@openscout/scout 0.2.102 → 0.2.106

package/dist/update-helper.mjs

@@ -2069,6 +2069,7 @@ var AGENT_HARNESSES = [
   "flue",
   "cursor",
   "opencode",
+  "devin",
   "native",
   "worker",
   "bridge",
@@ -2579,7 +2580,8 @@ var SCOUT_LAUNCHABLE_HARNESSES = [
   "flue",
   "cursor",
   "opencode",
-  "pi"
+  "pi",
+  "devin"
 ];
 
 // ../protocol/src/scout-composer.ts
@@ -2710,8 +2712,11 @@ var scoutBrokerPaths = {
     machines: "/v1/machines",
     machinesScan: "/v1/machines/scan",
     messages: "/v1/messages",
+    messageReactions: "/v1/message-reactions",
+    messageReactionsRemove: "/v1/message-reactions/remove",
     brokerMessages: "/v1/broker/messages",
     eventsStream: "/v1/events/stream",
+    commands: "/v1/commands",
     actors: "/v1/actors",
     agents: "/v1/agents",
     endpoints: "/v1/endpoints",
@@ -3184,6 +3189,13 @@ var CREDENTIAL_DOMAINS = {
     ]
   },
   groq: { id: "groq", label: "Groq", env: [envCredential("GROQ_API_KEY")] },
+  devin: {
+    id: "devin",
+    label: "Cognition / Devin",
+    env: [
+      envCredential("WINDSURF_API_KEY", { billing: "subscription" })
+    ]
+  },
   cerebras: { id: "cerebras", label: "Cerebras", env: [envCredential("CEREBRAS_API_KEY")] },
   mistral: { id: "mistral", label: "Mistral", env: [envCredential("MISTRAL_API_KEY")] },
   zai: { id: "zai", label: "Z.ai", env: [envCredential("ZAI_API_KEY")] },
@@ -3267,6 +3279,22 @@ var HARNESS_AUTH_MODELS = {
     ],
     login: { command: "grok login", interactive: true },
     notReadyMessage: "Grok is installed but not authenticated yet."
+  },
+  devin: {
+    harness: "devin",
+    mode: "hybrid",
+    domains: ["devin"],
+    credentials: [
+      {
+        kind: "file",
+        path: "~/.local/share/devin/credentials.toml",
+        portable: false,
+        fileType: "file"
+      },
+      ...domainEnv("devin")
+    ],
+    login: { command: "devin auth login", interactive: true },
+    notReadyMessage: "Devin is installed but still needs devin auth login or WINDSURF_API_KEY."
   }
 };
 HARNESS_AUTH_MODELS["grok-acp"] = {
@@ -3612,6 +3640,39 @@ var BUILT_IN_HARNESS_CATALOG = [
       transport: "acp_stdio"
     }
   },
+  {
+    name: "devin",
+    harness: "devin",
+    label: "Devin",
+    description: "Cognition's Devin CLI coding agent over ACP",
+    homepage: "https://docs.devin.ai/cli",
+    tags: ["coding", "cli", "devin", "cognition", "acp"],
+    featured: true,
+    order: 4,
+    support: {
+      ...DEFAULT_SUPPORT,
+      workspace: true,
+      collaboration: true,
+      files: true
+    },
+    install: {
+      binary: "devin",
+      requires: ["curl"],
+      macos: "brew install --cask devin-cli",
+      linux: "curl -fsSL https://cli.devin.ai/install.sh | bash",
+      windows: "irm https://cli.devin.ai/install.ps1 | iex",
+      verify: "devin --version >/dev/null 2>&1"
+    },
+    readiness: readinessFromAuthModel("devin"),
+    sessionDefaults: {
+      defaultTransport: "devin_acp"
+    },
+    capabilities: ["chat", "invoke", "deliver", "review", "execute"],
+    metadata: {
+      adapterType: "devin-acp",
+      transport: "acp_stdio"
+    }
+  },
   {
     name: "flue",
     harness: "flue",
@@ -5579,11 +5640,104 @@ import { basename as basename3, dirname as dirname5, join as join7, resolve as r
 import { fileURLToPath as fileURLToPath2 } from "url";
 
 // ../runtime/src/schema-version.ts
-var CONTROL_PLANE_SCHEMA_VERSION = 17;
+var CONTROL_PLANE_SCHEMA_VERSION = 18;
 
 // ../runtime/src/sqlite-adapter.ts
 import { createRequire } from "module";
 
+// ../runtime/src/sqlite-observation.ts
+import { createHash as createHash2 } from "crypto";
+function observeSqliteDatabase(database, options) {
+  const configured = options.thresholdMs ?? Number(process.env.OPENSCOUT_SLOW_DB_MS ?? 100);
+  const threshold = Number.isFinite(configured) && configured >= 0 ? configured : 100;
+  if (threshold === 0)
+    return database;
+  const now = options.now ?? (() => performance.now());
+  const emit = options.emit ?? ((event) => console.warn("[scout-db]", JSON.stringify(event)));
+  const statements = new WeakMap;
+  let windowStart = -Infinity;
+  let emitted = 0;
+  let suppressed = 0;
+  function timed(operation, sql, call) {
+    const start = now();
+    let outcome = "error";
+    try {
+      const result = call();
+      outcome = "ok";
+      return result;
+    } finally {
+      try {
+        const end = now();
