@oxagen/cli 2.1.4-926 → 2.1.4-942

package/oxagen.mjs

@@ -10358,14 +10358,14 @@ function psExecWithin(timeoutMs) {
   return (command2, args) => psExec(command2, args, timeoutMs);
 }
 function psExecAsync(command2, args) {
-  return new Promise((resolve23) => {
+  return new Promise((resolve24) => {
     execFile(
       command2,
       args,
       { encoding: "utf8", env: PS_ENV, timeout: PROCESS_START_TIMEOUT_MS },
       (error, stdout) => {
         const code = error?.code;
-        resolve23({
+        resolve24({
           status: error === null ? 0 : typeof code === "number" ? code : null,
           stdout: typeof stdout === "string" ? stdout : "",
           stderr: ""
@@ -12309,7 +12309,7 @@ function enrollmentFromArgv(argv) {
   return parsed2.success ? parsed2.data : void 0;
 }
 function postUnix(options) {
-  return new Promise((resolve23, reject) => {
+  return new Promise((resolve24, reject) => {
     const req = request(
       {
         ...options.socketPath !== void 0 ? { socketPath: options.socketPath } : { host: "127.0.0.1", port: options.loopbackPort },
@@ -12341,7 +12341,7 @@ function postUnix(options) {
         });
         res.on("end", () => {
           clearTimeout(deadline);
-          resolve23({
+          resolve24({
             status: res.statusCode ?? 0,
             body: Buffer.concat(chunks).toString("utf8")
           });
@@ -13052,7 +13052,7 @@ function readAnswer(body2) {
 }
 async function runSteerWait(deps) {
   const now = deps.now ?? (() => Date.now());
-  const sleep2 = deps.sleep ?? ((ms) => new Promise((resolve23) => setTimeout(resolve23, ms)));
+  const sleep2 = deps.sleep ?? ((ms) => new Promise((resolve24) => setTimeout(resolve24, ms)));
   const post2 = deps.post ?? postUnix;
   const sessionId = sessionOf(deps.stdin);
   if (sessionId === void 0) return DONE;
@@ -13151,8 +13151,8 @@ async function readStdin(source = process.stdin, deadlineMs = STDIN_READ_DEADLIN
   let bytes = 0;
   let overflowed = false;
   let timer;
-  const deadline = new Promise((resolve23) => {
-    timer = setTimeout(() => resolve23("timeout"), deadlineMs);
+  const deadline = new Promise((resolve24) => {
+    timer = setTimeout(() => resolve24("timeout"), deadlineMs);
     timer.unref?.();
   });
   const read2 = (async () => {
@@ -19564,7 +19564,7 @@ function isFileCursor(value) {
   if (!isRecord4(value)) return false;
   return typeof value.path === "string" && Number.isSafeInteger(value.offset) && value.offset >= 0 && isOptional(value.ino, (ino) => typeof ino === "number") && isOptional(value.head, (head2) => typeof head2 === "string") && isOptional(
     value.refused,
-    (refused) => isRecord4(refused) && typeof refused.count === "number" && typeof refused.detail === "string"
+    (refused2) => isRecord4(refused2) && typeof refused2.count === "number" && typeof refused2.detail === "string"
   ) && isOptional(value.codex, isRecord4);
 }
 function storedCursor(value) {
@@ -19593,7 +19593,7 @@ async function statIfExists(path2) {
   }
 }
 function yieldTurn() {
-  return new Promise((resolve23) => setImmediate(resolve23));
+  return new Promise((resolve24) => setImmediate(resolve24));
 }
 async function readAt(path2, offset, length) {
   const handle = await fs.open(path2, "r");
@@ -20268,14 +20268,14 @@ var init_transcript_tailer = __esm({
         const pass2 = await this.feed(session, cursor, budget, sealer, subagentId);
         if (cursor.refused === void 0) return pass2;
         await sealer.run(() => {
-          const refused = cursor.refused;
-          if (refused === void 0 || !sealer.current()) return;
+          const refused2 = cursor.refused;
+          if (refused2 === void 0 || !sealer.current()) return;
           this.sealGap(
             session,
             "transcript_line_refused",
-            refused.detail,
+            refused2.detail,
             subagentId,
-            refused.count
+            refused2.count
           );
           delete cursor.refused;
           this.dirty = true;
@@ -20597,7 +20597,7 @@ async function runBackfill(request3, deps) {
   const aborted = () => deps.signal?.aborted === true;
   const between = async () => {
     if (aborted()) throw new Stopped();
-    await new Promise((resolve23) => setImmediate(resolve23));
+    await new Promise((resolve24) => setImmediate(resolve24));
     if (deps.now() - checkedAt < CHECK_EVERY_MS) return;
     checkedAt = deps.now();
     deps.progress?.({ finished: false, ...counts2() });
@@ -20619,7 +20619,7 @@ async function runBackfill(request3, deps) {
       else pending.push(candidate);
       if (aborted()) throw new Stopped();
       if (index % LOCAL_CHECKS_PER_TURN === LOCAL_CHECKS_PER_TURN - 1)
-        await new Promise((resolve23) => setImmediate(resolve23));
+        await new Promise((resolve24) => setImmediate(resolve24));
     }
     const server = await askServer(pending, deps);
     for (const candidate of pending) {
@@ -21061,7 +21061,7 @@ async function resultAgentIds(path2) {
     await readSlices(path2, SEAL_SLICE_BYTES, async (lines) => {
       for (const line of lines)
         if (line.text !== void 0) resultAgentIdsOf(line.text, out);
-      await new Promise((resolve23) => setImmediate(resolve23));
+      await new Promise((resolve24) => setImmediate(resolve24));
     });
   } catch {
   }
@@ -24175,9 +24175,9 @@ function failure3(problem, count12) {
 }
 function codexAppServerClient(options) {
   const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-  return (requests) => new Promise((resolve23) => {
+  return (requests) => new Promise((resolve24) => {
     if (requests.length === 0) {
-      resolve23({ answers: [] });
+      resolve24({ answers: [] });
       return;
     }
     let child;
@@ -24190,7 +24190,7 @@ function codexAppServerClient(options) {
         ...invocation.windowsVerbatimArguments === true ? { windowsVerbatimArguments: true } : {}
       });
     } catch (error) {
-      resolve23(
+      resolve24(
         failure3(
           `could not run \`codex app-server\`: ${error instanceof Error ? error.message : String(error)}`,
           requests.length
@@ -24215,7 +24215,7 @@ function codexAppServerClient(options) {
       child.stdin.end();
       child.kill();
       const said = stderr.trim();
-      resolve23(
+      resolve24(
         problem === void 0 ? { answers } : {
           answers,
           problem: said.length === 0 ? problem : `${problem}: ${said}`
@@ -25170,7 +25170,7 @@ import { readFileSync as readFileSync10 } from "node:fs";
 import { dirname as dirname9, resolve as resolve3 } from "node:path";
 import { fileURLToPath } from "node:url";
 function readVersion() {
-  if (true) return "2.1.4-926";
+  if (true) return "2.1.4-942";
   try {
     const here = dirname9(fileURLToPath(import.meta.url));
     const pkg = JSON.parse(
@@ -27694,7 +27694,7 @@ ${lines.join("\n")}
       async bodiesForAsync(events) {
         const found = /* @__PURE__ */ new Map();
         for (let at2 = 0; at2 < events.length; at2 += BODY_READ_SLICE) {
-          if (at2 > 0) await new Promise((resolve23) => setImmediate(resolve23));
+          if (at2 > 0) await new Promise((resolve24) => setImmediate(resolve24));
           let slice = events.slice(at2, at2 + BODY_READ_SLICE);
           for (let attempt = 0; attempt < 2 && slice.length > 0; attempt += 1) {
             const stale = /* @__PURE__ */ new Set();
@@ -27891,7 +27891,7 @@ ${lines.join("\n")}
         let blanked = 0;
         let moved = false;
         for (let next = 0; next < found.length; ) {
-          if (next > 0) await new Promise((resolve23) => setImmediate(resolve23));
+          if (next > 0) await new Promise((resolve24) => setImmediate(resolve24));
           const slice = this.blankSlice(path2, found, next, idems);
           if (slice === void 0) break;
           blanked += slice.blanked;
@@ -30952,7 +30952,7 @@ ${problems.map((problem) => `  ${problem}`).join("\n")}`
       deps.out(
         `      adding ${added.join(", ")} to ${existing.agent_key}: revoking ${existing.host_enrollment_id} and enrolling again for ${harnesses.join(", ")} so the control plane's host record follows (device key, port and local token kept)`
       );
-      const refused = [];
+      const refused2 = [];
       const revoked = await revokeOnControlPlane(
         existing,
         {
@@ -30960,13 +30960,13 @@ ${problems.map((problem) => `  ${problem}`).join("\n")}`
           reason: `oxagen agent enroll --harness ${harnesses.join(",")}`
         },
         deps,
-        refused
+        refused2
       );
       if (!revoked) {
         deps.err(
-          `Cannot add ${added.join(", ")}: ${existing.host_enrollment_id} could not be revoked (${refused.join("; ")}), so nothing was changed; this host still reports as ${existing.agent_key} for ${existing.harnesses.join(", ")}.`
+          `Cannot add ${added.join(", ")}: ${existing.host_enrollment_id} could not be revoked (${refused2.join("; ")}), so nothing was changed; this host still reports as ${existing.agent_key} for ${existing.harnesses.join(", ")}.`
         );
-        return { ok: false, warnings: [...warnings, ...refused] };
+        return { ok: false, warnings: [...warnings, ...refused2] };
       }
       writeHostFile(deps.paths.hostFile, {
         ...existing,
@@ -33365,7 +33365,7 @@ function runLineOf(raw) {
   return void 0;
 }
 function streamDaemon(options) {
-  return new Promise((resolve23, reject) => {
+  return new Promise((resolve24, reject) => {
     const req = request2(
       {
         ...options.socketPath !== void 0 ? { socketPath: options.socketPath } : { host: "127.0.0.1", port: options.loopbackPort },
@@ -33393,7 +33393,7 @@ function streamDaemon(options) {
         });
         res.on("end", () => {
           if (buffered.length > 0) options.onLine(buffered);
-          resolve23(res.statusCode ?? 0);
+          resolve24(res.statusCode ?? 0);
         });
         res.on("error", reject);
       }
@@ -33566,7 +33566,7 @@ function spawnAgent(command2, args, options) {
     process.platform,
     options.env
   );
-  return new Promise((resolve23) => {
+  return new Promise((resolve24) => {
     const child = spawn2(invocation.command, invocation.args, {
       cwd: options.cwd,
       env: options.env,
@@ -33582,7 +33582,7 @@ function spawnAgent(command2, args, options) {
       process.off("SIGINT", stay);
       process.off("SIGTERM", forward);
       process.off("SIGHUP", forward);
-      resolve23(exit);
+      resolve24(exit);
     };
     if (options.onSpawn !== void 0) child.once("spawn", options.onSpawn);
     child.once("error", (error) => done({ code: null, signal: null, error }));
@@ -38072,17 +38072,17 @@ async function startContainedBridge(options) {
     "upgrade",
     (_request, socket) => socket.end("HTTP/1.1 403 Forbidden\r\nConnection: close\r\n\r\n")
   );
-  await new Promise((resolve23, reject) => {
+  await new Promise((resolve24, reject) => {
     server.once("error", reject);
     server.listen(options.socketPath, () => {
       chmodSync6(options.socketPath, 384);
-      resolve23();
+      resolve24();
     });
   });
   return {
     close: async () => {
       server.closeAllConnections();
-      await new Promise((resolve23) => server.close(() => resolve23()));
+      await new Promise((resolve24) => server.close(() => resolve24()));
     }
   };
 }
@@ -38237,6 +38237,9 @@ var init_workspace = __esm({
 });
 
 // ../../packages/tacho/src/collector/hardened-git.ts
+import { execFile as execFile2 } from "node:child_process";
+import { lstatSync as lstatSync7, readFileSync as readFileSync15, statSync as statSync8 } from "node:fs";
+import { dirname as dirname15, join as join24, resolve as resolve10 } from "node:path";
 function hardenedGitArgs(cwd, args, globals = []) {
   const subcommand = args[0];
   const end = args.indexOf("--");
@@ -38258,7 +38261,141 @@ function hardenedGitShellPrefix() {
 function shellQuote2(value) {
   return /^[A-Za-z0-9_./=:-]+$/.test(value) ? value : `'${value.replace(/'/g, "'\\''")}'`;
 }
-var HARDENED_GIT_CONFIG, HARDENED_GIT_ENV, DIFF_SUBCOMMANDS, DIFF_FLAGS;
+function hardenedGitExecOptions(repository) {
+  return { env: HARDENED_GIT_ENV, repository };
+}
+function gitIdentity(repository, deps = DEFAULT_IDENTITY_DEPS) {
+  const self2 = deps.getuid();
+  if (self2 !== 0) return { kind: "self" };
+  const owners = [];
+  const directory = resolve10(repository);
+  try {
+    owners.push(deps.stat(directory));
+  } catch (error) {
+    return {
+      kind: "refuse",
+      reason: `git did not run in ${directory}: its owner could not be read (${describe5(error)})`
+    };
+  }
+  for (let at2 = directory; ; at2 = dirname15(at2)) {
+    const marker = join24(at2, ".git");
+    const link = tryStat(deps.lstat, marker);
+    if (link !== void 0) {
+      owners.push(link);
+      const target2 = tryStat(deps.stat, marker);
+      if (target2 !== void 0) {
+        owners.push(target2);
+        if (target2.isDirectory()) {
+          const config = tryStat(deps.stat, join24(marker, "config"));
+          if (config !== void 0) owners.push(config);
+        }
+      }
+      break;
+    }
+    if (dirname15(at2) === at2) break;
+  }
+  const others = [...new Set(owners.map((found) => found.uid))].filter(
+    (uid2) => uid2 !== 0
+  );
+  if (others.length === 0) return { kind: "self" };
+  if (others.length > 1)
+    return {
+      kind: "refuse",
+      reason: `git did not run in ${directory}: users ${others.join(" and ")} both own parts of it`
+    };
+  const uid = others[0];
+  const entry2 = passwdEntry(deps.passwd(), uid);
+  if (entry2 !== void 0) return { kind: "owner", uid, ...entry2 };
+  const gid = owners.find((found) => found.uid === uid)?.gid;
+  if (gid === void 0 || gid === 0)
+    return {
+      kind: "refuse",
+      reason: `git did not run in ${directory}: user ${uid} has no group other than root's`
+    };
+  return { kind: "owner", uid, gid, home: NO_HOME };
+}
+function tryStat(read2, path2) {
+  try {
+    return read2(path2);
+  } catch {
+    return void 0;
+  }
+}
+function passwdEntry(passwd, uid) {
+  for (const line of (passwd ?? "").split("\n")) {
+    const fields = line.split(":");
+    if (fields.length < 7 || Number(fields[2]) !== uid) continue;
+    const gid = Number(fields[3]);
+    if (!Number.isSafeInteger(gid) || gid < 0) return void 0;
+    const home = fields[5] ?? "";
+    return { gid, home: home.startsWith("/") ? home : NO_HOME };
+  }
+  return void 0;
+}
+function describe5(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+function createGitExecAsync(run3 = runExecFile, deps = DEFAULT_IDENTITY_DEPS, environment = process.env) {
+  return async (command2, args, options) => {
+    const inherited = options?.env !== void 0 ? { env: { ...definedOnly(environment), ...options.env } } : {};
+    const repository = options?.repository ?? (command2 === "git" && args[0] === "-C" ? args[1] : void 0);
+    if (repository === void 0) {
+      if (command2 === "git" && deps.getuid() === 0)
+        return refused(
+          "git did not run: root names no repository to run it as"
+        );
+      return run3(command2, args, inherited);
+    }
+    const identity = gitIdentity(repository, deps);
+    if (identity.kind === "refuse") return refused(identity.reason);
+    if (identity.kind === "self") return run3(command2, args, inherited);
+    const env = {};
+    for (const name of KEPT_VARIABLES) {
+      const value = environment[name];
+      if (value !== void 0) env[name] = value;
+    }
+    env["HOME"] = identity.home;
+    return run3(command2, args, {
+      env: { ...env, ...HARDENED_GIT_ENV, ...options?.env },
+      uid: identity.uid,
+      gid: identity.gid
+    });
+  };
+}
+function refused(reason3) {
+  return { status: 1, stdout: "", stderr: reason3 };
+}
+function definedOnly(environment) {
+  const out = {};
+  for (const [name, value] of Object.entries(environment))
+    if (value !== void 0) out[name] = value;
+  return out;
+}
+function runExecFile(command2, args, launch) {
+  return new Promise((settle3) => {
+    execFile2(
+      command2,
+      args,
+      {
+        encoding: "utf8",
+        maxBuffer: 4 * 1024 * 1024,
+        timeout: 1e4,
+        ...launch.env !== void 0 ? { env: launch.env } : {},
+        ...launch.uid !== void 0 ? { uid: launch.uid } : {},
+        ...launch.gid !== void 0 ? { gid: launch.gid } : {}
+      },
+      (error, stdout, stderr) => {
+        const code = error?.code;
+        settle3({
+          status: error === null ? 0 : typeof code === "number" ? code : 1,
+          stdout: stdout ?? "",
+          stderr: stderr ?? ""
+        });
+      }
+    );
+  });
+}
+var HARDENED_GIT_CONFIG, HARDENED_GIT_ENV, DIFF_SUBCOMMANDS, DIFF_FLAGS, NO_HOME, DEFAULT_IDENTITY_DEPS, KEPT_VARIABLES;
 var init_hardened_git = __esm({
   "../../packages/tacho/src/collector/hardened-git.ts"() {
     "use strict";
@@ -38280,12 +38417,26 @@ var init_hardened_git = __esm({
     };
     DIFF_SUBCOMMANDS = /* @__PURE__ */ new Set(["diff", "show", "log"]);
     DIFF_FLAGS = ["--no-ext-diff", "--no-textconv"];
+    NO_HOME = "/nonexistent";
+    DEFAULT_IDENTITY_DEPS = {
+      getuid: () => process.getuid?.(),
+      stat: (path2) => statSync8(path2),
+      lstat: (path2) => lstatSync7(path2),
+      passwd: () => {
+        try {
+          return readFileSync15("/etc/passwd", "utf8");
+        } catch {
+          return void 0;
+        }
+      }
+    };
+    KEPT_VARIABLES = ["PATH", "LANG", "LC_ALL", "LC_CTYPE", "TZ"];
   }
 });
 
 // ../../packages/tacho/src/contained/profile.ts
 import { createHash as createHash6 } from "node:crypto";
-import { isAbsolute as isAbsolute4, join as join24, relative as relative3, sep as sep3 } from "node:path";
+import { isAbsolute as isAbsolute4, join as join25, relative as relative3, sep as sep3 } from "node:path";
 function containerPath(workspace, path2) {
   const inside2 = relative3(workspace, path2);
   if (inside2 === "" || isAbsolute4(inside2) || inside2 === ".." || inside2.startsWith(`..${sep3}`))
@@ -38295,7 +38446,7 @@ function containerPath(workspace, path2) {
   return `/workspace/${inside2.split(sep3).join("/")}`;
 }
 function gitMountPairs(spec) {
-  if (!spec.gitMounts.includes(join24(spec.workspace, ".git")))
+  if (!spec.gitMounts.includes(join25(spec.workspace, ".git")))
     throw new Error(
       "Contained execution must mount the repository's .git read-only"
     );
@@ -38452,7 +38603,7 @@ var init_profile = __esm({
 });
 
