@openscout/scout 0.2.86 → 0.2.90

package/dist/scout-control-plane-web.mjs

@@ -10433,214 +10433,6 @@ var init_broker = __esm(() => {
   init_registry();
 });
 
-// packages/runtime/src/node-identity.ts
-import {
-  createHash,
-  createPrivateKey,
-  createPublicKey,
-  generateKeyPairSync,
-  randomBytes,
-  sign,
-  verify
-} from "crypto";
-import {
-  chmodSync,
-  existsSync as existsSync3,
-  mkdirSync as mkdirSync2,
-  readFileSync,
-  renameSync,
-  rmSync as rmSync2,
-  writeFileSync as writeFileSync2
-} from "fs";
-import { dirname as dirname2, join as join4 } from "path";
-function stripBonjourCollisionSuffix(value) {
-  if (!value || typeof value !== "string")
-    return "";
-  let trimmed = value.trim();
-  const isDotLocal = /\.local\.?$/i.test(trimmed);
-  if (isDotLocal) {
-    trimmed = trimmed.replace(/\.local\.?$/i, "");
-  }
-  const isHyphenLocalOpenscout = /-local-openscout$/i.test(trimmed);
-  const isHyphenLocal = !isHyphenLocalOpenscout && /-local$/i.test(trimmed);
-  if (isHyphenLocalOpenscout) {
-    trimmed = trimmed.replace(/-local-openscout$/i, "");
-  } else if (isHyphenLocal) {
-    trimmed = trimmed.replace(/-local$/i, "");
-  }
-  if (!isDotLocal && !isHyphenLocalOpenscout && !isHyphenLocal) {
-    return trimmed;
-  }
-  trimmed = trimmed.replace(/(?<=[a-zA-Z].*?)(?:-\d+)+$/, "");
-  if (isDotLocal)
-    return `${trimmed}.local`;
-  if (isHyphenLocalOpenscout)
-    return `${trimmed}-local-openscout`;
-  if (isHyphenLocal)
-    return `${trimmed}-local`;
-  return trimmed;
-}
-function nodeIdentityPath(supportDirectory) {
-  const dir = supportDirectory ?? resolveOpenScoutSupportPaths().supportDirectory;
-  return join4(dir, NODE_IDENTITY_FILE);
-}
-function loadOrCreateNodeIdentity(supportDirectory) {
-  const path = nodeIdentityPath(supportDirectory);
-  if (existsSync3(path)) {
-    return readAndValidateNodeIdentity(path);
-  }
-  return createNodeIdentity(supportDirectory);
-}
-function readStableNodeQualifier(supportDirectory) {
-  const path = nodeIdentityPath(supportDirectory);
-  const cached = stableNodeQualifierCache.get(path);
-  if (cached) {
-    return cached;
-  }
-  if (!existsSync3(path)) {
-    return null;
-  }
-  const nodeQualifier = normalizeNodeQualifier(readAndValidateNodeIdentity(path).nodeQualifier);
-  if (nodeQualifier) {
-    stableNodeQualifierCache.set(path, nodeQualifier);
-  }
-  return nodeQualifier || null;
-}
-function readAndValidateNodeIdentity(path) {
-  let parsed;
-  try {
-    parsed = JSON.parse(readFileSync(path, "utf8"));
-  } catch {
-    throw new Error(`Corrupt node identity at ${path}; remove it to generate a fresh one.`);
-  }
-  if (parsed.version !== 1 || !parsed.publicKey || !parsed.privateKey) {
-    throw new Error(`Corrupt node identity at ${path}; remove it to generate a fresh one.`);
-  }
-  if (parsed.nodeQualifier !== undefined && normalizePersistedNodeQualifier(parsed.nodeQualifier) !== parsed.nodeQualifier) {
-    throw new Error(`Corrupt node identity at ${path}; remove it to generate a fresh one.`);
-  }
-  try {
-    const derived = createPublicKey(importPrivateKey(parsed.privateKey)).export({ type: "spki", format: "der" }).toString("base64");
-    if (derived !== parsed.publicKey) {
-      throw new Error("mismatch");
-    }
-  } catch {
-    throw new Error(`Node identity at ${path} has mismatched or invalid keys; remove it to generate a fresh one.`);
-  }
-  return parsed;
-}
-function normalizePersistedNodeQualifier(value) {
-  return typeof value === "string" ? value.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/-+/g, "-").replace(/^-+|-+$/g, "") : "";
-}
-function normalizeNodeQualifier(value) {
-  return stripBonjourCollisionSuffix(normalizePersistedNodeQualifier(value));
-}
-function createNodeIdentity(supportDirectory) {
-  if (!supportDirectory) {
-    assertTestIsolatedUserData("write the node identity", "OPENSCOUT_SUPPORT_DIRECTORY");
-  }
-  const path = nodeIdentityPath(supportDirectory);
-  const { publicKey, privateKey } = generateKeyPairSync("ed25519");
-  const identity = {
-    version: 1,
-    publicKey: publicKey.export({ type: "spki", format: "der" }).toString("base64"),
-    privateKey: privateKey.export({ type: "pkcs8", format: "der" }).toString("base64"),
-    createdAt: Date.now()
-  };
-  mkdirSync2(dirname2(path), { recursive: true });
-  try {
-    writeFileSync2(path, `${JSON.stringify(identity, null, 2)}
-`, { encoding: "utf8", mode: 384, flag: "wx" });
-  } catch (error) {
-    if (error.code === "EEXIST") {
-      return readAndValidateNodeIdentity(path);
-    }
-    throw error;
-  }
-  try {
-    chmodSync(path, 384);
-  } catch {}
-  return identity;
-}
-function nodeKeyId(publicKeyBase64) {
-  return createHash("sha256").update(Buffer.from(publicKeyBase64, "base64")).digest("hex");
-}
-function nodeFingerprint(publicKeyBase64) {
-  const digest = createHash("sha256").update(Buffer.from(publicKeyBase64, "base64")).digest();
-  const encoded = base32Encode(digest.subarray(0, 10)).toLowerCase();
-  return `${NODE_FINGERPRINT_PREFIX}:${encoded.slice(0, 4)}-${encoded.slice(4, 8)}`;
-}
-function signNodePayload(identity, payload) {
-  const key = importPrivateKey(identity.privateKey);
-  return sign(null, typeof payload === "string" ? Buffer.from(payload, "utf8") : payload, key).toString("base64");
-}
-function verifyNodeSignature(publicKeyBase64, payload, signatureBase64) {
-  try {
-    const key = importPublicKey(publicKeyBase64);
-    return verify(null, typeof payload === "string" ? Buffer.from(payload, "utf8") : payload, key, Buffer.from(signatureBase64, "base64"));
-  } catch {
-    return false;
-  }
-}
-function canonicalJson(value) {
-  if (value === null || typeof value !== "object") {
-    return JSON.stringify(value);
-  }
-  if (Array.isArray(value)) {
-    return `[${value.map(canonicalJson).join(",")}]`;
-  }
-  const record2 = value;
-  const keys = Object.keys(record2).sort();
-  return `{${keys.map((key) => `${JSON.stringify(key)}:${canonicalJson(record2[key])}`).join(",")}}`;
-}
-function verifySignedNodeCard(card, now = Date.now()) {
-  if (nodeKeyId(card.publicKey) !== card.keyId) {
-    return false;
-  }
-  if (nodeFingerprint(card.publicKey) !== card.fingerprint) {
-    return false;
-  }
-  if (!Number.isFinite(card.expiresAt) || card.expiresAt <= now) {
-    return false;
-  }
-  if (card.tls !== undefined) {
-    if (typeof card.tls !== "object" || card.tls === null || typeof card.tls.spkiFingerprint !== "string" || !/^[0-9a-f]{64}$/.test(card.tls.spkiFingerprint)) {
-      return false;
-    }
-  }
-  const { signature, ...unsigned } = card;
-  return verifyNodeSignature(card.publicKey, canonicalJson(unsigned), signature);
-}
-function base32Encode(input) {
-  let bits = 0;
-  let value = 0;
-  let output = "";
-  for (const byte of input) {
-    value = value << 8 | byte;
-    bits += 8;
-    while (bits >= 5) {
-      output += BASE32_ALPHABET[value >>> bits - 5 & 31];
-      bits -= 5;
-    }
-  }
-  if (bits > 0) {
-    output += BASE32_ALPHABET[value << 5 - bits & 31];
-  }
-  return output;
-}
-function importPrivateKey(privateKeyBase64) {
-  return createPrivateKey({ key: Buffer.from(privateKeyBase64, "base64"), format: "der", type: "pkcs8" });
-}
-function importPublicKey(publicKeyBase64) {
-  return createPublicKey({ key: Buffer.from(publicKeyBase64, "base64"), format: "der", type: "spki" });
-}
-var NODE_IDENTITY_FILE = "node-identity.json", NODE_FINGERPRINT_PREFIX = "osc1", NODE_CARD_TTL_MS, stableNodeQualifierCache, BASE32_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
-var init_node_identity = __esm(() => {
-  init_support_paths();
-  NODE_CARD_TTL_MS = 24 * 60 * 60 * 1000;
-  stableNodeQualifierCache = new Map;
-});
-
 // node_modules/.bun/drizzle-orm@0.45.2+e80f9ee8788b3855/node_modules/drizzle-orm/bun-sqlite/session.js
 var SQLiteBunSession, SQLiteBunTransaction, PreparedQuery;
 var init_session2 = __esm(() => {
@@ -10997,7 +10789,6 @@ var init_sqlite_adapter = __esm(() => {
 var init_control_plane_migrations = __esm(() => {
   init_schema();
   init_support_paths();
-  init_node_identity();
 });
 
 // packages/runtime/src/conversations/api.ts
@@ -12029,7 +11820,7 @@ var init_model_window_registry = __esm(() => {
 });
 
 // packages/agent-sessions/src/history.ts
-import { basename, dirname as dirname3 } from "path";
+import { basename, dirname as dirname2 } from "path";
 function decodeClaudeProjectsSlug(name) {
   if (!name || !name.startsWith("-")) {
     return null;
@@ -12041,7 +11832,7 @@ function decodeClaudeProjectsSlug(name) {
   return `/${tail.replace(/-/g, "/")}`;
 }
 function inferClaudeHistoryCwd(path) {
-  const parent = basename(dirname3(path));
+  const parent = basename(dirname2(path));
   return decodeClaudeProjectsSlug(parent);
 }
 function deriveHistoryName(path) {
@@ -12049,7 +11840,7 @@ function deriveHistoryName(path) {
   if (claudeCwd) {
     return basename(claudeCwd) || claudeCwd;
   }
-  const parent = basename(dirname3(path));
+  const parent = basename(dirname2(path));
   return parent || basename(path) || "History Session";
 }
 function normalizeTimestamp(value) {
@@ -15185,7 +14976,6 @@ var init_budget_observations = __esm(() => {
 // packages/runtime/src/sqlite-store.ts
 var RUNTIME_SESSION_RETENTION_MS;
 var init_sqlite_store = __esm(() => {
-  init_node_identity();
   init_registry();
   init_drizzle_client();
   init_sqlite_adapter();
@@ -15196,6 +14986,184 @@ var init_sqlite_store = __esm(() => {
   RUNTIME_SESSION_RETENTION_MS = 30 * 24 * 60 * 60 * 1000;
 });
 
+// packages/runtime/src/node-identity.ts
+import {
+  createHash,
+  createPrivateKey,
+  createPublicKey,
+  generateKeyPairSync,
+  randomBytes,
+  sign,
+  verify
+} from "crypto";
+import {
+  chmodSync,
+  existsSync as existsSync3,
+  mkdirSync as mkdirSync2,
+  readFileSync,
+  renameSync,
+  rmSync as rmSync2,
+  writeFileSync as writeFileSync2
+} from "fs";
+import { dirname as dirname3, join as join4 } from "path";
+function nodeIdentityPath(supportDirectory) {
+  const dir = supportDirectory ?? resolveOpenScoutSupportPaths().supportDirectory;
+  return join4(dir, NODE_IDENTITY_FILE);
+}
+function loadOrCreateNodeIdentity(supportDirectory) {
+  const path = nodeIdentityPath(supportDirectory);
+  if (existsSync3(path)) {
+    return readAndValidateNodeIdentity(path);
+  }
+  return createNodeIdentity(supportDirectory);
+}
+function readStableNodeQualifier(supportDirectory) {
+  const path = nodeIdentityPath(supportDirectory);
+  const cached = stableNodeQualifierCache.get(path);
+  if (cached) {
+    return cached;
+  }
+  if (!existsSync3(path)) {
+    return null;
+  }
+  const nodeQualifier = normalizeNodeQualifier(readAndValidateNodeIdentity(path).nodeQualifier);
+  if (nodeQualifier) {
+    stableNodeQualifierCache.set(path, nodeQualifier);
+  }
+  return nodeQualifier || null;
+}
+function readAndValidateNodeIdentity(path) {
+  let parsed;
+  try {
+    parsed = JSON.parse(readFileSync(path, "utf8"));
+  } catch {
+    throw new Error(`Corrupt node identity at ${path}; remove it to generate a fresh one.`);
+  }
+  if (parsed.version !== 1 || !parsed.publicKey || !parsed.privateKey) {
+    throw new Error(`Corrupt node identity at ${path}; remove it to generate a fresh one.`);
+  }
+  if (parsed.nodeQualifier !== undefined && normalizeNodeQualifier(parsed.nodeQualifier) !== parsed.nodeQualifier) {
+    throw new Error(`Corrupt node identity at ${path}; remove it to generate a fresh one.`);
+  }
+  try {
+    const derived = createPublicKey(importPrivateKey(parsed.privateKey)).export({ type: "spki", format: "der" }).toString("base64");
+    if (derived !== parsed.publicKey) {
+      throw new Error("mismatch");
+    }
+  } catch {
+    throw new Error(`Node identity at ${path} has mismatched or invalid keys; remove it to generate a fresh one.`);
+  }
+  return parsed;
+}
+function normalizeNodeQualifier(value) {
+  return typeof value === "string" ? value.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/-+/g, "-").replace(/^-+|-+$/g, "") : "";
+}
+function createNodeIdentity(supportDirectory) {
+  if (!supportDirectory) {
+    assertTestIsolatedUserData("write the node identity", "OPENSCOUT_SUPPORT_DIRECTORY");
+  }
+  const path = nodeIdentityPath(supportDirectory);
+  const { publicKey, privateKey } = generateKeyPairSync("ed25519");
+  const identity = {
+    version: 1,
+    publicKey: publicKey.export({ type: "spki", format: "der" }).toString("base64"),
+    privateKey: privateKey.export({ type: "pkcs8", format: "der" }).toString("base64"),
+    createdAt: Date.now()
+  };
+  mkdirSync2(dirname3(path), { recursive: true });
+  try {
+    writeFileSync2(path, `${JSON.stringify(identity, null, 2)}
+`, { encoding: "utf8", mode: 384, flag: "wx" });
+  } catch (error) {
+    if (error.code === "EEXIST") {
+      return readAndValidateNodeIdentity(path);
+    }
+    throw error;
+  }
+  try {
+    chmodSync(path, 384);
+  } catch {}
+  return identity;
+}
+function nodeKeyId(publicKeyBase64) {
+  return createHash("sha256").update(Buffer.from(publicKeyBase64, "base64")).digest("hex");
+}
+function nodeFingerprint(publicKeyBase64) {
+  const digest = createHash("sha256").update(Buffer.from(publicKeyBase64, "base64")).digest();
+  const encoded = base32Encode(digest.subarray(0, 10)).toLowerCase();
+  return `${NODE_FINGERPRINT_PREFIX}:${encoded.slice(0, 4)}-${encoded.slice(4, 8)}`;
+}
+function signNodePayload(identity, payload) {
+  const key = importPrivateKey(identity.privateKey);
+  return sign(null, typeof payload === "string" ? Buffer.from(payload, "utf8") : payload, key).toString("base64");
+}
+function verifyNodeSignature(publicKeyBase64, payload, signatureBase64) {
+  try {
+    const key = importPublicKey(publicKeyBase64);
+    return verify(null, typeof payload === "string" ? Buffer.from(payload, "utf8") : payload, key, Buffer.from(signatureBase64, "base64"));
+  } catch {
+    return false;
+  }
+}
+function canonicalJson(value) {
+  if (value === null || typeof value !== "object") {
+    return JSON.stringify(value);
+  }
+  if (Array.isArray(value)) {
+    return `[${value.map(canonicalJson).join(",")}]`;
+  }
+  const record2 = value;
+  const keys = Object.keys(record2).sort();
+  return `{${keys.map((key) => `${JSON.stringify(key)}:${canonicalJson(record2[key])}`).join(",")}}`;
+}
+function verifySignedNodeCard(card, now = Date.now()) {
+  if (nodeKeyId(card.publicKey) !== card.keyId) {
+    return false;
+  }
+  if (nodeFingerprint(card.publicKey) !== card.fingerprint) {
+    return false;
+  }
+  if (!Number.isFinite(card.expiresAt) || card.expiresAt <= now) {
+    return false;
+  }
+  if (card.tls !== undefined) {
+    if (typeof card.tls !== "object" || card.tls === null || typeof card.tls.spkiFingerprint !== "string" || !/^[0-9a-f]{64}$/.test(card.tls.spkiFingerprint)) {
+      return false;
+    }
+  }
+  const { signature, ...unsigned } = card;
+  return verifyNodeSignature(card.publicKey, canonicalJson(unsigned), signature);
+}
+function base32Encode(input) {
+  let bits = 0;
+  let value = 0;
+  let output = "";
+  for (const byte of input) {
+    value = value << 8 | byte;
+    bits += 8;
+    while (bits >= 5) {
+      output += BASE32_ALPHABET[value >>> bits - 5 & 31];
+      bits -= 5;
+    }
+  }
+  if (bits > 0) {
+    output += BASE32_ALPHABET[value << 5 - bits & 31];
+  }
+  return output;
+}
+function importPrivateKey(privateKeyBase64) {
+  return createPrivateKey({ key: Buffer.from(privateKeyBase64, "base64"), format: "der", type: "pkcs8" });
+}
+function importPublicKey(publicKeyBase64) {
+  return createPublicKey({ key: Buffer.from(publicKeyBase64, "base64"), format: "der", type: "spki" });
+}
+var NODE_IDENTITY_FILE = "node-identity.json", NODE_FINGERPRINT_PREFIX = "osc1", NODE_CARD_TTL_MS, stableNodeQualifierCache, BASE32_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
+var init_node_identity = __esm(() => {
+  init_support_paths();
+  NODE_CARD_TTL_MS = 24 * 60 * 60 * 1000;
+  stableNodeQualifierCache = new Map;
+});
+
 // packages/runtime/src/mesh-peer-auth.ts
 import { createHash as createHash2, randomBytes as randomBytes2 } from "crypto";
 function assertNoNewlines(component, name) {
@@ -32764,18 +32732,15 @@ import {
   renameSync as renameSync2,
   writeFileSync as writeFileSync3
 } from "fs";
-import { randomBytes as randomBytes4 } from "crypto";
 import { homedir as homedir4, hostname as osHostname } from "os";
 import { dirname as dirname4, join as join6 } from "path";
 function normalizeLocalHostnameLabel(value) {
-  const stripped = value ? stripBonjourCollisionSuffix(value) : value;
-  const firstLabel = stripped?.trim().replace(/\.local\.?$/i, "").split(".").find((part) => part.trim().length > 0)?.trim();
+  const firstLabel = value?.trim().replace(/\.local\.?$/i, "").split(".").find((part) => part.trim().length > 0)?.trim();
   const normalized = firstLabel?.toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").replace(/-{2,}/g, "-");
   return normalized || "localhost";
 }
 function normalizeLocalHostname(value) {
-  const stripped = value ? stripBonjourCollisionSuffix(value) : value;
-  const trimmed = stripped?.trim().replace(/\.$/, "").toLowerCase();
+  const trimmed = value?.trim().replace(/\.$/, "").toLowerCase();
   const labels = trimmed?.split(".").map((label) => label.trim().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").replace(/-{2,}/g, "-")).filter(Boolean);
   return labels && labels.length > 0 ? labels.join(".") : "localhost";
 }
@@ -32901,32 +32866,9 @@ function writeLocalConfig(config) {
 function localConfigExists() {
   return existsSync6(localConfigPath());
 }
-function resolveWebAuthToken(env = process.env) {
-  const envToken = env.OPENSCOUT_WEB_AUTH_TOKEN?.trim();
-  if (envToken)
-    return envToken;
-  const supportDir = env.OPENSCOUT_SUPPORT_DIRECTORY ?? join6(homedir4(), "Library", "Application Support", "OpenScout");
-  const tokenPath = join6(supportDir, "runtime", "web-auth-token");
-  try {
-    if (existsSync6(tokenPath)) {
-      const stored = readFileSync4(tokenPath, "utf8").trim();
-      if (stored)
-        return stored;
-    }
-  } catch {}
-  const generated = randomBytes4(32).toString("base64url");
-  try {
-    if (false) {}
-    mkdirSync3(dirname4(tokenPath), { recursive: true });
-    writeFileSync3(tokenPath, `${generated}
-`, { encoding: "utf8", mode: 384 });
-  } catch {}
-  return generated;
-}
 var LOCAL_CONFIG_VERSION = 1, DEFAULT_SCOUT_WEB_PORTAL_HOST = "scout.local", DEFAULT_SCOUT_WEB_DEV_HOST, OPENSCOUT_PORTS, DEFAULT_LOCAL_CONFIG;
 var init_local_config = __esm(() => {
   init_support_paths();
-  init_node_identity();
   DEFAULT_SCOUT_WEB_DEV_HOST = `dev.${DEFAULT_SCOUT_WEB_PORTAL_HOST}`;
   OPENSCOUT_PORTS = {
     broker: 43110,
@@ -35361,7 +35303,7 @@ var init_mesh_sas = __esm(() => {
 });
 
