@plannotator/opencode 0.28.38 → 0.28.40

package/dist/embedded.js

@@ -338,10 +338,10 @@ function isLoopbackHostHeader(hostHeader, port, localName) {
 }
 
 // ../../packages/shared/inbox/connection.ts
-var INBOX_REPLY_TO_CHECK = "Before reply_to into a thread you have not read in this context window, call read_thread with no id and match the subject.", INBOX_REF_LINK_RULE = "A bare #123 links to this project's repository. For an issue or PR in another repo, write owner/repo#123 or its full URL (in a GitLab project, a GitHub one needs its URL).", INBOX_CHANNEL_RULE = "A decision in the Inbox stays there: when the person writes in the chat, say what waits and link its thread, but never also ask it in the chat with a blocking question tool (AskUserQuestion or similar). Ask in the chat only about something new they raised there that needs no pictures or files, or when they ask.", INBOX_USE_RULE = "Use it for a decision only they can make (a :::question block; go on with other work), finished long work (a short summary, files in `attachments`), or when they ask.", INBOX_FOLLOW_THROUGH_RULE = "Be proactive about Inbox updates and about replying to the person through the Inbox when you think they would want you to. Don't withhold important updates or decisions, and don't batch updates to send later: proactivity is better than procrastination.", INBOX_SUBAGENT_RULE = "If another agent started you, report to it instead.", INBOX_AGENT_RULES, INBOX_TOOL_LEAD, INBOX_AGENT_FIELD_DESCRIPTIONS, INBOX_REMINDER_TEXT, INBOX_REMINDER_TEXT_NO_WAKE, INBOX_BRIEFING_NEVER_RUN = "Never run `plannotator inbox` just to send: send_message starts a stopped Inbox itself, and bare `plannotator inbox` opens the window for the person.", INBOX_BRIEFING_FROM_NOW_ON = "For the rest of this session, use the Inbox as above: for a decision the person is not here to make, and to hand over long work you finished.", INBOX_COMMAND_BRIEFING, INBOX_MAX_REQUEST_BYTES;
+var INBOX_REPLY_TO_CHECK = "Before reply_to into a thread you have not read in this context window, call read_thread with no id and match the subject.", INBOX_REF_LINK_RULE = "A bare #123 links to this project's repository. For an issue or PR in another repo, write owner/repo#123 or its full URL (in a GitLab project, a GitHub one needs its URL).", INBOX_CHANNEL_RULE = "A decision in the Inbox stays there: when the person writes in the chat, say what waits and link its thread, but never also ask it in the chat with a blocking question tool (AskUserQuestion or similar). Ask in the chat only about something new they raised there that needs no pictures or files, or when they ask.", INBOX_USE_RULE = "Use it for a decision only they can make (a :::question block; go on with other work), finished long work (a short summary, files in `attachments`), or when they ask.", INBOX_THREAD_RULE = "One thread per work stream, unless the person says otherwise.", INBOX_FOLLOW_THROUGH_RULE = "Be proactive about Inbox updates and about replying to the person through the Inbox when you think they would want you to. Don't withhold important updates or decisions, and don't batch updates to send later: proactivity is better than procrastination.", INBOX_SUBAGENT_RULE = "If another agent started you, report to it instead.", INBOX_AGENT_RULES, INBOX_TOOL_LEAD, INBOX_AGENT_FIELD_DESCRIPTIONS, INBOX_REMINDER_TEXT, INBOX_REMINDER_TEXT_NO_WAKE, INBOX_BRIEFING_NEVER_RUN = "Never run `plannotator inbox` just to send: send_message starts a stopped Inbox itself, and bare `plannotator inbox` opens the window for the person.", INBOX_BRIEFING_FROM_NOW_ON = "For the rest of this session, use the Inbox as above: for a decision the person is not here to make, and to hand over long work you finished.", INBOX_COMMAND_BRIEFING, INBOX_MAX_REQUEST_BYTES;