 // ../../packages/tacho/src/contained/launcher.ts
-import { execFile as execFile2, spawn as spawn3 } from "node:child_process";
+import { execFile as execFile3, spawn as spawn3 } from "node:child_process";
 import { randomBytes as randomBytes8 } from "node:crypto";
 import {
   chmodSync as chmodSync7,
@@ -38462,7 +38613,7 @@ import {
   writeFileSync as writeFileSync2
 } from "node:fs";
 import { tmpdir } from "node:os";
-import { isAbsolute as isAbsolute5, join as join25 } from "node:path";
+import { isAbsolute as isAbsolute5, join as join26 } from "node:path";
 import { promisify } from "node:util";
 function reason(error) {
   return error instanceof Error ? error.message : String(error);
@@ -38501,7 +38652,7 @@ async function launchContainedAgent(options) {
   if (digest6 === void 0)
     throw new Error("The operator's contained image is not installed");
   const sessionId = `contained-${randomBytes8(16).toString("hex")}`;
-  const directory = mkdtempSync(join25(tmpdir(), "oxagen-contained-"));
+  const directory = mkdtempSync(join26(tmpdir(), "oxagen-contained-"));
   chmodSync7(directory, 448);
   let prepared;
   let containerCreated = false;
@@ -38522,7 +38673,7 @@ async function launchContainedAgent(options) {
     for (const [name2, contents] of entries2) {
       if (!/^[a-z0-9.-]+$/.test(name2))
         throw new Error("Invalid contained configuration filename");
-      writeFileSync2(join25(directory, name2), contents, {
+      writeFileSync2(join26(directory, name2), contents, {
         mode: 256,
         flag: "wx"
       });
@@ -38552,7 +38703,7 @@ async function launchContainedAgent(options) {
     admitted = true;
     if (options.signal?.aborted)
       throw new Error("Contained run cancelled before start");
-    exitCode = await new Promise((resolve23, reject) => {
+    exitCode = await new Promise((resolve24, reject) => {
       const child = spawn3("docker", ["start", "--attach", name], {
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -38575,7 +38726,7 @@ async function launchContainedAgent(options) {
       child.once("error", reject);
       child.once("close", (code) => {
         options.signal?.removeEventListener("abort", stop);
-        resolve23(code ?? 1);
+        resolve24(code ?? 1);
       });
     });
     return { sessionId, exitCode, measurement };
@@ -38606,7 +38757,7 @@ var init_launcher = __esm({
     init_workspace();
     init_hardened_git();
     init_profile();
-    exec = promisify(execFile2);
+    exec = promisify(execFile3);
     imageInspectSchema = external_exports.array(external_exports.object({ Id: external_exports.string().optional() }));
   }
 });
@@ -38665,16 +38816,16 @@ async function startSandboxGateway(options, port = SANDBOX_GATEWAY_PORT) {
     "upgrade",
     (_request, socket) => socket.end("HTTP/1.1 403 Forbidden\r\nConnection: close\r\n\r\n")
   );
-  await new Promise((resolve23, reject) => {
+  await new Promise((resolve24, reject) => {
     server.once("error", reject);
-    server.listen(port, "127.0.0.1", () => resolve23());
+    server.listen(port, "127.0.0.1", () => resolve24());
   });
   const address = server.address();
   return {
     port: typeof address === "object" && address !== null ? address.port : port,
     close: async () => {
       server.closeAllConnections();
-      await new Promise((resolve23) => server.close(() => resolve23()));
+      await new Promise((resolve24) => server.close(() => resolve24()));
     }
   };
 }
@@ -38778,7 +38929,7 @@ var init_claude_code = __esm({
 
 // ../../packages/tacho/src/contained/sandbox/hooks.ts
 import { createHash as createHash7 } from "node:crypto";
-import { dirname as dirname15 } from "node:path";
+import { dirname as dirname16 } from "node:path";
 function sandboxHookScript(port) {
   return `import { request } from "node:http";
 const chunks = [];
@@ -38848,7 +38999,7 @@ function pinSandboxHooks(system, options) {
     ]
   ];
   for (const [path2, contents] of written2) {
-    const directory = dirname15(path2);
+    const directory = dirname16(path2);
     system.mkdir(directory, 493);
     system.chown(directory, 0, 0);
     system.writeFile(path2, contents, 292);
@@ -38856,7 +39007,7 @@ function pinSandboxHooks(system, options) {
   }
   const files2 = [options.nodePath, ...written2.map(([path2]) => path2)];
   for (const path2 of files2)
-    if (!rootReadOnly(system, path2, "file") || !rootReadOnly(system, dirname15(path2), "directory"))
+    if (!rootReadOnly(system, path2, "file") || !rootReadOnly(system, dirname16(path2), "directory"))
       throw new Error(
         `The hook file ${path2} is not root-owned and read-only; the agent was not started`
       );
@@ -38921,7 +39072,7 @@ var init_privilege = __esm({
 
 // ../../packages/tacho/src/contained/sandbox/launcher.ts
 import { randomBytes as randomBytes9 } from "node:crypto";
-import { join as join26 } from "node:path";
+import { join as join27 } from "node:path";
 function shellQuote3(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
 }
@@ -39011,7 +39162,7 @@ async function launchSandboxAgent(options) {
       { ...asAgent, cwd: SANDBOX_AGENT_HOME, timeoutMs: 15 * 6e4 }
     );
     for (const [name, contents] of Object.entries(claudeCodeUserState())) {
-      const path2 = join26(SANDBOX_AGENT_HOME, name);
+      const path2 = join27(SANDBOX_AGENT_HOME, name);
       system.writeFile(path2, contents, 384);
       system.chown(path2, SANDBOX_AGENT_UID, SANDBOX_AGENT_GID);
     }
@@ -39135,14 +39286,14 @@ var init_request = __esm({
 });
 
 // ../../packages/tacho/src/contained/sandbox/system.ts
-import { execFile as execFile3, spawn as spawn4 } from "node:child_process";
+import { execFile as execFile4, spawn as spawn4 } from "node:child_process";
 import {
   chmodSync as chmodSync8,
   chownSync as chownSync2,
   existsSync as existsSync17,
   mkdirSync as mkdirSync5,
-  readFileSync as readFileSync15,
-  statSync as statSync8,
+  readFileSync as readFileSync16,
+  statSync as statSync9,
   writeFileSync as writeFileSync3
 } from "node:fs";
 import { promisify as promisify2 } from "node:util";
@@ -39150,7 +39301,7 @@ var run, nodeSandboxSystem;
 var init_system = __esm({
   "../../packages/tacho/src/contained/sandbox/system.ts"() {
     "use strict";
-    run = promisify2(execFile3);
+    run = promisify2(execFile4);
     nodeSandboxSystem = {
       getuid: () => process.getuid?.() ?? -1,
       platform: process.platform,
@@ -39173,9 +39324,9 @@ var init_system = __esm({
           ...options.env !== void 0 ? { env: options.env } : {},
           stdio: ["pipe", "pipe", "inherit"]
         });
-        const exited = new Promise((resolve23) => {
-          child.once("error", () => resolve23(1));
-          child.once("close", (code) => resolve23(code ?? 1));
+        const exited = new Promise((resolve24) => {
+          child.once("error", () => resolve24(1));
+          child.once("close", (code) => resolve24(code ?? 1));
         });
         return {
           pid: child.pid,
@@ -39190,7 +39341,7 @@ var init_system = __esm({
       exists: (path2) => existsSync17(path2),
       stat: (path2) => {
         try {
-          const found = statSync8(path2);
+          const found = statSync9(path2);
           return {
             uid: found.uid,
             gid: found.gid,
@@ -39202,7 +39353,7 @@ var init_system = __esm({
           return void 0;
         }
       },
-      readFile: (path2) => readFileSync15(path2),
+      readFile: (path2) => readFileSync16(path2),
       writeFile: (path2, contents, mode) => {
         writeFileSync3(path2, contents, { mode });
         chmodSync8(path2, mode);
@@ -39217,10 +39368,10 @@ var init_system = __esm({
 });
 
 // ../../packages/tacho/src/contained/runner.ts
-import { join as join27 } from "node:path";
+import { join as join28 } from "node:path";
 function containedHookEnv(harness, workspace) {
-  const home = join27(workspace, ".oxagen-contained", "home");
-  return harness === "codex" ? { CODEX_HOME: join27(home, ".codex") } : { CLAUDE_CONFIG_DIR: join27(home, ".claude") };
+  const home = join28(workspace, ".oxagen-contained", "home");
+  return harness === "codex" ? { CODEX_HOME: join28(home, ".codex") } : { CLAUDE_CONFIG_DIR: join28(home, ".claude") };
 }
 function containedLaunchEndpoint(host) {
   const ingest = new URL(host.endpoints.ingest);
@@ -39418,7 +39569,7 @@ function createContainedRunner(options) {
             sessionUuid2 = started.recorder.sessionUuid;
             active2.set(sessionUuid2, controller);
             const bridge = await startContainedBridge({
-              socketPath: join27(directory, "bridge.sock"),
+              socketPath: join28(directory, "bridge.sock"),
               ...bridgeRoutes({
                 sessionId,
                 workspace,
@@ -39502,7 +39653,7 @@ function createContainedRunner(options) {
       const abort = () => controller.abort();
       signal?.addEventListener("abort", abort, { once: true });
       if (signal?.aborted) abort();
-      const env = { CLAUDE_CONFIG_DIR: join27(SANDBOX_AGENT_HOME, ".claude") };
+      const env = { CLAUDE_CONFIG_DIR: join28(SANDBOX_AGENT_HOME, ".claude") };
       let sessionUuid2;
       let launchedSessionId;
       let opened = false;
@@ -39637,7 +39788,7 @@ var init_runner = __esm({
 
 // ../../packages/tacho/src/collector/detector.ts
 import { promises as fs3 } from "node:fs";
-import { basename as basename5, join as join28 } from "node:path";
+import { basename as basename5, join as join29 } from "node:path";
 async function eachLimited(items, limit, task) {
   let next = 0;
   const workers = Array.from(
@@ -39663,7 +39814,7 @@ async function scanProject(dir) {
   await eachLimited(names2, SCAN_CONCURRENCY, async (name) => {
     const match = SESSION_FILE.exec(name);
     if (match === null) return;
-    const path2 = join28(dir, name);
+    const path2 = join29(dir, name);
     try {
       const st = await fs3.stat(path2);
       out.push({ sessionId: match[1], path: path2, mtimeMs: st.mtimeMs });
@@ -39704,7 +39855,7 @@ var init_detector = __esm({
             continue;
           }
           await eachLimited(names2, SCAN_CONCURRENCY, async (name) => {
-            const dir = join28(root, name);
+            const dir = join29(root, name);
             try {
               const st = await fs3.stat(dir);
               if (st.isDirectory()) dirs.push({ dir, mtimeMs: st.mtimeMs });
@@ -39944,7 +40095,7 @@ var init_detector = __esm({
                 transcript_path: transcript.path,
                 transcript_mtime: new Date(transcript.mtimeMs).toISOString(),
                 claude_pids: processes.map((p) => p.pid),
-                project: basename5(join28(transcript.path, ".."))
+                project: basename5(join29(transcript.path, ".."))
               }
             })
           );
@@ -40029,7 +40180,7 @@ async function runGit(exec4, cwd, args) {
         "-c",
         "core.quotePath=false"
       ]),
-      { env: HARDENED_GIT_ENV }
+      hardenedGitExecOptions(cwd)
     );
   } catch (error) {
     return {
@@ -40370,7 +40521,7 @@ import {
   rm,
   unlink
 } from "node:fs/promises";
-import { dirname as dirname16, join as join29 } from "node:path";
+import { dirname as dirname17, join as join30 } from "node:path";
 function byPath(a, b3) {
   return a.path < b3.path ? -1 : a.path > b3.path ? 1 : 0;
 }
@@ -40413,7 +40564,7 @@ async function contentHash(absolutePath, kind, keep) {
   if (keep !== void 0) {
     try {
       await mkdir(keep.dir, { recursive: true, mode: 448 });
-      const temp2 = join29(keep.dir, `.partial-${randomUUID3()}`);
+      const temp2 = join30(keep.dir, `.partial-${randomUUID3()}`);
       copy = {
         temp: temp2,
         handle: await open3(temp2, "wx", keep.executable ? 448 : 384)
@@ -40457,7 +40608,7 @@ async function settleCopy(temp, name) {
   if (temp === void 0) return;
   if (name !== void 0)
     try {
-      await rename(temp, join29(dirname16(temp), name));
+      await rename(temp, join30(dirname17(temp), name));
       return;
     } catch {
     }
@@ -40473,7 +40624,7 @@ async function copiedBytes(dir) {
   let total2 = 0;
   for (const name of names2) {
     try {
-      total2 += (await lstat(join29(dir, name))).size;
+      total2 += (await lstat(join30(dir, name))).size;
     } catch {
     }
   }
@@ -40489,7 +40640,7 @@ async function removeCopiesOutside(root, live) {
   const keep = new Set(live());
   await Promise.all(
     names2.filter((name) => !keep.has(name)).map(
-      (name) => rm(join29(root, name), { recursive: true, force: true }).catch(
+      (name) => rm(join30(root, name), { recursive: true, force: true }).catch(
         () => void 0
       )
     )
@@ -40511,7 +40662,7 @@ async function readPreexistingPaths(exec4, root, startedAtMs, copies) {
       if (found === void 0) return;
       if (found === "absent") {
         if (!deletedIn(entry2.code)) return;
-        const parent = await directoryChangedAt(dirname16(absolute));
+        const parent = await directoryChangedAt(dirname17(absolute));
         if (parent === void 0 || parent >= startedAtMs) return;
         paths[entry2.path] = null;
         return;
@@ -40596,7 +40747,7 @@ async function contributionOf(exec4, cwd, root, repoRelative, entry2, copies) {
   let copy = null;
   if (entry2 !== null) {
     if (copies === void 0 || !COPY_NAME.test(entry2[0])) return void 0;
-    copy = join29(copies, entry2[0]);
+    copy = join30(copies, entry2[0]);
     const kept = await statOf(copy);
     if (kept === void 0 || kept === "absent" || kept.kind !== "file")
       return void 0;
@@ -40998,7 +41149,7 @@ var init_session_changes = __esm({
 });
 
 // ../../packages/tacho/src/collector/session-commits.ts
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 function parseMeta(stdout) {
   const out = [];
   for (const record of stdout.split("\0")) {
@@ -41039,9 +41190,11 @@ async function patchIds(exec4, cwd, shas) {
   const out = /* @__PURE__ */ new Map();
   if (shas.length === 0) return out;
   try {
-    const result2 = await exec4("sh", ["-c", PATCH_IDS, "sh", cwd, ...shas], {
-      env: HARDENED_GIT_ENV
-    });
+    const result2 = await exec4(
+      "sh",
+      ["-c", PATCH_IDS, "sh", cwd, ...shas],
+      hardenedGitExecOptions(cwd)
+    );
     if (result2.status !== 0) return out;
     for (const line of (result2.stdout ?? "").split("\n")) {
       const [patchId, sha2] = line.trim().split(" ");
@@ -41121,7 +41274,7 @@ async function readSessionCommits(exec4, cwd, input) {
     const test = input.tests[commit.sha];
     const toolUseId = callAt(times.get(commit.sha), calls);
     const written2 = input.written;
-    const outside = merge || written2 === void 0 || root === void 0 ? void 0 : files2.some((file) => !written2.has(join30(root, file.path)));
+    const outside = merge || written2 === void 0 || root === void 0 ? void 0 : files2.some((file) => !written2.has(join31(root, file.path)));
     return {
       sha: commit.sha,
       parent_shas: commit.parents.slice(0, MAX_COMMIT_PARENTS),
@@ -41169,7 +41322,7 @@ var init_session_commits = __esm({
 
 // ../../packages/tacho/src/collector/worktree-snapshot.ts
 import { lstat as lstat2 } from "node:fs/promises";
-import { join as join31 } from "node:path";
+import { join as join32 } from "node:path";
 function headerPath(prefix, path2) {
   const name = `${prefix}${path2}`;
   let quoted3 = false;
@@ -41214,6 +41367,15 @@ function relabelPreSessionPatch(patch, path2, sides) {
     body2[0] = `Binary files ${before} and ${after} differ`;
   return [...out, ...body2].join("\n");
 }
+function remoteRepositories(origin, remotes) {
+  const urls = (remotes ?? "").split("\n").map((line) => /^\S+\t(\S+) \((?:fetch|push)\)$/.exec(line.trim())?.[1]).filter((url) => url !== void 0);
+  const ordered = [...origin ? [origin.trim()] : [], ...urls];
+  return [
+    ...new Set(
+      ordered.map((url) => safeRepositoryUrl(url)).filter((url) => url !== null)
+    )
+  ];
+}
 function safeRepositoryUrl(remote) {
   const scp = remote.includes("://") ? null : /^(?:[^@\s/]+@)?([a-z0-9.-]+):([\w./-]+)$/i.exec(remote.trim());
   try {
@@ -41244,7 +41406,7 @@ async function worktreeFingerprint(status2, root) {
       const path2 = statusPath(record);
       if (path2 === null) return "";
       try {
-        const info = await lstat2(join31(root, path2));
+        const info = await lstat2(join32(root, path2));
         return `${info.size}:${info.mtimeMs}:${info.ctimeMs}`;
       } catch {
         return "absent";
@@ -41280,7 +41442,7 @@ async function readWorktreeSnapshot(exec4, cwd, baseline, measured) {
           "-c",
           "core.quotePath=false"
         ]),
-        { env: HARDENED_GIT_ENV }
+        hardenedGitExecOptions(directory)
       );
       return result2.status !== null && statuses.includes(result2.status) ? result2.stdout : void 0;
     } catch {
@@ -41298,9 +41460,10 @@ async function readWorktreeSnapshot(exec4, cwd, baseline, measured) {
     "--no-renames"
   ]);
   const stateBefore = await worktreeFingerprint(await readStatus(), root);
-  const [headRaw, remote, untracked] = await Promise.all([
+  const [headRaw, remote, remotes, untracked] = await Promise.all([
     read2(["rev-parse", "HEAD"]),
     read2(["remote", "get-url", "origin"]),
+    read2(["remote", "-v"]),
     read2(["ls-files", "--others", "--exclude-standard", "-z"])
   ]);
   const head2 = headRaw?.trim();
@@ -41351,7 +41514,7 @@ async function readWorktreeSnapshot(exec4, cwd, baseline, measured) {
       }
       let present;
       try {
-        present = (await lstat2(join31(root, path2))).isFile();
+        present = (await lstat2(join32(root, path2))).isFile();
       } catch {
         present = false;
       }
@@ -41424,6 +41587,7 @@ async function readWorktreeSnapshot(exec4, cwd, baseline, measured) {
     version: 1,
     root,
     repository: remote ? safeRepositoryUrl(remote) : null,
+    repositories: remoteRepositories(remote, remotes),
     baseline: base2,
     head: head2 && HASH.test(head2) ? head2 : null,
     patch,
@@ -41453,10 +41617,10 @@ var init_worktree_snapshot = __esm({
 });
 