 // packages/runtime/src/mesh-trust-enrollment.ts
-import { randomBytes as randomBytes5 } from "crypto";
+import { randomBytes as randomBytes4 } from "crypto";
 
 class TrustEnrollmentService {
   local;
@@ -35381,11 +35323,11 @@ class TrustEnrollmentService {
       throw new TrustEnrollmentError("self-enrollment", "cannot enroll with self");
     }
     const session3 = {
-      id: randomBytes5(9).toString("base64url"),
+      id: randomBytes4(9).toString("base64url"),
       state: "pending",
       remoteCard: input.card,
       commitment: input.commitment,
-      responderNonce: randomBytes5(32),
+      responderNonce: randomBytes4(32),
       createdAt: now,
       expiresAt: now + this.ttlMs
     };
@@ -58289,6 +58231,7 @@ var init_service = __esm(() => {
 });
 
 // packages/runtime/src/pairing-supervisor.ts
+import { execFileSync as execFileSync6 } from "child_process";
 import {
   existsSync as existsSync29,
   mkdirSync as mkdirSync9,
@@ -58306,84 +58249,61 @@ function resolveScoutPairingSupervisorPaths(env = process.env) {
     rootDir,
     intentPath: join34(rootDir, SCOUT_PAIRING_SUPERVISOR_INTENT_FILE),
     runtimePidPath: join34(rootDir, SCOUT_PAIRING_RUNTIME_PID_FILE),
+    runtimeOwnerPath: join34(rootDir, SCOUT_PAIRING_RUNTIME_OWNER_FILE),
     supervisorPidPath: join34(rootDir, SCOUT_PAIRING_SUPERVISOR_PID_FILE)
   };
 }
-function readScoutPairingSupervisorIntent(intentPath = resolveScoutPairingSupervisorPaths().intentPath) {
-  const intent = readPairingIntent(intentPath);
-  return {
-    desiredState: intent.desiredState === "running" || intent.desiredState === "stopped" ? intent.desiredState : null,
-    restartGeneration: validRestartGeneration(intent.restartGeneration)
-  };
-}
-function updateScoutPairingSupervisorIntent(action, intentPath = resolveScoutPairingSupervisorPaths().intentPath) {
-  const intent = readPairingIntent(intentPath);
-  intent.desiredState = action === "stop" ? "stopped" : "running";
-  if (action === "restart") {
-    intent.restartGeneration = Math.max(Date.now(), validRestartGeneration(intent.restartGeneration) + 1);
+function inspectScoutPairingProcess(pid) {
+  if (!Number.isInteger(pid) || pid <= 0)
+    return null;
+  try {
+    const output = execFileSync6("ps", ["-p", String(pid), "-o", "lstart=", "-o", "command="], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"]
+    }).trim();
+    const startedAt = output.slice(0, 24).trim().replace(/\s+/g, " ");
+    const command = output.slice(24).trim();
+    return startedAt && command ? { pid, startedAt, command } : null;
+  } catch {
+    return null;
   }
-  writePairingIntent(intentPath, intent);
-  return readScoutPairingSupervisorIntent(intentPath);
 }
-function readScoutPairingProcessPid(path) {
-  if (!existsSync29(path))
+function readScoutPairingRuntimeOwner(ownerPath = resolveScoutPairingSupervisorPaths().runtimeOwnerPath) {
+  if (!existsSync29(ownerPath))
     return null;
   try {
-    const pid = Number.parseInt(readFileSync14(path, "utf8").trim(), 10);
-    return Number.isInteger(pid) && pid > 0 ? pid : null;
+    const value = JSON.parse(readFileSync14(ownerPath, "utf8"));
+    return value.version === 1 && Number.isInteger(value.pid) && (value.pid ?? 0) > 0 && typeof value.token === "string" && value.token.length >= 16 && typeof value.startedAt === "string" && value.startedAt.length > 0 && typeof value.command === "string" && value.command.includes(SCOUT_PAIRING_RUNTIME_PROCESS_MARKER) && typeof value.claimedAt === "number" && Number.isFinite(value.claimedAt) ? value : null;
   } catch {
     return null;
   }
 }
-function isScoutPairingProcessRunning(pid) {
-  if (!pid || pid <= 0)
+function isScoutPairingRuntimeOwnerLive(owner, options = {}) {
+  if (!owner || options.expectedToken && owner.token !== options.expectedToken)
+    return false;
+  const current = (options.inspect ?? inspectScoutPairingProcess)(owner.pid);
+  return current !== null && current.startedAt === owner.startedAt && current.command === owner.command && current.command.includes(SCOUT_PAIRING_RUNTIME_PROCESS_MARKER);
+}
+function readLiveScoutPairingRuntimeOwner(ownerPath = resolveScoutPairingSupervisorPaths().runtimeOwnerPath, options = {}) {
+  const owner = readScoutPairingRuntimeOwner(ownerPath);
+  return isScoutPairingRuntimeOwnerLive(owner, options) ? owner : null;
+}
+function signalScoutPairingRuntimeOwner(owner, signal, options = {}) {
+  const ownerPath = options.ownerPath ?? resolveScoutPairingSupervisorPaths().runtimeOwnerPath;
+  const current = readLiveScoutPairingRuntimeOwner(ownerPath, {
+    expectedToken: owner.token,
+    inspect: options.inspect
+  });
+  if (!current || current.pid !== owner.pid)
     return false;
   try {
-    process.kill(pid, 0);
+    (options.kill ?? ((pid, nextSignal) => process.kill(pid, nextSignal)))(owner.pid, signal);
     return true;
-  } catch (error) {
-    return error.code === "EPERM";
-  }
-}
-function readLiveScoutPairingSupervisorPid(supervisorPidPath = resolveScoutPairingSupervisorPaths().supervisorPidPath) {
-  const pid = readScoutPairingProcessPid(supervisorPidPath);
-  return isScoutPairingProcessRunning(pid) ? pid : null;
-}
-function readPairingIntent(intentPath) {
-  if (!existsSync29(intentPath))
-    return {};
-  try {
-    const parsed = JSON.parse(readFileSync14(intentPath, "utf8"));
-    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-      return { desiredState: "stopped" };
-    }
-    const intent = parsed;
-    if (intent.desiredState !== "running" && intent.desiredState !== "stopped") {
-      intent.desiredState = "stopped";
-    }
-    return intent;
   } catch {
-    return { desiredState: "stopped" };
-  }
-}
-function writePairingIntent(intentPath, intent) {
-  mkdirSync9(dirname22(intentPath), { recursive: true });
-  writeFileAtomically(intentPath, `${JSON.stringify(intent, null, 2)}
-`);
-}
-function writeFileAtomically(path, contents) {
-  const temporaryPath = `${path}.${process.pid}.${Date.now()}.tmp`;
-  try {
-    writeFileSync8(temporaryPath, contents);
-    renameSync4(temporaryPath, path);
-  } finally {
-    rmSync4(temporaryPath, { force: true });
+    return false;
   }
 }
-function validRestartGeneration(value) {
-  return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : 0;
-}
-var SCOUT_PAIRING_SUPERVISOR_INTENT_FILE = "supervisor.json", SCOUT_PAIRING_RUNTIME_PID_FILE = "runtime.pid", SCOUT_PAIRING_SUPERVISOR_PID_FILE = "supervisor.pid";
+var SCOUT_PAIRING_SUPERVISOR_INTENT_FILE = "supervisor.json", SCOUT_PAIRING_RUNTIME_PID_FILE = "runtime.pid", SCOUT_PAIRING_RUNTIME_OWNER_FILE = "runtime-owner.json", SCOUT_PAIRING_SUPERVISOR_PID_FILE = "supervisor.pid", SCOUT_PAIRING_RUNTIME_PROCESS_MARKER = "pairing-runtime-controller";
 var init_pairing_supervisor = () => {};
 