+        const duration = end - start;
+        if (duration >= threshold) {
+          if (end - windowStart >= 60000) {
+            windowStart = end;
+            emitted = 0;
+          }
+          if (emitted >= 10) {
+            suppressed += 1;
+          } else {
+            emitted += 1;
+            const caller = (new Error().stack ?? "").split(`
+`).filter((line) => !/sqlite-observation\.(?:ts|js):/.test(line)).map((line) => line.match(/(?:packages|apps)\/[\w./-]+:\d+:\d+/)?.[0]).filter((line) => Boolean(line)).slice(0, 4);
+            emit({
+              event: "slow_sqlite",
+              database: options.database,
+              pid: process.pid,
+              operation,
+              queryId: createHash2("sha256").update(sql).digest("hex").slice(0, 16),
+              durationMs: Math.round(duration * 100) / 100,
+              outcome,
+              suppressed,
+              caller
+            });
+            suppressed = 0;
+          }
+        }
+      } catch {}
+    }
+  }
+  function statementProxy(statement, sql) {
+    const existing = statements.get(statement);
+    if (existing)
+      return existing;
+    const proxy = bindProxy(statement, (key, method, args) => {
+      if (["all", "get", "run", "values"].includes(key)) {
+        return timed(key, sql, () => Reflect.apply(method, statement, args));
+      }
+      return Reflect.apply(method, statement, args);
+    });
+    statements.set(statement, proxy);
+    return proxy;
+  }
+  return bindProxy(database, (key, method, args) => {
+    if (["query", "prepare"].includes(key) && typeof args[0] === "string") {
+      const sql = args[0];
+      const statement = timed(`${key}.prepare`, sql, () => Reflect.apply(method, database, args));
+      return statementProxy(statement, sql);
+    }
+    if (["exec", "run"].includes(key) && typeof args[0] === "string") {
+      return timed(key, args[0], () => Reflect.apply(method, database, args));
+    }
+    return Reflect.apply(method, database, args);
+  });
+}
+function bindProxy(target, invoke) {
+  const methods = new Map;
+  return new Proxy(target, {
+    get(object, key) {
+      const value = Reflect.get(object, key, object);
+      if (typeof value !== "function" || key === "constructor")
+        return value;
+      const cached = methods.get(key);
+      if (cached?.original === value)
+        return cached.wrapped;
+      const wrapped = (...args) => invoke(String(key), value, args);
+      methods.set(key, { original: value, wrapped });
+      return wrapped;
+    }
+  });
+}
 // ../runtime/src/runtime-adapters.ts
 function detectRuntimeHost(globalScope = globalThis) {
   return typeof globalScope.Bun === "undefined" ? "node" : "bun";
@@ -5649,13 +5803,13 @@ function openRuntimeSqliteDatabase(path, options) {
   const adapter = controlPlaneSqliteAdapterKind();
   if (adapter === "bun-sqlite") {
     const { Database } = require2("bun:sqlite");
-    return new Database(path, options);
+    return observeSqliteDatabase(new Database(path, options), { database: "runtime" });
   }
   const { DatabaseSync } = require2("node:sqlite");
-  return new NodeSqliteDatabaseAdapter(new DatabaseSync(path, {
+  return observeSqliteDatabase(new NodeSqliteDatabaseAdapter(new DatabaseSync(path, {
     open: true,
     readOnly: options?.readonly === true
-  }));
+  })), { database: "runtime" });
 }
 function prepareNodeSqliteSql(sql) {
   const numberedParamIndexes = [];
@@ -5961,7 +6115,9 @@ var OPENSCOUT_PORTS = {
   pairingBridge: 43130,
   pairingRelay: 43131,
   pairingFileServer: 43132,
-  studio: 43140
+  studio: 43140,
+  jetstream: 43150,
+  jetstreamMonitor: 43151
 };
 var DEFAULT_LOCAL_CONFIG = {
   version: LOCAL_CONFIG_VERSION,
@@ -6000,7 +6156,7 @@ function validateLocalConfig(input) {
   if (typeof raw.webLocalName === "string" && raw.webLocalName.trim().length > 0) {
     out.webLocalName = raw.webLocalName.trim();
   }
-  if (raw.webLanScope === "full" || raw.webLanScope === "pairing") {
+  if (raw.webLanScope === "full" || raw.webLanScope === "pairing" || raw.webLanScope === "chat") {
     out.webLanScope = raw.webLanScope;
   }
   if (raw.ports && typeof raw.ports === "object") {
@@ -13104,7 +13260,7 @@ var agentsTable = sqliteTable("agents", {
 ]);
 var agentEndpointsTable = sqliteTable("agent_endpoints", {
   id: text("id").primaryKey(),
-  agentId: text("agent_id").notNull().references(() => agentsTable.id, { onDelete: "cascade" }),
