@openscout/scout 0.2.91 → 0.2.92

package/dist/main.mjs

@@ -69325,6 +69325,9 @@ function classifyProcesses(records, expected, now = Date.now()) {
   }
   return { layers, foreign, expected };
 }
+function readLifecycleTree(expected) {
+  return classifyProcesses(readProcessTable(), expected);
+}
 function layerProcesses(tree, layers) {
   return layers.flatMap((layer) => tree.layers[layer]);
 }
@@ -99818,7 +99821,7 @@ var init_stdio2 = __esm(() => {
 // ../../apps/desktop/src/shared/product.ts
 var SCOUT_APP_VERSION;
 var init_product = __esm(() => {
-  SCOUT_APP_VERSION = process.env.SCOUT_APP_VERSION?.trim() || "0.2.91";
+  SCOUT_APP_VERSION = process.env.SCOUT_APP_VERSION?.trim() || "0.2.92";
 });
 
 // ../../apps/desktop/src/core/mcp/stdio-server-lifecycle.ts
@@ -103879,10 +103882,13 @@ var init_inbox2 = __esm(() => {
 // ../../apps/desktop/src/cli/commands/install.ts
 var exports_install = {};
 __export(exports_install, {
+  selectLatestAppRelease: () => selectLatestAppRelease,
   runInstallCommand: () => runInstallCommand,
   renderInstallCommandHelp: () => renderInstallCommandHelp,
   parseInstallArgs: () => parseInstallArgs,
-  findAppDmgAsset: () => findAppDmgAsset
+  findAppDmgAsset: () => findAppDmgAsset,
+  assertPublishedAppRelease: () => assertPublishedAppRelease,
+  appVersionFromReleaseTag: () => appVersionFromReleaseTag
 });
 import { spawnSync as spawnSync8 } from "child_process";
 import { existsSync as existsSync39, mkdtempSync, rmSync as rmSync5, writeFileSync as writeFileSync9 } from "fs";
@@ -103895,11 +103901,12 @@ function renderInstallCommandHelp() {
     "Usage:",
     "  scout install                 # install or update to the latest signed release",
     "  scout install --check         # report installed vs latest, install nothing",
-    "  scout install --version <tag> # install a specific release (e.g. v0.2.70)",
+    "  scout install --version <tag> # install a specific app release (e.g. app-v0.2.92)",
     "  scout install --force         # reinstall even if already up to date",
     "  scout install --no-restart    # do not relaunch OpenScout after installing",
     "",
     "Behavior:",
+    "  Requires macOS 26 or later on Apple silicon.",
     "  Downloads the signed + notarized OpenScout.dmg from the GitHub release,",
     "  installs OpenScout.app (which embeds the menu bar helper) to /Applications,",
     "  and clears the Gatekeeper quarantine flag so it opens cleanly.",
@@ -103936,7 +103943,7 @@ function parseInstallArgs(args) {
     if (arg === "--version" || arg === "--tag") {
       const value = args[index2 + 1];
       if (!value || value.startsWith("-")) {
-        throw new ScoutCliError(`${arg} requires a release tag (e.g. ${arg} v0.2.70)`);
+        throw new ScoutCliError(`${arg} requires an app release tag (e.g. ${arg} app-v0.2.92)`);
       }
       options.version = value;
       index2 += 1;
@@ -103954,9 +103961,20 @@ function parseInstallArgs(args) {
   }
   return options;
 }
-function stripLeadingV(tag) {
-  const trimmed = tag.trim();
-  return trimmed.startsWith("v") ? trimmed.slice(1) : trimmed;
+function appVersionFromReleaseTag(tag) {
+  const match = tag.trim().match(/^app-v(\d+\.\d+\.\d+)$/);
+  if (!match) {
+    throw new ScoutCliError(`invalid OpenScout app release tag: ${tag}`);
+  }
+  return match[1];
+}
+function normalizeRequestedAppTag(value) {
+  const trimmed = value.trim();
+  if (/^app-v\d+\.\d+\.\d+$/.test(trimmed))
+    return trimmed;
+  if (/^v?\d+\.\d+\.\d+$/.test(trimmed))
+    return `app-v${trimmed.replace(/^v/, "")}`;
+  throw new ScoutCliError(`invalid OpenScout app version: ${value}`);
 }
 function formatBytes(bytes) {
   if (bytes <= 0)
@@ -103976,38 +103994,78 @@ function getInstalledVersion() {
 }
 async function fetchRelease(version3) {
   const base = `https://api.github.com/repos/${GITHUB_OWNER}/${GITHUB_REPO}/releases`;
-  const apiUrl = version3 ? `${base}/tags/${version3}` : `${base}/latest`;
+  const requestedTag = version3 ? normalizeRequestedAppTag(version3) : null;
+  const apiUrl = requestedTag ? `${base}/tags/${requestedTag}` : `${base}?per_page=100`;
   try {
     const response = await fetch(apiUrl, {
       headers: { Accept: "application/vnd.github+json", "User-Agent": USER_AGENT }
     });
     if (response.ok) {
-      return await response.json();
+      const payload = await response.json();
+      return requestedTag ? assertPublishedAppRelease(payload, requestedTag) : selectLatestAppRelease(payload);
     }
   } catch {}
-  const apiPath = version3 ? `repos/${GITHUB_OWNER}/${GITHUB_REPO}/releases/tags/${version3}` : `repos/${GITHUB_OWNER}/${GITHUB_REPO}/releases/latest`;
+  const apiPath = requestedTag ? `repos/${GITHUB_OWNER}/${GITHUB_REPO}/releases/tags/${requestedTag}` : `repos/${GITHUB_OWNER}/${GITHUB_REPO}/releases?per_page=100`;
   const gh = spawnSync8("gh", ["api", apiPath], { encoding: "utf8" });
   if ((gh.status ?? 1) === 0 && gh.stdout.trim()) {
-    return JSON.parse(gh.stdout);
+    const payload = JSON.parse(gh.stdout);
+    return requestedTag ? assertPublishedAppRelease(payload, requestedTag) : selectLatestAppRelease(payload);
+  }
+  throw new ScoutCliError(version3 ? `app release "${requestedTag}" not found on GitHub (${GITHUB_OWNER}/${GITHUB_REPO})` : `could not fetch the latest OpenScout release from GitHub (${GITHUB_OWNER}/${GITHUB_REPO})`);
+}
+function compareAppReleaseVersions(left, right) {
+  const leftParts = appVersionFromReleaseTag(left.tag_name).split(".").map(Number);
+  const rightParts = appVersionFromReleaseTag(right.tag_name).split(".").map(Number);
+  for (let index2 = 0;index2 < 3; index2 += 1) {
+    const difference = (rightParts[index2] ?? 0) - (leftParts[index2] ?? 0);
+    if (difference !== 0)
+      return difference;
+  }
+  return 0;
+}
+function assertPublishedAppRelease(release, expectedTag) {
+  if (expectedTag && release.tag_name !== expectedTag) {
+    throw new ScoutCliError(`GitHub returned app release ${release.tag_name || "<missing>"}; expected ${expectedTag}`);
+  }
+  if (release.draft || release.prerelease) {
+    throw new ScoutCliError(`app release ${release.tag_name} is not a published stable release`);
   }
-  throw new ScoutCliError(version3 ? `release "${version3}" not found on GitHub (${GITHUB_OWNER}/${GITHUB_REPO})` : `could not fetch the latest OpenScout release from GitHub (${GITHUB_OWNER}/${GITHUB_REPO})`);
+  findAppDmgAsset(release);
+  return release;
 }
 function findAppDmgAsset(release) {
   const assets = release.assets ?? [];
-  const isMenuOnly = (name2) => name2.toLowerCase().startsWith("openscoutmenu");
-  const isDmg = (name2) => name2.toLowerCase().endsWith(".dmg");
-  const versioned = assets.find((asset) => /^openscout-\d/i.test(asset.name) && isDmg(asset.name) && !isMenuOnly(asset.name));
-  if (versioned)
-    return versioned;
-  const latestAlias = assets.find((asset) => asset.name.toLowerCase() === "openscout.dmg");
-  if (latestAlias)
-    return latestAlias;
-  const anyProductDmg = assets.find((asset) => isDmg(asset.name) && !isMenuOnly(asset.name));
-  if (anyProductDmg)
-    return anyProductDmg;
-  throw new ScoutCliError(`no OpenScout.app DMG found in release ${release.tag_name}. Assets: ${assets.map((asset) => asset.name).join(", ") || "(none)"}`);
+  const version3 = appVersionFromReleaseTag(release.tag_name);
+  const expectedName = `OpenScout-${version3}.dmg`;
+  const exact = assets.find((asset) => asset.name === expectedName);
+  if (exact)
+    return exact;
+  throw new ScoutCliError(`immutable ${expectedName} not found in app release ${release.tag_name}. Assets: ${assets.map((asset) => asset.name).join(", ") || "(none)"}`);
+}
+function selectLatestAppRelease(releases) {
+  const candidates = releases.filter((candidate) => {
+    if (candidate.draft || candidate.prerelease)
+      return false;
+    if (!/^app-v\d+\.\d+\.\d+$/.test(candidate.tag_name))
+      return false;
+    try {
+      findAppDmgAsset(candidate);
+      return true;
+    } catch {
+      return false;
+    }
+  });
+  candidates.sort(compareAppReleaseVersions);
+  const release = candidates[0];
+  if (!release) {
+    throw new ScoutCliError(`no published app-v* release with an immutable OpenScout DMG found on GitHub (${GITHUB_OWNER}/${GITHUB_REPO})`);
+  }
+  return release;
