@openscout/scout 0.2.79 → 0.2.80

package/dist/main.mjs

@@ -354,9 +354,22 @@ function candidateAliases(candidate) {
   return Array.from(new Set(aliases.map((alias) => trimIdentityPrefix(alias)).filter(Boolean)));
 }
 function explicitCandidateAliases(candidate) {
+  const cached = explicitAliasesCache.get(candidate);
+  if (cached)
+    return cached;
   const canonical = candidateCanonicalIdentity(candidate);
   const implicitAliases = canonical?.definitionId === OPENSCOUT_COORDINATOR_AGENT_ID ? [SCOUT_DISPATCHER_AGENT_ID] : [];
-  return Array.from(new Set([...candidate.aliases ?? [], ...implicitAliases].map((alias) => normalizeAgentIdentitySegment(trimIdentityPrefix(alias))).filter(Boolean)));
+  const aliases = Array.from(new Set([...candidate.aliases ?? [], ...implicitAliases].map((alias) => normalizeAgentIdentitySegment(trimIdentityPrefix(alias))).filter(Boolean)));
+  explicitAliasesCache.set(candidate, aliases);
+  return aliases;
+}
+function candidateAliasKeys(candidate) {
+  const cached = aliasKeysCache.get(candidate);
+  if (cached)
+    return cached;
+  const keys = explicitCandidateAliases(candidate).map(canonicalizeAliasValue);
+  aliasKeysCache.set(candidate, keys);
+  return keys;
 }
 function canonicalizeAliasValue(value) {
   const parsed = parseAgentIdentity(value.startsWith("@") ? value : `@${value}`);
@@ -373,7 +386,10 @@ function identityAliasKeys(identity) {
   ].filter(Boolean)));
 }
 function candidateCanonicalIdentity(candidate) {
-  return constructAgentIdentity({
+  if (canonicalIdentityCache.has(candidate)) {
+    return canonicalIdentityCache.get(candidate) ?? null;
+  }
+  const canonical = constructAgentIdentity({
     definitionId: candidate.definitionId || candidate.agentId,
     nodeQualifier: candidate.nodeQualifier,
     workspaceQualifier: candidate.workspaceQualifier,
@@ -381,6 +397,8 @@ function candidateCanonicalIdentity(candidate) {
     harness: candidate.harness,
     model: candidate.model
   });
+  canonicalIdentityCache.set(candidate, canonical);
+  return canonical;
 }
 function candidateDimensionValue(candidate, dimension) {
   const canonical = candidateCanonicalIdentity(candidate);
@@ -477,8 +495,8 @@ function definitionMatchesIdentity(identityDefinitionId, candidateDefinitionId)
 }
 function agentIdentityMatches(identity, candidate) {
   const aliasKeys = identityAliasKeys(identity);
-  const candidateAliasKeys = explicitCandidateAliases(candidate).map(canonicalizeAliasValue);
-  if (aliasKeys.some((key) => candidateAliasKeys.includes(key))) {
+  const candidateAliasKeys2 = explicitCandidateAliases(candidate).map(canonicalizeAliasValue);
+  if (aliasKeys.some((key) => candidateAliasKeys2.includes(key))) {
     return true;
   }
   const canonical = canonicalizeIdentity({
@@ -516,8 +534,8 @@ function resolveAgentIdentity(identity, candidates) {
 function diagnoseAgentIdentity(identity, candidates) {
   const aliasKeys = identityAliasKeys(identity);
   const exactAliasMatches = candidates.filter((candidate) => {
-    const candidateAliasKeys = explicitCandidateAliases(candidate).map(canonicalizeAliasValue);
-    return aliasKeys.some((key) => candidateAliasKeys.includes(key));
+    const keys = candidateAliasKeys(candidate);
+    return keys.length > 0 && aliasKeys.some((key) => keys.includes(key));
   });
   if (exactAliasMatches.length === 1) {
     return { kind: "resolved", match: exactAliasMatches[0] };
@@ -558,15 +576,31 @@ function buildIdentitySubset(candidate, dimensions) {
     ...dimensions.includes("node") && canonical.nodeQualifier ? { nodeQualifier: canonical.nodeQualifier } : {}
   });
 }
+function peersByDefinitionId(candidates) {
+  const cached = peersByDefinitionCache.get(candidates);
+  if (cached)
+    return cached;
+  const groups = new Map;
+  for (const candidate of candidates) {
+    const canonical = candidateCanonicalIdentity(candidate);
+    if (!canonical)
+      continue;
+    const group = groups.get(canonical.definitionId);
+    if (group) {
+      group.push(candidate);
+    } else {
+      groups.set(canonical.definitionId, [candidate]);
+    }
+  }
+  peersByDefinitionCache.set(candidates, groups);
+  return groups;
+}
 function formatMinimalAgentIdentity(candidate, candidates, options = {}) {
   const canonical = candidateCanonicalIdentity(candidate);
   if (!canonical) {
     return options.includeSigil === false ? "" : "@";
   }
-  const peers = candidates.filter((peer) => {
-    const peerCanonical = candidateCanonicalIdentity(peer);
-    return peerCanonical && peerCanonical.definitionId === canonical.definitionId;
-  });
+  const peers = peersByDefinitionId(candidates).get(canonical.definitionId) ?? [];
   const aliasMatches = explicitCandidateAliases(candidate).map((alias) => ({ alias, identity: parseAgentIdentity(`@${alias}`) })).filter((entry) => Boolean(entry.identity)).filter((entry) => resolveAgentIdentity(entry.identity, candidates) === candidate).sort((left, right) => left.alias.length - right.alias.length || left.alias.localeCompare(right.alias));
   if (aliasMatches.length > 0) {
     return formatAgentIdentity({ definitionId: aliasMatches[0].alias }, options);
@@ -595,7 +629,7 @@ function formatMinimalAgentIdentity(candidate, candidates, options = {}) {
   }
   return formatAgentIdentity(canonical, options);
 }
-var DIMENSION_ALIASES, normalizeAgentSelectorSegment, SCOUT_DISPATCHER_AGENT_ID = "scout", OPENSCOUT_COORDINATOR_AGENT_ID = "openscout", BUILT_IN_AGENT_DEFINITION_IDS, RESERVED_AGENT_DEFINITION_IDS, parseAgentSelector, formatAgentSelector, extractAgentSelectors, resolveAgentSelector;
+var DIMENSION_ALIASES, normalizeAgentSelectorSegment, SCOUT_DISPATCHER_AGENT_ID = "scout", OPENSCOUT_COORDINATOR_AGENT_ID = "openscout", BUILT_IN_AGENT_DEFINITION_IDS, RESERVED_AGENT_DEFINITION_IDS, explicitAliasesCache, aliasKeysCache, canonicalIdentityCache, peersByDefinitionCache, parseAgentSelector, formatAgentSelector, extractAgentSelectors, resolveAgentSelector;
 var init_agent_identity = __esm(() => {
   DIMENSION_ALIASES = {
     workspace: "workspace",
@@ -619,6 +653,10 @@ var init_agent_identity = __esm(() => {
   RESERVED_AGENT_DEFINITION_IDS = new Set([
     SCOUT_DISPATCHER_AGENT_ID
   ]);
+  explicitAliasesCache = new WeakMap;
+  aliasKeysCache = new WeakMap;
+  canonicalIdentityCache = new WeakMap;
+  peersByDefinitionCache = new WeakMap;
   parseAgentSelector = parseAgentIdentity;
   formatAgentSelector = formatAgentIdentity;
   extractAgentSelectors = extractAgentIdentities;
@@ -1089,7 +1127,7 @@ var SCOUT_RUNTIME_CATALOG_DATA;
 var init_runtime_catalog_generated = __esm(() => {
   SCOUT_RUNTIME_CATALOG_DATA = {
     schemaVersion: "openscout.runtime-catalog.v1",
-    revision: "2026-08-12.1",
+    revision: "2026-08-18.1",
     harnesses: [
       {
         id: "claude",
@@ -1218,6 +1256,7 @@ var init_runtime_catalog_generated = __esm(() => {
         id: "grok",
         label: "Grok CLI",
         enabled: true,
+        listed: false,
         reasoningEfforts: [
           "low",
           "medium",
@@ -1253,7 +1292,7 @@ var init_runtime_catalog_generated = __esm(() => {
       },
       {
         id: "grok-acp",
-        label: "Grok ACP",
+        label: "Grok",
         enabled: true,
         reasoningEfforts: null,
         models: [
@@ -2075,7 +2114,7 @@ function validateScoutRendezvousCodename(codename) {
 }
 var SCOUT_RENDEZVOUS_GENERATED_CODENAME_LENGTH = 6, SCOUT_RENDEZVOUS_CODENAME_MAX_LENGTH = 32, SCOUT_RENDEZVOUS_INVITE_TTL_MS, SCOUT_RENDEZVOUS_MAX_WAIT_MS;
 var init_rendezvous = __esm(() => {
-  SCOUT_RENDEZVOUS_INVITE_TTL_MS = 10 * 60000;
+  SCOUT_RENDEZVOUS_INVITE_TTL_MS = 4 * 60 * 60000;
   SCOUT_RENDEZVOUS_MAX_WAIT_MS = 10 * 60000;
 });
 
@@ -13762,14 +13801,20 @@ function herdrProbeTarget(env) {
   return {
     bin: herdrBin(env),
     path: env.PATH ?? "",
-    home: env.XDG_CONFIG_HOME?.trim() || env.HOME?.trim() || homedir10()
+    home: env.HOME?.trim() || homedir10(),
+    xdgConfigHome: env.XDG_CONFIG_HOME?.trim() || null
   };
 }
 function parseHerdrProbeKey(key) {
   try {
     const parsed = JSON.parse(key);
     if (typeof parsed?.bin === "string" && typeof parsed.path === "string" && typeof parsed.home === "string") {
-      return { bin: parsed.bin, path: parsed.path, home: parsed.home };
+      return {
+        bin: parsed.bin,
+        path: parsed.path,
+        home: parsed.home,
+        xdgConfigHome: typeof parsed.xdgConfigHome === "string" && parsed.xdgConfigHome.trim() ? parsed.xdgConfigHome.trim() : null
+      };
     }
   } catch {}
   return herdrProbeTarget(process.env);
@@ -13811,8 +13856,13 @@ function parseHerdrSessionListJson(output) {
 async function readHerdrSessionsLocal(key, ctx) {
   const target = parseHerdrProbeKey(key);
   try {
+    const env = { ...process.env, PATH: target.path, HOME: target.home };
+    if (target.xdgConfigHome)
+      env.XDG_CONFIG_HOME = target.xdgConfigHome;
+    else
+      delete env.XDG_CONFIG_HOME;
     const { stdout } = await execProbeFile(ctx, target.bin, ["session", "list", "--json"], {
-      env: { ...process.env, PATH: target.path, HOME: target.home, XDG_CONFIG_HOME: target.home },
+      env,
       maxStdoutBytes: 512 * 1024,
       maxStderrBytes: 64 * 1024
     });
@@ -13823,7 +13873,7 @@ async function readHerdrSessionsLocal(key, ctx) {
     throw error;
   }
 }
-var HERDR_TTL_MS = 5000, HERDR_TIMEOUT_MS = 2000, herdrSessionsProbe;
+var HERDR_TTL_MS = 5000, HERDR_TIMEOUT_MS = 2000, herdrSessionsProbe, herdrTopologyCache;
 var init_herdr = __esm(() => {
   init_registry();
   init_exec();
@@ -13848,6 +13898,7 @@ var init_herdr = __esm(() => {
       });
     }
   });
+  herdrTopologyCache = new Map;
 });
 
 // ../runtime/src/system-probes/sessions.ts
@@ -28892,7 +28943,7 @@ function buildCollaborationContractPrompt(agentId) {
 }
 
 // ../runtime/src/pi-rpc.ts
-import { existsSync as existsSync23 } from "fs";
+import { existsSync as existsSync23, readFileSync as readFileSync10, statSync as statSync6 } from "fs";
 import { mkdir as mkdir9, writeFile as writeFile8 } from "fs/promises";
 import { execFileSync as execFileSync5 } from "child_process";
 import { homedir as homedir22 } from "os";
@@ -28950,7 +29001,37 @@ function inferPiProvider(launch) {
   }
   return;
 }
-function readSecretValue(name, commandOverride) {
+function readPiRpcCredentialFile(name, options = {}) {
+  if (!/^[A-Z0-9_]+$/.test(name)) {
+    return;
+  }
+  const env = options.env ?? process.env;
+  const platform = options.platform ?? process.platform;
+  const directory = normalizeOptionalString2(env.CREDENTIALS_DIRECTORY) ?? normalizeOptionalString2(env.OPENSCOUT_CREDENTIALS_DIRECTORY) ?? (platform === "linux" ? join27(normalizeOptionalString2(env.XDG_CONFIG_HOME) ?? join27(options.homedir ?? homedir22(), ".config"), "openscout", "credentials") : undefined);
+  if (!directory) {
+    return;
+  }
+  try {
+    const directoryStat = statSync6(directory);
+    if (!directoryStat.isDirectory() || (directoryStat.mode & 63) !== 0) {
+      return;
+    }
+    const path = join27(directory, name);
+    const stat5 = statSync6(path);
+    if (!stat5.isFile() || (stat5.mode & 63) !== 0 || stat5.size > 16 * 1024) {
+      return;
+    }
+    const value = readFileSync10(path, "utf8").trim();
+    return value || undefined;
+  } catch {
+    return;
+  }
+}
+function readSecretValue(name, commandOverride, env = process.env) {
+  const credentialFile = readPiRpcCredentialFile(name, { env });
+  if (credentialFile) {
+    return credentialFile;
+  }
   try {
     const output = execFileSync5(commandOverride || "secret", ["get", name], {
       encoding: "utf8",
@@ -28984,7 +29065,7 @@ function buildPiRpcCredentialEnv(launch, sources = {}) {
   }
   const env = {};
   const sourceEnv = sources.env ?? process.env;
-  const readSecret = sources.readSecret ?? ((name) => readSecretValue(name, sources.secretCommand));
+  const readSecret = sources.readSecret ?? ((name) => readSecretValue(name, sources.secretCommand, sourceEnv));
   for (const mapping of mappings) {
     const value = readMappedCredentialValue(mapping, sourceEnv, readSecret);
     if (value) {
@@ -29361,7 +29442,7 @@ var init_local_agent_template = __esm(() => {
 });
 
 // ../runtime/src/relay-agent-process-leases.ts
-import { existsSync as existsSync24, mkdirSync as mkdirSync5, readdirSync as readdirSync4, readFileSync as readFileSync10, rmSync as rmSync3, writeFileSync as writeFileSync5 } from "fs";
+import { existsSync as existsSync24, mkdirSync as mkdirSync5, readdirSync as readdirSync4, readFileSync as readFileSync11, rmSync as rmSync3, writeFileSync as writeFileSync5 } from "fs";
 import { join as join28 } from "path";
 function processLeasesDirectory() {
   return join28(resolveOpenScoutSupportPaths().runtimeDirectory, "process-leases");
@@ -29513,7 +29594,7 @@ var init_permission_policy2 = __esm(() => {
 });
 
 // ../runtime/src/user-config.ts
-import { existsSync as existsSync25, readFileSync as readFileSync11, writeFileSync as writeFileSync6, mkdirSync as mkdirSync6 } from "fs";
+import { existsSync as existsSync25, readFileSync as readFileSync12, writeFileSync as writeFileSync6, mkdirSync as mkdirSync6 } from "fs";
 import { homedir as homedir23 } from "os";
 import { dirname as dirname16, join as join30 } from "path";
 function userConfigPath() {
@@ -29524,7 +29605,7 @@ function loadUserConfig() {
   if (!existsSync25(configPath))
     return {};
   try {
-    return JSON.parse(readFileSync11(configPath, "utf8"));
+    return JSON.parse(readFileSync12(configPath, "utf8"));
   } catch {
     return {};
   }
@@ -29540,7 +29621,7 @@ function readSettingsOperatorName() {
   if (!existsSync25(settingsPath))
     return "";
   try {
-    const settings = JSON.parse(readFileSync11(settingsPath, "utf8"));
+    const settings = JSON.parse(readFileSync12(settingsPath, "utf8"));
     const candidate = typeof settings.profile?.operatorName === "string" ? settings.profile.operatorName : typeof settings.operatorName === "string" ? settings.operatorName : "";
     return candidate.trim();
   } catch {
@@ -29563,7 +29644,7 @@ var init_user_config = __esm(() => {
 });
 
 // ../runtime/src/local-agents.ts
-import { existsSync as existsSync26, readFileSync as readFileSync12 } from "fs";
+import { existsSync as existsSync26, readFileSync as readFileSync13 } from "fs";
 import { mkdir as mkdir10, readFile as readFile13, rm as rm4, stat as stat5, writeFile as writeFile9 } from "fs/promises";
 import { basename as basename9, dirname as dirname17, join as join31, resolve as resolve13 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
@@ -29579,7 +29660,7 @@ function resolveProjectsRoot(projectPath) {
     if (!existsSync26(supportPaths.settingsPath)) {
       return dirname17(projectPath);
     }
-    const raw = JSON.parse(readFileSync12(supportPaths.settingsPath, "utf8"));
+    const raw = JSON.parse(readFileSync13(supportPaths.settingsPath, "utf8"));
     const workspaceRoot = raw.discovery?.workspaceRoots?.find((entry) => typeof entry === "string" && entry.trim().length > 0);
     return workspaceRoot ? resolve13(workspaceRoot) : dirname17(projectPath);
   } catch {
@@ -31408,7 +31489,7 @@ async function ensureLocalAgentOnlineOnce(agentName, record2) {
     }
   }
   if (!sessionOnline) {
-    const stderrTail = existsSync26(stderrLogFile) ? readFileSync12(stderrLogFile, "utf8").trim().split(/\r?\n/).slice(-10).join(`
+    const stderrTail = existsSync26(stderrLogFile) ? readFileSync13(stderrLogFile, "utf8").trim().split(/\r?\n/).slice(-10).join(`
 `).trim() : "";
     throw new Error(stderrTail ? `Relay agent ${agentName} failed to stay online:
 ${redactSecrets(stderrTail)}` : `Relay agent ${agentName} failed to stay online.`);
@@ -31927,7 +32008,7 @@ function readPersistedSessionCatalogId(runtimeDir) {
   try {
     const catalogPath = join31(runtimeDir, "session-catalog.json");
     if (existsSync26(catalogPath)) {
-      const raw = readFileSync12(catalogPath, "utf8").trim();
+      const raw = readFileSync13(catalogPath, "utf8").trim();
       if (raw) {
         const catalog = JSON.parse(raw);
         if (typeof catalog.activeSessionId === "string" && catalog.activeSessionId.trim()) {
@@ -31944,7 +32025,7 @@ function readPersistedLegacySessionId(runtimeDir, filename) {
   try {
     const legacyPath = join31(runtimeDir, filename);
     if (existsSync26(legacyPath)) {
-      const value = readFileSync12(legacyPath, "utf8").trim();
+      const value = readFileSync13(legacyPath, "utf8").trim();
       return value || null;
     }
     return null;
@@ -32040,6 +32121,7 @@ function buildLocalAgentBinding(agentId, record2, alive, nodeId, source) {
       labels: ["relay", "project", "agent", "local-agent"],
       metadata: {
         source,
+        brokerRegistered: true,
         ...normalizedRecord.registrationSource ? { registrationSource: normalizedRecord.registrationSource } : {},
         project: normalizedRecord.project,
         projectRoot,
@@ -42214,15 +42296,6 @@ var init_sqlite_store = __esm(() => {
     { key: "pairingSessionId", kind: "pairing" }
   ];
 });
-// ../runtime/src/mesh-discovery.ts
-var init_mesh_discovery = __esm(() => {
-  init_tailscale();
-});
-
-// ../runtime/src/iroh-bridge.ts
-var init_iroh_bridge = __esm(() => {
-  init_support_paths();
-});
 
 // ../runtime/src/mesh-peer-auth.ts
 import { createHash as createHash5, randomBytes as randomBytes2 } from "crypto";
@@ -57862,6 +57935,17 @@ var init_mesh_peer_client = __esm(() => {
   meshPeerFetch = createMeshPeerFetch();
 });
 
+// ../runtime/src/mesh-discovery.ts
+var init_mesh_discovery = __esm(() => {
+  init_mesh_peer_client();
+  init_tailscale();
+});
+
+// ../runtime/src/iroh-bridge.ts
+var init_iroh_bridge = __esm(() => {
+  init_support_paths();
+});
+
 // ../runtime/src/mesh-forwarding.ts
 var init_mesh_forwarding = __esm(() => {
   init_iroh_bridge();
@@ -59803,10 +59887,7 @@ class BrokerRendezvousService {
           suggestion: "choose_another_codename"
         };
       }
-      const expiredInvite = this.expiredInvites.get(key);
-      if (expiredInvite) {
-        return expiredResponse(expiredInvite, participantId);
-      }
+      this.expiredInvites.delete(key);
       return this.createPresence(projectRoot, participantId, requestedCodename, normalizedCodename, now);
     }
     for (let attempt = 0;attempt < MAX_CODENAME_GENERATION_ATTEMPTS; attempt += 1) {
@@ -60084,7 +60165,7 @@ var init_broker_rendezvous_service = __esm(() => {
 });
 