+  agentId: text("agent_id").notNull().references(() => actorsTable.id, { onDelete: "cascade" }),
   nodeId: text("node_id").notNull().references(() => nodesTable.id, { onDelete: "restrict" }),
   harness: text("harness").notNull(),
   transport: text("transport").notNull(),
@@ -13128,7 +13284,7 @@ var agentEndpointsTable = sqliteTable("agent_endpoints", {
 ]);
 var runtimeSessionsTable = sqliteTable("runtime_sessions", {
   id: text("id").primaryKey(),
-  agentId: text("agent_id").notNull().references(() => agentsTable.id, { onDelete: "cascade" }),
+  agentId: text("agent_id").notNull().references(() => actorsTable.id, { onDelete: "cascade" }),
   endpointId: text("endpoint_id").notNull().references(() => agentEndpointsTable.id, { onDelete: "cascade" }),
   nodeId: text("node_id").notNull().references(() => nodesTable.id, { onDelete: "restrict" }),
   harness: text("harness").notNull(),
@@ -13156,7 +13312,7 @@ var runtimeSessionAliasesTable = sqliteTable("runtime_session_aliases", {
   alias: text("alias").notNull(),
   sessionId: text("session_id").notNull().references(() => runtimeSessionsTable.id, { onDelete: "cascade" }),
   aliasKind: text("alias_kind").notNull(),
-  agentId: text("agent_id").notNull().references(() => agentsTable.id, { onDelete: "cascade" }),
+  agentId: text("agent_id").notNull().references(() => actorsTable.id, { onDelete: "cascade" }),
   endpointId: text("endpoint_id").notNull().references(() => agentEndpointsTable.id, { onDelete: "cascade" }),
   nodeId: text("node_id").notNull().references(() => nodesTable.id, { onDelete: "restrict" }),
   harness: text("harness").notNull(),
@@ -13281,6 +13437,15 @@ var messageMentionsTable = sqliteTable("message_mentions", {
 }, (table) => [
   primaryKey({ columns: [table.messageId, table.actorId] })
 ]);
+var messageReactionsTable = sqliteTable("message_reactions", {
+  messageId: text("message_id").notNull().references(() => messagesTable.id, { onDelete: "cascade" }),
+  actorId: text("actor_id").notNull().references(() => actorsTable.id, { onDelete: "restrict" }),
+  emoji: text("emoji").notNull(),
+  createdAt: integer("created_at").notNull()
+}, (table) => [
+  primaryKey({ columns: [table.messageId, table.actorId, table.emoji] }),
+  index("idx_message_reactions_message").on(table.messageId)
+]);
 var messageAttachmentsTable = sqliteTable("message_attachments", {
   id: text("id").primaryKey(),
   messageId: text("message_id").notNull().references(() => messagesTable.id, { onDelete: "cascade" }),
@@ -13402,7 +13567,7 @@ var invocationsTable = sqliteTable("invocations", {
   id: text("id").primaryKey(),
   requesterId: text("requester_id").notNull().references(() => actorsTable.id, { onDelete: "restrict" }),
   requesterNodeId: text("requester_node_id").notNull().references(() => nodesTable.id, { onDelete: "restrict" }),
-  targetAgentId: text("target_agent_id").notNull().references(() => agentsTable.id, { onDelete: "restrict" }),
+  targetAgentId: text("target_agent_id").notNull().references(() => actorsTable.id, { onDelete: "restrict" }),
   targetNodeId: text("target_node_id").references(() => nodesTable.id, { onDelete: "set null" }),
   action: text("action").notNull(),
   task: text("task").notNull(),
@@ -13437,7 +13602,7 @@ var flightsTable = sqliteTable("flights", {
   id: text("id").primaryKey(),
   invocationId: text("invocation_id").notNull().references(() => invocationsTable.id, { onDelete: "cascade" }),
   requesterId: text("requester_id").notNull().references(() => actorsTable.id, { onDelete: "restrict" }),
-  targetAgentId: text("target_agent_id").notNull().references(() => agentsTable.id, { onDelete: "restrict" }),
+  targetAgentId: text("target_agent_id").notNull().references(() => actorsTable.id, { onDelete: "restrict" }),
   state: text("state").notNull(),
   summary: text("summary"),
   output: text("output"),
@@ -13686,7 +13851,7 @@ var activityItemsTable = sqliteTable("activity_items", {
   recordId: text("record_id").references(() => collaborationRecordsTable.id, { onDelete: "cascade" }),
   actorId: text("actor_id").references(() => actorsTable.id, { onDelete: "set null" }),
   counterpartId: text("counterpart_id").references(() => actorsTable.id, { onDelete: "set null" }),
-  agentId: text("agent_id").references(() => agentsTable.id, { onDelete: "set null" }),
+  agentId: text("agent_id").references(() => actorsTable.id, { onDelete: "set null" }),
