@openscout/scout 0.2.105 → 0.2.106

package/dist/main.mjs

@@ -1619,6 +1619,31 @@ var init_orchestration_provider_map = __esm(() => {
   };
 });
 
+// ../protocol/src/message-reactions.ts
+var REACTION_EMOJI_QUICK, REACTION_EMOJI_MORE, REACTION_EMOJI_ALLOWLIST, REACTION_EMOJI_ALLOWLIST_SET;
+var init_message_reactions = __esm(() => {
+  REACTION_EMOJI_QUICK = ["\uD83D\uDC4D", "\u2764\uFE0F", "\uD83D\uDE02", "\uD83D\uDC40", "\uD83C\uDF89"];
+  REACTION_EMOJI_MORE = [
+    "\uD83D\uDD25",
+    "\uD83D\uDE4F",
+    "\uD83D\uDC4F",
+    "\uD83D\uDE22",
+    "\uD83D\uDE2E",
+    "\uD83D\uDE80",
+    "\u2705",
+    "\uD83D\uDCAF",
+    "\uD83E\uDD14",
+    "\uD83D\uDCA1",
+    "\uD83D\uDE4C",
+    "\u2728"
+  ];
+  REACTION_EMOJI_ALLOWLIST = [
+    ...REACTION_EMOJI_QUICK,
+    ...REACTION_EMOJI_MORE
+  ];
+  REACTION_EMOJI_ALLOWLIST_SET = new Set(REACTION_EMOJI_ALLOWLIST);
+});
+
 // ../protocol/src/permission-policy.ts
 function normalizeScoutPermissionProfile(value) {
   const normalized = value?.trim().replaceAll("-", "_");
@@ -2663,6 +2688,9 @@ var init_terminal_sessions = __esm(() => {
   init_terminal_surface_id();
 });
 
+// ../protocol/src/terminal-session-resolve.ts
+var init_terminal_session_resolve = () => {};
+
 // ../protocol/src/terminal-workspaces.ts
 function normalizeTerminalWorkspaceColumnCount(value) {
   return value === "dynamic" ? "dynamic" : normalizeTerminalWorkspaceColumns(value);
@@ -2811,6 +2839,8 @@ var init_broker_routes = __esm(() => {
       machines: "/v1/machines",
       machinesScan: "/v1/machines/scan",
       messages: "/v1/messages",
+      messageReactions: "/v1/message-reactions",
+      messageReactionsRemove: "/v1/message-reactions/remove",
       brokerMessages: "/v1/broker/messages",
       eventsStream: "/v1/events/stream",
       commands: "/v1/commands",
@@ -2874,6 +2904,7 @@ var init_src = __esm(() => {
   init_assigned_roles();
   init_orchestrator_prompt();
   init_orchestration_provider_map();
+  init_message_reactions();
   init_agent_runs();
   init_budget();
   init_host_integrations();
@@ -2892,6 +2923,7 @@ var init_src = __esm(() => {
   init_cursor_transport();
   init_terminal_surface_id();
   init_terminal_sessions();
+  init_terminal_session_resolve();
   init_terminal_workspaces();
   init_herdr_workspace_digest();
   init_broker_routes();
@@ -11600,6 +11632,101 @@ var init_broker_api = __esm(() => {
 // ../runtime/src/schema-version.ts
 var CONTROL_PLANE_SCHEMA_VERSION = 18;
 
+// ../runtime/src/sqlite-observation.ts
+import { createHash as createHash3 } from "crypto";
+function observeSqliteDatabase(database, options) {
+  const configured = options.thresholdMs ?? Number(process.env.OPENSCOUT_SLOW_DB_MS ?? 100);
+  const threshold = Number.isFinite(configured) && configured >= 0 ? configured : 100;
+  if (threshold === 0)
+    return database;
+  const now = options.now ?? (() => performance.now());
+  const emit = options.emit ?? ((event) => console.warn("[scout-db]", JSON.stringify(event)));
+  const statements = new WeakMap;
+  let windowStart = -Infinity;
+  let emitted = 0;
+  let suppressed = 0;
+  function timed(operation, sql, call) {
+    const start = now();
+    let outcome = "error";
+    try {
+      const result = call();
+      outcome = "ok";
+      return result;
+    } finally {
+      try {
+        const end = now();
+        const duration = end - start;
+        if (duration >= threshold) {
+          if (end - windowStart >= 60000) {
+            windowStart = end;
+            emitted = 0;
+          }
+          if (emitted >= 10) {
+            suppressed += 1;
+          } else {
+            emitted += 1;
+            const caller = (new Error().stack ?? "").split(`
+`).filter((line) => !/sqlite-observation\.(?:ts|js):/.test(line)).map((line) => line.match(/(?:packages|apps)\/[\w./-]+:\d+:\d+/)?.[0]).filter((line) => Boolean(line)).slice(0, 4);
+            emit({
+              event: "slow_sqlite",
+              database: options.database,
+              pid: process.pid,
+              operation,
+              queryId: createHash3("sha256").update(sql).digest("hex").slice(0, 16),
+              durationMs: Math.round(duration * 100) / 100,
+              outcome,
+              suppressed,
+              caller
+            });
+            suppressed = 0;
+          }
+        }
+      } catch {}
+    }
+  }
+  function statementProxy(statement, sql) {
+    const existing = statements.get(statement);
+    if (existing)
+      return existing;
+    const proxy = bindProxy(statement, (key, method, args) => {
+      if (["all", "get", "run", "values"].includes(key)) {
+        return timed(key, sql, () => Reflect.apply(method, statement, args));
+      }
+      return Reflect.apply(method, statement, args);
+    });
+    statements.set(statement, proxy);
+    return proxy;
+  }
+  return bindProxy(database, (key, method, args) => {
+    if (["query", "prepare"].includes(key) && typeof args[0] === "string") {
+      const sql = args[0];
+      const statement = timed(`${key}.prepare`, sql, () => Reflect.apply(method, database, args));
+      return statementProxy(statement, sql);
+    }
+    if (["exec", "run"].includes(key) && typeof args[0] === "string") {
+      return timed(key, args[0], () => Reflect.apply(method, database, args));
+    }
+    return Reflect.apply(method, database, args);
+  });
+}
+function bindProxy(target, invoke) {
+  const methods = new Map;
+  return new Proxy(target, {
+    get(object, key) {
+      const value = Reflect.get(object, key, object);
+      if (typeof value !== "function" || key === "constructor")
+        return value;
+      const cached = methods.get(key);
+      if (cached?.original === value)
+        return cached.wrapped;
+      const wrapped = (...args) => invoke(String(key), value, args);
+      methods.set(key, { original: value, wrapped });
+      return wrapped;
+    }
+  });
+}
+var init_sqlite_observation = () => {};
+
 // ../runtime/src/runtime-adapters.ts
 function detectRuntimeHost(globalScope = globalThis) {
   return typeof globalScope.Bun === "undefined" ? "node" : "bun";
@@ -11665,13 +11792,13 @@ function openRuntimeSqliteDatabase(path, options) {
   const adapter = controlPlaneSqliteAdapterKind();
   if (adapter === "bun-sqlite") {
     const { Database } = require2("bun:sqlite");
-    return new Database(path, options);
+    return observeSqliteDatabase(new Database(path, options), { database: "runtime" });
   }
   const { DatabaseSync } = require2("node:sqlite");
-  return new NodeSqliteDatabaseAdapter(new DatabaseSync(path, {
+  return observeSqliteDatabase(new NodeSqliteDatabaseAdapter(new DatabaseSync(path, {
     open: true,
     readOnly: options?.readonly === true
-  }));
+  })), { database: "runtime" });
 }
 function prepareNodeSqliteSql(sql) {
   const numberedParamIndexes = [];
@@ -11764,6 +11891,8 @@ class NodeSqliteDatabaseAdapter {
 }
 var require2;
 var init_sqlite_adapter = __esm(() => {
+  init_sqlite_observation();
+  init_sqlite_observation();
   require2 = createRequire(import.meta.url);
 });
 
@@ -19592,6 +19721,7 @@ class CodexAppServerTransport {
     });
   }
   async ensureStarted() {
+    this.options.signal?.throwIfAborted();
     if (this.isAlive() && this.threadId) {
       return;
     }
@@ -19623,6 +19753,7 @@ class CodexAppServerTransport {
       });
       throw failure;
     }
+    this.options.signal?.throwIfAborted();
     const codexExecutable = resolveCodexExecutable();
     const launchArgs = normalizeCodexAppServerLaunchArgs(this.options.launchArgs);
     const env = this.options.processEnv ?? mergeEnvironmentOverrides(process.env, this.options.env);
@@ -20006,13 +20137,17 @@ class CodexAppServerClient {
     return this.transport.ensureOnline();
   }
   async invoke(prompt, timeoutMs) {
+    const onDelta = this.options.onDelta;
+    const signal = this.options.signal;
     return this.enqueue(async () => {
+      signal?.throwIfAborted();
       await this.transport.ensureOnline();
+      signal?.throwIfAborted();
       if (!this.transport.currentThreadId) {
         throw new Error(`Codex app-server session for ${this.options.agentName} has no active thread.`);
       }
       const outputPromise = new Promise(async (resolve13, reject) => {
-        const turn = this.createActiveTurn(resolve13, reject);
+        const turn = this.createActiveTurn(resolve13, reject, onDelta);
         try {
           const response = await this.transport.startTurn(prompt);
           turn.turnId = response.turn.id;
@@ -20029,8 +20164,12 @@ class CodexAppServerClient {
     });
   }
   async start(prompt) {
+    const onDelta = this.options.onDelta;
+    const signal = this.options.signal;
     return this.enqueue(async () => {
+      signal?.throwIfAborted();
       await this.transport.ensureOnline();
+      signal?.throwIfAborted();
       if (!this.transport.currentThreadId) {
         throw new Error(`Codex app-server session for ${this.options.agentName} has no active thread.`);
       }
@@ -20039,7 +20178,7 @@ class CodexAppServerClient {
       }
       let turn;
       const completion = new Promise((resolve13, reject) => {
-        turn = this.createActiveTurn(resolve13, reject);
+        turn = this.createActiveTurn(resolve13, reject, onDelta);
       });
       completion.catch(() => {
         return;
@@ -20136,11 +20275,12 @@ class CodexAppServerClient {
     });
     return next;
   }
-  createActiveTurn(resolve13, reject) {
+  createActiveTurn(resolve13, reject, onDelta) {
     if (this.activeTurn) {
       throw new Error(`Codex app-server session for ${this.options.agentName} already has an active turn.`);
     }
     const turn = {
+      onDelta,
       turnId: "",
       startedAt: Date.now(),
       messageOrder: [],
@@ -20217,6 +20357,8 @@ class CodexAppServerClient {
         this.activeTurn.messageByItemId.set(itemId, "");
       }
       this.activeTurn.messageByItemId.set(itemId, (this.activeTurn.messageByItemId.get(itemId) ?? "") + delta);
+      if (delta)
+        this.activeTurn.onDelta?.(delta);
       return;
     }
     if (method === "item/completed") {
@@ -30949,7 +31091,7 @@ var init_sqlite_core = __esm(() => {
 });
 