 // ../runtime/src/provisional-agent-names-config.ts
-import { existsSync as existsSync28, readFileSync as readFileSync13, writeFileSync as writeFileSync7, mkdirSync as mkdirSync8 } from "fs";
+import { existsSync as existsSync28, readFileSync as readFileSync14, writeFileSync as writeFileSync7, mkdirSync as mkdirSync8 } from "fs";
 import { homedir as homedir24 } from "os";
 import { isAbsolute as isAbsolute4, join as join33, resolve as resolve15 } from "path";
 function openScoutHome() {
@@ -60120,7 +60201,7 @@ function resolvePoolFilePath(filePath) {
   return isAbsolute4(trimmed) ? trimmed : resolve15(openScoutHome(), trimmed);
 }
 function readProvisionalAgentNamesJsonFile(filePath) {
-  return parseProvisionalAgentNamesJson(readFileSync13(filePath, "utf8"));
+  return parseProvisionalAgentNamesJson(readFileSync14(filePath, "utf8"));
 }
 function loadInlineProvisionalAgentNames(config) {
   const customNames = normalizeProvisionalAgentNamesSetting(config.provisionalAgentNames);
@@ -61880,7 +61961,7 @@ var init_thread_events = __esm(() => {
 
 // ../runtime/src/mobile-push.ts
 import { Database as Database2 } from "bun:sqlite";
-import { mkdirSync as mkdirSync9, readFileSync as readFileSync14 } from "fs";
+import { mkdirSync as mkdirSync9, readFileSync as readFileSync15 } from "fs";
 import { connect as connectHttp2 } from "http2";
 import { createPrivateKey as createPrivateKey3, sign as signWithKey } from "crypto";
 import { dirname as dirname20, join as join36 } from "path";
@@ -62199,7 +62280,7 @@ function loadApnsCredentials() {
     privateKeyPem = Buffer.from(inlineBase64, "base64").toString("utf8");
   }
   if (!privateKeyPem && path) {
-    privateKeyPem = readFileSync14(path, "utf8");
+    privateKeyPem = readFileSync15(path, "utf8");
   }
   if (!teamId || !keyId || !privateKeyPem) {
     return null;
@@ -62902,7 +62983,7 @@ var init_paths2 = __esm(() => {
 });
 
 // ../runtime/src/knowledge/store.ts
-import { existsSync as existsSync31, mkdirSync as mkdirSync10, statSync as statSync6 } from "fs";
+import { existsSync as existsSync31, mkdirSync as mkdirSync10, statSync as statSync7 } from "fs";
 import { createHash as createHash8, randomUUID as randomUUID4 } from "crypto";
 import { dirname as dirname21 } from "path";
 import { Database as Database3 } from "bun:sqlite";
@@ -63561,7 +63642,7 @@ class SQLiteKnowledgeStore {
     const chunkCounts = this.db.query("SELECT COUNT(*) AS total FROM chunks").get();
     let sqliteBytes = 0;
     try {
-      sqliteBytes = statSync6(this.paths.sqlitePath).size;
+      sqliteBytes = statSync7(this.paths.sqlitePath).size;
     } catch {
       sqliteBytes = 0;
     }
@@ -63706,11 +63787,11 @@ import {
   createReadStream as createReadStream2,
   existsSync as existsSync32,
   mkdirSync as mkdirSync11,
-  readFileSync as readFileSync15,
+  readFileSync as readFileSync16,
   readdirSync as readdirSync5,
   renameSync as renameSync4,
   rmSync as rmSync4,
-  statSync as statSync7,
+  statSync as statSync8,
   writeFileSync as writeFileSync8
 } from "fs";
 import { homedir as homedir27 } from "os";
@@ -63796,7 +63877,7 @@ function discoverRecentSessionFiles(cutoffMs, limit, harnessFilter) {
         const path = join38(dir, entry);
         let stats;
         try {
-          stats = statSync7(path);
+          stats = statSync8(path);
         } catch {
           continue;
         }
@@ -64093,8 +64174,8 @@ function readKimiSessionState(wirePath) {
   let cwd = null;
   let title = null;
   try {
-    const state = recordValue2(JSON.parse(readFileSync15(join38(sessionDirectory, "state.json"), "utf8")));
-    cwd = stringValue15(state?.workDir) ?? null;
+    const state = recordValue2(JSON.parse(readFileSync16(join38(sessionDirectory, "state.json"), "utf8")));
+    cwd = stringValue15(state?.cwd) ?? stringValue15(state?.workDir) ?? null;
     title = stringValue15(state?.title) ?? null;
   } catch {}
   return { cwd, sessionId, title };
@@ -64850,6 +64931,7 @@ var init_src3 = __esm(() => {
   init_sqlite_store();
   init_mesh_discovery();
   init_mesh_forwarding();
+  init_mesh_peer_client();
   init_mesh_rendezvous();
   init_node_identity();
   init_node_tls_identity();
@@ -65997,6 +66079,7 @@ function scoutBrokerAgentRegistrationFromConfig(config, nodeId) {
       labels: ["relay", "project", "agent", "local-agent"],
       metadata: {
         ...metadata,
+        brokerRegistered: true,
         summary: `${config.displayName} agent for ${config.projectName}.`,
         role: "Agent"
       },
@@ -66097,9 +66180,12 @@ async function resolveConversationActorId(baseUrl, snapshot, nodeId, actorId, cu
   await syncBrokerAgentRegistration(baseUrl, snapshot, scoutBrokerAgentRegistrationFromConfig(configured, nodeId));
   return configured.agentId;
 }
+function isReusableBrokerRegisteredTargetAgent(agent) {
+  return Boolean(agent && !metadataBoolean(agent.metadata, "staleLocalRegistration") && (metadataString5(agent.metadata, "source") !== "relay-agent-registry" || metadataBoolean(agent.metadata, "brokerRegistered")));
+}
 async function ensureTargetRelayAgentRegistered(baseUrl, snapshot, nodeId, agentId, currentDirectory) {
   const existingAgent = snapshot.agents[agentId];
-  if (existingAgent && !metadataBoolean(existingAgent.metadata, "staleLocalRegistration")) {
+  if (isReusableBrokerRegisteredTargetAgent(existingAgent)) {
     return true;
   }
   const configured = await ensureRelayAgentConfigured(agentId, {
@@ -68682,7 +68768,7 @@ var init_ask2 = __esm(() => {
 
 // ../../apps/desktop/src/cli/app-lifecycle.ts
 import { spawnSync as spawnSync4 } from "child_process";
-import { existsSync as existsSync33, statSync as statSync8 } from "fs";
+import { existsSync as existsSync33, statSync as statSync9 } from "fs";
 import { join as join40, resolve as resolve19 } from "path";
 function resolveLaunchdLabel(env = process.env) {
   const explicit = (env.OPENSCOUT_SERVICE_LABEL ?? "").trim() || (env.OPENSCOUT_BROKER_SERVICE_LABEL ?? "").trim();
@@ -68767,7 +68853,7 @@ function isSuperseded(record2, binaryPath, now = Date.now()) {
     return false;
   let modifiedAt;
   try {
-    modifiedAt = statSync8(binaryPath).mtimeMs;
+    modifiedAt = statSync9(binaryPath).mtimeMs;
   } catch {
     return false;
   }
@@ -99389,7 +99475,7 @@ var init_stdio2 = __esm(() => {
 // ../../apps/desktop/src/shared/product.ts
 var SCOUT_APP_VERSION;
 var init_product = __esm(() => {
-  SCOUT_APP_VERSION = process.env.SCOUT_APP_VERSION?.trim() || "0.2.79";
+  SCOUT_APP_VERSION = process.env.SCOUT_APP_VERSION?.trim() || "0.2.80";
 });
 
 // ../../apps/desktop/src/core/mcp/stdio-server-lifecycle.ts
@@ -101731,7 +101817,7 @@ async function loadScoutRuntimesReport(currentDirectory) {
           reasoningEffort: scoutRuntimeDefaultReasoningEffort(defaultHarness ?? "", defaultModel, runtimeCatalog)
         },
         defaultsByHarness: scoutRuntimeDefaultsByHarness(runtimeCatalog),
-        harnesses: runtimeCatalog.harnesses.filter((entry) => entry.enabled).map((entry) => {
+        harnesses: runtimeCatalog.harnesses.filter((entry) => entry.enabled && entry.listed !== false).map((entry) => {
           const readiness = catalog.entries.find((candidate) => candidate.harness === entry.id);
           return {
             id: entry.id,
@@ -101771,7 +101857,7 @@ var init_service5 = __esm(() => {
 });
 
 // ../../apps/desktop/src/shared/paths.ts
-import { existsSync as existsSync37, readFileSync as readFileSync16 } from "fs";
+import { existsSync as existsSync37, readFileSync as readFileSync17 } from "fs";
 import { dirname as dirname27, join as join46, resolve as resolve26 } from "path";
 import { fileURLToPath as fileURLToPath10 } from "url";
 function looksLikeWorkspaceRoot(candidate) {
@@ -101780,7 +101866,7 @@ function looksLikeWorkspaceRoot(candidate) {
     return false;
   }
   try {
-    const parsed = JSON.parse(readFileSync16(packageJsonPath, "utf8"));
+    const parsed = JSON.parse(readFileSync17(packageJsonPath, "utf8"));
     return Array.isArray(parsed.workspaces);
   } catch {
     return false;
@@ -101792,7 +101878,7 @@ function looksLikePackagedAppRoot(candidate) {
     return false;
   }
   try {
-    const parsed = JSON.parse(readFileSync16(packageJsonPath, "utf8"));
+    const parsed = JSON.parse(readFileSync17(packageJsonPath, "utf8"));
     return parsed.name === "@openscout/scout" || parsed.name === "@openscout/cli";
   } catch {
     return false;
@@ -104175,7 +104261,7 @@ function renderMatchCommandHelp() {
     "The facilitator chooses a memorable codename, gives it to both sessions, and",
     "runs `scout match new <codename>`. The other session runs",
     "`scout match <codename>`. Codenames match case-insensitively within one project,",
-    "expire after 10 minutes, and match exactly two live sessions. With --message,",
+    "expire after 4 hours, and match exactly two live sessions. With --message,",
     "the creator sends one exact-session message only after the broker confirms the match.",
     "",
     "Examples:",
@@ -104428,7 +104514,7 @@ function renderMatchResponse(response) {
     return `No active match ${response.codename} exists in ${projectName2}. Check the codename or create it with scout match new ${response.codename}.`;
   }
   if (response.status === "expired") {
-    return `Match ${response.codename} expired in ${projectName2}. Choose another codename.`;
+    return `Match ${response.codename} expired in ${projectName2}. Recreate it with scout match new ${response.codename}.`;
   }
   if (response.status === "consumed") {
     return `Match ${response.codename} was already used in ${projectName2}. Choose another codename.`;
@@ -107772,7 +107858,7 @@ var init_service6 = __esm(() => {
 });
 
 // ../../apps/desktop/src/core/mcp/scout-mcp.ts
-import { readFileSync as readFileSync17 } from "fs";
+import { readFileSync as readFileSync18 } from "fs";
 import { basename as basename17, resolve as resolve28 } from "path";
 function normalizeSearchableAgentState(state, fallback2) {
   if (!state || state === "registered") {
@@ -107832,7 +107918,7 @@ function parseScoutReplyContextFromEnv(env) {
   const contextFile = env.OPENSCOUT_REPLY_CONTEXT_FILE?.trim();
   if (contextFile) {
     try {
-      const rawFileJson = readFileSync17(contextFile, "utf8").trim();
+      const rawFileJson = readFileSync18(contextFile, "utf8").trim();
       if (rawFileJson) {
         const parsed = JSON.parse(rawFileJson);
         if (isScoutReplyContext(parsed)) {
@@ -108221,7 +108307,17 @@ function sendScoutReplyNotification(server, params) {
 function scheduleScoutReplyNotification(input) {
   (async () => {
     try {
-      const completedFlight = await input.deps.waitForFlight(input.brokerUrl, input.flight.id);
+      let completedFlight;
+      for (let attempt = 0;; attempt += 1) {
+        try {
+          completedFlight = await input.deps.waitForFlight(input.brokerUrl, input.flight.id);
+          break;
+        } catch (error48) {
+          if (attempt >= 2)
+            throw error48;
+          await new Promise((resolve29) => setTimeout(resolve29, 2000));
+        }
+      }
       await sendScoutReplyNotification(input.server, {
         ...input.context,
         status: "completed",
@@ -108508,15 +108604,14 @@ function buildIdentityCandidate(entry) {
     aliases
   };
 }
-function decorateAgentLabels(entries) {
+function buildAgentCandidateDirectory(entries) {
   const identityCandidates = entries.map((entry) => buildIdentityCandidate(entry));
-  return entries.map((entry) => {
-    const identityCandidate = buildIdentityCandidate(entry);
-    const label = formatMinimalAgentIdentity(identityCandidate, identityCandidates);
+  const identityByCandidate = new Map;
+  const candidates = entries.map((entry, index2) => {
     const defaultLabel = entry.defaultSelector ? `@${entry.defaultSelector}` : null;
-    return {
+    const candidate = {
       agentId: entry.agentId,
-      label,
+      label: defaultLabel ?? `@${entry.agentId}`,
       defaultLabel,
       displayName: entry.displayName,
       handle: entry.handle,
@@ -108533,7 +108628,22 @@ function decorateAgentLabels(entries) {
       transport: entry.transport,
       sessionId: entry.sessionId
     };
+    identityByCandidate.set(candidate, identityCandidates[index2]);
+    return candidate;
   });
+  return { candidates, identityCandidates, identityByCandidate };
+}
+function withMinimalLabel(candidate, directory) {
+  const identity2 = directory.identityByCandidate.get(candidate);
+  if (!identity2)
+    return candidate;
+  return {
+    ...candidate,
+    label: formatMinimalAgentIdentity(identity2, directory.identityCandidates)
+  };
+}
+function withMinimalLabels(candidates, directory) {
+  return candidates.map((candidate, index2) => index2 < MAX_DECORATED_CANDIDATES ? withMinimalLabel(candidate, directory) : candidate);
 }
 function isOpenScoutNamedCandidate(candidate) {
   const agentIdHead = normalizeSearchValue(candidate.agentId).split(".")[0] ?? "";
@@ -108713,11 +108823,24 @@ async function loadScoutAgentDirectory(currentDirectory) {
   });
 }
 async function searchScoutAgentsForMcp(input) {
-  const candidates = decorateAgentLabels(await loadScoutAgentDirectory(input.currentDirectory));
+  const debugTiming = process.env.OPENSCOUT_MCP_DEBUG_TIMING === "1";
+  let mark = performance.now();
+  const lap = (label) => {
+    if (!debugTiming)
+      return;
+    console.error(`searchScoutAgentsForMcp ${label} ${Math.round(performance.now() - mark)}ms`);
+    mark = performance.now();
+  };
+  const entries = await loadScoutAgentDirectory(input.currentDirectory);
+  lap("load");
+  const directory = buildAgentCandidateDirectory(entries);
+  const candidates = directory.candidates;
+  lap("candidates");
   const normalizedQuery = normalizeSearchValue(input.query);
   const currentProjectRoot = await findNearestProjectRoot(input.currentDirectory) ?? input.currentDirectory;
+  lap("projectRoot");
   const limit = Math.max(1, Math.min(input.limit ?? 10, 50));
-  return candidates.map((candidate) => ({
+  const result = candidates.map((candidate) => ({
     candidate,
     score: scoreAgentCandidate(candidate, normalizedQuery) + Math.max(0, scoreProjectLocalCandidate(candidate, currentProjectRoot, normalizedQuery))
   })).filter((entry) => normalizedQuery.length === 0 || entry.score >= 0).sort((left, right) => {
@@ -108728,7 +108851,9 @@ async function searchScoutAgentsForMcp(input) {
     if (stateDelta !== 0)
       return stateDelta;
     return left.candidate.displayName.localeCompare(right.candidate.displayName);
-  }).slice(0, limit).map((entry) => entry.candidate);
+  }).slice(0, limit).map((entry) => withMinimalLabel(entry.candidate, directory));
+  lap("score+sort+decorate");
+  return result;
 }
 async function resolveScoutAgentForMcp(input) {
   const rawLabel = input.label.trim();
@@ -108736,43 +108861,51 @@ async function resolveScoutAgentForMcp(input) {
     return { kind: "unresolved", candidate: null, candidates: [] };
   }
   const entries = await loadScoutAgentDirectory(input.currentDirectory);
-  const candidates = decorateAgentLabels(entries);
+  const directory = buildAgentCandidateDirectory(entries);
+  const candidates = directory.candidates;
   const exactMatches = candidates.filter((candidate) => exactCandidateMatches(candidate, rawLabel));
   if (["scout", "openscout"].includes(normalizeSearchValue(rawLabel))) {
     const preferredStableScoutCandidate = findPreferredStableScoutCandidate(candidates);
     if (preferredStableScoutCandidate) {
       return {
         kind: "resolved",
-        candidate: preferredStableScoutCandidate,
+        candidate: withMinimalLabel(preferredStableScoutCandidate, directory),
         candidates: []
       };
     }
   }
   if (exactMatches.length === 1) {
-    return { kind: "resolved", candidate: exactMatches[0], candidates: [] };
+    return {
+      kind: "resolved",
+      candidate: withMinimalLabel(exactMatches[0], directory),
+      candidates: []
+    };
   }
   const preferredProjectLocalCandidate = await findPreferredProjectLocalCandidate(candidates, rawLabel, input.currentDirectory);
   if (preferredProjectLocalCandidate) {
     return {
       kind: "resolved",
-      candidate: preferredProjectLocalCandidate,
+      candidate: withMinimalLabel(preferredProjectLocalCandidate, directory),
       candidates: []
     };
   }
   if (exactMatches.length > 1) {
-    return { kind: "ambiguous", candidate: null, candidates: exactMatches };
+    return {
+      kind: "ambiguous",
+      candidate: null,
+      candidates: withMinimalLabels(exactMatches, directory)
+    };
   }
   const selector = parseAgentIdentity(rawLabel.startsWith("@") ? rawLabel : `@${rawLabel}`);
   if (!selector) {
     return { kind: "unresolved", candidate: null, candidates: [] };
   }
-  const identityCandidates = entries.map((entry) => buildIdentityCandidate(entry));
-  const diagnosis = diagnoseAgentIdentity(selector, identityCandidates);
+  const diagnosis = diagnoseAgentIdentity(selector, directory.identityCandidates);
   if (diagnosis.kind === "resolved") {
     const match = candidates.find((candidate) => candidate.agentId === diagnosis.match.agentId) ?? null;
     return {
       kind: match ? "resolved" : "unresolved",
-      candidate: match,
+      candidate: match ? withMinimalLabel(match, directory) : null,
       candidates: []
     };
   }
@@ -108782,11 +108915,15 @@ async function resolveScoutAgentForMcp(input) {
     if (preferredAmbiguousCandidate) {
       return {
         kind: "resolved",
-        candidate: preferredAmbiguousCandidate,
+        candidate: withMinimalLabel(preferredAmbiguousCandidate, directory),
         candidates: []
       };
     }
-    return { kind: "ambiguous", candidate: null, candidates: ambiguous };
+    return {
+      kind: "ambiguous",
+      candidate: null,
+      candidates: withMinimalLabels(ambiguous, directory)
+    };
   }
   return { kind: "unresolved", candidate: null, candidates: [] };
 }
@@ -109019,6 +109156,15 @@ function createScoutMcpServer(options) {
     name: "openscout",
     version: SCOUT_APP_VERSION
   });
+  const toolFilter = options.toolFilter;
+  if (toolFilter) {
+    const registerTool = server.registerTool.bind(server);
+    server.registerTool = (name2, ...rest) => {
+      if (!toolFilter(name2))
+        return;
+      return registerTool(name2, ...rest);
+    };
+  }
   const aliasBrokerRequest = async (path, init) => {
     const response = await fetch(new URL(path, deps.resolveBrokerUrl()), {
       ...init,
@@ -109929,44 +110075,42 @@ function createScoutMcpServer(options) {
       } catch {}
     } else if (resolvedReplyMode === "notify" && replyNotificationsEnabled && structuredContent.ids.flightId) {
       const flight = await deps.getFlight(deps.resolveBrokerUrl(), structuredContent.ids.flightId).catch(() => null);
-      if (flight) {
-        const followArtifacts = buildScoutFollowArtifacts({
-          flight,
+      const followArtifacts = buildScoutFollowArtifacts({
+        flight,
+        conversationId: structuredContent.ids.conversationId ?? null,
+        workItem: null,
+        targetAgentId: structuredContent.ids.targetAgentId ?? flight?.targetAgentId ?? null
+      }, env);
+      scheduleScoutReplyNotification({
+        server,
+        deps,
+        brokerUrl: deps.resolveBrokerUrl(),
+        flight: flight ?? { id: structuredContent.ids.flightId },
+        context: {
+          currentDirectory: resolvedCurrentDirectory,
+          senderId: resolvedSenderId,
+          targetAgentId: structuredContent.ids.targetAgentId ?? flight?.targetAgentId ?? null,
+          targetLabel: targetTo ?? targetProjectPath ?? null,
           conversationId: structuredContent.ids.conversationId ?? null,
+          messageId: structuredContent.ids.messageId ?? null,
+          bindingRef: structuredContent.ids.bindingRef ? `ref:${structuredContent.ids.bindingRef}` : null,
+          flightId: structuredContent.ids.flightId,
           workItem: null,
-          targetAgentId: structuredContent.ids.targetAgentId ?? flight.targetAgentId ?? null
-        }, env);
-        scheduleScoutReplyNotification({
-          server,
-          deps,
-          brokerUrl: deps.resolveBrokerUrl(),
-          flight,
-          context: {
-            currentDirectory: resolvedCurrentDirectory,
-            senderId: resolvedSenderId,
-            targetAgentId: structuredContent.ids.targetAgentId ?? flight.targetAgentId ?? null,
-            targetLabel: targetTo ?? targetProjectPath ?? null,
-            conversationId: structuredContent.ids.conversationId ?? null,
-            messageId: structuredContent.ids.messageId ?? null,
-            bindingRef: structuredContent.ids.bindingRef ? `ref:${structuredContent.ids.bindingRef}` : null,
-            flightId: flight.id,
-            workItem: null,
-            workId: structuredContent.ids.workId ?? null,
-            workUrl: null,
-            ids: followArtifacts.ids,
-            links: followArtifacts.links,
-            followUrl: followArtifacts.followUrl
-          }
-        });
-        structuredContent = {
-          ...structuredContent,
-          delivery: "mcp_notification",
-          notification: {
-            method: "notifications/scout/reply",
-            status: "scheduled"
-          }
-        };
-      }
+          workId: structuredContent.ids.workId ?? null,
+          workUrl: null,
+          ids: followArtifacts.ids,
+          links: followArtifacts.links,
+          followUrl: followArtifacts.followUrl
+        }
+      });
+      structuredContent = {
+        ...structuredContent,
+        delivery: "mcp_notification",
+        notification: {
+          method: "notifications/scout/reply",
+          status: "scheduled"
+        }
+      };
     }
     if (structuredContent.ok && !structuredContent.delivery) {
       structuredContent = {
@@ -110970,7 +111114,7 @@ async function runScoutMcpServer(options) {
   await server.connect(transport);
   await waitForStdioServerClosure({ server, transport });
 }
-var AGENT_STATE_VALUES, REGISTRATION_KIND_VALUES, RESOLVE_KIND_VALUES, MESSAGE_ROUTE_KIND_VALUES, MESSAGE_ROUTING_ERROR_VALUES, REPLY_MODE_VALUES, REPLY_DELIVERY_VALUES, LOCAL_AGENT_HARNESS_VALUES, TAIL_EVENT_KIND_VALUES, DEFAULT_ASK_ACK_TIMEOUT_SECONDS2 = 30, SCOUT_MCP_UI_META_KEY = "openscout/ui", scoutAgentNameInputSchema, scoutAgentToolIconMeta, scoutAgentAvatarMeta, targetLabelInputSchema, targetAgentIdInputSchema, targetSessionIdInputSchema, projectPathInputSchema, mentionAgentIdsInputSchema, attachmentsInputSchema, flightSchema, invocationLifecycleSchema, labelBriefFlightSchema, labelBriefWorkItemSchema, labelBriefSchema, labelFeedEventSchema, labelFeedSchema, trackedWorkItemSchema, workItemInputSchema, waitingOnSchema, progressSchema, workItemUpdateSchema, agentCandidateSchema, scoutReturnAddressSchema, scoutAgentCardLifecycleSchema, scoutAgentCardSchema, localAgentStatusSchema, whoAmISchema, brokerMessageSchema, messagesInboxResultSchema, messagesChannelResultSchema, brokerFeedRecordSchema, brokerFeedItemSchema, brokerFeedSchema, tailEventSchema, tailEventsResultSchema, searchResultSchema, resolveResultSchema, startSuggestionSchema, followIdsSchema, followLinksSchema, sendRoutingAdviceSchema, sendResultSchema, operatorSignalResultSchema, nonBlankToolStringSchema, replyContextSchema, currentReplyContextResultSchema, replyResultSchema, cardCreateResultSchema, agentStartResultSchema, currentSessionAttachResultSchema, askResultSchema, askReceiptSchema, invocationLookupResultSchema, workUpdateResultSchema;
+var AGENT_STATE_VALUES, REGISTRATION_KIND_VALUES, RESOLVE_KIND_VALUES, MESSAGE_ROUTE_KIND_VALUES, MESSAGE_ROUTING_ERROR_VALUES, REPLY_MODE_VALUES, REPLY_DELIVERY_VALUES, LOCAL_AGENT_HARNESS_VALUES, TAIL_EVENT_KIND_VALUES, DEFAULT_ASK_ACK_TIMEOUT_SECONDS2 = 30, SCOUT_MCP_UI_META_KEY = "openscout/ui", scoutAgentNameInputSchema, scoutAgentToolIconMeta, scoutAgentAvatarMeta, targetLabelInputSchema, targetAgentIdInputSchema, targetSessionIdInputSchema, projectPathInputSchema, mentionAgentIdsInputSchema, attachmentsInputSchema, flightSchema, invocationLifecycleSchema, labelBriefFlightSchema, labelBriefWorkItemSchema, labelBriefSchema, labelFeedEventSchema, labelFeedSchema, trackedWorkItemSchema, workItemInputSchema, waitingOnSchema, progressSchema, workItemUpdateSchema, agentCandidateSchema, scoutReturnAddressSchema, scoutAgentCardLifecycleSchema, scoutAgentCardSchema, localAgentStatusSchema, whoAmISchema, brokerMessageSchema, messagesInboxResultSchema, messagesChannelResultSchema, brokerFeedRecordSchema, brokerFeedItemSchema, brokerFeedSchema, tailEventSchema, tailEventsResultSchema, searchResultSchema, resolveResultSchema, startSuggestionSchema, followIdsSchema, followLinksSchema, sendRoutingAdviceSchema, sendResultSchema, operatorSignalResultSchema, nonBlankToolStringSchema, replyContextSchema, currentReplyContextResultSchema, replyResultSchema, cardCreateResultSchema, agentStartResultSchema, currentSessionAttachResultSchema, askResultSchema, askReceiptSchema, invocationLookupResultSchema, workUpdateResultSchema, MAX_DECORATED_CANDIDATES = 50;
 var init_scout_mcp = __esm(() => {
   init_mcp();
   init_stdio2();
@@ -112731,7 +112875,7 @@ async function runMeshPing(target2) {
   try {
     const controller = new AbortController;
     const timeout = setTimeout(() => controller.abort(), 3000);
-    const response = await fetch(new URL("/v1/node", probeUrl), {
+    const response = await meshPeerFetch(probeUrl, "/v1/node", {
       signal: controller.signal,
       headers: { accept: "application/json" }
     });
@@ -112783,6 +112927,7 @@ async function loadMeshNodes() {
   };
 }
 var init_service7 = __esm(() => {
+  init_src3();
   init_system_probes();
   init_service3();
   init_trust_service();
@@ -113107,7 +113252,7 @@ function renderMeshNodes(input) {
 var init_mesh = () => {};
 