 // ../../packages/tacho/src/collector/git-lane.ts
-import { join as join32 } from "node:path";
+import { join as join33 } from "node:path";
 function copiesDirOf(root, session) {
   const uuid = session.recorder.sessionUuid;
-  return /^[0-9a-f-]{36}$/i.test(uuid) ? join32(root, uuid) : void 0;
+  return /^[0-9a-f-]{36}$/i.test(uuid) ? join33(root, uuid) : void 0;
 }
 function holdsBaseline(session) {
   return session.baselineCommit !== void 0 || Object.keys(session.baselines ?? {}).length > 0;
@@ -41465,6 +41629,11 @@ function startedAtOf(session, at2) {
   const started = Date.parse(session.startedAt);
   return Number.isFinite(started) ? Math.min(started, at2) : at2;
 }
+function lastRootOf(session) {
+  if (session.baselineRoot !== void 0) return session.baselineRoot;
+  const roots = Object.keys(session.baselines ?? {});
+  return roots[roots.length - 1];
+}
 function createGitLane(deps) {
   const {
     registry: registry2,
@@ -41493,6 +41662,13 @@ function createGitLane(deps) {
   const GIT_READS_PER_TICK = 4;
   const RECONCILE_MIN_INTERVAL_MS = 15e3;
   const lastReconcileAt = /* @__PURE__ */ new Map();
+  const MAX_OTHER_ROOTS_PER_READ = 4;
+  const reconciledHeads = /* @__PURE__ */ new Map();
+  function noteReconciledHead(sessionUuid2, root, head2) {
+    const heads = reconciledHeads.get(sessionUuid2) ?? /* @__PURE__ */ new Map();
+    heads.set(root, head2);
+    reconciledHeads.set(sessionUuid2, heads);
+  }
   const gitReadEligibleAt = /* @__PURE__ */ new Map();
   function gitReadDue(sessionUuid2) {
     if (pendingSessionEnds.has(sessionUuid2)) return true;
@@ -41520,6 +41696,11 @@ function createGitLane(deps) {
     for (const [sessionUuid2, last] of lastReconcileAt)
       if (at2 - last >= RECONCILE_MIN_INTERVAL_MS)
         lastReconcileAt.delete(sessionUuid2);
+    for (const sessionUuid2 of reconciledHeads.keys()) {
+      const session = registry2.byUuid(sessionUuid2);
+      if (session === void 0 || session.sealed)
+        reconciledHeads.delete(sessionUuid2);
+    }
   }
   function putBack(read2) {
     const sessionUuid2 = read2.session.recorder.sessionUuid;
@@ -41573,6 +41754,7 @@ function createGitLane(deps) {
     const dir = session?.workDir ?? session?.cwd;
     if (session === void 0 || session.sealed || dir === void 0 || ending?.terminal !== void 0) {
       lastReconcileAt.delete(sessionUuid2);
+      reconciledHeads.delete(sessionUuid2);
       if (ending !== void 0) await settleEnding(ending, sessionUuid2);
       return void 0;
     }
@@ -41609,7 +41791,7 @@ function createGitLane(deps) {
     priorReconcileAt
   }) {
     const copies = copiesDirOf(preSessionCopies, session);
-    const root = await readGitRoot(execAsync, dir);
+    const root = await readGitRoot(execAsync, dir) ?? await rootOutside(session, dir);
     const cwd = root ?? dir;
     const facts = await gitFactsFor(cwd, force);
     if (session.gitFirstReadAt === void 0 && !holdsBaseline(session))
@@ -41642,15 +41824,56 @@ function createGitLane(deps) {
       // so no reconciliation frame is sealed for it. A frame saying the
       // worktree was clean is a claim, and nobody made the observation
       // behind it.
-      ...due ? await readReconciliation(session, cwd, copies) : {}
-    };
+      ...due ? await readReconciliation(
+        session,
+        cwd,
+        session.baselineCommit,
+        copies
+      ) : {},
+      // Only beside a root with git facts: `applyRead` notes each other
+      // root's context to seal its frame, then notes this root's again, and
+      // without facts there is nothing to note back.
+      others: due && root !== void 0 && facts !== void 0 ? await readOtherRoots(session, root, copies) : []
+    };
+  }
+  async function rootOutside(session, dir) {
+    const last = lastRootOf(session);
+    if (last !== void 0) {
+      const root = await readGitRoot(execAsync, last);
+      if (root !== void 0) return root;
+    }
+    if (session.cwd === void 0 || session.cwd === dir) return void 0;
+    return readGitRoot(execAsync, session.cwd);
+  }
+  async function readOtherRoots(session, current, copies) {
+    const heads = reconciledHeads.get(session.recorder.sessionUuid);
+    const roots = Object.keys(session.baselines ?? {}).filter((root) => root !== current).reverse();
+    const out = [];
+    for (const root of roots) {
+      if (out.length >= MAX_OTHER_ROOTS_PER_READ) break;
+      const head2 = firstLine(
+        await git2(execAsync, root, ["rev-parse", "HEAD"])
+      );
+      if (head2 === void 0 || heads?.get(root) === head2) continue;
+      const facts = await gitFactsFor(root, true);
+      if (facts === void 0) continue;
+      const found = await readReconciliation(
+        session,
+        root,
+        session.baselines?.[root],
+        copies
+      );
+      if (found.reading === void 0) continue;
+      out.push({ root, facts, ...found, reading: found.reading });
+    }
+    return out;
   }
-  async function readReconciliation(session, cwd, copies) {
+  async function readReconciliation(session, cwd, baseline, copies) {
     const reading = await readSessionChanges(
       execAsync,
       cwd,
       {
-        baseline: session.baselineCommit,
+        baseline,
         firstReadAt: session.gitFirstReadAt,
         ownCommits: session.sessionCommits?.[cwd],
         commitFacts: session.sessionCommitFacts?.[cwd],
@@ -41662,12 +41885,7 @@ function createGitLane(deps) {
     const [snapshot, commits] = await Promise.all([
       // Each path's hunk against what its row was counted from,
       // so the patch and the rows describe one change.
-      readWorktreeSnapshot(
-        execAsync,
-        cwd,
-        session.baselineCommit,
-        reading.measured
-      ),
+      readWorktreeSnapshot(execAsync, cwd, baseline, reading.measured),
       // The commits the rule counted, which the frame seals so
       // the control plane can credit each to this run
       // (ADR-297). A read on the old measure counted none.
@@ -41692,6 +41910,7 @@ function createGitLane(deps) {
     reading,
     snapshot,
     commits,
+    others,
     ending
   }) {
     if (session.sealed) return false;
@@ -41703,28 +41922,54 @@ function createGitLane(deps) {
         });
       return false;
     }
-    if (facts !== void 0)
-      session.recorder.noteContext({
-        ...gitContextOf(facts),
-        worktree_path: cwd
-      });
+    const context = facts === void 0 ? void 0 : { ...gitContextOf(facts), worktree_path: cwd };
+    if (context !== void 0) session.recorder.noteContext(context);
     if (reading !== void 0) {
       recordReconciliation(session, reading, snapshot, commits);
-      if (reading.ownCommits.length > 0 || session.sessionCommits?.[cwd] !== void 0)
-        session.sessionCommits = rememberForRoot(
-          session.sessionCommits,
-          cwd,
-          reading.ownCommits
-        );
-      if (reading.commitFacts.merges.length > 0 || Object.keys(reading.commitFacts.tests).length > 0 || session.sessionCommitFacts?.[cwd] !== void 0)
-        session.sessionCommitFacts = rememberForRoot(
-          session.sessionCommitFacts,
-          cwd,
-          reading.commitFacts
-        );
+      rememberReading(session, cwd, reading, facts?.head_sha);
+    }
+    if (context !== void 0 && others.length > 0) {
+      try {
+        for (const other of others) {
+          session.recorder.noteContext({
+            ...gitContextOf(other.facts),
+            worktree_path: other.root
+          });
+          recordReconciliation(
+            session,
+            other.reading,
+            other.snapshot,
+            other.commits
+          );
+          rememberReading(
+            session,
+            other.root,
+            other.reading,
+            other.facts.head_sha
+          );
+        }
+      } finally {
+        session.recorder.noteContext(context);
+      }
     }
     return ending !== void 0 && pendingSessionEnds.get(session.recorder.sessionUuid) === ending;
   }
+  function rememberReading(session, root, reading, head2) {
+    if (head2 !== void 0)
+      noteReconciledHead(session.recorder.sessionUuid, root, head2);
+    if (reading.ownCommits.length > 0 || session.sessionCommits?.[root] !== void 0)
+      session.sessionCommits = rememberForRoot(
+        session.sessionCommits,
+        root,
+        reading.ownCommits
+      );
+    if (reading.commitFacts.merges.length > 0 || Object.keys(reading.commitFacts.tests).length > 0 || session.sessionCommitFacts?.[root] !== void 0)
+      session.sessionCommitFacts = rememberForRoot(
+        session.sessionCommitFacts,
+        root,
+        reading.commitFacts
+      );
+  }
   function recordReconciliation(session, reading, snapshot, commits) {
     const mark = session.recorder.markChain();
     try {
@@ -41747,6 +41992,10 @@ function createGitLane(deps) {
             ...snapshot ? {
               worktree_root: snapshot.root,
               ...snapshot.repository ? { repository_url: snapshot.repository } : {},
+              // Every remote, so ingest can still find the linked
+              // repository when `origin` is a mirror (#5915). A comma
+              // never appears in a URL `safeRepositoryUrl` keeps.
+              ...snapshot.repositories !== void 0 && snapshot.repositories.length > 1 ? { repository_urls: snapshot.repositories.join(",") } : {},
               ...snapshot.baseline ? { diff_base_sha: snapshot.baseline } : {},
               ...snapshot.head ? { diff_head_sha: snapshot.head } : {},
               diff_complete: String(snapshot.complete),
@@ -42255,7 +42504,7 @@ var init_interjection2 = __esm({
 });
 
 // ../../packages/tacho/src/collector/recall-hints.ts
-import { isAbsolute as isAbsolute6, relative as relative4, resolve as resolve10, sep as sep4 } from "node:path";
+import { isAbsolute as isAbsolute6, relative as relative4, resolve as resolve11, sep as sep4 } from "node:path";
 function retryDelay(failures) {
   return Math.min(
     REPOSITORY_RETRY_FIRST_MS * 2 ** (failures - 1),
@@ -42291,7 +42540,7 @@ function noteRecallHints(record, toolName3, toolInput) {
     const value = toolInput?.[key];
     if (typeof value !== "string" || value.length === 0) continue;
     const cwd = record.cwd;
-    const absolute = isAbsolute6(value) ? resolve10(value) : cwd !== void 0 && isAbsolute6(cwd) ? resolve10(cwd, value) : void 0;
+    const absolute = isAbsolute6(value) ? resolve11(value) : cwd !== void 0 && isAbsolute6(cwd) ? resolve11(cwd, value) : void 0;
     if (absolute !== void 0)
       hints.paths = inFront(hints.paths, absolute, RECALL_PATHS_KEPT);
   }
@@ -42405,7 +42654,7 @@ var init_policy_run = __esm({
 
 // ../../packages/tacho/src/collector/hook-handler.ts
 import { homedir as homedir4 } from "node:os";
-import { dirname as dirname17, isAbsolute as isAbsolute7 } from "node:path";
+import { dirname as dirname18, isAbsolute as isAbsolute7 } from "node:path";
 function containmentUnmet(view, record) {
   return view.verified && view.bundle.mode === "enforce" && view.bundle.containment?.required === true && view.launchedContained?.(record.harnessSessionId) !== true;
 }
@@ -43346,7 +43595,7 @@ async function routeHook(raw, env, deps, replay, harness, agent, hookId) {
 }
 function writtenDir(input) {
   const path2 = writtenPath(input);
-  return path2 === void 0 ? void 0 : dirname17(path2);
+  return path2 === void 0 ? void 0 : dirname18(path2);
 }
 function writtenPath(input) {
   if (input.hook_event_name !== "PreToolUse" && input.hook_event_name !== "PostToolUse")
@@ -43488,7 +43737,7 @@ var init_steer_waiters = __esm({
         const session = this.deps.find(key);
         if (session !== void 0 && (session.sealed || session.pendingTerminal === true))
           return Promise.resolve({ done: true });
-        return new Promise((resolve23) => {
+        return new Promise((resolve24) => {
           let settled2 = false;
           const timer = setTimeout(() => waiter.settle({ wait: true }), this.holdMs);
           timer.unref?.();
@@ -43503,7 +43752,7 @@ var init_steer_waiters = __esm({
               clearTimeout(timer);
               signal.removeEventListener("abort", onAbort);
               if (this.waiting.get(key) === waiter) this.waiting.delete(key);
-              resolve23(answer);
+              resolve24(answer);
             }
           };
           if (signal.aborted) {
@@ -43572,7 +43821,7 @@ var init_steer_waiters = __esm({
 });
 
 // ../../packages/tacho/src/collector/hook-id-journal.ts
-import { appendFileSync as appendFileSync3, existsSync as existsSync18, readFileSync as readFileSync16, rmSync as rmSync7 } from "node:fs";
+import { appendFileSync as appendFileSync3, existsSync as existsSync18, readFileSync as readFileSync17, rmSync as rmSync7 } from "node:fs";
 function hookIdJournalEntry(session, key, at2, events) {
   const highest = /* @__PURE__ */ new Map();
   for (const event of events) {
@@ -43599,7 +43848,7 @@ function isEntry(value) {
 function readHookIdJournal(path2) {
   if (!existsSync18(path2)) return [];
   const entries2 = [];
-  for (const line of readFileSync16(path2, "utf8").split("\n")) {
+  for (const line of readFileSync17(path2, "utf8").split("\n")) {
     if (line.trim().length === 0) continue;
     try {
       const value = JSON.parse(line);
@@ -44068,9 +44317,9 @@ var init_inbox = __esm({
 
 // ../../packages/tacho/src/collector/gateway-frame.ts
 function gatewayFrameBody(call2) {
-  const refused = call2.status === "rejected";
+  const refused2 = call2.status === "rejected";
   return {
-    kind: refused ? "policy_decision" : "tool_call",
+    kind: refused2 ? "policy_decision" : "tool_call",
     body: {
       tool_name: call2.toolName,
       tool_source: "mcp",
@@ -44086,7 +44335,7 @@ function gatewayFrameBody(call2) {
         tool_output_digest: call2.outputDigest,
         tool_output_bytes: call2.outputBytes
       },
-      ...refused ? {
+      ...refused2 ? {
         policy_decision: "deny",
         policy_source: "kernel",
         policy_reason_code: "mcp_refused",
@@ -44118,7 +44367,7 @@ function recordOnChain(chain, seal2, record) {
 }
 function onSessionQueue(exclusive, session, apply) {
   if (exclusive !== void 0) return exclusive(session, apply);
-  return new Promise((resolve23) => resolve23(apply()));
+  return new Promise((resolve24) => resolve24(apply()));
 }
 var init_chain_write = __esm({
   "../../packages/tacho/src/collector/chain-write.ts"() {
@@ -44130,7 +44379,7 @@ var init_chain_write = __esm({
 import { randomBytes as randomBytes10, createHash as createHash9 } from "node:crypto";
 import { Readable } from "node:stream";
 import { pipeline } from "node:stream/promises";
-import { resolve as resolve11 } from "node:path";
+import { resolve as resolve12 } from "node:path";
 function logLine(event, fields) {
   const pairs = Object.entries(fields).filter(
     (field) => field[1] !== void 0
@@ -44227,7 +44476,7 @@ function createGithubProxy(deps) {
   }
   function receiptMatches(host, repository, cwd, harness) {
     return cwd !== void 0 && (host.github_repositories ?? []).some(
-      (receipt) => receipt.repository.toLowerCase() === repository.toLowerCase() && resolve11(receipt.cwd) === resolve11(cwd) && receipt.harness === harness
+      (receipt) => receipt.repository.toLowerCase() === repository.toLowerCase() && resolve12(receipt.cwd) === resolve12(cwd) && receipt.harness === harness
     );
   }
   function issue(input) {
@@ -44258,7 +44507,7 @@ function createGithubProxy(deps) {
         }
       };
     const matches = deps.registry.live().filter(
-      (s2) => !s2.pendingTerminal && s2.cwd && resolve11(s2.cwd) === resolve11(input.cwd) && deps.registry.agentOf(s2).harness === input.harness
+      (s2) => !s2.pendingTerminal && s2.cwd && resolve12(s2.cwd) === resolve12(input.cwd) && deps.registry.agentOf(s2).harness === input.harness
     );
     if (matches.length !== 1)
       return {
@@ -44724,7 +44973,7 @@ var init_hook_queues = __esm({
 
 // ../../packages/tacho/src/collector/memory-capture/memory-reader.ts
 import { createRequire as createRequire2 } from "node:module";
-import { isAbsolute as isAbsolute8, join as join33, sep as sep5 } from "node:path";
+import { isAbsolute as isAbsolute8, join as join34, sep as sep5 } from "node:path";
 function claudeCodeLocation(projectsDir, memoryDir) {
   return {
     harness: "claude-code",
@@ -44736,13 +44985,13 @@ function claudeCodeLocation(projectsDir, memoryDir) {
 }
 function claudeCodeMemoryLocations(configDir, projectDirs = []) {
   const locations = [
-    claudeCodeLocation(() => join33(configDir, "projects"), "memory"),
-    claudeCodeLocation(() => join33(configDir, "agent-memory"), "")
+    claudeCodeLocation(() => join34(configDir, "projects"), "memory"),
+    claudeCodeLocation(() => join34(configDir, "agent-memory"), "")
   ];
   for (const dir of projectDirs.slice(0, MEMORY_PROJECT_DIRS_MAX))
     locations.push(
-      claudeCodeLocation(() => join33(dir, ".claude", "agent-memory"), ""),
-      claudeCodeLocation(() => join33(dir, ".claude", "agent-memory-local"), "")
+      claudeCodeLocation(() => join34(dir, ".claude", "agent-memory"), ""),
+      claudeCodeLocation(() => join34(dir, ".claude", "agent-memory-local"), "")
     );
   return locations;
 }
@@ -44927,13 +45176,13 @@ function createMemoryReader(deps) {
       const projects = await list2(top);
       let complete = projects.complete;
       for (const project2 of projects.names) {
-        const dir = location.memoryDir === "" ? join33(top, project2) : join33(top, project2, location.memoryDir);
+        const dir = location.memoryDir === "" ? join34(top, project2) : join34(top, project2, location.memoryDir);
         const files2 = await list2(dir);
         if (!files2.complete) complete = false;
         for (const name of files2.names) {
           if (!name.endsWith(location.extension)) continue;
           if (location.skip.includes(name)) continue;
-          const path2 = join33(dir, name);
+          const path2 = join34(dir, name);
           const file = await readAt2(location.harness, path2);
           if (file.kind === "absent" || file.kind === "empty") continue;
           paths.push(path2);
@@ -45019,8 +45268,8 @@ var init_memory_reader = __esm({
     MEMORY_TYPE_PATTERN = /^[a-z][a-z0-9_-]{0,31}$/;
     MEMORY_PROJECT_DIRS_MAX = 200;
     HARNESS_MEMORY_LOCATIONS = [
-      claudeCodeLocation((home) => join33(home, ".claude", "projects"), "memory"),
-      claudeCodeLocation((home) => join33(home, ".claude", "agent-memory"), "")
+      claudeCodeLocation((home) => join34(home, ".claude", "projects"), "memory"),
+      claudeCodeLocation((home) => join34(home, ".claude", "agent-memory"), "")
     ];
     FRONTMATTER = /^---[ \t]*\r?\n(?:([\s\S]*?)\r?\n)?---[ \t]*(?:\r?\n|$)/;
     FRONTMATTER_LINE = /^([ \t]*)([A-Za-z_][\w-]*)[ \t]*:[ \t]*(.*)$/;
@@ -45462,10 +45711,10 @@ function createMemoryRecall(deps) {
     if (now() < pausedUntil) return [];
     const controller = new AbortController();
     let timer;
-    const timedOut = new Promise((resolve23) => {
+    const timedOut = new Promise((resolve24) => {
       timer = setTimeout(() => {
         controller.abort();
-        resolve23(
+        resolve24(
           failed3(
             `the control plane took longer than ${timeoutMs} ms to answer`
           )
@@ -45512,27 +45761,27 @@ var init_memory_recall = __esm({
 });
 
 // ../../packages/tacho/src/collector/memory-capture/memory-uses.ts
-import { basename as basename6, dirname as dirname18, isAbsolute as isAbsolute9, join as join34, resolve as resolve12 } from "node:path";
+import { basename as basename6, dirname as dirname19, isAbsolute as isAbsolute9, join as join35, resolve as resolve13 } from "node:path";
 function memoryFileOf(path2, locations, home) {
   if (!isAbsolute9(path2)) return void 0;
-  const file = resolve12(path2);
+  const file = resolve13(path2);
   const name = basename6(file);
-  const folder = dirname18(file);
+  const folder = dirname19(file);
   for (const location of locations) {
     if (!name.endsWith(location.extension)) continue;
     if (location.skip.includes(name)) continue;
-    const projectDir = location.memoryDir === "" ? folder : dirname18(folder);
+    const projectDir = location.memoryDir === "" ? folder : dirname19(folder);
     if (location.memoryDir !== "" && basename6(folder) !== location.memoryDir)
       continue;
-    if (dirname18(projectDir) !== resolve12(location.projectsDir(home))) continue;
+    if (dirname19(projectDir) !== resolve13(location.projectsDir(home))) continue;
     return { harness: location.harness, path: file };
   }
   return void 0;
 }
 function pathOf(word, cwd, home) {
-  const expanded = /^(?:~|\$HOME|\$\{HOME\})\//.test(word) ? join34(home, word.slice(word.indexOf("/") + 1)) : word;
+  const expanded = /^(?:~|\$HOME|\$\{HOME\})\//.test(word) ? join35(home, word.slice(word.indexOf("/") + 1)) : word;
   if (isAbsolute9(expanded)) return expanded;
-  if (cwd !== void 0 && isAbsolute9(cwd)) return resolve12(cwd, expanded);
+  if (cwd !== void 0 && isAbsolute9(cwd)) return resolve13(cwd, expanded);
   return void 0;
 }
 function stringMember(input, key) {
@@ -45786,7 +46035,7 @@ ${use.path}`;
 });
 
 // ../../packages/tacho/src/collector/memory-capture/stella-store.ts
-import { dirname as dirname19, isAbsolute as isAbsolute10, join as join35, resolve as resolve13 } from "node:path";
+import { dirname as dirname20, isAbsolute as isAbsolute10, join as join36, resolve as resolve14 } from "node:path";
 function queryStellaStore(path2, afterSeq, limit) {
   const db = new (nodeSqlite()).DatabaseSync(path2, { readOnly: true });
   try {
@@ -45874,11 +46123,11 @@ function stellaRunOf(use, runs, now) {
 }
 async function stellaStoreOf(dir, exists) {
   if (!isAbsolute10(dir)) return void 0;
-  let at2 = resolve13(dir);
+  let at2 = resolve14(dir);
   for (let depth = 0; depth < WORKSPACE_SEARCH_DEPTH; depth += 1) {
-    const candidate = join35(at2, STELLA_CONTEXT_DB);
+    const candidate = join36(at2, STELLA_CONTEXT_DB);
     if (await exists(candidate)) return candidate;
-    const up = dirname19(at2);
+    const up = dirname20(at2);
     if (up === at2) return void 0;
     at2 = up;
   }
@@ -45889,7 +46138,7 @@ var init_stella_store = __esm({
   "../../packages/tacho/src/collector/memory-capture/stella-store.ts"() {
     "use strict";
     init_memory_reader();
-    STELLA_CONTEXT_DB = join35(".stella", "private", "context.db");
+    STELLA_CONTEXT_DB = join36(".stella", "private", "context.db");
     STELLA_MEMORIES_VIEW = "export_memories_v1";
     STELLA_USES_VIEW = "export_memory_uses_v1";
     STELLA_USES_PER_READ = 5e3;
@@ -46551,7 +46800,7 @@ var init_cloud_link = __esm({
 