 // packages/web/server/pairing.ts
@@ -58629,7 +58549,7 @@ function clearScoutPairingRuntimePid() {
     unlinkSync(runtimePidPath);
   } catch {}
 }
-function isScoutPairingProcessRunning2(pid) {
+function isScoutPairingProcessRunning(pid) {
   if (!pid || !Number.isInteger(pid) || pid <= 0) {
     return false;
   }
@@ -58645,15 +58565,15 @@ function staleScoutPairingRuntimeOwnerPid() {
   if (!pid) {
     return null;
   }
-  return isScoutPairingProcessRunning2(pid) ? null : pid;
+  return isScoutPairingProcessRunning(pid) ? null : pid;
 }
 function isScoutPairingRuntimeRunning() {
   const pid = readScoutPairingRuntimePid();
-  if (isScoutPairingProcessRunning2(pid)) {
+  if (isScoutPairingProcessRunning(pid)) {
     return true;
   }
   const snapshot = readScoutPairingRuntimeSnapshot();
-  return Boolean(snapshot && isScoutPairingProcessRunning2(snapshot.childPid ?? snapshot.pid));
+  return Boolean(snapshot && isScoutPairingProcessRunning(snapshot.childPid ?? snapshot.pid));
 }
 function clearStaleScoutPairingRuntimeFiles() {
   const staleOwnerPid = staleScoutPairingRuntimeOwnerPid();
@@ -58661,7 +58581,7 @@ function clearStaleScoutPairingRuntimeFiles() {
     return;
   }
   const snapshot = readScoutPairingRuntimeSnapshot();
-  if (snapshot && isScoutPairingProcessRunning2(snapshot.childPid ?? snapshot.pid)) {
+  if (snapshot && isScoutPairingProcessRunning(snapshot.childPid ?? snapshot.pid)) {
     return;
   }
   clearScoutPairingRuntimePid();
@@ -58912,10 +58832,11 @@ async function ensureDefaultScoutPairingWorkspaceConfig(currentDirectory) {
     }
   });
 }
-async function waitForScoutPairingProcessExit(pid) {
+async function waitForScoutPairingProcessExit(owner) {
+  const ownerPath = resolveScoutPairingSupervisorPaths().runtimeOwnerPath;
   const startedAt = Date.now();
   while (Date.now() - startedAt < SCOUT_PAIRING_PROCESS_EXIT_TIMEOUT_MS) {
-    if (!isScoutPairingProcessRunning2(pid)) {
+    if (!readLiveScoutPairingRuntimeOwner(ownerPath, { expectedToken: owner.token })) {
       return;
     }
     await sleep2(SCOUT_PAIRING_PROCESS_EXIT_POLL_MS);
@@ -58941,10 +58862,13 @@ async function startScoutPairingRuntime() {
   await sleep2(SCOUT_PAIRING_RUNTIME_BOOTSTRAP_DELAY_MS);
 }
 async function stopScoutPairingRuntime() {
+  const supervisorPaths = resolveScoutPairingSupervisorPaths();
   const pid = readScoutPairingRuntimePid();
-  if (pid && isScoutPairingProcessRunning2(pid)) {
-    process.kill(pid, "SIGTERM");
-    await waitForScoutPairingProcessExit(pid);
+  const owner = readLiveScoutPairingRuntimeOwner(supervisorPaths.runtimeOwnerPath);
+  if (pid && owner?.pid === pid && signalScoutPairingRuntimeOwner(owner, "SIGTERM", {
+    ownerPath: supervisorPaths.runtimeOwnerPath
+  })) {
+    await waitForScoutPairingProcessExit(owner);
   }
 }
 async function restartScoutPairingRuntime() {
@@ -58957,24 +58881,6 @@ async function ensureScoutPairingRuntimeStarted() {
   }
   await startScoutPairingRuntime();
 }
-async function requestPairingActionFromSupervisor(action) {
-  const paths2 = resolveScoutPairingSupervisorPaths();
-  const previousPid = readScoutPairingProcessPid(paths2.runtimePidPath);
-  updateScoutPairingSupervisorIntent(action, paths2.intentPath);
-  const supervisorPid = readLiveScoutPairingSupervisorPid(paths2.supervisorPidPath);
-  if (!supervisorPid)
-    return false;
-  const deadline = Date.now() + SCOUT_PAIRING_SUPERVISOR_ACTION_TIMEOUT_MS;
-  while (Date.now() < deadline) {
-    const currentPid = readScoutPairingProcessPid(paths2.runtimePidPath);
-    const running = isScoutPairingProcessRunning(currentPid);
-    if (action === "stop" ? !running : running && (action !== "restart" || currentPid !== previousPid)) {
-      return true;
-    }
-    await sleep2(SCOUT_PAIRING_PROCESS_EXIT_POLL_MS);
-  }
-  throw new Error(`Scout pairing supervisor ${supervisorPid} did not complete ${action} within ${SCOUT_PAIRING_SUPERVISOR_ACTION_TIMEOUT_MS}ms.`);
-}
 function serializePairingMutation(fn) {
   const next = pairingMutationChain.then(fn);
   pairingMutationChain = next.catch(() => {
@@ -59011,20 +58917,14 @@ async function controlScoutWebPairingService(action, currentDirectory) {
     switch (action) {
       case "start":
         await ensureDefaultScoutPairingWorkspaceConfig(currentDirectory);
-        if (!await requestPairingActionFromSupervisor(action)) {
-          await ensureScoutPairingRuntimeStarted();
-        }
+        await ensureScoutPairingRuntimeStarted();
         break;
       case "stop":
-        if (!await requestPairingActionFromSupervisor(action)) {
-          await stopScoutPairingRuntime();
-        }
+        await stopScoutPairingRuntime();
         break;
       case "restart":
         await ensureDefaultScoutPairingWorkspaceConfig(currentDirectory);
-        if (!await requestPairingActionFromSupervisor(action)) {
-          await restartScoutPairingRuntime();
-        }
+        await restartScoutPairingRuntime();
         break;
     }
     return readScoutPairingState(currentDirectory);
@@ -59044,7 +58944,7 @@ async function decideScoutWebPairingApproval(input, currentDirectory) {
   });
   return readScoutPairingState(currentDirectory);
 }
-var SCOUT_PAIRING_HOME_DIRECTORY = ".scout/pairing", SCOUT_PAIRING_CONFIG_FILE = "config.json", SCOUT_PAIRING_IDENTITY_FILE = "identity.json", SCOUT_PAIRING_TRUSTED_PEERS_FILE = "trusted-peers.json", SCOUT_PAIRING_LOG_FILE = "bridge.log", SCOUT_PAIRING_RUNTIME_STATE_FILE = "runtime.json", SCOUT_PAIRING_RUNTIME_PID_FILE2 = "runtime.pid", SCOUT_PAIRING_DEFAULT_PORT = 7888, SCOUT_PAIRING_LOG_TAIL_LINE_LIMIT = 160, SCOUT_PAIRING_RUNTIME_BOOTSTRAP_DELAY_MS = 350, SCOUT_PAIRING_PROCESS_EXIT_TIMEOUT_MS = 5000, SCOUT_PAIRING_SUPERVISOR_ACTION_TIMEOUT_MS = 8000, SCOUT_PAIRING_PROCESS_EXIT_POLL_MS = 100, SCOUT_PAIRING_COMMAND_LABEL = "openscout-web pair", SCOUT_PAIRING_RUNTIME_VERSION = 1, SCOUT_PAIRING_RUNTIME_SCRIPT = "pairing-runtime-controller.ts", SCOUT_PAIRING_BRIDGE_CONNECT_TIMEOUT_MS = 1500, SCOUT_PAIRING_BRIDGE_REQUEST_TIMEOUT_MS = 2500, pairingMutationChain;
+var SCOUT_PAIRING_HOME_DIRECTORY = ".scout/pairing", SCOUT_PAIRING_CONFIG_FILE = "config.json", SCOUT_PAIRING_IDENTITY_FILE = "identity.json", SCOUT_PAIRING_TRUSTED_PEERS_FILE = "trusted-peers.json", SCOUT_PAIRING_LOG_FILE = "bridge.log", SCOUT_PAIRING_RUNTIME_STATE_FILE = "runtime.json", SCOUT_PAIRING_RUNTIME_PID_FILE2 = "runtime.pid", SCOUT_PAIRING_DEFAULT_PORT = 7888, SCOUT_PAIRING_LOG_TAIL_LINE_LIMIT = 160, SCOUT_PAIRING_RUNTIME_BOOTSTRAP_DELAY_MS = 350, SCOUT_PAIRING_PROCESS_EXIT_TIMEOUT_MS = 5000, SCOUT_PAIRING_PROCESS_EXIT_POLL_MS = 100, SCOUT_PAIRING_COMMAND_LABEL = "openscout-web pair", SCOUT_PAIRING_RUNTIME_VERSION = 1, SCOUT_PAIRING_RUNTIME_SCRIPT = "pairing-runtime-controller.ts", SCOUT_PAIRING_BRIDGE_CONNECT_TIMEOUT_MS = 1500, SCOUT_PAIRING_BRIDGE_REQUEST_TIMEOUT_MS = 2500, pairingMutationChain;
 var init_pairing = __esm(() => {
   init_src2();
   init_setup();
@@ -59223,10 +59123,10 @@ function metadataRecord6(value) {
 // packages/web/server/db/internal/db.ts
 import { Database as Database3 } from "bun:sqlite";
 import { homedir as homedir32 } from "os";
-import { join as join44 } from "path";
+import { join as join43 } from "path";
 function resolveDbPath() {
-  const controlHome = process.env.OPENSCOUT_CONTROL_HOME ?? join44(homedir32(), ".openscout", "control-plane");
-  return join44(controlHome, "control-plane.sqlite");
+  const controlHome = process.env.OPENSCOUT_CONTROL_HOME ?? join43(homedir32(), ".openscout", "control-plane");
+  return join43(controlHome, "control-plane.sqlite");
 }
 function configureReadonlyDb(db2) {
   db2.exec(`PRAGMA busy_timeout = ${DB_BUSY_TIMEOUT_MS}`);
@@ -59276,7 +59176,7 @@ var init_parse2 = __esm(() => {
 
 // packages/web/server/db/internal/paths.ts
 import { homedir as homedir33 } from "os";
-import { join as join46 } from "path";
+import { join as join45 } from "path";
 function compact(p) {
   if (!p)
     return null;
@@ -59288,10 +59188,10 @@ function pairingHarnessLogPath(adapterType, sessionId) {
   if (!normalizedAdapter || !normalizedSessionId) {
     return null;
   }
-  return join46(HOME, ".scout", "pairing", normalizedAdapter, normalizedSessionId, "logs", "stdout.log");
+  return join45(HOME, ".scout", "pairing", normalizedAdapter, normalizedSessionId, "logs", "stdout.log");
 }
 function localAgentHarnessLogPath(agentId) {
-  return join46(localAgentLogsDirectory(agentId), "stdout.log");
+  return join45(localAgentLogsDirectory(agentId), "stdout.log");
 }
 function adapterLogNamespaceForTransport(transport) {
   const normalized = transport?.trim();
@@ -63743,9 +63643,9 @@ var init_prefilter = __esm(() => {
 });
 
 // packages/web/server/scoutbot/thread-map.ts
-import { mkdir as mkdir13, readFile as readFile16, writeFile as writeFile12 } from "fs/promises";
+import { mkdir as mkdir13, readFile as readFile15, writeFile as writeFile12 } from "fs/promises";
 import { randomUUID as randomUUID10 } from "crypto";
-import { dirname as dirname32, join as join59 } from "path";
+import { dirname as dirname32, join as join58 } from "path";
 