 }
 async function downloadDmg(asset, destination, context) {
+  if (!Number.isSafeInteger(asset.size) || asset.size <= 0) {
+    throw new ScoutCliError(`release asset ${asset.name} has an invalid reported size: ${asset.size}`);
+  }
   context.stderr(`Downloading ${asset.name} (${formatBytes(asset.size)})\u2026`);
   const response = await fetch(asset.browser_download_url, {
     redirect: "follow",
@@ -104020,10 +104078,66 @@ async function downloadDmg(asset, destination, context) {
   if (buffer.length === 0) {
     throw new ScoutCliError("download failed: empty response body");
   }
+  if (buffer.length !== asset.size) {
+    throw new ScoutCliError(`download failed: ${asset.name} is ${buffer.length} bytes; GitHub reported ${asset.size}`);
+  }
   writeFileSync9(destination, buffer);
 }
+function commandOutput(command, args, label) {
+  const result = spawnSync8(command, args, { encoding: "utf8" });
+  const output = `${result.stdout ?? ""}${result.stderr ?? ""}`;
+  if ((result.status ?? 1) !== 0) {
+    throw new ScoutCliError(`${label} failed: ${output.trim() || `${command} exited ${result.status}`}`);
+  }
+  return output;
+}
+function verifyDeveloperIdSignature(codePath, label) {
+  commandOutput("codesign", ["--verify", "--deep", "--strict", "--verbose=2", codePath], `${label} signature`);
+  const details = commandOutput("codesign", ["-dvvv", codePath], `${label} signature details`);
+  const team = details.match(/^TeamIdentifier=(.+)$/m)?.[1]?.trim();
+  const authority = details.match(/^Authority=(Developer ID Application:.+)$/m)?.[1]?.trim();
+  if (team !== EXPECTED_TEAM_ID || !authority?.endsWith(`(${EXPECTED_TEAM_ID})`)) {
+    throw new ScoutCliError(`${label} is not signed by OpenScout's Developer ID Application team ${EXPECTED_TEAM_ID}`);
+  }
+}
+function plistValue(plistPath, key) {
+  return commandOutput("/usr/libexec/PlistBuddy", ["-c", `Print :${key}`, plistPath], `read ${key}`).trim();
+}
+function verifyDmg(dmgPath) {
+  verifyDeveloperIdSignature(dmgPath, "OpenScout DMG");
+  commandOutput("spctl", ["--assess", "--type", "open", "--context", "context:primary-signature", "--verbose=2", dmgPath], "DMG Gatekeeper assessment");
+}
+function verifyAppBundle(appPath, expectedVersion) {
+  const infoPlist = join48(appPath, "Contents", "Info.plist");
+  if (plistValue(infoPlist, "CFBundleIdentifier") !== APP_BUNDLE_ID) {
+    throw new ScoutCliError(`mounted app bundle identifier is not ${APP_BUNDLE_ID}`);
+  }
+  if (plistValue(infoPlist, "CFBundleShortVersionString") !== expectedVersion) {
+    throw new ScoutCliError(`mounted app version is not ${expectedVersion}`);
+  }
+  if (plistValue(infoPlist, "LSMinimumSystemVersion") !== MINIMUM_MACOS_VERSION) {
+    throw new ScoutCliError(`mounted app does not require macOS ${MINIMUM_MACOS_VERSION}`);
+  }
+  verifyDeveloperIdSignature(appPath, "OpenScout.app");
+  const helperPath = join48(appPath, "Contents", "Library", "LoginItems", "ScoutMenu.app");
+  if (!existsSync39(helperPath)) {
+    throw new ScoutCliError("mounted app is missing ScoutMenu.app");
+  }
+  const helperInfoPlist = join48(helperPath, "Contents", "Info.plist");
+  if (plistValue(helperInfoPlist, "CFBundleIdentifier") !== HELPER_BUNDLE_ID) {
+    throw new ScoutCliError(`mounted helper bundle identifier is not ${HELPER_BUNDLE_ID}`);
+  }
+  if (plistValue(helperInfoPlist, "CFBundleShortVersionString") !== expectedVersion) {
+    throw new ScoutCliError(`mounted helper version is not ${expectedVersion}`);
+  }
+  if (plistValue(helperInfoPlist, "LSMinimumSystemVersion") !== MINIMUM_MACOS_VERSION) {
+    throw new ScoutCliError(`mounted helper does not require macOS ${MINIMUM_MACOS_VERSION}`);
+  }
+  verifyDeveloperIdSignature(helperPath, "ScoutMenu.app");
+  commandOutput("spctl", ["--assess", "--type", "execute", "--verbose=2", appPath], "app Gatekeeper assessment");
+}
 function mountDmg(dmgPath) {
-  const result = spawnSync8("hdiutil", ["attach", dmgPath, "-nobrowse", "-noverify", "-noautoopen", "-plist"], { encoding: "utf8" });
+  const result = spawnSync8("hdiutil", ["attach", dmgPath, "-readonly", "-nobrowse", "-noautoopen", "-plist"], { encoding: "utf8" });
   if ((result.status ?? 1) !== 0) {
     throw new ScoutCliError(`could not mount ${dmgPath}: ${result.stderr.trim() || "hdiutil attach failed"}`);
   }
@@ -104036,42 +104150,71 @@ function mountDmg(dmgPath) {
 function unmountDmg(mountPoint) {
   spawnSync8("hdiutil", ["detach", mountPoint, "-quiet"], { encoding: "utf8" });
 }
-function copyAppFromMount(mountPoint) {
-  const listing = spawnSync8("ls", [mountPoint], { encoding: "utf8" });
-  const appEntry = listing.stdout.split(`
-`).map((line) => line.trim()).find((line) => line === APP_NAME) ?? listing.stdout.split(`
-`).map((line) => line.trim()).find((line) => line.endsWith(".app") && !line.toLowerCase().startsWith("openscoutmenu"));
-  if (!appEntry) {
+function copyAppFromMount(mountPoint, expectedVersion) {
+  const source = join48(mountPoint, APP_NAME);
+  if (!existsSync39(source)) {
     throw new ScoutCliError(`no ${APP_NAME} found in the mounted DMG at ${mountPoint}`);
   }
-  const source = join48(mountPoint, appEntry);
-  if (existsSync39(APP_PATH)) {
-    const removed = spawnSync8("rm", ["-rf", APP_PATH], { encoding: "utf8" });
-    if ((removed.status ?? 1) !== 0) {
-      throw new ScoutCliError(`could not replace ${APP_PATH} (permission denied?). Try: sudo scout install`);
-    }
-  }
-  const copied = spawnSync8("cp", ["-R", source, APP_PATH], { encoding: "utf8" });
+  verifyAppBundle(source, expectedVersion);
+  const stagingPath = `/Applications/.OpenScout.scout-install-${process.pid}.app`;
+  const backupPath = `/Applications/.OpenScout.scout-backup-${process.pid}.app`;
+  const hadExistingApp = existsSync39(APP_PATH);
+  spawnSync8("rm", ["-rf", stagingPath, backupPath], { encoding: "utf8" });
+  const copied = spawnSync8("ditto", [source, stagingPath], { encoding: "utf8" });
   if ((copied.status ?? 1) !== 0) {
-    throw new ScoutCliError(`could not copy the app to ${APP_PATH}: ${copied.stderr.trim() || "permission denied?"}. Try: sudo scout install`);
+    throw new ScoutCliError(`could not stage ${APP_PATH}: ${copied.stderr.trim() || "permission denied?"}. Try: sudo scout install`);
+  }
+  verifyAppBundle(stagingPath, expectedVersion);
+  let backupCreated = false;
+  try {
+    if (hadExistingApp) {
+      const movedOld = spawnSync8("mv", [APP_PATH, backupPath], { encoding: "utf8" });
+      if ((movedOld.status ?? 1) !== 0) {
+        throw new ScoutCliError(`could not preserve the existing ${APP_PATH}: ${movedOld.stderr.trim() || "permission denied?"}. Try: sudo scout install`);
+      }
+      backupCreated = true;
+    }
+    const installed = spawnSync8("mv", [stagingPath, APP_PATH], { encoding: "utf8" });
+    if ((installed.status ?? 1) !== 0) {
+      if (backupCreated)
+        spawnSync8("mv", [backupPath, APP_PATH], { encoding: "utf8" });
+      throw new ScoutCliError(`could not install ${APP_PATH}; the previous app was preserved`);
+    }
+    verifyAppBundle(APP_PATH, expectedVersion);
+    if (backupCreated)
+      spawnSync8("rm", ["-rf", backupPath], { encoding: "utf8" });
+  } catch (error48) {
+    spawnSync8("rm", ["-rf", stagingPath], { encoding: "utf8" });
+    if (backupCreated && existsSync39(backupPath)) {
+      if (existsSync39(APP_PATH))
+        spawnSync8("rm", ["-rf", APP_PATH], { encoding: "utf8" });
+      spawnSync8("mv", [backupPath, APP_PATH], { encoding: "utf8" });
+    } else if (!hadExistingApp && existsSync39(APP_PATH)) {
+      spawnSync8("rm", ["-rf", APP_PATH], { encoding: "utf8" });
+    }
+    throw error48;
   }
 }
 function removeQuarantine() {
   spawnSync8("xattr", ["-rd", "com.apple.quarantine", APP_PATH], { encoding: "utf8" });
 }
-function isAppRunning() {
-  return (spawnSync8("pgrep", ["-x", APP_PROCESS_NAME], { encoding: "utf8" }).status ?? 1) === 0;
-}
-function quitApp() {
-  spawnSync8("osascript", ["-e", `tell application id "${APP_BUNDLE_ID}" to quit`], {
-    encoding: "utf8"
-  });
+async function stopInstalledAppProcesses() {
+  const tree = readLifecycleTree(resolveAppBundlePaths(APP_PATH));
+  const processes = layerProcesses(tree, ["menu", "app"]);
+  if (processes.length === 0)
+    return false;