 // ../runtime/src/drizzle-schema.ts
-var epochMsNow, nodesTable, machinesTable, trustedPeersTable, peerNoncesTable, actorsTable, agentsTable, agentEndpointsTable, runtimeSessionsTable, runtimeSessionAliasesTable, routeAliasBindingsTable, routeAliasRevisionsTable, conversationsTable, conversationMembersTable, messagesTable, messageMentionsTable, messageAttachmentsTable, conversationReadCursorsTable, brokerJournalProjectionCheckpointsTable, conversationProjectionMetaTable, conversationProjectionItemsTable, conversationProjectionMessageFactsTable, conversationProjectionMessageStatsTable, conversationProjectionSourcesTable, conversationProjectionEventsTable, invocationsTable, flightsTable, bindingsTable, deliveriesTable, deliveryAttemptsTable, durableActionsTable, durableAttemptsTable, durableCheckpointsTable, durableSignalsTable, collaborationRecordsTable, collaborationEventsTable, contextBlocksTable, contextPacksTable, eventsTable, threadEventsTable, threadCursorsTable, scoutDispatchesTable, activityItemsTable, budgetUsageEventsTable, budgetQuotaWindowSnapshotsTable, mobilePushRegistrationsTable, briefingsTable, roleAssignmentsTable, missionLogEntriesTable, controlPlaneDrizzleSchema;
+var epochMsNow, nodesTable, machinesTable, trustedPeersTable, peerNoncesTable, actorsTable, agentsTable, agentEndpointsTable, runtimeSessionsTable, runtimeSessionAliasesTable, routeAliasBindingsTable, routeAliasRevisionsTable, conversationsTable, conversationMembersTable, messagesTable, messageMentionsTable, messageReactionsTable, messageAttachmentsTable, conversationReadCursorsTable, brokerJournalProjectionCheckpointsTable, conversationProjectionMetaTable, conversationProjectionItemsTable, conversationProjectionMessageFactsTable, conversationProjectionMessageStatsTable, conversationProjectionSourcesTable, conversationProjectionEventsTable, invocationsTable, flightsTable, bindingsTable, deliveriesTable, deliveryAttemptsTable, durableActionsTable, durableAttemptsTable, durableCheckpointsTable, durableSignalsTable, collaborationRecordsTable, collaborationEventsTable, contextBlocksTable, contextPacksTable, eventsTable, threadEventsTable, threadCursorsTable, scoutDispatchesTable, activityItemsTable, budgetUsageEventsTable, budgetQuotaWindowSnapshotsTable, mobilePushRegistrationsTable, briefingsTable, roleAssignmentsTable, missionLogEntriesTable, controlPlaneDrizzleSchema;
 var init_drizzle_schema = __esm(() => {
   init_drizzle_orm();
   init_sqlite_core();
@@ -31230,6 +31372,15 @@ var init_drizzle_schema = __esm(() => {
   }, (table3) => [
     primaryKey({ columns: [table3.messageId, table3.actorId] })
   ]);
+  messageReactionsTable = sqliteTable("message_reactions", {
+    messageId: text("message_id").notNull().references(() => messagesTable.id, { onDelete: "cascade" }),
+    actorId: text("actor_id").notNull().references(() => actorsTable.id, { onDelete: "restrict" }),
+    emoji: text("emoji").notNull(),
+    createdAt: integer("created_at").notNull()
+  }, (table3) => [
+    primaryKey({ columns: [table3.messageId, table3.actorId, table3.emoji] }),
+    index("idx_message_reactions_message").on(table3.messageId)
+  ]);
   messageAttachmentsTable = sqliteTable("message_attachments", {
     id: text("id").primaryKey(),
     messageId: text("message_id").notNull().references(() => messagesTable.id, { onDelete: "cascade" }),
@@ -31808,6 +31959,7 @@ var init_drizzle_schema = __esm(() => {
     conversationMembers: conversationMembersTable,
     messages: messagesTable,
     messageMentions: messageMentionsTable,
+    messageReactions: messageReactionsTable,
     messageAttachments: messageAttachmentsTable,
     conversationReadCursors: conversationReadCursorsTable,
     brokerJournalProjectionCheckpoints: brokerJournalProjectionCheckpointsTable,
@@ -32197,6 +32349,16 @@ CREATE TABLE IF NOT EXISTS message_mentions (
   PRIMARY KEY (message_id, actor_id)
 );
 
+CREATE TABLE IF NOT EXISTS message_reactions (
+  message_id TEXT NOT NULL REFERENCES messages(id) ON DELETE CASCADE,
+  actor_id TEXT NOT NULL REFERENCES actors(id) ON DELETE RESTRICT,
+  emoji TEXT NOT NULL,
+  created_at INTEGER NOT NULL,
+  PRIMARY KEY (message_id, actor_id, emoji)
+);
+CREATE INDEX IF NOT EXISTS idx_message_reactions_message
+  ON message_reactions (message_id);
+
 CREATE TABLE IF NOT EXISTS message_attachments (
   id TEXT PRIMARY KEY,
   message_id TEXT NOT NULL REFERENCES messages(id) ON DELETE CASCADE,
@@ -33599,7 +33761,7 @@ var init_broker = __esm(() => {
 });
 
 // ../runtime/src/conversation-thread-artifact.ts
-import { createHash as createHash3, randomBytes as randomBytes2 } from "crypto";
+import { createHash as createHash4, randomBytes as randomBytes2 } from "crypto";
 import {
   existsSync as existsSync25,
   mkdirSync as mkdirSync7,
@@ -33719,7 +33881,7 @@ function artifactBytes(artifact) {
   return Buffer.byteLength(encodedArtifact(artifact), "utf8");
 }
 function contentCursorForArtifact(artifact) {
-  return createHash3("sha256").update(JSON.stringify({
+  return createHash4("sha256").update(JSON.stringify({
     feedId: artifact.feedId,
     entityKind: artifact.entityKind,
     conversationId: artifact.conversationId,
@@ -33729,7 +33891,7 @@ function contentCursorForArtifact(artifact) {
   })).digest("hex");
 }
 function nativeReadThreadArtifactPath(outputDirectory, feedId) {
-  const digest = createHash3("sha256").update(feedId).digest("hex");
+  const digest = createHash4("sha256").update(feedId).digest("hex");
   return join28(outputDirectory, `${ARTIFACT_PREFIX}${digest}${ARTIFACT_SUFFIX}`);
 }
 function buildNativeReadThreadArtifact(snapshot) {
@@ -34752,9 +34914,9 @@ var init_budget_observations = __esm(() => {
 });
 
 // ../runtime/src/budget-observations.ts
-import { createHash as createHash4 } from "crypto";
+import { createHash as createHash5 } from "crypto";
 function stableHash(value) {
-  return createHash4("sha256").update(JSON.stringify(value)).digest("hex").slice(0, 24);
+  return createHash5("sha256").update(JSON.stringify(value)).digest("hex").slice(0, 24);
 }
 function metadataRecord4(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : undefined;
@@ -34880,7 +35042,7 @@ var init_budget_observations2 = __esm(() => {
 });
 
 // ../runtime/src/runtime-session-handle.ts
-import { createHash as createHash5 } from "crypto";
+import { createHash as createHash6 } from "crypto";
 function metadataStringValue(metadata, key) {
   const value = metadata?.[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
@@ -34903,7 +35065,7 @@ function runtimeSessionHandleForEndpoint(endpoint, primaryAlias = runtimeSession
     endpoint.harness,
     primaryAlias
   ].join("\x00");
-  const token = createHash5("sha256").update(resolutionKey).digest("hex").slice(0, 20);
+  const token = createHash6("sha256").update(resolutionKey).digest("hex").slice(0, 20);
   return `${SCOUT_SESSION_HANDLE_PREFIX}${token}`;
 }
 var init_runtime_session_handle = __esm(() => {
@@ -34911,7 +35073,7 @@ var init_runtime_session_handle = __esm(() => {
 });
 
 // ../runtime/src/sqlite-store.ts
-import { createHash as createHash6 } from "crypto";
+import { createHash as createHash7 } from "crypto";
 import { mkdirSync as mkdirSync8 } from "fs";
 import { dirname as dirname18 } from "path";
 function parseJson(value, fallback) {
@@ -34943,7 +35105,7 @@ function normalizeTimestampMs(value) {
   return epochMs(value);
 }
 function stableHash2(value, length = 20) {
-  return createHash6("sha256").update(value).digest("hex").slice(0, length);
+  return createHash7("sha256").update(value).digest("hex").slice(0, length);
 }
 function metadataStringValue2(metadata, key) {
   const value = metadata?.[key];
@@ -36535,6 +36697,62 @@ class SQLiteControlPlaneStore {
     })(message, activityItem, threadMessageEvent);
     return threadEvents;
   }
+  upsertMessageReaction(input) {
+    const message = this.db.query(`SELECT id, conversation_id FROM messages WHERE id = ?1`).get(input.messageId);
+    if (!message) {
+      throw Object.assign(new Error("message not found"), { status: 404, reason: "message_not_found" });
+    }
+    if (message.conversation_id !== input.channelId) {
+      const conversation = this.db.query(`SELECT kind, parent_conversation_id FROM conversations WHERE id = ?1`).get(message.conversation_id);
+      if (conversation?.kind !== "thread" || conversation.parent_conversation_id !== input.channelId) {
+        throw Object.assign(new Error("message is not in this channel"), {
+          status: 404,
+          reason: "wrong_channel"
+        });
+      }
+    }
+    const actor = this.db.query(`SELECT id FROM actors WHERE id = ?1`).get(input.actorId);
+    if (!actor) {
+      throw Object.assign(new Error("actor not found"), { status: 404, reason: "actor_not_found" });
+    }
+    const result = this.db.query(`INSERT OR IGNORE INTO message_reactions (message_id, actor_id, emoji, created_at)
+       VALUES (?1, ?2, ?3, ?4)`).run(input.messageId, input.actorId, input.emoji, input.createdAt);
+    return { replayed: Number(result.changes) === 0 };
+  }
+  removeMessageReaction(input) {
+    const message = this.db.query(`SELECT id, conversation_id FROM messages WHERE id = ?1`).get(input.messageId);
+    if (!message) {
+      throw Object.assign(new Error("message not found"), { status: 404, reason: "message_not_found" });
+    }
+    if (message.conversation_id !== input.channelId) {
+      const conversation = this.db.query(`SELECT kind, parent_conversation_id FROM conversations WHERE id = ?1`).get(message.conversation_id);
+      if (conversation?.kind !== "thread" || conversation.parent_conversation_id !== input.channelId) {
+        throw Object.assign(new Error("message is not in this channel"), {
+          status: 404,
+          reason: "wrong_channel"
+        });
+      }
+    }
+    const result = this.db.query(`DELETE FROM message_reactions
+       WHERE message_id = ?1 AND actor_id = ?2 AND emoji = ?3`).run(input.messageId, input.actorId, input.emoji);
+    return { replayed: Number(result.changes) === 0 };
+  }
+  listMessageReactions(channelId) {
+    const rows = queryAll(this.readDb, `SELECT r.message_id, r.actor_id, r.emoji, r.created_at
+       FROM message_reactions r
+       JOIN messages m ON m.id = r.message_id
+       WHERE m.conversation_id = ?1
+          OR m.conversation_id IN (
+            SELECT id FROM conversations WHERE parent_conversation_id = ?1
+          )
+       ORDER BY r.created_at ASC, r.emoji ASC`, channelId);
+    return rows.map((row) => ({
+      messageId: row.message_id,
+      actorId: row.actor_id,
+      emoji: row.emoji,
+      createdAt: row.created_at
+    }));
+  }
   upsertReadCursor(cursor) {
     this.db.query(`INSERT INTO conversation_read_cursors (
         conversation_id, actor_id, reader_node_id, last_read_message_id,
@@ -37667,7 +37885,7 @@ var init_sqlite_store = __esm(() => {
 });
 