 class ScoutbotThreadMapStore {
   filePath;
@@ -63862,7 +63762,7 @@ class ScoutbotThreadMapStore {
   }
   async read() {
     try {
-      const raw2 = await readFile16(this.filePath, "utf8");
+      const raw2 = await readFile15(this.filePath, "utf8");
       const parsed = JSON.parse(raw2);
       const threads = Array.isArray(parsed.threads) ? parsed.threads.filter(isThreadRecord).map((thread) => ({
         ...thread,
@@ -63887,7 +63787,7 @@ class ScoutbotThreadMapStore {
   }
 }
 function defaultScoutbotThreadMapPath() {
-  return join59(resolveOpenScoutSupportPaths().supportDirectory, "scoutbot-threads.json");
+  return join58(resolveOpenScoutSupportPaths().supportDirectory, "scoutbot-threads.json");
 }
 function chooseDefaultConversationId(snapshot) {
   const existing = Object.values(snapshot?.conversations ?? {}).find((conversation) => conversation.metadata?.scoutbotThreadId === SCOUTBOT_DEFAULT_THREAD_ID && isOpaqueChannelId(conversation.id));
@@ -64713,7 +64613,7 @@ var init_runner = __esm(() => {
 // packages/runtime/src/agent-workspace.ts
 import { existsSync as existsSync44 } from "fs";
 import { mkdir as mkdir14 } from "fs/promises";
-import { join as join62 } from "path";
+import { join as join61 } from "path";
 async function isGitRepo(projectRoot) {
   try {
     await execSystemFile("git", ["rev-parse", "--git-dir"], { cwd: projectRoot, timeoutMs: 2000 });
@@ -64733,8 +64633,8 @@ async function createAgentWorkspace(projectRoot, agentName, requestedBranch) {
   }
   const branch = requestedBranch?.trim() || `scout/${agentName}`;
   validateWorktreeBranch(branch);
-  const workspaceDir = join62(projectRoot, SCOUT_WORKSPACES_DIRNAME);
-  const workspacePath = join62(workspaceDir, agentName);
+  const workspaceDir = join61(projectRoot, SCOUT_WORKSPACES_DIRNAME);
+  const workspacePath = join61(workspaceDir, agentName);
   if (existsSync44(workspacePath)) {
     return { path: workspacePath, branch };
   }
@@ -64785,7 +64685,7 @@ import { createHash as createHash8 } from "crypto";
 import { existsSync as existsSync45, mkdirSync as mkdirSync19, readdirSync as readdirSync12, readFileSync as readFileSync27, renameSync as renameSync7, statSync as statSync17, writeFileSync as writeFileSync17 } from "fs";
 import { open as open2 } from "fs/promises";
 import { homedir as homedir45 } from "os";
-import { dirname as dirname35, join as join63 } from "path";
+import { dirname as dirname35, join as join62 } from "path";
 import { createInterface as createInterface2 } from "readline";
 import { Database as Database7 } from "bun:sqlite";
 async function loadServiceBudgets(forceRefresh = false) {
@@ -64860,7 +64760,7 @@ async function loadCodexGauge(forceRefresh = false) {
     harness: "codex",
     maxAgeMs: WEEK_MS
   });
-  const root = join63(homeDir(), ".codex", "sessions");
+  const root = join62(homeDir(), ".codex", "sessions");
   if (!existsSync45(root))
     return fallback;
   const recent = findRecentCodexJsonl(root, CODEX_LOOKBACK_DAYS);
@@ -64955,14 +64855,14 @@ function findRecentCodexJsonl(root, lookbackDays) {
       return;
     }
     for (const entry of entries2) {
-      const full = join63(dir, entry.name);
+      const full = join62(dir, entry.name);
       if (entry.isDirectory()) {
         walk(full);
       } else if (entry.isFile() && entry.name.endsWith(".jsonl")) {
-        const stat10 = safeStat(full);
-        if (!stat10 || stat10.mtimeMs < cutoffMs)
+        const stat9 = safeStat(full);
+        if (!stat9 || stat9.mtimeMs < cutoffMs)
           continue;
-        paths2.push({ path: full, mtimeMs: stat10.mtimeMs });
+        paths2.push({ path: full, mtimeMs: stat9.mtimeMs });
       }
     }
   };
@@ -65038,7 +64938,7 @@ function claudeStatuslineDir() {
   return resolveClaudeStatuslineDirectory();
 }
 function readClaudeStatuslineLatest() {
-  return readJsonRecord3(join63(claudeStatuslineDir(), "claude-latest.json"));
+  return readJsonRecord3(join62(claudeStatuslineDir(), "claude-latest.json"));
 }
 function loadClaudeStatuslineQuotaSnapshots() {
   const now = Date.now();
@@ -65050,9 +64950,9 @@ function loadClaudeStatuslineQuotaSnapshots() {
   ].flatMap((record2) => claudeQuotaSnapshotsFromStatusline(record2)).sort((a, b) => b.capturedAt - a.capturedAt).slice(0, PERSISTED_QUOTA_ROW_LIMIT);
 }
 function readClaudeStatuslineHistory(minCapturedAt) {
-  const path2 = join63(claudeStatuslineDir(), "claude-history.jsonl");
-  const stat10 = safeStat(path2);
-  if (!stat10)
+  const path2 = join62(claudeStatuslineDir(), "claude-history.jsonl");
+  const stat9 = safeStat(path2);
+  if (!stat9)
     return [];
   let content;
   try {
@@ -65060,7 +64960,7 @@ function readClaudeStatuslineHistory(minCapturedAt) {
   } catch {
     return [];
   }
-  if (stat10.size > CLAUDE_STATUSLINE_HISTORY_MAX_BYTES) {
+  if (stat9.size > CLAUDE_STATUSLINE_HISTORY_MAX_BYTES) {
     content = content.slice(-CLAUDE_STATUSLINE_HISTORY_MAX_BYTES);
     const firstNewline = content.indexOf(`
 `);
@@ -65443,12 +65343,12 @@ async function readKimiUsageResponse() {
   }
 }
 function kimiCodeHome() {
-  return process.env.KIMI_CODE_HOME?.trim() || join63(homeDir(), ".kimi-code");
+  return process.env.KIMI_CODE_HOME?.trim() || join62(homeDir(), ".kimi-code");
 }
 function readKimiCredentials() {
-  const candidates = [join63(kimiCodeHome(), "credentials", "kimi-code.json")];
+  const candidates = [join62(kimiCodeHome(), "credentials", "kimi-code.json")];
   if (!process.env.KIMI_CODE_HOME?.trim()) {
-    candidates.push(join63(homeDir(), ".kimi", "credentials", "kimi-code.json"));
+    candidates.push(join62(homeDir(), ".kimi", "credentials", "kimi-code.json"));
   }
   for (const path2 of candidates) {
     const credentials = readJsonRecord3(path2);
@@ -65552,7 +65452,7 @@ function importProviderDashboardUsage(input) {
   return gauge;
 }
 function dashboardImportPath() {
-  return join63(dirname35(resolveDbPath()), "provider-usage-snapshots.json");
+  return join62(dirname35(resolveDbPath()), "provider-usage-snapshots.json");
 }
 function readDashboardUsageStore() {
   const record2 = readJsonRecord3(dashboardImportPath());
@@ -65758,12 +65658,12 @@ async function loadGrokGauge() {
   };
 }
 async function loadGrokBillingQuotaSnapshots() {
-  const path2 = join63(homeDir(), ".grok", "logs", "unified.jsonl");
-  const stat10 = safeStat(path2);
-  if (!stat10 || stat10.size <= 0)
+  const path2 = join62(homeDir(), ".grok", "logs", "unified.jsonl");
+  const stat9 = safeStat(path2);
+  if (!stat9 || stat9.size <= 0)
     return [];
-  const length = Math.min(stat10.size, GROK_BILLING_LOG_MAX_BYTES);
-  const start = Math.max(0, stat10.size - length);
+  const length = Math.min(stat9.size, GROK_BILLING_LOG_MAX_BYTES);
+  const start = Math.max(0, stat9.size - length);
   let content = "";
   let handle;
   try {
@@ -65836,7 +65736,7 @@ function loadGrokLocalUsage() {
     const usage = grokUsageFromRecord(parsed, Date.now());
     return usage ? [usage] : [];
   }
-  const root = join63(homeDir(), ".grok", "sessions");
+  const root = join62(homeDir(), ".grok", "sessions");
   if (!existsSync45(root))
     return [];
   const cutoff = Date.now() - WEEK_MS;
@@ -65849,7 +65749,7 @@ function loadGrokLocalUsage() {
       return;
     }
     for (const entry of entries2) {
-      const path2 = join63(directory, entry.name);
+      const path2 = join62(directory, entry.name);
       if (entry.isDirectory())
         walk(path2);
       else if (entry.isFile() && entry.name === "updates.jsonl" && (safeStat(path2)?.mtimeMs ?? 0) >= cutoff)
@@ -65927,8 +65827,8 @@ function readCursorSubscriptionState() {
     return parseJsonRecord9(fixtureJson);
   }
   const candidates = [
-    join63(homeDir(), "Library", "Application Support", "Cursor", "User", "globalStorage", "state.vscdb"),
-    join63(homeDir(), ".config", "Cursor", "User", "globalStorage", "state.vscdb")
+    join62(homeDir(), "Library", "Application Support", "Cursor", "User", "globalStorage", "state.vscdb"),
+    join62(homeDir(), ".config", "Cursor", "User", "globalStorage", "state.vscdb")
   ];
   for (const path2 of candidates) {
     if (!existsSync45(path2))
@@ -66178,7 +66078,7 @@ function githubQuotaSnapshot(core, capturedAt) {
 }
 function detectCloudAccounts() {
   const accounts = [];
-  const declaredAccounts = readJsonRecord3(join63(homeDir(), ".scout", "provider-accounts.json"));
+  const declaredAccounts = readJsonRecord3(join62(homeDir(), ".scout", "provider-accounts.json"));
   const exeAccount = recordValue4(declaredAccounts?.exe);
   if (exeAccount && stringValue12(exeAccount.status)?.toLowerCase() !== "inactive") {
     accounts.push({
@@ -66189,9 +66089,9 @@ function detectCloudAccounts() {
     });
   }
   const cloudflareConfig = [
-    join63(homeDir(), "Library", "Preferences", ".wrangler", "config", "default.toml"),
-    join63(homeDir(), ".wrangler", "config", "default.toml"),
-    join63(homeDir(), ".config", ".wrangler", "config", "default.toml")
+    join62(homeDir(), "Library", "Preferences", ".wrangler", "config", "default.toml"),
+    join62(homeDir(), ".wrangler", "config", "default.toml"),
+    join62(homeDir(), ".config", ".wrangler", "config", "default.toml")
   ].find((path2) => fileContainsAny(path2, ["oauth_token", "api_token"]));
   if (cloudflareConfig) {
     accounts.push({
@@ -66202,10 +66102,10 @@ function detectCloudAccounts() {
     });
   }
   const vercelConfig = [
-    join63(homeDir(), "Library", "Application Support", "com.vercel.cli", "config.json"),
-    join63(homeDir(), ".config", "com.vercel.cli", "config.json")
+    join62(homeDir(), "Library", "Application Support", "com.vercel.cli", "config.json"),
+    join62(homeDir(), ".config", "com.vercel.cli", "config.json")
   ].map((path2) => readJsonRecord3(path2)).find((record2) => Boolean(stringValue12(record2?.currentTeam)));
-  const vercelAuth = existsSync45(join63(homeDir(), ".local", "share", "com.vercel.cli", "auth.json"));
+  const vercelAuth = existsSync45(join62(homeDir(), ".local", "share", "com.vercel.cli", "auth.json"));
   if (vercelConfig || vercelAuth) {
     accounts.push({
       id: "vercel",
@@ -67840,9 +67740,9 @@ function readFilePreview(input) {
   }
   const { realPath, root } = resolved;
   try {
-    const stat11 = statSync21(realPath);
+    const stat10 = statSync21(realPath);
     const title = realPath === "/" ? "/" : realPath.split("/").pop() || realPath;
-    if (stat11.isDirectory()) {
+    if (stat10.isDirectory()) {
       return {
         ok: true,
         content: {
@@ -67858,7 +67758,7 @@ function readFilePreview(input) {
         }
       };
     }
-    if (!stat11.isFile()) {
+    if (!stat10.isFile()) {
       return { ok: false, status: 415, error: "path is not a file or directory" };
     }
     const mediaType = mediaTypeFor(realPath);
@@ -67875,14 +67775,14 @@ function readFilePreview(input) {
           title,
           mediaType,
           rawUrl,
-          sizeBytes: stat11.size,
+          sizeBytes: stat10.size,
           previewReason: previewReasonFor(mediaType),
           generatedAt: Date.now()
         }
       };
     }
-    const truncated = stat11.size > MAX_PREVIEW_BYTES;
-    const readable = readPreviewBuffer(realPath, Math.min(stat11.size, MAX_PREVIEW_BYTES));
+    const truncated = stat10.size > MAX_PREVIEW_BYTES;
+    const readable = readPreviewBuffer(realPath, Math.min(stat10.size, MAX_PREVIEW_BYTES));
     if (!looksTextual2(realPath, readable)) {
       return {
         ok: true,
@@ -67895,7 +67795,7 @@ function readFilePreview(input) {
           title,
           mediaType,
           rawUrl,
-          sizeBytes: stat11.size,
+          sizeBytes: stat10.size,
           previewReason: previewReasonFor(mediaType),
           generatedAt: Date.now()
         }
@@ -67913,7 +67813,7 @@ function readFilePreview(input) {
         mediaType,
         rawUrl,
         content: readable.toString("utf8"),
-        sizeBytes: stat11.size,
+        sizeBytes: stat10.size,
         truncated,
         generatedAt: Date.now()
       }
@@ -67978,7 +67878,7 @@ var init_file_preview = __esm(() => {
 // packages/agent-sessions/src/adapters/claude-code/team-topology.ts
 import { existsSync as existsSync50, readdirSync as readdirSync14, readFileSync as readFileSync32, statSync as statSync22 } from "fs";
 import { homedir as homedir51 } from "os";
-import { basename as basename26, dirname as dirname39, join as join67, relative as relative10 } from "path";
+import { basename as basename26, dirname as dirname39, join as join66, relative as relative10 } from "path";
 function isObject2(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
@@ -68022,17 +67922,17 @@ function statIsFile2(path2) {
   }
 }
 function readTeamConfigs(homeDir2) {
-  const teamsRoot = join67(homeDir2, ".claude", "teams");
+  const teamsRoot = join66(homeDir2, ".claude", "teams");
   if (!existsSync50(teamsRoot) || !statIsDirectory2(teamsRoot)) {
     return [];
   }
   const teams = [];
   for (const entry of readdirSync14(teamsRoot)) {
-    const teamDir = join67(teamsRoot, entry);
+    const teamDir = join66(teamsRoot, entry);
     if (!statIsDirectory2(teamDir)) {
       continue;
     }
-    const configPath = join67(teamDir, "config.json");
+    const configPath = join66(teamDir, "config.json");
     const config = readJsonObject(configPath);
     if (!config) {
       continue;
@@ -68170,7 +68070,7 @@ function membersFromConfig(team, groupId, configRefId) {
   return { agents, relationships, agentByExternal };
 }
 function readTaskFiles(tasksRoot, teamName) {
-  const teamTasksRoot = join67(tasksRoot, teamName);
+  const teamTasksRoot = join66(tasksRoot, teamName);
   if (!existsSync50(teamTasksRoot) || !statIsDirectory2(teamTasksRoot)) {
     return [];
   }
@@ -68181,7 +68081,7 @@ function readTaskFiles(tasksRoot, teamName) {
     if (!current)
       continue;
     for (const entry of readdirSync14(current)) {
-      const path2 = join67(current, entry);
+      const path2 = join66(current, entry);
       if (statIsDirectory2(path2)) {
         stack.push(path2);
       } else if (statIsFile2(path2)) {
@@ -68216,7 +68116,7 @@ function parseTaskFile(taskPath, teamName, tasksRoot, sourceRef) {
   } catch {
     return null;
   }
-  const relativePath = relative10(join67(tasksRoot, teamName), taskPath);
+  const relativePath = relative10(join66(tasksRoot, teamName), taskPath);
   const fallbackId = relativePath.replace(/\.[^.]+$/u, "");
   const fallbackTitle = firstMarkdownTitle(raw2) ?? basename26(fallbackId);
   const inferredState = inferTaskStateFromPath(dirname39(relativePath));
@@ -68250,7 +68150,7 @@ function parseTaskFile(taskPath, teamName, tasksRoot, sourceRef) {
   };
 }
 function tasksFromFiles(homeDir2, teamName, agentByExternal) {
-  const tasksRoot = join67(homeDir2, ".claude", "tasks");
+  const tasksRoot = join66(homeDir2, ".claude", "tasks");
   const taskFiles = readTaskFiles(tasksRoot, teamName);
   const sourceRefs = [];
   const parsedTasks = [];
@@ -68432,7 +68332,7 @@ var init_team_topology = __esm(() => {
 // packages/agent-sessions/src/adapters/claude-code/subagent-topology.ts
 import { existsSync as existsSync51, readdirSync as readdirSync15, readFileSync as readFileSync33, statSync as statSync23 } from "fs";
 import { homedir as homedir52 } from "os";
-import { join as join68, normalize as normalize2, sep as sep3 } from "path";
+import { join as join67, normalize as normalize2, sep as sep3 } from "path";
 function isObject3(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
@@ -68504,7 +68404,7 @@ function parseJsonLines(path2) {
   return events2;
 }
 function projectsRoot3(homeDir2) {
-  return join68(homeDir2, ".claude", "projects");
+  return join67(homeDir2, ".claude", "projects");
 }
 function discoverParentSessionDirs(homeDir2, maxParentSessions, sessionFilter) {
   const root = projectsRoot3(homeDir2);
@@ -68512,22 +68412,22 @@ function discoverParentSessionDirs(homeDir2, maxParentSessions, sessionFilter) {
     return [];
   const discovered = [];
   for (const projectEntry of readdirSync15(root).sort()) {
-    const projectDir = join68(root, projectEntry);
+    const projectDir = join67(root, projectEntry);
     if (!statIsDirectory3(projectDir))
       continue;
     for (const sessionEntry of readdirSync15(projectDir).sort()) {
       if (sessionFilter && sessionEntry !== sessionFilter)
         continue;
-      const sessionDir = join68(projectDir, sessionEntry);
+      const sessionDir = join67(projectDir, sessionEntry);
       if (!statIsDirectory3(sessionDir))
         continue;
-      const subagentsDir = join68(sessionDir, "subagents");
+      const subagentsDir = join67(sessionDir, "subagents");
       if (!statIsDirectory3(subagentsDir))
         continue;
       const directSubagents = readdirSync15(subagentsDir).some((entry) => /^agent-[a-zA-Z0-9]+\.jsonl$/u.test(entry));
       if (!directSubagents)
         continue;
-      const parentSessionPath = join68(projectDir, `${sessionEntry}.jsonl`);
+      const parentSessionPath = join67(projectDir, `${sessionEntry}.jsonl`);
       discovered.push({
         sessionId: sessionEntry,
         projectDir,
@@ -68721,8 +68621,8 @@ function readSubagentRecord(parent, parentSummary, file) {
   if (!match2?.[1])
     return null;
   const agentId = match2[1];
-  const transcriptPath = join68(parent.subagentsDir, file);
-  const metaPath = join68(parent.subagentsDir, `agent-${agentId}.meta.json`);
+  const transcriptPath = join67(parent.subagentsDir, file);
+  const metaPath = join67(parent.subagentsDir, `agent-${agentId}.meta.json`);
   const meta = statIsFile3(metaPath) ? parseSubagentMeta(metaPath) : undefined;
   const toolUseId = meta?.toolUseId;
   const parentToolUse = toolUseId ? parentSummary.toolUses.get(toolUseId) : undefined;
@@ -68950,7 +68850,7 @@ var init_subagent_topology = () => {};
 // packages/agent-sessions/src/adapters/claude-code/workflow-topology.ts
 import { existsSync as existsSync52, readdirSync as readdirSync16, readFileSync as readFileSync34, statSync as statSync24 } from "fs";
 import { homedir as homedir53 } from "os";
-import { basename as basename28, join as join69, normalize as normalize3, relative as relative11, sep as sep4 } from "path";
+import { basename as basename28, join as join68, normalize as normalize3, relative as relative11, sep as sep4 } from "path";
 function isObject4(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
@@ -69022,33 +68922,33 @@ function parseJsonLines2(path2) {
   return events2;
 }
 function discoverWorkflowDirs(homeDir2, maxRuns) {
-  const projectsRoot4 = join69(homeDir2, ".claude", "projects");
+  const projectsRoot4 = join68(homeDir2, ".claude", "projects");
   if (!existsSync52(projectsRoot4) || !statIsDirectory4(projectsRoot4)) {
     return [];
   }
   const discovered = [];
   for (const projectEntry of readdirSync16(projectsRoot4).sort()) {
-    const projectDir = join69(projectsRoot4, projectEntry);
+    const projectDir = join68(projectsRoot4, projectEntry);
     if (!statIsDirectory4(projectDir))
       continue;
     for (const sessionEntry of readdirSync16(projectDir).sort()) {
-      const sessionDir = join69(projectDir, sessionEntry);
+      const sessionDir = join68(projectDir, sessionEntry);
       if (!statIsDirectory4(sessionDir))
         continue;
-      const workflowsRoot = join69(sessionDir, "subagents", "workflows");
+      const workflowsRoot = join68(sessionDir, "subagents", "workflows");
       if (!statIsDirectory4(workflowsRoot))
         continue;
       for (const runEntry of readdirSync16(workflowsRoot).sort()) {
         if (!runEntry.startsWith("wf_"))
           continue;
-        const workflowDir = join69(workflowsRoot, runEntry);
+        const workflowDir = join68(workflowsRoot, runEntry);
         if (!statIsDirectory4(workflowDir))
           continue;
         discovered.push({
           runId: runEntry,
           workflowDir,
           parentSessionId: sessionEntry,
-          parentSessionPath: join69(projectDir, `${sessionEntry}.jsonl`),
+          parentSessionPath: join68(projectDir, `${sessionEntry}.jsonl`),
           projectDir,
           mtimeMs: statMtimeMs2(workflowDir)
         });
@@ -69169,7 +69069,7 @@ function readWorkflowLaunch(parentSessionPath, runId) {
   return;
 }
 function findGeneratedScriptForRun(homeDir2, runId) {
-  const projectsRoot4 = join69(homeDir2, ".claude", "projects");
+  const projectsRoot4 = join68(homeDir2, ".claude", "projects");
   if (!statIsDirectory4(projectsRoot4))
     return;
   const stack = [{ path: projectsRoot4, depth: 0 }];
@@ -69178,7 +69078,7 @@ function findGeneratedScriptForRun(homeDir2, runId) {
     if (!current || current.depth > 8)
       continue;
     for (const entry of readdirSync16(current.path).sort()) {
-      const fullPath = join69(current.path, entry);
+      const fullPath = join68(current.path, entry);
       if (statIsDirectory4(fullPath)) {
         stack.push({ path: fullPath, depth: current.depth + 1 });
       } else if (statIsFile4(fullPath) && entry.endsWith(`${runId}.js`)) {
@@ -69249,7 +69149,7 @@ function readWorkflowScript(homeDir2, launch, runId) {
   return parsed;
 }
 function readJournal(workflowDir) {
-  const journalPath = join69(workflowDir, "journal.jsonl");
+  const journalPath = join68(workflowDir, "journal.jsonl");
   const events2 = parseJsonLines2(journalPath);
   const startedByAgent = new Map;
   const resultByAgent = new Map;
@@ -69358,8 +69258,8 @@ function readWorkflowAgents(run, journal, script) {
   const files = statIsDirectory4(run.workflowDir) ? readdirSync16(run.workflowDir).sort() : [];
   return files.map((file) => /^agent-([a-zA-Z0-9]+)\.jsonl$/u.exec(file)).filter((match2) => Boolean(match2)).map((match2) => {
     const agentId = match2[1] ?? "unknown";
-    const transcriptPath = join69(run.workflowDir, `agent-${agentId}.jsonl`);
-    const metaPath = join69(run.workflowDir, `agent-${agentId}.meta.json`);
+    const transcriptPath = join68(run.workflowDir, `agent-${agentId}.jsonl`);
+    const metaPath = join68(run.workflowDir, `agent-${agentId}.meta.json`);
     const events2 = parseJsonLines2(transcriptPath);
     const meta = readJsonObject3(metaPath);
     const result = resultObjectForAgent(journal, agentId);
@@ -69456,7 +69356,7 @@ function buildTopologyForRuns(runs, observedAt) {
     const workflowGroupId = `claude-workflow:${runSegment}`;
     const workflowRefId = sourceRefId4("claude-workflow-dir", run.workflowDir);
     const parentSessionRefId = sourceRefId4("claude-workflow-parent-session", run.parentSessionPath);
-    const journalPath = join69(run.workflowDir, "journal.jsonl");
+    const journalPath = join68(run.workflowDir, "journal.jsonl");
     const journalRefId = sourceRefId4("claude-workflow-journal", journalPath);
     const scriptRefId = run.script?.scriptPath ? sourceRefId4("claude-workflow-script", run.script.scriptPath) : undefined;
     appendSourceRef2(sourceRefs, sourceRefIds, {
@@ -69937,8 +69837,8 @@ var exports_project_overview = {};
 __export(exports_project_overview, {
   buildProjectOverview: () => buildProjectOverview
 });
-import { access as access2, readFile as readFile18 } from "fs/promises";
-import { basename as basename29, join as join70 } from "path";
+import { access as access2, readFile as readFile17 } from "fs/promises";
+import { basename as basename29, join as join69 } from "path";
 function excerptFromText(raw2) {
   const trimmed = raw2.trim();
   if (!trimmed)
@@ -69956,7 +69856,7 @@ function excerptFromText(raw2) {
 }
 async function readArtifactExcerpt(absolutePath, relativePath) {
   try {
-    const raw2 = await readFile18(absolutePath, "utf8");
+    const raw2 = await readFile17(absolutePath, "utf8");
     if (relativePath.endsWith(".json")) {
       try {
         const parsed = JSON.parse(raw2);
@@ -70012,7 +69912,7 @@ async function pathExists3(filePath) {
 }
 async function readPackageFacet(packagePath) {
   try {
-    const raw2 = await readFile18(packagePath, "utf8");
+    const raw2 = await readFile17(packagePath, "utf8");
     const parsed = JSON.parse(raw2);
     return {
       name: typeof parsed.name === "string" ? parsed.name : null,
@@ -70033,7 +69933,7 @@ async function buildProjectOverview(input) {
   const relativeArtifacts = buildArtifactList(root);
   const artifacts = [];
   for (const relativePath of relativeArtifacts) {
-    const absolutePath = join70(root, relativePath);
+    const absolutePath = join69(root, relativePath);
     const exists2 = await pathExists3(absolutePath);
     artifacts.push({
       relativePath,
@@ -70043,9 +69943,9 @@ async function buildProjectOverview(input) {
       excerpt: exists2 ? await readArtifactExcerpt(absolutePath, relativePath) : null
     });
   }
-  const projectConfigPath3 = join70(root, ".openscout", "project.json");
+  const projectConfigPath3 = join69(root, ".openscout", "project.json");
   const projectConfigExists = await pathExists3(projectConfigPath3);
-  const packagePath = join70(root, "package.json");
+  const packagePath = join69(root, "package.json");
   const packageFacet = await pathExists3(packagePath) ? await readPackageFacet(packagePath) : null;
   return {
     ok: true,
@@ -70095,8 +69995,8 @@ __export(exports_agent_definitions, {
   resolveAgentProjectRoot: () => resolveAgentProjectRoot,
   buildAgentDefinitions: () => buildAgentDefinitions
 });
-import { access as access3, readdir as readdir5, readFile as readFile19 } from "fs/promises";
-import { join as join71 } from "path";
+import { access as access3, readdir as readdir5, readFile as readFile18 } from "fs/promises";
+import { join as join70 } from "path";
 function excerptFromText2(raw2) {
   const trimmed = raw2.trim();
   if (!trimmed)
@@ -70114,7 +70014,7 @@ function excerptFromText2(raw2) {
 }
 async function readFileExcerpt(absolutePath, relativePath) {
   try {
-    const raw2 = await readFile19(absolutePath, "utf8");
+    const raw2 = await readFile18(absolutePath, "utf8");
     if (relativePath.endsWith(".json") || relativePath.endsWith(".yaml") || relativePath.endsWith(".yml")) {
       return excerptFromText2(raw2);
     }
@@ -70144,7 +70044,7 @@ async function listFolderFiles(folderPath, slug) {
   for (const entry of entries2) {
     if (!entry.isFile())
       continue;
-    const absolutePath = join71(folderPath, entry.name);
+    const absolutePath = join70(folderPath, entry.name);
     const relativePath = `${slug}/${entry.name}`;
     files.push({
       name: entry.name,
@@ -70174,7 +70074,7 @@ async function buildAgentDefinitions(input) {
     return { ok: false, status: resolved.status, error: resolved.error };
   }
   const projectRoot = resolved.realPath;
-  const agentsRoot = join71(projectRoot, ".agents");
+  const agentsRoot = join70(projectRoot, ".agents");
   const agentsRootExists = await pathExists4(agentsRoot);
   const selectedSlug = agentSlugFromHandle(input.agentHandle, input.agentName ?? "");
   const folders = [];
@@ -70184,7 +70084,7 @@ async function buildAgentDefinitions(input) {
       if (!entry.isDirectory() || SKIPPED_NAMES.has(entry.name) || entry.name.startsWith(".")) {
         continue;
       }
-      const folderPath = join71(agentsRoot, entry.name);
+      const folderPath = join70(agentsRoot, entry.name);
       const files = await listFolderFiles(folderPath, entry.name);
       if (files.length === 0)
         continue;
@@ -70234,7 +70134,8 @@ init_src3();
 init_local_config();
 init_setup();
 import { existsSync as existsSync55 } from "fs";
-import { dirname as dirname43, join as join74, resolve as resolve31 } from "path";
+import { randomBytes as randomBytes7 } from "crypto";
+import { dirname as dirname43, join as join73, resolve as resolve31 } from "path";
 import { fileURLToPath as fileURLToPath10 } from "url";
 