+  const pids = [...new Set(processes.map((entry) => entry.pid))];
+  const { survivors } = await terminateProcesses(pids);
+  if (survivors.length > 0) {
+    throw new ScoutCliError(`could not stop the installed OpenScout processes (${survivors.join(", ")}); the app was not replaced`);
+  }
+  return true;
 }
 function launchApp() {
-  const byId = spawnSync8("open", ["-b", APP_BUNDLE_ID], { encoding: "utf8" });
-  if ((byId.status ?? 1) !== 0) {
-    spawnSync8("open", [APP_PATH], { encoding: "utf8" });
-  }
+  const byPath = spawnSync8("open", [APP_PATH], { encoding: "utf8" });
+  if ((byPath.status ?? 1) === 0)
+    return true;
+  return (spawnSync8("open", ["-b", APP_BUNDLE_ID], { encoding: "utf8" }).status ?? 1) === 0;
 }
 function renderInstallResult(result) {
   if (result.action === "check") {
@@ -104088,7 +104231,7 @@ function renderInstallResult(result) {
 async function runCheck(context, options) {
   const installed = getInstalledVersion();
   const release = await fetchRelease(options.version);
-  const target2 = stripLeadingV(release.tag_name);
+  const target2 = appVersionFromReleaseTag(release.tag_name);
   let status;
   let message;
   if (!installed) {
@@ -104111,6 +104254,14 @@ async function runInstallCommand(context, args) {
   if (process.platform !== "darwin") {
     throw new ScoutCliError("scout install is only supported on macOS.");
   }
+  if (process.arch !== "arm64") {
+    throw new ScoutCliError("Scout for macOS currently requires Apple silicon (arm64).");
+  }
+  const macosVersion = commandOutput("sw_vers", ["-productVersion"], "macOS version").trim();
+  const macosMajor = Number.parseInt(macosVersion.split(".")[0] ?? "", 10);
+  if (!Number.isInteger(macosMajor) || macosMajor < MINIMUM_MACOS_MAJOR) {
+    throw new ScoutCliError(`Scout requires macOS ${MINIMUM_MACOS_MAJOR} or later (found ${macosVersion}).`);
+  }
   const options = parseInstallArgs(args);
   if (options.check) {
     await runCheck(context, options);
@@ -104119,7 +104270,7 @@ async function runInstallCommand(context, args) {
   const installedBefore = getInstalledVersion();
   context.stderr(options.version ? `Fetching release ${options.version}\u2026` : "Fetching the latest OpenScout release\u2026");
   const release = await fetchRelease(options.version);
-  const target2 = stripLeadingV(release.tag_name);
+  const target2 = appVersionFromReleaseTag(release.tag_name);
   if (!options.force && installedBefore && installedBefore === target2) {
     context.output.writeValue({
       action: "install",
@@ -104132,15 +104283,21 @@ async function runInstallCommand(context, args) {
     return;
   }
   const asset = findAppDmgAsset(release);
-  const wasRunning = isAppRunning();
   const workDir = mkdtempSync(join48(tmpdir(), "scout-install-"));
   const dmgPath = join48(workDir, asset.name);
   let mountPoint = null;
+  let wasRunning = false;
   try {
     await downloadDmg(asset, dmgPath, context);
+    verifyDmg(dmgPath);
     context.stderr(`Installing OpenScout ${target2} to ${APP_PATH}\u2026`);
     mountPoint = mountDmg(dmgPath);
-    copyAppFromMount(mountPoint);
+    wasRunning = await stopInstalledAppProcesses();
+    copyAppFromMount(mountPoint, target2);
+  } catch (error48) {
+    if (wasRunning)
+      launchApp();
+    throw error48;
   } finally {
     if (mountPoint)
       unmountDmg(mountPoint);
@@ -104148,8 +104305,9 @@ async function runInstallCommand(context, args) {
   }
   removeQuarantine();
   if (wasRunning && options.restart) {
-    quitApp();
-    launchApp();
+    if (!launchApp()) {
+      throw new ScoutCliError(`OpenScout ${target2} was installed, but macOS could not relaunch it. Open ${APP_PATH} manually.`);
+    }
   }
   const installedAfter = getInstalledVersion() ?? target2;
   const status = installedBefore ? "updated" : "installed";
@@ -104164,9 +104322,10 @@ async function runInstallCommand(context, args) {
     message: `${verb} OpenScout ${installedAfter} \u2192 ${APP_PATH}${relaunchNote}`
   }, renderInstallResult);
 }
-var GITHUB_OWNER = "oscout", GITHUB_REPO = "scout", APP_NAME = "OpenScout.app", APP_PATH, INFO_PLIST_PATH, APP_BUNDLE_ID = "app.openscout.scout", APP_PROCESS_NAME = "Scout", USER_AGENT = "scout-cli", HELP_FLAGS9;
+var GITHUB_OWNER = "oscout", GITHUB_REPO = "scout", APP_NAME = "OpenScout.app", APP_PATH, INFO_PLIST_PATH, APP_BUNDLE_ID = "app.openscout.scout", HELPER_BUNDLE_ID = "app.openscout.scout.menu", USER_AGENT = "scout-cli", EXPECTED_TEAM_ID = "2U83JFPW66", MINIMUM_MACOS_MAJOR = 26, MINIMUM_MACOS_VERSION = "26.0", HELP_FLAGS9;
 var init_install = __esm(() => {
   init_errors();
+  init_app_lifecycle();
   APP_PATH = `/Applications/${APP_NAME}`;
   INFO_PLIST_PATH = `${APP_PATH}/Contents/Info.plist`;
   HELP_FLAGS9 = new Set(["help", "--help", "-h"]);
@@ -112590,8 +112749,7 @@ __export(exports_menu, {
 import { spawnSync as spawnSync10 } from "child_process";
 import { existsSync as existsSync41 } from "fs";
 import { homedir as homedir32 } from "os";
-import { dirname as dirname28, join as join50, resolve as resolve30 } from "path";
-import { fileURLToPath as fileURLToPath11 } from "url";
+import { join as join50 } from "path";
 function renderMenuCommandHelp() {
   return [
     "scout menu \u2014 macOS menu bar app",
@@ -112602,8 +112760,6 @@ function renderMenuCommandHelp() {
     "  scout menu status",
     "  scout menu restart",
     "  scout menu quit",
-    "  scout menu build",
-    "  scout menu dmg",
     "",
     "Aliases:",
     "  launch = open = start",
@@ -112612,14 +112768,13 @@ function renderMenuCommandHelp() {
     "Behavior:",
     "  On macOS, `scout menu` loads the menu bar app from the installed OpenScout.app",
     "  (the menu ships as an embedded helper). If OpenScout.app is not installed, it",
-    "  points you to `scout install`. Inside an OpenScout repo checkout it prefers",
-    "  `apps/macos/bin/openscout-menu.ts` so launch/build/restart reuse the repo helper.",
+    "  points you to `scout install`. Native app build and DMG tooling lives in the",
+    "  private OpenScout product repository and is not exposed by the public CLI.",
     "",
     "Examples:",
     "  scout menu",
     "  scout menu status",
-    "  scout menu restart",
-    "  scout menu build --version 0.2.16"
+    "  scout menu restart"
   ].join(`
 `);
 }
@@ -112643,10 +112798,6 @@ function parseMenuCommand(args) {
       return { action: "quit", passthroughArgs: rest };
     case "status":
       return { action: "status", passthroughArgs: rest };
-    case "build":
-      return { action: "build", passthroughArgs: rest };
-    case "dmg":
-      return { action: "dmg", passthroughArgs: rest };
     default:
       throw new ScoutCliError(`unknown subcommand: ${first} (try: scout menu)`);
   }
@@ -112674,25 +112825,6 @@ function runProcess(command, args, options) {
     status: result.status
   };
 }
-function findRepoMenuHelper(startDirectory) {
-  let current = resolve30(startDirectory);
-  while (true) {
-    const candidate = join50(current, "apps", "macos", "bin", "openscout-menu.ts");
-    if (existsSync41(candidate)) {
-      return candidate;
-    }
-    const parent = dirname28(current);
-    if (parent === current) {
-      break;
-    }
-    current = parent;
-  }
-  const sourceRelativeCandidate = fileURLToPath11(new URL("../../../../macos/bin/openscout-menu.ts", import.meta.url).toString());
-  return existsSync41(sourceRelativeCandidate) ? sourceRelativeCandidate : null;
-}
-function resolveRepoBundlePath(helperPath) {
-  return resolve30(dirname28(helperPath), "..", "dist", "Scout.app", EMBEDDED_MENU_RELATIVE_PATH);
-}
 function menuProcesses(helperBundlePath) {
   const expected = helperBundlePath ? join50(helperBundlePath, "Contents", "MacOS", MENU_PROCESS_NAME) : null;
   const ours = [];
@@ -112708,24 +112840,20 @@ function menuProcesses(helperBundlePath) {
   return { ours, others };
 }
 function isMenuRunning(helperBundlePath) {
-  const { ours, others } = menuProcesses(helperBundlePath);
-  return helperBundlePath ? ours.length > 0 : others.length > 0;
+  if (!helperBundlePath)
+    return false;
+  return menuProcesses(helperBundlePath).ours.length > 0;
 }
 async function stopRunningMenu(helperBundlePath) {
-  const { ours, others } = menuProcesses(helperBundlePath);