 // ../../apps/desktop/src/core/mesh/enroll-pending.ts
-import { existsSync as existsSync42, mkdirSync as mkdirSync12, readFileSync as readFileSync18, rmSync as rmSync6, writeFileSync as writeFileSync10 } from "fs";
+import { existsSync as existsSync42, mkdirSync as mkdirSync12, readFileSync as readFileSync19, rmSync as rmSync6, writeFileSync as writeFileSync10 } from "fs";
 import { dirname as dirname29, join as join51 } from "path";
 function pendingMeshEnrollmentPath(supportDirectory) {
   const dir = supportDirectory ?? resolveOpenScoutSupportPaths().supportDirectory;
@@ -113129,7 +113274,7 @@ function loadPendingMeshEnrollment(supportDirectory) {
   }
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync18(path, "utf8"));
+    parsed = JSON.parse(readFileSync19(path, "utf8"));
   } catch {
     throw new Error(`Corrupt pending mesh enrollment at ${path}; remove it and start over.`);
   }
@@ -113151,7 +113296,7 @@ var init_enroll_pending = __esm(() => {
 
 // ../../apps/desktop/src/cli/commands/mesh-trust.ts
 import { createInterface as createInterface3 } from "readline";
-import { readFileSync as readFileSync19 } from "fs";
+import { readFileSync as readFileSync20 } from "fs";
 function normalizeMeshKeyIdInput(value) {
   const trimmed = value.trim().toLowerCase();
   if (!KEY_ID_PATTERN.test(trimmed)) {
@@ -113497,9 +113642,9 @@ function parseMeshTrustInstallGrantArgs(args) {
 }
 function readCardSource(source) {
   if (source === "-") {
-    return readFileSync19(0, "utf8");
+    return readFileSync20(0, "utf8");
   }
-  return readFileSync19(source, "utf8");
+  return readFileSync20(source, "utf8");
 }
 function parseCardPayload(text3) {
   const trimmed = text3.trim();
@@ -113575,6 +113720,551 @@ var init_mesh_trust = __esm(() => {
   FINGERPRINT_PATTERN = /^osc1:[0-9a-z]{4}-[0-9a-z]{4}$/;
 });
 
+// ../../apps/desktop/src/core/mcp/mesh-bridge.ts
+function parseBridgeBoundEnvelope(data) {
+  if (typeof data !== "string")
+    return null;
+  try {
+    const parsed = JSON.parse(data);
+    if (parsed.v !== 1 || typeof parsed.id !== "string")
+      return null;
+    if (parsed.kind !== "mcp_request" && parsed.kind !== "mcp_cancel")
+      return null;
+    return {
+      v: 1,
+      kind: parsed.kind,
+      id: parsed.id,
+      agent: typeof parsed.agent === "string" ? parsed.agent : undefined,
+      payload: typeof parsed.payload === "string" ? parsed.payload : undefined
+    };
+  } catch {
+    return null;
+  }
+}
+
+class MeshRelayServerTransport {
+  onclose;
+  onerror;
+  onmessage;
+  emitEnvelope = () => {};
+  envelopeIdByRequestId = new Map;
+  bindEmitter(emit) {
+    this.emitEnvelope = emit;
+  }
+  async start() {}
+  deliver(envelope) {
+    if (envelope.kind === "mcp_cancel") {
+      for (const [requestId, envelopeId] of this.envelopeIdByRequestId) {
+        if (envelopeId === envelope.id) {
+          this.envelopeIdByRequestId.delete(requestId);
+        }
+      }
+      return;
+    }
+    if (!envelope.payload) {
+      this.emitEnvelope({ v: 1, kind: "mcp_error", id: envelope.id, status: 400, message: "empty payload" });
+      return;
+    }
+    let message;
+    try {
+      message = JSON.parse(envelope.payload);
+    } catch {
+      this.emitEnvelope({ v: 1, kind: "mcp_error", id: envelope.id, status: 400, message: "invalid JSON-RPC payload" });
+      return;
+    }
+    const record4 = message;
+    const isRequest2 = record4.method !== undefined && record4.id !== undefined;
+    if (isRequest2 && record4.id !== undefined) {
+      this.envelopeIdByRequestId.set(record4.id, envelope.id);
+    } else {
+      this.emitEnvelope({ v: 1, kind: "mcp_accepted", id: envelope.id });
+    }
+    try {
+      this.onmessage?.(message);
+    } catch (error48) {
+      if (isRequest2 && record4.id !== undefined) {
+        this.envelopeIdByRequestId.delete(record4.id);
+      }
+      this.emitEnvelope({
+        v: 1,
+        kind: "mcp_error",
+        id: envelope.id,
+        status: 500,
+        message: error48 instanceof Error ? error48.message : "handler failure"
+      });
+    }
+  }
+  async send(message) {
+    const record4 = message;
+    if (record4.id === undefined) {
+      this.emitEnvelope({
+        v: 1,
+        kind: "mcp_notify",
+        id: crypto.randomUUID(),
+        payload: JSON.stringify(message)
+      });
+      return;
+    }
+    const envelopeId = this.envelopeIdByRequestId.get(record4.id);
+    if (!envelopeId) {
+      if (record4.method !== undefined) {
+        this.onerror?.(new Error(`mesh bridge cannot deliver server-initiated request ${String(record4.method)}`));
+      }
+      return;
+    }
+    this.envelopeIdByRequestId.delete(record4.id);
+    this.emitEnvelope({
+      v: 1,
+      kind: "mcp_response",
+      id: envelopeId,
+      payload: JSON.stringify(message)
+    });
+  }
+  async close() {
+    this.envelopeIdByRequestId.clear();
+    this.onclose?.();
+  }
+}
+function readKeychainSecret(service3) {
+  const result = Bun.spawnSync(["security", "find-generic-password", "-s", service3, "-w"]);
+  if (result.exitCode !== 0)
+    return null;
+  const value = result.stdout.toString().trim();
+  return value || null;
+}
+function resolveBridgeTokenFromConfig(config2) {
+  if (config2.token?.trim())
+    return config2.token.trim();
+  if (config2.tokenKeychainService?.trim()) {
+    return readKeychainSecret(config2.tokenKeychainService.trim());
+  }
+  return null;
+}
+function resolveBridgeWebSocketUrl(relayUrl, token) {
+  const url2 = new URL(relayUrl);
+  if (url2.protocol === "https:")
+    url2.protocol = "wss:";
+  if (url2.protocol === "http:")
+    url2.protocol = "ws:";
+  if (!url2.pathname.endsWith("/bridge")) {
+    url2.pathname = `${url2.pathname.replace(/\/$/, "")}/bridge`;
+  }
+  if (!url2.searchParams.get("access_token")) {
+    url2.searchParams.set("access_token", token);
+  }
+  return url2.toString();
+}
+async function startScoutMeshMcpBridge(options) {
+  const log = options.log ?? (() => {});
+  const allowedTools = new Set(options.toolNames);
+  let socket = null;
+  let closed = false;
+  let reconnectTimer = null;
+  let attempt = 0;
+  const sendRaw = (envelope) => {
+    if (socket && socket.readyState === WebSocket.OPEN) {
+      socket.send(JSON.stringify(envelope));
+    } else {
+      log(`bridge: dropped ${envelope.kind} for ${envelope.id} (socket not open)`);
+    }
+  };
+  const instances = new Map;
+  const getOrCreateInstance = async (agent) => {
+    const existing = instances.get(agent);
+    if (existing)
+      return existing;
+    if (instances.size >= MAX_IDENTITY_INSTANCES) {
+      return null;
+    }
+    const transport = new MeshRelayServerTransport;
+    transport.bindEmitter((envelope) => {
+      sendRaw(envelope.kind === "mcp_notify" ? { ...envelope, agent } : envelope);
+    });
+    const server = createScoutMcpServer({
+      defaultCurrentDirectory: options.currentDirectory,
+      env: {
+        ...options.env ?? process.env,
+        OPENSCOUT_MCP_ENABLE_NOTIFICATIONS: "1"
+      },
+      dependencies: {
+        resolveSenderId: async () => agent
+      },
+      toolFilter: (name2) => allowedTools.has(name2)
+    });
+    await server.connect(transport);
+    const instance2 = { server, transport };
+    instances.set(agent, instance2);
+    log(`bridge: serving identity ${agent} (${instances.size} active)`);
+    return instance2;
+  };
+  const wsUrl = resolveBridgeWebSocketUrl(options.relayUrl, options.token);
+  const scheduleReconnect = () => {
+    const delay7 = Math.min(RECONNECT_MAX_DELAY_MS, 1000 * 2 ** attempt) + Math.floor(Math.random() * 500);
+    attempt += 1;
+    reconnectTimer = setTimeout(connect, delay7);
+    return delay7;
+  };
+  const connect = () => {
+    if (closed)
+      return;
+    const ws = new WebSocket(wsUrl, {
+      headers: { authorization: `Bearer ${options.token}` }
+    });
+    socket = ws;
+    let lastFrameAt = Date.now();
+    let openedAt = Date.now();
+    let abandoned = false;
+    let pingCount = 0;
+    const forceReconnect = (reason) => {
+      if (closed || abandoned)
+        return;
+      abandoned = true;
+      clearInterval(heartbeat);
+      if (socket === ws)
+        socket = null;
+      try {
+        ws.close(4002, "bridge reconnect");
+      } catch {}
+      const delay7 = scheduleReconnect();
+      log(`bridge: ${reason}; reconnecting in ${Math.round(delay7 / 1000)}s`);
+    };
+    const heartbeat = setInterval(() => {
+      if (closed || abandoned || socket !== ws) {
+        clearInterval(heartbeat);
+        return;
+      }
+      if (Date.now() - lastFrameAt > BRIDGE_STALE_MS) {
+        forceReconnect(`relay silent for ${Math.round(BRIDGE_STALE_MS / 1000)}s`);
+        return;
+      }
+      if (ws.readyState !== WebSocket.OPEN)
+        return;
+      ws.send('{"v":1,"kind":"bridge_ping","id":"hb"}');
+      pingCount += 1;
+      if (pingCount % 3 === 0 && Date.now() - openedAt > 45000) {
+        fetch(`${new URL(options.relayUrl).origin}/healthz`, {
+          headers: { authorization: `Bearer ${options.token}` }
+        }).then(async (res) => {
+          if (!res.ok || closed || abandoned || socket !== ws)
+            return;
+          const health = await res.json();
+          if (health.bridgeConnected === false) {
+            forceReconnect("relay no longer routes to this bridge socket");
+          }
+        }).catch(() => {});
+      }
+    }, BRIDGE_PING_INTERVAL_MS);
+    ws.addEventListener("open", () => {
+      attempt = 0;
+      lastFrameAt = Date.now();
+      openedAt = Date.now();
+      log(`bridge: connected to relay (tools: ${options.toolNames.join(", ")}; fallback identity ${options.senderId})`);
+    });
+    ws.addEventListener("message", (event) => {
+      lastFrameAt = Date.now();
+      const envelope = parseBridgeBoundEnvelope(typeof event.data === "string" ? event.data : "");
+      if (!envelope)
+        return;
+      const agent = envelope.agent?.trim() || options.senderId;
+      getOrCreateInstance(agent).then((instance2) => {
+        if (!instance2) {
+          if (envelope.kind === "mcp_request") {
+            sendRaw({
+              v: 1,
+              kind: "mcp_error",
+              id: envelope.id,
+              status: 503,
+              message: "bridge identity capacity reached"
+            });
+          }
+          return;
+        }
+        instance2.transport.deliver(envelope);
+      }).catch((error48) => {
+        if (envelope.kind === "mcp_request") {
+          sendRaw({
+            v: 1,
+            kind: "mcp_error",
+            id: envelope.id,
+            status: 500,
+            message: error48 instanceof Error ? error48.message : "instance failure"
+          });
+        }
+      });
+    });
+    ws.addEventListener("close", (event) => {
+      clearInterval(heartbeat);
+      if (abandoned || socket !== ws)
+        return;
+      socket = null;
+      if (closed)
+        return;
+      const delay7 = scheduleReconnect();
+      log(`bridge: relay connection closed (${event.code}); reconnecting in ${Math.round(delay7 / 1000)}s`);
+    });
+    ws.addEventListener("error", () => {});
+  };
+  connect();
+  return {
+    close: async () => {
+      closed = true;
+      if (reconnectTimer)
+        clearTimeout(reconnectTimer);
+      socket?.close(1000, "bridge shutting down");
+      socket = null;
+      for (const [, instance2] of instances) {
+        await instance2.server.close().catch(() => {});
+      }
+      instances.clear();
+    }
+  };
+}
+var SCOUT_MCP_CORE_TOOLS, RECONNECT_MAX_DELAY_MS = 30000, MAX_IDENTITY_INSTANCES = 16, BRIDGE_PING_INTERVAL_MS = 20000, BRIDGE_STALE_MS = 60000;
+var init_mesh_bridge = __esm(() => {
+  init_scout_mcp();
+  SCOUT_MCP_CORE_TOOLS = [
+    "whoami",
+    "ask",
+    "messages_send",
+    "messages_reply",
+    "messages_inbox",
+    "messages_channel",
+    "broker_feed",
+    "tail_events",
+    "work_update",
+    "notify_operator",
+    "consult_operator",
+    "current_reply_context",
+    "invocations_get",
+    "invocations_wait",
+    "labels_brief",
+    "labels_feed",
+    "agents_search",
+    "agents_resolve"
+  ];
+});
+
+// ../../apps/desktop/src/cli/commands/mesh-bridge.ts
+var exports_mesh_bridge = {};
+__export(exports_mesh_bridge, {
+  runMeshBridgeCommand: () => runMeshBridgeCommand
+});
+import { existsSync as existsSync43, mkdirSync as mkdirSync13, readFileSync as readFileSync21, unlinkSync, writeFileSync as writeFileSync11, chmodSync as chmodSync2 } from "fs";
+import { homedir as homedir33 } from "os";
+import { join as join52 } from "path";
+function supportDirectory() {
+  return join52(homedir33(), "Library", "Application Support", "OpenScout");
+}
+function defaultConfigPath() {
+  return join52(supportDirectory(), "mcp-bridge.json");
+}
+function launchAgentPlistPath2() {
+  return join52(homedir33(), "Library", "LaunchAgents", `${LAUNCH_AGENT_LABEL}.plist`);
+}
+function readFlag(args, name2) {
+  const index2 = args.indexOf(name2);
+  if (index2 === -1)
+    return;
+  return args[index2 + 1]?.trim() || undefined;
+}
+function loadConfigFile(path) {
+  if (!existsSync43(path))
+    return null;
+  return JSON.parse(readFileSync21(path, "utf8"));
+}
+function resolveRunOptions(context, args) {
+  const configPath = readFlag(args, "--config") ?? defaultConfigPath();
+  const fromFile = loadConfigFile(configPath) ?? { relayUrl: "https://mcp.oscout.net" };
+  const config2 = {
+    relayUrl: readFlag(args, "--relay") ?? fromFile.relayUrl ?? "https://mcp.oscout.net",
+    token: readFlag(args, "--token") ?? fromFile.token,
+    tokenKeychainService: readFlag(args, "--token-keychain") ?? fromFile.tokenKeychainService ?? (readFlag(args, "--token") || fromFile.token ? undefined : "OPENSCOUT_MCP_BRIDGE_TOKEN"),
+    sender: readFlag(args, "--sender") ?? fromFile.sender ?? "grokbot.spike",
+    node: readFlag(args, "--node") ?? fromFile.node ?? "default",
+    tools: (() => {
+      const flag = readFlag(args, "--tools");
+      if (!flag)
+        return fromFile.tools ?? "core";
+      return flag === "core" ? "core" : flag.split(",").map((name2) => name2.trim()).filter(Boolean);
+    })(),
+    dir: readFlag(args, "--dir") ?? fromFile.dir
+  };
+  if (!config2.relayUrl) {
+    return { error: "Missing relay URL: pass --relay or set relayUrl in the config file." };
+  }
+  return { config: config2, configPath };
+}
+async function runBridge(context, args) {
+  const resolved = resolveRunOptions(context, args);
+  if ("error" in resolved) {
+    context.stderr(resolved.error);
+    process.exitCode = 1;
+    return;
+  }
+  const { config: config2 } = resolved;
+  const token = resolveBridgeTokenFromConfig(config2) ?? context.env.OPENSCOUT_MCP_RELAY_TOKEN?.trim() ?? context.env.OPENSCOUT_MESH_RENDEZVOUS_TOKEN?.trim();
+  if (!token) {
+    context.stderr("No relay token found (flag, config, keychain, or env). See: scout mesh bridge --help");
+    process.exitCode = 1;
+    return;
+  }
+  const relayUrl = new URL(config2.relayUrl);
+  if (config2.node && !relayUrl.searchParams.get("node")) {
+    relayUrl.searchParams.set("node", config2.node);
+  }
+  const toolNames = config2.tools === "core" || !config2.tools ? [...SCOUT_MCP_CORE_TOOLS] : config2.tools;
+  const handle = await startScoutMeshMcpBridge({
+    relayUrl: relayUrl.toString(),
+    token,
+    senderId: config2.sender ?? "grokbot.spike",
+    currentDirectory: config2.dir ?? defaultScoutContextDirectory(context),
+    toolNames,
+    env: context.env,
+    log: (line) => context.stderr(line)
+  });
+  context.stderr(`bridge: node=${config2.node} relay=${config2.relayUrl}`);
+  context.stderr("bridge: running \u2014 Ctrl-C to stop");
+  await new Promise((resolve31) => {
+    const stop2 = () => {
+      const force = setTimeout(() => process.exit(0), 5000);
+      handle.close().finally(() => {
+        clearTimeout(force);
+        resolve31();
+      });
+    };
+    process.once("SIGINT", stop2);
+    process.once("SIGTERM", stop2);
+  });
+  process.exit(process.exitCode ?? 0);
+}
+function launchctl(context, args) {
+  const result = Bun.spawnSync(["launchctl", ...args]);
+  const output = `${result.stdout.toString()}${result.stderr.toString()}`.trim();
+  return { ok: result.exitCode === 0, output };
+}
+async function installBridge(context, args) {
+  const resolved = resolveRunOptions(context, args);
+  if ("error" in resolved) {
+    context.stderr(resolved.error);
+    process.exitCode = 1;
+    return;
+  }
+  const { config: config2, configPath } = resolved;
+  if (!resolveBridgeTokenFromConfig(config2)) {
+    context.stderr(`No token reachable at install time (keychain service: ${config2.tokenKeychainService ?? "none"}). ` + "Add it first: security add-generic-password -a openscout -s OPENSCOUT_MCP_BRIDGE_TOKEN -w <token>");
+    process.exitCode = 1;
+    return;
+  }
+  mkdirSync13(supportDirectory(), { recursive: true });
+  writeFileSync11(configPath, `${JSON.stringify(config2, null, 2)}
+`);
+  chmodSync2(configPath, 384);
+  const logDirectory = join52(supportDirectory(), "logs");
+  mkdirSync13(logDirectory, { recursive: true });
+  const logPath = join52(logDirectory, "mcp-bridge.log");
+  const entry = Bun.main;
+  const plist = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key><string>${LAUNCH_AGENT_LABEL}</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>${process.execPath}</string>
+    <string>${entry}</string>
+    <string>mesh</string>
+    <string>bridge</string>
+    <string>--config</string>
+    <string>${configPath}</string>
+  </array>
+  <key>RunAtLoad</key><true/>
+  <key>KeepAlive</key><true/>
+  <key>StandardOutPath</key><string>${logPath}</string>
+  <key>StandardErrorPath</key><string>${logPath}</string>
+</dict>
+</plist>
+`;
+  writeFileSync11(launchAgentPlistPath2(), plist);
+  const domain2 = `gui/${process.getuid?.() ?? 501}`;
+  launchctl(context, ["bootout", `${domain2}/${LAUNCH_AGENT_LABEL}`]);
+  const bootstrap = launchctl(context, ["bootstrap", domain2, launchAgentPlistPath2()]);
+  if (!bootstrap.ok) {
+    context.stderr(`launchctl bootstrap failed: ${bootstrap.output}`);
+    process.exitCode = 1;
+    return;
+  }
+  context.stdout(`Installed ${LAUNCH_AGENT_LABEL}`);
+  context.stdout(`  config: ${configPath}`);
+  context.stdout(`  logs:   ${logPath}`);
+  context.stdout(`  runner: ${process.execPath} ${entry}`);
+}
+async function uninstallBridge(context) {
+  const domain2 = `gui/${process.getuid?.() ?? 501}`;
+  launchctl(context, ["bootout", `${domain2}/${LAUNCH_AGENT_LABEL}`]);
+  if (existsSync43(launchAgentPlistPath2())) {
+    unlinkSync(launchAgentPlistPath2());
+  }
+  context.stdout(`Removed ${LAUNCH_AGENT_LABEL} (config file kept).`);
+}
+async function bridgeStatus(context) {
+  const domain2 = `gui/${process.getuid?.() ?? 501}`;
+  const result = launchctl(context, ["print", `${domain2}/${LAUNCH_AGENT_LABEL}`]);
+  if (!result.ok) {
+    context.stdout("mcp-bridge service: not installed");
+    return;
+  }
+  const state = result.output.match(/state = (.+)/)?.[1] ?? "unknown";
+  const pid = result.output.match(/pid = (\d+)/)?.[1];
+  context.stdout(`mcp-bridge service: ${state}${pid ? ` (pid ${pid})` : ""}`);
+  context.stdout(`  logs: ${join52(supportDirectory(), "logs", "mcp-bridge.log")}`);
+}
+async function runMeshBridgeCommand(context, args) {
+  const subcommand = args[0];
+  if (subcommand === "--help" || subcommand === "-h" || subcommand === "help") {
+    context.stdout(MESH_BRIDGE_HELP);
+    return;
+  }
+  if (subcommand === "install") {
+    return installBridge(context, args.slice(1));
+  }
+  if (subcommand === "uninstall") {
+    return uninstallBridge(context);
+  }
+  if (subcommand === "status") {
+    return bridgeStatus(context);
+  }
+  return runBridge(context, args);
+}
+var MESH_BRIDGE_HELP = `scout mesh bridge \u2014 Hold the outbound MCP relay connection for this node
+
+Serves the Scout MCP tool surface to remote MCP clients via a mesh-front-door
+relay. Caller identity comes from the relay's agent tokens; each identity gets
+its own pinned server instance. Spec: docs/eng/sco-095-remote-mcp-gateway.md.
+
+Usage:
+  scout mesh bridge [--config <path>] [options]   Run in the foreground
+  scout mesh bridge install [options]             Install as a LaunchAgent
+  scout mesh bridge uninstall                     Remove the LaunchAgent
+  scout mesh bridge status                        Show service state
+
+Options (run + install):
+  --relay <url>       MCP relay base URL (default: https://mcp.oscout.net)
+  --token <bearer>    Relay infra token; prefer --token-keychain
+  --token-keychain <service>
+                      Read the token from the macOS keychain (default:
+                      OPENSCOUT_MCP_BRIDGE_TOKEN)
+  --sender <id>       Fallback identity for tokenless envelopes
+                      (default: grokbot.spike)
+  --node <id>         Node name in the relay (default: default)
+  --tools <csv>       "core" (default) or explicit tool list
+  --dir <path>        currentDirectory for tool resolution
+  --config <path>     JSON config file; flags override its values
+`, LAUNCH_AGENT_LABEL = "app.openscout.mcp-bridge";
+var init_mesh_bridge2 = __esm(() => {
+  init_context();
+  init_mesh_bridge();
+});
+
 // ../../apps/desktop/src/cli/commands/mesh.ts
 var exports_mesh = {};
 __export(exports_mesh, {
@@ -113655,6 +114345,11 @@ async function runMeshCommand(context, args) {
       });
       return;
     }
+    case "bridge": {
+      const { runMeshBridgeCommand: runMeshBridgeCommand2 } = await Promise.resolve().then(() => (init_mesh_bridge2(), exports_mesh_bridge));
+      await runMeshBridgeCommand2(context, args.slice(1));
+      return;
+    }
     case "peers":
       await runMeshPeersCommand(context, args.slice(1));
       return;
@@ -113699,6 +114394,9 @@ Presence (docs/proposals/mesh-trust-cone.md \xA711.5):
   scout mesh bind mesh    Same as announce
   scout mesh bind local   Withdraw mesh announcement (TLS/mDNS stand down)
 