   workspaceRoot: text("workspace_root"),
   sessionId: text("session_id"),
   title: text("title"),
@@ -13848,7 +14013,7 @@ var missionLogEntriesTable = sqliteTable("mission_log_entries", {
 var CONTROL_PLANE_RUNTIME_SESSION_SQLITE_SCHEMA = `
 CREATE TABLE IF NOT EXISTS runtime_sessions (
   id TEXT PRIMARY KEY,
-  agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
+  agent_id TEXT NOT NULL REFERENCES actors(id) ON DELETE CASCADE,
   endpoint_id TEXT NOT NULL REFERENCES agent_endpoints(id) ON DELETE CASCADE,
   node_id TEXT NOT NULL REFERENCES nodes(id) ON DELETE RESTRICT,
   harness TEXT NOT NULL,
@@ -13871,7 +14036,7 @@ CREATE TABLE IF NOT EXISTS runtime_session_aliases (
   alias TEXT NOT NULL,
   session_id TEXT NOT NULL REFERENCES runtime_sessions(id) ON DELETE CASCADE,
   alias_kind TEXT NOT NULL,
-  agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
+  agent_id TEXT NOT NULL REFERENCES actors(id) ON DELETE CASCADE,
   endpoint_id TEXT NOT NULL REFERENCES agent_endpoints(id) ON DELETE CASCADE,
   node_id TEXT NOT NULL REFERENCES nodes(id) ON DELETE RESTRICT,
   harness TEXT NOT NULL,
@@ -14067,7 +14232,7 @@ CREATE TABLE IF NOT EXISTS agents (
 
 CREATE TABLE IF NOT EXISTS agent_endpoints (
   id TEXT PRIMARY KEY,
-  agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
+  agent_id TEXT NOT NULL REFERENCES actors(id) ON DELETE CASCADE,
   node_id TEXT NOT NULL REFERENCES nodes(id) ON DELETE RESTRICT,
   harness TEXT NOT NULL,
   transport TEXT NOT NULL,
@@ -14128,6 +14293,16 @@ CREATE TABLE IF NOT EXISTS message_mentions (
   PRIMARY KEY (message_id, actor_id)
 );
 
+CREATE TABLE IF NOT EXISTS message_reactions (
+  message_id TEXT NOT NULL REFERENCES messages(id) ON DELETE CASCADE,
+  actor_id TEXT NOT NULL REFERENCES actors(id) ON DELETE RESTRICT,
+  emoji TEXT NOT NULL,
+  created_at INTEGER NOT NULL,
+  PRIMARY KEY (message_id, actor_id, emoji)
+);
+CREATE INDEX IF NOT EXISTS idx_message_reactions_message
+  ON message_reactions (message_id);
+
 CREATE TABLE IF NOT EXISTS message_attachments (
   id TEXT PRIMARY KEY,
   message_id TEXT NOT NULL REFERENCES messages(id) ON DELETE CASCADE,
@@ -14241,7 +14416,7 @@ CREATE TABLE IF NOT EXISTS invocations (
   id TEXT PRIMARY KEY,
   requester_id TEXT NOT NULL REFERENCES actors(id) ON DELETE RESTRICT,
   requester_node_id TEXT NOT NULL REFERENCES nodes(id) ON DELETE RESTRICT,
-  target_agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE RESTRICT,
+  target_agent_id TEXT NOT NULL REFERENCES actors(id) ON DELETE RESTRICT,
   target_node_id TEXT REFERENCES nodes(id) ON DELETE SET NULL,
   action TEXT NOT NULL,
   task TEXT NOT NULL,
@@ -14271,7 +14446,7 @@ CREATE TABLE IF NOT EXISTS flights (
   id TEXT PRIMARY KEY,
   invocation_id TEXT NOT NULL REFERENCES invocations(id) ON DELETE CASCADE,
   requester_id TEXT NOT NULL REFERENCES actors(id) ON DELETE RESTRICT,
-  target_agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE RESTRICT,
+  target_agent_id TEXT NOT NULL REFERENCES actors(id) ON DELETE RESTRICT,
   state TEXT NOT NULL,
   summary TEXT,
   output TEXT,
@@ -14493,7 +14668,7 @@ CREATE TABLE IF NOT EXISTS activity_items (
   record_id TEXT REFERENCES collaboration_records(id) ON DELETE CASCADE,
   actor_id TEXT REFERENCES actors(id) ON DELETE SET NULL,
   counterpart_id TEXT REFERENCES actors(id) ON DELETE SET NULL,
-  agent_id TEXT REFERENCES agents(id) ON DELETE SET NULL,
+  agent_id TEXT REFERENCES actors(id) ON DELETE SET NULL,
   workspace_root TEXT,
   session_id TEXT,
   title TEXT,
@@ -15079,6 +15254,10 @@ class InMemoryControlRuntime {
         return;
       case "stream.subscribe":
         return;
+      case "channel.invite.create":
+      case "channel.invite.revoke":
+      case "channel.invite.redeem":
+        throw new Error(`${command.kind} must be executed by the durable broker command service, not the in-memory registry.`);
       default: {
         const exhaustive = command;
         return exhaustive;
@@ -15511,7 +15690,7 @@ class InMemoryControlRuntime {
   }
 }
 // ../runtime/src/conversation-thread-artifact.ts
-import { createHash as createHash2, randomBytes as randomBytes2 } from "crypto";
+import { createHash as createHash3, randomBytes as randomBytes2 } from "crypto";
 import {
   existsSync as existsSync13,
   mkdirSync as mkdirSync5,
@@ -15647,7 +15826,7 @@ function artifactBytes(artifact) {