 // ../runtime/src/mesh-peer-auth.ts
-import { createHash as createHash7, randomBytes as randomBytes3 } from "crypto";
+import { createHash as createHash8, randomBytes as randomBytes3 } from "crypto";
 function assertNoNewlines(component, name) {
   if (component.includes(`
 `) || component.includes("\r")) {
@@ -37693,7 +37911,7 @@ function peerRequestSigningPayload(input) {
 `);
 }
 function sha256Hex(body) {
-  return createHash7("sha256").update(body).digest("hex");
+  return createHash8("sha256").update(body).digest("hex");
 }
 function signPeerRequest(identity, input) {
   const ts = input.ts ?? Date.now();
@@ -52749,14 +52967,14 @@ var init_x509_es = __esm(() => {
 
 // ../runtime/src/node-tls-identity.ts
 import {
-  createHash as createHash8,
+  createHash as createHash9,
   createPrivateKey as createPrivateKey2,
   createPublicKey as createPublicKey2,
   generateKeyPairSync as generateKeyPairSync2,
   randomBytes as randomBytes4
 } from "crypto";
 function tlsSpkiFingerprintFromDer(spkiDer) {
-  return createHash8("sha256").update(spkiDer).digest("hex");
+  return createHash9("sha256").update(spkiDer).digest("hex");
 }
 function tlsSpkiFingerprintFromCertificateDer(certificateDer) {
   const certificate2 = new X509Certificate(asBufferSource(certificateDer));
@@ -54719,9 +54937,9 @@ var init_eff_short_wordlist = __esm(() => {
 });
 
 // ../runtime/src/mesh-sas.ts
-import { createHash as createHash9, createHmac } from "crypto";
+import { createHash as createHash10, createHmac } from "crypto";
 function createEnrollmentCommitment(nonce, cardSignature) {
-  return createHash9("sha256").update(Buffer.concat([nonce, Buffer.from(cardSignature, "utf8")])).digest("base64");
+  return createHash10("sha256").update(Buffer.concat([nonce, Buffer.from(cardSignature, "utf8")])).digest("base64");
 }
 function verifyEnrollmentCommitment(commitment, nonce, cardSignature) {
   const expected = createEnrollmentCommitment(nonce, cardSignature);
@@ -56223,6 +56441,9 @@ function hasNonEmpty(value) {
 function envEquals(env, key, expected) {
   return env[key]?.trim().toLowerCase() === expected;
 }
+function isHerdrManagedAgent(env, kind) {
+  return isTruthyFlag(env.HERDR_ENV) && hasNonEmpty(env.HERDR_PANE_ID) && hasNonEmpty(env.HERDR_AGENT_NAME) && envEquals(env, "HERDR_AGENT", kind);
+}
 function detectCodingAgentHost(env = process.env) {
   for (const entry of HARNESS_SIGNALS) {
     if (entry.matches(env)) {
@@ -56248,6 +56469,36 @@ var init_coding_agent_host = __esm(() => {
       signal: "OPENSCOUT_MANAGED_AGENT",
       matches: (env) => isTruthyFlag(env.OPENSCOUT_MANAGED_AGENT)
     },
+    {
+      harness: "cursor",
+      signal: "HERDR_AGENT_NAME",
+      matches: (env) => isHerdrManagedAgent(env, "cursor")
+    },
+    {
+      harness: "claude",
+      signal: "HERDR_AGENT_NAME",
+      matches: (env) => isHerdrManagedAgent(env, "claude")
+    },
+    {
+      harness: "codex",
+      signal: "HERDR_AGENT_NAME",
+      matches: (env) => isHerdrManagedAgent(env, "codex")
+    },
+    {
+      harness: "devin",
+      signal: "HERDR_AGENT_NAME",
+      matches: (env) => isHerdrManagedAgent(env, "devin")
+    },
+    {
+      harness: "kimi",
+      signal: "HERDR_AGENT_NAME",
+      matches: (env) => isHerdrManagedAgent(env, "kimi")
+    },
+    {
+      harness: "pi",
+      signal: "HERDR_AGENT_NAME",
+      matches: (env) => isHerdrManagedAgent(env, "pi")
+    },
     {
       harness: "cursor",
       signal: "CURSOR_AGENT",
@@ -57584,7 +57835,7 @@ async function broadcastPushRelayAlert(alert) {
       retryAfterSeconds: retryAfter ? Number.parseInt(retryAfter, 10) || null : null,
       rateLimitWindow: window2,
       failures: [{
-        deviceId: "push-relay",
+        deviceId: PUSH_RELAY_TRANSPORT_DEVICE_ID,
         tokenSuffix: "relay",
         status: 429,
         reason: detail || `HTTP 429 (window=${window2 ?? "unknown"})`
@@ -57600,7 +57851,7 @@ async function broadcastPushRelayAlert(alert) {
       failedCount: 1,
       configMissing: false,
       failures: [{
-        deviceId: "push-relay",
+        deviceId: PUSH_RELAY_TRANSPORT_DEVICE_ID,
         tokenSuffix: "relay",
         status: response.status,
         reason: detail || `HTTP ${response.status}`
@@ -57900,15 +58151,30 @@ async function sendApnsAlertToRegistration(registration, alert) {
     request.end(payload);
   });
 }
+function relayRejectedOurCredential(result) {
+  return result.failures.some((failure) => failure.deviceId === PUSH_RELAY_TRANSPORT_DEVICE_ID && (failure.status === 401 || failure.status === 403));
+}
+function hasDirectApnsCredentials() {
+  try {
+    return loadApnsCredentials() !== null;
+  } catch {
+    return false;
+  }
+}
 async function broadcastApnsAlertToActiveMobileDevices(alert) {
+  let relayFailures = [];
   if (resolvePushRelayConfig()) {
-    return broadcastPushRelayAlert(alert);
+    const relayResult = await broadcastPushRelayAlert(alert);
+    if (!relayRejectedOurCredential(relayResult) || !hasDirectApnsCredentials()) {
+      return relayResult;
+    }
+    relayFailures = relayResult.failures;
   }
   const registrations = listActiveMobilePushRegistrations();
   let deliveredCount = 0;
   let skippedCount = 0;
   let configMissing = false;
-  const failures = [];
+  const failures = [...relayFailures];
   for (const registration of registrations) {
     try {
       const outcome = await sendApnsAlertToRegistration(registration, alert);
@@ -57969,7 +58235,7 @@ CREATE UNIQUE INDEX IF NOT EXISTS idx_mobile_push_registrations_push_token
   ON mobile_push_registrations (push_token);
 CREATE INDEX IF NOT EXISTS idx_mobile_push_registrations_device_updated_at
   ON mobile_push_registrations (device_id, updated_at DESC);
-`, dbHandle = null, dbPath = null, cachedApnsJwt = null, OPAQUE_MOBILE_PUSH_PAYLOAD_KEYS;
+`, dbHandle = null, dbPath = null, cachedApnsJwt = null, PUSH_RELAY_TRANSPORT_DEVICE_ID = "push-relay", OPAQUE_MOBILE_PUSH_PAYLOAD_KEYS;
 var init_mobile_push = __esm(() => {
   init_support_paths();
   OPAQUE_MOBILE_PUSH_PAYLOAD_KEYS = [
@@ -58652,11 +58918,11 @@ var init_paths2 = __esm(() => {
 
 // ../runtime/src/knowledge/store.ts
 import { existsSync as existsSync30, mkdirSync as mkdirSync11, statSync as statSync7 } from "fs";
-import { createHash as createHash10, randomUUID as randomUUID4 } from "crypto";
+import { createHash as createHash11, randomUUID as randomUUID4 } from "crypto";
 import { dirname as dirname22 } from "path";
 import { Database as Database3 } from "bun:sqlite";
 function ftsRowidForChunk(chunkId) {
-  return createHash10("sha256").update(chunkId).digest().readBigInt64BE(0);
+  return createHash11("sha256").update(chunkId).digest().readBigInt64BE(0);
 }
 function stringify3(value) {
   return JSON.stringify(value ?? null);
@@ -58695,7 +58961,7 @@ function normalizeFtsQueryOr(value) {
   return terms.map(quoteFtsTerm).join(" OR ");
 }
 function textHash(value) {
-  return `sha256:${createHash10("sha256").update(value).digest("hex")}`;
+  return `sha256:${createHash11("sha256").update(value).digest("hex")}`;
 }
 function deterministicKnowledgeChunkId(input) {
   return textHash([
@@ -59450,7 +59716,7 @@ var init_store = __esm(() => {
 });
 
 // ../runtime/src/knowledge/session-indexer.ts
-import { createHash as createHash11 } from "crypto";
+import { createHash as createHash12 } from "crypto";
 import {
   createReadStream as createReadStream2,
   existsSync as existsSync31,
@@ -59564,7 +59830,7 @@ function discoverRecentSessionFiles(cutoffMs, limit, harnessFilter) {
 async function parseJsonl(file) {
   const maybeYield = createYieldBudget();
   const records = [];
-  const hash = createHash11("sha256");
+  const hash = createHash12("sha256");
   let carry = "";
   let offset = 0;
   let index2 = 0;
@@ -59895,10 +60161,10 @@ function trimOneLine(value, max) {
   return flat.length <= max ? flat : `${flat.slice(0, Math.max(0, max - 3))}...`;
 }
 function hashText(value) {
-  return `sha256:${createHash11("sha256").update(value).digest("hex")}`;
+  return `sha256:${createHash12("sha256").update(value).digest("hex")}`;
 }
 function stableId(value, length = 16) {
-  return createHash11("sha256").update(value).digest("hex").slice(0, length);
+  return createHash12("sha256").update(value).digest("hex").slice(0, length);
 }
 function portablePath(filePath) {
   const home = homedir24();
@@ -60664,6 +60930,16 @@ function resolveScoutAgentName(agentName) {
   }
   return resolveOperatorName();
 }
+function resolveHerdrAgentName(env) {
+  const herdrEnv = env.HERDR_ENV?.trim().toLowerCase();
+  if (!herdrEnv || !TRUTHY_ENV_VALUES.has(herdrEnv)) {
+    return null;
+  }
+  if (!env.HERDR_PANE_ID?.trim()) {
+    return null;
+  }
+  return normalizeAgentSelectorSegment(env.HERDR_AGENT_NAME ?? "") || null;
+}
 function resolveHumanAskSenderName(agentName, env = process.env) {
   if (agentName?.trim()) {
     return agentName.trim();
@@ -60673,7 +60949,7 @@ function resolveHumanAskSenderName(agentName, env = process.env) {
   }
   return "operator";
 }
-function resolveConfiguredSenderIdForProjectRoot(overrides, projectRoot, preferredDefinitionIds = []) {
+function resolveConfiguredSenderIdForProjectRoot(overrides, projectRoot, preferredDefinitionIds = [], allowProjectFallback = true) {
   let fallbackSenderId = null;
   const normalizedPreferredDefinitionIds = preferredDefinitionIds.map((value) => normalizeAgentSelectorSegment(value)).filter(Boolean);
   for (const preferredDefinitionId of normalizedPreferredDefinitionIds) {
@@ -60689,6 +60965,9 @@ function resolveConfiguredSenderIdForProjectRoot(overrides, projectRoot, preferr
       }
     }
   }
+  if (!allowProjectFallback) {
+    return null;
+  }
   for (const [agentId, override] of Object.entries(overrides)) {
     if (BUILT_IN_AGENT_DEFINITION_IDS.has(agentId)) {
       continue;
@@ -60700,10 +60979,16 @@ function resolveConfiguredSenderIdForProjectRoot(overrides, projectRoot, preferr
   }
   return fallbackSenderId;
 }
-async function inferSenderIdForProjectRoot(projectRoot) {
+async function inferSenderIdForProjectRoot(projectRoot, preferredDefinitionIds = []) {
   const overrides = await readRelayAgentOverrides();
   const projectConfig = await readProjectConfig(projectRoot);
   const configuredDefinitionId = normalizeAgentSelectorSegment(projectConfig?.agent?.id?.trim() ?? "");
+  const normalizedPreferredDefinitionIds = preferredDefinitionIds.map((value) => normalizeAgentSelectorSegment(value)).filter(Boolean);
+  const preferredDefinitionId = normalizedPreferredDefinitionIds[0];
+  if (preferredDefinitionId) {
+    const preferredSenderId = resolveConfiguredSenderIdForProjectRoot(overrides, projectRoot, [preferredDefinitionId], false);
+    return preferredSenderId ?? buildRelayAgentInstance(preferredDefinitionId, projectRoot).id;
+  }
   const projectDefaultDefinitionIds2 = [
     configuredDefinitionId,
     projectConfig?.project?.id,
@@ -60723,11 +61008,12 @@ async function resolveScoutSenderId(agentName, currentDirectory, env = process.e
   if (env.OPENSCOUT_AGENT?.trim()) {
     return env.OPENSCOUT_AGENT.trim();
   }
+  const herdrAgentName = resolveHerdrAgentName(env);
   const projectRoot = await findNearestProjectRoot(currentDirectory);
   if (!projectRoot) {
-    return resolveOperatorName();
+    return herdrAgentName ? buildRelayAgentInstance(herdrAgentName, currentDirectory).id : resolveOperatorName();
   }
-  return inferSenderIdForProjectRoot(projectRoot);
+  return inferSenderIdForProjectRoot(projectRoot, herdrAgentName ? [herdrAgentName] : []);
 }
 async function resolveScoutMatchParticipantId(sessionIdOverride, env = process.env) {
   const sessionId = sessionIdOverride?.trim() || env.OPENSCOUT_SESSION_ID?.trim() || env.CODEX_THREAD_ID?.trim() || env.OPENSCOUT_CODEX_THREAD_ID?.trim() || env.CLAUDE_CODE_SESSION_ID?.trim() || env.CLAUDE_SESSION_ID?.trim() || env.CLAUDE_CODE_REMOTE_SESSION_ID?.trim();
@@ -60741,18 +61027,20 @@ async function resolveScoutMatchParticipantId(sessionIdOverride, env = process.e
   }
   return parsed.value;
 }
+var TRUTHY_ENV_VALUES;
 var init_sender = __esm(() => {
   init_src();
   init_setup();
   init_src2();
   init_user_config();
+  TRUTHY_ENV_VALUES = new Set(["1", "true", "yes", "on"]);
 });
 