-  const targets = helperBundlePath ? ours : others;
+  if (!helperBundlePath)
+    return true;
+  const targets = menuProcesses(helperBundlePath).ours;
   if (targets.length === 0)
     return true;
   const { survivors } = await terminateProcesses(targets);
   return survivors.length === 0;
 }
-function resolveInstalledAppBundlePath(env) {
-  const spotlight = runProcess("mdfind", [`kMDItemCFBundleIdentifier == '${APP_BUNDLE_ID2}'`], { env, allowFailure: true });
-  const indexedPath = spotlight.stdout.split(`
-`).map((line) => line.trim()).find(Boolean);
-  if (indexedPath) {
-    return indexedPath;
-  }
+function resolveInstalledAppBundlePath() {
   for (const candidate of COMMON_APP_BUNDLE_PATHS) {
     if (existsSync41(candidate)) {
       return candidate;
@@ -112737,12 +112865,11 @@ function resolveEmbeddedMenuBundlePath(appBundlePath) {
   return join50(appBundlePath, EMBEDDED_MENU_RELATIVE_PATH);
 }
 function openInstalledMenuApp(helperPath, env) {
-  const bundleAttempts = [
-    { command: "open", args: ["-b", MENU_BUNDLE_ID] }
-  ];
+  const bundleAttempts = [];
   if (helperPath) {
     bundleAttempts.push({ command: "open", args: [helperPath] });
   }
+  bundleAttempts.push({ command: "open", args: ["-b", MENU_BUNDLE_ID] });
   let lastFailure = "OpenScout is not installed.";
   for (const attempt of bundleAttempts) {
     const result = runProcess(attempt.command, attempt.args, { env, allowFailure: true });
@@ -112751,7 +112878,7 @@ function openInstalledMenuApp(helperPath, env) {
     }
     lastFailure = result.stderr || result.stdout || lastFailure;
   }
-  throw new ScoutCliError(`${lastFailure} Run \`scout install\` to download the OpenScout app, or run from the repo to build it.`);
+  throw new ScoutCliError(`${lastFailure} Run \`scout install\` to download the OpenScout app.`);
 }
 function renderMenuResult(result) {
   if (result.action === "status") {
@@ -112780,10 +112907,6 @@ function renderMenuResult(result) {
 }
 function renderActionMessage(action) {
   switch (action) {
-    case "build":
-      return "Built the OpenScout menu app bundle.";
-    case "dmg":
-      return "Built the OpenScout menu app DMG.";
     case "restart":
       return "Restarted the OpenScout menu app.";
     case "quit":
@@ -112796,42 +112919,15 @@ function renderActionMessage(action) {
   }
 }
 async function ensureMenuProviderTelemetry(context, action) {
-  if (action === "build" || action === "dmg" || action === "quit") {
+  if (action === "quit") {
     return;
   }
   try {
     await ensureProviderTelemetryBootstrap({ env: context.env });
   } catch {}
 }
-async function runWithRepoHelper(context, helperPath, command) {
-  const bundlePath = resolveRepoBundlePath(helperPath);
-  if (command.action === "quit" || command.action === "restart") {
-    await stopRunningMenu(bundlePath);
-  }
-  if (command.action !== "quit") {
-    runProcess(process.execPath, [helperPath, command.action, ...command.passthroughArgs], {
-      cwd: defaultScoutContextDirectory(context),
-      env: context.env
-    });
-  }
-  const running = command.action === "quit" ? false : isMenuRunning(bundlePath);
-  const installed = existsSync41(bundlePath) || running;
-  return {
-    action: command.action,
-    mode: "repo-helper",
-    bundleId: MENU_BUNDLE_ID,
-    bundlePath,
-    helperPath,
-    installed,
-    running,
-    message: renderActionMessage(command.action)
-  };
-}
 async function runWithInstalledApp(context, command) {
-  if (command.action === "build" || command.action === "dmg") {
-    throw new ScoutCliError(`scout menu ${command.action} requires an OpenScout repo checkout. Run from the repo root or use bun run macos:${command.action}.`);
-  }
-  const appBundlePath = resolveInstalledAppBundlePath(context.env);
+  const appBundlePath = resolveInstalledAppBundlePath();
   const helperPath = appBundlePath ? resolveEmbeddedMenuBundlePath(appBundlePath) : null;
   if (!appBundlePath && command.action !== "status") {
     throw new ScoutCliError("OpenScout is not installed. Run `scout install` to download the macOS app.");
@@ -112877,15 +112973,13 @@ async function runMenuCommand(context, args) {
   }
   const command = parseMenuCommand(args);
   await ensureMenuProviderTelemetry(context, command.action);
-  const helperPath = findRepoMenuHelper(defaultScoutContextDirectory(context));
-  const result = helperPath ? await runWithRepoHelper(context, helperPath, command) : await runWithInstalledApp(context, command);
+  const result = await runWithInstalledApp(context, command);
   context.output.writeValue(result, renderMenuResult);
 }
-var MENU_BUNDLE_ID = "app.openscout.scout.menu", MENU_PROCESS_NAME = "ScoutMenu", APP_BUNDLE_ID2 = "app.openscout.scout", APP_BUNDLE_NAME = "OpenScout.app", EMBEDDED_MENU_RELATIVE_PATH, HELP_FLAGS14, COMMON_APP_BUNDLE_PATHS;
+var MENU_BUNDLE_ID = "app.openscout.scout.menu", MENU_PROCESS_NAME = "ScoutMenu", APP_BUNDLE_NAME = "OpenScout.app", EMBEDDED_MENU_RELATIVE_PATH, HELP_FLAGS14, COMMON_APP_BUNDLE_PATHS;
 var init_menu = __esm(() => {
   init_src3();
   init_app_lifecycle();
-  init_context();
   init_errors();
   EMBEDDED_MENU_RELATIVE_PATH = join50("Contents", "Library", "LoginItems", "ScoutMenu.app");
   HELP_FLAGS14 = new Set(["help", "--help", "-h"]);
@@ -113599,7 +113693,7 @@ var init_mesh = () => {};
 
 // ../../apps/desktop/src/core/mesh/enroll-pending.ts
 import { existsSync as existsSync42, mkdirSync as mkdirSync12, readFileSync as readFileSync19, rmSync as rmSync6, writeFileSync as writeFileSync10 } from "fs";
-import { dirname as dirname29, join as join51 } from "path";
+import { dirname as dirname28, join as join51 } from "path";
 function pendingMeshEnrollmentPath(supportDirectory) {
   const dir = supportDirectory ?? resolveOpenScoutSupportPaths().supportDirectory;
   return join51(dir, PENDING_FILE);
@@ -113609,7 +113703,7 @@ function savePendingMeshEnrollment(handshake, supportDirectory) {
     assertTestIsolatedUserData("write the pending mesh enrollment", "OPENSCOUT_SUPPORT_DIRECTORY");
   }
   const path = pendingMeshEnrollmentPath(supportDirectory);
-  mkdirSync12(dirname29(path), { recursive: true });
+  mkdirSync12(dirname28(path), { recursive: true });
   writeFileSync10(path, `${JSON.stringify(handshake, null, 2)}
 `, { encoding: "utf8", mode: 384 });
 }
@@ -113838,7 +113932,7 @@ async function runMeshRevokeCommand(context, args) {
 async function promptSasApproval(question) {
   const rl = createInterface3({ input: process.stdin, output: process.stderr });
   try {
-    const answer = await new Promise((resolve31) => rl.question(question, resolve31));
+    const answer = await new Promise((resolve30) => rl.question(question, resolve30));
     return ["y", "yes"].includes(answer.trim().toLowerCase());
   } finally {
     rl.close();
@@ -114470,12 +114564,12 @@ async function runBridge(context, args) {
   });
   context.stderr(`bridge: node=${config2.node} relay=${config2.relayUrl}`);
   context.stderr("bridge: running \u2014 Ctrl-C to stop");
-  await new Promise((resolve31) => {
+  await new Promise((resolve30) => {
     const stop2 = () => {
       const force = setTimeout(() => process.exit(0), 5000);
       handle.close().finally(() => {
         clearTimeout(force);
-        resolve31();
+        resolve30();
       });
     };
     process.once("SIGINT", stop2);
@@ -117394,7 +117488,7 @@ var init_web_handoff = __esm(() => {
 // ../../apps/desktop/src/core/pairing/runtime/bridge/artifact-presentation.ts
 import { randomBytes as randomBytes8 } from "crypto";
 import { realpathSync as realpathSync3, statSync as statSync10 } from "fs";
-import { basename as basename18, dirname as dirname30, isAbsolute as isAbsolute5, relative as relative5, resolve as resolve31, sep as sep3 } from "path";
+import { basename as basename18, dirname as dirname29, isAbsolute as isAbsolute5, relative as relative5, resolve as resolve30, sep as sep3 } from "path";
 function createArtifactPresentation(input, options) {
   const now = options.now ?? Date.now();
   purgeExpiredArtifactPresentations(now);
@@ -117407,9 +117501,9 @@ function createArtifactPresentation(input, options) {
     throw new Error("sourcePath is outside the session workspace");
   }
   const source = statSync10(sourcePath);