 // packages/web/shared/scope-integration.js
@@ -70340,7 +70241,7 @@ function serializeOpenScoutWebBootstrap(env = process.env) {
 
 // packages/web/server/create-openscout-web-server.ts
 import { createReadStream as createReadStream2, existsSync as existsSync53, readFileSync as readFileSync35, readdirSync as readdirSync17, realpathSync as realpathSync7, rmSync as rmSync7, statSync as statSync25 } from "fs";
-import { basename as basename31, dirname as dirname41, isAbsolute as isAbsolute12, join as join72, relative as relative12, resolve as resolve29 } from "path";
+import { basename as basename31, dirname as dirname41, isAbsolute as isAbsolute12, join as join71, relative as relative12, resolve as resolve29 } from "path";
 import { createInterface as createInterface3 } from "readline";
 import { fileURLToPath as fileURLToPath8 } from "url";
 import { homedir as homedir55 } from "os";
@@ -73612,50 +73513,6 @@ function errorReason(error) {
   return null;
 }
 
-// packages/web/server/terminal-hosts/herdr-session-state.ts
-init_system_probes();
-import { readFile as readFile15, stat as stat8 } from "fs/promises";
-import { join as join42 } from "path";
-var LAST_KNOWN_LIST_CAP = 8;
-function parseHerdrSessionState(value, savedAt) {
-  const workspaces = parseHerdrPersistedTopology(value);
-  if (workspaces === null)
-    return null;
-  let tabs = 0;
-  let panes = 0;
-  const cwds = [];
-  const agents = [];
-  for (const workspace of workspaces) {
-    tabs += workspace.tabs.length;
-    for (const tab of workspace.tabs) {
-      panes += tab.panes.length;
-      for (const pane of tab.panes) {
-        if (pane.cwd && !cwds.includes(pane.cwd))
-          cwds.push(pane.cwd);
-        if (pane.agent && !agents.includes(pane.agent))
-          agents.push(pane.agent);
-      }
-    }
-  }
-  return {
-    savedAt,
-    workspaces: workspaces.length,
-    tabs,
-    panes,
-    cwds: cwds.slice(0, LAST_KNOWN_LIST_CAP),
-    agents: agents.slice(0, LAST_KNOWN_LIST_CAP)
-  };
-}
-async function readHerdrLastKnownState(sessionDir) {
-  try {
-    const path2 = join42(sessionDir, "session.json");
-    const [raw2, stats] = await Promise.all([readFile15(path2, "utf8"), stat8(path2)]);
-    return parseHerdrSessionState(JSON.parse(raw2), stats.mtimeMs);
-  } catch {
-    return null;
-  }
-}
-
 // packages/web/server/terminal-hosts/herdr.ts
 var HERDR_TIMEOUT_MS2 = 2000;
 var herdrTerminalHost = {
@@ -73679,18 +73536,10 @@ var herdrTerminalHost = {
   },
   async list(context = {}) {
     const snapshot = await herdrSessionsProbe.for({ env: context.env ?? process.env }).fresh();
-    return Promise.all((snapshot.value ?? []).map(async (session3) => {
-      const lastKnown = !session3.running && session3.sessionDir ? await readHerdrLastKnownState(session3.sessionDir) : null;
-      return {
-        name: session3.name,
-        state: session3.running ? "live" : "detached",
-        ...lastKnown?.cwds[0] ? { cwd: lastKnown.cwds[0] } : {},
-        metadata: {
-          isDefault: session3.isDefault,
-          running: session3.running,
-          ...lastKnown ? { lastKnownLayout: lastKnown } : {}
-        }
-      };
+    return (snapshot.value ?? []).map((session3) => ({
+      name: session3.name,
+      state: session3.running ? "live" : "detached",
+      metadata: { isDefault: session3.isDefault, running: session3.running }
     }));
   },
   surface(session3) {
@@ -73810,12 +73659,12 @@ async function waitForHerdrSession(sessionName, env) {
 init_system_probes();
 init_src();
 import { homedir as homedir31 } from "os";
-import { join as join43 } from "path";
+import { join as join42 } from "path";
 var ZELLIJ_TIMEOUT_MS2 = 2000;
 var CTRL_C = "3";
 var CTRL_D = "4";
 function resolveZellijSocketDir(env = process.env) {
-  return env.ZELLIJ_SOCKET_DIR?.trim() || env.OPENSCOUT_ZELLIJ_SOCKET_DIR?.trim() || join43(env.HOME?.trim() || homedir31(), ".openscout", "zellij-sockets");
+  return env.ZELLIJ_SOCKET_DIR?.trim() || env.OPENSCOUT_ZELLIJ_SOCKET_DIR?.trim() || join42(env.HOME?.trim() || homedir31(), ".openscout", "zellij-sockets");
 }
 function zellijEnv(context) {
   const base = context.env ?? process.env;
@@ -74217,7 +74066,7 @@ function isMissingTerminalWorkspaceTable(error) {
 import { mkdir as mkdir12, rm as rm5, writeFile as writeFile11 } from "fs/promises";
 import { randomUUID as randomUUID7 } from "crypto";
 import { tmpdir } from "os";
-import { join as join45 } from "path";
+import { join as join44 } from "path";
 
 // packages/web/client/lib/capture-attachments.ts
 var MARKDOWN_EXTENSIONS = new Set([
@@ -74404,7 +74253,7 @@ function resolveTextCaptureMediaType(mediaType, fileName) {
 }
 
 // packages/web/server/image-blob-store.ts
-var BLOB_DIR = join45(tmpdir(), "openscout-image-blobs");
+var BLOB_DIR = join44(tmpdir(), "openscout-image-blobs");
 var BLOB_TTL_MS = 6 * 60 * 60 * 1000;
 var SWEEP_INTERVAL_MS2 = 30 * 60 * 1000;
 var MAX_BLOB_BYTES = 25 * 1024 * 1024;
@@ -74473,7 +74322,7 @@ async function putImageBlob(input) {
   await ensureDir();
   ensureSweeper();
   const id = randomUUID7();
-  const path2 = join45(BLOB_DIR, id);
+  const path2 = join44(BLOB_DIR, id);
   await writeFile11(path2, bytes);
   const entry = {
     id,
@@ -75542,18 +75391,18 @@ init_src2();
 init_local_agents();
 import { existsSync as existsSync40, readdirSync as readdirSync11, readFileSync as readFileSync23, statSync as statSync15 } from "fs";
 import { homedir as homedir41 } from "os";
-import { basename as basename20, join as join54, resolve as resolve20 } from "path";
+import { basename as basename20, join as join53, resolve as resolve20 } from "path";
 
 // packages/runtime/src/tail/service.ts
 init_secret_redaction();
 import { basename as basename19 } from "path";
-import { open, stat as stat9 } from "fs/promises";
+import { open, stat as stat8 } from "fs/promises";
 
 // packages/runtime/src/tail/claude-source.ts
 init_user_config();
 import { closeSync, existsSync as existsSync33, openSync, readdirSync as readdirSync4, readSync, statSync as statSync8 } from "fs";
 import { homedir as homedir34 } from "os";
-import { basename as basename12, join as join47, relative as relative4 } from "path";
+import { basename as basename12, join as join46, relative as relative4 } from "path";
 