 // ../../packages/tacho/src/collector/local-servers/digest.ts
 import { createHash as createHash10 } from "node:crypto";
-import { join as join36 } from "node:path";
+import { join as join37 } from "node:path";
 function rememberBounded(map, key, value) {
   if (!map.has(key) && map.size >= MAX_REMEMBERED_DIGESTS) {
     const oldest = map.keys().next();
@@ -46588,7 +46837,7 @@ function npmNameSegment(name) {
   return name.startsWith("@") ? `@${encodeURIComponent(name.slice(1))}` : encodeURIComponent(name);
 }
 async function whichOnPath(command2, pathValue, search) {
-  const candidates = command2.includes("/") || command2.includes("\\") ? [command2] : (pathValue ?? "").split(search.delimiter).filter((dir) => dir.length > 0).map((dir) => join36(dir, command2));
+  const candidates = command2.includes("/") || command2.includes("\\") ? [command2] : (pathValue ?? "").split(search.delimiter).filter((dir) => dir.length > 0).map((dir) => join37(dir, command2));
   for (const candidate of candidates) {
     for (const extension of search.extensions) {
       if (await search.isExecutable(candidate + extension))
@@ -47226,8 +47475,8 @@ async function withSession(options, work) {
     if (failure4 !== void 0) return Promise.reject(failure4);
     const id2 = nextId;
     nextId += 1;
-    return new Promise((resolve23, reject) => {
-      pending.set(id2, { method, resolve: resolve23, reject });
+    return new Promise((resolve24, reject) => {
+      pending.set(id2, { method, resolve: resolve24, reject });
       send5({ id: id2, method, params });
     });
   }
@@ -47371,16 +47620,16 @@ var init_screen = __esm({
 
 // ../../packages/tacho/src/collector/local-servers/local-servers.ts
 function abortableSleep(ms, signal) {
-  return new Promise((resolve23) => {
+  return new Promise((resolve24) => {
     if (signal.aborted) {
-      resolve23();
+      resolve24();
       return;
     }
     const timer = setTimeout(done, ms);
     function done() {
       clearTimeout(timer);
       signal.removeEventListener("abort", done);
-      resolve23();
+      resolve24();
     }
     signal.addEventListener("abort", done, { once: true });
   });
@@ -47412,7 +47661,7 @@ function createLocalServers(options) {
     } catch {
     }
   }
-  function refused(id2, refusal, toolsChanged = false) {
+  function refused2(id2, refusal, toolsChanged = false) {
     options.log(`The local gateway refused ${id2}. ${refusalText(refusal)}`);
     return {
       kind: "refused",
@@ -47446,7 +47695,7 @@ function createLocalServers(options) {
       now: now(),
       skewMs
     });
-    if (!check2.ok) return refused(envelope2.nonce, check2.refusal);
+    if (!check2.ok) return refused2(envelope2.nonce, check2.refusal);
     const launch = await launchFor(delivery.launch, signal);
     const result2 = await callTool(
       {
@@ -47496,8 +47745,8 @@ function createLocalServers(options) {
       return delivery.kind === "call" ? await runCall(delivery, signal, notice) : await runDiscover(delivery, signal);
     } catch (error) {
       if (error instanceof LocalServerError)
-        return refused(id2, error.refusal(), notice.toolsChanged);
-      return refused(
+        return refused2(id2, error.refusal(), notice.toolsChanged);
+      return refused2(
         id2,
         serverFailed(
           delivery.launch.server,
@@ -47708,7 +47957,7 @@ var init_machine = __esm({
 });
 
 // ../../packages/tacho/src/collector/push-basis.ts
-import { resolve as resolve14 } from "node:path";
+import { resolve as resolve15 } from "node:path";
 function gitPushTarget(command2) {
   const tokens = tokenizeSimpleCommand(command2);
   if (tokens === void 0 || tokens[0] !== "git") return void 0;
@@ -47755,7 +48004,7 @@ async function pushCredentialBasis(command2, cwd, deps) {
     return TACHO_CREDENTIAL_HARNESS_HELD;
   const target2 = gitPushTarget(command2);
   if (target2 === void 0) return TACHO_CREDENTIAL_HARNESS_HELD;
-  const dir = target2.chdir.reduce((from, to) => resolve14(from, to), cwd);
+  const dir = target2.chdir.reduce((from, to) => resolve15(from, to), cwd);
   const receipt = receiptFor(receipts, dir);
   if (receipt === void 0) return TACHO_CREDENTIAL_HARNESS_HELD;
   const remote = target2.remote ?? await defaultPushRemote(dir, deps);
@@ -47769,7 +48018,7 @@ function receiptFor(receipts, dir) {
   let found;
   let depth = -1;
   for (const entry2 of receipts) {
-    const root = resolve14(entry2.cwd);
+    const root = resolve15(entry2.cwd);
     if (!isWithin(root, dir) || root.length <= depth) continue;
     found = entry2;
     depth = root.length;
@@ -47786,7 +48035,7 @@ async function containedPushBasis(command2, cwd, repository, deps) {
   const target2 = gitPushTarget(command2);
   if (cwd === void 0 || target2 === void 0)
     return TACHO_CREDENTIAL_HARNESS_HELD;
-  const dir = target2.chdir.reduce((from, to) => resolve14(from, to), cwd);
+  const dir = target2.chdir.reduce((from, to) => resolve15(from, to), cwd);
   if (!isWithin(cwd, dir)) return TACHO_CREDENTIAL_HARNESS_HELD;
   const remote = target2.remote ?? await defaultPushRemote(dir, deps);
   const urls = await pushUrls(dir, remote, deps);
@@ -47794,9 +48043,11 @@ async function containedPushBasis(command2, cwd, repository, deps) {
   return urls.length > 0 && urls.every((url) => githubRepositoryOf(url) === wanted) ? TACHO_CREDENTIAL_GATEWAY_BROKERED : TACHO_CREDENTIAL_HARNESS_HELD;
 }
 async function gitOut(dir, args, deps) {
-  const result2 = await deps.execAsync("git", hardenedGitArgs(dir, args), {
-    env: HARDENED_GIT_ENV
-  });
+  const result2 = await deps.execAsync(
+    "git",
+    hardenedGitArgs(dir, args),
+    hardenedGitExecOptions(dir)
+  );
   return result2.status === 0 ? result2.stdout.trim() : void 0;
 }
 async function defaultPushRemote(dir, deps) {
@@ -47882,9 +48133,9 @@ import {
   writeFile
 } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
-import { dirname as dirname20, join as join37 } from "node:path";
+import { dirname as dirname21, join as join38 } from "node:path";
 function stagingFolder(root, name) {
-  return join37(root, `.${name}${STAGING_SUFFIX}`);
+  return join38(root, `.${name}${STAGING_SUFFIX}`);
 }
 function isStagingName(name) {
   return name.startsWith(".") && name.endsWith(STAGING_SUFFIX);
@@ -47927,17 +48178,17 @@ function envDir(env, key) {
 function skillsRoot(harness, env = process.env, home = homedir5()) {
   switch (harness) {
     case "claude-code":
-      return join37(
-        envDir(env, "CLAUDE_CONFIG_DIR") ?? join37(home, ".claude"),
+      return join38(
+        envDir(env, "CLAUDE_CONFIG_DIR") ?? join38(home, ".claude"),
         "skills"
       );
     case "codex": {
       const codexHome = envDir(env, "CODEX_HOME");
-      return codexHome === null ? join37(home, ".agents", "skills") : join37(codexHome, "skills");
+      return codexHome === null ? join38(home, ".agents", "skills") : join38(codexHome, "skills");
     }
     case "stella":
-      return join37(
-        envDir(env, "STELLA_HOME") ?? join37(home, ".stella"),
+      return join38(
+        envDir(env, "STELLA_HOME") ?? join38(home, ".stella"),
         "skills"
       );
     case "cursor":
@@ -47998,7 +48249,7 @@ async function readMarker(folder) {
   if (!entries2.includes(SESSION_MARKER)) return { state: "foreign" };
   try {
     const parsed2 = JSON.parse(
-      await readFile2(join37(folder, SESSION_MARKER), "utf8")
+      await readFile2(join38(folder, SESSION_MARKER), "utf8")
     );
     return isMarker(parsed2) ? { state: "ours", marker: parsed2 } : { state: "foreign" };
   } catch {
@@ -48015,23 +48266,23 @@ function liveSessions(marker, now) {
   return live;
 }
 async function writeMarker(folder, marker) {
-  const temp = join37(folder, MARKER_TEMP);
+  const temp = join38(folder, MARKER_TEMP);
   await writeFile(temp, `${JSON.stringify(marker, null, 2)}
 `);
-  await rename2(temp, join37(folder, SESSION_MARKER));
+  await rename2(temp, join38(folder, SESSION_MARKER));
 }
 async function writeSkill(root, skill, marker) {
-  const folder = join37(root, skill.name);
+  const folder = join38(root, skill.name);
   const staging = stagingFolder(root, skill.name);
   await rm2(folder, { recursive: true, force: true });
   await rm2(staging, { recursive: true, force: true });
   await mkdir2(staging);
   await writeMarker(staging, { digest: UNFINISHED_DIGEST, sessions: {} });
   await rename2(staging, folder);
-  await writeFile(join37(folder, "SKILL.md"), skillMarkdown(skill));
+  await writeFile(join38(folder, "SKILL.md"), skillMarkdown(skill));
   for (const file of skill.files) {
-    const target2 = join37(folder, file.path);
-    await mkdir2(dirname20(target2), { recursive: true });
+    const target2 = join38(folder, file.path);
+    await mkdir2(dirname21(target2), { recursive: true });
     await writeFile(target2, file.content);
   }
   await writeMarker(folder, marker);
@@ -48059,7 +48310,7 @@ async function placeSkills(root, sessionId, skills, now = /* @__PURE__ */ new Da
       result2.warnings.push(refusal);
       continue;
     }
-    const folder = join37(root, skill.name);
+    const folder = join38(root, skill.name);
     if (taken.has(skill.name)) {
       result2.skipped.push(skill.name);
       result2.warnings.push(
@@ -48124,7 +48375,7 @@ async function removeSkills(root, sessionId, now = /* @__PURE__ */ new Date()) {
     throw error;
   }
   for (const name of names2.sort(compareText)) {
-    const folder = join37(root, name);
+    const folder = join38(root, name);
     if (isStagingName(name)) {
       await rm2(folder, { recursive: true, force: true });
       continue;
@@ -48201,15 +48452,15 @@ function sessionSkills(options) {
   async function inTurn(task) {
     const before = tail;
     let release2 = () => void 0;
-    const mine = new Promise((resolve23) => {
-      release2 = resolve23;
+    const mine = new Promise((resolve24) => {
+      release2 = resolve24;
     });
     tail = before.then(() => mine);
-    const turn = await new Promise((resolve23) => {
-      const timer = setTimeout(() => resolve23(false), waitMs);
+    const turn = await new Promise((resolve24) => {
+      const timer = setTimeout(() => resolve24(false), waitMs);
       void before.then(() => {
         clearTimeout(timer);
-        resolve23(true);
+        resolve24(true);
       });
     });
     try {
@@ -49536,10 +49787,10 @@ async function readableBody(body2, encoding, maxOutputLength) {
   if (decode === void 0) return void 0;
   try {
     return await new Promise(
-      (resolve23, reject) => decode(
+      (resolve24, reject) => decode(
         body2,
         { maxOutputLength },
-        (error, result2) => error === null ? resolve23(result2) : reject(error)
+        (error, result2) => error === null ? resolve24(result2) : reject(error)
       )
     );
   } catch {
@@ -49628,7 +49879,7 @@ function createModelProxy(deps) {
   const observed = /* @__PURE__ */ new Map();
   const priors = new RequestPrefixMemory();
   let callsObserved = 0;
-  let refused = 0;
+  let refused2 = 0;
   retireIdleSockets(httpAgent);
   retireIdleSockets(httpsAgent);
   const upstreamConnectMs = deps.upstreamConnectMs ?? DEFAULT_UPSTREAM_CONNECT_MS;
@@ -49984,7 +50235,7 @@ function createModelProxy(deps) {
     res.end(error.body);
   }
   function readBody3(req, attempt) {
-    return new Promise((resolve23, reject) => {
+    return new Promise((resolve24, reject) => {
       const chunks = [];
       let size = 0;
       let over = false;
@@ -49995,13 +50246,13 @@ function createModelProxy(deps) {
         if (size > maxRequestBytes) {
           over = true;
           chunks.length = 0;
-          resolve23("too_large");
+          resolve24("too_large");
           return;
         }
         chunks.push(chunk2);
       });
       req.on("end", () => {
-        if (!over) resolve23(Buffer.concat(chunks));
+        if (!over) resolve24(Buffer.concat(chunks));
       });
       req.on("error", reject);
       req.on("aborted", () => reject(new Error("client aborted the request")));
@@ -50012,12 +50263,12 @@ function createModelProxy(deps) {
     if (hook === void 0) return request3;
     let timer;
     try {
-      const timeout = new Promise((resolve23) => {
+      const timeout = new Promise((resolve24) => {
         timer = setTimeout(() => {
           deps.log(
             `model proxy: beforeForward took over ${hookTimeoutMs}ms, sending the request as it came`
           );
-          resolve23(request3);
+          resolve24(request3);
         }, hookTimeoutMs);
       });
       return await Promise.race([Promise.resolve(hook(request3)), timeout]);
@@ -50042,7 +50293,7 @@ function createModelProxy(deps) {
     const secure = target2.protocol === "https:";
     const sessionKey = record.recorder.sessionUuid;
     const startedAt = deps.now();
-    return new Promise((resolve23) => {
+    return new Promise((resolve24) => {
       let done = false;
       let answered = false;
       let upstream;
@@ -50063,7 +50314,7 @@ function createModelProxy(deps) {
         if (done) return;
         done = true;
         release2();
-        resolve23(outcome);
+        resolve24(outcome);
       };
       try {
         upstream = (secure ? httpsRequest : httpRequest2)({
@@ -50336,7 +50587,7 @@ function createModelProxy(deps) {
       status: credentialRefusalStatus(credential.refusal.code)
     } : void 0);
     if (refusal !== void 0) {
-      refused += 1;
+      refused2 += 1;
       const view = deps.policy();
       const mark = recorder.markChain();
       try {
@@ -50987,7 +51238,7 @@ function createModelProxy(deps) {
     stats: () => {
       let open6 = 0;
       for (const calls of inFlight.values()) open6 += calls.size;
-      return { callsObserved, refused, inFlight: open6 };
+      return { callsObserved, refused: refused2, inFlight: open6 };
     },
     close: () => {
       clearInterval(keepAliveTimer);
@@ -51103,9 +51354,9 @@ function createModelProxyListener(options) {
     retryTimer.unref();
   }
   function bind() {
-    return new Promise((resolve23) => {
+    return new Promise((resolve24) => {
       if (closed2) {
-        resolve23();
+        resolve24();
         return;
       }
       const next = createServer4((req, res) => options.proxy.handle(req, res));
@@ -51146,7 +51397,7 @@ function createModelProxyListener(options) {
         scheduleRebind();
         if (!settledOnce) {
           settledOnce = true;
-          resolve23();
+          resolve24();
         }
       });
       next.on("close", () => {
@@ -51165,7 +51416,7 @@ function createModelProxyListener(options) {
         options.log(`model proxy listening on 127.0.0.1:${boundPort}`);
         if (!settledOnce) {
           settledOnce = true;
-          resolve23();
+          resolve24();
         }
       });
     });
@@ -51182,8 +51433,8 @@ function createModelProxyListener(options) {
       server = void 0;
       bound = false;
       if (current === void 0) return;
-      await new Promise((resolve23) => {
-        current.close(() => resolve23());
+      await new Promise((resolve24) => {
+        current.close(() => resolve24());
         current.closeAllConnections?.();
       });
     }
@@ -51202,14 +51453,14 @@ var init_model_proxy_listener = __esm({
 import {
   createServer as createServer5
 } from "node:http";
-import { chmodSync as chmodSync9, existsSync as existsSync19, statSync as statSync9, unlinkSync as unlinkSync11 } from "node:fs";
+import { chmodSync as chmodSync9, existsSync as existsSync19, statSync as statSync10, unlinkSync as unlinkSync11 } from "node:fs";
 import { randomBytes as randomBytes11, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
 import { createConnection } from "node:net";
 function isExportFormat(value) {
   return EXPORT_FORMATS.includes(value);
 }
 function readBody(req) {
-  return new Promise((resolve23, reject) => {
+  return new Promise((resolve24, reject) => {
     const chunks = [];
     let size = 0;
     let overflowed = false;
@@ -51224,7 +51475,7 @@ function readBody(req) {
       }
       chunks.push(chunk2);
     });
-    req.on("end", () => resolve23(Buffer.concat(chunks).toString("utf8")));
+    req.on("end", () => resolve24(Buffer.concat(chunks).toString("utf8")));
     req.on("error", reject);
   });
 }
@@ -51567,24 +51818,24 @@ function createRequestHandler(api, log, options = {}) {
 }
 async function removeStaleSocket(socketPath) {
   if (!existsSync19(socketPath)) return;
-  if (!statSync9(socketPath).isSocket()) {
+  if (!statSync10(socketPath).isSocket()) {
     throw new Error(`collector socket path is not a socket: ${socketPath}`);
   }
-  const stale = await new Promise((resolve23, reject) => {
+  const stale = await new Promise((resolve24, reject) => {
     const probe = createConnection(socketPath);
     probe.once("connect", () => {
       probe.destroy();
-      resolve23(false);
+      resolve24(false);
     });
     probe.once("error", (error) => {
       probe.destroy();
       if (error.code === "ECONNREFUSED" || error.code === "ENOENT")
-        resolve23(true);
+        resolve24(true);
       else reject(error);
     });
     probe.setTimeout(500, () => {
       probe.destroy();
-      resolve23(false);
+      resolve24(false);
     });
   });
   if (!stale)
@@ -51613,8 +51864,8 @@ function createCollectorServer(api, log = () => void 0) {
   const close = async () => {
     await Promise.all(
       servers.map(
-        (server) => new Promise((resolve23) => {
-          server.close(() => resolve23());
+        (server) => new Promise((resolve24) => {
+          server.close(() => resolve24());
           server.closeAllConnections?.();
         })
       )
@@ -51629,11 +51880,11 @@ function createCollectorServer(api, log = () => void 0) {
           let boundPort = options.port;
           const tcp = createServer5((req, res) => handle(req, res, boundPort));
           servers.push(tcp);
-          await new Promise((resolve23, reject) => {
+          await new Promise((resolve24, reject) => {
             tcp.once("error", reject);
             tcp.listen(options.port, options.host ?? "127.0.0.1", () => {
               tcp.off("error", reject);
-              resolve23();
+              resolve24();
             });
           });
           const address = tcp.address();
@@ -51644,11 +51895,11 @@ function createCollectorServer(api, log = () => void 0) {
           await removeStaleSocket(options.socketPath);
           const unix = createServer5((req, res) => handle(req, res));
           servers.push(unix);
-          await new Promise((resolve23, reject) => {
+          await new Promise((resolve24, reject) => {
             unix.once("error", reject);
             unix.listen(options.socketPath, () => {
               unix.off("error", reject);
-              resolve23();
+              resolve24();
             });
           });
           chmodSync9(options.socketPath, 384);
@@ -51735,8 +51986,8 @@ var init_server = __esm({
 });
 