-  const rootPath = source.isDirectory() ? sourcePath : dirname30(sourcePath);
+  const rootPath = source.isDirectory() ? sourcePath : dirname29(sourcePath);
   const entryPath = normalizeRelativeEntry(source.isDirectory() ? input.entryPath?.trim() || "index.html" : basename18(sourcePath));
-  const entryTarget = requiredRealPath(resolve31(rootPath, entryPath), "entryPath");
+  const entryTarget = requiredRealPath(resolve30(rootPath, entryPath), "entryPath");
   if (!isPathInside2(rootPath, entryTarget)) {
     throw new Error("entryPath leaves the presentation root");
   }
@@ -117450,7 +117544,7 @@ function serveArtifactPresentation(req, url2, now = Date.now()) {
   }
   let target2;
   try {
-    target2 = requiredRealPath(resolve31(grant.rootPath, parsed.relativePath), "artifact path");
+    target2 = requiredRealPath(resolve30(grant.rootPath, parsed.relativePath), "artifact path");
   } catch {
     return presentationResponse("Not found", 404);
   }
@@ -117460,7 +117554,7 @@ function serveArtifactPresentation(req, url2, now = Date.now()) {
   const targetStat = statSync10(target2);
   if (targetStat.isDirectory()) {
     try {
-      target2 = requiredRealPath(resolve31(target2, "index.html"), "artifact index");
+      target2 = requiredRealPath(resolve30(target2, "index.html"), "artifact index");
     } catch {
       return presentationResponse("Not found", 404);
     }
@@ -118966,10 +119060,10 @@ var init_db_queries = __esm(() => {
 });
 
 // ../../apps/desktop/src/core/mobile/service.ts
-import { basename as basename19, resolve as resolve32 } from "path";
+import { basename as basename19, resolve as resolve31 } from "path";
 import { statSync as statSync12 } from "fs";
 async function getScoutMobileRuntimeCapabilities(projectRoot) {
-  const normalizedProjectRoot = projectRoot?.trim() ? resolve32(projectRoot) : null;
+  const normalizedProjectRoot = projectRoot?.trim() ? resolve31(projectRoot) : null;
   const liveCatalog = await readScoutRuntimeCatalog();
   const runtimeCatalog = liveCatalog?.catalog ?? SCOUT_RUNTIME_CATALOG;
   const defaultHarness = scoutRuntimeDefaultHarness(runtimeCatalog);
@@ -119130,16 +119224,16 @@ function isDirectory2(path2) {
   }
 }
 function rehomeScoutMobileWorkspacePath(requestedPath, currentHome) {
-  const requested = resolve32(requestedPath);
-  const home = resolve32(currentHome);
+  const requested = resolve31(requestedPath);
+  const home = resolve31(currentHome);
   const requestedMatch = requested.match(/^\/Users\/[^/]+(\/.*)?$/);
   if (!requestedMatch || !/^\/Users\/[^/]+$/.test(home))
     return null;
   const suffix = requestedMatch[1] ?? "";
-  return resolve32(home, `.${suffix || "/"}`);
+  return resolve31(home, `.${suffix || "/"}`);
 }
 async function resolveMobileWorkspaceRoot(rawWorkspaceId, currentDirectory) {
-  const requested = resolve32(rawWorkspaceId);
+  const requested = resolve31(rawWorkspaceId);
   if (isDirectory2(requested))
     return requested;
   const currentHome = process.env.HOME?.trim();
@@ -119150,7 +119244,7 @@ async function resolveMobileWorkspaceRoot(rawWorkspaceId, currentDirectory) {
   const inventory = await loadMobileWorkspaceInventory(currentDirectory);
   const matches = inventory.filter((workspace) => isDirectory2(workspace.root) && [basename19(workspace.root), workspace.projectName, workspace.title].some((value) => value.toLowerCase() === requestedName));
   if (matches.length === 1)
-    return resolve32(matches[0].root);
+    return resolve31(matches[0].root);
   throw new Error(`Workspace is not available on this Mac: ${rawWorkspaceId}. Choose a project from the current workspace list.`);
 }
 function latestMessageByConversation(snapshot) {
@@ -120500,7 +120594,7 @@ var init_mobile_terminal_provision = __esm(() => {
 
 // ../../apps/desktop/src/core/pairing/runtime/bridge/server.ts
 import { readdirSync as readdirSync6, readFileSync as readFileSync28, realpathSync as realpathSync5, statSync as statSync13 } from "fs";
-import { basename as basename20, isAbsolute as isAbsolute7, join as join60, relative as relative7, resolve as resolve33 } from "path";
+import { basename as basename20, isAbsolute as isAbsolute7, join as join60, relative as relative7, resolve as resolve32 } from "path";
 import { homedir as homedir41 } from "os";
 function replaySyncEvents(bridge, sessionId, lastSeq) {
   return bridge.replay(sessionId, lastSeq);
@@ -120825,7 +120919,7 @@ async function handleRPCInner(bridge, req, rpcContext = {}) {
         }
         try {
           const grant = createArtifactPresentation({
-            sourcePath: isAbsolute7(p.sourcePath) ? p.sourcePath : resolve33(workspaceRoot, p.sourcePath),
+            sourcePath: isAbsolute7(p.sourcePath) ? p.sourcePath : resolve32(workspaceRoot, p.sourcePath),
             entryPath: p.entryPath,
             title: p.title,
             ttlMs: p.ttlMs
@@ -121315,7 +121409,7 @@ var init_tail_fanout = __esm(() => {
 
 // ../../apps/desktop/src/core/pairing/runtime/bridge/router.ts
 import { readFileSync as readFileSync29, readdirSync as readdirSync7, realpathSync as realpathSync6, statSync as statSync14 } from "fs";
-import { basename as basename21, isAbsolute as isAbsolute8, join as join61, relative as relative8, resolve as resolve34 } from "path";
+import { basename as basename21, isAbsolute as isAbsolute8, join as join61, relative as relative8, resolve as resolve33 } from "path";
 import { homedir as homedir42 } from "os";
 function resolveMobileCurrentDirectory2() {
   const config2 = resolveConfig();
@@ -121397,23 +121491,23 @@ function bridgeEventIterable(bridge, signal3) {
   return {
     [Symbol.asyncIterator]() {
       const buffer = [];
-      let resolve35 = null;
+      let resolve34 = null;
       let done = false;
       const unsub = bridge.onEvent((event) => {
         if (done)
           return;
         buffer.push(event);
-        if (resolve35) {
-          resolve35();
-          resolve35 = null;
+        if (resolve34) {
+          resolve34();
+          resolve34 = null;
         }
       });
       const cleanup = () => {
         done = true;
         unsub();
-        if (resolve35) {
-          resolve35();
-          resolve35 = null;
+        if (resolve34) {
+          resolve34();
+          resolve34 = null;
         }
       };
       signal3?.addEventListener("abort", cleanup, { once: true });
@@ -121426,7 +121520,7 @@ function bridgeEventIterable(bridge, signal3) {
               return { done: false, value: buffer.shift() };
             }
             await new Promise((r) => {
-              resolve35 = r;
+              resolve34 = r;
             });
           }
         },
@@ -121449,23 +121543,23 @@ function tailEventIterable(signal3) {
   return {
     [Symbol.asyncIterator]() {
       const buffer = [];
-      let resolve35 = null;
+      let resolve34 = null;
       let done = false;
       const unsub = getTailFanout().subscribe((event) => {
         if (done)
           return;
         buffer.push(event);
-        if (resolve35) {
-          resolve35();
-          resolve35 = null;
+        if (resolve34) {
+          resolve34();
+          resolve34 = null;
         }
       });
       const cleanup = () => {
         done = true;
         unsub();
-        if (resolve35) {
-          resolve35();
-          resolve35 = null;
+        if (resolve34) {
+          resolve34();
+          resolve34 = null;
         }
       };
       signal3?.addEventListener("abort", cleanup, { once: true });
@@ -121478,7 +121572,7 @@ function tailEventIterable(signal3) {
               return { done: false, value: buffer.shift() };
             }
             await new Promise((r) => {
-              resolve35 = r;
+              resolve34 = r;
             });
           }
         },
@@ -121956,7 +122050,7 @@ var init_router = __esm(() => {
       }
       try {
         const grant = createArtifactPresentation({
-          sourcePath: isAbsolute8(input.sourcePath) ? input.sourcePath : resolve34(workspaceRoot, input.sourcePath),
+          sourcePath: isAbsolute8(input.sourcePath) ? input.sourcePath : resolve33(workspaceRoot, input.sourcePath),
           entryPath: input.entryPath,
           title: input.title,
           ttlMs: input.ttlMs
@@ -124656,8 +124750,8 @@ function startBridgeServerTRPC(options) {