 // packages/runtime/src/tail/discover.ts
 init_ps();
@@ -75829,7 +75678,7 @@ function rememberMetadata(file, metadata) {
   return metadata;
 }
 function projectsRoot() {
-  return process.env.OPENSCOUT_TAIL_CLAUDE_PROJECTS_ROOT ?? join47(homedir34(), ".claude", "projects");
+  return process.env.OPENSCOUT_TAIL_CLAUDE_PROJECTS_ROOT ?? join46(homedir34(), ".claude", "projects");
 }
 function listJsonlFiles(dir) {
   let entries2 = [];
@@ -75974,7 +75823,7 @@ function listRecentClaudeProjectTranscripts(root, scope) {
     return [];
   }
   for (const entry of projectDirs) {
-    const projectDir = join47(root, entry);
+    const projectDir = join46(root, entry);
     try {
       if (!statSync8(projectDir).isDirectory())
         continue;
@@ -75982,13 +75831,13 @@ function listRecentClaudeProjectTranscripts(root, scope) {
       continue;
     }
     for (const file of listJsonlFiles(projectDir)) {
-      const path2 = join47(projectDir, file);
+      const path2 = join46(projectDir, file);
       try {
         const stats = statSync8(path2);
-        const subagentsDir = join47(projectDir, basename12(path2, ".jsonl"), "subagents");
+        const subagentsDir = join46(projectDir, basename12(path2, ".jsonl"), "subagents");
         const activeSubagents = [];
         for (const subagentFile of listClaudeSubagentFiles(subagentsDir)) {
-          const subagentPath = join47(subagentsDir, subagentFile);
+          const subagentPath = join46(subagentsDir, subagentFile);
           try {
             const subagentStats = statSync8(subagentPath);
             if (subagentStats.mtimeMs < cutoff)
@@ -76229,7 +76078,7 @@ var ClaudeSource = {
 // packages/runtime/src/tail/codex-source.ts
 import { closeSync as closeSync2, existsSync as existsSync34, openSync as openSync2, readdirSync as readdirSync5, readSync as readSync2, statSync as statSync9 } from "fs";
 import { homedir as homedir35 } from "os";
-import { basename as basename13, join as join48 } from "path";
+import { basename as basename13, join as join47 } from "path";
 var SOURCE_NAME2 = "codex";
 var MAX_SUMMARY_LEN2 = 200;
 var TOOL_CALL_STATE_KEY = "codexToolCallsById";
@@ -76277,8 +76126,8 @@ function codexSessionRoots() {
   if (explicit?.trim())
     return [explicit.trim()];
   return [
-    join48(homedir35(), ".codex", "sessions"),
-    join48(homedir35(), ".openai-codex", "sessions")
+    join47(homedir35(), ".codex", "sessions"),
+    join47(homedir35(), ".openai-codex", "sessions")
   ].filter((root) => existsSync34(root));
 }
 function isCodexAppServerProcess(command) {
@@ -76377,7 +76226,7 @@ function walkRecentJsonlFiles(root, scope) {
       continue;
     }
     for (const entry of entries2) {
-      const path2 = join48(dir, entry);
+      const path2 = join47(dir, entry);
       let stats;
       try {
         stats = statSync9(path2);
@@ -76650,7 +76499,7 @@ var CodexSource = {
 // packages/runtime/src/tail/cursor-source.ts
 import { closeSync as closeSync3, existsSync as existsSync35, openSync as openSync3, readdirSync as readdirSync6, readSync as readSync3, statSync as statSync10 } from "fs";
 import { homedir as homedir36 } from "os";
-import { basename as basename14, join as join49 } from "path";
+import { basename as basename14, join as join48 } from "path";
 var SOURCE_NAME3 = "cursor";
 var MAX_SUMMARY_LEN3 = 200;
 var DEFAULT_HOT_DISCOVERY_WINDOW_MS3 = 10 * 60 * 1000;
@@ -76682,7 +76531,7 @@ function cursorProcessMonitorRoots() {
   const explicit = process.env.OPENSCOUT_TAIL_CURSOR_PROCESS_MONITOR_ROOT;
   if (explicit?.trim())
     return [explicit.trim()];
-  return [join49(homedir36(), "Library", "Application Support", "Cursor", "process-monitor")].filter((root) => existsSync35(root));
+  return [join48(homedir36(), "Library", "Application Support", "Cursor", "process-monitor")].filter((root) => existsSync35(root));
 }
 function isCursorProcess(command) {
   const base = commandBasename2(command);
@@ -76773,7 +76622,7 @@ function walkRecentMonitorLogs(root, scope) {
   for (const entry of entries2) {
     if (!entry.endsWith(".log"))
       continue;
-    const path2 = join49(root, entry);
+    const path2 = join48(root, entry);
     try {
       const stats = statSync10(path2);
       if (!stats.isFile() || stats.mtimeMs < cutoff)
@@ -76850,7 +76699,7 @@ var CursorSource = {
 // packages/runtime/src/tail/grok-source.ts
 import { closeSync as closeSync4, existsSync as existsSync36, openSync as openSync4, readdirSync as readdirSync7, readFileSync as readFileSync20, readSync as readSync4, statSync as statSync11 } from "fs";
 import { homedir as homedir37 } from "os";
-import { basename as basename15, dirname as dirname28, join as join50 } from "path";
+import { basename as basename15, dirname as dirname28, join as join49 } from "path";
 var SOURCE_NAME4 = "grok";
 var MAX_SUMMARY_LEN4 = 200;
 var DEFAULT_HOT_DISCOVERY_WINDOW_MS4 = 10 * 60 * 1000;
@@ -76898,7 +76747,7 @@ function grokSessionRoots() {
   const explicit = process.env.OPENSCOUT_TAIL_GROK_SESSIONS_ROOT;
   if (explicit?.trim())
     return [explicit.trim()];
-  return [join50(homedir37(), ".grok", "sessions")].filter((root) => existsSync36(root));
+  return [join49(homedir37(), ".grok", "sessions")].filter((root) => existsSync36(root));
 }
 function isGrokProcess(command) {
   const base = commandBasename2(command);
@@ -76982,7 +76831,7 @@ function readGrokMetadata(file) {
     };
   }
   const sessionDir = dirname28(file.path);
-  const summary = readJsonFile2(join50(sessionDir, "summary.json"));
+  const summary = readJsonFile2(join49(sessionDir, "summary.json"));
   const info = metadataRecord9(summary?.info);
   let cwd = typeof info?.cwd === "string" && info.cwd.trim() ? info.cwd : null;
   let sessionId = typeof info?.id === "string" && info.id.trim() ? info.id : basename15(sessionDir);
@@ -77015,7 +76864,7 @@ function walkRecentGrokEventFiles(root, scope) {
       continue;
     }
     for (const entry of entries2) {
-      const path2 = join50(dir, entry);
+      const path2 = join49(dir, entry);
       let stats;
       try {
         stats = statSync11(path2);
@@ -77101,7 +76950,7 @@ function grokToolArgSummary(toolName2, rawInput) {
   return "";
 }
 function loadGrokToolCallIndex(sessionDir) {
-  const updatesPath = join50(sessionDir, "updates.jsonl");
+  const updatesPath = join49(sessionDir, "updates.jsonl");
   if (!existsSync36(updatesPath))
     return [];
   const records = [];
@@ -77135,7 +76984,7 @@ function loadGrokToolCallIndex(sessionDir) {
 }
 function grokMatcherForTranscript(transcriptPath) {
   const sessionDir = dirname28(transcriptPath);
-  const updatesPath = join50(sessionDir, "updates.jsonl");
+  const updatesPath = join49(sessionDir, "updates.jsonl");
   if (!existsSync36(updatesPath))
     return null;
   let updatesMtimeMs = 0;
@@ -77332,7 +77181,7 @@ var GrokSource = {
 // packages/runtime/src/tail/kimi-source.ts
 import { existsSync as existsSync37, readdirSync as readdirSync8, readFileSync as readFileSync21, statSync as statSync12 } from "fs";
 import { homedir as homedir38 } from "os";
-import { basename as basename16, dirname as dirname29, join as join51 } from "path";
+import { basename as basename16, dirname as dirname29, join as join50 } from "path";
 var SOURCE_NAME5 = "kimi";
 var MAX_SUMMARY_LEN5 = 200;
 var DEFAULT_HOT_DISCOVERY_WINDOW_MS5 = 10 * 60 * 1000;
@@ -77384,8 +77233,8 @@ function kimiSessionsRoot() {
   const explicit = process.env.OPENSCOUT_TAIL_KIMI_SESSIONS_ROOT?.trim();
   if (explicit)
     return explicit;
-  const kimiHome = process.env.KIMI_CODE_HOME?.trim() || join51(homedir38(), ".kimi-code");
-  return join51(kimiHome, "sessions");
+  const kimiHome = process.env.KIMI_CODE_HOME?.trim() || join50(homedir38(), ".kimi-code");
+  return join50(kimiHome, "sessions");
 }
 function isKimiProcess(command) {
   const base = commandBasename2(command);
@@ -77429,7 +77278,7 @@ function walkRecentKimiWireFiles(root, scope) {
       continue;
     }
     for (const entry of entries2) {
-      const path2 = join51(directory, entry);
+      const path2 = join50(directory, entry);
       let stats;
       try {
         stats = statSync12(path2);
@@ -77448,7 +77297,7 @@ function walkRecentKimiWireFiles(root, scope) {
 function readKimiTranscriptMetadata(file) {
   const agentId = basename16(dirname29(file.path));
   const sessionDirectory = dirname29(dirname29(dirname29(file.path)));
-  const statePath = join51(sessionDirectory, "state.json");
+  const statePath = join50(sessionDirectory, "state.json");
   let stateMtimeMs = null;
   let stateSize = null;
   try {
@@ -77673,7 +77522,7 @@ var KimiSource = {
 // packages/runtime/src/tail/opencode-source.ts
 import { closeSync as closeSync5, existsSync as existsSync38, openSync as openSync5, readdirSync as readdirSync9, readFileSync as readFileSync22, readSync as readSync5, statSync as statSync13 } from "fs";
 import { homedir as homedir39 } from "os";
-import { basename as basename17, join as join52, sep as sep2 } from "path";
+import { basename as basename17, join as join51, sep as sep2 } from "path";
 var SOURCE_NAME6 = "opencode";
 var MAX_SUMMARY_LEN6 = 200;
 var DEFAULT_HOT_DISCOVERY_WINDOW_MS6 = 10 * 60 * 1000;
@@ -77709,7 +77558,7 @@ function opencodeStorageRoots() {
   const explicit = process.env.OPENSCOUT_TAIL_OPENCODE_STORAGE_ROOT;
   if (explicit?.trim())
     return [explicit.trim()];
-  return [join52(homedir39(), ".local", "share", "opencode", "storage")].filter((root) => existsSync38(root));
+  return [join51(homedir39(), ".local", "share", "opencode", "storage")].filter((root) => existsSync38(root));
 }
 function isOpenCodeProcess(command) {
   const base = commandBasename2(command).toLowerCase();
@@ -77795,7 +77644,7 @@ function partTimestamp(part) {
 function walkRecentSessionFiles(root, scope) {
   const cutoff = Date.now() - discoveryWindowMs6(scope);
   const found = [];
-  const stack = [join52(root, "session")];
+  const stack = [join51(root, "session")];
   while (stack.length > 0) {
     const dir = stack.pop();
     let entries2 = [];
@@ -77805,7 +77654,7 @@ function walkRecentSessionFiles(root, scope) {
       continue;
     }
     for (const entry of entries2) {
-      const path2 = join52(dir, entry);
+      const path2 = join51(dir, entry);
       let stats;
       try {
         stats = statSync13(path2);
@@ -77825,7 +77674,7 @@ function walkRecentSessionFiles(root, scope) {
 }
 function walkRecentMessageSessionFiles(root, scope) {
   const cutoff = Date.now() - discoveryWindowMs6(scope);
-  const messageRoot = join52(root, "message");
+  const messageRoot = join51(root, "message");
   let sessionDirs = [];
   try {
     sessionDirs = readdirSync9(messageRoot);
@@ -77834,7 +77683,7 @@ function walkRecentMessageSessionFiles(root, scope) {
   }
   const found = new Map;
   for (const sessionId of sessionDirs) {
-    const dir = join52(messageRoot, sessionId);
+    const dir = join51(messageRoot, sessionId);
     let entries2 = [];
     try {
       const stats = statSync13(dir);
@@ -77849,7 +77698,7 @@ function walkRecentMessageSessionFiles(root, scope) {
       if (!entry.endsWith(".json"))
         continue;
       try {
-        const stats = statSync13(join52(dir, entry));
+        const stats = statSync13(join51(dir, entry));
         if (stats.isFile() && stats.mtimeMs >= cutoff && stats.mtimeMs > latestMessageMtime) {
           latestMessageMtime = stats.mtimeMs;
         }
@@ -77859,7 +77708,7 @@ function walkRecentMessageSessionFiles(root, scope) {
     }
     if (latestMessageMtime <= 0)
       continue;
-    const sessionPath = join52(root, "session", "global", `${sessionId}.json`);
+    const sessionPath = join51(root, "session", "global", `${sessionId}.json`);
     try {
       const sessionStats = statSync13(sessionPath);
       if (!sessionStats.isFile())
@@ -77915,7 +77764,7 @@ function discoverOpenCodeTranscripts(scope) {
   });
 }
 function readOpenCodeMessages(root, sessionId) {
-  const dir = join52(root, "message", sessionId);
+  const dir = join51(root, "message", sessionId);
   let entries2 = [];
   try {
     entries2 = readdirSync9(dir);
@@ -77926,7 +77775,7 @@ function readOpenCodeMessages(root, sessionId) {
   for (const entry of entries2) {
     if (!entry.endsWith(".json"))
       continue;
-    const path2 = join52(dir, entry);
+    const path2 = join51(dir, entry);
     let stats;
     try {
       stats = statSync13(path2);
@@ -77943,7 +77792,7 @@ function readOpenCodeMessages(root, sessionId) {
   return messages2.sort((a, b) => (messageTimestamp(a) ?? a.__mtimeMs) - (messageTimestamp(b) ?? b.__mtimeMs)).slice(-messagesPerSession());
 }
 function readOpenCodeParts(root, messageId) {
-  const dir = join52(root, "part", messageId);
+  const dir = join51(root, "part", messageId);
   let entries2 = [];
   try {
     entries2 = readdirSync9(dir);
@@ -77954,7 +77803,7 @@ function readOpenCodeParts(root, messageId) {
   for (const entry of entries2) {
     if (!entry.endsWith(".json"))
       continue;
-    const path2 = join52(dir, entry);
+    const path2 = join51(dir, entry);
     let stats;
     try {
       stats = statSync13(path2);
@@ -78086,7 +77935,7 @@ var OpenCodeSource = {
 // packages/runtime/src/tail/pi-source.ts
 import { closeSync as closeSync6, existsSync as existsSync39, openSync as openSync6, readdirSync as readdirSync10, readSync as readSync6, statSync as statSync14 } from "fs";
 import { homedir as homedir40 } from "os";
-import { basename as basename18, join as join53, relative as relative5 } from "path";
+import { basename as basename18, join as join52, relative as relative5 } from "path";
 var SOURCE_NAME7 = "pi";
 var MAX_SUMMARY_LEN7 = 200;
 var DEFAULT_HOT_DISCOVERY_WINDOW_MS7 = 10 * 60 * 1000;
@@ -78128,7 +77977,7 @@ function discoveryLimit7(scope) {
   return readPositiveIntEnv7([scopedName, "OPENSCOUT_TAIL_DISCOVERY_LIMIT"], fallback);
 }
 function projectsRoot2() {
-  return process.env.OPENSCOUT_TAIL_PI_SESSIONS_ROOT ?? join53(homedir40(), ".pi", "agent", "sessions");
+  return process.env.OPENSCOUT_TAIL_PI_SESSIONS_ROOT ?? join52(homedir40(), ".pi", "agent", "sessions");
 }
 function listJsonlFiles2(dir) {
   let entries2 = [];
@@ -78237,7 +78086,7 @@ function listRecentPiProjectTranscripts(root, scope) {
     return [];
   }
   for (const entry of projectDirs) {
-    const projectDir = join53(root, entry);
+    const projectDir = join52(root, entry);
     try {
       if (!statSync14(projectDir).isDirectory())
         continue;
@@ -78245,7 +78094,7 @@ function listRecentPiProjectTranscripts(root, scope) {
       continue;
     }
     for (const file of listJsonlFiles2(projectDir)) {
-      const path2 = join53(projectDir, file);
+      const path2 = join52(projectDir, file);
       try {
         const stats = statSync14(path2);
         if (stats.mtimeMs < cutoff)
@@ -78677,7 +78526,7 @@ async function readNew(handle, fromOffset, fileSize) {
 async function readTranscriptText(path2, maxBytes = RECENT_TRANSCRIPT_READ_BYTES) {
   let handle = null;
   try {
-    const stats = await stat9(path2);
+    const stats = await stat8(path2);
     if (stats.size <= 0)
       return "";
     const start = Math.max(0, stats.size - maxBytes);
@@ -78695,7 +78544,7 @@ async function readTranscriptText(path2, maxBytes = RECENT_TRANSCRIPT_READ_BYTES
 async function pumpWatcher(watcher) {
   let handle = null;
   try {
-    const stats = await stat9(watcher.transcriptPath);
+    const stats = await stat8(watcher.transcriptPath);
     if (stats.size < watcher.offset) {
       watcher.offset = 0;
       watcher.carry = "";
@@ -78760,7 +78609,7 @@ async function pumpAllWatchers() {
 }
 async function seedTail(watcher) {
   try {
-    const stats = await stat9(watcher.transcriptPath);
+    const stats = await stat8(watcher.transcriptPath);
     watcher.offset = watcher.source.parseFile ? 0 : stats.size;
     if (!watcher.source.parseFile && watcher.source.name === "codex") {
       const lines = await readRecentTranscriptLines(watcher.transcriptPath, RECENT_TRANSCRIPT_LINES_PER_FILE);
@@ -78986,7 +78835,7 @@ function snapshotRecentEvents(limit = 500) {
 async function readRecentTranscriptLines(path2, maxLines = RECENT_TRANSCRIPT_LINES_PER_FILE, maxBytes = RECENT_TRANSCRIPT_READ_BYTES) {
   let handle = null;
   try {
-    const stats = await stat9(path2);
+    const stats = await stat8(path2);
     if (stats.size <= 0)
       return [];
     const start = Math.max(0, stats.size - maxBytes);
@@ -79382,7 +79231,7 @@ function expandHome2(value) {
     return homedir41();
   }
   if (value.startsWith("~/")) {
-    return join54(homedir41(), value.slice(2));
+    return join53(homedir41(), value.slice(2));
   }
   return value;
 }
@@ -79391,17 +79240,17 @@ function encodeClaudeProjectsSlug2(absolutePath) {
   return `-${normalized.replace(/^\//u, "").replace(/\//gu, "-")}`;
 }
 function claudeProjectsRoot() {
-  return process.env.OPENSCOUT_CLAUDE_PROJECTS_ROOT?.trim() || join54(homedir41(), ".claude", "projects");
+  return process.env.OPENSCOUT_CLAUDE_PROJECTS_ROOT?.trim() || join53(homedir41(), ".claude", "projects");
 }
 function resolveClaudeHistoryPath(cwd, sessionId, options = {}) {
   const normalizedCwd = expandHome2(cwd)?.trim();
   if (!normalizedCwd) {
     return null;
   }
-  const projectDir = join54(claudeProjectsRoot(), encodeClaudeProjectsSlug2(normalizedCwd));
+  const projectDir = join53(claudeProjectsRoot(), encodeClaudeProjectsSlug2(normalizedCwd));
   const normalizedSessionId = sessionId?.trim().replace(/\.jsonl$/u, "") || "";
   if (normalizedSessionId) {
-    const exactPath = join54(projectDir, `${normalizedSessionId}.jsonl`);
+    const exactPath = join53(projectDir, `${normalizedSessionId}.jsonl`);
     if (existsSync40(exactPath)) {
       return exactPath;
     }
@@ -79419,7 +79268,7 @@ function findMostRecentJsonl(dir) {
     for (const entry of readdirSync11(dir)) {
       if (!entry.endsWith(".jsonl"))
         continue;
-      const full = join54(dir, entry);
+      const full = join53(dir, entry);
       const st = statSync15(full);
       if (!best || st.mtimeMs > best.mtime) {
         best = { path: full, mtime: st.mtimeMs };
@@ -79455,7 +79304,7 @@ function buildClaudeSessionRefLookup() {
       if (!projectEntry.isDirectory()) {
         continue;
       }
-      const projectDir = join54(projectsRoot3, projectEntry.name);
+      const projectDir = join53(projectsRoot3, projectEntry.name);
       for (const historyEntry of readdirSync11(projectDir, { withFileTypes: true })) {
         if (!historyEntry.isFile() || !historyEntry.name.endsWith(".jsonl")) {
           continue;
@@ -79464,14 +79313,14 @@ function buildClaudeSessionRefLookup() {
         if (!refId) {
           continue;
         }
-        const historyPath = join54(projectDir, historyEntry.name);
-        const stat10 = statSync15(historyPath);
+        const historyPath = join53(projectDir, historyEntry.name);
+        const stat9 = statSync15(historyPath);
         addSessionRefLookupEntry(entries2, {
           refId,
           historyPath,
           adapterType: "claude-code",
-          mtimeMs: stat10.mtimeMs,
-          size: stat10.size
+          mtimeMs: stat9.mtimeMs,
+          size: stat9.size
         });
       }
     }
@@ -79846,9 +79695,9 @@ function readHistorySnapshot(candidate) {
   if (!existsSync40(candidate.path)) {
     return null;
   }
-  const stat10 = statSync15(candidate.path);
+  const stat9 = statSync15(candidate.path);
   const cached = historySnapshotCache.get(candidate.path);
-  if (cached && cached.adapterType === candidate.adapterType && cached.mtimeMs === stat10.mtimeMs && cached.size === stat10.size) {
+  if (cached && cached.adapterType === candidate.adapterType && cached.mtimeMs === stat9.mtimeMs && cached.size === stat9.size) {
     return {
       historyPath: cached.historyPath,
       snapshot: cached.snapshot,
@@ -79859,7 +79708,7 @@ function readHistorySnapshot(candidate) {
     path: candidate.path,
     content: readFileSync23(candidate.path, "utf8"),
     adapterType: candidate.adapterType,
-    baseTimestampMs: stat10.mtimeMs
+    baseTimestampMs: stat9.mtimeMs
   });
   if (replay.events.length === 0) {
     return null;
@@ -79869,8 +79718,8 @@ function readHistorySnapshot(candidate) {
     snapshot: replay.snapshot,
     timedEvents: normalizeTimedEvents(replay.events),
     adapterType: candidate.adapterType,
-    mtimeMs: stat10.mtimeMs,
-    size: stat10.size
+    mtimeMs: stat9.mtimeMs,
+    size: stat9.size
   };
   historySnapshotCache.set(candidate.path, nextEntry);
   if (historySnapshotCache.size > HISTORY_SNAPSHOT_CACHE_LIMIT) {
@@ -80795,37 +80644,7 @@ async function loadBrokerSessionRefObservePayload(refId) {
   if (!endpoint) {
     return null;
   }
-  const storedAgent = queryAgentById(endpoint.agentId);
-  const actor = broker2.snapshot.actors?.[endpoint.agentId];
-  const endpointRoot = endpoint.projectRoot ?? endpoint.cwd ?? null;
-  if (storedAgent) {
-    const agent = {
-      ...storedAgent,
-      harness: endpoint.harness,
-      state: endpoint.state,
-      projectRoot: endpointRoot,
-      cwd: endpoint.cwd ?? endpointRoot,
-      transport: endpoint.transport,
-      harnessSessionId: endpoint.sessionId?.trim() || normalizedRef,
-      project: endpointRoot ? basename20(endpointRoot) : storedAgent.project
-    };
-    const observed2 = await buildAgentObservePayload(agent, broker2, {
-      sessionId: endpoint.sessionId?.trim() || normalizedRef
-    }).catch(() => null);
-    if (observed2 && observed2.source !== "unavailable") {
-      return {
-        kind: "agent",
-        refId: normalizedRef,
-        agentId: endpoint.agentId,
-        source: observed2.source,
-        fidelity: observed2.fidelity,
-        historyPath: observed2.historyPath,
-        sessionId: observed2.sessionId,
-        updatedAt: observed2.updatedAt,
-        data: observed2.data
-      };
-    }
-  }
+  const actor = broker2.snapshot.actors[endpoint.agentId];
   const metadata = endpointMetadataRecord(endpoint);
   const liveSnapshot = await readEndpointSessionSnapshot(endpoint).catch(() => null);
   const providerRefs = endpointProviderSessionRefs(normalizedRef, endpoint, liveSnapshot);
@@ -80982,13 +80801,13 @@ init_harness_catalog();
 init_agents();
 import { realpathSync as realpathSync3 } from "fs";
 import { homedir as homedir42 } from "os";
-import { isAbsolute as isAbsolute6, join as join55, resolve as resolve21 } from "path";
+import { isAbsolute as isAbsolute6, join as join54, resolve as resolve21 } from "path";
 function expandHomePath7(value) {
   if (value === "~") {
     return homedir42();
   }
   if (value.startsWith("~/")) {
-    return join55(homedir42(), value.slice(2));
+    return join54(homedir42(), value.slice(2));
   }
   return value;
 }
@@ -81381,7 +81200,7 @@ function parseRepoDiffRawZ(output, numstat) {
       oldPath = null;
     if (status === "deleted")
       newPath = null;
-    const stat10 = numstat.get(newPath ?? "") ?? numstat.get(oldPath ?? "");
+    const stat9 = numstat.get(newPath ?? "") ?? numstat.get(oldPath ?? "");
     files.push({
       oldPath,
       newPath,
@@ -81391,9 +81210,9 @@ function parseRepoDiffRawZ(output, numstat) {
       oldMode: fields[0] ?? null,
       newMode: fields[1] ?? null,
       similarity: twoPathRecord ? Number.parseInt(statusCode.slice(1), 10) || null : null,
-      binary: stat10?.binary ?? false,
-      additions: stat10?.additions ?? null,
-      deletions: stat10?.deletions ?? null,
+      binary: stat9?.binary ?? false,
+      additions: stat9?.additions ?? null,
+      deletions: stat9?.deletions ?? null,
       hunks: [],
       truncated: false
     });
@@ -82552,7 +82371,7 @@ init_db_queries();
 init_src();
 import { Database as Database5 } from "bun:sqlite";
 import { homedir as homedir43 } from "os";
-import { join as join56 } from "path";
+import { join as join55 } from "path";
 