 // ../../packages/tacho/src/collector/spool.ts
-import { existsSync as existsSync20, readFileSync as readFileSync17 } from "node:fs";
-import { join as join38 } from "node:path";
+import { existsSync as existsSync20, readFileSync as readFileSync18 } from "node:fs";
+import { join as join39 } from "node:path";
 function sessionOwnedElsewhere(error) {
   return error.status === 403 && error.body.includes(SESSION_OWNED_ELSEWHERE);
 }
@@ -51930,7 +52181,7 @@ var init_spool = __esm({
        * gone for good.
        */
       stash(event, reason3, body2) {
-        const path2 = join38(
+        const path2 = join39(
           this.options.quarantineDir,
           `${event.session_uuid}-${String(event.seq).padStart(8, "0")}.json`
         );
@@ -51948,12 +52199,12 @@ var init_spool = __esm({
       }
       /** Add a body to a quarantine record that was written without one. */
       stashBodyBeside(event, body2) {
-        const path2 = join38(
+        const path2 = join39(
           this.options.quarantineDir,
           `${event.session_uuid}-${String(event.seq).padStart(8, "0")}.json`
         );
         try {
-          const record = JSON.parse(readFileSync17(path2, "utf8"));
+          const record = JSON.parse(readFileSync18(path2, "utf8"));
           if (record["body"] !== void 0) return;
           writeSensitiveFileAtomic(
             path2,
@@ -52144,25 +52395,25 @@ var init_spool = __esm({
        * so a session found in one half is not sent again in the other.
        */
       async shipBatch(batch, bodies) {
-        const refused = batch.filter(
+        const refused2 = batch.filter(
           (e) => this.foreignSessions.has(e.session_uuid)
         );
-        if (refused.length === 0) return this.sendBatch(batch, bodies);
-        for (const event of refused)
+        if (refused2.length === 0) return this.sendBatch(batch, bodies);
+        for (const event of refused2)
           this.stash(event, `control plane holds session under another host`);
-        this.markShipped(refused);
+        this.markShipped(refused2);
         this.options.log(
-          `quarantined ${refused.length} event(s) from session(s) the control plane holds under another host`
+          `quarantined ${refused2.length} event(s) from session(s) the control plane holds under another host`
         );
         const rest = batch.filter((e) => !this.foreignSessions.has(e.session_uuid));
         if (rest.length === 0)
           return {
             shipped: 0,
-            quarantined: refused.length,
+            quarantined: refused2.length,
             reachable: this.reachable
           };
         const result2 = await this.sendBatch(rest, bodies);
-        return { ...result2, quarantined: result2.quarantined + refused.length };
+        return { ...result2, quarantined: result2.quarantined + refused2.length };
       }
       /** Halve a refused batch and ship each half, stopping at the first that stalls. */
       async bisect(batch, bodies) {
@@ -52478,15 +52729,15 @@ var init_session_heads = __esm({
 import {
   existsSync as existsSync21,
   readdirSync as readdirSync12,
-  readFileSync as readFileSync18,
+  readFileSync as readFileSync19,
   renameSync as renameSync4,
-  statSync as statSync10,
+  statSync as statSync11,
   unlinkSync as unlinkSync12
 } from "node:fs";
 import { readdir as readdir3, readFile as readFile3, stat as stat2 } from "node:fs/promises";
 import { homedir as homedir7, hostname as osHostname2 } from "node:os";
-import { dirname as dirname21, join as join39 } from "node:path";
-import { execFile as execFile4, spawnSync as spawnSync6 } from "node:child_process";
+import { dirname as dirname22, join as join40 } from "node:path";
+import { spawnSync as spawnSync6 } from "node:child_process";
 function cloudGatewayUpstreams(origin = CLOUD_GATEWAY_ORIGIN) {
   const base2 = new URL(origin).origin;
   const openai = `${base2}${CLOUD_GATEWAY_BASE_PATH}/openai/v1`;
@@ -52541,28 +52792,6 @@ function defaultExec(command2, args) {
     stderr: result2.stderr ?? ""
   };
 }
-function defaultExecAsync(command2, args, options) {
-  return new Promise((resolve23) => {
-    execFile4(
-      command2,
-      args,
-      {
-        encoding: "utf8",
-        maxBuffer: 4 * 1024 * 1024,
-        timeout: 1e4,
-        ...options?.env !== void 0 ? { env: { ...process.env, ...options.env } } : {}
-      },
-      (error, stdout, stderr) => {
-        const code = error?.code;
-        resolve23({
-          status: error === null ? 0 : typeof code === "number" ? code : 1,
-          stdout: stdout ?? "",
-          stderr: stderr ?? ""
-        });
-      }
-    );
-  });
-}
 function defaultKill(pid, signal) {
   try {
     process.kill(pid, signal);
@@ -52573,28 +52802,28 @@ function defaultKill(pid, signal) {
 }
 function settleWithin(work, ms) {
   if (work === void 0) return Promise.resolve(true);
-  return new Promise((resolve23) => {
-    const timer = setTimeout(() => resolve23(false), ms);
+  return new Promise((resolve24) => {
+    const timer = setTimeout(() => resolve24(false), ms);
     timer.unref();
     const done = () => {
       clearTimeout(timer);
-      resolve23(true);
+      resolve24(true);
     };
     work.then(done, done);
   });
 }
 function valueWithin(work, ms) {
-  return new Promise((resolve23) => {
-    const timer = setTimeout(() => resolve23(void 0), ms);
+  return new Promise((resolve24) => {
+    const timer = setTimeout(() => resolve24(void 0), ms);
     timer.unref();
     work.then(
       (value) => {
         clearTimeout(timer);
-        resolve23(value);
+        resolve24(value);
       },
       () => {
         clearTimeout(timer);
-        resolve23(void 0);
+        resolve24(void 0);
       }
     );
   });
@@ -52603,15 +52832,15 @@ function olderBundle(candidate, held) {
   return candidate.version < held.version && !(Date.parse(candidate.issued_at) > Date.parse(held.issued_at));
 }
 function abortableSleep2(ms, signal) {
-  return new Promise((resolve23) => {
+  return new Promise((resolve24) => {
     if (signal.aborted) {
-      resolve23();
+      resolve24();
       return;
     }
     const wake = () => {
       clearTimeout(timer);
       signal.removeEventListener("abort", wake);
-      resolve23();
+      resolve24();
     };
     const timer = setTimeout(wake, ms);
     timer.unref();
@@ -52732,7 +52961,7 @@ async function initializeDaemon(options, server, port, ready) {
   }) : void 0;
   const memoryHome = options.home ?? homedir7();
   const memoryLocations = () => claudeCodeMemoryLocations(
-    dirname21(paths.claudeProjects),
+    dirname22(paths.claudeProjects),
     projectDirsOf(registry2.list())
   );
   const memoryUses = options.listen ?? true ? createMemoryUses({
@@ -52843,7 +53072,7 @@ async function initializeDaemon(options, server, port, ready) {
     processStarts: hookProcessStarts,
     adoptedChain: (sessionUuid2) => backfillLedger.chainHead(sessionUuid2)
   });
-  const priorStateWrittenAt = existsSync21(paths.daemonState) ? statSync10(paths.daemonState).mtimeMs : void 0;
+  const priorStateWrittenAt = existsSync21(paths.daemonState) ? statSync11(paths.daemonState).mtimeMs : void 0;
   const sealedState = parseSealedState(
     readJsonStateFile(
       paths.daemonSealedState,
@@ -52938,13 +53167,13 @@ async function initializeDaemon(options, server, port, ready) {
   const stopping = new AbortController();
   const hookExecAsync = (command2, args, execOptions) => {
     if (stopping.signal.aborted) return Promise.resolve(STOPPED_EXEC);
-    return new Promise((resolve23, reject) => {
-      const abandon = () => resolve23(STOPPED_EXEC);
+    return new Promise((resolve24, reject) => {
+      const abandon = () => resolve24(STOPPED_EXEC);
       stopping.signal.addEventListener("abort", abandon, { once: true });
       execAsync(command2, args, execOptions).then(
         (result2) => {
           stopping.signal.removeEventListener("abort", abandon);
-          resolve23(result2);
+          resolve24(result2);
         },
         (error) => {
           stopping.signal.removeEventListener("abort", abandon);
@@ -53229,7 +53458,7 @@ async function initializeDaemon(options, server, port, ready) {
       controlReachable: lastControlAt !== void 0 && now() - lastControlAt < 2 * timers.bundleRefreshMs
     };
   }
-  const bodyPurgeOwedPath = join39(paths.wal, "body-purge-owed");
+  const bodyPurgeOwedPath = join40(paths.wal, "body-purge-owed");
   function markBodyPurgeOwed(retention, dropped) {
     try {
       ensureDir(paths.wal);
@@ -53251,7 +53480,7 @@ async function initializeDaemon(options, server, port, ready) {
     if (!existsSync21(bodyPurgeOwedPath)) return void 0;
     let text5;
     try {
-      text5 = readFileSync18(bodyPurgeOwedPath, "utf8");
+      text5 = readFileSync19(bodyPurgeOwedPath, "utf8");
     } catch (error) {
       log(
         `cannot read the owed body purge at ${bodyPurgeOwedPath}: ${error instanceof Error ? error.message : String(error)}; the retry sweeps against the clause in force. Check the file's permissions`
@@ -54004,7 +54233,7 @@ async function initializeDaemon(options, server, port, ready) {
   async function readSpoolFile(name) {
     try {
       const file = parseSpoolFile(
-        await readFile3(join39(paths.spool, name), "utf8")
+        await readFile3(join40(paths.spool, name), "utf8")
       );
       spoolFacts.set(name, spoolFactsOf(file));
       return file;
@@ -54027,7 +54256,9 @@ async function initializeDaemon(options, server, port, ready) {
     }
     return false;
   }
-  async function recordHookOutcome(envelope2, pendingUuid, harnessSessionId = hookInputSchema.parse(envelope2.payload).session_id) {
+  async function recordHookOutcome(envelope2, pendingUuid, harnessSessionId = hookInputSchema.parse(
+    envelope2.payload
+  ).session_id) {
     const pending = pendingUuid === void 0 ? void 0 : pendingSessionEnds.get(pendingUuid);
     if (pendingUuid !== void 0 && pending?.terminal !== void 0) {
       try {
@@ -54174,7 +54405,7 @@ async function initializeDaemon(options, server, port, ready) {
   function setAsideConflictingTerminal(uuid, pending, conflict) {
     const name = `${uuid}-terminal-conflict-${String(conflict.seq).padStart(8, "0")}.json`;
     writeSensitiveFileAtomic(
-      join39(paths.quarantine, name),
+      join40(paths.quarantine, name),
       JSON.stringify(
         {
           reason: conflict.message,
@@ -54254,8 +54485,8 @@ async function initializeDaemon(options, server, port, ready) {
   function moveToFailedSpool(path2, name, reason3) {
     log(`spool file ${name} moved to spool/failed/: ${reason3}`);
     try {
-      ensureDir(join39(paths.spool, "failed"));
-      renameSync4(path2, join39(paths.spool, "failed", name));
+      ensureDir(join40(paths.spool, "failed"));
+      renameSync4(path2, join40(paths.spool, "failed", name));
     } catch (error) {
       log(
         `spool file ${name} could not be moved to spool/failed/: ${error instanceof Error ? error.message : String(error)}`
@@ -54308,7 +54539,7 @@ async function initializeDaemon(options, server, port, ready) {
         continue;
       }
       reads += 1;
-      const path2 = join39(paths.spool, name);
+      const path2 = join40(paths.spool, name);
       let file;
       try {
         file = await readSpoolFile(name);
@@ -54593,7 +54824,7 @@ async function initializeDaemon(options, server, port, ready) {
       const state = await readModelBaseUrlState({
         home: options.home ?? homedir7(),
         port: modelProxyPortFor(host),
-        stellaHome: dirname21(options.paths.stellaToml),
+        stellaHome: dirname22(options.paths.stellaToml),
         harnesses: ["claude-code", "codex", "stella"]
       });
       const next = {};
@@ -55123,9 +55354,9 @@ async function initializeDaemon(options, server, port, ready) {
     let removed = 0;
     for (const name of readdirSync12(paths.quarantine)) {
       if (!name.endsWith(".json")) continue;
-      const file = join39(paths.quarantine, name);
+      const file = join40(paths.quarantine, name);
       try {
-        if (at2 - statSync10(file).mtimeMs < retainMs) continue;
+        if (at2 - statSync11(file).mtimeMs < retainMs) continue;
         unlinkSync12(file);
         removed += 1;
       } catch {
@@ -55445,7 +55676,7 @@ async function initializeDaemon(options, server, port, ready) {
   let memoryScan;
   if (options.listen ?? true) {
     const codexMemories = createCodexMemoryStore({
-      path: join39(dirname21(paths.codexHooks), CODEX_MEMORY_STORE_FILE),
+      path: join40(dirname22(paths.codexHooks), CODEX_MEMORY_STORE_FILE),
       stat: (path2) => stat2(path2),
       log
     });
@@ -55589,7 +55820,7 @@ async function initializeDaemon(options, server, port, ready) {
     }
   };
 }
-var DEFAULT_TIMERS, STATIC_TOKEN_RENEWAL_CHECK_MS, MEMORY_SCAN_MS, CLOUD_GATEWAY_ORIGIN, CLOUD_GATEWAY_BASE_PATH, QUEUED_PROMPT_CLASS, RECORDER_EVENTS_KEPT, owedBodyPurgeSchema, objectSchema, spoolFileSchema, otlpResourceListSchema, otlpPayloadSchema, STOPPING, STOPPED_EXEC, STATE_WRITE_DEFER_MS;
+var DEFAULT_TIMERS, STATIC_TOKEN_RENEWAL_CHECK_MS, MEMORY_SCAN_MS, CLOUD_GATEWAY_ORIGIN, CLOUD_GATEWAY_BASE_PATH, QUEUED_PROMPT_CLASS, RECORDER_EVENTS_KEPT, owedBodyPurgeSchema, objectSchema, spoolFileSchema, otlpResourceListSchema, otlpPayloadSchema, defaultExecAsync, STOPPING, STOPPED_EXEC, STATE_WRITE_DEFER_MS;
 var init_daemon = __esm({
   "../../packages/tacho/src/collector/daemon.ts"() {
     "use strict";
@@ -55625,6 +55856,7 @@ var init_daemon = __esm({
     init_detector();
     init_git_facts();
     init_git_lane();
+    init_hardened_git();
     init_session_changes();
     init_exporters();
     init_hook_handler();
@@ -55716,6 +55948,7 @@ var init_daemon = __esm({
       resourceSpans: otlpResourceListSchema,
       resourceMetrics: otlpResourceListSchema
     }).passthrough();
+    defaultExecAsync = createGitExecAsync();
     STOPPING = "tachod is stopping; tacho-hook spools this hook for the next start";
     STOPPED_EXEC = {
       status: null,
@@ -55727,7 +55960,7 @@ var init_daemon = __esm({
 });
 
 // ../../packages/tacho/src/collector/run.ts
-import { readFileSync as readFileSync19, unlinkSync as unlinkSync13 } from "node:fs";
+import { readFileSync as readFileSync20, unlinkSync as unlinkSync13 } from "node:fs";
 function stopWithin(stop, graceMs, exit, log) {
   const timer = setTimeout(() => {
     log(`tachod: stop did not finish within ${graceMs} ms, exiting
@@ -55795,14 +56028,14 @@ function ownProcStart() {
 }
 function readPidFile(path2) {
   try {
-    return readFileSync19(path2, "utf8");
+    return readFileSync20(path2, "utf8");
   } catch {
     return void 0;
   }
 }
 function releaseDaemonPid(path2, previous) {
   try {
-    if (parseDaemonPid(readFileSync19(path2, "utf8"))?.pid !== process.pid) return;
+    if (parseDaemonPid(readFileSync20(path2, "utf8"))?.pid !== process.pid) return;
     if (previous === void 0) unlinkSync13(path2);
     else writeSensitiveFileAtomic(path2, previous, 420);
   } catch {
@@ -55944,27 +56177,27 @@ import {
   closeSync as closeSync7,
   constants as constants4,
   fstatSync as fstatSync2,
-  lstatSync as lstatSync7,
+  lstatSync as lstatSync8,
   mkdirSync as mkdirSync6,
   openSync as openSync7,
   readSync as readSync4,
   realpathSync as realpathSync5,
   writeFileSync as writeFileSync4
 } from "node:fs";
-import { dirname as dirname22, join as join40, resolve as resolve15 } from "node:path";
+import { dirname as dirname23, join as join41, resolve as resolve16 } from "node:path";
 function bundlePath(root, relative11, create2 = false) {
-  const absolute = resolve15(root);
+  const absolute = resolve16(root);
   if (create2) mkdirSync6(absolute, { recursive: true, mode: 448 });
-  if (lstatSync7(absolute).isSymbolicLink() || !lstatSync7(absolute).isDirectory()) {
+  if (lstatSync8(absolute).isSymbolicLink() || !lstatSync8(absolute).isDirectory()) {
     arpFail(`The bundle root ${absolute} must be a directory, not a symlink.`);
   }
   const base2 = realpathSync5(absolute);
   let current = base2;
   const parts = relative11.split("/");
   for (let i2 = 0; i2 < parts.length; i2++) {
-    current = join40(current, parts[i2]);
+    current = join41(current, parts[i2]);
     try {
-      const stat7 = lstatSync7(current);
+      const stat7 = lstatSync8(current);
       if (stat7.isSymbolicLink() || i2 < parts.length - 1 && !stat7.isDirectory()) {
         arpFail(
           `The bundle path ${relative11} passes through a symlink or a file where a directory belongs.`
@@ -55976,7 +56209,7 @@ function bundlePath(root, relative11, create2 = false) {
       else if (i2 < parts.length - 1) throw error;
     }
   }
-  if (realpathSync5(dirname22(current)) !== dirname22(current)) {
+  if (realpathSync5(dirname23(current)) !== dirname23(current)) {
     arpFail(`The bundle directory changed while ${relative11} was read.`);
   }
   return current;
@@ -56915,7 +57148,7 @@ import {
   closeSync as closeSync8,
   constants as constants5,
   fstatSync as fstatSync3,
-  lstatSync as lstatSync8,
+  lstatSync as lstatSync9,
   mkdirSync as mkdirSync7,
   openSync as openSync8,
   readSync as readSync5,
@@ -56923,7 +57156,7 @@ import {
   rmSync as rmSync8,
   writeFileSync as writeFileSync5
 } from "node:fs";
-import { dirname as dirname23, isAbsolute as isAbsolute11, join as join41, relative as relative5, resolve as resolve16, sep as sep6 } from "node:path";
+import { dirname as dirname24, isAbsolute as isAbsolute11, join as join42, relative as relative5, resolve as resolve17, sep as sep6 } from "node:path";
 function outsideProfile(path2) {
   return HARNESS_CONFIG_PATH.test(path2) || CREDENTIAL_PATH.test(path2);
 }
@@ -56978,10 +57211,10 @@ function within2(root, path2) {
   return rel === "" || !isAbsolute11(rel) && rel !== ".." && !rel.startsWith(`..${sep6}`);
 }
 function newPath(path2) {
-  const full = resolve16(path2);
-  return join41(
-    realpathSync6(dirname23(full)),
-    full.slice(dirname23(full).length + 1)
+  const full = resolve17(path2);
+  return join42(
+    realpathSync6(dirname24(full)),
+    full.slice(dirname24(full).length + 1)
   );
 }
 function sourcePath(root, path2) {
@@ -56993,8 +57226,8 @@ function sourcePath(root, path2) {
   }
   let current = root;
   for (const part2 of path2.split("/")) {
-    current = join41(current, part2);
-    if (lstatSync8(current).isSymbolicLink())
+    current = join42(current, part2);
+    if (lstatSync9(current).isSymbolicLink())
       arpFail(
         `${path2} is a symlink or passes through one. Symlinks require a resource adapter.`
       );
@@ -57047,7 +57280,7 @@ function captureCheckpoint(options) {
       "Pass --attest-boundary to attest that the stopped workspace matches the brief's evidence boundary."
     );
   const root = realpathSync6(options.workspace);
-  if (!lstatSync8(root).isDirectory())
+  if (!lstatSync9(root).isDirectory())
     arpFail(`The workspace ${root} is not a directory.`);
   const out = newPath(options.out);
   if (within2(root, out))
@@ -57260,23 +57493,23 @@ function prepareCheckpoint(options) {
   });
   mkdirSync7(destination, { mode: 448 });
   try {
-    const restored = join41(destination, "workspace");
+    const restored = join42(destination, "workspace");
     mkdirSync7(restored, { mode: 448 });
     for (const item of restore) {
-      const path2 = join41(restored, item.path);
+      const path2 = join42(restored, item.path);
       if (item.kind === "directory")
         mkdirSync7(path2, { recursive: true, mode: 448 });
       else {
-        mkdirSync7(dirname23(path2), { recursive: true, mode: 448 });
+        mkdirSync7(dirname24(path2), { recursive: true, mode: 448 });
         writeFileSync5(path2, item.bytes, {
           flag: "wx",
           mode: item.executable ? 448 : 384
         });
       }
     }
-    const promptDir = join41(restored, ".arp");
+    const promptDir = join42(restored, ".arp");
     mkdirSync7(promptDir, { mode: 448 });
-    const promptFile = join41(promptDir, "handoff.json");
+    const promptFile = join42(promptDir, "handoff.json");
     const prompt = {
       checkpoint_digest: checkpointDigest,
       task: task.data.request,
@@ -57293,7 +57526,7 @@ function prepareCheckpoint(options) {
       flag: "wx",
       mode: 384
     });
-    const reportPath = join41(destination, "report.json");
+    const reportPath = join42(destination, "report.json");
     writeFileSync5(
       reportPath,
       jcs(
@@ -57478,7 +57711,7 @@ __export(main_exports, {
   recordedCliDeps: () => recordedCliDeps,
   tokenOption: () => tokenOption
 });
-import { readFileSync as readFileSync20 } from "node:fs";
+import { readFileSync as readFileSync21 } from "node:fs";
 function parsePort(value) {
   const port = Number(value);
   if (!/^\d+$/.test(value) || port < 1024 || port > 65535)
@@ -57515,7 +57748,7 @@ function parseOneHarness(value) {
     throw new InvalidArgumentError("name one harness");
   return harness;
 }
-function tokenOption(opts, err2, readStdin3 = () => readFileSync20(0, "utf8")) {
+function tokenOption(opts, err2, readStdin3 = () => readFileSync21(0, "utf8")) {
   const flag2 = opts.token;
   if (opts.tokenStdin !== true) {
     if (flag2 !== void 0)
@@ -57934,7 +58167,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@oxagen/cli",
-      version: "2.1.4-926",
+      version: "2.1.4-942",
       description: "Oxagen governance CLI \u2014 spend, lineage, grounding, credentials, and audit (agentic coding lives in the stella CLI)",
       type: "module",
       main: "./dist/index.js",
@@ -58001,10 +58234,10 @@ var init_package = __esm({
 