+MCP gateway (docs/eng/sco-095-remote-mcp-gateway.md):
+  scout mesh bridge       Hold the outbound MCP relay connection (spike harness)
+
 Trust cone (docs/proposals/mesh-trust-cone.md):
   scout mesh peers        List trusted peers
   scout mesh grant        Adjust a peer's tier
@@ -113714,11 +114412,11 @@ var init_mesh2 = __esm(() => {
 });
 
 // ../../apps/desktop/src/core/pairing/runtime/config.ts
-import { existsSync as existsSync43, mkdirSync as mkdirSync13, readFileSync as readFileSync20, writeFileSync as writeFileSync11 } from "fs";
-import { homedir as homedir33 } from "os";
+import { existsSync as existsSync44, mkdirSync as mkdirSync14, readFileSync as readFileSync22, writeFileSync as writeFileSync12 } from "fs";
+import { homedir as homedir34 } from "os";
 import path from "path";
 function pairingPaths() {
-  const rootDir = path.join(homedir33(), ".scout/pairing");
+  const rootDir = path.join(homedir34(), ".scout/pairing");
   return {
     rootDir,
     configPath: path.join(rootDir, "config.json"),
@@ -113731,11 +114429,11 @@ function pairingPaths() {
 }
 function loadPairingConfig() {
   const { configPath } = pairingPaths();
-  if (!existsSync43(configPath)) {
+  if (!existsSync44(configPath)) {
     return {};
   }
   try {
-    const payload = JSON.parse(readFileSync20(configPath, "utf8"));
+    const payload = JSON.parse(readFileSync22(configPath, "utf8"));
     return typeof payload === "object" && payload ? payload : {};
   } catch {
     return {};
@@ -115835,17 +116533,17 @@ var init_noise = __esm(() => {
 });
 
 // ../../apps/desktop/src/core/pairing/runtime/security/identity.ts
-import { existsSync as existsSync44, mkdirSync as mkdirSync14, readFileSync as readFileSync21, writeFileSync as writeFileSync12 } from "fs";
-import { join as join52 } from "path";
-import { homedir as homedir34 } from "os";
+import { existsSync as existsSync45, mkdirSync as mkdirSync15, readFileSync as readFileSync23, writeFileSync as writeFileSync13 } from "fs";
+import { join as join53 } from "path";
+import { homedir as homedir35 } from "os";
 function loadOrCreateIdentity() {
-  if (existsSync44(IDENTITY_FILE)) {
+  if (existsSync45(IDENTITY_FILE)) {
     return loadIdentity();
   }
   return createAndSaveIdentity();
 }
 function loadIdentity() {
-  const data = JSON.parse(readFileSync21(IDENTITY_FILE, "utf8"));
+  const data = JSON.parse(readFileSync23(IDENTITY_FILE, "utf8"));
   return {
     publicKey: hexToBytes2(data.publicKey),
     privateKey: hexToBytes2(data.privateKey)
@@ -115853,26 +116551,26 @@ function loadIdentity() {
 }
 function createAndSaveIdentity() {
   const keyPair = generateKeyPair();
-  mkdirSync14(PAIRING_DIR, { recursive: true });
+  mkdirSync15(PAIRING_DIR, { recursive: true });
   const data = {
     publicKey: bytesToHex2(keyPair.publicKey),
     privateKey: bytesToHex2(keyPair.privateKey),
     createdAt: new Date().toISOString()
   };
-  writeFileSync12(IDENTITY_FILE, JSON.stringify(data, null, 2), { mode: 384 });
+  writeFileSync13(IDENTITY_FILE, JSON.stringify(data, null, 2), { mode: 384 });
   return keyPair;
 }
 function loadTrustedPeers() {
-  if (!existsSync44(TRUSTED_PEERS_FILE))
+  if (!existsSync45(TRUSTED_PEERS_FILE))
     return new Map;
-  const data = JSON.parse(readFileSync21(TRUSTED_PEERS_FILE, "utf8"));
+  const data = JSON.parse(readFileSync23(TRUSTED_PEERS_FILE, "utf8"));
   return new Map(data.map((p) => [p.publicKey, p]));
 }
 function saveTrustedPeer(peer) {
   const peers = loadTrustedPeers();
   peers.set(peer.publicKey, peer);
-  mkdirSync14(PAIRING_DIR, { recursive: true });
-  writeFileSync12(TRUSTED_PEERS_FILE, JSON.stringify([...peers.values()], null, 2), { mode: 384 });
+  mkdirSync15(PAIRING_DIR, { recursive: true });
+  writeFileSync13(TRUSTED_PEERS_FILE, JSON.stringify([...peers.values()], null, 2), { mode: 384 });
 }
 function isTrustedPeer(publicKeyHex) {
   return loadTrustedPeers().has(publicKeyHex);
@@ -115914,9 +116612,9 @@ function hexToBytes2(hex4) {
 var PAIRING_DIR, IDENTITY_FILE, TRUSTED_PEERS_FILE, QR_VERSION = 1, QR_EXPIRY_MS;
 var init_identity = __esm(() => {
   init_noise();
-  PAIRING_DIR = join52(homedir34(), ".scout/pairing");
-  IDENTITY_FILE = join52(PAIRING_DIR, "identity.json");
-  TRUSTED_PEERS_FILE = join52(PAIRING_DIR, "trusted-peers.json");
+  PAIRING_DIR = join53(homedir35(), ".scout/pairing");
+  IDENTITY_FILE = join53(PAIRING_DIR, "identity.json");
+  TRUSTED_PEERS_FILE = join53(PAIRING_DIR, "trusted-peers.json");
   QR_EXPIRY_MS = 5 * 60 * 1000;
 });
 
@@ -116077,14 +116775,14 @@ var init_security2 = __esm(() => {
 });
 
 // ../../apps/desktop/src/core/pairing/runtime/runtime-state.ts
-import { existsSync as existsSync45, mkdirSync as mkdirSync15, readFileSync as readFileSync22, renameSync as renameSync5, unlinkSync, writeFileSync as writeFileSync13 } from "fs";
+import { existsSync as existsSync46, mkdirSync as mkdirSync16, readFileSync as readFileSync24, renameSync as renameSync5, unlinkSync as unlinkSync2, writeFileSync as writeFileSync14 } from "fs";
 function readPairingRuntimeSnapshot() {
   const { runtimeStatePath } = pairingPaths();
-  if (!existsSync45(runtimeStatePath)) {
+  if (!existsSync46(runtimeStatePath)) {
     return null;
   }
   try {
-    const parsed = JSON.parse(readFileSync22(runtimeStatePath, "utf8"));
+    const parsed = JSON.parse(readFileSync24(runtimeStatePath, "utf8"));
     return parsed?.version === 1 ? { ...parsed, lanDiscoveryAdvertised: parsed.lanDiscoveryAdvertised === true } : null;
   } catch {
     return null;
@@ -116107,9 +116805,9 @@ var init_runtime_state = __esm(() => {
 });
 
 // ../../apps/desktop/src/core/pairing/runtime/bridge/log.ts
-import { appendFileSync, mkdirSync as mkdirSync16 } from "fs";
-import { join as join53 } from "path";
-import { homedir as homedir35 } from "os";
+import { appendFileSync, mkdirSync as mkdirSync17 } from "fs";
+import { join as join54 } from "path";
+import { homedir as homedir36 } from "os";
 function write(level, category, message, data) {
   const ts = new Date().toISOString().slice(11, 23);
   const lvl = level.toUpperCase().padEnd(5);
@@ -116125,9 +116823,9 @@ function write(level, category, message, data) {
 }
 var LOG_DIR, LOG_FILE, log;
 var init_log = __esm(() => {
-  LOG_DIR = join53(homedir35(), ".scout/pairing");
-  LOG_FILE = join53(LOG_DIR, "bridge.log");
-  mkdirSync16(LOG_DIR, { recursive: true });
+  LOG_DIR = join54(homedir36(), ".scout/pairing");
+  LOG_FILE = join54(LOG_DIR, "bridge.log");
+  mkdirSync17(LOG_DIR, { recursive: true });
   log = {
     debug: (cat, msg, data) => write("debug", cat, msg, data),
     info: (cat, msg, data) => write("info", cat, msg, data),
@@ -116202,15 +116900,15 @@ var init_bridge = __esm(() => {
 });
 
 // ../../apps/desktop/src/core/pairing/runtime/bridge/config.ts
-import { existsSync as existsSync46, readFileSync as readFileSync23 } from "fs";
-import { join as join54 } from "path";
-import { homedir as homedir36 } from "os";
-function loadConfigFile() {
-  if (!existsSync46(CONFIG_FILE)) {
+import { existsSync as existsSync47, readFileSync as readFileSync25 } from "fs";
+import { join as join55 } from "path";
+import { homedir as homedir37 } from "os";
+function loadConfigFile2() {
+  if (!existsSync47(CONFIG_FILE)) {
     return {};
   }
   try {
-    const raw = readFileSync23(CONFIG_FILE, "utf8");
+    const raw = readFileSync25(CONFIG_FILE, "utf8");
     const parsed = JSON.parse(raw);
     return parsed;
   } catch (err) {
@@ -116269,7 +116967,7 @@ function isValidPort3(value) {
   return typeof value === "number" && Number.isInteger(value) && value > 0 && value < 65536;
 }
 function resolveConfig() {
-  const file2 = loadConfigFile();
+  const file2 = loadConfigFile2();
   const cli = parseCLIFlags();
   return resolveConfigLayers(file2, cli);
 }
@@ -116280,8 +116978,8 @@ var init_config3 = __esm(() => {
     port: 43130,
     secure: true
   };
-  CONFIG_DIR = join54(homedir36(), ".scout/pairing");
-  CONFIG_FILE = join54(CONFIG_DIR, "config.json");
+  CONFIG_DIR = join55(homedir37(), ".scout/pairing");
+  CONFIG_FILE = join55(CONFIG_DIR, "config.json");
 });
 
 // ../../apps/desktop/src/core/pairing/runtime/bridge/web-handoff.ts
@@ -116349,7 +117047,7 @@ var init_web_handoff = __esm(() => {
 