 // packages/runtime/src/drizzle.ts
 init_drizzle_orm();
@@ -82575,8 +82394,8 @@ function resolveDbPath2() {
   const explicit = process.env.OPENSCOUT_CONTROL_PLANE_DB?.trim();
   if (explicit)
     return explicit;
-  const controlHome = process.env.OPENSCOUT_CONTROL_HOME ?? join56(homedir43(), ".openscout", "control-plane");
-  return join56(controlHome, "control-plane.sqlite");
+  const controlHome = process.env.OPENSCOUT_CONTROL_HOME ?? join55(homedir43(), ".openscout", "control-plane");
+  return join55(controlHome, "control-plane.sqlite");
 }
 function getDb() {
   if (!_db2) {
@@ -83917,7 +83736,7 @@ function trimTrailingSlash(value) {
 init_support_paths();
 import { randomUUID as randomUUID9 } from "crypto";
 import { existsSync as existsSync41, mkdirSync as mkdirSync15, readFileSync as readFileSync24, renameSync as renameSync5, writeFileSync as writeFileSync14 } from "fs";
-import { dirname as dirname30, join as join57 } from "path";
+import { dirname as dirname30, join as join56 } from "path";
 
 class ScoutbotReminderError extends Error {
   status;
@@ -83928,7 +83747,7 @@ class ScoutbotReminderError extends Error {
   }
 }
 function createScoutbotReminderStore(input = {}) {
-  const filePath = input.filePath ?? join57(resolveOpenScoutSupportPaths().controlHome, "scoutbot-reminders.json");
+  const filePath = input.filePath ?? join56(resolveOpenScoutSupportPaths().controlHome, "scoutbot-reminders.json");
   const now = input.now ?? Date.now;
   const readReminders = () => {
     if (!existsSync41(filePath)) {
@@ -84090,7 +83909,7 @@ function titleFromBody(body) {
 
 // packages/web/server/scoutbot-credentials.ts
 init_support_paths();
-import { createCipheriv, createDecipheriv, randomBytes as randomBytes6 } from "crypto";
+import { createCipheriv, createDecipheriv, randomBytes as randomBytes5 } from "crypto";
 import {
   existsSync as existsSync42,
   mkdirSync as mkdirSync16,
@@ -84098,12 +83917,12 @@ import {
   renameSync as renameSync6,
   writeFileSync as writeFileSync15
 } from "fs";
-import { dirname as dirname31, join as join58 } from "path";
+import { dirname as dirname31, join as join57 } from "path";
 var OPENAI_KEY_AAD = "openscout:scoutbot:openai:v1";
 function createScoutbotCredentialStore(input = {}) {
   const paths2 = resolveOpenScoutSupportPaths();
-  const filePath = input.filePath ?? join58(paths2.controlHome, "scoutbot-credentials.json");
-  const keyPath = input.keyPath ?? join58(paths2.controlHome, "scoutbot-credentials.key");
+  const filePath = input.filePath ?? join57(paths2.controlHome, "scoutbot-credentials.json");
+  const keyPath = input.keyPath ?? join57(paths2.controlHome, "scoutbot-credentials.key");
   const getOpenAIKey = () => {
     const stored = readStore(filePath).openai;
     if (!stored)
@@ -84185,7 +84004,7 @@ function readOrCreateKey(keyPath) {
     } catch {}
   }
   mkdirSync16(dirname31(keyPath), { recursive: true });
-  const key = randomBytes6(32);
+  const key = randomBytes5(32);
   const tmp = `${keyPath}.tmp`;
   writeFileSync15(tmp, `${key.toString("base64url")}
 `, { encoding: "utf8", mode: 384 });
@@ -84193,7 +84012,7 @@ function readOrCreateKey(keyPath) {
   return key;
 }
 function encryptSecret(value, key, aad) {
-  const iv = randomBytes6(12);
+  const iv = randomBytes5(12);
   const cipher = createCipheriv("aes-256-gcm", key, iv);
   cipher.setAAD(Buffer.from(aad, "utf8"));
   const ciphertext = Buffer.concat([cipher.update(value, "utf8"), cipher.final()]);
@@ -85770,11 +85589,9 @@ function getScoutVoiceHealthSnapshot(now = Date.now()) {
       adapter: "hudson-dictation",
       capture: "native",
       detail: "Scout voice host is not running. Launch Scout Menu and try again.",
-      inputDevice: null,
       host: null
     };
   }
-  const inputDevice = resolveSessionInputDevice(host);
   const micPermission = host.settings.permissions?.find((entry) => entry.kind === "microphone");
   const microphoneGranted = micPermission?.granted ?? false;
   const microphoneCanRequest = micPermission?.canRequest ?? false;
@@ -85787,7 +85604,6 @@ function getScoutVoiceHealthSnapshot(now = Date.now()) {
       capture: "native",
       detail,
       microphoneGranted: false,
-      inputDevice,
       microphoneCanRequest,
       host: {
         hostId: host.hostId,
@@ -85804,7 +85620,6 @@ function getScoutVoiceHealthSnapshot(now = Date.now()) {
     detail: null,
     microphoneGranted: true,
     microphoneCanRequest: false,
-    inputDevice,
     host: {
       hostId: host.hostId,
       platform: host.platform,
@@ -85963,7 +85778,7 @@ function mergeVoiceSettings(current, patch) {
 // packages/web/server/vox.ts
 import { existsSync as existsSync43, mkdirSync as mkdirSync17, readFileSync as readFileSync26, writeFileSync as writeFileSync16 } from "fs";
 import { homedir as homedir44 } from "os";
-import { dirname as dirname33, join as join60 } from "path";
+import { dirname as dirname33, join as join59 } from "path";
 import { randomUUID as randomUUID11 } from "crypto";
 var VOX_CLIENT_ID = "openscout-web";
 var DEFAULT_VOX_RPC_PORT = 42137;
@@ -86069,10 +85884,10 @@ function resolveVoxSpeechDefaults(env = process.env) {
   const modelOverride = firstNonEmptyString7(env.OPENSCOUT_VOX_TTS_MODEL_ID, env.VOX_TTS_MODEL_ID);
   const voiceOverride = firstNonEmptyString7(env.OPENSCOUT_VOX_TTS_VOICE_ID, env.VOX_TTS_VOICE_ID);
   const voxHome = resolveVoxHome(env);
-  const preferences = readJsonRecord2(join60(voxHome, "preferences.json"));
+  const preferences = readJsonRecord2(join59(voxHome, "preferences.json"));
   const preferredModel = modelOverride ?? nestedString(preferences, "speech", "preferredSynthesisModelId");
   const preferredVoice = voiceOverride ?? nestedString(preferences, "speech", "preferredSynthesisVoiceId");
-  const providers2 = readVoxTtsProviders(join60(voxHome, "providers.json"));
+  const providers2 = readVoxTtsProviders(join59(voxHome, "providers.json"));
   const modelId2 = preferredModel ?? modelForPreferredVoice(providers2, preferredVoice) ?? firstConfiguredNonAppleTtsModel(providers2) ?? DEFAULT_VOX_SYNTHESIS_MODEL_ID;
   const voiceId = preferredVoice ?? defaultVoiceForModel(providers2, modelId2);
   return {
@@ -86096,13 +85911,13 @@ function ensureOpenScoutVoxOrigins() {
   }
 }
 function resolveOpenScoutVoxOriginsPath() {
-  return join60(resolveVoxHome(), "origins.d", "openscout.json");
+  return join59(resolveVoxHome(), "origins.d", "openscout.json");
 }
 function resolveVoxHome(env = process.env) {
-  return env.VOX_HOME ?? join60(homedir44(), ".vox");
+  return env.VOX_HOME ?? join59(homedir44(), ".vox");
 }
 function resolveVoxRpcPort() {
-  const runtimePath = process.env.VOX_RUNTIME_PATH ?? join60(resolveVoxHome(), "runtime.json");
+  const runtimePath = process.env.VOX_RUNTIME_PATH ?? join59(resolveVoxHome(), "runtime.json");
   if (!existsSync43(runtimePath)) {
     const port = Number(process.env.VOX_PORT);
     return Number.isFinite(port) && port > 0 ? port : DEFAULT_VOX_RPC_PORT;
@@ -86395,7 +86210,7 @@ function firstNonEmptyString8(...values) {
 // packages/web/server/realtime-voice.ts
 import { Database as Database6 } from "bun:sqlite";
 import { mkdirSync as mkdirSync18 } from "fs";
-import { dirname as dirname34, join as join61 } from "path";
+import { dirname as dirname34, join as join60 } from "path";
 