 var init_connection = __esm(() => {
-  INBOX_AGENT_RULES = `${INBOX_USE_RULE} ${INBOX_CHANNEL_RULE} ${INBOX_FOLLOW_THROUGH_RULE} ${INBOX_SUBAGENT_RULE}`;
-  INBOX_TOOL_LEAD = `The Plannotator Inbox on this machine: message the person and get their answer later, without blocking this session. ${INBOX_AGENT_RULES} Set \`action\` to a tool below, with its fields.`;
+  INBOX_AGENT_RULES = `${INBOX_USE_RULE} ${INBOX_THREAD_RULE} ${INBOX_CHANNEL_RULE} ${INBOX_FOLLOW_THROUGH_RULE} ${INBOX_SUBAGENT_RULE}`;
+  INBOX_TOOL_LEAD = `The Plannotator Inbox on this machine: message the person, get their answer later; nothing blocks. ${INBOX_AGENT_RULES} Set \`action\` to a tool below, with its fields.`;
   INBOX_AGENT_FIELD_DESCRIPTIONS = {
     send_message: {
       body: [
@@ -384,12 +384,13 @@ var init_connection = __esm(() => {
       snapshot: "Instead of guide and patch: a complete Plannotator guide snapshot, as an object or its JSON."
     }
   };
-  INBOX_REMINDER_TEXT = `Plannotator Inbox is on: when you finish long work, or need a decision only the person can make, send it with plannotator_inbox send_message and keep going. ${INBOX_FOLLOW_THROUGH_RULE} Their reply comes back here. A decision in the Inbox stays there: when the person writes here, say what waits and link its thread, but never also ask it in the chat with a blocking question tool (AskUserQuestion or similar). Run \`plannotator inbox --help\` for how it works.`;
-  INBOX_REMINDER_TEXT_NO_WAKE = `Plannotator Inbox is on: when you finish long work, or need a decision only the person can make, send it with plannotator_inbox send_message and keep going. ${INBOX_FOLLOW_THROUGH_RULE} Call wait_for_reply when you need their answer. A decision in the Inbox stays there: when the person writes here, say what waits and link its thread, but never also ask it in the chat with a blocking question tool (AskUserQuestion or similar). Run \`plannotator inbox --help\` for how it works.`;
+  INBOX_REMINDER_TEXT = `Plannotator Inbox is on: when you finish long work, or need a decision only the person can make, send it with plannotator_inbox send_message and keep going. ${INBOX_FOLLOW_THROUGH_RULE} ${INBOX_THREAD_RULE} Their reply comes back here. A decision in the Inbox stays there: when the person writes here, say what waits and link its thread, but never also ask it in the chat with a blocking question tool (AskUserQuestion or similar). Run \`plannotator inbox --help\` for how it works.`;
+  INBOX_REMINDER_TEXT_NO_WAKE = `Plannotator Inbox is on: when you finish long work, or need a decision only the person can make, send it with plannotator_inbox send_message and keep going. ${INBOX_FOLLOW_THROUGH_RULE} ${INBOX_THREAD_RULE} Call wait_for_reply when you need their answer. A decision in the Inbox stays there: when the person writes here, say what waits and link its thread, but never also ask it in the chat with a blocking question tool (AskUserQuestion or similar). Run \`plannotator inbox --help\` for how it works.`;
   INBOX_COMMAND_BRIEFING = [