 // ../../apps/desktop/src/core/pairing/runtime/bridge/artifact-presentation.ts
 import { randomBytes as randomBytes8 } from "crypto";
-import { realpathSync as realpathSync3, statSync as statSync9 } from "fs";
+import { realpathSync as realpathSync3, statSync as statSync10 } from "fs";
 import { basename as basename18, dirname as dirname30, isAbsolute as isAbsolute5, relative as relative5, resolve as resolve31, sep as sep3 } from "path";
 function createArtifactPresentation(input, options) {
   const now = options.now ?? Date.now();
@@ -116362,14 +117060,14 @@ function createArtifactPresentation(input, options) {
   if (!isPathInside2(allowedRoot, sourcePath)) {
     throw new Error("sourcePath is outside the session workspace");
   }
-  const source = statSync9(sourcePath);
+  const source = statSync10(sourcePath);
   const rootPath = source.isDirectory() ? sourcePath : dirname30(sourcePath);
   const entryPath = normalizeRelativeEntry(source.isDirectory() ? input.entryPath?.trim() || "index.html" : basename18(sourcePath));
   const entryTarget = requiredRealPath(resolve31(rootPath, entryPath), "entryPath");
   if (!isPathInside2(rootPath, entryTarget)) {
     throw new Error("entryPath leaves the presentation root");
   }
-  if (!statSync9(entryTarget).isFile()) {
+  if (!statSync10(entryTarget).isFile()) {
     throw new Error("entryPath must name a file");
   }
   const id = `present-${randomBytes8(24).toString("base64url")}`;
@@ -116413,14 +117111,14 @@ function serveArtifactPresentation(req, url2, now = Date.now()) {
   if (!isPathInside2(grant.rootPath, target2)) {
     return presentationResponse("Forbidden", 403);
   }
-  const targetStat = statSync9(target2);
+  const targetStat = statSync10(target2);
   if (targetStat.isDirectory()) {
     try {
       target2 = requiredRealPath(resolve31(target2, "index.html"), "artifact index");
     } catch {
       return presentationResponse("Not found", 404);
     }
-    if (!isPathInside2(grant.rootPath, target2) || !statSync9(target2).isFile()) {
+    if (!isPathInside2(grant.rootPath, target2) || !statSync10(target2).isFile()) {
       return presentationResponse("Not found", 404);
     }
   } else if (!targetStat.isFile()) {
@@ -116480,7 +117178,7 @@ function normalizeRelativeEntry(value) {
 }
 function requiredRealDirectory(path2, label) {
   const real3 = requiredRealPath(path2, label);
-  if (!statSync9(real3).isDirectory()) {
+  if (!statSync10(real3).isDirectory()) {
     throw new Error(`${label} must be a directory`);
   }
   return real3;
@@ -116538,10 +117236,10 @@ var init_artifact_presentation = __esm(() => {
 
 // ../../apps/desktop/src/core/pairing/runtime/bridge/fileserver.ts
 import { randomUUID as randomUUID6 } from "crypto";
-import { existsSync as existsSync47, mkdirSync as mkdirSync17, readFileSync as readFileSync24, realpathSync as realpathSync4, statSync as statSync10, unlinkSync as unlinkSync2, writeFileSync as writeFileSync14 } from "fs";
+import { existsSync as existsSync48, mkdirSync as mkdirSync18, readFileSync as readFileSync26, realpathSync as realpathSync4, statSync as statSync11, unlinkSync as unlinkSync3, writeFileSync as writeFileSync15 } from "fs";
 import { BlockList, isIP } from "net";
-import { isAbsolute as isAbsolute6, join as join55, relative as relative6, sep as sep4 } from "path";
-import { homedir as homedir37 } from "os";
+import { isAbsolute as isAbsolute6, join as join56, relative as relative6, sep as sep4 } from "path";
+import { homedir as homedir38 } from "os";
 function pairingFileServerOrigin(port, host = "127.0.0.1") {
   return `http://${host}:${port}`;
 }
@@ -116557,11 +117255,11 @@ function storePairingAttachmentBlob(input, options) {
   if (data.length > PAIRING_ATTACHMENT_MAX_BYTES) {
     throw new Error(`attachment exceeds ${PAIRING_ATTACHMENT_MAX_BYTES} bytes`);
   }
-  mkdirSync17(PAIRING_ATTACHMENT_ROOT, { recursive: true, mode: 448 });
+  mkdirSync18(PAIRING_ATTACHMENT_ROOT, { recursive: true, mode: 448 });
   purgeExpiredPairingAttachments(options.now);
   const id = `att-${randomUUID6()}`;
-  const path2 = join55(PAIRING_ATTACHMENT_ROOT, id);
-  writeFileSync14(path2, data, { mode: 384 });
+  const path2 = join56(PAIRING_ATTACHMENT_ROOT, id);
+  writeFileSync15(path2, data, { mode: 384 });
   const now = options.now ?? Date.now();
   const entry = {
     id,
@@ -116590,7 +117288,7 @@ function readPairingAttachmentBlob(id, now = Date.now()) {
   }
   let data;
   try {
-    data = readFileSync24(entry.path);
+    data = readFileSync26(entry.path);
   } catch {
     forgetPairingAttachment(entry.id);
     return null;
@@ -116609,25 +117307,25 @@ function resolvePairingAttachment(id, now) {
   }
   const known = attachmentBlobs.get(id);
   if (known) {
-    if (known.expiresAt <= now || !existsSync47(known.path)) {
+    if (known.expiresAt <= now || !existsSync48(known.path)) {
       forgetPairingAttachment(id);
       return null;
     }
     return known;
   }
   const rehydrated = readAttachmentSidecar(id);
-  if (!rehydrated || rehydrated.expiresAt <= now || !existsSync47(rehydrated.path)) {
+  if (!rehydrated || rehydrated.expiresAt <= now || !existsSync48(rehydrated.path)) {
     return null;
   }
   attachmentBlobs.set(id, rehydrated);
   return rehydrated;
 }
 function attachmentSidecarPath(id) {
-  return join55(PAIRING_ATTACHMENT_ROOT, `${id}.json`);
+  return join56(PAIRING_ATTACHMENT_ROOT, `${id}.json`);
 }
 function writeAttachmentSidecar(entry) {
   try {
-    writeFileSync14(attachmentSidecarPath(entry.id), JSON.stringify({
+    writeFileSync15(attachmentSidecarPath(entry.id), JSON.stringify({
       id: entry.id,
       mediaType: entry.mediaType,
       fileName: entry.fileName,
@@ -116638,14 +117336,14 @@ function writeAttachmentSidecar(entry) {
 }
 function readAttachmentSidecar(id) {
   try {
-    const raw = JSON.parse(readFileSync24(attachmentSidecarPath(id), "utf8"));
+    const raw = JSON.parse(readFileSync26(attachmentSidecarPath(id), "utf8"));
     const mediaType = normalizeMediaType(raw.mediaType);
     if (raw.id !== id || !mediaType || typeof raw.expiresAt !== "number") {
       return null;
     }
     return {
       id,
-      path: join55(PAIRING_ATTACHMENT_ROOT, id),
+      path: join56(PAIRING_ATTACHMENT_ROOT, id),
       mediaType,
       fileName: sanitizeAttachmentFileName(raw.fileName),
       size: typeof raw.size === "number" ? raw.size : 0,
@@ -116657,9 +117355,9 @@ function readAttachmentSidecar(id) {
 }
 function forgetPairingAttachment(id) {
   attachmentBlobs.delete(id);
-  for (const path2 of [join55(PAIRING_ATTACHMENT_ROOT, id), attachmentSidecarPath(id)]) {
+  for (const path2 of [join56(PAIRING_ATTACHMENT_ROOT, id), attachmentSidecarPath(id)]) {
     try {
-      unlinkSync2(path2);
+      unlinkSync3(path2);
     } catch {}
   }
 }
@@ -116709,7 +117407,7 @@ function isInsideRoot(root, candidate) {
 function isAllowedHomeRelativePath(rel) {
   if (!rel.startsWith("."))
     return true;
-  return rel === ".claude" || rel.startsWith(`.claude${sep4}`) || rel === join55(".scout", "pairing") || rel.startsWith(`${join55(".scout", "pairing")}${sep4}`);
+  return rel === ".claude" || rel.startsWith(`.claude${sep4}`) || rel === join56(".scout", "pairing") || rel.startsWith(`${join56(".scout", "pairing")}${sep4}`);
 }
 function resolveAllowedFile(filePath) {
   if (!isAbsolute6(filePath))
@@ -116720,7 +117418,7 @@ function resolveAllowedFile(filePath) {
   } catch {
     return { status: "missing" };
   }
-  const canonicalHome = realpathSync4(homedir37());
+  const canonicalHome = realpathSync4(homedir38());
   for (const configuredRoot of ALLOWED_ROOTS) {
     const root = realpathSync4(configuredRoot);
     if (!isInsideRoot(root, candidate))
@@ -116729,7 +117427,7 @@ function resolveAllowedFile(filePath) {
       return { status: "forbidden" };
     }
     try {
-      return statSync10(candidate).isFile() ? { status: "allowed", path: candidate } : { status: "missing" };
+      return statSync11(candidate).isFile() ? { status: "allowed", path: candidate } : { status: "missing" };
     } catch {
       return { status: "missing" };
     }
@@ -117363,21 +118061,21 @@ var ALLOWED_ROOTS, LOOPBACK_PEERS, PAIRING_ATTACHMENT_ROOT, PAIRING_ATTACHMENT_T
 var init_fileserver = __esm(() => {
   init_web_handoff();
   init_artifact_presentation();
-  ALLOWED_ROOTS = [homedir37(), "/tmp"];
+  ALLOWED_ROOTS = [homedir38(), "/tmp"];
   LOOPBACK_PEERS = new BlockList;
   LOOPBACK_PEERS.addSubnet("127.0.0.0", 8, "ipv4");
   LOOPBACK_PEERS.addAddress("::1", "ipv6");
   LOOPBACK_PEERS.addSubnet("::ffff:127.0.0.0", 104, "ipv6");
-  PAIRING_ATTACHMENT_ROOT = join55(homedir37(), ".scout", "pairing", "attachments");
+  PAIRING_ATTACHMENT_ROOT = join56(homedir38(), ".scout", "pairing", "attachments");
   PAIRING_ATTACHMENT_TTL_MS = 6 * 60 * 60 * 1000;
   PAIRING_ATTACHMENT_MAX_BYTES = 25 * 1024 * 1024;
   attachmentBlobs = new Map;
 });
 
 // ../runtime/src/agent-workspace.ts
-import { existsSync as existsSync48 } from "fs";
+import { existsSync as existsSync49 } from "fs";
 import { mkdir as mkdir13 } from "fs/promises";
-import { join as join56 } from "path";
+import { join as join57 } from "path";
 async function isGitRepo(projectRoot) {
   try {
     await execSystemFile("git", ["rev-parse", "--git-dir"], { cwd: projectRoot, timeoutMs: 2000 });
@@ -117397,9 +118095,9 @@ async function createAgentWorkspace(projectRoot, agentName, requestedBranch) {
   }
   const branch = requestedBranch?.trim() || `scout/${agentName}`;
   validateWorktreeBranch(branch);
-  const workspaceDir = join56(projectRoot, SCOUT_WORKSPACES_DIRNAME);
-  const workspacePath = join56(workspaceDir, agentName);
-  if (existsSync48(workspacePath)) {
+  const workspaceDir = join57(projectRoot, SCOUT_WORKSPACES_DIRNAME);
+  const workspacePath = join57(workspaceDir, agentName);
+  if (existsSync49(workspacePath)) {
     return { path: workspacePath, branch };
   }
   await mkdir13(workspaceDir, { recursive: true });
@@ -117422,11 +118120,11 @@ var init_agent_workspace = __esm(() => {
 
 // ../../apps/desktop/src/server/db-queries.ts
 import { Database as Database4 } from "bun:sqlite";
-import { homedir as homedir38 } from "os";
-import { join as join57 } from "path";
+import { homedir as homedir39 } from "os";
+import { join as join58 } from "path";
 function resolveDbPath() {
-  const controlHome = process.env.OPENSCOUT_CONTROL_HOME ?? join57(homedir38(), ".openscout", "control-plane");
-  return join57(controlHome, "control-plane.sqlite");
+  const controlHome = process.env.OPENSCOUT_CONTROL_HOME ?? join58(homedir39(), ".openscout", "control-plane");
+  return join58(controlHome, "control-plane.sqlite");
 }
 function db2() {
   if (!_db) {
@@ -117915,7 +118613,7 @@ var _db = null, HOME, LATEST_AGENT_ENDPOINT_JOIN = `LEFT JOIN agent_endpoints ep
 )`, ACTIVE_FLIGHT_STATES_SQL, ACTIVE_FLIGHT_MAX_AGE_MS, ACTIVE_WORK_STATES_SQL;
 var init_db_queries = __esm(() => {
   init_src();
-  HOME = homedir38();
+  HOME = homedir39();
   ACTIVE_FLIGHT_STATES_SQL = sqlStringList(["running", "waking", "waiting", "queued"]);
   ACTIVE_FLIGHT_MAX_AGE_MS = 24 * 60 * 60 * 1000;
   ACTIVE_WORK_STATES_SQL = sqlStringList(["open", "working", "waiting", "review"]);
@@ -117923,7 +118621,7 @@ var init_db_queries = __esm(() => {
 
 // ../../apps/desktop/src/core/mobile/service.ts
 import { basename as basename19, resolve as resolve32 } from "path";
-import { statSync as statSync11 } from "fs";
+import { statSync as statSync12 } from "fs";
 async function getScoutMobileRuntimeCapabilities(projectRoot) {
   const normalizedProjectRoot = projectRoot?.trim() ? resolve32(projectRoot) : null;
   const liveCatalog = await readScoutRuntimeCatalog();
@@ -117947,7 +118645,7 @@ async function getScoutMobileRuntimeCapabilities(projectRoot) {
       reasoningEffort: scoutRuntimeDefaultReasoningEffort(defaultHarness ?? "", defaultModel, runtimeCatalog)
     },
     defaultsByHarness: scoutRuntimeDefaultsByHarness(runtimeCatalog),
-    harnesses: runtimeCatalog.harnesses.filter((entry) => entry.enabled).map((entry) => ({ id: entry.id, label: entry.label })),
+    harnesses: runtimeCatalog.harnesses.filter((entry) => entry.enabled && entry.listed !== false).map((entry) => ({ id: entry.id, label: entry.label })),
     models,
     efforts: scoutRuntimeEffortCatalog(runtimeCatalog).map((effort) => ({
       ...effort,
@@ -118080,7 +118778,7 @@ async function loadMobileWorkspaceInventory(currentDirectory) {
 }
 function isDirectory2(path2) {
   try {
-    return statSync11(path2).isDirectory();
+    return statSync12(path2).isDirectory();
   } catch {
     return false;
   }
@@ -119242,21 +119940,21 @@ var init_mobile_terminal_session = __esm(() => {
 // ../../apps/desktop/src/core/pairing/runtime/bridge/mobile-terminal-provision.ts
 import { createHash as createHash13 } from "crypto";
 import {
-  chmodSync as chmodSync2,
+  chmodSync as chmodSync3,
   closeSync,
-  existsSync as existsSync49,
-  mkdirSync as mkdirSync18,
+  existsSync as existsSync50,
+  mkdirSync as mkdirSync19,
   openSync,
-  readFileSync as readFileSync25,
+  readFileSync as readFileSync27,
   renameSync as renameSync6,
-  unlinkSync as unlinkSync3,
-  writeFileSync as writeFileSync15
+  unlinkSync as unlinkSync4,
+  writeFileSync as writeFileSync16
 } from "fs";
-import { homedir as homedir39, hostname as hostname5, userInfo as userInfo2 } from "os";
-import { join as join58 } from "path";
+import { homedir as homedir40, hostname as hostname5, userInfo as userInfo2 } from "os";
+import { join as join59 } from "path";
 async function readMobileTerminalStatus(requestedSessionName, deviceId) {
-  const authorizedKeysPath = join58(homedir39(), ".ssh", "authorized_keys");
-  const authorizedKeys = existsSync49(authorizedKeysPath) ? readFileSync25(authorizedKeysPath, "utf8") : "";
+  const authorizedKeysPath = join59(homedir40(), ".ssh", "authorized_keys");
+  const authorizedKeys = existsSync50(authorizedKeysPath) ? readFileSync27(authorizedKeysPath, "utf8") : "";
   const provisionedSessionName = findSshTerminalSessionForDevice(authorizedKeys, deviceId);
   const sessionName = authorizedMobileTerminalSessionName(requestedSessionName, provisionedSessionName);
   const base = {
@@ -119328,17 +120026,17 @@ async function readMobileTerminalStatus(requestedSessionName, deviceId) {
 async function provisionMobileTerminalAccess(sshPublicKey, deviceId, deviceClass = undefined) {
   const id = deviceId?.trim() || "scout-ios-device";
   const sessionName = provisionedMobileTerminalSessionName(sshPublicKey, deviceClass);
-  const sshDir = join58(homedir39(), ".ssh");
-  const authorizedKeysPath = join58(sshDir, "authorized_keys");
+  const sshDir = join59(homedir40(), ".ssh");
+  const authorizedKeysPath = join59(sshDir, "authorized_keys");
   const hostKeyFingerprint = readRequiredHostKeyFingerprint();
   const result = withAuthorizedKeysLock(sshDir, () => {
-    if (!existsSync49(sshDir)) {
-      mkdirSync18(sshDir, { recursive: true, mode: 448 });
+    if (!existsSync50(sshDir)) {
+      mkdirSync19(sshDir, { recursive: true, mode: 448 });
     }
     try {
-      chmodSync2(sshDir, 448);
+      chmodSync3(sshDir, 448);
     } catch {}
-    const existing = existsSync49(authorizedKeysPath) ? readFileSync25(authorizedKeysPath, "utf8") : "";
+    const existing = existsSync50(authorizedKeysPath) ? readFileSync27(authorizedKeysPath, "utf8") : "";
     const result2 = provisionSshTerminalAccess({
       authorizedKeys: existing,
       deviceId: id,
@@ -119352,7 +120050,7 @@ async function provisionMobileTerminalAccess(sshPublicKey, deviceId, deviceClass
       log.info("terminal", `SSH key already authorized for device ${id}`);
     }
     try {
-      chmodSync2(authorizedKeysPath, 384);
+      chmodSync3(authorizedKeysPath, 384);
     } catch {}
     return result2;
   });
@@ -119386,7 +120084,7 @@ function resolveReachableHost() {
 }
 function readRequiredHostKeyFingerprint() {
   try {
-    const pub = readFileSync25("/etc/ssh/ssh_host_ed25519_key.pub", "utf8");
+    const pub = readFileSync27("/etc/ssh/ssh_host_ed25519_key.pub", "utf8");
     const keyData = pub.trim().split(/\s+/)[1];
     if (!keyData)
       throw new Error("missing key data");
@@ -119400,20 +120098,20 @@ function readRequiredHostKeyFingerprint() {
 function writeAuthorizedKeysAtomically(path2, contents) {
   const tmpPath = `${path2}.scout-${process.pid}-${Date.now()}.tmp`;
   try {
-    writeFileSync15(tmpPath, contents, { mode: 384, flag: "wx" });
+    writeFileSync16(tmpPath, contents, { mode: 384, flag: "wx" });
     renameSync6(tmpPath, path2);
   } catch (error48) {
     try {
-      unlinkSync3(tmpPath);
+      unlinkSync4(tmpPath);
     } catch {}
     throw error48;
   }
 }
 function withAuthorizedKeysLock(sshDir, action) {
-  if (!existsSync49(sshDir)) {
-    mkdirSync18(sshDir, { recursive: true, mode: 448 });
+  if (!existsSync50(sshDir)) {
+    mkdirSync19(sshDir, { recursive: true, mode: 448 });
   }
-  const lockPath = join58(sshDir, ".scout-authorized-keys.lock");
+  const lockPath = join59(sshDir, ".scout-authorized-keys.lock");
   const deadline = Date.now() + 5000;
   let fd = null;
   while (fd === null) {
@@ -119438,7 +120136,7 @@ function withAuthorizedKeysLock(sshDir, action) {
       closeSync(lockFd);
     } finally {
       try {
-        unlinkSync3(lockPath);
+        unlinkSync4(lockPath);
       } catch {}
     }
   }
@@ -119455,9 +120153,9 @@ var init_mobile_terminal_provision = __esm(() => {
 });
 