 // src/lib/atomic-write.ts
 import { writeFileSync as writeFileSync6, renameSync as renameSync5, unlinkSync as unlinkSync14, existsSync as existsSync22 } from "node:fs";
-import { dirname as dirname24, join as join42 } from "node:path";
+import { dirname as dirname25, join as join43 } from "node:path";
 function atomicWriteFileSync(path2, data, mode) {
-  const dir = dirname24(path2);
-  const tmp = join42(
+  const dir = dirname25(path2);
+  const tmp = join43(
     dir,
     `.${process.pid}.${Date.now()}.${Math.random().toString(36).slice(2)}.tmp`
   );
@@ -58029,8 +58262,8 @@ var init_atomic_write = __esm({
 
 // src/lib/config.ts
 import { homedir as homedir8 } from "os";
-import { join as join43 } from "path";
-import { readFileSync as readFileSync21, mkdirSync as mkdirSync8, existsSync as existsSync23, statSync as statSync11 } from "fs";
+import { join as join44 } from "path";
+import { readFileSync as readFileSync22, mkdirSync as mkdirSync8, existsSync as existsSync23, statSync as statSync12 } from "fs";
 function getConfigDir() {
   return CONFIG_DIR;
 }
@@ -58060,7 +58293,7 @@ function parseConfig(raw) {
 function readConfig() {
   let identity;
   try {
-    const info = statSync11(CONFIG_FILE);
+    const info = statSync12(CONFIG_FILE);
     identity = `${info.ino}:${info.size}:${info.mtimeMs}`;
   } catch {
     cached2 = void 0;
@@ -58068,7 +58301,7 @@ function readConfig() {
   }
   if (cached2?.identity === identity) return structuredClone(cached2.config);
   try {
-    const config = parseConfig(JSON.parse(readFileSync21(CONFIG_FILE, "utf8")));
+    const config = parseConfig(JSON.parse(readFileSync22(CONFIG_FILE, "utf8")));
     cached2 = { identity, config };
     return structuredClone(config);
   } catch (err2) {
@@ -58116,8 +58349,8 @@ var CONFIG_DIR, CONFIG_FILE, STRING_FIELDS, TELEMETRY_FIELDS, cached2;
 var init_config = __esm({
   "src/lib/config.ts"() {
     init_atomic_write();
-    CONFIG_DIR = join43(homedir8(), ".config", "oxagen");
-    CONFIG_FILE = join43(CONFIG_DIR, "config.json");
+    CONFIG_DIR = join44(homedir8(), ".config", "oxagen");
+    CONFIG_FILE = join44(CONFIG_DIR, "config.json");
     STRING_FIELDS = [
       "token",
       "orgSlug",
@@ -58162,16 +58395,16 @@ import {
   writeFile as writeFile2
 } from "node:fs/promises";
 import { homedir as homedir9 } from "node:os";
-import { join as join44 } from "node:path";
+import { join as join45 } from "node:path";
 function isDebugEnabled() {
   const v = process.env[DEBUG_ENV];
   return v === "1" || v === "true";
 }
 function logsDir() {
-  return join44(homedir9(), ".oxagen", "logs");
+  return join45(homedir9(), ".oxagen", "logs");
 }
 function debugLogFile() {
-  return join44(logsDir(), "cli.output");
+  return join45(logsDir(), "cli.output");
 }
 function sanitize(value, depth = 0) {
   if (value === null || value === void 0) return value;
@@ -61420,7 +61653,7 @@ var init_git = __esm({
       signal;
     };
     ABSENT_STDERR = /not a valid object name|invalid object name|bad object|unknown revision|no such (?:object|ref)|could not get object info|does not exist in '|exists on disk, but not in '|not a git repository/i;
-    execGit = (args, { cwd, timeoutMs }) => new Promise((resolve23, reject) => {
+    execGit = (args, { cwd, timeoutMs }) => new Promise((resolve24, reject) => {
       execFile5(
         "git",
         [...args],
@@ -61449,7 +61682,7 @@ var init_git = __esm({
             );
             return;
           }
-          resolve23(stdout);
+          resolve24(stdout);
         }
       );
     });
@@ -61466,9 +61699,9 @@ var init_git = __esm({
 
 // ../../packages/steering-freshness/src/cache.ts
 import { mkdir as mkdir4, readFile as readFile6, writeFile as writeFile4 } from "node:fs/promises";
-import { dirname as dirname25, join as join45 } from "node:path";
+import { dirname as dirname26, join as join46 } from "node:path";
 function stampPath(gitCommonDir) {
-  return join45(gitCommonDir, "oxagen", "steering-freshness.json");
+  return join46(gitCommonDir, "oxagen", "steering-freshness.json");
 }
 async function readFetchStamp(gitCommonDir, io = defaultIo) {
   try {
@@ -61489,7 +61722,7 @@ async function readFetchStamp(gitCommonDir, io = defaultIo) {
 async function writeFetchStamp(gitCommonDir, stamp, io = defaultIo) {
   const path2 = stampPath(gitCommonDir);
   try {
-    await io.mkdirp(dirname25(path2));
+    await io.mkdirp(dirname26(path2));
     await io.write(path2, `${JSON.stringify(stamp)}
 `, "utf8");
   } catch {
@@ -61520,24 +61753,24 @@ var init_cache = __esm({
 // ../../packages/steering-freshness/src/hooks.ts
 import { mkdir as mkdir5, readFile as readFile7, writeFile as writeFile5 } from "node:fs/promises";
 import { homedir as homedir10 } from "node:os";
-import { dirname as dirname26, join as join46 } from "node:path";
+import { dirname as dirname27, join as join47 } from "node:path";
 function hookCommand(harness) {
   return `oxagen steering gate --harness ${harness}`;
 }
 function hookConfigPath(projectRoot, harness, env = process.env, home = homedir10()) {
   switch (harness) {
     case "claude-code":
-      return join46(projectRoot, ".claude", "settings.json");
+      return join47(projectRoot, ".claude", "settings.json");
     case "codex":
-      return join46(env["CODEX_HOME"] ?? join46(home, ".codex"), "hooks.json");
+      return join47(env["CODEX_HOME"] ?? join47(home, ".codex"), "hooks.json");
     case "cursor":
-      return join46(home, ".cursor", "hooks.json");
+      return join47(home, ".cursor", "hooks.json");
     case "stella":
-      return join46(env["STELLA_HOME"] ?? join46(home, ".stella"), "stella.toml");
+      return join47(env["STELLA_HOME"] ?? join47(home, ".stella"), "stella.toml");
   }
 }
 function stellaJsonPath(env, home) {
-  return join46(env["STELLA_HOME"] ?? join46(home, ".stella"), "settings.json");
+  return join47(env["STELLA_HOME"] ?? join47(home, ".stella"), "settings.json");
 }
 function isRecord7(v) {
   return v !== null && typeof v === "object" && !Array.isArray(v);
@@ -61624,7 +61857,7 @@ async function installJsonGroupHook(path2, harness, entry2, io) {
     };
   }
   const had = hasGroupHook(loaded.config);
-  await io.mkdirp(dirname26(path2));
+  await io.mkdirp(dirname27(path2));
   await io.write(
     path2,
     `${JSON.stringify(withGroupHook(loaded.config, entry2), null, 2)}
@@ -61726,7 +61959,7 @@ async function installCursorHook(path2, io) {
   ];
   const next = { ...config, hooks };
   if (next.version === void 0) next.version = 1;
-  await io.mkdirp(dirname26(path2));
+  await io.mkdirp(dirname27(path2));
   await io.write(path2, `${JSON.stringify(next, null, 2)}
 `, "utf8");
   return {
@@ -61909,7 +62142,7 @@ async function installStellaHook(projectRoot, io, env, home) {
   }
   const separator = base2.length === 0 ? "" : eol;
   const next = `${base2}${separator}${renderStellaBlock(eol)}`;
-  await io.mkdirp(dirname26(path2));
+  await io.mkdirp(dirname27(path2));
   await io.write(path2, next, "utf8");
   return {
     harness: "stella",
@@ -62085,7 +62318,7 @@ function resolveSteeringPolicy(layers, emergency = {
     refusedExcludes: []
   };
   const excluded2 = new Set(ALWAYS_EXCLUDED);
-  const refused = /* @__PURE__ */ new Set();
+  const refused2 = /* @__PURE__ */ new Set();
   const ordered = [...layers].sort(
     (a, b3) => POLICY_SCOPES.indexOf(a.scope) - POLICY_SCOPES.indexOf(b3.scope)
   );
@@ -62105,13 +62338,13 @@ function resolveSteeringPolicy(layers, emergency = {
     }
     for (const path2 of policy.exclude ?? []) {
       if (!REVIEWED_EXCLUDE_SCOPES.has(scope)) {
-        refused.add(path2);
+        refused2.add(path2);
         continue;
       }
       excluded2.add(path2);
     }
   }
-  for (const path2 of refused)
+  for (const path2 of refused2)
     if (!excluded2.has(path2)) out.refusedExcludes.push(path2);
   out.refusedExcludes.sort();
   out.exclude = [...excluded2].sort();
@@ -62197,7 +62430,7 @@ var init_policy = __esm({
 // ../../packages/steering-freshness/src/settings.ts
 import { readFile as readFile8 } from "node:fs/promises";
 import { homedir as homedir11 } from "node:os";
-import { join as join47 } from "node:path";
+import { join as join48 } from "node:path";
 async function readLayer(scope, path2, read2) {
   let text5;
   try {
@@ -62249,14 +62482,14 @@ function parseLayer(scope, path2, text5) {
 }
 async function loadSteeringSettings({
   projectRoot,
-  userSettingsPath = join47(homedir11(), USER_SETTINGS_RELATIVE),
+  userSettingsPath = join48(homedir11(), USER_SETTINGS_RELATIVE),
   read: read2 = readFile8,
   workspacePolicy = null
 }) {
   const targets = [
     ["user", userSettingsPath],
-    ["project", join47(projectRoot, PROJECT_DIR_NAME, PROJECT_SETTINGS_FILE)],
-    ["local", join47(projectRoot, PROJECT_DIR_NAME, LOCAL_SETTINGS_FILE)]
+    ["project", join48(projectRoot, PROJECT_DIR_NAME, PROJECT_SETTINGS_FILE)],
+    ["local", join48(projectRoot, PROJECT_DIR_NAME, LOCAL_SETTINGS_FILE)]
   ];
   const layers = [];
   const warnings = [];
@@ -62319,7 +62552,7 @@ var init_settings = __esm({
     "use strict";
     init_git();
     init_policy();
-    USER_SETTINGS_RELATIVE = join47(
+    USER_SETTINGS_RELATIVE = join48(
       ".config",
       "oxagen",
       "settings.json"
@@ -62332,7 +62565,7 @@ var init_settings = __esm({
 
 // ../../packages/steering-freshness/src/check.ts
 import { lstat as lstat3 } from "node:fs/promises";
-import { isAbsolute as isAbsolute12, join as join48, resolve as resolve17 } from "node:path";
+import { isAbsolute as isAbsolute12, join as join49, resolve as resolve18 } from "node:path";
 function publishedCommits(platform) {
   if (platform.headCommits && platform.headCommits.length > 0)
     return platform.headCommits;
@@ -62437,7 +62670,7 @@ async function checkSteeringFreshness(opts) {
     );
   }
   const commonDir = allowNetwork ? await gitOrNull(repoCtx, "rev-parse", "--git-common-dir") : null;
-  const stampDir = commonDir ? isAbsolute12(commonDir) ? commonDir : resolve17(root, commonDir) : null;
+  const stampDir = commonDir ? isAbsolute12(commonDir) ? commonDir : resolve18(root, commonDir) : null;
   const stamp = stampDir ? await readFetchStamp(stampDir, cacheIo) : null;
   const remoteContactDue = allowNetwork && shouldContactRemote(stamp, policy.fetchIntervalSeconds, now());
   const branch = policy.branch ?? await defaultBranch(networkCtx(repoCtx), policy.remote, {
@@ -62669,7 +62902,7 @@ async function absentFromDisk(root, paths) {
   const flags = await Promise.all(
     paths.map(async (path2) => {
       try {
-        await lstat3(join48(root, path2));
+        await lstat3(join49(root, path2));
         return false;
       } catch {
         return true;
@@ -62728,7 +62961,7 @@ var init_check = __esm({
 // ../../packages/steering-freshness/src/sync.ts
 import { mkdtemp, rm as rm3, writeFile as writeFile6 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join49 } from "node:path";
+import { join as join50 } from "node:path";
 function refuse3(refusal, message) {
   return {
     applied: false,
@@ -62909,9 +63142,9 @@ async function syncSteering(opts) {
   };
 }
 async function commitPaths(ctx, message, paths) {
-  const dir = await mkdtemp(join49(tmpdir2(), "oxagen-steering-sync-"));
+  const dir = await mkdtemp(join50(tmpdir2(), "oxagen-steering-sync-"));
   try {
-    const list2 = join49(dir, "pathspec");
+    const list2 = join50(dir, "pathspec");
     await writeFile6(list2, `${paths.join("\0")}\0`, "utf8");
     await git3(
       ctx,
@@ -63438,10 +63671,10 @@ var init_paths2 = __esm({
 });
 
 // src/commands/workspace-link.ts
-import { existsSync as existsSync24, mkdirSync as mkdirSync9, readFileSync as readFileSync22 } from "node:fs";
-import { dirname as dirname27, join as join50 } from "node:path";
+import { existsSync as existsSync24, mkdirSync as mkdirSync9, readFileSync as readFileSync23 } from "node:fs";
+import { dirname as dirname28, join as join51 } from "node:path";
 function workspaceLinkPath(cwd) {
-  return join50(cwd, WORKSPACE_LINK_PATH);
+  return join51(cwd, WORKSPACE_LINK_PATH);
 }
 function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -63474,7 +63707,7 @@ function readWorkspaceLink(cwd) {
   if (!existsSync24(filePath)) return null;
   let parsed2;
   try {
-    parsed2 = JSON.parse(readFileSync22(filePath, "utf8"));
+    parsed2 = JSON.parse(readFileSync23(filePath, "utf8"));
   } catch (err2) {
     const detail = err2 instanceof Error ? err2.message : String(err2);
     process.stderr.write(
@@ -63495,7 +63728,7 @@ function readWorkspaceLink(cwd) {
 }
 function writeWorkspaceLink(cwd, link) {
   const filePath = workspaceLinkPath(cwd);
-  mkdirSync9(dirname27(filePath), { recursive: true });
+  mkdirSync9(dirname28(filePath), { recursive: true });
   atomicWriteFileSync(filePath, JSON.stringify(link, null, 2));
 }
 var LINK_STRING_FIELDS;
@@ -63531,7 +63764,7 @@ __export(steering_exports, {
 });
 import { execFileSync } from "node:child_process";
 import { existsSync as existsSync25, realpathSync as realpathSync7 } from "node:fs";
-import { dirname as dirname28, join as join51, normalize, parse as parsePath } from "node:path";
+import { dirname as dirname29, join as join52, normalize, parse as parsePath } from "node:path";
 function findProjectRoot(start) {
   const { root } = parsePath(start);
   const rawGitRoot = gitRootOr(start);
@@ -63540,9 +63773,9 @@ function findProjectRoot(start) {
   if (gitRoot !== null) return gitRoot;
   let dir = from;
   for (; ; ) {
-    if (existsSync25(join51(dir, PROJECT_DIR_NAME))) return dir;
+    if (existsSync25(join52(dir, PROJECT_DIR_NAME))) return dir;
     if (dir === root) return from;
-    const parent = dirname28(dir);
+    const parent = dirname29(dir);
     if (parent === dir) return from;
     dir = parent;
   }
@@ -63849,7 +64082,7 @@ async function resolveContext(cwd, {
     }
   };
 }
-function describe5(verdict, policy) {
+function describe6(verdict, policy) {
   const target2 = verdict.branch ? `${verdict.remote}/${verdict.branch}` : verdict.remote;
   const lines = [];
   switch (verdict.status) {
@@ -63928,7 +64161,7 @@ async function steeringStatus(opts = {}, writer = stdoutWriter, cwd = process.cw
     });
     return;
   }
-  writer.write(describe5(verdict, ctx.policy));
+  writer.write(describe6(verdict, ctx.policy));
 }
 async function steeringSync(opts = {}, writer = stdoutWriter, cwd = process.cwd()) {
   const out = createOutput({ json: opts.json }, writer);
@@ -65659,6 +65892,13 @@ var init_agent_list = __esm({
       beltSize: external_exports.number().int().nonnegative().nullable(),
       /** Ledger runs plus root wrapped sessions started in the last 30 days. */
       runs30d: external_exports.number().int().nonnegative(),
+      /**
+       * The agent's runs that are live now: open ledger runs plus root wrapped
+       * sessions still running on a host that polled in the last five minutes
+       * (or on no host). The same predicates as `list_runs`' live count, so the
+       * Agents table and the Runs page's Live tile agree. Zero when none is.
+       */
+      liveRuns: external_exports.number().int().nonnegative(),
       /**
        * The sum of the agent's priced wrapped sessions started in the last 30
        * days, as the harness reported it (`client_attested`). Null when no
@@ -65710,7 +65950,7 @@ var init_agent_list = __esm({
     agentList = registerCapability({
       name: "list_agents",
       domain: "agent",
-      description: "List the agents registered in this workspace with their purpose, principal, harness, operator, status, enrollment and credential counts, live host, latest enforcement tier, active mandates, and the 30-day run, spend, token and incident figures the stores record. Retired (deregistered) agents are left out unless includeRetired is true.",
+      description: "List the agents registered in this workspace with their purpose, principal, harness, operator, status, enrollment and credential counts, live host, live run count, latest enforcement tier, active mandates, and the 30-day run, spend, token and incident figures the stores record. Retired (deregistered) agents are left out unless includeRetired is true.",
       mode: "sync",
       surfaces: ["api", "mcp", "agent"],
       layers: ["schema", "api", "mcp", "unit", "docs", "app"],
@@ -79980,7 +80220,7 @@ var init_secrets = __esm({
 });
 