     "The person opened their Plannotator Inbox with /plannotator-inbox and has its address. The Plannotator Inbox is one window on this computer where you leave the person messages, `:::question` blocks they answer with a click, and files. They answer when they can. Nothing blocks: you send, then keep working or end your turn.",
     "",
     `- ${INBOX_USE_RULE}`,
+    `- ${INBOX_THREAD_RULE}`,
     "- Send with a `plannotator_inbox` tool when you have one (it can be listed with a prefix and may need loading through tool search first): `action` `send_message`, with a markdown `body`. Otherwise call `send_message` on the Inbox's MCP server, `plannotator inbox mcp`.",
     "- send_message's result says whether the person's reply arrives in this session by itself. When it does, do not wait or poll for it: end your turn or go on with other work. When it does not, call wait_for_reply when you need the answer.",
     `- ${INBOX_CHANNEL_RULE}`,
@@ -5175,7 +5176,7 @@ import {
   writeFileSync as writeFileSync5,
   appendFileSync as appendFileSync2
 } from "fs";
-import { homedir as homedir3, hostname } from "os";
+import { homedir as homedir3, hostname, uptime } from "os";
 import { join as join9, posix, win32 as win322 } from "path";
 function autoUpdatePaths(dataDir = getPlannotatorDataDir()) {
   return {
@@ -5289,25 +5290,39 @@ function thisLockMachine() {
   } catch {}
   return { host: hostname(), boot: readTrimmed("/proc/sys/kernel/random/boot_id"), pidns };
 }
-function lockHolderGone(content, mtimeMs, now = Date.now(), machine = thisLockMachine()) {
-  if (process.platform === "win32")
-    return false;
-  if (now - mtimeMs < UPDATE_LOCK_HANDOFF_MS)
-    return false;
+function judgeLockHolder(content) {
   const holder = parseUpdateLockHolder(content);
   if (!holder || !holder.host)
-    return false;
+    return "unknown";
+  const machine = thisLockMachine();
   if (holder.host.toLowerCase() !== machine.host.toLowerCase())
-    return false;
+    return "unknown";
   if (holder.boot !== machine.boot || holder.pidns !== machine.pidns)
-    return false;
+    return "unknown";
   try {
-    process.kill(-holder.group, 0);
-    return false;
+    process.kill(process.platform === "win32" ? holder.pid : -holder.group, 0);
+    return "alive";
   } catch (err) {
-    return err?.code === "ESRCH";
+    const code = err?.code;
+    return code === "ESRCH" ? "gone" : code === "EPERM" ? "alive" : "unknown";
   }
 }
+function lockHolderGone(content, mtimeMs, now = Date.now()) {
+  if (now - mtimeMs < UPDATE_LOCK_HANDOFF_MS)
+    return false;
+  return judgeLockHolder(content) === "gone";
+}
+function lockHeld(lock, now = Date.now()) {
+  if (lockHolderGone(lock.content, lock.mtimeMs, now))
+    return false;
+  if (!lockExpired(lock.mtimeMs, now))
+    return true;
+  if (process.platform === "win32" || Math.abs(now - lock.mtimeMs) >= AUTO_UPDATE_LOCK_LIVE_MAX_MS)
+    return false;
+  if (!parseUpdateLockHolder(lock.content)?.boot && lock.mtimeMs <= now - uptime() * 1000)
+    return false;
+  return judgeLockHolder(lock.content) === "alive";
+}
 function removeJudgedLock(lockPath, judged) {
   const aside = `${lockPath}.reaped.${process.pid}.${Math.random().toString(36).slice(2)}`;
   try {
@@ -5341,7 +5356,7 @@ function acquireUpdateLock(lockPath) {
   try {
     const lock = readLock(lockPath);
     if (lock) {
-      if (!lockExpired(lock.mtimeMs) && !lockHolderGone(lock.content, lock.mtimeMs))
+      if (lockHeld(lock))
         return false;