 // ../../apps/desktop/src/core/pairing/runtime/bridge/server.ts
-import { readdirSync as readdirSync6, readFileSync as readFileSync26, realpathSync as realpathSync5, statSync as statSync12 } from "fs";
-import { basename as basename20, isAbsolute as isAbsolute7, join as join59, relative as relative7, resolve as resolve33 } from "path";
-import { homedir as homedir40 } from "os";
+import { readdirSync as readdirSync6, readFileSync as readFileSync28, realpathSync as realpathSync5, statSync as statSync13 } from "fs";
+import { basename as basename20, isAbsolute as isAbsolute7, join as join60, relative as relative7, resolve as resolve33 } from "path";
+import { homedir as homedir41 } from "os";
 function replaySyncEvents(bridge, sessionId, lastSeq) {
   return bridge.replay(sessionId, lastSeq);
 }
@@ -119644,7 +120342,7 @@ async function handleRPCInner(bridge, req, rpcContext = {}) {
         if (dirName.startsWith("-")) {
           const candidate = "/" + dirName.slice(1).replace(/-/g, "/");
           try {
-            statSync12(candidate);
+            statSync13(candidate);
             cwd = candidate;
           } catch {
             const config2 = resolveConfig();
@@ -119701,7 +120399,7 @@ async function handleRPCInner(bridge, req, rpcContext = {}) {
         }
         const root = resolveWorkspaceRoot(configuredRoot);
         const projectPath = resolveWorkspacePath(root, p.path);
-        const stat6 = statSync12(projectPath);
+        const stat6 = statSync13(projectPath);
         if (!stat6.isDirectory()) {
           return { id: req.id, error: { code: -32000, message: "Workspace target is not a directory" } };
         }
@@ -119973,7 +120671,7 @@ async function handleRPCInner(bridge, req, rpcContext = {}) {
         const config2 = resolveConfig();
         const workspaceRoot = config2.workspace?.root ? resolveWorkspaceRoot(config2.workspace.root) : null;
         const matches = await readSessionSearch({
-          home: homedir40(),
+          home: homedir41(),
           workspaceRoot,
           maxAgeDays: maxAge,
           limit,
@@ -119988,7 +120686,7 @@ async function handleRPCInner(bridge, req, rpcContext = {}) {
           return { id: req.id, error: { code: -32000, message: "Only .jsonl files can be read" } };
         }
         try {
-          const content = readFileSync26(p.path, "utf-8");
+          const content = readFileSync28(p.path, "utf-8");
           const lines = content.split(`
 `).filter((l) => l.trim().length > 0);
           const trimmed = lines.length > 500 ? lines.slice(-500) : lines;
@@ -120109,13 +120807,13 @@ function resolveMobileCurrentDirectory() {
   }
 }
 function resolveWorkspaceRoot(root) {
-  const expandedRoot = root.replace(/^~/, homedir40());
+  const expandedRoot = root.replace(/^~/, homedir41());
   return realpathSync5(expandedRoot);
 }
 function resolveWorkspacePath(root, requestedPath) {
   const normalizedRoot = resolveWorkspaceRoot(root);
-  const expandedPath = requestedPath?.replace(/^~/, homedir40());
-  const candidate = expandedPath ? isAbsolute7(expandedPath) ? expandedPath : join59(normalizedRoot, expandedPath) : normalizedRoot;
+  const expandedPath = requestedPath?.replace(/^~/, homedir41());
+  const candidate = expandedPath ? isAbsolute7(expandedPath) ? expandedPath : join60(normalizedRoot, expandedPath) : normalizedRoot;
   const resolvedCandidate = realpathSync5(candidate);
   const rel = relative7(normalizedRoot, resolvedCandidate);
   if (rel === "" || !rel.startsWith("..") && !isAbsolute7(rel)) {
@@ -120130,9 +120828,9 @@ function listDirectories(dirPath) {
       continue;
     if (name2 === "node_modules" || name2 === ".build" || name2 === "target")
       continue;
-    const fullPath = join59(dirPath, name2);
+    const fullPath = join60(dirPath, name2);
     try {
-      const stat6 = statSync12(fullPath);
+      const stat6 = statSync13(fullPath);
       if (!stat6.isDirectory())
         continue;
       const children = new Set(readdirSync6(fullPath));
@@ -120156,7 +120854,7 @@ async function discoverSessionFiles(maxAgeDays, limit) {
   const config2 = resolveConfig();
   const workspaceRoot = config2.workspace?.root ? resolveWorkspaceRoot(config2.workspace.root) : null;
   const sessions4 = await readSessionFileScan({
-    home: homedir40(),
+    home: homedir41(),
     workspaceRoot,
     maxAgeDays,
     limit
@@ -120270,9 +120968,9 @@ var init_tail_fanout = __esm(() => {
 });
 
 // ../../apps/desktop/src/core/pairing/runtime/bridge/router.ts
-import { readFileSync as readFileSync27, readdirSync as readdirSync7, realpathSync as realpathSync6, statSync as statSync13 } from "fs";
-import { basename as basename21, isAbsolute as isAbsolute8, join as join60, relative as relative8, resolve as resolve34 } from "path";
-import { homedir as homedir41 } from "os";
+import { readFileSync as readFileSync29, readdirSync as readdirSync7, realpathSync as realpathSync6, statSync as statSync14 } from "fs";
+import { basename as basename21, isAbsolute as isAbsolute8, join as join61, relative as relative8, resolve as resolve34 } from "path";
+import { homedir as homedir42 } from "os";
 function resolveMobileCurrentDirectory2() {
   const config2 = resolveConfig();
   const configuredRoot = config2.workspace?.root;
@@ -120285,13 +120983,13 @@ function resolveMobileCurrentDirectory2() {
   }
 }
 function resolveWorkspaceRoot2(root) {
-  const expandedRoot = root.replace(/^~/, homedir41());
+  const expandedRoot = root.replace(/^~/, homedir42());
   return realpathSync6(expandedRoot);
 }
 function resolveWorkspacePath2(root, requestedPath) {
   const normalizedRoot = resolveWorkspaceRoot2(root);
-  const expandedPath = requestedPath?.replace(/^~/, homedir41());
-  const candidate = expandedPath ? isAbsolute8(expandedPath) ? expandedPath : join60(normalizedRoot, expandedPath) : normalizedRoot;
+  const expandedPath = requestedPath?.replace(/^~/, homedir42());
+  const candidate = expandedPath ? isAbsolute8(expandedPath) ? expandedPath : join61(normalizedRoot, expandedPath) : normalizedRoot;
   const resolvedCandidate = realpathSync6(candidate);
   const rel = relative8(normalizedRoot, resolvedCandidate);
   if (rel === "" || !rel.startsWith("..") && !isAbsolute8(rel)) {
@@ -120306,9 +121004,9 @@ function listDirectories2(dirPath) {
       continue;
     if (name2 === "node_modules" || name2 === ".build" || name2 === "target")
       continue;
-    const fullPath = join60(dirPath, name2);
+    const fullPath = join61(dirPath, name2);
     try {
-      const stat6 = statSync13(fullPath);
+      const stat6 = statSync14(fullPath);
       if (!stat6.isDirectory())
         continue;
       const children = new Set(readdirSync7(fullPath));
@@ -120339,7 +121037,7 @@ async function discoverSessionFiles2(maxAgeDays, limit) {
   const config2 = resolveConfig();
   const workspaceRoot = config2.workspace?.root ? resolveWorkspaceRoot2(config2.workspace.root) : null;
   const sessions4 = await readSessionFileScan({
-    home: homedir41(),
+    home: homedir42(),
     workspaceRoot,
     maxAgeDays,
     limit
@@ -120725,7 +121423,7 @@ var init_router = __esm(() => {
       if (dirName.startsWith("-")) {
         const candidate = "/" + dirName.slice(1).replace(/-/g, "/");
         try {
-          statSync13(candidate);
+          statSync14(candidate);
           cwd = candidate;
         } catch {
           const config2 = resolveConfig();
@@ -121121,7 +121819,7 @@ var init_router = __esm(() => {
       }
       const root = resolveWorkspaceRoot2(configuredRoot);
       const projectPath = resolveWorkspacePath2(root, input.path);
-      const stat6 = statSync13(projectPath);
+      const stat6 = statSync14(projectPath);
       if (!stat6.isDirectory()) {
         throw new TRPCError({
           code: "BAD_REQUEST",
@@ -121163,7 +121861,7 @@ var init_router = __esm(() => {
       const config2 = resolveConfig();
       const workspaceRoot = config2.workspace?.root ? resolveWorkspaceRoot2(config2.workspace.root) : null;
       const matches = await readSessionSearch({
-        home: homedir41(),
+        home: homedir42(),
         workspaceRoot,
         maxAgeDays: maxAge,
         limit,
@@ -121180,7 +121878,7 @@ var init_router = __esm(() => {
         });
       }
       try {
-        const content = readFileSync27(input.path, "utf-8");
+        const content = readFileSync29(input.path, "utf-8");
         const lines = content.split(`
 `).filter((l) => l.trim().length > 0);
         const trimmed = lines.length > 500 ? lines.slice(-500) : lines;
@@ -123427,14 +124125,14 @@ var init_dist4 = __esm(() => {
 
 // ../../apps/desktop/src/core/pairing/runtime/bridge/server-trpc.ts
 import { realpathSync as realpathSync7 } from "fs";
-import { homedir as homedir42 } from "os";
+import { homedir as homedir43 } from "os";
 function resolveCurrentDirectory() {
   try {
     const config2 = resolveConfig();
     const configuredRoot = config2.workspace?.root;
     if (!configuredRoot)
       return process.cwd();
-    const expanded = configuredRoot.replace(/^~/, homedir42());
+    const expanded = configuredRoot.replace(/^~/, homedir43());
     return realpathSync7(expanded);
   } catch {
     return process.cwd();
@@ -123957,7 +124655,7 @@ var init_server_trpc = __esm(() => {
 });
 
 // ../../apps/desktop/src/core/pairing/runtime/runtime.ts
-import { homedir as homedir43 } from "os";
+import { homedir as homedir44 } from "os";
 function createPairingAdapterRegistry(configAdapters) {
   const adapters = {
     "claude-code": createAdapter6,
@@ -124112,7 +124810,7 @@ async function autoStartConfiguredSessions(bridge, sessions4) {
     try {
       const session3 = await bridge.createSession(entry.adapter, {
         name: entry.name,
-        cwd: entry.cwd?.replace(/^~/, homedir43()),
+        cwd: entry.cwd?.replace(/^~/, homedir44()),
         options: entry.options
       });
       console.log(`[bridge] session started: ${session3.name} (${entry.adapter})`);
@@ -124133,10 +124831,10 @@ var init_runtime = __esm(() => {
 });
 
 // ../../apps/desktop/src/core/pairing/runtime/log.ts
-import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync19 } from "fs";
+import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync20 } from "fs";
 function write2(level, category, message, data) {
   const { rootDir, logPath } = pairingPaths();
-  mkdirSync19(rootDir, { recursive: true });
+  mkdirSync20(rootDir, { recursive: true });
   const prefix = `${new Date().toISOString()} [${level.toUpperCase()}] [${category}]`;
   const line = data === undefined ? `${prefix} ${message}
 ` : `${prefix} ${message} ${JSON.stringify(data)}
@@ -124381,16 +125079,16 @@ function parseRelayEnvelope2(data) {
 var BRIDGE_ABSENCE_GRACE_MS = 30000, ROOM_IDLE_TIMEOUT_MS = 60000;
 
 // ../../apps/desktop/src/core/pairing/runtime/relay-runtime.ts
-import { existsSync as existsSync50, mkdirSync as mkdirSync20 } from "fs";
-import { homedir as homedir44, networkInterfaces as networkInterfaces2 } from "os";
-import { join as join61 } from "path";
+import { existsSync as existsSync51, mkdirSync as mkdirSync21 } from "fs";
+import { homedir as homedir45, networkInterfaces as networkInterfaces2 } from "os";
+import { join as join62 } from "path";
 async function findStoredTailscaleCert(hostname6) {
-  if (!existsSync50(PAIRING_DIR2)) {
+  if (!existsSync51(PAIRING_DIR2)) {
     return null;
   }
-  const certPath = join61(PAIRING_DIR2, `${hostname6}.crt`);
-  const keyPath = join61(PAIRING_DIR2, `${hostname6}.key`);
-  if (!existsSync50(certPath) || !existsSync50(keyPath)) {
+  const certPath = join62(PAIRING_DIR2, `${hostname6}.crt`);
+  const keyPath = join62(PAIRING_DIR2, `${hostname6}.key`);
+  if (!existsSync51(certPath) || !existsSync51(keyPath)) {
     return null;
   }
   if (!await storedCertificateLooksPubliclyTrusted(certPath)) {
@@ -124473,9 +125171,9 @@ function resolveRelayEndpointForTailscaleStatus(port, tailscale2, options = {})
   };
 }
 async function generateTailscaleCerts(hostname6) {
-  mkdirSync20(PAIRING_DIR2, { recursive: true });
-  const certPath = join61(PAIRING_DIR2, `${hostname6}.crt`);
-  const keyPath = join61(PAIRING_DIR2, `${hostname6}.key`);
+  mkdirSync21(PAIRING_DIR2, { recursive: true });
+  const certPath = join62(PAIRING_DIR2, `${hostname6}.crt`);
+  const keyPath = join62(PAIRING_DIR2, `${hostname6}.key`);
   try {
     pairingLog.info("relay", "generating tailscale TLS cert", { hostname: hostname6 });
     await execSystemFile("tailscale", ["cert", "--cert-file", certPath, "--key-file", keyPath, hostname6], {
@@ -124602,7 +125300,7 @@ var PAIRING_DIR2;
 var init_relay_runtime = __esm(() => {
   init_system_probes();
   init_log2();
-  PAIRING_DIR2 = join61(homedir44(), ".scout/pairing");
+  PAIRING_DIR2 = join62(homedir45(), ".scout/pairing");
 });
 
 // ../../node_modules/.bun/uqr@0.1.3/node_modules/uqr/dist/index.mjs
@@ -126741,9 +127439,9 @@ __export(exports_session, {
 });
 import { spawnSync as spawnSync11 } from "child_process";
 import { createHash as createHash14 } from "crypto";
-import { mkdirSync as mkdirSync21 } from "fs";
-import { homedir as homedir45 } from "os";
-import { basename as basename22, join as join62, resolve as resolve35 } from "path";
+import { mkdirSync as mkdirSync22 } from "fs";
+import { homedir as homedir46 } from "os";
+import { basename as basename22, join as join63, resolve as resolve35 } from "path";
 async function runSessionCommand(context, args) {
   const action = args[0];
   if (!action || action === "help" || action === "--help" || action === "-h") {
@@ -127035,7 +127733,7 @@ function readOptionValue(args, index2, flag) {
 }
 function resolveProjectPath2(context, projectPath) {
   const rawPath = projectPath?.trim() || context.cwd;
-  const expanded = rawPath === "~" ? context.env.HOME?.trim() || homedir45() : rawPath.startsWith("~/") ? resolve35(context.env.HOME?.trim() || homedir45(), rawPath.slice(2)) : rawPath;
+  const expanded = rawPath === "~" ? context.env.HOME?.trim() || homedir46() : rawPath.startsWith("~/") ? resolve35(context.env.HOME?.trim() || homedir46(), rawPath.slice(2)) : rawPath;
   return resolve35(context.cwd, expanded);
 }
 function resolveControlPlaneDbPath2(context) {
@@ -127043,8 +127741,8 @@ function resolveControlPlaneDbPath2(context) {
   if (explicitPath) {
     return explicitPath;
   }
-  const controlHome = context.env.OPENSCOUT_CONTROL_HOME?.trim() || join62(context.env.HOME?.trim() || homedir45(), ".openscout", "control-plane");
-  return join62(controlHome, "control-plane.sqlite");
+  const controlHome = context.env.OPENSCOUT_CONTROL_HOME?.trim() || join63(context.env.HOME?.trim() || homedir46(), ".openscout", "control-plane");
+  return join63(controlHome, "control-plane.sqlite");
 }
 function openTerminalSessionStore(context) {
   return new SQLiteControlPlaneStore(resolveControlPlaneDbPath2(context));
@@ -127168,12 +127866,12 @@ function assertZellijAvailable(context) {
 }
 function resolveZellijSocketDir(context) {
   const configured = context.env.ZELLIJ_SOCKET_DIR?.trim() || context.env.OPENSCOUT_ZELLIJ_SOCKET_DIR?.trim();
-  return configured || join62(context.env.HOME?.trim() || homedir45(), ".openscout", "zellij-sockets");
+  return configured || join63(context.env.HOME?.trim() || homedir46(), ".openscout", "zellij-sockets");
 }
 function zellijEnv(context) {
   const socketDir = resolveZellijSocketDir(context);
   try {
-    mkdirSync21(socketDir, { recursive: true });
+    mkdirSync22(socketDir, { recursive: true });
   } catch {
     return context.env;
   }
@@ -127474,9 +128172,9 @@ __export(exports_server, {
   normalizeServerOpenPath: () => normalizeServerOpenPath
 });
 import { spawn as spawn10 } from "child_process";
-import { existsSync as existsSync51, mkdirSync as mkdirSync22, openSync as openSync2, writeFileSync as writeFileSync16 } from "fs";
-import { homedir as homedir46 } from "os";
-import { dirname as dirname31, join as join63, resolve as resolve36 } from "path";
+import { existsSync as existsSync52, mkdirSync as mkdirSync23, openSync as openSync2, writeFileSync as writeFileSync17 } from "fs";
+import { homedir as homedir47 } from "os";
+import { dirname as dirname31, join as join64, resolve as resolve36 } from "path";
 import { fileURLToPath as fileURLToPath12 } from "url";
 function renderServerCommandHelp() {
   return [
@@ -127889,9 +128587,9 @@ async function openBrowser(url2) {
   });
 }
 function resolveScoutLocalEdgeCaddyfilePath() {
-  const dir = join63(homedir46(), ".scout", "local-edge");
-  mkdirSync22(dir, { recursive: true });
-  return join63(dir, "Caddyfile");
+  const dir = join64(homedir47(), ".scout", "local-edge");
+  mkdirSync23(dir, { recursive: true });
+  return join64(dir, "Caddyfile");
 }
 function resolveCaddyExecutable2(env) {
   return env.OPENSCOUT_CADDY_BIN?.trim() || "caddy";
@@ -127914,7 +128612,7 @@ async function runScoutLocalEdge(env) {
   const config3 = resolveServerLocalEdgeConfig(env);
   const schemes = config3.scheme === "both" ? ["http", "https"] : [config3.scheme];
   const caddyfilePath = resolveScoutLocalEdgeCaddyfilePath();
-  writeFileSync16(caddyfilePath, renderOpenScoutCaddyfile(config3), "utf8");
+  writeFileSync17(caddyfilePath, renderOpenScoutCaddyfile(config3), "utf8");
   const mdnsProcesses = schemes.flatMap((scheme) => {
     const edgePort = scheme === "https" ? 443 : 80;
     const suffix = scheme.toUpperCase();
@@ -128056,14 +128754,14 @@ __export(exports_setup, {
   runSetupCommand: () => runSetupCommand,
   resolveSetupSourceRoots: () => resolveSetupSourceRoots
 });
-import { existsSync as existsSync52 } from "fs";
-import { homedir as homedir47 } from "os";
-import { dirname as dirname32, join as join64, resolve as resolve37 } from "path";
+import { existsSync as existsSync53 } from "fs";
+import { homedir as homedir48 } from "os";
+import { dirname as dirname32, join as join65, resolve as resolve37 } from "path";
 import { createInterface as createInterface4 } from "readline/promises";
 function findGitRoot2(startDirectory) {
   let current = resolve37(startDirectory);
   while (true) {
-    if (existsSync52(join64(current, ".git")))
+    if (existsSync53(join65(current, ".git")))
       return current;
     const parent = dirname32(current);
     if (parent === current)
@@ -128071,25 +128769,25 @@ function findGitRoot2(startDirectory) {
     current = parent;
   }
 }
-function suggestProjectSourceRoot(currentDirectory, homeDirectory = homedir47()) {
+function suggestProjectSourceRoot(currentDirectory, homeDirectory = homedir48()) {
   const gitRoot = findGitRoot2(currentDirectory);
   if (gitRoot && resolve37(gitRoot) !== resolve37(homeDirectory))
     return dirname32(gitRoot);
   for (const candidate of [
-    join64(homeDirectory, "dev"),
-    join64(homeDirectory, "Developer"),
-    join64(homeDirectory, "Projects")
+    join65(homeDirectory, "dev"),
+    join65(homeDirectory, "Developer"),
+    join65(homeDirectory, "Projects")
   ]) {
-    if (existsSync52(candidate))
+    if (existsSync53(candidate))
       return candidate;
   }
   return resolve37(currentDirectory);
 }
-function expandHome(value, homeDirectory = homedir47()) {
+function expandHome(value, homeDirectory = homedir48()) {
   if (value === "~")
     return homeDirectory;
   if (value.startsWith("~/"))
-    return join64(homeDirectory, value.slice(2));
+    return join65(homeDirectory, value.slice(2));
   return value;
 }
 async function promptForSourceRoot(suggestedRoot, additionalRootCount) {
@@ -128117,7 +128815,7 @@ async function resolveSetupSourceRoots(context, currentDirectory, sourceRoots, e
 async function runSetupCommand(context, args) {
   const options = parseSetupCommandOptions(args, defaultScoutContextDirectory(context));
   const settings = await readOpenScoutSettings({ currentDirectory: options.currentDirectory });
-  const hasSavedSettings = existsSync52(resolveOpenScoutSupportPaths().settingsPath);
+  const hasSavedSettings = existsSync53(resolveOpenScoutSupportPaths().settingsPath);
   options.sourceRoots = await resolveSetupSourceRoots({ ...context, isTty: context.isTty && Boolean(process.stdin.isTTY) }, options.currentDirectory, options.sourceRoots, {
     roots: hasSavedSettings ? settings.discovery.workspaceRoots : [],
     answeredAt: hasSavedSettings ? settings.onboarding.sourceRootsAnsweredAt : null
@@ -128273,6 +128971,206 @@ var init_statusline = __esm(() => {
   MAX_DELEGATE_OUTPUT_BYTES = 64 * 1024;
 });
 