   return Buffer.byteLength(encodedArtifact(artifact), "utf8");
 }
 function contentCursorForArtifact(artifact) {
-  return createHash2("sha256").update(JSON.stringify({
+  return createHash3("sha256").update(JSON.stringify({
     feedId: artifact.feedId,
     entityKind: artifact.entityKind,
     conversationId: artifact.conversationId,
@@ -15657,7 +15836,7 @@ function contentCursorForArtifact(artifact) {
   })).digest("hex");
 }
 function nativeReadThreadArtifactPath(outputDirectory, feedId) {
-  const digest = createHash2("sha256").update(feedId).digest("hex");
+  const digest = createHash3("sha256").update(feedId).digest("hex");
   return join14(outputDirectory, `${ARTIFACT_PREFIX}${digest}${ARTIFACT_SUFFIX}`);
 }
 function buildNativeReadThreadArtifact(snapshot) {
@@ -15826,7 +16005,7 @@ var QUOTA_HISTORY_BUCKET_MS = 60 * 60 * 1000;
 // ../runtime/src/sqlite-store.ts
 var RUNTIME_SESSION_RETENTION_MS = 30 * 24 * 60 * 60 * 1000;
 // ../runtime/src/mesh-peer-auth.ts
-import { createHash as createHash3, randomBytes as randomBytes3 } from "crypto";
+import { createHash as createHash4, randomBytes as randomBytes3 } from "crypto";
 var PEER_AUTH_HEADERS = {
   peer: "x-openscout-peer",
   ts: "x-openscout-ts",
@@ -15861,7 +16040,7 @@ function peerRequestSigningPayload(input) {
 `);
 }
 function sha256Hex(body) {
-  return createHash3("sha256").update(body).digest("hex");
+  return createHash4("sha256").update(body).digest("hex");
 }
 function signPeerRequest(identity, input) {
   const ts = input.ts ?? Date.now();
@@ -15926,7 +16105,7 @@ import { connect as tlsConnect } from "tls";
 
 // ../runtime/src/node-tls-identity.ts
 import {
-  createHash as createHash4,
+  createHash as createHash5,
   createPrivateKey as createPrivateKey2,
   createPublicKey as createPublicKey2,
   generateKeyPairSync as generateKeyPairSync2,
@@ -27999,7 +28178,7 @@ AsnEcSignatureFormatter.namedCurveSize.set("P-521", 66);
 var TLS_CERT_VALIDITY_MS = 365 * 24 * 60 * 60 * 1000;
 var TLS_CERT_RENEWAL_WINDOW_MS = 30 * 24 * 60 * 60 * 1000;
 function tlsSpkiFingerprintFromDer(spkiDer) {
-  return createHash4("sha256").update(spkiDer).digest("hex");
+  return createHash5("sha256").update(spkiDer).digest("hex");
 }
 function tlsSpkiFingerprintFromCertificateDer(certificateDer) {
   const certificate2 = new X509Certificate(asBufferSource(certificateDer));
@@ -28539,7 +28718,7 @@ var MAX_PEER_AGENT_SNAPSHOT_BYTES = 2 * 1024 * 1024;
 import { createRequire as createRequire3 } from "module";
 var require4 = createRequire3(import.meta.url);
 // ../runtime/src/mesh-sas.ts
-import { createHash as createHash5, createHmac } from "crypto";
+import { createHash as createHash6, createHmac } from "crypto";
 
 // ../runtime/src/eff-short-wordlist.ts
 var EFF_SHORT_WORDLIST = [
@@ -29844,7 +30023,7 @@ var EFF_SHORT_WORDLIST = [
 // ../runtime/src/mesh-sas.ts
 var SAS_WORD_COUNT = 6;
 function createEnrollmentCommitment(nonce, cardSignature) {
-  return createHash5("sha256").update(Buffer.concat([nonce, Buffer.from(cardSignature, "utf8")])).digest("base64");
+  return createHash6("sha256").update(Buffer.concat([nonce, Buffer.from(cardSignature, "utf8")])).digest("base64");
 }
 function verifyEnrollmentCommitment(commitment, nonce, cardSignature) {
   const expected = createEnrollmentCommitment(nonce, cardSignature);
@@ -30597,7 +30776,8 @@ var directLocalAgentTransports = new Set([
   "grok_acp",
   "kimi_acp",
   "cursor_acp",
-  "opencode_acp"
+  "opencode_acp",
+  "devin_acp"
 ]);
 
 // ../runtime/src/broker-endpoint-selection.ts
@@ -31253,6 +31433,8 @@ var ACTIVE_FLIGHT_STATES3 = new Set(["queued", "waking", "running", "waiting"]);
 // ../runtime/src/knowledge/store.ts
 var KNOWLEDGE_WARM_SPAN_STALE_MS = 6 * 60 * 60 * 1000;
 var STALE_INDEX_JOB_MS = 10 * 60 * 1000;
+// ../../apps/desktop/src/core/broker/sender.ts
+var TRUTHY_ENV_VALUES = new Set(["1", "true", "yes", "on"]);
 // ../../apps/desktop/src/core/broker/service.ts
 function resolveScoutBrokerUrl() {
   const explicit = process.env.OPENSCOUT_BROKER_URL?.trim();
@@ -31385,7 +31567,7 @@ function createScoutCommandContext(input = {}) {
 
 // ../../apps/desktop/src/cli/commands/install.ts
 import { spawnSync as spawnSync2 } from "child_process";
-import { createHash as createHash6 } from "crypto";
+import { createHash as createHash7 } from "crypto";
 import {
   existsSync as fsExistsSync,
   mkdirSync as fsMkdirSync,
@@ -31396,7 +31578,7 @@ import {
   readFileSync as readFileSync11
