = dirname9(path7);
-  const temporaryPath = join23(directory, `.${randomUUID12()}.tmp`);
+  const temporaryPath = join25(directory, `.${randomUUID12()}.tmp`);
   try {
     await mkdir4(directory, { mode: 448, recursive: true });
     signal.throwIfAborted();
@@ -87766,7 +87806,7 @@ var SessionTurns = class {
 
 // src/session/workspace/workspace-directory.ts
 import { homedir as homedir4 } from "node:os";
-import { basename as basename7, dirname as dirname10, isAbsolute as isAbsolute15, join as join25, normalize as normalize2, relative as relative2 } from "node:path";
+import { basename as basename7, dirname as dirname10, isAbsolute as isAbsolute15, join as join27, normalize as normalize2, relative as relative2 } from "node:path";
 var WorkspaceDirectoryListing = class {
   directoryId;
   directoryLabel;
@@ -87888,7 +87928,7 @@ var WorkspaceDirectoryService = class {
           continue;
         }
         try {
-          const path7 = await this.resolvePath(join25(target, child.name), signal);
+          const path7 = await this.resolvePath(join27(target, child.name), signal);
           entries.push({ directoryId: encodePath(path7), name: child.name });
         } catch (cause) {
           signal.throwIfAborted();
@@ -88036,12 +88076,12 @@ function buildSessionLayer(options) {
 
 // src/session/content/external-content-store.ts
 import { createHash as createHash7 } from "node:crypto";
-import { join as join27 } from "node:path";
+import { join as join29 } from "node:path";
 
 // src/storage/files/scratch-directory.ts
 import { randomUUID as randomUUID17 } from "node:crypto";
 import { lstat as lstat4, mkdir as mkdir5, readdir as readdir6, readFile as readFile6, realpath as realpath7, rename as rename4, rm as rm3, stat as stat6, utimes, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname11, join as join26 } from "node:path";
+import { dirname as dirname11, join as join28 } from "node:path";
 async function atomicWrite(path7, bytes, signal) {
   const temporary = `${path7}.${randomUUID17()}.tmp`;
   try {
@@ -88055,7 +88095,7 @@ async function atomicWrite(path7, bytes, signal) {
 var ScratchDirectory = class {
   #root;
   constructor(parent) {
-    this.#root = join26(parent, randomUUID17());
+    this.#root = join28(parent, randomUUID17());
   }
   /** Refreshes this directory's lease and removes sibling directories whose lease is older than `leaseMilliseconds`. */
   refreshLease = async (leaseMilliseconds) => {
@@ -88066,7 +88106,7 @@ var ScratchDirectory = class {
       if (!directory.isDirectory() || !/^[a-f0-9-]{36}$/u.test(directory.name)) {
         continue;
       }
-      const path7 = join26(dirname11(this.#root), directory.name);
+      const path7 = join28(dirname11(this.#root), directory.name);
       if (path7 === this.#root) {
         continue;
       }
@@ -88081,10 +88121,10 @@ var ScratchDirectory = class {
   };
   /** Writes `bytes` atomically to `<group>/<name>` with owner-only permissions and returns the path. */
   write = async (group, name2, bytes, signal) => {
-    const directory = join26(this.#root, group);
+    const directory = join28(this.#root, group);
     await mkdir5(directory, { mode: 448, recursive: true });
     signal.throwIfAborted();
-    const path7 = join26(directory, name2);
+    const path7 = join28(directory, name2);
     await atomicWrite(path7, bytes, signal);
     return path7;
   };
@@ -88131,7 +88171,7 @@ var LocalExternalContentStore = class {
   #expirationTimer;
   #cleanup = Promise.resolve();
   constructor(stateDirectory) {
-    this.#scratch = new ScratchDirectory(join27(stateDirectory, "tmp", "session-content"));
+    this.#scratch = new ScratchDirectory(join29(stateDirectory, "tmp", "session-content"));
     this.#expirationTimer = setInterval(() => {
       void this.#expire().catch(() => void 0);
     }, 6e4);
@@ -88514,11 +88554,11 @@ var AgentProcessPool = class {
 };
 