 // ../../apps/desktop/src/core/broker/service.ts
 import { setTimeout as delay2 } from "timers/promises";
 import { mkdir as mkdir11, readFile as readFile14, unlink, writeFile as writeFile10 } from "fs/promises";
 import { basename as basename13, join as join37, resolve as resolve17 } from "path";
-import { createHash as createHash12, randomUUID as randomUUID5 } from "crypto";
+import { createHash as createHash13, randomUUID as randomUUID5 } from "crypto";
 function relayHubDirectory() {
   return resolveOpenScoutSupportPaths().relayHubDirectory;
 }
@@ -60844,7 +61132,7 @@ function deliveryRequestId(clientMessageId, createdAt) {
   if (!normalized) {
     return `deliver-${createdAt.toString(36)}-${Math.random().toString(36).slice(2, 8)}`;
   }
-  const digest = createHash12("sha256").update(normalized).digest("hex").slice(0, 32);
+  const digest = createHash13("sha256").update(normalized).digest("hex").slice(0, 32);
   return `deliver-client-${digest}`;
 }
 function metadataStringList(metadata, key) {
@@ -65179,15 +65467,20 @@ function findRepoDistDirectory(startDirectory) {
     current = parent;
   }
 }
+function isRepoBuildOutput(bundlePath) {
+  const distDir = dirname24(bundlePath);
+  return basename15(distDir) === "dist" && basename15(dirname24(distDir)) === "macos";
+}
 function selectInstalledAppBundle(indexedPaths, home, pathExists3 = existsSync33) {
-  for (const candidate of [
-    join39("/Applications", INSTALLED_APP_BUNDLE_NAME),
-    join39(home, "Applications", INSTALLED_APP_BUNDLE_NAME)
-  ]) {
-    if (pathExists3(candidate))
-      return candidate;
+  const names2 = [INSTALLED_APP_BUNDLE_NAME, ...LEGACY_INSTALLED_APP_BUNDLE_NAMES];
+  for (const name2 of names2) {
+    for (const root of ["/Applications", join39(home, "Applications")]) {
+      const candidate = join39(root, name2);
+      if (pathExists3(candidate))
+        return candidate;
+    }
   }
-  return indexedPaths.map((line) => line.trim()).filter((candidate) => basename15(candidate) === INSTALLED_APP_BUNDLE_NAME).find(pathExists3) ?? null;
+  return indexedPaths.map((line) => line.trim()).filter((candidate) => names2.includes(basename15(candidate))).filter((candidate) => !isRepoBuildOutput(candidate)).find(pathExists3) ?? null;
 }
 function findInstalledAppBundle(env) {
   const spotlight = spawnSync5("mdfind", [`kMDItemCFBundleIdentifier == '${INSTALLED_APP_BUNDLE_ID}'`], {
@@ -65204,7 +65497,7 @@ function resolveBundlePaths(context) {
   const installed = findInstalledAppBundle(context.env);
   if (installed)
     return resolveAppBundlePaths(installed);
-  throw new ScoutCliError("No OpenScout app bundle found. Build one with `bun run scout:build` from a checkout, or install with `scout install`.");
+  throw new ScoutCliError("No Scout app bundle found. Build one with `bun run scout:build` from a checkout, or install with `scout install`.");
 }
 function readTree(paths2) {
   return classifyProcesses(readProcessTable(), paths2);
@@ -65408,12 +65701,13 @@ async function runAppCommand(context, args) {
     throw new ScoutCliError(result.message);
   }
 }
-var HELP_FLAGS3, INSTALLED_APP_BUNDLE_ID = "app.openscout.scout", INSTALLED_APP_BUNDLE_NAME = "OpenScout.app", READY_TIMEOUT_MS = 30000, SUPERVISED_READY_TIMEOUT_MS = 120000, SUPERVISED_DRAIN_TIMEOUT_MS = 20000, POLL_MS = 250;
+var HELP_FLAGS3, INSTALLED_APP_BUNDLE_ID = "app.openscout.scout", INSTALLED_APP_BUNDLE_NAME = "Scout.app", LEGACY_INSTALLED_APP_BUNDLE_NAMES, READY_TIMEOUT_MS = 30000, SUPERVISED_READY_TIMEOUT_MS = 120000, SUPERVISED_DRAIN_TIMEOUT_MS = 20000, POLL_MS = 250;
 var init_app = __esm(() => {
   init_app_lifecycle();
   init_context();
   init_errors();
   HELP_FLAGS3 = new Set(["help", "--help", "-h"]);
+  LEGACY_INSTALLED_APP_BUNDLE_NAMES = ["OpenScout.app"];
 });
 
 // ../../apps/desktop/src/cli/commands/status.ts
@@ -67217,15 +67511,18 @@ function renderSendCommandHelp() {
     "  --body-file <path>                -> alias for --message-file",
     "",
     "Examples:",
-    '  scout send --to hudson "ready for review; literal @codex stays text"',
+    '  scout send --to hudson "review completed; literal @codex stays text"',
     '  scout send --to target:mw-talkie "status update for that worker"',
-    '  scout send --ref 7f3a9c21 "follow-up for that bound session"',
-    '  scout send --to lattices#codex?5.5 "ready for review"',
-    '  scout send --to hudson --wake "please apply the chrome feedback; no reply needed"',
+    '  scout send --ref 7f3a9c21 "FYI: the build passed; no action needed"',
+    '  scout send --to lattices#codex?5.5 "review completed; findings recorded in the PR"',
+    '  scout send --to hudson --wake "FYI: the chrome feedback is already applied"',
     "  scout send --channel triage --message-file ./status.md",
     '  scout send --as premotion.master.mini --to hudson "editor branch is green"',
-    '  scout send --channel triage "need two reviewers"',
-    '  scout send "@hudson ready for review"  # legacy body-mention shorthand'
+    '  scout send --channel triage "both reviews are complete"',
+    '  scout send "@hudson build passed"  # legacy body-mention shorthand',
+    "",
+    "For work instead:",
+    '  scout ask --to hudson --notify "apply the chrome feedback and report back"'
   ].join(`
 `);
 }
@@ -67764,7 +68061,7 @@ __export(exports_chat, {
   chatRequest: () => chatRequest,
   chatPath: () => chatPath
 });
-import { createHash as createHash13, randomUUID as randomUUID7 } from "crypto";
+import { createHash as createHash14, randomUUID as randomUUID7 } from "crypto";
 import { mkdir as mkdir12, readFile as readFile16, writeFile as writeFile11, rename, chmod as chmod2, rm as rm5 } from "fs/promises";
 import { homedir as homedir27 } from "os";
 import { join as join41 } from "path";
@@ -67820,6 +68117,8 @@ function renderChatHelp(commandName = "scout chat") {
   ${commandName} read [--channel <id>]
   ${commandName} say "Hello" [--request-id <id>]
   ${commandName} reply <message-id> "My reply" [--request-id <id>]
+  ${commandName} react <message-id> <emoji> [--request-id <id>]
+  ${commandName} unreact <message-id> <emoji> [--request-id <id>]
   ${commandName} watch [--for 10m] [--once] [--compact] [--reset-cursor] [--channel <id>]
   ${commandName} status
 