       if (!removeJudgedLock(lockPath, lock))
         return false;
@@ -5356,7 +5371,7 @@ function acquireUpdateLock(lockPath) {
 }
 function isUpdateLockHeld(dataDir) {
   const lock = readLock(autoUpdatePaths(dataDir).lock);
-  return !!lock && !lockExpired(lock.mtimeMs) && !lockHolderGone(lock.content, lock.mtimeMs);
+  return !!lock && lockHeld(lock);
 }
 function abortLaunch(version, err, dataDir) {
   const paths = autoUpdatePaths(dataDir);
@@ -5474,6 +5489,8 @@ function installerEnv(launch) {
       PLANNOTATOR_UPDATE_SCRIPT_URL: installScriptUrl(launch.platform),
       PLANNOTATOR_UPDATE_BINARY: prepare.binary,
       PLANNOTATOR_UPDATE_ENTRY: prepare.entry,
+      GIT_HTTP_LOW_SPEED_LIMIT: process.env.GIT_HTTP_LOW_SPEED_LIMIT || "1",
+      GIT_HTTP_LOW_SPEED_TIME: process.env.GIT_HTTP_LOW_SPEED_TIME || "60",
       ...commandEnv
     }
   };
@@ -5488,7 +5505,17 @@ function launchInstaller(launch) {
       env: { ...env, PLANNOTATOR_UPDATE_DETACHED: "1" },
       windowsHide: true
     });
-    child.on("error", () => {});
+    child.on("error", (err) => {
+      if (child.pid === undefined)
+        abortLaunch(launch.version, err, join9(launch.logPath, ".."));
+    });
+    if (child.pid !== undefined) {
+      const m = thisLockMachine();
+      try {
+        writeFileSync5(launch.lockPath, `pid=${child.pid} group=${child.pid} host=${m.host} boot=${m.boot} pidns=${m.pidns}
+`);
+      } catch {}
+    }
     child.unref();
   } finally {
     closeSync2(logFd);
@@ -5602,15 +5629,28 @@ function handleUpdateRoute(req, url, ctx) {
     return Response.json({ error: refused[result.outcome] ?? "The update could not start.", code: `update_${result.outcome.replace(/-/g, "_")}` }, { status: 409 });
   })();
 }
-var AUTO_UPDATE_INTERVAL_MS, UPDATE_PREPARE_FAILED, UPDATE_CHECKSUM_MISMATCH, AUTO_UPDATE_LOCK_STALE_MS, UPDATE_LOCK_HANDOFF_MS = 5000, POSIX_WRAPPER = `
+var AUTO_UPDATE_INTERVAL_MS, UPDATE_PREPARE_FAILED, UPDATE_CHECKSUM_MISMATCH, AUTO_UPDATE_LOCK_STALE_MS, AUTO_UPDATE_LOCK_LIVE_MAX_MS, UPDATE_LOCK_HANDOFF_MS = 5000, POSIX_WRAPPER = `
 # Detached (auto-update, Update now): the lock names this wrapper's process
 # group (it leads it, so the installer and its children are in it) and this
 # machine, so an install that is gone shows as failed at once instead of
 # "Updating\u2026" for the lock's hour. The foreground \`plannotator update\` keeps
 # the lock its own process wrote.
+own_lock=""
 if [ "\${PLANNOTATOR_UPDATE_DETACHED:-}" = 1 ]; then
   printf 'pid=%s group=%s host=%s boot=%s pidns=%s\\n' "$$" "$$" "$(uname -n 2>/dev/null)"     "$(cat /proc/sys/kernel/random/boot_id 2>/dev/null)" "$(readlink /proc/$$/ns/pid 2>/dev/null)" > "$PLANNOTATOR_UPDATE_LOCK"
+else
+  own_lock=$(cat "$PLANNOTATOR_UPDATE_LOCK" 2>/dev/null)
 fi
+# Remove the lock only while it is still this run's: its line names this
+# wrapper, or it is what the lock held when this wrapper started. Never a lock
+# another install took.
+release_lock() {
+  lock_now=$(cat "$PLANNOTATOR_UPDATE_LOCK" 2>/dev/null)
+  case "$lock_now" in
+    "pid=$$ "*) rm -f "$PLANNOTATOR_UPDATE_LOCK" ;;
+    *) if [ -n "$own_lock" ] && [ "$lock_now" = "$own_lock" ]; then rm -f "$PLANNOTATOR_UPDATE_LOCK"; fi ;;
+  esac
+}
 update_dir=""
 code=1
 cleanup() {
@@ -5626,7 +5666,7 @@ on_signal() {
   cleanup
   record 130
   echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] update: interrupted"
-  rm -f "$PLANNOTATOR_UPDATE_LOCK"