 } from "fs";
 import { tmpdir as osTmpdir } from "os";
-import { join as join16 } from "path";
+import { dirname as dirname11, join as join16 } from "path";
 
 // ../../apps/desktop/src/cli/errors.ts
 class ScoutCliError extends Error {
@@ -31409,7 +31591,8 @@ class ScoutCliError extends Error {
 // ../../apps/desktop/src/cli/commands/install.ts
 var OPENSCOUT_RELEASE_OWNER = "oscout";
 var OPENSCOUT_RELEASE_REPOSITORY = "scout";
-var OPENSCOUT_APP_NAME = "OpenScout.app";
+var OPENSCOUT_APP_NAME = "Scout.app";
+var LEGACY_APP_BUNDLE_NAMES = ["OpenScout.app"];
 var OPENSCOUT_APP_BUNDLE_ID = "app.openscout.scout";
 var OPENSCOUT_SIGNING_TEAM_ID = "2U83JFPW66";
 var DEFAULT_OPENSCOUT_APP_PATH = `/Applications/${OPENSCOUT_APP_NAME}`;
@@ -31426,20 +31609,20 @@ var MENU_PROCESS_EXECUTABLE = "ScoutMenu";
 var HELP_FLAGS = new Set(["help", "--help", "-h"]);
 function renderInstallCommandHelp() {
   return [
-    "scout install \u2014 download and install the OpenScout macOS app",
+    "scout install \u2014 download and install the Scout macOS app",
     "",
     "Usage:",
     "  scout install                 # install or update to the latest signed release",
     "  scout install --check         # report installed vs latest, install nothing",
     "  scout install --version <tag> # install a specific release (e.g. v0.2.70)",
     "  scout install --force         # reinstall even if already up to date",
-    "  scout install --no-restart    # do not relaunch OpenScout after installing",
+    "  scout install --no-restart    # do not relaunch Scout after installing",
     "  scout install --candidate <receipt.json> --dmg <file> # explicit local signed candidate",
     "",
     "Behavior:",
     "  Downloads the signed + notarized OpenScout.dmg from the GitHub release,",
     "  verifies the published byte size and sha256 digest when GitHub provides one,",
-    "  then codesign and Gatekeeper-assess the DMG before mounting. OpenScout.app",
+    "  then codesign and Gatekeeper-assess the DMG before mounting. Scout.app",
     "  must match the pinned bundle id and Team ID, pass codesign --deep --strict,",
     "  and pass Gatekeeper execute after staging. A running copy of the installed",
     "  app and any stale ScoutMenu helpers from other checkouts are stopped first;",
@@ -31538,7 +31721,7 @@ function stripLeadingV(tag) {
 function normalizeReleaseVersion(tag) {
   const version2 = stripLeadingV(tag);
   if (!/^\d+\.\d+\.\d+$/.test(version2)) {
-    throw new ScoutCliError(`unsupported OpenScout release tag: ${tag}`);
+    throw new ScoutCliError(`unsupported Scout release tag: ${tag}`);
   }
   return version2;
 }
@@ -31634,7 +31817,7 @@ function verifyDownloadedAsset(buffer, asset) {
   const parsed = parseGithubAssetDigest(digest);
   let actual;
   try {
-    actual = createHash6(parsed.algorithm).update(buffer).digest("hex");
+    actual = createHash7(parsed.algorithm).update(buffer).digest("hex");
   } catch {
     throw new ScoutCliError(`unsupported GitHub asset digest algorithm: ${parsed.algorithm}`);
   }
@@ -31651,7 +31834,7 @@ function findAppDmgAsset(release) {
   const latestAlias = assets.find((asset) => asset.name === LATEST_DMG_ALIAS);
   if (latestAlias)
     return latestAlias;
-  throw new ScoutCliError(`no OpenScout.app DMG found in release ${release.tag_name}. Assets: ${assets.map((asset) => asset.name).join(", ") || "(none)"}`);
+  throw new ScoutCliError(`no product DMG found in release ${release.tag_name}. Assets: ${assets.map((asset) => asset.name).join(", ") || "(none)"}`);
 }
 function infoPlistPath(appPath) {
   return join16(appPath, "Contents", "Info.plist");
@@ -31684,7 +31867,7 @@ async function fetchRelease(version2, deps) {
   if ((gh.status ?? 1) === 0 && gh.stdout.trim()) {
     return JSON.parse(gh.stdout);
   }
-  throw new ScoutCliError(version2 ? `release "${version2}" not found on GitHub (${OPENSCOUT_RELEASE_OWNER}/${OPENSCOUT_RELEASE_REPOSITORY})` : `could not fetch the latest OpenScout release from GitHub (${OPENSCOUT_RELEASE_OWNER}/${OPENSCOUT_RELEASE_REPOSITORY})`);
+  throw new ScoutCliError(version2 ? `release "${version2}" not found on GitHub (${OPENSCOUT_RELEASE_OWNER}/${OPENSCOUT_RELEASE_REPOSITORY})` : `could not fetch the latest Scout release from GitHub (${OPENSCOUT_RELEASE_OWNER}/${OPENSCOUT_RELEASE_REPOSITORY})`);
 }
 async function downloadDmg(asset, destination, context, deps) {