@@ -67836,7 +68135,9 @@ with reply; ignore your own messages. Run watch again to resume from its saved
 cursor. If history has expired, read the room, then explicitly use watch
 --reset-cursor to replay retained history. Deduplicate by message id.
 Listening does not itself generate replies.
-Use the same --request-id to retry a send whose outcome was uncertain.`;
+Use the same --request-id to retry a send whose outcome was uncertain.
+React and unreact acknowledge a message without posting a turn. They never
+wake an agent or create a flight.`;
 }
 async function runChatCommand(context, args, commandName = "scout chat") {
   if (!args.length || args.includes("--help") || args.includes("-h")) {
@@ -67860,7 +68161,7 @@ async function runChatCommand(context, args, commandName = "scout chat") {
       positional.push(arg);
   }
   const [command, ...values] = positional;
-  const scope2 = createHash13("sha256").update(`${context.cwd}
+  const scope2 = createHash14("sha256").update(`${context.cwd}
 ${currentChatSession(context.env) ?? "shell"}`).digest("hex");
   const directory = join41(context.env.OPENSCOUT_CHAT_HOME ?? join41(homedir27(), ".openscout", "chat"), scope2);
   await mkdir12(directory, { recursive: true, mode: 448 });
@@ -67883,7 +68184,7 @@ ${currentChatSession(context.env) ?? "shell"}`).digest("hex");
     if (values.length !== 1)
       throw new Error(`Usage: ${commandName} join <invite-url>`);
     const invite = parseChatInvite(values[0]);
-    const attempt = createHash13("sha256").update(`${invite.origin}/${invite.token}`).digest("hex");
+    const attempt = createHash14("sha256").update(`${invite.origin}/${invite.token}`).digest("hex");
     state.attempts[attempt] ??= randomUUID7();
     await save();
     const { data, cookie } = await chatRequest(invite.origin, `/api/invites/${invite.token}/participate`, {
@@ -67916,6 +68217,24 @@ Watch returns message records with IDs. Reply with ${commandName} reply <message
     context.output.writeValue(data, (d) => JSON.stringify(d, null, 2));
     return;
   }
+  if (command === "react" || command === "unreact") {
+    const messageId = values[0]?.trim();
+    const emoji = values[1]?.trim();
+    if (!messageId || !emoji)
+      throw new Error(`Usage: ${commandName} ${command} <message-id> <emoji>`);
+    const requestId = flags["request-id"] ?? randomUUID7();
+    const resource = command === "unreact" ? "reactions/remove" : "reactions";
+    try {
+      const { data } = await chatRequest(room.origin, chatPath(room, resource), {
+        token: room.token,
+        body: { requestId, messageId, emoji }
+      });
+      context.output.writeValue({ ...data, requestId, messageId, emoji }, () => `${command === "unreact" ? "Removed" : "Reacted"} ${emoji} on ${messageId}.`);
+    } catch (error) {
+      throw new Error(`${error.message} Retry with --request-id ${requestId} to avoid duplicates.`);
+    }
+    return;
+  }
   if (command === "say" || command === "reply") {
     const replyToMessageId = command === "reply" ? values.shift() : undefined;
     const body = values.join(" ").trim();
@@ -67938,7 +68257,7 @@ After watch returns, answer relevant messages with ${commandName} reply <message
     const milliseconds = match ? Number(match[1]) * (match[2] === "m" ? 60000 : 1000) : 0;
     if (milliseconds < 1000 || milliseconds > 3600000)
       throw new Error("Watch duration must be between 1s and 60m.");
-    const cursorFile = join41(directory, `cursor-${createHash13("sha256").update(`${room.origin}/${room.channelId}`).digest("hex")}.json`);
+    const cursorFile = join41(directory, `cursor-${createHash14("sha256").update(`${room.origin}/${room.channelId}`).digest("hex")}.json`);
     if (flags["reset-cursor"]) {
       await rm5(cursorFile, { force: true });
       room.cursor = null;
@@ -96082,7 +96401,7 @@ var init_stdio2 = __esm(() => {
 // ../../apps/desktop/src/shared/product.ts
 var SCOUT_APP_VERSION;
 var init_product = __esm(() => {
-  SCOUT_APP_VERSION = process.env.SCOUT_APP_VERSION?.trim() || "0.2.105";
+  SCOUT_APP_VERSION = process.env.SCOUT_APP_VERSION?.trim() || "0.2.106";
 });
 