 // packages/web/shared/realtime-voice.ts
 var SCOUT_REALTIME_VOICE_CALL_PATH = "/api/voice/realtime/call";
@@ -86674,7 +86489,7 @@ async function createScoutRealtimeVoiceCall(input) {
   return body;
 }
 function defaultRealtimeVoiceAdmissionPath() {
-  return join61(dirname34(resolveDbPath()), "realtime-voice-admission.sqlite");
+  return join60(dirname34(resolveDbPath()), "realtime-voice-admission.sqlite");
 }
 function positiveInteger3(value, fallback) {
   const parsed = Number.parseInt(value?.trim() ?? "", 10);
@@ -87903,7 +87718,7 @@ import { dirname as dirname37, isAbsolute as isAbsolute9, relative as relative7,
 // packages/web/server/material-heuristics.ts
 import { existsSync as existsSync46, mkdirSync as mkdirSync20, readFileSync as readFileSync28, statSync as statSync19, watch, writeFileSync as writeFileSync18 } from "fs";
 import { homedir as homedir47 } from "os";
-import { basename as basename24, dirname as dirname36, isAbsolute as isAbsolute8, join as join64, resolve as resolve25 } from "path";
+import { basename as basename24, dirname as dirname36, isAbsolute as isAbsolute8, join as join63, resolve as resolve25 } from "path";
 import { createRequire as createRequire3 } from "module";
 var require4 = createRequire3(import.meta.url);
 var picomatch = require4("picomatch");
@@ -87947,7 +87762,7 @@ var globalCachePath = null;
 var globalCache = null;
 var globalWatcher = null;
 function globalHeuristicsPath() {
-  return join64(process.env.HOME ?? homedir47(), ".openscout", "heuristics.json");
+  return join63(process.env.HOME ?? homedir47(), ".openscout", "heuristics.json");
 }
 function normalizePathForGlob(path2) {
   return path2.replaceAll("\\", "/").replace(/^\.\//u, "");
@@ -88130,9 +87945,9 @@ function writeGlobalHeuristicsFile(raw2) {
   return writeHeuristicsFile(globalHeuristicsPath(), raw2);
 }
 function projectHeuristicsPath(workspaceRoot) {
-  const expanded = workspaceRoot.startsWith("~/") ? join64(process.env.HOME ?? homedir47(), workspaceRoot.slice(2)) : workspaceRoot;
+  const expanded = workspaceRoot.startsWith("~/") ? join63(process.env.HOME ?? homedir47(), workspaceRoot.slice(2)) : workspaceRoot;
   const root = isAbsolute8(expanded) ? resolve25(expanded) : resolve25(expanded);
-  return join64(root, ".openscout", "heuristics.json");
+  return join63(root, ".openscout", "heuristics.json");
 }
 function projectHeuristicsFile(workspaceRoot) {
   return readHeuristicsFile(projectHeuristicsPath(workspaceRoot));
@@ -88263,8 +88078,8 @@ function normalizeExistingPath(value) {
     return null;
   }
   try {
-    const stat10 = statSync20(absolute);
-    return stat10.isDirectory() ? absolute : dirname37(absolute);
+    const stat9 = statSync20(absolute);
+    return stat9.isDirectory() ? absolute : dirname37(absolute);
   } catch {
     return null;
   }
@@ -89013,8 +88828,8 @@ async function resolveTrustedMaterialPath(work, materialId) {
     if (!pathInsideRoot(realPath, realRoot)) {
       return { ok: false, status: 403, error: "material path is outside its trusted root" };
     }
-    const stat10 = statSync20(realPath);
-    if (!stat10.isFile()) {
+    const stat9 = statSync20(realPath);
+    if (!stat9.isFile()) {
       return { ok: false, status: 415, error: "material is not a file" };
     }
     return { ok: true, material, realPath };
@@ -89028,12 +88843,12 @@ async function readWorkMaterialRaw(work, materialId) {
     return resolved;
   }
   try {
-    const stat10 = statSync20(resolved.realPath);
+    const stat9 = statSync20(resolved.realPath);
     return {
       ok: true,
       realPath: resolved.realPath,
       mediaType: materialMediaType(resolved.realPath),
-      sizeBytes: stat10.size
+      sizeBytes: stat9.size
     };
   } catch {
     return { ok: false, status: 404, error: "material could not be read" };
@@ -89063,8 +88878,8 @@ async function readWorkMaterialContent(work, materialId) {
     if (!pathInsideRoot(realPath, realRoot)) {
       return { ok: false, status: 403, error: "material path is outside its trusted root" };
     }
-    const stat10 = statSync20(realPath);
-    if (!stat10.isFile()) {
+    const stat9 = statSync20(realPath);
+    if (!stat9.isFile()) {
       return { ok: false, status: 415, error: "material is not a file" };
     }
     const buffer = readFileSync29(realPath);
@@ -89096,9 +88911,9 @@ async function readWorkMaterialContent(work, materialId) {
 
 // packages/web/server/plan-documents.ts
 import { createHash as createHash9 } from "crypto";
-import { readdir as readdir4, readFile as readFile17, stat as stat10 } from "fs/promises";
+import { readdir as readdir4, readFile as readFile16, stat as stat9 } from "fs/promises";
 import { homedir as homedir49 } from "os";
-import { basename as basename25, isAbsolute as isAbsolute10, join as join65, relative as relative8, resolve as resolve27 } from "path";
+import { basename as basename25, isAbsolute as isAbsolute10, join as join64, relative as relative8, resolve as resolve27 } from "path";
 var HOME3 = homedir49();
 var PLAN_SUBDIRECTORIES = [
   "plans",
@@ -89190,7 +89005,7 @@ async function walkMarkdownFiles(directory, remaining = { count: MAX_FILES_PER_R
   for (const entry of entries2) {
     if (remaining.count <= 0)
       break;
-    const fullPath = join65(directory, entry.name);
+    const fullPath = join64(directory, entry.name);
     if (entry.isDirectory()) {
       if (entry.name === "node_modules" || entry.name === ".git" || entry.name === "dist") {
         continue;
@@ -89209,11 +89024,11 @@ async function discoverPlanFiles(root) {
   if (root.kind === "home") {
     return walkMarkdownFiles(root.root);
   }
-  const fromPlanDirs = (await Promise.all(PLAN_SUBDIRECTORIES.map((subdir) => walkMarkdownFiles(join65(root.root, subdir))))).flat();
+  const fromPlanDirs = (await Promise.all(PLAN_SUBDIRECTORIES.map((subdir) => walkMarkdownFiles(join64(root.root, subdir))))).flat();
   let directPlanFiles = [];
   try {
     const entries2 = await readdir4(root.root, { withFileTypes: true });
-    directPlanFiles = entries2.filter((entry) => entry.isFile() && /\.plan\.md$/i.test(entry.name)).map((entry) => join65(root.root, entry.name));
+    directPlanFiles = entries2.filter((entry) => entry.isFile() && /\.plan\.md$/i.test(entry.name)).map((entry) => join64(root.root, entry.name));
   } catch {
     directPlanFiles = [];
   }
@@ -89395,11 +89210,11 @@ function idForPlan(root, filePath) {
   return `plan-doc:${hash}`;
 }
 async function readPlanDocument(root, filePath) {
-  const fileStats = await stat10(filePath).catch(() => null);
+  const fileStats = await stat9(filePath).catch(() => null);
   if (!fileStats || !fileStats.isFile() || fileStats.size > MAX_DOCUMENT_BYTES) {
     return null;
   }
-  const rawText = await readFile17(filePath, "utf8").catch(() => null);
+  const rawText = await readFile16(filePath, "utf8").catch(() => null);
   if (rawText === null)
     return null;
   const id = idForPlan(root, filePath);
@@ -89480,7 +89295,7 @@ init_file_preview();
 init_support_paths();
 import {
   createHmac as createHmac2,
-  randomBytes as randomBytes7,
+  randomBytes as randomBytes6,
   timingSafeEqual as timingSafeEqual2
 } from "crypto";
 import {
@@ -89490,7 +89305,7 @@ import {
   readFileSync as readFileSync31,
   writeFileSync as writeFileSync19
 } from "fs";
-import { join as join66 } from "path";
+import { join as join65 } from "path";
 var SERVICE_LINK_SECRET_FILE = "service-link-signing.key";
 var SERVICE_LINK_VERSION = "v1";
 var SERVICE_LINK_TTL_MS = 60000;
@@ -89509,7 +89324,7 @@ function parseScoutServicesRestartTarget(value) {
 function createSignedScoutServicesRestartUrl(target2, options = {}) {
   const nowMs3 = options.nowMs ?? Date.now();
   const expiresAt = nowMs3 + SERVICE_LINK_TTL_MS;
-  const nonce = options.nonce ?? randomBytes7(16).toString("base64url");
+  const nonce = options.nonce ?? randomBytes6(16).toString("base64url");
   const payload = serviceLinkPayload("restart", target2, String(expiresAt), nonce);
   const sig = signPayload(payload);
   const params = new URLSearchParams({
@@ -89537,7 +89352,7 @@ function signPayload(payload) {
   return createHmac2("sha256", readOrCreateServiceLinkSecret()).update(payload).digest("base64url");
 }
 function serviceLinkSecretPath() {
-  return join66(resolveOpenScoutSupportPaths().supportDirectory, SERVICE_LINK_SECRET_FILE);
+  return join65(resolveOpenScoutSupportPaths().supportDirectory, SERVICE_LINK_SECRET_FILE);
 }
 function readOrCreateServiceLinkSecret() {
   const path2 = serviceLinkSecretPath();
@@ -89546,7 +89361,7 @@ function readOrCreateServiceLinkSecret() {
   }
   const supportDirectory = resolveOpenScoutSupportPaths().supportDirectory;
   mkdirSync21(supportDirectory, { recursive: true, mode: 448 });
-  const secret = randomBytes7(32);
+  const secret = randomBytes6(32);
   try {
     writeFileSync19(path2, `${secret.toString("base64url")}
 `, {
@@ -90557,7 +90372,7 @@ async function readProcessCwd2(pid) {
   return await readProcessCwd(pid);
 }
 function claudeProjectDirForCwd(cwd) {
-  return join72(homedir55(), ".claude", "projects", cwd.replace(/\//gu, "-"));
+  return join71(homedir55(), ".claude", "projects", cwd.replace(/\//gu, "-"));
 }
 function mostRecentClaudeSessionForCwd(cwd) {
   const dir = claudeProjectDirForCwd(cwd);
@@ -90571,7 +90386,7 @@ function mostRecentClaudeSessionForCwd(cwd) {
   for (const entry of entries2) {
     if (!entry.endsWith(".jsonl"))
       continue;
-    const transcriptPath = join72(dir, entry);
+    const transcriptPath = join71(dir, entry);
     try {
       const mtimeMs = statSync25(transcriptPath).mtimeMs;
       if (!best || mtimeMs > best.mtimeMs) {
@@ -90594,7 +90409,7 @@ function readRelayRuntimeStateForTmuxSession(sessionName) {
     return null;
   }
   for (const entry of entries2) {
-    const statePath = join72(agentsDir, entry, "state.json");
+    const statePath = join71(agentsDir, entry, "state.json");
     try {
       const parsed = JSON.parse(readFileSync35(statePath, "utf8"));
       if (parsed.sessionId === sessionName)
@@ -91814,7 +91629,7 @@ function expandHomePath8(value) {
     return homedir55();
   }
   if (value.startsWith("~/")) {
-    return join72(homedir55(), value.slice(2));
+    return join71(homedir55(), value.slice(2));
   }
   return value;
 }
@@ -91943,7 +91758,7 @@ function brokerDispatchReviewPrompt(input) {
     "Review this from first principles, then inspect the relevant implementation.",
     "",
     "Topic: OpenScout failed dispatch / failed delivery",
-    "Workspace: /Users/art/dev/openscout",
+    "Workspace: /Users/example/dev/openscout",
     "",
     "User goal:",
     "- Diagnose this failed dispatch from the Dispatch screen.",
@@ -92121,14 +91936,6 @@ async function refreshOpenScoutBuildInfo(currentDirectory) {
   const snapshot = await probe.fresh({ maxAgeMs: 0 });
   return openScoutBuildInfoFromGit(snapshot.value);
 }
-async function resolveOpenScoutBuildInfo(currentDirectory, refresh) {
-  if (refresh)
-    return refreshOpenScoutBuildInfo(currentDirectory);
-  const cached2 = gitBuildInfoProbe.for(currentDirectory).read();
-  if (cached2.value)
-    return openScoutBuildInfoFromGit(cached2.value);
-  return warmOpenScoutBuildInfo(currentDirectory);
-}
 function permissionSetupHint(detail) {
   const normalized = detail.toLowerCase();
   const mentionsPermission = /permission|approval|allow|blocked/.test(normalized);
@@ -92908,7 +92715,7 @@ function isLikelyHudProjectRoot(root) {
   } catch {
     return false;
   }
-  return HUD_PROJECT_MARKERS.some((marker) => existsSync53(join72(normalized, marker)));
+  return HUD_PROJECT_MARKERS.some((marker) => existsSync53(join71(normalized, marker)));
 }
 function currentDirectoryProjectOption(currentDirectory, defaultHarness) {
   const trimmed = currentDirectory.trim();
@@ -93267,7 +93074,8 @@ async function createOpenScoutWebServer(options) {
     publicOrigin: options.publicOrigin
   }));
   app.get("/api/build", async (c) => {
-    return c.json(await resolveOpenScoutBuildInfo(currentDirectory, c.req.query("refresh") === "1"));
+    const buildInfo = c.req.query("refresh") === "1" ? await refreshOpenScoutBuildInfo(currentDirectory) : loadOpenScoutBuildInfo(currentDirectory);
+    return c.json(buildInfo);
   });
   app.get("/api/knowledge/status", (c) => {
     const store2 = new SQLiteKnowledgeStore(undefined, undefined, { readonly: true });
@@ -95069,7 +94877,6 @@ async function createOpenScoutWebServer(options) {
       pronouns: config.pronouns ?? "",
       hue: config.hue ?? 195,
       monogram: config.monogram ?? "",
-      avatar: config.avatar ?? "",
       bio: config.bio ?? "",
       timezone: config.timezone ?? Intl.DateTimeFormat().resolvedOptions().timeZone,
       workingHours: config.workingHours ?? "08:00 \u2013 18:00",
@@ -95184,7 +94991,6 @@ async function createOpenScoutWebServer(options) {
       "handle",
       "pronouns",
       "monogram",
-      "avatar",
       "bio",
       "timezone",
       "workingHours",
@@ -95224,7 +95030,6 @@ async function createOpenScoutWebServer(options) {
       pronouns: config.pronouns ?? "",
       hue: config.hue ?? 195,
       monogram: config.monogram ?? "",
-      avatar: config.avatar ?? "",
       bio: config.bio ?? "",
       timezone: config.timezone ?? Intl.DateTimeFormat().resolvedOptions().timeZone,
       workingHours: config.workingHours ?? "08:00 \u2013 18:00",
@@ -95761,12 +95566,12 @@ async function createOpenScoutWebServer(options) {
   });
   mountScoutVoiceRoutes(app, { resolveOpenAIApiKey: scoutbot.resolveOpenAIApiKey });
   if (true) {
-    const fixturesRoot = join72(process.cwd(), "dev", "scoutbot-fx-fixtures");
+    const fixturesRoot = join71(process.cwd(), "dev", "scoutbot-fx-fixtures");
     app.get("/api/dev/scoutbot-fx/fixtures", (c) => {
       if (!existsSync53(fixturesRoot)) {
         return c.json({ fixtures: [], generatedAt: null, available: false });
       }
-      const manifestPath = join72(fixturesRoot, "manifest.json");
+      const manifestPath = join71(fixturesRoot, "manifest.json");
       if (!existsSync53(manifestPath)) {
         return c.json({ fixtures: [], generatedAt: null, available: true, note: "manifest missing \u2014 re-run the generator script" });
       }
@@ -95790,7 +95595,7 @@ async function createOpenScoutWebServer(options) {
       if (!/^[a-zA-Z0-9._-]+\.wav$/.test(raw2)) {
         return c.json({ error: "invalid fixture name" }, 400);
       }
-      const filePath = join72(fixturesRoot, raw2);
+      const filePath = join71(fixturesRoot, raw2);
       if (!existsSync53(filePath)) {
         return c.json({ error: "fixture not found" }, 404);
       }
@@ -96040,7 +95845,7 @@ function resolveOpenScoutWebApplicationServerIdentity(env = process.env, _machin
 
 // packages/web/server/relay.ts
 import { mkdir as mkdir15, writeFile as writeFile13 } from "fs/promises";
-import { basename as basename32, join as join73 } from "path";
+import { basename as basename32, join as join72 } from "path";
 import { randomUUID as randomUUID12 } from "crypto";
 var UPLOAD_DIR = "/tmp/scout-uploads";
 function sanitizeUploadName(name2) {
@@ -96060,7 +95865,7 @@ async function handleRelayUpload(req) {
     return Response.json({ error: "Invalid name" }, { status: 400 });
   }
   await mkdir15(UPLOAD_DIR, { recursive: true, mode: 448 });
-  const filepath = join73(UPLOAD_DIR, `${randomUUID12()}-${safeName}`);
+  const filepath = join72(UPLOAD_DIR, `${randomUUID12()}-${safeName}`);
   await writeFile13(filepath, Buffer.from(data, "base64"), { mode: 384 });
   return Response.json({ path: filepath });
 }
@@ -96592,7 +96397,7 @@ function startProcessParentWatchdog(expectedParentPidRaw, options = {}) {
 process.title = "scout-web";
 var port = Number.parseInt(process.env.OPENSCOUT_WEB_PORT ?? process.env.SCOUT_WEB_PORT ?? String(resolveWebPort()), 10);
 var hostname2 = resolveScoutWebBindHost(process.env);
-var webAuthToken = resolveWebAuthToken(process.env);
+var webAuthToken = process.env.OPENSCOUT_WEB_AUTH_TOKEN?.trim() || randomBytes7(32).toString("base64url");
 var currentDirectory = resolveOpenScoutSetupContextRoot({
   env: process.env,
   fallbackDirectory: process.cwd()
@@ -96606,12 +96411,12 @@ function resolveStaticRoot2() {
     return process.env.OPENSCOUT_WEB_STATIC_ROOT.trim();
   }
   const selfDir = dirname43(fileURLToPath10(import.meta.url));
-  const siblingClientRoot = join74(selfDir, "client");
-  if (existsSync55(join74(siblingClientRoot, "index.html"))) {
+  const siblingClientRoot = join73(selfDir, "client");
+  if (existsSync55(join73(siblingClientRoot, "index.html"))) {
     return siblingClientRoot;
   }
   const sourceDistClientRoot = resolve31(selfDir, "../dist/client");
-  if (existsSync55(join74(sourceDistClientRoot, "index.html"))) {
+  if (existsSync55(join73(sourceDistClientRoot, "index.html"))) {
     return sourceDistClientRoot;
   }
   return;