+// ../runtime/src/tail/discover.ts
+function readNonNegativeIntEnv(name2, fallback2) {
+  const raw2 = Number.parseInt(process.env[name2] ?? "", 10);
+  return Number.isFinite(raw2) && raw2 >= 0 ? raw2 : fallback2;
+}
+var PROCESS_LIST_CACHE_MS;
+var init_discover = __esm(() => {
+  init_ps();
+  PROCESS_LIST_CACHE_MS = readNonNegativeIntEnv("OPENSCOUT_TAIL_PROCESS_CACHE_MS", 1000);
+});
+
+// ../runtime/src/tail/tool-format.ts
+var init_tool_format = () => {};
+
+// ../runtime/src/tail/claude-source.ts
+var DEFAULT_HOT_DISCOVERY_WINDOW_MS, DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS, DEFAULT_DEEP_DISCOVERY_WINDOW_MS, HEAD_READ_BYTES, TAIL_READ_BYTES, metadataCache;
+var init_claude_source = __esm(() => {
+  init_user_config();
+  init_discover();
+  init_tool_format();
+  DEFAULT_HOT_DISCOVERY_WINDOW_MS = 10 * 60 * 1000;
+  DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS = 24 * 60 * 60 * 1000;
+  DEFAULT_DEEP_DISCOVERY_WINDOW_MS = 24 * 60 * 60 * 1000;
+  HEAD_READ_BYTES = 256 * 1024;
+  TAIL_READ_BYTES = 512 * 1024;
+  metadataCache = new Map;
+});
+
+// ../runtime/src/tail/codex-source.ts
+var DEFAULT_HOT_DISCOVERY_WINDOW_MS2, DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS2, DEFAULT_DEEP_DISCOVERY_WINDOW_MS2, HEAD_READ_BYTES2, metadataCache2;
+var init_codex_source = __esm(() => {
+  init_discover();
+  init_tool_format();
+  DEFAULT_HOT_DISCOVERY_WINDOW_MS2 = 10 * 60 * 1000;
+  DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS2 = 24 * 60 * 60 * 1000;
+  DEFAULT_DEEP_DISCOVERY_WINDOW_MS2 = 24 * 60 * 60 * 1000;
+  HEAD_READ_BYTES2 = 512 * 1024;
+  metadataCache2 = new Map;
+});
+
+// ../runtime/src/tail/cursor-source.ts
+var DEFAULT_HOT_DISCOVERY_WINDOW_MS3, DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS3, DEFAULT_DEEP_DISCOVERY_WINDOW_MS3, HEAD_READ_BYTES3;
+var init_cursor_source = __esm(() => {
+  init_discover();
+  DEFAULT_HOT_DISCOVERY_WINDOW_MS3 = 10 * 60 * 1000;
+  DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS3 = 24 * 60 * 60 * 1000;
+  DEFAULT_DEEP_DISCOVERY_WINDOW_MS3 = 24 * 60 * 60 * 1000;
+  HEAD_READ_BYTES3 = 512 * 1024;
+});
+
+// ../runtime/src/tail/grok-source.ts
+var DEFAULT_HOT_DISCOVERY_WINDOW_MS4, DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS4, DEFAULT_DEEP_DISCOVERY_WINDOW_MS4, HEAD_READ_BYTES4, grokToolCallMatchers, metadataCache3;
+var init_grok_source = __esm(() => {
+  init_discover();
+  init_tool_format();
+  DEFAULT_HOT_DISCOVERY_WINDOW_MS4 = 10 * 60 * 1000;
+  DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS4 = 24 * 60 * 60 * 1000;
+  DEFAULT_DEEP_DISCOVERY_WINDOW_MS4 = 24 * 60 * 60 * 1000;
+  HEAD_READ_BYTES4 = 256 * 1024;
+  grokToolCallMatchers = new Map;
+  metadataCache3 = new Map;
+});
+
+// ../runtime/src/tail/kimi-source.ts
+var DEFAULT_HOT_DISCOVERY_WINDOW_MS5, DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS5, DEFAULT_DEEP_DISCOVERY_WINDOW_MS5, metadataCache4;
+var init_kimi_source = __esm(() => {
+  init_discover();
+  init_tool_format();
+  DEFAULT_HOT_DISCOVERY_WINDOW_MS5 = 10 * 60 * 1000;
+  DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS5 = 24 * 60 * 60 * 1000;
+  DEFAULT_DEEP_DISCOVERY_WINDOW_MS5 = 24 * 60 * 60 * 1000;
+  metadataCache4 = new Map;
+});
+
+// ../runtime/src/tail/opencode-source.ts
+var DEFAULT_HOT_DISCOVERY_WINDOW_MS6, DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS6, DEFAULT_DEEP_DISCOVERY_WINDOW_MS6, HEAD_READ_BYTES5;
+var init_opencode_source = __esm(() => {
+  init_discover();
+  DEFAULT_HOT_DISCOVERY_WINDOW_MS6 = 10 * 60 * 1000;
+  DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS6 = 24 * 60 * 60 * 1000;
+  DEFAULT_DEEP_DISCOVERY_WINDOW_MS6 = 24 * 60 * 60 * 1000;
+  HEAD_READ_BYTES5 = 128 * 1024;
+});
+
+// ../runtime/src/tail/pi-source.ts
+var DEFAULT_HOT_DISCOVERY_WINDOW_MS7, DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS7, DEFAULT_DEEP_DISCOVERY_WINDOW_MS7, HEAD_READ_BYTES6, metadataCache5;
+var init_pi_source = __esm(() => {
+  init_discover();
+  init_tool_format();
+  DEFAULT_HOT_DISCOVERY_WINDOW_MS7 = 10 * 60 * 1000;
+  DEFAULT_SHALLOW_DISCOVERY_WINDOW_MS7 = 24 * 60 * 60 * 1000;
+  DEFAULT_DEEP_DISCOVERY_WINDOW_MS7 = 24 * 60 * 60 * 1000;
+  HEAD_READ_BYTES6 = 256 * 1024;
+  metadataCache5 = new Map;
+});
+// ../runtime/src/tail/service.ts
+function readPositiveIntEnv(name2, fallback2) {
+  const raw2 = Number.parseInt(process.env[name2] ?? "", 10);
+  return Number.isFinite(raw2) && raw2 > 0 ? raw2 : fallback2;
+}
+var TAIL_POLL_INTERVAL_MS, HOT_DISCOVERY_INTERVAL_MS, DISCOVERY_CACHE_MAX_AGE_MS, SHALLOW_DISCOVERY_INTERVAL_MS, DEEP_DISCOVERY_INTERVAL_MS, QUIET_EVENT_COALESCE_WINDOW_MS, QUIET_EVENT_COALESCE_MAX_KEYS, RECENT_TRANSCRIPT_READ_BYTES, SESSION_TRANSCRIPT_READ_BYTES, RECENT_TRANSCRIPT_MAX_FILES, NATIVE_TAIL_SOURCES, watchers, perSessionBuffer, subscribers, knownTranscripts, quietEventLastSeen, GROK_QUIET_PHASES;
+var init_service10 = __esm(() => {
+  init_claude_source();
+  init_codex_source();
+  init_cursor_source();
+  init_grok_source();
+  init_kimi_source();
+  init_opencode_source();
+  init_pi_source();
+  TAIL_POLL_INTERVAL_MS = readPositiveIntEnv("OPENSCOUT_TAIL_POLL_INTERVAL_MS", 500);
+  HOT_DISCOVERY_INTERVAL_MS = readPositiveIntEnv("OPENSCOUT_TAIL_HOT_DISCOVERY_INTERVAL_MS", 30000);
+  DISCOVERY_CACHE_MAX_AGE_MS = readPositiveIntEnv("OPENSCOUT_TAIL_DISCOVERY_CACHE_MAX_AGE_MS", HOT_DISCOVERY_INTERVAL_MS);
+  SHALLOW_DISCOVERY_INTERVAL_MS = readPositiveIntEnv("OPENSCOUT_TAIL_SHALLOW_DISCOVERY_INTERVAL_MS", 10 * 60000);
+  DEEP_DISCOVERY_INTERVAL_MS = readPositiveIntEnv("OPENSCOUT_TAIL_DEEP_DISCOVERY_INTERVAL_MS", 60 * 60000);
+  QUIET_EVENT_COALESCE_WINDOW_MS = readPositiveIntEnv("OPENSCOUT_TAIL_QUIET_EVENT_COALESCE_WINDOW_MS", 5000);
+  QUIET_EVENT_COALESCE_MAX_KEYS = readPositiveIntEnv("OPENSCOUT_TAIL_QUIET_EVENT_COALESCE_MAX_KEYS", 2000);
+  RECENT_TRANSCRIPT_READ_BYTES = 512 * 1024;
+  SESSION_TRANSCRIPT_READ_BYTES = 8 * 1024 * 1024;
+  RECENT_TRANSCRIPT_MAX_FILES = readPositiveIntEnv("OPENSCOUT_TAIL_RECENT_TRANSCRIPT_MAX_FILES", 24);
+  NATIVE_TAIL_SOURCES = new Set(["grok", "kimi", "opencode", "cursor"]);
+  watchers = new Map;
+  perSessionBuffer = new Map;
+  subscribers = new Set;
+  knownTranscripts = new Map;
+  quietEventLastSeen = new Map;
+  GROK_QUIET_PHASES = new Set([
+    "streaming_reasoning",
+    "streaming_text",
+    "tool_execution",
+    "permission_prompt"
+  ]);
+});
+
+// ../runtime/src/tail/display.ts
+function isCodexChunkToolResult(summary) {
+  const trimmed = summary.trim();
+  return trimmed.startsWith("-> Chunk ID:") || /^->\s+Wall time:/u.test(trimmed);
+}
+function isCursorProcessSample(event) {
+  if (event.source !== "cursor" || event.kind !== "system")
+    return false;
+  const summary = event.summary.trim().toLowerCase();
+  return summary === "process sample" || summary.startsWith("process sample \xB7");
+}
+function isTailNoiseEvent(event) {
+  if (isCursorProcessSample(event))
+    return true;
+  if (event.source === "grok") {
+    const summary2 = event.summary.trim().toLowerCase();
+    if (summary2 === "first token" || summary2.startsWith("loop ")) {
+      return true;
+    }
+    if (!summary2.startsWith("phase \xB7"))
+      return false;
+    const phase = summary2.slice("phase \xB7".length).trim();
+    return GROK_STREAMING_PHASES.has(phase);
+  }
+  if (event.source !== "codex")
+    return false;
+  if (event.kind === "tool-result") {
+    const summary2 = event.summary.trim();
+    if (isCodexChunkToolResult(summary2))
+      return true;
+    if (/_end \u00B7/u.test(summary2))
+      return true;
+    if (summary2.startsWith("->"))
+      return true;
+  }
+  if (event.kind !== "system")
+    return false;
+  const summary = event.summary.trim().toLowerCase();
+  if (summary === "user_message" || summary === "agent_message")
+    return true;
+  if (summary === "[reasoning]")
+    return true;
+  if (summary.startsWith("turn context"))
+    return true;
+  if (summary.startsWith("tokens \xB7"))
+    return true;
+  if (summary.startsWith("session "))
+    return true;
+  return false;
+}
+var GROK_STREAMING_PHASES;
+var init_display = __esm(() => {
+  GROK_STREAMING_PHASES = new Set([
+    "streaming_reasoning",
+    "streaming_text",
+    "tool_execution",
+    "permission_prompt",
+    "waiting_for_model"
+  ]);
+});
+
+// ../runtime/src/tail/index.ts
+var init_tail = __esm(() => {
+  init_service10();
+  init_display();
+});
+
 // ../../apps/desktop/src/cli/commands/tail.ts
 var exports_tail = {};
 __export(exports_tail, {
@@ -128287,6 +129185,7 @@ function renderTailCommandHelp() {
     "Usage: scout tail [options]",
     "",
     "Stream observed harness events from the broker tail firehose.",
+    "Plain output hides harness lifecycle noise; --json stays complete.",
     "",
     "Filters:",
     "  --source <name>                   Runtime source such as claude or codex; repeatable",
@@ -128301,11 +129200,13 @@ function renderTailCommandHelp() {
     "  --since <event-id>                Resume live streaming after a TailEvent id cursor",
     "  --once                            Print the backlog and exit",
     "  --transcripts                     Include recent file-backed transcript events in the initial backlog",
-    "  --raw                             Show bounded raw payload JSON in plain output",
-    "  --json                            Emit JSON (streaming mode uses NDJSON)",
+    "  --verbose, --debug                Show the full firehose including lifecycle noise",
+    "  --raw                             Unfiltered plain output plus bounded raw payload JSON",
+    "  --json                            Emit JSON (streaming mode uses NDJSON); complete events",
     "",
     "Examples:",
     "  scout tail",
+    "  scout tail --verbose",
     "  scout tail --source codex --kind tool-result",
     "  scout tail --project openscout --query permission --once",
     "  scout tail --transcripts --limit 200 --json"
@@ -128324,6 +129225,7 @@ function parseTailCommandOptions(args) {
   let once2 = false;
   let transcripts = false;
   let raw2 = false;
+  let verbose = false;
   for (let index2 = 0;index2 < args.length; index2 += 1) {
     const arg = args[index2] ?? "";
     if (arg === "--once") {
@@ -128346,6 +129248,10 @@ function parseTailCommandOptions(args) {
       raw2 = true;
       continue;
     }
+    if (arg === "--verbose" || arg === "--debug") {
+      verbose = true;
+      continue;
+    }
     if (arg === "--source") {
       sources.push(...parseCsvFlag(args[++index2], "--source"));
       continue;
@@ -128430,7 +129336,8 @@ function parseTailCommandOptions(args) {
     ...since ? { since } : {},
     once: once2,
     transcripts,
-    raw: raw2
+    raw: raw2,
+    verbose
   };
 }
 async function runTailCommand(context, args) {
@@ -128449,8 +129356,18 @@ async function runTailCommand(context, args) {
     query: options.query,
     transcripts: options.transcripts
   });
+  const renderOptions = {
+    raw: options.raw,
+    verbose: options.verbose,
+    color: process.stdout.isTTY === true
+  };
   if (options.once) {
-    context.output.writeValue(initial, (value) => value.events.length === 0 ? "No tail events found." : renderTailEvents(value.events, { raw: options.raw }));
+    context.output.writeValue(initial, (value) => {
+      if (value.events.length === 0)
+        return "No tail events found.";
+      const rendered = renderTailEvents(value.events, renderOptions);
+      return rendered || "No tail events found.";
+    });
     return;
   }
   const emitEvent = (event) => {
@@ -128460,7 +129377,9 @@ async function runTailCommand(context, args) {
       context.stdout(JSON.stringify(event));
       return;
     }
-    context.stdout(renderTailEvent(event, { raw: options.raw }));
+    if (!includeTailEvent(event, renderOptions))
+      return;
+    context.stdout(renderTailEvent(event, renderOptions));
   };
   for (const event of initial.events) {
     emitEvent(event);
@@ -128469,10 +129388,6 @@ async function runTailCommand(context, args) {
   const shutdown = () => controller.abort();
   process.on("SIGINT", shutdown);
   try {
-    if (context.output.mode === "plain") {
-      const sourceText = options.sources?.length ? options.sources.join(",") : "all sources";
-      context.stderr(`Following tail (${sourceText})`);
-    }
     await watchScoutTailEvents({
       since: options.since ?? initial.cursor ?? undefined,
       sources: options.sources,
@@ -128484,24 +129399,38 @@ async function runTailCommand(context, args) {
   }
 }
 function renderTailEvents(events2, options = {}) {
-  return events2.map((event) => renderTailEvent(event, options)).join(`
+  const visible = events2.filter((event) => includeTailEvent(event, options));
+  return visible.map((event) => renderTailEvent(event, options)).join(`
 `);
 }
 function renderTailEvent(event, options = {}) {
-  const parts = [
-    formatClock(event.ts),
-    event.source.padEnd(6, " ").slice(0, 6),
-    event.kind.padEnd(11, " ").slice(0, 11),
-    compact2(event.project || shortCwd(event.cwd), 18).padEnd(18, " "),
-    compact2(event.summary, 140)
-  ];
-  const line = parts.join("  ");
+  const columns2 = resolveColumns(options.columns);
+  const color = options.color ?? false;
+  const clock = formatClock(event.ts);
+  const name2 = event.source.slice(0, 6);
+  const source = name2.padEnd(6, " ");
+  const rest = options.verbose || options.raw ? compactTailSummary(event.summary, Math.max(8, columns2 - 16)) : sceneRest(event, Math.max(8, columns2 - 14));
+  const painted = color ? `${dim(clock)}  ${paint(sourceColor(event.source), name2)}${" ".repeat(Math.max(0, 6 - name2.length))}  ${rest}` : `${clock}  ${source}  ${rest}`;
+  const line = clipVisible(painted, columns2);
   if (!options.raw || event.raw === undefined) {
     return line;
   }
   return `${line}
 ${JSON.stringify(event.raw, null, 2)}`;
 }
+function includeTailEvent(event, options) {
+  if (options.verbose || options.raw)
+    return true;
+  if (isTailNoiseEvent(event))
+    return false;
+  const summary = event.summary.trim().toLowerCase();
+  if (summary.startsWith("permission requested") || summary.startsWith("permission allow")) {
+    return false;
+  }
+  if (event.kind === "tool")
+    return false;
+  return true;
+}
 function tailEventMatches(event, options) {
   if (options.sources?.length && !options.sources.includes(event.source))
     return false;
@@ -128564,22 +129493,122 @@ function formatClock(ts) {
   return new Date(ts).toLocaleTimeString("en-US", {
     hour12: false,
     hour: "2-digit",
-    minute: "2-digit",
-    second: "2-digit"
+    minute: "2-digit"
   });
 }
+function resolveColumns(explicit) {
+  if (typeof explicit === "number" && Number.isFinite(explicit) && explicit > 0) {
+    return Math.floor(explicit);
+  }
+  const detected = process.stdout.columns;
+  if (typeof detected === "number" && Number.isFinite(detected) && detected > 0) {
+    return detected;
+  }
+  return FALLBACK_COLUMNS;
+}
+function compactTailSummary(summary, maxLength) {
+  const normalized = flatten(summary).replace(/\/Users\/[^/\s]+\//g, "~/");
+  const shortened = normalized.replace(/(?:~|\/)[^\s]+/g, shortenPathToken);
+  return compact2(shortened, maxLength);
+}
+function sceneRest(event, maxLength) {
+  if (event.kind === "assistant" || event.kind === "user") {
+    return compact2(flatten(event.summary), maxLength);
+  }
+  const { verb, noun } = sceneWork(event.summary);
+  if (!noun)
+    return compact2(verb, maxLength);
+  return compact2(`${verb}  ${noun}`, maxLength);
+}
+function sceneWork(summary) {
+  const normalized = flatten(summary).replace(/\s+\u00B7\s+(success|error|failed)$/i, "").replace(/\/Users\/[^/\s]+\//g, "~/");
+  const [head = "", ...tail2] = normalized.split(/\s+\u00B7\s+/);
+  const rawVerb = head.trim();
+  const rest = tail2.join(" \xB7 ").trim();
+  let verb = rawVerb.toLowerCase();
+  for (const [pattern, name2] of WORK_VERBS) {
+    if (pattern.test(rawVerb)) {
+      verb = name2;
+      break;
+    }
+  }
+  return { verb, noun: sceneNoun(verb, rest || rawVerb) };
+}
+function sceneNoun(verb, rest) {
+  const pathMatch = rest.match(/(\S+\.\w+)\b/);
+  if (pathMatch?.[1]) {
+    const parts = pathMatch[1].split(/[\\/]/);
+    return parts.at(-1) ?? pathMatch[1];
+  }
+  if (verb === "run") {
+    const tokens = rest.split(/\s+/).filter((token) => token.length > 0 && !token.includes("="));
+    const cmd = tokens.find((token) => !token.startsWith("-")) ?? tokens[0];
+    if (cmd && cmd !== "run" && cmd !== "run_terminal_command") {
+      return cmd.replace(/^.*\//, "");
+    }
+    return "";
+  }
+  const shortened = rest.replace(/(?:~|\/)[^\s]+/g, shortenPathToken);
+  if (shortened === verb)
+    return "";
+  return shortened;
+}
+function shortenPathToken(token) {
+  const folded = token.replace(/\/Users\/[^/\s]+\//g, "~/");
+  const segments = folded.split(/[\\/]/).filter(Boolean);
+  if (segments.length <= 2)
+    return folded;
+  if (!folded.startsWith("~/") && !folded.startsWith("/"))
+    return folded;
+  return segments.slice(-2).join("/");
+}
+function flatten(value) {
+  return value.replace(/\s+/g, " ").trim();
+}
+function sourceColor(source) {
+  return SOURCE_COLOR[source.toLowerCase()] ?? "38;5;245";
+}
+function paint(code, text3) {
+  return `\x1B[${code}m${text3}\x1B[0m`;
+}
+function dim(text3) {
+  return paint("2", text3);
+}
+function visibleWidth(value) {
+  return value.replace(ANSI_RE, "").length;
+}
+function clipVisible(line, columns2) {
+  const budget2 = Math.max(1, columns2);
+  if (visibleWidth(line) <= budget2)
+    return line;
+  const limit = Math.max(0, budget2 - 1);
+  let width = 0;
+  let out = "";
+  let i = 0;
+  while (i < line.length && width < limit) {
+    if (line[i] === "\x1B") {
+      const match2 = line.slice(i).match(/^\x1b\[[0-9;]*m/);
+      if (match2) {
+        out += match2[0];
+        i += match2[0].length;
+        continue;
+      }
+    }
+    out += line[i];
+    width += 1;
+    i += 1;
+  }
+  return `${out}\u2026${out.includes("\x1B[") ? "\x1B[0m" : ""}`;
+}
 function compact2(value, maxLength) {
-  const normalized = value.replace(/\s+/g, " ").trim();
+  const normalized = flatten(value);
   if (normalized.length <= maxLength)
     return normalized;
   return `${normalized.slice(0, Math.max(0, maxLength - 1))}\u2026`;
 }
-function shortCwd(cwd) {
-  const parts = cwd.split("/").filter(Boolean);
-  return parts.at(-1) ?? cwd;
-}
-var HELP_FLAGS20, TAIL_EVENT_KINDS;
-var init_tail = __esm(() => {
+var HELP_FLAGS20, TAIL_EVENT_KINDS, FALLBACK_COLUMNS = 80, ANSI_RE, SOURCE_COLOR, WORK_VERBS;
+var init_tail2 = __esm(() => {
+  init_tail();
   init_errors();
   init_service6();
   HELP_FLAGS20 = new Set(["--help", "-h"]);
@@ -128591,6 +129620,25 @@ var init_tail = __esm(() => {
     "system",
     "other"
   ]);
+  ANSI_RE = /\x1b\[[0-9;]*m/g;
+  SOURCE_COLOR = {
+    grok: "38;5;216",
+    claude: "38;5;173",
+    kimi: "38;5;140",
+    omp: "38;5;73",
+    codex: "38;5;110",
+    cursor: "38;5;108"
+  };
+  WORK_VERBS = [
+    [/^(read_file|read)\b/i, "read"],
+    [/^(search_replace|strreplace|edit)\b/i, "edit"],
+    [/^(write_file|write)\b/i, "write"],
+    [/^(run_terminal_command|bash|shell)\b/i, "run"],
+    [/^(grep)\b/i, "grep"],
+    [/^(glob|find)\b/i, "find"],
+    [/^(web_search|websearch)\b/i, "search"],
+    [/^(web_fetch|webfetch|open_page|open_page_with_find)\b/i, "fetch"]
+  ];
 });
 