 // ../../apps/desktop/src/core/mcp/stdio-server-lifecycle.ts
@@ -100441,10 +100760,11 @@ __export(exports_install, {
   OPENSCOUT_RELEASE_OWNER: () => OPENSCOUT_RELEASE_OWNER,
   OPENSCOUT_APP_NAME: () => OPENSCOUT_APP_NAME,
   OPENSCOUT_APP_BUNDLE_ID: () => OPENSCOUT_APP_BUNDLE_ID,
+  LEGACY_APP_BUNDLE_NAMES: () => LEGACY_APP_BUNDLE_NAMES,
   DEFAULT_OPENSCOUT_APP_PATH: () => DEFAULT_OPENSCOUT_APP_PATH
 });
 import { spawnSync as spawnSync8 } from "child_process";
-import { createHash as createHash14 } from "crypto";
+import { createHash as createHash15 } from "crypto";
 import {
   existsSync as fsExistsSync,
   mkdirSync as fsMkdirSync,
@@ -100455,23 +100775,23 @@ import {
   readFileSync as readFileSync20
 } from "fs";
 import { tmpdir as osTmpdir } from "os";
-import { join as join49 } from "path";
+import { dirname as dirname30, join as join49 } from "path";
 function renderInstallCommandHelp() {
   return [
-    "scout install \u2014 download and install the OpenScout macOS app",
+    "scout install \u2014 download and install the Scout macOS app",
     "",
     "Usage:",
     "  scout install                 # install or update to the latest signed release",
     "  scout install --check         # report installed vs latest, install nothing",
     "  scout install --version <tag> # install a specific release (e.g. v0.2.70)",
     "  scout install --force         # reinstall even if already up to date",
-    "  scout install --no-restart    # do not relaunch OpenScout after installing",
+    "  scout install --no-restart    # do not relaunch Scout after installing",
     "  scout install --candidate <receipt.json> --dmg <file> # explicit local signed candidate",
     "",
     "Behavior:",
     "  Downloads the signed + notarized OpenScout.dmg from the GitHub release,",
     "  verifies the published byte size and sha256 digest when GitHub provides one,",
-    "  then codesign and Gatekeeper-assess the DMG before mounting. OpenScout.app",
+    "  then codesign and Gatekeeper-assess the DMG before mounting. Scout.app",
     "  must match the pinned bundle id and Team ID, pass codesign --deep --strict,",
     "  and pass Gatekeeper execute after staging. A running copy of the installed",
     "  app and any stale ScoutMenu helpers from other checkouts are stopped first;",
@@ -100570,7 +100890,7 @@ function stripLeadingV(tag) {
 function normalizeReleaseVersion(tag) {
   const version3 = stripLeadingV(tag);
   if (!/^\d+\.\d+\.\d+$/.test(version3)) {
-    throw new ScoutCliError(`unsupported OpenScout release tag: ${tag}`);
+    throw new ScoutCliError(`unsupported Scout release tag: ${tag}`);
   }
   return version3;
 }
@@ -100666,7 +100986,7 @@ function verifyDownloadedAsset(buffer, asset) {
   const parsed = parseGithubAssetDigest(digest);
   let actual;
   try {
-    actual = createHash14(parsed.algorithm).update(buffer).digest("hex");
+    actual = createHash15(parsed.algorithm).update(buffer).digest("hex");
   } catch {
     throw new ScoutCliError(`unsupported GitHub asset digest algorithm: ${parsed.algorithm}`);
   }
@@ -100683,7 +101003,7 @@ function findAppDmgAsset(release2) {
   const latestAlias = assets.find((asset) => asset.name === LATEST_DMG_ALIAS);
   if (latestAlias)
     return latestAlias;
-  throw new ScoutCliError(`no OpenScout.app DMG found in release ${release2.tag_name}. Assets: ${assets.map((asset) => asset.name).join(", ") || "(none)"}`);
+  throw new ScoutCliError(`no product DMG found in release ${release2.tag_name}. Assets: ${assets.map((asset) => asset.name).join(", ") || "(none)"}`);
 }
 function infoPlistPath(appPath) {
   return join49(appPath, "Contents", "Info.plist");
@@ -100716,7 +101036,7 @@ async function fetchRelease(version3, deps) {
   if ((gh.status ?? 1) === 0 && gh.stdout.trim()) {
     return JSON.parse(gh.stdout);
   }
-  throw new ScoutCliError(version3 ? `release "${version3}" not found on GitHub (${OPENSCOUT_RELEASE_OWNER}/${OPENSCOUT_RELEASE_REPOSITORY})` : `could not fetch the latest OpenScout release from GitHub (${OPENSCOUT_RELEASE_OWNER}/${OPENSCOUT_RELEASE_REPOSITORY})`);
+  throw new ScoutCliError(version3 ? `release "${version3}" not found on GitHub (${OPENSCOUT_RELEASE_OWNER}/${OPENSCOUT_RELEASE_REPOSITORY})` : `could not fetch the latest Scout release from GitHub (${OPENSCOUT_RELEASE_OWNER}/${OPENSCOUT_RELEASE_REPOSITORY})`);
 }
 async function downloadDmg(asset, destination, context, deps) {
   context.stderr(`Downloading ${asset.name} (${formatBytes(asset.size)})\u2026`);
@@ -100753,11 +101073,13 @@ function unmountDmg(mountPoint, deps) {
   deps.run("hdiutil", ["detach", mountPoint, "-force", "-quiet"]);
 }
 function requireMountedOpenScoutApp(mountPoint, deps) {
-  const source = join49(mountPoint, OPENSCOUT_APP_NAME);
-  if (!deps.existsSync(source) || !deps.existsSync(infoPlistPath(source))) {
-    throw new ScoutCliError(`no ${OPENSCOUT_APP_NAME} found in the mounted DMG at ${mountPoint}`);
+  for (const name2 of [OPENSCOUT_APP_NAME, ...LEGACY_APP_BUNDLE_NAMES]) {
+    const source = join49(mountPoint, name2);
+    if (deps.existsSync(source) && deps.existsSync(infoPlistPath(source)))
+      return source;
   }
-  return source;
+  const names2 = [OPENSCOUT_APP_NAME, ...LEGACY_APP_BUNDLE_NAMES].join(" or ");
+  throw new ScoutCliError(`no ${names2} found in the mounted DMG at ${mountPoint}`);
 }
 function codesignField(output, key) {
   const match = output.match(new RegExp(`^${key}=(.+)$`, "m"));
@@ -100978,7 +101300,7 @@ function processIdsForMenuOutsideApp(psOutput, appPath) {
 }
 function inspectInstallProcessIds(deps) {
   const result = deps.run("ps", ["-axo", "pid=,args="]);
-  requireSuccess(result, "could not inspect running OpenScout processes");
+  requireSuccess(result, "could not inspect running Scout processes");
   return {
     installed: processIdsForInstalledApp(result.stdout, deps.appPath),
     staleMenus: processIdsForMenuOutsideApp(result.stdout, deps.appPath)
@@ -101016,7 +101338,57 @@ function stopRunningApp(deps) {
   }
   if (waitUntilInstallUnblocked(deps, STOP_POLL_ATTEMPTS))
     return hadInstalledRunning;
-  throw new ScoutCliError("could not stop OpenScout before replacing it");
+  throw new ScoutCliError("could not stop Scout before replacing it");
+}
+function stopAppAtPath(appPath, deps) {
+  const scan = () => {
+    const result = deps.run("ps", ["-axo", "pid=,args="]);
+    requireSuccess(result, "could not inspect running Scout processes");
+    return processIdsForInstalledApp(result.stdout, appPath);
+  };
+  if (scan().length === 0)
+    return false;
+  for (const pid of scan())
+    deps.run("kill", [String(pid)]);
+  for (let attempt = 0;attempt < STOP_POLL_ATTEMPTS; attempt += 1) {
+    if (scan().length === 0)
+      return true;
+    deps.sleep(STOP_POLL_MS);
+  }
+  for (const pid of scan())
+    deps.run("kill", ["-9", String(pid)]);
+  for (let attempt = 0;attempt < STOP_POLL_ATTEMPTS; attempt += 1) {
+    if (scan().length === 0)
+      return true;
+    deps.sleep(STOP_POLL_MS);
+  }
+  throw new ScoutCliError(`could not stop the pre-rename app at ${appPath}`);
+}
+function retireLegacyAppBundles(deps, context) {
+  const removed = [];
+  let hadRunning = false;
+  let blocked = false;
+  for (const name2 of LEGACY_APP_BUNDLE_NAMES) {
+    const legacyPath = join49(dirname30(deps.appPath), name2);
+    if (legacyPath === deps.appPath || !deps.existsSync(legacyPath))
+      continue;
+    try {
+      if (stopAppAtPath(legacyPath, deps))
+        hadRunning = true;
+    } catch (error48) {
+      blocked = true;
+      context.stderr(`Kept ${legacyPath}; automatic relaunch skipped: ${error48 instanceof Error ? error48.message : String(error48)}`);
+      continue;
+    }
+    try {
+      deps.rmSync(legacyPath, { recursive: true, force: true });
+      removed.push(legacyPath);
+      context.stderr(`Removed the pre-rename bundle at ${legacyPath}.`);
+    } catch (error48) {
+      context.stderr(`Could not remove the pre-rename bundle at ${legacyPath}: ${error48 instanceof Error ? error48.message : String(error48)}`);
+    }
+  }
+  return { removed, hadRunning, blocked };
 }
 function launchApp(deps) {
   requireSuccess(deps.run("open", [deps.appPath]), `could not relaunch ${deps.appPath}`);
@@ -101042,24 +101414,24 @@ async function runCheck(context, options, deps) {
   if (!deps.existsSync(deps.appPath)) {
     if (deps.existsSync(backupPathFor(deps.appPath))) {
       status = "repair-needed";
-      message = "An interrupted OpenScout install needs repair \u2014 run `scout install --force`.";
+      message = "An interrupted Scout install needs repair \u2014 run `scout install --force`.";
     } else {
       status = "not-installed";
-      message = "OpenScout is not installed \u2014 run `scout install`.";
+      message = "Scout is not installed \u2014 run `scout install`.";
     }
   } else {
     try {
       installed = verifyStagedOpenScoutApp(deps.appPath, deps);
       if (installed === target2) {
         status = "up-to-date";
-        message = `OpenScout ${installed} is up to date.`;
+        message = `Scout ${installed} is up to date.`;
       } else {
         status = "update-available";
         message = `Update available: ${installed} \u2192 ${target2}. Run \`scout install\`.`;
       }
     } catch (error48) {
       status = "repair-needed";
-      message = `OpenScout needs repair (${error48 instanceof Error ? error48.message : String(error48)}). ` + "Run `scout install --force`.";
+      message = `Scout needs repair (${error48 instanceof Error ? error48.message : String(error48)}). ` + "Run `scout install --force`.";
     }
   }
   context.output.writeValue({ action: "check", status, installed, target: target2, bundlePath: deps.appPath, message }, renderInstallResult);
@@ -101080,7 +101452,7 @@ async function runInstallCommand(context, args, dependencies = {}) {
     await runCheck(context, options, deps);
     return;
   }
-  context.stderr(options.candidate ? "Verifying explicit local candidate (unpublished)\u2026" : options.version ? `Fetching release ${options.version}\u2026` : "Fetching the latest OpenScout release\u2026");
+  context.stderr(options.candidate ? "Verifying explicit local candidate (unpublished)\u2026" : options.version ? `Fetching release ${options.version}\u2026` : "Fetching the latest Scout release\u2026");
   const release2 = options.candidate && options.dmg ? loadInstallCandidate(options.candidate, options.dmg) : await fetchRelease(options.version, deps);
   const target2 = normalizeReleaseVersion(release2.tag_name);
   const releaseInstallLock = acquireInstallLock(deps);
@@ -101098,12 +101470,12 @@ async function runInstallCommand(context, args, dependencies = {}) {
           installed: verifiedVersion,
           target: target2,
           bundlePath: deps.appPath,
-          message: `OpenScout ${target2} is already installed (use --force to reinstall).`
+          message: `Scout ${target2} is already installed (use --force to reinstall).`
         }, renderInstallResult);
         return;
       } catch (error48) {
         repairingInstalledApp = true;
-        context.stderr(`Installed OpenScout ${target2} failed verification; repairing it: ${error48 instanceof Error ? error48.message : String(error48)}`);
+        context.stderr(`Installed Scout ${target2} failed verification; repairing it: ${error48 instanceof Error ? error48.message : String(error48)}`);
       }
     }
     const asset = findAppDmgAsset(release2);
@@ -101122,7 +101494,7 @@ async function runInstallCommand(context, args, dependencies = {}) {
       } else {
         await downloadDmg(asset, dmgPath, context, deps);
       }
-      context.stderr(`Installing OpenScout ${target2} to ${deps.appPath}\u2026`);
+      context.stderr(`Installing Scout ${target2} to ${deps.appPath}\u2026`);
       verifyDownloadedDmg(dmgPath, deps);
       mountDmg(dmgPath, mountPoint, deps);
       mounted = true;
@@ -101136,11 +101508,14 @@ async function runInstallCommand(context, args, dependencies = {}) {
         unmountDmg(mountPoint, deps);
       deps.rmSync(workDir, { recursive: true, force: true });
     }
-    if (wasRunning && options.restart) {
+    const retirement = retireLegacyAppBundles(deps, context);
+    if (retirement.hadRunning)
+      wasRunning = true;
+    if (wasRunning && options.restart && !retirement.blocked) {
       launchApp(deps);
     }
     const status = hadInstalledApp ? "updated" : "installed";
-    const relaunchNote = wasRunning ? options.restart ? " (relaunched)" : " (restart OpenScout to use the new version)" : "";
+    const relaunchNote = retirement.blocked ? " (legacy app cleanup incomplete; automatic relaunch skipped)" : wasRunning ? options.restart ? " (relaunched)" : " (restart Scout to use the new version)" : "";
     let verb = "Installed";
     if (repairingInstalledApp || hadInstalledApp && !installedBefore) {
       verb = "Repaired";
@@ -101153,15 +101528,16 @@ async function runInstallCommand(context, args, dependencies = {}) {
       installed: installedAfter,
       target: target2,
       bundlePath: deps.appPath,
-      message: `${verb} OpenScout ${installedAfter} \u2192 ${deps.appPath}${relaunchNote}`
+      message: `${verb} Scout ${installedAfter} \u2192 ${deps.appPath}${relaunchNote}`
     }, renderInstallResult);
   } finally {
     releaseInstallLock();
   }
 }
-var OPENSCOUT_RELEASE_OWNER = "oscout", OPENSCOUT_RELEASE_REPOSITORY = "scout", OPENSCOUT_APP_NAME = "OpenScout.app", OPENSCOUT_APP_BUNDLE_ID = "app.openscout.scout", OPENSCOUT_SIGNING_TEAM_ID = "2U83JFPW66", DEFAULT_OPENSCOUT_APP_PATH, GITHUB_ASSET_DIGEST_ALGORITHM = "sha256", GITHUB_ASSET_DIGEST_HEX_LENGTH = 64, LATEST_DMG_ALIAS = "OpenScout.dmg", USER_AGENT = "scout-cli", BACKUP_SUFFIX = ".openscout-previous", INSTALL_LOCK_SUFFIX = ".openscout-install.lock", SHLOCK_PATH = "/usr/bin/shlock", STOP_POLL_ATTEMPTS = 50, STOP_POLL_MS = 100, MENU_PROCESS_EXECUTABLE = "ScoutMenu", HELP_FLAGS9;
+var OPENSCOUT_RELEASE_OWNER = "oscout", OPENSCOUT_RELEASE_REPOSITORY = "scout", OPENSCOUT_APP_NAME = "Scout.app", LEGACY_APP_BUNDLE_NAMES, OPENSCOUT_APP_BUNDLE_ID = "app.openscout.scout", OPENSCOUT_SIGNING_TEAM_ID = "2U83JFPW66", DEFAULT_OPENSCOUT_APP_PATH, GITHUB_ASSET_DIGEST_ALGORITHM = "sha256", GITHUB_ASSET_DIGEST_HEX_LENGTH = 64, LATEST_DMG_ALIAS = "OpenScout.dmg", USER_AGENT = "scout-cli", BACKUP_SUFFIX = ".openscout-previous", INSTALL_LOCK_SUFFIX = ".openscout-install.lock", SHLOCK_PATH = "/usr/bin/shlock", STOP_POLL_ATTEMPTS = 50, STOP_POLL_MS = 100, MENU_PROCESS_EXECUTABLE = "ScoutMenu", HELP_FLAGS9;
 var init_install = __esm(() => {
   init_errors();
+  LEGACY_APP_BUNDLE_NAMES = ["OpenScout.app"];
   DEFAULT_OPENSCOUT_APP_PATH = `/Applications/${OPENSCOUT_APP_NAME}`;
   HELP_FLAGS9 = new Set(["help", "--help", "-h"]);
 });
@@ -110208,7 +110584,7 @@ __export(exports_menu, {
 import { spawnSync as spawnSync10 } from "child_process";
 import { existsSync as existsSync39 } from "fs";
 import { homedir as homedir32 } from "os";
-import { dirname as dirname30, join as join51, resolve as resolve30 } from "path";
+import { dirname as dirname31, join as join51, resolve as resolve30 } from "path";
 import { fileURLToPath as fileURLToPath12 } from "url";
 function renderMenuCommandHelp() {
   return [
@@ -110228,8 +110604,8 @@ function renderMenuCommandHelp() {
     "  quit   = stop",
     "",
     "Behavior:",
-    "  On macOS, `scout menu` loads the menu bar app from the installed OpenScout.app",
-    "  (the menu ships as an embedded helper). If OpenScout.app is not installed, a",
+    "  On macOS, `scout menu` loads the menu bar app from the installed Scout.app",
+    "  (the menu ships as an embedded helper). If Scout.app is not installed, a",
     "  repo checkout can fall back to `apps/macos/bin/openscout-menu.ts` for local",
     "  development. `scout menu build` and `scout menu dmg` always require a checkout.",
     "",
@@ -110299,7 +110675,7 @@ function findRepoMenuHelper(startDirectory) {
     if (existsSync39(candidate)) {
       return candidate;
     }
-    const parent = dirname30(current);
+    const parent = dirname31(current);
     if (parent === current) {
       break;
     }
@@ -110309,7 +110685,7 @@ function findRepoMenuHelper(startDirectory) {
   return existsSync39(sourceRelativeCandidate) ? sourceRelativeCandidate : null;
 }
 function resolveRepoBundlePath(helperPath) {
-  return resolve30(dirname30(helperPath), "..", "dist", "Scout.app", EMBEDDED_MENU_RELATIVE_PATH);
+  return resolve30(dirname31(helperPath), "..", "dist", "Scout.app", EMBEDDED_MENU_RELATIVE_PATH);
 }
 function menuProcesses(helperBundlePath) {
   const expected = helperBundlePath ? join51(helperBundlePath, "Contents", "MacOS", MENU_PROCESS_NAME) : null;
@@ -110501,18 +110877,16 @@ async function runMenuCommand(context, args) {
   const result = preferRepoHelper && repoHelperPath ? await runWithRepoHelper(context, repoHelperPath, command) : installedAppPath ? await runWithInstalledApp(context, command) : repoHelperPath ? await runWithRepoHelper(context, repoHelperPath, command) : await runWithInstalledApp(context, command);
   context.output.writeValue(result, renderMenuResult);
 }
-var MENU_BUNDLE_ID = "app.openscout.scout.menu", MENU_PROCESS_NAME = "ScoutMenu", APP_BUNDLE_ID = "app.openscout.scout", APP_BUNDLE_NAME = "OpenScout.app", EMBEDDED_MENU_RELATIVE_PATH, HELP_FLAGS14, COMMON_APP_BUNDLE_PATHS;
+var MENU_BUNDLE_ID = "app.openscout.scout.menu", MENU_PROCESS_NAME = "ScoutMenu", APP_BUNDLE_ID = "app.openscout.scout", APP_BUNDLE_NAME = "Scout.app", LEGACY_APP_BUNDLE_NAMES2, EMBEDDED_MENU_RELATIVE_PATH, HELP_FLAGS14, COMMON_APP_BUNDLE_PATHS;
 var init_menu = __esm(() => {
   init_src2();
   init_app_lifecycle();
   init_context();
   init_errors();
+  LEGACY_APP_BUNDLE_NAMES2 = ["OpenScout.app"];
   EMBEDDED_MENU_RELATIVE_PATH = join51("Contents", "Library", "LoginItems", "ScoutMenu.app");
   HELP_FLAGS14 = new Set(["help", "--help", "-h"]);
-  COMMON_APP_BUNDLE_PATHS = [
-    join51("/Applications", APP_BUNDLE_NAME),
-    join51(homedir32(), "Applications", APP_BUNDLE_NAME)
-  ];
+  COMMON_APP_BUNDLE_PATHS = [APP_BUNDLE_NAME, ...LEGACY_APP_BUNDLE_NAMES2].flatMap((name2) => [join51("/Applications", name2), join51(homedir32(), "Applications", name2)]);
 });
 