   context.stderr(`Downloading ${asset.name} (${formatBytes(asset.size)})\u2026`);
@@ -31721,11 +31904,13 @@ function unmountDmg(mountPoint, deps) {
   deps.run("hdiutil", ["detach", mountPoint, "-force", "-quiet"]);
 }
 function requireMountedOpenScoutApp(mountPoint, deps) {
-  const source = join16(mountPoint, OPENSCOUT_APP_NAME);
-  if (!deps.existsSync(source) || !deps.existsSync(infoPlistPath(source))) {
-    throw new ScoutCliError(`no ${OPENSCOUT_APP_NAME} found in the mounted DMG at ${mountPoint}`);
+  for (const name2 of [OPENSCOUT_APP_NAME, ...LEGACY_APP_BUNDLE_NAMES]) {
+    const source = join16(mountPoint, name2);
+    if (deps.existsSync(source) && deps.existsSync(infoPlistPath(source)))
+      return source;
   }
-  return source;
+  const names2 = [OPENSCOUT_APP_NAME, ...LEGACY_APP_BUNDLE_NAMES].join(" or ");
+  throw new ScoutCliError(`no ${names2} found in the mounted DMG at ${mountPoint}`);
 }
 function codesignField(output, key) {
   const match = output.match(new RegExp(`^${key}=(.+)$`, "m"));
@@ -31946,7 +32131,7 @@ function processIdsForMenuOutsideApp(psOutput, appPath) {
 }
 function inspectInstallProcessIds(deps) {
   const result = deps.run("ps", ["-axo", "pid=,args="]);
-  requireSuccess(result, "could not inspect running OpenScout processes");
+  requireSuccess(result, "could not inspect running Scout processes");
   return {
     installed: processIdsForInstalledApp(result.stdout, deps.appPath),
     staleMenus: processIdsForMenuOutsideApp(result.stdout, deps.appPath)
@@ -31984,7 +32169,57 @@ function stopRunningApp(deps) {
   }
   if (waitUntilInstallUnblocked(deps, STOP_POLL_ATTEMPTS))
     return hadInstalledRunning;
-  throw new ScoutCliError("could not stop OpenScout before replacing it");
+  throw new ScoutCliError("could not stop Scout before replacing it");
+}
+function stopAppAtPath(appPath, deps) {
+  const scan = () => {
+    const result = deps.run("ps", ["-axo", "pid=,args="]);
+    requireSuccess(result, "could not inspect running Scout processes");
+    return processIdsForInstalledApp(result.stdout, appPath);
+  };
+  if (scan().length === 0)
+    return false;
+  for (const pid of scan())
+    deps.run("kill", [String(pid)]);
+  for (let attempt = 0;attempt < STOP_POLL_ATTEMPTS; attempt += 1) {
+    if (scan().length === 0)
+      return true;
+    deps.sleep(STOP_POLL_MS);
+  }
+  for (const pid of scan())
+    deps.run("kill", ["-9", String(pid)]);
+  for (let attempt = 0;attempt < STOP_POLL_ATTEMPTS; attempt += 1) {
+    if (scan().length === 0)
+      return true;
+    deps.sleep(STOP_POLL_MS);
+  }
+  throw new ScoutCliError(`could not stop the pre-rename app at ${appPath}`);
+}
+function retireLegacyAppBundles(deps, context) {
+  const removed = [];
+  let hadRunning = false;
+  let blocked = false;
+  for (const name2 of LEGACY_APP_BUNDLE_NAMES) {
+    const legacyPath = join16(dirname11(deps.appPath), name2);
+    if (legacyPath === deps.appPath || !deps.existsSync(legacyPath))
+      continue;
+    try {
+      if (stopAppAtPath(legacyPath, deps))
+        hadRunning = true;
+    } catch (error) {
+      blocked = true;
+      context.stderr(`Kept ${legacyPath}; automatic relaunch skipped: ${error instanceof Error ? error.message : String(error)}`);
+      continue;
+    }
+    try {
+      deps.rmSync(legacyPath, { recursive: true, force: true });
+      removed.push(legacyPath);
+      context.stderr(`Removed the pre-rename bundle at ${legacyPath}.`);
+    } catch (error) {
+      context.stderr(`Could not remove the pre-rename bundle at ${legacyPath}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+  }
+  return { removed, hadRunning, blocked };
 }
 function launchApp(deps) {
   requireSuccess(deps.run("open", [deps.appPath]), `could not relaunch ${deps.appPath}`);
@@ -32010,24 +32245,24 @@ async function runCheck(context, options, deps) {
   if (!deps.existsSync(deps.appPath)) {
     if (deps.existsSync(backupPathFor(deps.appPath))) {
       status = "repair-needed";
-      message = "An interrupted OpenScout install needs repair \u2014 run `scout install --force`.";
+      message = "An interrupted Scout install needs repair \u2014 run `scout install --force`.";
     } else {
       status = "not-installed";
-      message = "OpenScout is not installed \u2014 run `scout install`.";
+      message = "Scout is not installed \u2014 run `scout install`.";
     }
   } else {
     try {