           }
           const iterable = isObservable(result) ? observableToAsyncIterable(result, abortController.signal) : result;
           const iterator = iterable[Symbol.asyncIterator]();
-          const abortPromise = new Promise((resolve35) => {
-            abortController.signal.addEventListener("abort", () => resolve35("abort"), {
+          const abortPromise = new Promise((resolve34) => {
+            abortController.signal.addEventListener("abort", () => resolve34("abort"), {
               once: true
             });
           });
@@ -126555,8 +126649,8 @@ async function runPairCommand(context, args) {
   process.on("SIGINT", handleSignal);
   process.on("SIGTERM", handleSignal);
   try {
-    await new Promise((resolve35) => {
-      controller.signal.addEventListener("abort", () => resolve35(), { once: true });
+    await new Promise((resolve34) => {
+      controller.signal.addEventListener("abort", () => resolve34(), { once: true });
     });
   } finally {
     process.off("SIGINT", handleSignal);
@@ -127787,7 +127881,7 @@ import { spawnSync as spawnSync11 } from "child_process";
 import { createHash as createHash14 } from "crypto";
 import { mkdirSync as mkdirSync22 } from "fs";
 import { homedir as homedir46 } from "os";
-import { basename as basename22, join as join63, resolve as resolve35 } from "path";
+import { basename as basename22, join as join63, resolve as resolve34 } from "path";
 async function runSessionCommand(context, args) {
   const action = args[0];
   if (!action || action === "help" || action === "--help" || action === "-h") {
@@ -128079,8 +128173,8 @@ function readOptionValue(args, index2, flag) {
 }
 function resolveProjectPath2(context, projectPath) {
   const rawPath = projectPath?.trim() || context.cwd;
-  const expanded = rawPath === "~" ? context.env.HOME?.trim() || homedir46() : rawPath.startsWith("~/") ? resolve35(context.env.HOME?.trim() || homedir46(), rawPath.slice(2)) : rawPath;
-  return resolve35(context.cwd, expanded);
+  const expanded = rawPath === "~" ? context.env.HOME?.trim() || homedir46() : rawPath.startsWith("~/") ? resolve34(context.env.HOME?.trim() || homedir46(), rawPath.slice(2)) : rawPath;
+  return resolve34(context.cwd, expanded);
 }
 function resolveControlPlaneDbPath2(context) {
   const explicitPath = context.env.OPENSCOUT_CONTROL_PLANE_DB?.trim();
@@ -128520,8 +128614,8 @@ __export(exports_server, {
 import { spawn as spawn10 } from "child_process";
 import { existsSync as existsSync52, mkdirSync as mkdirSync23, openSync as openSync2, writeFileSync as writeFileSync17 } from "fs";
 import { homedir as homedir47 } from "os";
-import { dirname as dirname31, join as join64, resolve as resolve36 } from "path";
-import { fileURLToPath as fileURLToPath12 } from "url";
+import { dirname as dirname30, join as join64, resolve as resolve35 } from "path";
+import { fileURLToPath as fileURLToPath11 } from "url";
 function renderServerCommandHelp() {
   return [
     "scout server \u2014 Scout web UI (Bun runtime)",
@@ -128580,7 +128674,7 @@ function resolveScoutControlPlaneWebServerEntry() {
     startDirectories: [
       process.env.OPENSCOUT_SETUP_CWD,
       process.cwd(),
-      dirname31(fileURLToPath12(import.meta.url))
+      dirname30(fileURLToPath11(import.meta.url))
     ]
   });
   const source = resolveRepoEntrypoint(repoRoot, "packages/web/server/index.ts");
@@ -129102,14 +129196,14 @@ __export(exports_setup, {
 });
 import { existsSync as existsSync53 } from "fs";
 import { homedir as homedir48 } from "os";
-import { dirname as dirname32, join as join65, resolve as resolve37 } from "path";
+import { dirname as dirname31, join as join65, resolve as resolve36 } from "path";
 import { createInterface as createInterface4 } from "readline/promises";
 function findGitRoot2(startDirectory) {
-  let current = resolve37(startDirectory);
+  let current = resolve36(startDirectory);
   while (true) {
     if (existsSync53(join65(current, ".git")))
       return current;
-    const parent = dirname32(current);
+    const parent = dirname31(current);
     if (parent === current)
       return null;
     current = parent;
@@ -129117,8 +129211,8 @@ function findGitRoot2(startDirectory) {
 }
 function suggestProjectSourceRoot(currentDirectory, homeDirectory = homedir48()) {
   const gitRoot = findGitRoot2(currentDirectory);
-  if (gitRoot && resolve37(gitRoot) !== resolve37(homeDirectory))
-    return dirname32(gitRoot);
+  if (gitRoot && resolve36(gitRoot) !== resolve36(homeDirectory))
+    return dirname31(gitRoot);
   for (const candidate of [
     join65(homeDirectory, "dev"),
     join65(homeDirectory, "Developer"),
@@ -129127,7 +129221,7 @@ function suggestProjectSourceRoot(currentDirectory, homeDirectory = homedir48())
     if (existsSync53(candidate))
       return candidate;
   }
-  return resolve37(currentDirectory);
+  return resolve36(currentDirectory);
 }
 function expandHome(value, homeDirectory = homedir48()) {
   if (value === "~")
@@ -129156,7 +129250,7 @@ async function resolveSetupSourceRoots(context, currentDirectory, sourceRoots, e
   const selectedRoot = (await ask(suggestedRoot, Math.max(0, existing.roots.length - 1))).trim();
   if (!selectedRoot && existing.roots.length > 0)
     return existing.roots;
-  return [resolve37(currentDirectory, expandHome(selectedRoot || suggestedRoot))];
+  return [resolve36(currentDirectory, expandHome(selectedRoot || suggestedRoot))];
 }
 async function runSetupCommand(context, args) {
   const options = parseSetupCommandOptions(args, defaultScoutContextDirectory(context));
@@ -129276,7 +129370,7 @@ function writeStatusline(value) {
 `);
 }
 function runDelegateStatusline(command, input, env) {
-  return new Promise((resolve38) => {
+  return new Promise((resolve37) => {
     const child = spawn11("sh", ["-lc", command], {
       env: {
         ...env,
@@ -129291,7 +129385,7 @@ function runDelegateStatusline(command, input, env) {
         return;
       settled = true;
       clearTimeout(timer);
-      resolve38(value?.trimEnd() || null);
+      resolve37(value?.trimEnd() || null);
     };
     const timer = setTimeout(() => {
       child.kill("SIGTERM");
@@ -130036,8 +130130,8 @@ import { EventEmitter } from "events";
 import { Buffer as Buffer2 } from "buffer";
 import { Buffer as Buffer3 } from "buffer";
 import { EventEmitter as EventEmitter2 } from "events";
-import { resolve as resolve38, dirname as dirname33 } from "path";
-import { fileURLToPath as fileURLToPath13 } from "url";
+import { resolve as resolve37, dirname as dirname32 } from "path";
+import { fileURLToPath as fileURLToPath12 } from "url";
 import { resolve as resolve210, isAbsolute as isAbsolute9, parse as parse8 } from "path";
 import { existsSync as existsSync54 } from "fs";
 import { basename as basename23, join as join66 } from "path";
@@ -133172,13 +133266,13 @@ class DebounceController {
   }
   debounce(id, ms, fn) {
     const scopeMap = TIMERS_MAP.get(this.scopeId);
-    return new Promise((resolve40, reject) => {
+    return new Promise((resolve39, reject) => {
       if (scopeMap.has(id)) {
         clearTimeout(scopeMap.get(id));
       }
       const timerId = setTimeout(() => {
         try {
-          resolve40(fn());
+          resolve39(fn());
         } catch (error48) {
           reject(error48);
         }
@@ -133268,25 +133362,25 @@ function getParsers() {
         filetype: "javascript",
         aliases: ["javascriptreact"],
         queries: {
-          highlights: [resolve38(dirname33(fileURLToPath13(import.meta.url)), highlights_default)]
+          highlights: [resolve37(dirname32(fileURLToPath12(import.meta.url)), highlights_default)]
         },
-        wasm: resolve38(dirname33(fileURLToPath13(import.meta.url)), tree_sitter_javascript_default)
+        wasm: resolve37(dirname32(fileURLToPath12(import.meta.url)), tree_sitter_javascript_default)
       },
       {
         filetype: "typescript",
         aliases: ["typescriptreact"],
         queries: {
-          highlights: [resolve38(dirname33(fileURLToPath13(import.meta.url)), highlights_default2)]
+          highlights: [resolve37(dirname32(fileURLToPath12(import.meta.url)), highlights_default2)]
         },
-        wasm: resolve38(dirname33(fileURLToPath13(import.meta.url)), tree_sitter_typescript_default)