 // ../runtime/src/mesh-join.ts
@@ -111319,7 +111693,7 @@ var init_mesh = () => {};
 
 // ../../apps/desktop/src/core/mesh/enroll-pending.ts
 import { existsSync as existsSync40, mkdirSync as mkdirSync14, readFileSync as readFileSync22, rmSync as rmSync6, writeFileSync as writeFileSync11 } from "fs";
-import { dirname as dirname31, join as join52 } from "path";
+import { dirname as dirname32, join as join52 } from "path";
 function pendingMeshEnrollmentPath(supportDirectory) {
   const dir = supportDirectory ?? resolveOpenScoutSupportPaths().supportDirectory;
   return join52(dir, PENDING_FILE);
@@ -111329,7 +111703,7 @@ function savePendingMeshEnrollment(handshake, supportDirectory) {
     assertTestIsolatedUserData("write the pending mesh enrollment", "OPENSCOUT_SUPPORT_DIRECTORY");
   }
   const path = pendingMeshEnrollmentPath(supportDirectory);
-  mkdirSync14(dirname31(path), { recursive: true });
+  mkdirSync14(dirname32(path), { recursive: true });
   writeFileSync11(path, `${JSON.stringify(handshake, null, 2)}
 `, { encoding: "utf8", mode: 384 });
 }
@@ -114912,7 +115286,7 @@ function createLiveNormalizerContext(sessionId) {
 // ../agent-sessions/src/adapters/claude-code/team-topology.ts
 import { existsSync as existsSync45, readdirSync as readdirSync5, readFileSync as readFileSync28, statSync as statSync12 } from "fs";
 import { homedir as homedir36 } from "os";
-import { basename as basename20, dirname as dirname32, join as join55, relative as relative6 } from "path";
+import { basename as basename20, dirname as dirname33, join as join55, relative as relative6 } from "path";
 function isObject4(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
@@ -115153,7 +115527,7 @@ function parseTaskFile(taskPath, teamName, tasksRoot, sourceRef) {
   const relativePath = relative6(join55(tasksRoot, teamName), taskPath);
   const fallbackId = relativePath.replace(/\.[^.]+$/u, "");
   const fallbackTitle = firstMarkdownTitle(raw) ?? basename20(fallbackId);
-  const inferredState = inferTaskStateFromPath(dirname32(relativePath));
+  const inferredState = inferTaskStateFromPath(dirname33(relativePath));
   let parsed = null;
   try {
     const json2 = JSON.parse(raw);
@@ -123833,7 +124207,7 @@ var init_service9 = __esm(() => {
 });
 
 // ../../apps/desktop/src/core/pairing/runtime/bridge/ssh-terminal-access.ts
-import { createHash as createHash15 } from "crypto";
+import { createHash as createHash16 } from "crypto";
 function validateIosGeneratedSshPublicKey(publicKey) {
   const fields = publicKey.trim().split(/\s+/);
   if (fields.length < 2) {
@@ -123994,10 +124368,10 @@ function readSshWireString(buffer, offset) {
   };
 }
 function fingerprintKeyData(keyData) {
-  return `SHA256:${createHash15("sha256").update(Buffer.from(keyData, "base64")).digest("base64").replace(/=+$/, "")}`;
+  return `SHA256:${createHash16("sha256").update(Buffer.from(keyData, "base64")).digest("base64").replace(/=+$/, "")}`;
 }
 function fingerprintUtf8(value) {
-  return `SHA256:${createHash15("sha256").update(value, "utf8").digest("base64").replace(/=+$/, "")}`;
+  return `SHA256:${createHash16("sha256").update(value, "utf8").digest("base64").replace(/=+$/, "")}`;
 }
 function encodeMarkerValue(value) {
   return Buffer.from(value, "utf8").toString("base64url");
@@ -124020,10 +124394,10 @@ var init_ssh_terminal_access = __esm(() => {
 });
 
 // ../../apps/desktop/src/core/pairing/runtime/bridge/mobile-terminal-session.ts
-import { createHash as createHash16 } from "crypto";
+import { createHash as createHash17 } from "crypto";
 function mobileTerminalSessionName(sshPublicKey, deviceClass) {
   const normalizedClass = normalizeMobileTerminalDeviceClass(deviceClass);
-  const signature = createHash16("sha256").update(sshPublicKey.trim()).digest("hex").slice(0, 8);
+  const signature = createHash17("sha256").update(sshPublicKey.trim()).digest("hex").slice(0, 8);
   return `scout-${normalizedClass}-${signature}`;
 }
 function provisionedMobileTerminalSessionName(sshPublicKey, deviceClass) {
@@ -124059,7 +124433,7 @@ var init_mobile_terminal_session = __esm(() => {
 });
 
 // ../../apps/desktop/src/core/pairing/runtime/bridge/mobile-terminal-provision.ts
-import { createHash as createHash17 } from "crypto";
+import { createHash as createHash18 } from "crypto";
 import {
   chmodSync as chmodSync3,
   closeSync,
@@ -124209,7 +124583,7 @@ function readRequiredHostKeyFingerprint() {
     const keyData = pub.trim().split(/\s+/)[1];
     if (!keyData)
       throw new Error("missing key data");
-    const digest = createHash17("sha256").update(Buffer.from(keyData, "base64")).digest("base64").replace(/=+$/, "");
+    const digest = createHash18("sha256").update(Buffer.from(keyData, "base64")).digest("base64").replace(/=+$/, "");
     return `SHA256:${digest}`;
   } catch (error48) {
     const detail = error48 instanceof Error ? error48.message : String(error48);
@@ -131463,7 +131837,7 @@ __export(exports_session, {
   mergeTerminalSurfaces: () => mergeTerminalSurfaces
 });
 import { spawnSync as spawnSync11 } from "child_process";
-import { createHash as createHash18 } from "crypto";
+import { createHash as createHash19 } from "crypto";
 import { mkdirSync as mkdirSync23 } from "fs";
 import { homedir as homedir50 } from "os";
 import { basename as basename25, join as join68, resolve as resolve35 } from "path";
@@ -131828,7 +132202,7 @@ function terminalSurfaceKey(surface) {
 function defaultTerminalSessionName(input) {
   const projectName2 = sanitizeTerminalSessionNamePart(basename25(input.cwd) || "workspace", 28);
   const harnessName = sanitizeTerminalSessionNamePart(input.harness, 18);
-  const fingerprint = createHash18("sha1").update(`${input.backend}\x00${input.harness}\x00${input.cwd}\x00${input.sessionId}`).digest("hex").slice(0, 10);
+  const fingerprint = createHash19("sha1").update(`${input.backend}\x00${input.harness}\x00${input.cwd}\x00${input.sessionId}`).digest("hex").slice(0, 10);
   return `scout-${harnessName}-${projectName2}-${fingerprint}`;
 }
 function sanitizeTerminalSessionNamePart(value, maxLength) {
@@ -132199,7 +132573,7 @@ __export(exports_server, {
 import { spawn as spawn11 } from "child_process";
 import { existsSync as existsSync52, mkdirSync as mkdirSync24, openSync as openSync2, writeFileSync as writeFileSync17 } from "fs";
 import { homedir as homedir51 } from "os";
-import { dirname as dirname33, join as join69, resolve as resolve36 } from "path";
+import { dirname as dirname34, join as join69, resolve as resolve36 } from "path";
 import { fileURLToPath as fileURLToPath13 } from "url";
 function renderServerCommandHelp() {
   return [
@@ -132259,7 +132633,7 @@ function resolveScoutControlPlaneWebServerEntry() {
     startDirectories: [
       process.env.OPENSCOUT_SETUP_CWD,
       process.cwd(),
-      dirname33(fileURLToPath13(import.meta.url))
+      dirname34(fileURLToPath13(import.meta.url))
     ]
   });
   const source = resolveRepoEntrypoint(repoRoot, "packages/web/server/index.ts");
@@ -132781,14 +133155,14 @@ __export(exports_setup, {
 });
 import { existsSync as existsSync53 } from "fs";
 import { homedir as homedir52 } from "os";
-import { dirname as dirname34, join as join70, resolve as resolve37 } from "path";
+import { dirname as dirname35, join as join70, resolve as resolve37 } from "path";
 import { createInterface as createInterface4 } from "readline/promises";
 function findGitRoot(startDirectory) {
   let current = resolve37(startDirectory);
   while (true) {
     if (existsSync53(join70(current, ".git")))
       return current;
-    const parent = dirname34(current);
+    const parent = dirname35(current);
     if (parent === current)
       return null;
     current = parent;
@@ -132797,7 +133171,7 @@ function findGitRoot(startDirectory) {
 function suggestProjectSourceRoot(currentDirectory, homeDirectory = homedir52()) {
   const gitRoot = findGitRoot(currentDirectory);
   if (gitRoot && resolve37(gitRoot) !== resolve37(homeDirectory))
-    return dirname34(gitRoot);
+    return dirname35(gitRoot);
   for (const candidate of [
     join70(homeDirectory, "dev"),
     join70(homeDirectory, "Developer"),
@@ -133046,49 +133420,62 @@ var init_cursor_source = __esm(() => {
   HEAD_READ_BYTES3 = 512 * 1024;
 });
 
-// ../runtime/src/tail/grok-source.ts
-var DEFAULT_HOT_DISCOVERY_WINDOW_MS4, DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS4, DEFAULT_DEEP_DISCOVERY_WINDOW_MS4, HEAD_READ_BYTES4, grokToolCallMatchers, metadataCache3;
-var init_grok_source = __esm(() => {
+// ../runtime/src/tail/devin-source.ts
+var DEFAULT_HOT_DISCOVERY_WINDOW_MS4, DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS4, DEFAULT_DEEP_DISCOVERY_WINDOW_MS4, HEAD_READ_BYTES4, sessionDbCache;
+var init_devin_source = __esm(() => {
   init_discover();
   init_tool_format();
+  init_user_config();
   DEFAULT_HOT_DISCOVERY_WINDOW_MS4 = 10 * 60 * 1000;
   DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS4 = 24 * 60 * 60 * 1000;
   DEFAULT_DEEP_DISCOVERY_WINDOW_MS4 = 24 * 60 * 60 * 1000;
-  HEAD_READ_BYTES4 = 256 * 1024;
+  HEAD_READ_BYTES4 = 8 * 1024;
+  sessionDbCache = new Map;
+});
+
+// ../runtime/src/tail/grok-source.ts
+var DEFAULT_HOT_DISCOVERY_WINDOW_MS5, DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS5, DEFAULT_DEEP_DISCOVERY_WINDOW_MS5, HEAD_READ_BYTES5, grokToolCallMatchers, metadataCache3;
+var init_grok_source = __esm(() => {
+  init_discover();
+  init_tool_format();
+  DEFAULT_HOT_DISCOVERY_WINDOW_MS5 = 10 * 60 * 1000;
+  DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS5 = 24 * 60 * 60 * 1000;
+  DEFAULT_DEEP_DISCOVERY_WINDOW_MS5 = 24 * 60 * 60 * 1000;
+  HEAD_READ_BYTES5 = 256 * 1024;
   grokToolCallMatchers = new Map;
   metadataCache3 = new Map;
 });
 