 // ../../packages/steering-check/src/checks/secrets.ts
-function describe6(label2) {
+function describe7(label2) {
   if (label2 === "private key block") {
     return {
       rule: "credential",
@@ -80049,7 +80289,7 @@ var init_secrets2 = __esm({
         if (labels.size === 0) continue;
         const lines = firstLines(text5, labels);
         for (const label2 of labels) {
-          const described = describe6(label2);
+          const described = describe7(label2);
           if (kind === LOCK_KIND && described.rule !== "credential") continue;
           findings.push(
             find10({
@@ -80071,7 +80311,7 @@ function shown2(value) {
   const text5 = value === void 0 || value === null ? "unset" : JSON.stringify(value);
   return text5.length > 120 ? `${text5.slice(0, 117)}...` : text5;
 }
-function describe7(difference) {
+function describe8(difference) {
   const { setting: setting2, actual } = difference;
   const parts = setting2.split(".");
   if (setting2 === "merge_requests.required_status") {
@@ -80131,7 +80371,7 @@ var init_settings2 = __esm({
         };
       }
       const findings = env.health.differences.map((difference) => {
-        const { rule, message, fix } = describe7(difference);
+        const { rule, message, fix } = describe8(difference);
         return find11({
           rule,
           path: difference.setting,
@@ -80624,10 +80864,10 @@ var init_memory_client = __esm({
 import { readFile as readFile9 } from "node:fs/promises";
 import {
   basename as basename7,
-  dirname as dirname29,
+  dirname as dirname30,
   isAbsolute as isAbsolute13,
   relative as relative6,
-  resolve as resolve18,
+  resolve as resolve19,
   sep as sep7
 } from "node:path";
 function inside(rel) {
@@ -80636,7 +80876,7 @@ function inside(rel) {
 function importFilename(path2, folder) {
   let rel = relative6(process.cwd(), path2);
   if (!inside(rel) && folder !== void 0) {
-    rel = relative6(dirname29(resolve18(folder)), resolve18(path2));
+    rel = relative6(dirname30(resolve19(folder)), resolve19(path2));
   }
   const name = inside(rel) ? rel.split(sep7).join("/") : basename7(path2);
   return name.length > 256 ? basename7(path2).slice(-256) : name;
@@ -80923,7 +81163,7 @@ __export(steering_import_exports, {
 });
 import { readdir as readdir4, realpath as realpath2, stat as stat4 } from "node:fs/promises";
 import { homedir as homedir12 } from "node:os";
-import { basename as basename8, extname, join as join52, relative as relative7, sep as sep8 } from "node:path";
+import { basename as basename8, extname, join as join53, relative as relative7, sep as sep8 } from "node:path";
 function envDir2(env, key) {
   const value = env[key];
   return value === void 0 || value.trim() === "" ? null : value;
@@ -80931,34 +81171,34 @@ function envDir2(env, key) {
 function harnessHome(harness, env = process.env, home = homedir12()) {
   switch (harness) {
     case "claude-code": {
-      const config = envDir2(env, "CLAUDE_CONFIG_DIR") ?? join52(home, ".claude");
+      const config = envDir2(env, "CLAUDE_CONFIG_DIR") ?? join53(home, ".claude");
       return {
         harness,
         folders: [
           {
-            dir: skillsRoot("claude-code", env, home) ?? join52(config, "skills"),
+            dir: skillsRoot("claude-code", env, home) ?? join53(config, "skills"),
             mount: ".claude/skills"
           },
-          { dir: join52(config, "commands"), mount: ".claude/commands" },
-          { dir: join52(config, "agents"), mount: ".claude/agents" }
+          { dir: join53(config, "commands"), mount: ".claude/commands" },
+          { dir: join53(config, "agents"), mount: ".claude/agents" }
         ],
         instructions: [
-          { file: join52(config, "CLAUDE.md"), filename: ".claude/CLAUDE.md" }
+          { file: join53(config, "CLAUDE.md"), filename: ".claude/CLAUDE.md" }
         ]
       };
     }
     case "codex": {
-      const codexHome = envDir2(env, "CODEX_HOME") ?? join52(home, ".codex");
+      const codexHome = envDir2(env, "CODEX_HOME") ?? join53(home, ".codex");
       return {
         harness,
         folders: [
           {
-            dir: skillsRoot("codex", env, home) ?? join52(home, ".agents", "skills"),
+            dir: skillsRoot("codex", env, home) ?? join53(home, ".agents", "skills"),
             mount: ".agents/skills"
           }
         ],
         instructions: ["AGENTS.override.md", "AGENTS.md"].map((name) => ({
-          file: join52(codexHome, name),
+          file: join53(codexHome, name),
           filename: `.codex/${name}`
         }))
       };
@@ -80967,8 +81207,8 @@ function harnessHome(harness, env = process.env, home = homedir12()) {
       return {
         harness,
         folders: [
-          { dir: join52(home, ".cursor", "skills"), mount: ".cursor/skills" },
-          { dir: join52(home, ".cursor", "commands"), mount: ".cursor/commands" }
+          { dir: join53(home, ".cursor", "skills"), mount: ".cursor/skills" },
+          { dir: join53(home, ".cursor", "commands"), mount: ".cursor/commands" }
         ],
         instructions: []
       };
@@ -81014,7 +81254,7 @@ async function findMarkdownFiles(paths, harness) {
     }
     const found = [];
     for (const entry2 of entries2.sort(byName)) {
-      const path2 = join52(dir, entry2.name);
+      const path2 = join53(dir, entry2.name);
       if (entry2.isDirectory()) {
         if (!entry2.name.startsWith(".") && entry2.name !== "node_modules")
           found.push(...await filesUnder(path2, from));
@@ -81036,7 +81276,7 @@ async function findMarkdownFiles(paths, harness) {
     const { folder } = frame;
     const named = (rel) => frame.fixedNames ? { filename: rel } : {};
     for (const entry2 of entries2) {
-      const path2 = join52(dir, entry2.name);
+      const path2 = join53(dir, entry2.name);
       const rel = frame.relOf(path2);
       if (entry2.isDirectory()) {
         if (entry2.name === "node_modules") continue;
@@ -81095,7 +81335,7 @@ async function findMarkdownFiles(paths, harness) {
     }
     if (folderGiven) {
       const catalogue = CATALOGUE_FOLDERS.has(basename8(path2));
-      const root = catalogue ? join52(path2, "..") : path2;
+      const root = catalogue ? join53(path2, "..") : path2;
       await walk2(path2, {
         relOf: (p) => under(root, p),
         folder: path2,
@@ -81425,7 +81665,7 @@ __export(run_exports, {
 });
 import { createHash as createHash16 } from "node:crypto";
 import { createWriteStream, renameSync as renameSync6, rmSync as rmSync9 } from "node:fs";
-import { resolve as resolve19 } from "node:path";
+import { resolve as resolve20 } from "node:path";
 import { Readable as Readable2 } from "node:stream";
 import { pipeline as pipeline2 } from "node:stream/promises";
 async function runExport(runId, opts = {}, writer = stdoutWriter) {
@@ -81523,7 +81763,7 @@ async function runDownload(exportId, opts = {}, writer = stdoutWriter) {
     return;
   }
   const url = resolveDownloadUrl(status2.download.url, getApiUrl());
-  const path2 = resolve19(opts.out ?? `${status2.runId}-${exportId}.zip`);
+  const path2 = resolve20(opts.out ?? `${status2.runId}-${exportId}.zip`);
   const partial = `${path2}.${process.pid}.partial`;
   const hash3 = createHash16("sha256");
   let size = 0;
@@ -82754,12 +82994,12 @@ __export(verify_exports, {
   readBundle: () => readBundle,
   verifyBundle: () => verifyBundle3
 });
-import { existsSync as existsSync26, readFileSync as readFileSync23, statSync as statSync12 } from "node:fs";
-import { join as join53 } from "node:path";
+import { existsSync as existsSync26, readFileSync as readFileSync24, statSync as statSync13 } from "node:fs";
+import { join as join54 } from "node:path";
 function readDirectory(dir) {
   const read2 = (name) => {
-    const path2 = join53(dir, name);
-    return existsSync26(path2) ? readFileSync23(path2, "utf8") : void 0;
+    const path2 = join54(dir, name);
+    return existsSync26(path2) ? readFileSync24(path2, "utf8") : void 0;
   };
   return assemble(read2, dir);
 }
@@ -82769,7 +83009,7 @@ function isBundleEntry(name) {
 function readZip(path2) {
   let entries2;
   try {
-    entries2 = unzipSync(new Uint8Array(readFileSync23(path2)), {
+    entries2 = unzipSync(new Uint8Array(readFileSync24(path2)), {
       filter: (file) => isBundleEntry(file.name)
     });
   } catch (err2) {
@@ -82805,7 +83045,7 @@ function readBundle(path2) {
   if (!existsSync26(path2)) {
     throw new BundleReadError(`${path2} does not exist.`);
   }
-  return statSync12(path2).isDirectory() ? readDirectory(path2) : readZip(path2);
+  return statSync13(path2).isDirectory() ? readDirectory(path2) : readZip(path2);
 }
 function plural3(count12, one, many) {
   return `${count12} ${count12 === 1 ? one : many}`;
@@ -83879,15 +84119,15 @@ import { createHash as createHash17, randomBytes as randomBytes12 } from "node:c
 import {
   appendFileSync as appendFileSync4,
   existsSync as existsSync27,
-  lstatSync as lstatSync9,
+  lstatSync as lstatSync10,
   mkdirSync as mkdirSync10,
-  readFileSync as readFileSync24,
+  readFileSync as readFileSync25,
   readdirSync as readdirSync13,
   realpathSync as realpathSync8,
   writeFileSync as writeFileSync7
 } from "node:fs";
 import { homedir as homedir13, hostname as osHostname3 } from "node:os";
-import { join as join54, relative as relative8, resolve as resolve20, sep as sep9 } from "node:path";
+import { join as join55, relative as relative8, resolve as resolve21, sep as sep9 } from "node:path";
 function git4(cwd, args) {
   return new Promise((done) => {
     try {
@@ -83908,7 +84148,7 @@ function git4(cwd, args) {
 }
 async function projectRootFor(cwd) {
   const top = await git4(cwd, ["rev-parse", "--show-toplevel"]);
-  return top ? resolve20(top) : resolve20(cwd);
+  return top ? resolve21(top) : resolve21(cwd);
 }
 function parseRemoteRepository(url) {
   const raw = url.trim();
@@ -83934,7 +84174,7 @@ function parseRemoteRepository(url) {
 }
 function oxagenPresent(root) {
   try {
-    return readdirSync13(join54(root, ".oxagen")).some(
+    return readdirSync13(join55(root, ".oxagen")).some(
       (name) => name !== "workspace.json"
     );
   } catch {
@@ -83943,20 +84183,20 @@ function oxagenPresent(root) {
 }
 function symlinkState(root) {
   try {
-    if (!lstatSync9(join54(root, ".stella")).isDirectory()) return "none";
+    if (!lstatSync10(join55(root, ".stella")).isDirectory()) return "none";
   } catch {
     return "none";
   }
   let oxagenReal;
   try {
-    oxagenReal = realpathSync8(join54(root, ".oxagen"));
+    oxagenReal = realpathSync8(join55(root, ".oxagen"));
   } catch {
     return "missing";
   }
   for (const link of STELLA_LINKS) {
-    const at2 = join54(root, link);
+    const at2 = join55(root, link);
     try {
-      if (!lstatSync9(at2).isSymbolicLink()) return "missing";
+      if (!lstatSync10(at2).isSymbolicLink()) return "missing";
       const target2 = realpathSync8(at2);
       if (target2 !== oxagenReal && !target2.startsWith(oxagenReal + sep9)) {
         return "missing";
@@ -83968,11 +84208,11 @@ function symlinkState(root) {
   return "linked";
 }
 function machineId(configDir = getConfigDir()) {
-  const file = join54(configDir, MACHINE_ID_FILE);
+  const file = join55(configDir, MACHINE_ID_FILE);
   let secret = null;
   try {
     if (existsSync27(file)) {
-      const stored = readFileSync24(file, "utf8").trim();
+      const stored = readFileSync25(file, "utf8").trim();
       if (/^[0-9a-f]{64}$/.test(stored)) secret = stored;
     }
     if (secret === null) {
@@ -84008,7 +84248,7 @@ async function probeWorkingCopy(opts) {
   return {
     machineId: machineId(opts.configDir),
     hostname: host.length > 0 ? host : "unknown",
-    directory: resolve20(root),
+    directory: resolve21(root),
     repository: remote ? parseRemoteRepository(remote) : null,
     // `HEAD` is git's answer on a detached head.
     branch: branch && branch !== "HEAD" ? branch.slice(0, 255) : null,
@@ -84041,24 +84281,24 @@ function realpathOr2(path2) {
   try {
     return realpathSync8(path2);
   } catch {
-    return resolve20(path2);
+    return resolve21(path2);
   }
 }
 async function ensureWorkspaceLinkIgnored(root) {
   const top = await git4(root, ["rev-parse", "--show-toplevel"]);
   if (!top) return null;
-  const topDir = resolve20(top);
+  const topDir = resolve21(top);
   const entry2 = relative8(
     topDir,
-    join54(realpathOr2(root), ".oxagen", "workspace.json")
+    join55(realpathOr2(root), ".oxagen", "workspace.json")
   ).split(sep9).join("/");
   if (entry2.startsWith("../")) return null;
   const rule = await git4(topDir, ["check-ignore", "--no-index", "-v", entry2]);
   if (rule !== null) return null;
-  const gitignore = join54(resolve20(top), ".gitignore");
+  const gitignore = join55(resolve21(top), ".gitignore");
   let existing = "";
   try {
-    existing = readFileSync24(gitignore, "utf8");
+    existing = readFileSync25(gitignore, "utf8");
   } catch {
   }
   const prefix = existing.length > 0 && !existing.endsWith("\n") ? "\n" : "";
@@ -84569,18 +84809,18 @@ __export(pull_exports, {
 });
 import { createHash as createHash18 } from "node:crypto";
 import {
-  lstatSync as lstatSync10,
+  lstatSync as lstatSync11,
   mkdirSync as mkdirSync11,
-  readFileSync as readFileSync25,
+  readFileSync as readFileSync26,
   readdirSync as readdirSync14,
   realpathSync as realpathSync9,
   rmSync as rmSync10,
   rmdirSync as rmdirSync7
 } from "node:fs";
 import {
-  dirname as dirname30,
+  dirname as dirname31,
   isAbsolute as isAbsolute14,
-  join as join55,
+  join as join56,
   parse as parsePath2,
   posix as posix4,
   sep as sep10
@@ -84689,38 +84929,38 @@ function findLinkedRoot(start) {
   const { root } = parsePath2(start);
   for (; ; ) {
     try {
-      if (lstatSync10(workspaceLinkPath(dir)).isFile()) return dir;
+      if (lstatSync11(workspaceLinkPath(dir)).isFile()) return dir;
     } catch {
     }
     if (dir === root) return null;
-    const parent = dirname30(dir);
+    const parent = dirname31(dir);
     if (parent === dir) return null;
     dir = parent;
   }
 }
 function fsReader(root) {
   return (path2) => {
-    const abs = join55(root, ...path2.split("/"));
+    const abs = join56(root, ...path2.split("/"));
     try {
-      const st = lstatSync10(abs);
+      const st = lstatSync11(abs);
       if (!st.isFile()) return Buffer.from(`\0not-a-file:${abs}`);
-      return readFileSync25(abs);
+      return readFileSync26(abs);
     } catch {
       return null;
     }
   };
 }
 function assertInsideOxagen(root, path2) {
-  const oxagenAbs = join55(root, OXAGEN_DIR);
+  const oxagenAbs = join56(root, OXAGEN_DIR);
   let oxagenReal;
   try {
     oxagenReal = realpathSync9(oxagenAbs);
   } catch {
     return;
   }
-  const abs = join55(root, ...path2.split("/"));
+  const abs = join56(root, ...path2.split("/"));
   try {
-    if (lstatSync10(abs).isSymbolicLink()) {
+    if (lstatSync11(abs).isSymbolicLink()) {
       throw new Error(
         `${path2} is a symlink, and pull does not write through one`
       );
@@ -84728,7 +84968,7 @@ function assertInsideOxagen(root, path2) {
   } catch (err2) {
     if (err2.code !== "ENOENT") throw err2;
   }
-  let dir = dirname30(abs);
+  let dir = dirname31(abs);
   for (; ; ) {
     let real = null;
     try {
@@ -84742,14 +84982,14 @@ function assertInsideOxagen(root, path2) {
       }
       return;
     }
-    const parent = dirname30(dir);
+    const parent = dirname31(dir);
     if (parent === dir) return;
     dir = parent;
   }
 }
 function pruneEmptyDirs(root, path2) {
-  const stop = join55(root, OXAGEN_DIR);
-  let dir = dirname30(join55(root, ...path2.split("/")));
+  const stop = join56(root, OXAGEN_DIR);
+  let dir = dirname31(join56(root, ...path2.split("/")));
   while (dir.startsWith(stop + sep10)) {
     try {
       if (readdirSync14(dir).length > 0) return;
@@ -84757,19 +84997,19 @@ function pruneEmptyDirs(root, path2) {
     } catch {
       return;
     }
-    dir = dirname30(dir);
+    dir = dirname31(dir);
   }
 }
 function applyPlan(root, plan) {
   for (const w of plan.writes) assertInsideOxagen(root, w.path);
   for (const d of plan.deletes) assertInsideOxagen(root, d);
   for (const w of plan.writes) {
-    const abs = join55(root, ...w.path.split("/"));
-    mkdirSync11(dirname30(abs), { recursive: true });
+    const abs = join56(root, ...w.path.split("/"));
+    mkdirSync11(dirname31(abs), { recursive: true });
     atomicWriteFileSync(abs, w.content);
   }
   for (const d of plan.deletes) {
-    rmSync10(join55(root, ...d.split("/")), { force: true });
+    rmSync10(join56(root, ...d.split("/")), { force: true });
     pruneEmptyDirs(root, d);
   }
 }
@@ -85441,7 +85681,7 @@ function definitionLocationChecks(extra, repositoryFields = ["repo", "path", "re
     )
   ];
 }
-function definitionSource(type, froms, describe8) {
+function definitionSource(type, froms, describe9) {
   return withChecks(
     external_exports.object({
       type: external_exports.literal(type),
@@ -85451,7 +85691,7 @@ function definitionSource(type, froms, describe8) {
       ref: gitRefSchema.optional().describe("The branch, tag, or commit to read."),
       url: httpUrlSchema.optional().describe("Where Oxagen fetches the definition."),
       network: networkField
-    }).strict().describe(describe8),
+    }).strict().describe(describe9),
     definitionLocationChecks(liveReadFroms(froms))
   );
 }
@@ -90776,7 +91016,7 @@ function createFileRegistry(...args) {
         if (seen.has(protoFileName)) {
           continue;
         }
-        const dep = resolve23(protoFileName);
+        const dep = resolve24(protoFileName);
         if (!dep) {
           throw new Error(`Unable to resolve ${protoFileName}, imported by ${file.name}`);
         }
@@ -90790,7 +91030,7 @@ function createFileRegistry(...args) {
       return deps.concat(...deps.map(recurseDeps));
     };
     const input = args[0];
-    const resolve23 = args[1];
+    const resolve24 = args[1];
     const seen = /* @__PURE__ */ new Set();
     for (const file of [input, ...recurseDeps(input)].reverse()) {
       addFile(file, registry2);
@@ -93640,7 +93880,7 @@ var require_aspromise = __commonJS({
       var params = new Array(arguments.length - 1), offset = 0, index = 2, pending = true;
       while (index < arguments.length)
         params[offset++] = arguments[index++];
-      return new Promise(function executor(resolve23, reject) {
+      return new Promise(function executor(resolve24, reject) {
         params[offset] = function callback(err2) {
           if (pending) {
             pending = false;
@@ -93650,7 +93890,7 @@ var require_aspromise = __commonJS({
               var params2 = new Array(arguments.length - 1), offset2 = 0;
               while (offset2 < params2.length)
                 params2[offset2++] = arguments[offset2];
-              resolve23.apply(null, params2);
+              resolve24.apply(null, params2);
             }
           }
         };
@@ -96205,7 +96445,7 @@ var require_path = __commonJS({
         return prefix + parts.join("/");
       }
     );
-    path2.resolve = function resolve23(originPath, includePath, alreadyNormalized) {
+    path2.resolve = function resolve24(originPath, includePath, alreadyNormalized) {
       if (!alreadyNormalized)
         includePath = normalize3(includePath);
       if (isAbsolute16(includePath))
@@ -96562,7 +96802,7 @@ var require_mapfield = __commonJS({
         keepComments ? this.comment : void 0
       ]);
     };
-    MapField.prototype.resolve = function resolve23() {
+    MapField.prototype.resolve = function resolve24() {
       if (this.resolved)
         return this;
       if (types.mapKey[this.keyType] === void 0)
@@ -96639,7 +96879,7 @@ var require_method = __commonJS({
         this.parsedOptions
       ]);
     };
-    Method.prototype.resolve = function resolve23() {
+    Method.prototype.resolve = function resolve24() {
       if (this.resolved)
         return this;
       this.resolvedRequestType = this.parent.lookupType(this.requestType);
@@ -98252,7 +98492,7 @@ var require_field = __commonJS({
         keepComments ? this.comment : void 0
       ]);
     };
-    Field.prototype.resolve = function resolve23() {
+    Field.prototype.resolve = function resolve24() {
       if (this.resolved)
         return this;
       if ((this.typeDefault = types.defaults[this.type]) === void 0) {
@@ -98525,7 +98765,7 @@ var require_object = __commonJS({
       this.parent = null;
       this.resolved = false;
     };
-    ReflectionObject.prototype.resolve = function resolve23() {
+    ReflectionObject.prototype.resolve = function resolve24() {
       if (this.resolved)
         return this;
       if (this.root instanceof Root)
@@ -102080,7 +102320,7 @@ function buildSet(input, notes) {
   for (const [name, file] of built) {
     const visible = visibility.of(name);
     for (const ref2 of file.pending)
-      resolve21(ref2, name, visible, everyFile, symbols);
+      resolve22(ref2, name, visible, everyFile, symbols);
     for (const [key, text5] of file.comments) comments.set(key, text5);
     for (const option of file.customOptions) customOptions.add(option);
   }
@@ -102254,7 +102494,7 @@ function remember(built, name, file) {
   built.set(name, file);
   return file.proto;
 }
-function resolve21(ref2, file, visible, everyFile, symbols) {
+function resolve22(ref2, file, visible, everyFile, symbols) {
   const found = symbols.lookup(ref2.ref, ref2.scope, visible);
   if (found === void 0) {
     const everywhere = symbols.lookup(ref2.ref, ref2.scope, everyFile);
@@ -104707,19 +104947,19 @@ function retryAfterMs(value, now) {
   return Number.isNaN(date) ? void 0 : Math.max(0, date - now);
 }
 function sleep(ms, signal) {
-  return new Promise((resolve23) => {
+  return new Promise((resolve24) => {
     if (signal.aborted) {
-      resolve23(false);
+      resolve24(false);
       return;
     }
     const onAbort = () => {
       clearTimeout(timer);
-      resolve23(false);
+      resolve24(false);
     };
     const timer = setTimeout(
       () => {
         signal.removeEventListener("abort", onAbort);
-        resolve23(true);
+        resolve24(true);
       },
       Math.min(ms, MAX_TIMER_MS)
     );
@@ -104773,13 +105013,13 @@ var init_retry = __esm({
         else signal.addEventListener("abort", this.onAbort, { once: true });
       }
       race(promise) {
-        return new Promise((resolve23) => {
+        return new Promise((resolve24) => {
           let settled2 = false;
           const settle3 = (result2) => {
             if (settled2) return;
             settled2 = true;
             this.waiter = void 0;
-            resolve23(result2);
+            resolve24(result2);
           };
           promise.then(
             (value) => settle3({ kind: "value", value }),
@@ -105171,8 +105411,8 @@ function sendFailure(error, sender) {
   };
 }
 function settle2(run3) {
-  return new Promise((resolve23) => {
-    resolve23(run3());
+  return new Promise((resolve24) => {
+    resolve24(run3());
   });
 }
 async function attemptOnce(spec, deadline) {
@@ -108572,7 +108812,7 @@ var require_call_credentials = __commonJS({
           if (isCurrentOauth2Client(googleCredentials)) {
             getHeaders = googleCredentials.getRequestHeaders(options.service_url);
           } else {
-            getHeaders = new Promise((resolve23, reject) => {
+            getHeaders = new Promise((resolve24, reject) => {
               googleCredentials.getRequestMetadata(options.service_url, (err2, headers) => {
                 if (err2) {
                   reject(err2);
@@ -108582,7 +108822,7 @@ var require_call_credentials = __commonJS({
                   reject(new Error("Headers not set by metadata plugin"));
                   return;
                 }
-                resolve23(headers);
+                resolve24(headers);
               });
             });
           }
@@ -108635,10 +108875,10 @@ var require_call_credentials = __commonJS({
         this.metadataGenerator = metadataGenerator;
       }
       generateMetadata(options) {
-        return new Promise((resolve23, reject) => {
+        return new Promise((resolve24, reject) => {
           this.metadataGenerator(options, (err2, metadata) => {
             if (metadata !== void 0) {
-              resolve23(metadata);
+              resolve24(metadata);
             } else {
               reject(err2);
             }
@@ -108997,14 +109237,14 @@ var require_channel_credentials = __commonJS({
       }
       connect(socket) {
         const tlsConnectOptions = Object.assign({ socket }, this.connectionOptions);
-        return new Promise((resolve23, reject) => {
+        return new Promise((resolve24, reject) => {
           const tlsSocket = (0, tls_1.connect)(tlsConnectOptions, () => {
             var _a2;
             if (((_a2 = this.connectionOptions.rejectUnauthorized) !== null && _a2 !== void 0 ? _a2 : true) && !tlsSocket.authorized) {
               reject(tlsSocket.authorizationError);
               return;
             }
-            resolve23({
+            resolve24({
               socket: tlsSocket,
               secure: true
             });
@@ -109123,8 +109363,8 @@ var require_channel_credentials = __commonJS({
         if (this.hasReceivedUpdates()) {
           return Promise.resolve(this.getLatestSecureContext());
         } else {
-          return new Promise((resolve23) => {
-            this.secureContextWatchers.push(resolve23);
+          return new Promise((resolve24) => {
+            this.secureContextWatchers.push(resolve24);
           });
         }
       }
@@ -109157,7 +109397,7 @@ var require_channel_credentials = __commonJS({
         this.callCredentials = callCredentials;
       }
       connect(socket) {
-        return new Promise((resolve23, reject) => {
+        return new Promise((resolve24, reject) => {
           const secureContext = this.parent.getLatestSecureContext();
           if (!secureContext) {
             reject(new Error("Failed to load credentials"));
@@ -109182,7 +109422,7 @@ var require_channel_credentials = __commonJS({
               reject(tlsSocket.authorizationError);
               return;
             }
-            resolve23({
+            resolve24({
               socket: tlsSocket,
               secure: true
             });
@@ -116061,18 +116301,18 @@ var require_compression_filter = __commonJS({
         this.maxRecvMessageLength = maxRecvMessageLength;
       }
       compressMessage(message) {
-        return new Promise((resolve23, reject) => {
+        return new Promise((resolve24, reject) => {
           zlib.deflate(message, (err2, output) => {
             if (err2) {
               reject(err2);
             } else {
-              resolve23(output);
+              resolve24(output);
             }
           });
         });
       }
       decompressMessage(message) {
-        return new Promise((resolve23, reject) => {
+        return new Promise((resolve24, reject) => {
           let totalLength = 0;
           const messageParts = [];
           const decompresser = zlib.createInflate();
@@ -116094,7 +116334,7 @@ var require_compression_filter = __commonJS({
             }
           });
           decompresser.on("end", () => {
-            resolve23(Buffer.concat(messageParts));
+            resolve24(Buffer.concat(messageParts));
           });
           decompresser.write(message);
           decompresser.end();
@@ -116107,18 +116347,18 @@ var require_compression_filter = __commonJS({
         this.maxRecvMessageLength = maxRecvMessageLength;
       }
       compressMessage(message) {
-        return new Promise((resolve23, reject) => {
+        return new Promise((resolve24, reject) => {
           zlib.gzip(message, (err2, output) => {
             if (err2) {
               reject(err2);
             } else {
-              resolve23(output);
+              resolve24(output);
             }
           });
         });
       }
       decompressMessage(message) {
-        return new Promise((resolve23, reject) => {
+        return new Promise((resolve24, reject) => {
           let totalLength = 0;
           const messageParts = [];
           const decompresser = zlib.createGunzip();
@@ -116140,7 +116380,7 @@ var require_compression_filter = __commonJS({
             }
           });
           decompresser.on("end", () => {
-            resolve23(Buffer.concat(messageParts));
+            resolve24(Buffer.concat(messageParts));
           });
           decompresser.write(message);
           decompresser.end();
@@ -117495,7 +117735,7 @@ var require_http_proxy = __commonJS({
       options.headers = headers;
       const proxyAddressString = (0, subchannel_address_1.subchannelAddressToString)(address);
       trace("Using proxy " + proxyAddressString + " to connect to " + options.path);
-      return new Promise((resolve23, reject) => {
+      return new Promise((resolve24, reject) => {
         const request3 = http2.request(options);
         request3.once("connect", (res, socket, head2) => {
           request3.removeAllListeners();
@@ -117506,7 +117746,7 @@ var require_http_proxy = __commonJS({
               socket.unshift(head2);
             }
             trace("Successfully established a plaintext connection to " + options.path + " through proxy " + proxyAddressString);
-            resolve23(socket);
+            resolve24(socket);
           } else {
             (0, logging_1.log)(constants_1.LogVerbosity.ERROR, "Failed to connect to " + options.path + " through proxy " + proxyAddressString + " with status " + res.statusCode);
             reject();
@@ -118487,7 +118727,7 @@ var require_transport = __commonJS({
         if (secureConnectResult.socket.closed) {
           return Promise.reject("Connection closed before starting HTTP/2 handshake");
         }
-        return new Promise((resolve23, reject) => {
+        return new Promise((resolve24, reject) => {
           var _a2, _b2, _c, _d, _e, _f, _g, _h;
           let remoteName = null;
           let realTarget2 = this.channelTarget;
@@ -118558,7 +118798,7 @@ var require_transport = __commonJS({
             session.removeAllListeners();
             secureConnectResult.socket.removeListener("close", closeHandler);
             secureConnectResult.socket.removeListener("error", errorHandler);
-            resolve23(new Http2Transport(session, address, options, remoteName));
+            resolve24(new Http2Transport(session, address, options, remoteName));
             this.session = null;
           });
           session.once("close", closeHandler);
@@ -118572,7 +118812,7 @@ var require_transport = __commonJS({
           if (proxiedSocket) {
             return proxiedSocket;
           } else {
-            return new Promise((resolve23, reject) => {
+            return new Promise((resolve24, reject) => {
               const closeCallback = () => {
                 reject(new Error("Socket closed"));
               };
@@ -118582,7 +118822,7 @@ var require_transport = __commonJS({
               const socket = net.connect(address, () => {
                 socket.removeListener("close", closeCallback);
                 socket.removeListener("error", errorCallback);
-                resolve23(socket);
+                resolve24(socket);
               });
               socket.once("close", closeCallback);
               socket.once("error", errorCallback);
@@ -121986,7 +122226,7 @@ var require_server_interceptors = __commonJS({
           } else {
             decompresser = zlib.createGunzip();
           }
-          return new Promise((resolve23, reject) => {
+          return new Promise((resolve24, reject) => {
             let totalLength = 0;
             const messageParts = [];
             decompresser.on("error", (error) => {
@@ -122007,7 +122247,7 @@ var require_server_interceptors = __commonJS({
               }
             });
             decompresser.on("end", () => {
-              resolve23(Buffer.concat(messageParts));
+              resolve24(Buffer.concat(messageParts));
             });
             decompresser.write(messageContents);
             decompresser.end();
@@ -122600,10 +122840,10 @@ var require_server = __commonJS({
         bindOneAddress(address, boundPortObject) {
           this.trace("Attempting to bind " + (0, subchannel_address_1.subchannelAddressToString)(address));
           const http2Server = this.createHttp2Server(boundPortObject.credentials);
-          return new Promise((resolve23, reject) => {
+          return new Promise((resolve24, reject) => {
             const onError = (err2) => {
               this.trace("Failed to bind " + (0, subchannel_address_1.subchannelAddressToString)(address) + " with error " + err2.message);
-              resolve23({
+              resolve24({
                 port: "port" in address ? address.port : 1,
                 error: err2.message
               });
@@ -122631,7 +122871,7 @@ var require_server = __commonJS({
               });
               boundPortObject.listeningServers.add(http2Server);
               this.trace("Successfully bound " + (0, subchannel_address_1.subchannelAddressToString)(boundSubchannelAddress));
-              resolve23({
+              resolve24({
                 port: "port" in boundSubchannelAddress ? boundSubchannelAddress.port : 1
               });
               http2Server.removeListener("error", onError);
@@ -122684,7 +122924,7 @@ var require_server = __commonJS({
           }
         }
         resolvePort(port) {
-          return new Promise((resolve23, reject) => {
+          return new Promise((resolve24, reject) => {
             let seenResolution = false;
             const resolverListener = (endpointList, attributes, serviceConfig, resolutionNote) => {
               if (seenResolution) {
@@ -122700,7 +122940,7 @@ var require_server = __commonJS({
                 reject(new Error(`No addresses resolved for port ${port}`));
                 return true;
               }
-              resolve23(addressList);
+              resolve24(addressList);
               return true;
             };
             const resolver = (0, resolver_1.createResolver)(port, resolverListener, this.options);
@@ -127277,7 +127517,7 @@ function withServers(entry2, outcome) {
   };
 }
 function nextTurn() {
-  return new Promise((resolve23) => setImmediate(resolve23));
+  return new Promise((resolve24) => setImmediate(resolve24));
 }
 async function runChecksWithServers(input, options = {}) {
   const done = [];
@@ -128638,13 +128878,13 @@ __export(check_exports, {
 import { execFileSync as execFileSync2 } from "node:child_process";
 import { createHash as createHash20 } from "node:crypto";
 import {
-  lstatSync as lstatSync11,
+  lstatSync as lstatSync12,
   mkdirSync as mkdirSync12,
-  readFileSync as readFileSync26,
+  readFileSync as readFileSync27,
   readlinkSync as readlinkSync4,
-  statSync as statSync13
+  statSync as statSync14
 } from "node:fs";
-import { dirname as dirname31, isAbsolute as isAbsolute15, join as join56, relative as relative9, resolve as resolve22, sep as sep11 } from "node:path";
+import { dirname as dirname32, isAbsolute as isAbsolute15, join as join57, relative as relative9, resolve as resolve23, sep as sep11 } from "node:path";
 function git5(cwd, args, input) {
   try {
     return execFileSync2("git", args, {
@@ -128676,11 +128916,11 @@ function commitOf2(root, ref2) {
   return sha2.length > 0 ? sha2 : null;
 }
 function readWorkingFile(root, path2) {
-  const abs = join56(root, ...path2.split("/"));
+  const abs = join57(root, ...path2.split("/"));
   try {
-    const stat7 = lstatSync11(abs);
+    const stat7 = lstatSync12(abs);
     if (stat7.isSymbolicLink()) return readlinkSync4(abs, "utf8");
-    return stat7.isFile() ? readFileSync26(abs, "utf8") : null;
+    return stat7.isFile() ? readFileSync27(abs, "utf8") : null;
   } catch {
     return null;
   }
@@ -128755,25 +128995,25 @@ function chooseBase(root, ref2) {
 }
 function isFile(path2) {
   try {
-    return statSync13(path2).isFile();
+    return statSync14(path2).isFile();
   } catch {
     return false;
   }
 }
 function isDir(path2) {
   try {
-    return statSync13(path2).isDirectory();
+    return statSync14(path2).isDirectory();
   } catch {
     return false;
   }
 }
 function findSteeringRoot(start) {
-  let dir = resolve22(start);
+  let dir = resolve23(start);
   for (; ; ) {
-    if (isFile(join56(dir, WORKSPACE_TOML_PATH)) || isFile(join56(dir, AGENTS_MD_PATH)) && isDir(join56(dir, STEERING_DIR))) {
+    if (isFile(join57(dir, WORKSPACE_TOML_PATH)) || isFile(join57(dir, AGENTS_MD_PATH)) && isDir(join57(dir, STEERING_DIR))) {
       return dir;
     }
-    const parent = dirname31(dir);
+    const parent = dirname32(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -128784,7 +129024,7 @@ function within3(path2, scope) {
 function scopesFor(root, cwd, paths, trees) {
   const scopes = [];
   for (const path2 of paths) {
-    const rel = relative9(root, resolve22(cwd, path2));
+    const rel = relative9(root, resolve23(cwd, path2));
     if (rel === ".." || rel.startsWith(`..${sep11}`) || isAbsolute15(rel)) {
       return { error: `${path2} is outside the steering repo at ${root}.` };
     }
@@ -128850,12 +129090,12 @@ function cacheFile(cacheDir, root) {
     key: token === void 0 ? null : createHash20("sha256").update(token).digest("hex").slice(0, 16)
   };
   const key = createHash20("sha256").update(JSON.stringify([root, identity])).digest("hex").slice(0, 32);
-  return join56(cacheDir, `${key}.json`);
+  return join57(cacheDir, `${key}.json`);
 }
 function readCache(file, now) {
   let entry2;
   try {
-    entry2 = JSON.parse(readFileSync26(file, "utf8"));
+    entry2 = JSON.parse(readFileSync27(file, "utf8"));
   } catch {
     return null;
   }
@@ -128878,7 +129118,7 @@ async function publishedInputs(root, deps, refresh, out) {
   }
   if (file !== null) {
     try {
-      mkdirSync12(dirname31(file), { recursive: true });
+      mkdirSync12(dirname32(file), { recursive: true });
       atomicWriteFileSync(
         file,
         JSON.stringify({
@@ -128964,7 +129204,7 @@ function defaultDeps2() {
   return {
     fetchPublished: fetchSteeringIndex,
     cedar: cedarHooks,
-    cacheDir: join56(getConfigDir(), "cache", "steering-check"),
+    cacheDir: join57(getConfigDir(), "cache", "steering-check"),
     now: () => Date.now()
   };
 }
@@ -132847,7 +133087,7 @@ var init_src9 = __esm({
 