 // src/runtime/observability/diagnostic-log.ts
-import { join as join30 } from "node:path";
+import { join as join32 } from "node:path";
 
 // src/storage/logs/bounded-log.ts
 import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync4, readFileSync as readFileSync9, renameSync as renameSync2, statSync as statSync5, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join28 } from "node:path";
+import { join as join30 } from "node:path";
 var BoundedLineLog = class {
   #path;
   #maximumBytes;
@@ -88527,7 +88567,7 @@ var BoundedLineLog = class {
   #onWriteFailure;
   constructor(directory, filename, maximumBytes, onWriteFailure = () => void 0) {
     this.#directory = directory;
-    this.#path = join28(directory, filename);
+    this.#path = join30(directory, filename);
     this.#maximumBytes = maximumBytes;
     this.#onWriteFailure = onWriteFailure;
   }
@@ -88578,21 +88618,21 @@ var BoundedLineLog = class {
 
 // src/storage/logs/log-files.ts
 import { readFileSync as readFileSync10 } from "node:fs";
-import { join as join29, relative as relative3 } from "node:path";
+import { join as join31, relative as relative3 } from "node:path";
 var DAEMON_LOG_FILENAME = "daemon.log";
 var WORKER_LIFECYCLE_LOG_FILENAME = "worker-lifecycle.log";
 function unhandledRejectionLogFilename(role) {
   return `unhandled-rejections-${role}.log`;
 }
 function logDirectory(stateDirectory) {
-  return join29(stateDirectory, "logs");
+  return join31(stateDirectory, "logs");
 }
 function processLogPaths(stateDirectory) {
   return [
     WORKER_LIFECYCLE_LOG_FILENAME,
     unhandledRejectionLogFilename("manager"),
     unhandledRejectionLogFilename("worker")
-  ].map((filename) => join29(logDirectory(stateDirectory), filename));
+  ].map((filename) => join31(logDirectory(stateDirectory), filename));
 }
 function readLogText(path7) {
   try {
@@ -88648,7 +88688,7 @@ var RuntimeDiagnosticLog = class {
     this.#maximumBytes = maximumBytes;
     const processLogsDirectory = options.processLogsDirectory;
     this.#sources = [
-      { maximumBytes, path: join30(directory, DAEMON_LOG_FILENAME) },
+      { maximumBytes, path: join32(directory, DAEMON_LOG_FILENAME) },
       // The process logs a Runtime does not own, but must read to explain its own deaths.
       ...processLogsDirectory === void 0 ? [] : processLogPaths(processLogsDirectory).map((path7) => ({ maximumBytes: null, path: path7 }))
     ];
@@ -89631,7 +89671,7 @@ function createContentWriteCommands(context) {
 import { WebSocket as WebSocket5 } from "undici";
 
 // src/session/content/session-files.ts
-import { basename as basename8, extname as extname2, isAbsolute as isAbsolute16, join as join31, normalize as normalize3, resolve as resolve17 } from "node:path";
+import { basename as basename8, extname as extname2, isAbsolute as isAbsolute16, join as join33, normalize as normalize3, resolve as resolve17 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 function requestedPath(value) {
   if (value.includes("\0")) {
@@ -89655,7 +89695,7 @@ async function resolveFile(value, workingDirectory, signal) {
   if (isAbsolute16(requested.path) && normalize3(requested.path) !== requested.path) {
     return null;
   }
-  const candidates = requested.explicitUrl || workingDirectory === null ? [requested.path] : isAbsolute16(requested.path) ? [join31(workingDirectory, requested.path), requested.path] : [resolve17(workingDirectory, requested.path)];
+  const candidates = requested.explicitUrl || workingDirectory === null ? [requested.path] : isAbsolute16(requested.path) ? [join33(workingDirectory, requested.path), requested.path] : [resolve17(workingDirectory, requested.path)];
   for (const candidate of candidates) {
     if (!isAbsolute16(candidate) || normalize3(candidate) !== candidate) {
       continue;