       installed = verifyStagedOpenScoutApp(deps.appPath, deps);
       if (installed === target2) {
         status = "up-to-date";
-        message = `OpenScout ${installed} is up to date.`;
+        message = `Scout ${installed} is up to date.`;
       } else {
         status = "update-available";
         message = `Update available: ${installed} \u2192 ${target2}. Run \`scout install\`.`;
       }
     } catch (error) {
       status = "repair-needed";
-      message = `OpenScout needs repair (${error instanceof Error ? error.message : String(error)}). ` + "Run `scout install --force`.";
+      message = `Scout needs repair (${error instanceof Error ? error.message : String(error)}). ` + "Run `scout install --force`.";
     }
   }
   context.output.writeValue({ action: "check", status, installed, target: target2, bundlePath: deps.appPath, message }, renderInstallResult);
@@ -32048,7 +32283,7 @@ async function runInstallCommand(context, args, dependencies = {}) {
     await runCheck(context, options, deps);
     return;
   }
-  context.stderr(options.candidate ? "Verifying explicit local candidate (unpublished)\u2026" : options.version ? `Fetching release ${options.version}\u2026` : "Fetching the latest OpenScout release\u2026");
+  context.stderr(options.candidate ? "Verifying explicit local candidate (unpublished)\u2026" : options.version ? `Fetching release ${options.version}\u2026` : "Fetching the latest Scout release\u2026");
   const release = options.candidate && options.dmg ? loadInstallCandidate(options.candidate, options.dmg) : await fetchRelease(options.version, deps);
   const target2 = normalizeReleaseVersion(release.tag_name);
   const releaseInstallLock = acquireInstallLock(deps);
@@ -32066,12 +32301,12 @@ async function runInstallCommand(context, args, dependencies = {}) {
           installed: verifiedVersion,
           target: target2,
           bundlePath: deps.appPath,
-          message: `OpenScout ${target2} is already installed (use --force to reinstall).`
+          message: `Scout ${target2} is already installed (use --force to reinstall).`
         }, renderInstallResult);
         return;
       } catch (error) {
         repairingInstalledApp = true;
-        context.stderr(`Installed OpenScout ${target2} failed verification; repairing it: ${error instanceof Error ? error.message : String(error)}`);
+        context.stderr(`Installed Scout ${target2} failed verification; repairing it: ${error instanceof Error ? error.message : String(error)}`);
       }
     }
     const asset = findAppDmgAsset(release);
@@ -32090,7 +32325,7 @@ async function runInstallCommand(context, args, dependencies = {}) {
       } else {
         await downloadDmg(asset, dmgPath, context, deps);
       }
-      context.stderr(`Installing OpenScout ${target2} to ${deps.appPath}\u2026`);
+      context.stderr(`Installing Scout ${target2} to ${deps.appPath}\u2026`);
       verifyDownloadedDmg(dmgPath, deps);
       mountDmg(dmgPath, mountPoint, deps);
       mounted = true;
@@ -32104,11 +32339,14 @@ async function runInstallCommand(context, args, dependencies = {}) {
         unmountDmg(mountPoint, deps);
       deps.rmSync(workDir, { recursive: true, force: true });
     }
-    if (wasRunning && options.restart) {
+    const retirement = retireLegacyAppBundles(deps, context);
+    if (retirement.hadRunning)
+      wasRunning = true;
+    if (wasRunning && options.restart && !retirement.blocked) {
       launchApp(deps);
     }
     const status = hadInstalledApp ? "updated" : "installed";
-    const relaunchNote = wasRunning ? options.restart ? " (relaunched)" : " (restart OpenScout to use the new version)" : "";
+    const relaunchNote = retirement.blocked ? " (legacy app cleanup incomplete; automatic relaunch skipped)" : wasRunning ? options.restart ? " (relaunched)" : " (restart Scout to use the new version)" : "";
     let verb = "Installed";
     if (repairingInstalledApp || hadInstalledApp && !installedBefore) {
       verb = "Repaired";
@@ -32121,7 +32359,7 @@ async function runInstallCommand(context, args, dependencies = {}) {
       installed: installedAfter,
       target: target2,
       bundlePath: deps.appPath,
-      message: `${verb} OpenScout ${installedAfter} \u2192 ${deps.appPath}${relaunchNote}`
+      message: `${verb} Scout ${installedAfter} \u2192 ${deps.appPath}${relaunchNote}`
     }, renderInstallResult);
   } finally {
     releaseInstallLock();