 // src/commands/codegraph-upload/files.ts
 import { readdir as readdir5, stat as stat5 } from "node:fs/promises";
-import { join as join57, relative as relative10, sep as sep12 } from "node:path";
+import { join as join58, relative as relative10, sep as sep12 } from "node:path";
 function hasGlobChars(pattern) {
   return /[*?[\]{}]/.test(pattern);
 }
@@ -132859,7 +133099,7 @@ async function walk(root, dir, out) {
   const entries2 = await readdir5(dir, { withFileTypes: true });
   for (const entry2 of entries2) {
     if (entry2.isSymbolicLink()) continue;
-    const full = join57(dir, entry2.name);
+    const full = join58(dir, entry2.name);
     if (entry2.isDirectory()) {
       if (!SKIP_DIRS.has(entry2.name)) await walk(root, full, out);
     } else if (entry2.isFile()) {
@@ -132871,7 +133111,7 @@ async function expandPattern(root, pattern) {
   const wanted = normalize2(pattern.trim());
   if (!hasGlobChars(wanted)) {
     try {
-      const info = await stat5(join57(root, wanted));
+      const info = await stat5(join58(root, wanted));
       return info.isFile() ? [wanted] : [];
     } catch {
       return [];
@@ -132948,12 +133188,12 @@ async function uploadFile(input) {
       message: `The endpoint answered ${response.status} with a body this step does not read. Update @oxagen/cli.`
     };
   }
-  const refused = uploadErrorSchema.safeParse(json2);
+  const refused2 = uploadErrorSchema.safeParse(json2);
   return {
     ok: false,
     status: response.status,
-    code: refused.success ? refused.data.error.code : `http_${response.status}`,
-    message: refused.success ? refused.data.error.message : `The endpoint answered ${response.status}.`
+    code: refused2.success ? refused2.data.error.code : `http_${response.status}`,
+    message: refused2.success ? refused2.data.error.message : `The endpoint answered ${response.status}.`
   };
 }
 var VERSION;
@@ -133022,7 +133262,7 @@ var init_token = __esm({
 });
 
 // src/commands/codegraph-upload/run.ts
-import { join as join58 } from "node:path";
+import { join as join59 } from "node:path";
 function addDropped(into, more) {
   into.sensitiveValues += more.sensitiveValues;
   into.secretData += more.secretData;
@@ -133040,7 +133280,7 @@ async function uploadOne(deps, config, token, group, path2, totals2) {
   const label2 = `${group.kind}/${group.source} ${path2}`;
   let bytes;
   try {
-    bytes = await deps.readFile(join58(deps.cwd, path2));
+    bytes = await deps.readFile(join59(deps.cwd, path2));
   } catch (error) {
     totals2.failed += 1;
     deps.log(`error: ${label2}: cannot read the file: ${error.message}`);
@@ -133318,7 +133558,7 @@ Following ${file} (Ctrl-C to stop)\u2026
       draining = false;
     }
   };
-  await new Promise((resolve23) => {
+  await new Promise((resolve24) => {
     let watcher = null;
     try {
       watcher = watch(file, { persistent: true }, () => void drain());
@@ -133327,12 +133567,12 @@ Following ${file} (Ctrl-C to stop)\u2026
         `Cannot follow ${file}: ${err2 instanceof Error ? err2.message : String(err2)}
 `
       );
-      resolve23();
+      resolve24();
       return;
     }
     const stop = () => {
       watcher?.close();
-      resolve23();
+      resolve24();
     };
     process.on("SIGINT", stop);
     process.on("SIGTERM", stop);
@@ -133669,7 +133909,7 @@ async function browserLogin({
   server.keepAliveTimeout = 1e3;
   server.headersTimeout = 5e3;
   server.requestTimeout = 15e3;
-  const port = await new Promise((resolve23, reject) => {
+  const port = await new Promise((resolve24, reject) => {
     server.once("error", reject);
     server.listen(0, "127.0.0.1", () => {
       const addr = server.address();
@@ -133679,7 +133919,7 @@ async function browserLogin({
         );
         return;
       }
-      resolve23(addr.port);
+      resolve24(addr.port);
     });
   });
   const redirectUri = `http://127.0.0.1:${port}/callback`;
@@ -133699,7 +133939,7 @@ async function browserLogin({
   ${authorizeUrl}`);
   openBrowser(authorizeUrl);
   return new Promise(
-    (resolve23, reject) => {
+    (resolve24, reject) => {
       let settled2 = false;
       const exchangeAbort = new AbortController();
       const shutdown = () => {
@@ -133832,7 +134072,7 @@ async function browserLogin({
             }
             const data = asTokenExchangeResponse(await exchangeRes.json());
             await sendRedirect(cliLoginCompleteUrl(appUrl));
-            closeAndSettle(() => resolve23(data));
+            closeAndSettle(() => resolve24(data));
           } catch (err2) {
             const msg = err2 instanceof Error ? err2.message : String(err2);
             try {
@@ -134876,7 +135116,7 @@ __export(secret_exports, {
   handleSecretReveal: () => handleSecretReveal,
   handleSecretSet: () => handleSecretSet
 });
-import { readFileSync as readFileSync27, writeFileSync as writeFileSync8 } from "fs";
+import { readFileSync as readFileSync28, writeFileSync as writeFileSync8 } from "fs";
 async function readStdin2() {
   const chunks = [];
   for await (const chunk2 of process.stdin) chunks.push(chunk2);
@@ -134989,7 +135229,7 @@ async function handleSecretReveal(key, opts, writer = stdoutWriter) {
 async function handleSecretImport(opts, writer = stdoutWriter) {
   const out = createOutput({}, writer);
   try {
-    const text5 = opts.file ? readFileSync27(opts.file, "utf8") : await readStdin2();
+    const text5 = opts.file ? readFileSync28(opts.file, "utf8") : await readStdin2();
     const environmentId = opts.env ? await resolveEnvironmentId2(opts.env) : null;
     const { rows, committed } = await apiPostOrThrow("secret/import-env", { text: text5, environmentId, commit: !!opts.yes });
     const newCount = rows.filter((r) => r.isNewKey).length;