 // ../../node_modules/.bun/@opentui+core@0.1.96+a7e4efcb39f2fc50/node_modules/@opentui/core/assets/javascript/highlights.scm
@@ -128645,8 +129693,8 @@ import { EventEmitter as EventEmitter2 } from "events";
 import { resolve as resolve38, dirname as dirname33 } from "path";
 import { fileURLToPath as fileURLToPath13 } from "url";
 import { resolve as resolve210, isAbsolute as isAbsolute9, parse as parse8 } from "path";
-import { existsSync as existsSync53 } from "fs";
-import { basename as basename23, join as join65 } from "path";
+import { existsSync as existsSync54 } from "fs";
+import { basename as basename23, join as join66 } from "path";
 import os from "os";
 import path2 from "path";
 import { EventEmitter as EventEmitter3 } from "events";
@@ -128657,7 +129705,7 @@ import { mkdir as mkdir14, readFile as readFile17, writeFile as writeFile11 } fr
 import * as path3 from "path";
 import { readdir as readdir4 } from "fs/promises";
 import { dlopen, toArrayBuffer as toArrayBuffer4, JSCallback, ptr as ptr4 } from "bun:ffi";
-import { existsSync as existsSync210, writeFileSync as writeFileSync17 } from "fs";
+import { existsSync as existsSync210, writeFileSync as writeFileSync18 } from "fs";
 import { EventEmitter as EventEmitter4 } from "events";
 import { toArrayBuffer as toArrayBuffer2, ptr } from "bun:ffi";
 import { ptr as ptr2, toArrayBuffer as toArrayBuffer22 } from "bun:ffi";
@@ -129252,7 +130300,7 @@ function createTextAttributes({
   bold = false,
   italic = false,
   underline = false,
-  dim = false,
+  dim: dim2 = false,
   blink = false,
   inverse = false,
   hidden = false,
@@ -129265,7 +130313,7 @@ function createTextAttributes({
     attributes3 |= TextAttributes.ITALIC;
   if (underline)
     attributes3 |= TextAttributes.UNDERLINE;
-  if (dim)
+  if (dim2)
     attributes3 |= TextAttributes.DIM;
   if (blink)
     attributes3 |= TextAttributes.BLINK;
@@ -131937,7 +132985,7 @@ function getBunfsRootPath() {
   return process.platform === "win32" ? "B:\\~BUN\\root" : "/$bunfs/root";
 }
 function normalizeBunfsPath(fileName) {
-  return join65(getBunfsRootPath(), basename23(fileName));
+  return join66(getBunfsRootPath(), basename23(fileName));
 }
 function addDefaultParsers(parsers) {
   for (const parser of parsers) {
@@ -135265,7 +136313,7 @@ function convertToDebugSymbols(symbols) {
   if (env.OTUI_DEBUG_FFI && globalFFILogPath) {
     const logPath = globalFFILogPath;
     const writeSync = (msg) => {
-      writeFileSync17(logPath, msg + `
+      writeFileSync18(logPath, msg + `
 `, { flag: "a" });
     };
     Object.entries(symbols).forEach(([key, value]) => {
@@ -137691,7 +138739,7 @@ var __defProp4, __returnValue2 = (v) => v, __export2 = (target2, all) => {
       configurable: true,
       set: __exportSetter2.bind(all, name2)
     });
-}, exports_src, loadYoga, yoga_wasm_base64_esm_default, Align, BoxSizing, Dimension, Direction, Display, Edge, Errata, ExperimentalFeature, FlexDirection, Gutter, Justify, LogLevel, MeasureMode, NodeType, Overflow, PositionType, Unit, Wrap, constants5, YGEnums_default, Yoga, src_default, VALID_BORDER_STYLES, BorderChars, BorderCharArrays, KeyHandler, InternalKeyHandler, CSS_COLOR_NAMES, block_default, shade_default, slick_default, tiny_default, huge_default, grid_default, pallet_default, fonts, parsedFonts, TextAttributes, ATTRIBUTE_BASE_BITS = 8, ATTRIBUTE_BASE_MASK = 255, DebugOverlayCorner, TargetChannel, ATTRIBUTE_BASE_MASK2 = 255, LINK_ID_SHIFT = 8, LINK_ID_PAYLOAD_MASK = 16777215, BrandedStyledText, StyledText, black = (input) => applyStyle(input, { fg: "black" }), red = (input) => applyStyle(input, { fg: "red" }), green = (input) => applyStyle(input, { fg: "green" }), yellow = (input) => applyStyle(input, { fg: "yellow" }), blue = (input) => applyStyle(input, { fg: "blue" }), magenta = (input) => applyStyle(input, { fg: "magenta" }), cyan = (input) => applyStyle(input, { fg: "cyan" }), white = (input) => applyStyle(input, { fg: "white" }), brightBlack = (input) => applyStyle(input, { fg: "brightBlack" }), brightRed = (input) => applyStyle(input, { fg: "brightRed" }), brightGreen = (input) => applyStyle(input, { fg: "brightGreen" }), brightYellow = (input) => applyStyle(input, { fg: "brightYellow" }), brightBlue = (input) => applyStyle(input, { fg: "brightBlue" }), brightMagenta = (input) => applyStyle(input, { fg: "brightMagenta" }), brightCyan = (input) => applyStyle(input, { fg: "brightCyan" }), brightWhite = (input) => applyStyle(input, { fg: "brightWhite" }), bgBlack = (input) => applyStyle(input, { bg: "black" }), bgRed = (input) => applyStyle(input, { bg: "red" }), bgGreen = (input) => applyStyle(input, { bg: "green" }), bgYellow = (input) => applyStyle(input, { bg: "yellow" }), bgBlue = (input) => applyStyle(input, { bg: "blue" }), bgMagenta = (input) => applyStyle(input, { bg: "magenta" }), bgCyan = (input) => applyStyle(input, { bg: "cyan" }), bgWhite = (input) => applyStyle(input, { bg: "white" }), bold = (input) => applyStyle(input, { bold: true }), italic = (input) => applyStyle(input, { italic: true }), underline = (input) => applyStyle(input, { underline: true }), strikethrough = (input) => applyStyle(input, { strikethrough: true }), dim = (input) => applyStyle(input, { dim: true }), reverse = (input) => applyStyle(input, { reverse: true }), blink = (input) => applyStyle(input, { blink: true }), fg = (color) => (input) => applyStyle(input, { fg: color }), bg = (color) => (input) => applyStyle(input, { bg: color }), link = (url2) => (input) => {
+}, exports_src, loadYoga, yoga_wasm_base64_esm_default, Align, BoxSizing, Dimension, Direction, Display, Edge, Errata, ExperimentalFeature, FlexDirection, Gutter, Justify, LogLevel, MeasureMode, NodeType, Overflow, PositionType, Unit, Wrap, constants5, YGEnums_default, Yoga, src_default, VALID_BORDER_STYLES, BorderChars, BorderCharArrays, KeyHandler, InternalKeyHandler, CSS_COLOR_NAMES, block_default, shade_default, slick_default, tiny_default, huge_default, grid_default, pallet_default, fonts, parsedFonts, TextAttributes, ATTRIBUTE_BASE_BITS = 8, ATTRIBUTE_BASE_MASK = 255, DebugOverlayCorner, TargetChannel, ATTRIBUTE_BASE_MASK2 = 255, LINK_ID_SHIFT = 8, LINK_ID_PAYLOAD_MASK = 16777215, BrandedStyledText, StyledText, black = (input) => applyStyle(input, { fg: "black" }), red = (input) => applyStyle(input, { fg: "red" }), green = (input) => applyStyle(input, { fg: "green" }), yellow = (input) => applyStyle(input, { fg: "yellow" }), blue = (input) => applyStyle(input, { fg: "blue" }), magenta = (input) => applyStyle(input, { fg: "magenta" }), cyan = (input) => applyStyle(input, { fg: "cyan" }), white = (input) => applyStyle(input, { fg: "white" }), brightBlack = (input) => applyStyle(input, { fg: "brightBlack" }), brightRed = (input) => applyStyle(input, { fg: "brightRed" }), brightGreen = (input) => applyStyle(input, { fg: "brightGreen" }), brightYellow = (input) => applyStyle(input, { fg: "brightYellow" }), brightBlue = (input) => applyStyle(input, { fg: "brightBlue" }), brightMagenta = (input) => applyStyle(input, { fg: "brightMagenta" }), brightCyan = (input) => applyStyle(input, { fg: "brightCyan" }), brightWhite = (input) => applyStyle(input, { fg: "brightWhite" }), bgBlack = (input) => applyStyle(input, { bg: "black" }), bgRed = (input) => applyStyle(input, { bg: "red" }), bgGreen = (input) => applyStyle(input, { bg: "green" }), bgYellow = (input) => applyStyle(input, { bg: "yellow" }), bgBlue = (input) => applyStyle(input, { bg: "blue" }), bgMagenta = (input) => applyStyle(input, { bg: "magenta" }), bgCyan = (input) => applyStyle(input, { bg: "cyan" }), bgWhite = (input) => applyStyle(input, { bg: "white" }), bold = (input) => applyStyle(input, { bold: true }), italic = (input) => applyStyle(input, { italic: true }), underline = (input) => applyStyle(input, { underline: true }), strikethrough = (input) => applyStyle(input, { strikethrough: true }), dim2 = (input) => applyStyle(input, { dim: true }), reverse = (input) => applyStyle(input, { reverse: true }), blink = (input) => applyStyle(input, { blink: true }), fg = (color) => (input) => applyStyle(input, { fg: color }), bg = (color) => (input) => applyStyle(input, { bg: color }), link = (url2) => (input) => {
   const chunk = typeof input === "object" && "__isChunk" in input ? input : {
     __isChunk: true,
     text: String(input)
@@ -142859,7 +143907,7 @@ var init_index_vy1rm1x3 = __esm(async () => {
         worker_path = this.options.workerPath;
       } else {
         worker_path = new URL("./parser.worker.js", import.meta.url).href;
-        if (!existsSync53(resolve210(import.meta.dirname, "parser.worker.js"))) {
+        if (!existsSync54(resolve210(import.meta.dirname, "parser.worker.js"))) {
           worker_path = new URL("./parser.worker.ts", import.meta.url).href;
         }
       }
@@ -152734,7 +153782,7 @@ var init_index_dg6qsc3m = __esm(async () => {
     envRegistry: () => envRegistry,
     env: () => env,
     engine: () => engine,
-    dim: () => dim,
+    dim: () => dim2,
     detectLinks: () => detectLinks,
     delegate: () => delegate,
     decodePasteBytes: () => decodePasteBytes,
@@ -189142,7 +190190,7 @@ function offlineBrokerHealth(baseUrl, error48) {
   };
 }
 var DEFAULT_MONITOR_CHANNEL = "shared", DEFAULT_MONITOR_MESSAGE_LIMIT = 64, SCOUT_MONITOR_ASSISTANT_ID = "scoutbot";
-var init_service10 = __esm(() => {
+var init_service11 = __esm(() => {
   init_service3();
   init_service8();
   init_service5();
@@ -192007,7 +193055,7 @@ var import_react13, C2, MONITOR_TABS, operatorName, MESSAGE_COMPOSER_KEY_BINDING
 var init_app2 = __esm(async () => {
   init_src();
   init_user_config();
-  init_service10();
+  init_service11();
   init_service3();
   init_paths();
   init_view2();
@@ -192223,7 +193271,7 @@ var exports_up = {};
 __export(exports_up, {
   runUpCommand: () => runUpCommand
 });
-import { existsSync as existsSync54 } from "fs";
+import { existsSync as existsSync55 } from "fs";
 import { resolve as resolve40 } from "path";
 function looksLikePath(value) {
   return value.includes("/") || value.startsWith(".") || value.startsWith("~");
@@ -192332,7 +193380,7 @@ async function runUpCommand(context, args) {
     throw new ScoutCliError(`usage: scout up <name|path> [--name <alias>] [--harness <${SUPPORTED_LOCAL_AGENT_HARNESSES.join("|")}>] [--provider <provider>] [--model <model>] [--reasoning-effort <effort>] [--permission-profile <${formatScoutPermissionProfiles()}>]`);
   }
   let projectPath;
-  if (looksLikePath(target2) || existsSync54(resolve40(target2))) {
+  if (looksLikePath(target2) || existsSync55(resolve40(target2))) {
     projectPath = resolve40(target2);
   } else {
     const resolved = await resolveLocalAgentByName(target2);
@@ -192656,13 +193704,13 @@ __export(exports_whoami, {
   renderWhoAmICommandHelp: () => renderWhoAmICommandHelp
 });
 import { access as access2 } from "fs/promises";
-import { join as join68 } from "path";
+import { join as join69 } from "path";
 async function resolveProjectAgentsMd(projectRoot) {
   if (!projectRoot) {
     return null;
   }
   for (const candidate of PROJECT_AGENT_INSTRUCTION_CANDIDATES) {
-    const path6 = join68(projectRoot, candidate);
+    const path6 = join69(projectRoot, candidate);
     try {
       await access2(path6);
       return path6;
@@ -192742,10 +193790,10 @@ var init_whoami = __esm(() => {
 });
 
 // ../../apps/desktop/src/cli/main.ts
-import { existsSync as existsSync55, statSync as statSync14 } from "fs";
-import { join as join70 } from "path";
+import { existsSync as existsSync56, statSync as statSync15 } from "fs";
+import { join as join71 } from "path";
 import { spawnSync as spawnSync12 } from "child_process";
-import { homedir as homedir48 } from "os";
+import { homedir as homedir49 } from "os";
 
 // ../../apps/desktop/src/cli/argv.ts
 function parseScoutArgv(argv) {
@@ -192863,7 +193911,7 @@ async function loadScoutCommandHandler(name2) {
     case "statusline":
       return (await Promise.resolve().then(() => (init_statusline(), exports_statusline))).runStatuslineCommand;
     case "tail":
-      return (await Promise.resolve().then(() => (init_tail(), exports_tail))).runTailCommand;
+      return (await Promise.resolve().then(() => (init_tail2(), exports_tail))).runTailCommand;
     case "tui":
       return (await init_tui().then(() => exports_tui)).runTuiCommand;
     case "up":
@@ -193087,7 +194135,7 @@ init_options();
 // ../../apps/desktop/src/cli/broker-update.ts
 import { randomUUID as randomUUID7 } from "crypto";
 import { mkdir as mkdir15, readFile as readFile18, rename, rm as rm6, stat as stat6, writeFile as writeFile12 } from "fs/promises";
-import { basename as basename26, dirname as dirname36, join as join69 } from "path";
+import { basename as basename26, dirname as dirname36, join as join70 } from "path";
 
 // ../../apps/desktop/src/cli/runtime-freshness.ts
 function isRecord16(value) {
@@ -193159,7 +194207,7 @@ function lockPayloadsMatch(left, right) {
 }
 async function readLockPayload2(lockPath) {
   try {
-    const raw2 = JSON.parse(await readFile18(join69(lockPath, "owner.json"), "utf8"));
+    const raw2 = JSON.parse(await readFile18(join70(lockPath, "owner.json"), "utf8"));
     if (Number.isInteger(raw2.pid) && typeof raw2.startedAt === "number" && Number.isFinite(raw2.startedAt) && typeof raw2.token === "string" && raw2.token.length > 0) {
       return {
         pid: raw2.pid,
@@ -193203,7 +194251,7 @@ async function tryCreateOwnedLock(lockPath) {
   try {
     await mkdir15(lockPath, { mode: 448 });
     created = true;
-    await writeFile12(join69(lockPath, "owner.json"), `${JSON.stringify(owner)}
+    await writeFile12(join70(lockPath, "owner.json"), `${JSON.stringify(owner)}
 `, { encoding: "utf8", flag: "wx", mode: 384 });
   } catch (error48) {
     if (created) {
@@ -193227,7 +194275,7 @@ async function tryCreateOwnedLock(lockPath) {
   };
 }
 async function tryReclaimDeadLock(lockPath, observedOwner) {
-  const reclaimPath = join69(dirname36(lockPath), BROKER_UPDATE_RECLAIM_DIRECTORY);
+  const reclaimPath = join70(dirname36(lockPath), BROKER_UPDATE_RECLAIM_DIRECTORY);
   const reclaimGuard = await tryCreateOwnedLock(reclaimPath);
   if (!reclaimGuard.acquired) {
     return false;
@@ -193298,7 +194346,7 @@ async function acquireBrokerUpdateLock(lockPath, waitTimeoutMs) {
 async function writeCliMtimeCheckpointAtomically(checkpointPath, mtime) {
   const checkpointDirectory = dirname36(checkpointPath);
   await mkdir15(checkpointDirectory, { recursive: true });
-  const temporaryPath = join69(checkpointDirectory, `.${basename26(checkpointPath)}.${process.pid}.${randomUUID7()}.tmp`);
+  const temporaryPath = join70(checkpointDirectory, `.${basename26(checkpointPath)}.${process.pid}.${randomUUID7()}.tmp`);
   try {
     await writeFile12(temporaryPath, String(mtime), {
       encoding: "utf8",
@@ -193333,7 +194381,7 @@ async function ensureBrokerUptodate(options) {
   const report = options.report ?? (() => {
     return;
   });
-  const lockPath = join69(dirname36(options.checkpointPath), BROKER_UPDATE_LOCK_DIRECTORY);
+  const lockPath = join70(dirname36(options.checkpointPath), BROKER_UPDATE_LOCK_DIRECTORY);
   let lock;
   try {
     lock = await acquireBrokerUpdateLock(lockPath, options.lockWaitTimeoutMs ?? BROKER_UPDATE_LOCK_WAIT_MS);
@@ -193447,21 +194495,21 @@ var _scoutBinPath = null;
 function getScoutBinPath() {
   if (_scoutBinPath)
     return _scoutBinPath;
-  _scoutBinPath = join70(homedir48(), ".bun", "bin", "scout");
-  if (!existsSync55(_scoutBinPath)) {
+  _scoutBinPath = join71(homedir49(), ".bun", "bin", "scout");
+  if (!existsSync56(_scoutBinPath)) {
     _scoutBinPath = spawnSync12("which", ["scout"], { encoding: "utf8" }).stdout.trim();
   }
   return _scoutBinPath;
 }
 function readCurrentCliMtime() {
   try {
-    return normalizeCliBinaryMtimeMs(statSync14(getScoutBinPath()).mtimeMs);
+    return normalizeCliBinaryMtimeMs(statSync15(getScoutBinPath()).mtimeMs);
   } catch {
     return null;
   }
 }
 function cliMtimeCheckpointPath() {
-  return join70(homedir48(), ".scout", "cli-mtime");
+  return join71(homedir49(), ".scout", "cli-mtime");
 }
 try {
   await main3();