+        wasm: resolve37(dirname32(fileURLToPath12(import.meta.url)), tree_sitter_typescript_default)
       },
       {
         filetype: "markdown",
         queries: {
-          highlights: [resolve38(dirname33(fileURLToPath13(import.meta.url)), highlights_default3)],
-          injections: [resolve38(dirname33(fileURLToPath13(import.meta.url)), injections_default)]
+          highlights: [resolve37(dirname32(fileURLToPath12(import.meta.url)), highlights_default3)],
+          injections: [resolve37(dirname32(fileURLToPath12(import.meta.url)), injections_default)]
         },
-        wasm: resolve38(dirname33(fileURLToPath13(import.meta.url)), tree_sitter_markdown_default),
+        wasm: resolve37(dirname32(fileURLToPath12(import.meta.url)), tree_sitter_markdown_default),
         injectionMapping: {
           nodeTypes: {
             inline: "markdown_inline",
@@ -133309,16 +133403,16 @@ function getParsers() {
       {
         filetype: "markdown_inline",
         queries: {
-          highlights: [resolve38(dirname33(fileURLToPath13(import.meta.url)), highlights_default4)]
+          highlights: [resolve37(dirname32(fileURLToPath12(import.meta.url)), highlights_default4)]
         },
-        wasm: resolve38(dirname33(fileURLToPath13(import.meta.url)), tree_sitter_markdown_inline_default)
+        wasm: resolve37(dirname32(fileURLToPath12(import.meta.url)), tree_sitter_markdown_inline_default)
       },
       {
         filetype: "zig",
         queries: {
-          highlights: [resolve38(dirname33(fileURLToPath13(import.meta.url)), highlights_default5)]
+          highlights: [resolve37(dirname32(fileURLToPath12(import.meta.url)), highlights_default5)]
         },
-        wasm: resolve38(dirname33(fileURLToPath13(import.meta.url)), tree_sitter_zig_default)
+        wasm: resolve37(dirname32(fileURLToPath12(import.meta.url)), tree_sitter_zig_default)
       }
     ];
   }
@@ -144288,7 +144382,7 @@ var init_index_vy1rm1x3 = __esm(async () => {
       if (this.initializePromise) {
         return this.initializePromise;
       }
-      this.initializePromise = new Promise((resolve310, reject) => {
+      this.initializePromise = new Promise((resolve39, reject) => {
         const timeoutMs = this.options.initTimeout ?? 1e4;
         const timeoutId = setTimeout(() => {
           const error48 = new Error("Worker initialization timed out");
@@ -144296,7 +144390,7 @@ var init_index_vy1rm1x3 = __esm(async () => {
           this.initializeResolvers = undefined;
           reject(error48);
         }, timeoutMs);
-        this.initializeResolvers = { resolve: resolve310, reject, timeoutId };
+        this.initializeResolvers = { resolve: resolve39, reject, timeoutId };
         this.worker?.postMessage({
           type: "INIT",
           dataPath: this.options.dataPath
@@ -144337,8 +144431,8 @@ var init_index_vy1rm1x3 = __esm(async () => {
     }
     async getPerformance() {
       const messageId = `performance_${this.messageIdCounter++}`;
-      return new Promise((resolve310) => {
-        this.messageCallbacks.set(messageId, resolve310);
+      return new Promise((resolve39) => {
+        this.messageCallbacks.set(messageId, resolve39);
         this.worker?.postMessage({ type: "GET_PERFORMANCE", messageId });
       });
     }
@@ -144351,8 +144445,8 @@ var init_index_vy1rm1x3 = __esm(async () => {
         }
       }
       const messageId = `oneshot_${this.messageIdCounter++}`;
-      return new Promise((resolve310) => {
-        this.messageCallbacks.set(messageId, resolve310);
+      return new Promise((resolve39) => {
+        this.messageCallbacks.set(messageId, resolve39);
         this.worker?.postMessage({
           type: "ONESHOT_HIGHLIGHT",
           content,
@@ -144468,8 +144562,8 @@ var init_index_vy1rm1x3 = __esm(async () => {
     }
     async preloadParser(filetype) {
       const messageId = `has_parser_${this.messageIdCounter++}`;
-      const response = await new Promise((resolve310) => {
-        this.messageCallbacks.set(messageId, resolve310);
+      const response = await new Promise((resolve39) => {
+        this.messageCallbacks.set(messageId, resolve39);
         this.worker?.postMessage({
           type: "PRELOAD_PARSER",
           filetype,
@@ -144496,8 +144590,8 @@ var init_index_vy1rm1x3 = __esm(async () => {
       }
       this.buffers.set(id, { id, content, filetype, version: version3, hasParser: false });
       const messageId = `init_${this.messageIdCounter++}`;
-      const response = await new Promise((resolve310) => {
-        this.messageCallbacks.set(messageId, resolve310);
+      const response = await new Promise((resolve39) => {
+        this.messageCallbacks.set(messageId, resolve39);
         this.worker?.postMessage({
           type: "INITIALIZE_PARSER",
           bufferId: id,
@@ -144553,9 +144647,9 @@ var init_index_vy1rm1x3 = __esm(async () => {
         this.editQueues.delete(bufferId);
       }
       if (this.worker) {
-        await new Promise((resolve310) => {
+        await new Promise((resolve39) => {
           const messageId = `dispose_${bufferId}`;
-          this.messageCallbacks.set(messageId, resolve310);
+          this.messageCallbacks.set(messageId, resolve39);
           try {
             this.worker.postMessage({
               type: "DISPOSE_BUFFER",
@@ -144563,13 +144657,13 @@ var init_index_vy1rm1x3 = __esm(async () => {
             });
           } catch (error48) {
             console.error("Error disposing buffer", error48);
-            resolve310(false);
+            resolve39(false);
           }
           setTimeout(() => {
             if (this.messageCallbacks.has(messageId)) {
               this.messageCallbacks.delete(messageId);
               console.warn({ bufferId }, "Timed out waiting for buffer to be disposed");
-              resolve310(false);
+              resolve39(false);
             }
           }, 3000);
         });
@@ -144626,12 +144720,12 @@ var init_index_vy1rm1x3 = __esm(async () => {
       this.options.dataPath = dataPath;
       if (this.initialized && this.worker) {
         const messageId = `update_datapath_${this.messageIdCounter++}`;
-        return new Promise((resolve310, reject) => {
+        return new Promise((resolve39, reject) => {
           this.messageCallbacks.set(messageId, (response) => {
             if (response.error) {
               reject(new Error(response.error));
             } else {
-              resolve310();
+              resolve39();
             }
           });
           this.worker.postMessage({
@@ -144647,12 +144741,12 @@ var init_index_vy1rm1x3 = __esm(async () => {
         throw new Error("Cannot clear cache: client is not initialized");
       }
       const messageId = `clear_cache_${this.messageIdCounter++}`;
-      return new Promise((resolve310, reject) => {
+      return new Promise((resolve39, reject) => {
         this.messageCallbacks.set(messageId, (response) => {
           if (response.error) {
             reject(new Error(response.error));
           } else {
-            resolve310();
+            resolve39();
           }
         });
         this.worker.postMessage({
@@ -162554,14 +162648,14 @@ See https://react.dev/link/invalid-hook-call for tips about how to debug and fix
       prevActScopeDepth !== actScopeDepth - 1 && console.error("You seem to have overlapping act() calls, this is not supported. Be sure to await previous act() calls before making a new one. ");
       actScopeDepth = prevActScopeDepth;
     }
-    function recursivelyFlushAsyncActWork(returnValue, resolve40, reject) {
+    function recursivelyFlushAsyncActWork(returnValue, resolve39, reject) {
       var queue = ReactSharedInternals.actQueue;
       if (queue !== null)
         if (queue.length !== 0)
           try {
             flushActQueue(queue);
             enqueueTask(function() {
-              return recursivelyFlushAsyncActWork(returnValue, resolve40, reject);
+              return recursivelyFlushAsyncActWork(returnValue, resolve39, reject);
             });
             return;
           } catch (error48) {
@@ -162569,7 +162663,7 @@ See https://react.dev/link/invalid-hook-call for tips about how to debug and fix
           }
         else