 // ../runtime/src/tail/kimi-source.ts
-var DEFAULT_HOT_DISCOVERY_WINDOW_MS5, DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS5, DEFAULT_DEEP_DISCOVERY_WINDOW_MS5, metadataCache4;
+var DEFAULT_HOT_DISCOVERY_WINDOW_MS6, DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS6, DEFAULT_DEEP_DISCOVERY_WINDOW_MS6, metadataCache4;
 var init_kimi_source = __esm(() => {
   init_discover();
   init_tool_format();
-  DEFAULT_HOT_DISCOVERY_WINDOW_MS5 = 10 * 60 * 1000;
-  DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS5 = 24 * 60 * 60 * 1000;
-  DEFAULT_DEEP_DISCOVERY_WINDOW_MS5 = 24 * 60 * 60 * 1000;
+  DEFAULT_HOT_DISCOVERY_WINDOW_MS6 = 10 * 60 * 1000;
+  DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS6 = 24 * 60 * 60 * 1000;
+  DEFAULT_DEEP_DISCOVERY_WINDOW_MS6 = 24 * 60 * 60 * 1000;
   metadataCache4 = new Map;
 });
 
 // ../runtime/src/tail/opencode-source.ts
-var DEFAULT_HOT_DISCOVERY_WINDOW_MS6, DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS6, DEFAULT_DEEP_DISCOVERY_WINDOW_MS6, HEAD_READ_BYTES5;
+var DEFAULT_HOT_DISCOVERY_WINDOW_MS7, DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS7, DEFAULT_DEEP_DISCOVERY_WINDOW_MS7, HEAD_READ_BYTES6;
 var init_opencode_source = __esm(() => {
   init_discover();
-  DEFAULT_HOT_DISCOVERY_WINDOW_MS6 = 10 * 60 * 1000;
-  DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS6 = 24 * 60 * 60 * 1000;
-  DEFAULT_DEEP_DISCOVERY_WINDOW_MS6 = 24 * 60 * 60 * 1000;
-  HEAD_READ_BYTES5 = 128 * 1024;
+  DEFAULT_HOT_DISCOVERY_WINDOW_MS7 = 10 * 60 * 1000;
+  DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS7 = 24 * 60 * 60 * 1000;
+  DEFAULT_DEEP_DISCOVERY_WINDOW_MS7 = 24 * 60 * 60 * 1000;
+  HEAD_READ_BYTES6 = 128 * 1024;
 });
 
 // ../runtime/src/tail/pi-source.ts
-var DEFAULT_HOT_DISCOVERY_WINDOW_MS7, DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS7, DEFAULT_DEEP_DISCOVERY_WINDOW_MS7, HEAD_READ_BYTES6, metadataCache5;
+var DEFAULT_HOT_DISCOVERY_WINDOW_MS8, DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS8, DEFAULT_DEEP_DISCOVERY_WINDOW_MS8, HEAD_READ_BYTES7, metadataCache5;
 var init_pi_source = __esm(() => {
   init_discover();
   init_tool_format();
-  DEFAULT_HOT_DISCOVERY_WINDOW_MS7 = 10 * 60 * 1000;
-  DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS7 = 24 * 60 * 60 * 1000;
-  DEFAULT_DEEP_DISCOVERY_WINDOW_MS7 = 24 * 60 * 60 * 1000;
-  HEAD_READ_BYTES6 = 256 * 1024;
+  DEFAULT_HOT_DISCOVERY_WINDOW_MS8 = 10 * 60 * 1000;
+  DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS8 = 24 * 60 * 60 * 1000;
+  DEFAULT_DEEP_DISCOVERY_WINDOW_MS8 = 24 * 60 * 60 * 1000;
+  HEAD_READ_BYTES7 = 256 * 1024;
   metadataCache5 = new Map;
 });
 // ../runtime/src/tail/service.ts
@@ -133101,6 +133488,7 @@ var init_service11 = __esm(() => {
   init_claude_source();
   init_codex_source();
   init_cursor_source();
+  init_devin_source();
   init_grok_source();
   init_kimi_source();
   init_opencode_source();
@@ -133694,7 +134082,7 @@ __export(exports_tui, {
 });
 import { spawnSync as spawnSync12 } from "child_process";
 import { accessSync as accessSync5, constants as constants5, existsSync as existsSync54 } from "fs";
-import { dirname as dirname35, join as join71, resolve as resolve38 } from "path";
+import { dirname as dirname36, join as join71, resolve as resolve38 } from "path";
 import { fileURLToPath as fileURLToPath14 } from "url";
 function renderTuiCommandHelp() {
   return [
@@ -133816,7 +134204,7 @@ function findScoutTuiCheckout(cwd, env) {
   const starts = [
     cwd,
     env.OPENSCOUT_SETUP_CWD?.trim(),
-    dirname35(fileURLToPath14(import.meta.url))
+    dirname36(fileURLToPath14(import.meta.url))
   ].filter((value) => Boolean(value));
   for (const start of starts) {
     let current = resolve38(start);
@@ -133824,7 +134212,7 @@ function findScoutTuiCheckout(cwd, env) {
       if (existsSync54(join71(current, "crates/scout-tui/Cargo.toml"))) {
         return current;
       }
-      const parent = dirname35(current);
+      const parent = dirname36(current);
       if (parent === current)
         break;
       current = parent;
@@ -134538,12 +134926,12 @@ var init_machine_update = __esm(() => {
 });
 
 // ../../apps/desktop/src/cli/machine-update-remote.ts
-import { createHash as createHash19 } from "crypto";
+import { createHash as createHash20 } from "crypto";
 import { existsSync as existsSync56, readFileSync as readFileSync33 } from "fs";
-import { dirname as dirname36, resolve as resolve40 } from "path";
+import { dirname as dirname37, resolve as resolve40 } from "path";
 import { fileURLToPath as fileURLToPath15 } from "url";
 function resolveUpdateHelperPath() {
-  const here = dirname36(fileURLToPath15(import.meta.url));
+  const here = dirname37(fileURLToPath15(import.meta.url));
   const candidates = [
     resolve40(here, "update-helper.mjs"),
     resolve40(here, "../update-helper.mjs"),
@@ -134572,7 +134960,7 @@ async function runRemoteCandidateInstall(options) {
     ["OpenScout.dmg", options.dmg]
   ]) {
     const bytes = readFileSync33(path2);
-    files[name2] = { data: bytes.toString("base64"), sha256: createHash19("sha256").update(bytes).digest("hex") };
+    files[name2] = { data: bytes.toString("base64"), sha256: createHash20("sha256").update(bytes).digest("hex") };
   }
   const argv = ["ssh", "-o", "BatchMode=yes", "-o", "StrictHostKeyChecking=yes", "-o", "ConnectTimeout=8"];
   if (options.target.port !== undefined)
@@ -134779,15 +135167,15 @@ function readSshConfigAliases(read2 = (path2) => readFileSync34(path2, "utf8"))
 }
 function resolveMachineSshDestination(machine, options = {}) {
   const label = machineLabel(machine);
-  if (!machine.capabilities.includes("ssh")) {
-    throw new ScoutCliError(`${label} does not advertise ssh \u2014 cannot read its versions.`);
-  }
   const aliases = options.aliases ?? new Set;
   const names2 = [machine.displayName ?? "", machine.name, ...machine.hostNames].map((name2) => name2.trim()).filter((name2) => name2.length > 0);
   for (const name2 of names2) {
     if (aliases.has(name2.toLowerCase()))
       return name2;
   }
+  if (!machine.capabilities.includes("ssh")) {
+    throw new ScoutCliError(`${label} does not advertise ssh \u2014 cannot read its versions.`);
+  }
   const tiers = [
     machine.routes.filter((route2) => route2.kind === "tailnet").map((route2) => route2.host),
     machine.routes.filter((route2) => route2.kind === "lan").map((route2) => route2.host),
@@ -135393,6 +135781,7 @@ async function loadScoutWhoAmIReport(context, currentDirectory) {
   return {
     defaultSenderId,
     envAgent: context.env.OPENSCOUT_AGENT?.trim() || null,
+    herdrAgentName: resolveHerdrAgentName(context.env),
     codingAgentHost: detectCodingAgentHost(context.env),
     currentDirectory,
     projectRoot,
@@ -135409,6 +135798,9 @@ function renderScoutWhoAmIReport(report) {
   if (report.envAgent) {
     lines.push(`OPENSCOUT_AGENT: ${report.envAgent}`);
   }
+  if (report.herdrAgentName) {
+    lines.push(`Herdr Agent: ${report.herdrAgentName}`);
+  }
   if (report.codingAgentHost) {
     lines.push(`Host Harness: ${report.codingAgentHost.harness} (${report.codingAgentHost.signal})`);
   }
@@ -135746,7 +136138,7 @@ function renderScoutHelp(version3 = "0.2.19") {
     "  scout server open",
     "",
     "macOS app:",
-    "  scout install         # download + install OpenScout.app from the latest signed release",
+    "  scout install         # download + install Scout.app from the latest signed release",
     "  scout install --check # compare the installed app against the latest release",
     "",
     "Lifecycle:",
@@ -135830,7 +136222,7 @@ init_options();
 // ../../apps/desktop/src/cli/broker-update.ts
 import { randomUUID as randomUUID9 } from "crypto";
 import { mkdir as mkdir16, readFile as readFile19, rename as rename2, rm as rm7, stat as stat7, writeFile as writeFile13 } from "fs/promises";
-import { basename as basename26, dirname as dirname37, join as join74 } from "path";
+import { basename as basename26, dirname as dirname38, join as join74 } from "path";
 
 // ../../apps/desktop/src/cli/runtime-freshness.ts
 function isRecord18(value) {
@@ -135970,7 +136362,7 @@ async function tryCreateOwnedLock(lockPath) {
   };
 }
 async function tryReclaimDeadLock(lockPath, observedOwner) {
-  const reclaimPath = join74(dirname37(lockPath), BROKER_UPDATE_RECLAIM_DIRECTORY);
+  const reclaimPath = join74(dirname38(lockPath), BROKER_UPDATE_RECLAIM_DIRECTORY);
   const reclaimGuard = await tryCreateOwnedLock(reclaimPath);
   if (!reclaimGuard.acquired) {
     return false;
@@ -136012,7 +136404,7 @@ async function waitForBrokerUpdateLockRelease(lockPath, deadline) {
   return false;
 }
 async function acquireBrokerUpdateLock(lockPath, waitTimeoutMs) {
-  await mkdir16(dirname37(lockPath), { recursive: true });
+  await mkdir16(dirname38(lockPath), { recursive: true });
   const waitDeadline = Date.now() + waitTimeoutMs;
   for (;; ) {
     const created = await tryCreateOwnedLock(lockPath);
@@ -136039,7 +136431,7 @@ async function acquireBrokerUpdateLock(lockPath, waitTimeoutMs) {
   }
 }
 async function writeCliMtimeCheckpointAtomically(checkpointPath, mtime) {
-  const checkpointDirectory = dirname37(checkpointPath);
+  const checkpointDirectory = dirname38(checkpointPath);
   await mkdir16(checkpointDirectory, { recursive: true });
   const temporaryPath = join74(checkpointDirectory, `.${basename26(checkpointPath)}.${process.pid}.${randomUUID9()}.tmp`);
   try {
@@ -136076,7 +136468,7 @@ async function ensureBrokerUptodate(options) {
   const report = options.report ?? (() => {
     return;
   });
-  const lockPath = join74(dirname37(options.checkpointPath), BROKER_UPDATE_LOCK_DIRECTORY);
+  const lockPath = join74(dirname38(options.checkpointPath), BROKER_UPDATE_LOCK_DIRECTORY);
   let lock;
   try {
     lock = await acquireBrokerUpdateLock(lockPath, options.lockWaitTimeoutMs ?? BROKER_UPDATE_LOCK_WAIT_MS);