           ReactSharedInternals.actQueue = null;
-      0 < ReactSharedInternals.thrownErrors.length ? (queue = aggregateErrors(ReactSharedInternals.thrownErrors), ReactSharedInternals.thrownErrors.length = 0, reject(queue)) : resolve40(returnValue);
+      0 < ReactSharedInternals.thrownErrors.length ? (queue = aggregateErrors(ReactSharedInternals.thrownErrors), ReactSharedInternals.thrownErrors.length = 0, reject(queue)) : resolve39(returnValue);
     }
     function flushActQueue(queue) {
       if (!isFlushing) {
@@ -162745,14 +162839,14 @@ See https://react.dev/link/invalid-hook-call for tips about how to debug and fix
           didAwaitActCall || didWarnNoAwaitAct || (didWarnNoAwaitAct = true, console.error("You called act(async () => ...) without await. This could lead to unexpected testing behaviour, interleaving multiple act calls and mixing their scopes. You should - await act(async () => ...);"));
         });
         return {
-          then: function(resolve40, reject) {
+          then: function(resolve39, reject) {
             didAwaitActCall = true;
             thenable.then(function(returnValue) {
               popActScope(prevActQueue, prevActScopeDepth);
               if (prevActScopeDepth === 0) {
                 try {
                   flushActQueue(queue), enqueueTask(function() {
-                    return recursivelyFlushAsyncActWork(returnValue, resolve40, reject);
+                    return recursivelyFlushAsyncActWork(returnValue, resolve39, reject);
                   });
                 } catch (error$0) {
                   ReactSharedInternals.thrownErrors.push(error$0);
@@ -162763,7 +162857,7 @@ See https://react.dev/link/invalid-hook-call for tips about how to debug and fix
                   reject(_thrownError);
                 }
               } else
-                resolve40(returnValue);
+                resolve39(returnValue);
             }, function(error48) {
               popActScope(prevActQueue, prevActScopeDepth);
               0 < ReactSharedInternals.thrownErrors.length ? (error48 = aggregateErrors(ReactSharedInternals.thrownErrors), ReactSharedInternals.thrownErrors.length = 0, reject(error48)) : reject(error48);
@@ -162779,11 +162873,11 @@ See https://react.dev/link/invalid-hook-call for tips about how to debug and fix
       if (0 < ReactSharedInternals.thrownErrors.length)
         throw callback = aggregateErrors(ReactSharedInternals.thrownErrors), ReactSharedInternals.thrownErrors.length = 0, callback;
       return {
-        then: function(resolve40, reject) {
+        then: function(resolve39, reject) {
           didAwaitActCall = true;
           prevActScopeDepth === 0 ? (ReactSharedInternals.actQueue = queue, enqueueTask(function() {
-            return recursivelyFlushAsyncActWork(returnValue$jscomp$0, resolve40, reject);
-          })) : resolve40(returnValue$jscomp$0);
+            return recursivelyFlushAsyncActWork(returnValue$jscomp$0, resolve39, reject);
+          })) : resolve39(returnValue$jscomp$0);
         }
       };
     };
@@ -165264,8 +165358,8 @@ It can also happen if the client has a browser extension installed which messes
         currentEntangledActionThenable = {
           status: "pending",
           value: undefined,
-          then: function(resolve40) {
-            entangledListeners.push(resolve40);
+          then: function(resolve39) {
+            entangledListeners.push(resolve39);
           }
         };
       }
@@ -165289,8 +165383,8 @@ It can also happen if the client has a browser extension installed which messes
         status: "pending",
         value: null,
         reason: null,
-        then: function(resolve40) {
-          listeners.push(resolve40);
+        then: function(resolve39) {
+          listeners.push(resolve39);
         }
       };
       thenable.then(function() {
@@ -193552,7 +193646,7 @@ async function runScoutMonitorApp(options) {
   const renderer = await createCliRenderer();
   const root = createRoot(renderer);
   let closed = false;
-  await new Promise((resolve40) => {
+  await new Promise((resolve39) => {
     const close = () => {
       if (closed) {
         return;
@@ -193567,7 +193661,7 @@ async function runScoutMonitorApp(options) {
         process.stdin.setRawMode?.(false);
         process.stdin.pause();
       }
-      resolve40();
+      resolve39();
     };
     process.once("SIGINT", close);
     process.once("SIGTERM", close);
@@ -193618,7 +193712,7 @@ __export(exports_up, {
   runUpCommand: () => runUpCommand
 });
 import { existsSync as existsSync55 } from "fs";
-import { resolve as resolve40 } from "path";
+import { resolve as resolve39 } from "path";
 function looksLikePath(value) {
   return value.includes("/") || value.startsWith(".") || value.startsWith("~");
 }
@@ -193726,8 +193820,8 @@ async function runUpCommand(context, args) {
     throw new ScoutCliError(`usage: scout up <name|path> [--name <alias>] [--harness <${SUPPORTED_LOCAL_AGENT_HARNESSES.join("|")}>] [--provider <provider>] [--model <model>] [--reasoning-effort <effort>] [--permission-profile <${formatScoutPermissionProfiles()}>]`);
   }
   let projectPath;
-  if (looksLikePath(target2) || existsSync55(resolve40(target2))) {
-    projectPath = resolve40(target2);
+  if (looksLikePath(target2) || existsSync55(resolve39(target2))) {
+    projectPath = resolve39(target2);
   } else {
     const resolved = await resolveLocalAgentByName(target2);
     if (!resolved) {
@@ -194481,7 +194575,7 @@ init_options();
 // ../../apps/desktop/src/cli/broker-update.ts
 import { randomUUID as randomUUID7 } from "crypto";
 import { mkdir as mkdir15, readFile as readFile18, rename, rm as rm6, stat as stat6, writeFile as writeFile12 } from "fs/promises";
-import { basename as basename26, dirname as dirname36, join as join70 } from "path";
+import { basename as basename26, dirname as dirname35, join as join70 } from "path";
 
 // ../../apps/desktop/src/cli/runtime-freshness.ts
 function isRecord16(value) {
@@ -194523,7 +194617,7 @@ var BROKER_UPDATE_LOCK_WAIT_GRACE_MS = 15000;
 var BROKER_UPDATE_LOCK_WAIT_MS = SCOUTD_RESTART_TIMEOUT_MS + BROKER_UPDATE_LOCK_WAIT_GRACE_MS;
 var BROKER_UPDATE_LOCK_POLL_MS = 50;
 function sleep2(ms) {
-  return new Promise((resolve41) => setTimeout(resolve41, ms));
+  return new Promise((resolve40) => setTimeout(resolve40, ms));
 }
 function errorCode2(error48) {
   return error48 && typeof error48 === "object" && "code" in error48 ? String(error48.code ?? "") : "";
@@ -194621,7 +194715,7 @@ async function tryCreateOwnedLock(lockPath) {
   };
 }
 async function tryReclaimDeadLock(lockPath, observedOwner) {
-  const reclaimPath = join70(dirname36(lockPath), BROKER_UPDATE_RECLAIM_DIRECTORY);
+  const reclaimPath = join70(dirname35(lockPath), BROKER_UPDATE_RECLAIM_DIRECTORY);
   const reclaimGuard = await tryCreateOwnedLock(reclaimPath);
   if (!reclaimGuard.acquired) {
     return false;
@@ -194663,7 +194757,7 @@ async function waitForBrokerUpdateLockRelease(lockPath, deadline) {
   return false;
 }
 async function acquireBrokerUpdateLock(lockPath, waitTimeoutMs) {
-  await mkdir15(dirname36(lockPath), { recursive: true });
+  await mkdir15(dirname35(lockPath), { recursive: true });
   const waitDeadline = Date.now() + waitTimeoutMs;
   for (;; ) {
     const created = await tryCreateOwnedLock(lockPath);
@@ -194690,7 +194784,7 @@ async function acquireBrokerUpdateLock(lockPath, waitTimeoutMs) {
   }
 }
 async function writeCliMtimeCheckpointAtomically(checkpointPath, mtime) {
-  const checkpointDirectory = dirname36(checkpointPath);
+  const checkpointDirectory = dirname35(checkpointPath);
   await mkdir15(checkpointDirectory, { recursive: true });
   const temporaryPath = join70(checkpointDirectory, `.${basename26(checkpointPath)}.${process.pid}.${randomUUID7()}.tmp`);
   try {
@@ -194727,7 +194821,7 @@ async function ensureBrokerUptodate(options) {
   const report = options.report ?? (() => {
     return;
   });
-  const lockPath = join70(dirname36(options.checkpointPath), BROKER_UPDATE_LOCK_DIRECTORY);
+  const lockPath = join70(dirname35(options.checkpointPath), BROKER_UPDATE_LOCK_DIRECTORY);
   let lock;
   try {
     lock = await acquireBrokerUpdateLock(lockPath, options.lockWaitTimeoutMs ?? BROKER_UPDATE_LOCK_WAIT_MS);