+  release_lock
   exit 130
 }
 trap on_signal INT TERM HUP
@@ -5669,7 +5709,7 @@ cleanup
 # part of update.log (deriveAutoUpdateNotice tells "prepare" from "download" there).
 echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] update: install.sh exited $code"
 record "$code"
-rm -f "$PLANNOTATOR_UPDATE_LOCK"
+release_lock
 `, POWERSHELL_ALLOWED_FLAGS, POWERSHELL_WRAPPER, noticeVersion;
 var init_auto_update = __esm(() => {
   init_update_log();
@@ -5683,6 +5723,7 @@ var init_auto_update = __esm(() => {
   UPDATE_PREPARE_FAILED = UPDATE_EXIT_DOWNLOAD_FAILED;
   UPDATE_CHECKSUM_MISMATCH = UPDATE_EXIT_CHECKSUM_MISMATCH;
   AUTO_UPDATE_LOCK_STALE_MS = 60 * 60 * 1000;
+  AUTO_UPDATE_LOCK_LIVE_MAX_MS = 24 * 60 * 60 * 1000;
   POWERSHELL_ALLOWED_FLAGS = Object.values(INSTALL_FLAG_SPELLINGS).map((s) => `'${s.powershell}'`).join(",");
   POWERSHELL_WRAPPER = `
 # 130 until the installer finished: a Ctrl-C stops the pipeline, and the
@@ -5695,6 +5736,10 @@ if ($env:PLANNOTATOR_UPDATE_FLAGS) {
     if ($allowedFlags -ccontains $f) { $installFlags += $f }
   }
 }
+# The lock is removed at the end only while it is still this run's: a line
+# naming this process (launchInstaller writes it), or what it held when this
+# run started. Never a lock another install took.
+$ownLock = [string](Get-Content -Raw -ErrorAction SilentlyContinue -LiteralPath $env:PLANNOTATOR_UPDATE_LOCK)
 $tmp = Join-Path ([System.IO.Path]::GetTempPath()) ("plannotator-install-" + [guid]::NewGuid().ToString('N') + ".ps1")
 try {
   Invoke-WebRequest -UseBasicParsing -TimeoutSec 300 -Uri $env:PLANNOTATOR_UPDATE_SCRIPT_URL -OutFile $tmp
@@ -5707,7 +5752,10 @@ try {
   Remove-Item -Force -ErrorAction SilentlyContinue $tmp
   [System.IO.File]::WriteAllText($env:PLANNOTATOR_UPDATE_RESULT, ('{"version":"' + $env:PLANNOTATOR_UPDATE_VERSION + '","exitCode":' + [int]$code + '}'))
   Write-Output ("[" + (Get-Date).ToUniversalTime().ToString('o') + "] update: install.ps1 exited " + $code)
-  Remove-Item -Force -ErrorAction SilentlyContinue $env:PLANNOTATOR_UPDATE_LOCK
+  $lockNow = [string](Get-Content -Raw -ErrorAction SilentlyContinue -LiteralPath $env:PLANNOTATOR_UPDATE_LOCK)
+  if ($lockNow.StartsWith("pid=$PID ") -or ($ownLock -ne '' -and $lockNow -ceq $ownLock)) {
+    Remove-Item -Force -ErrorAction SilentlyContinue -LiteralPath $env:PLANNOTATOR_UPDATE_LOCK
+  }
 }
 `;
 });
@@ -51860,6 +51908,127 @@ var init_command_path = __esm(() => {
   WINDOWS_SHELL_EXTENSIONS = new Set([".cmd", ".bat"]);
 });
 
+// ../../packages/ai/providers/ask-ai-env.ts
+import { existsSync as existsSync15, readFileSync as readFileSync15, statSync as statSync14 } from "fs";
+import { homedir as homedir5 } from "os";
+import { dirname as dirname8, join as join22, resolve as resolve10 } from "path";
+function askAiChildEnv(env = process.env) {
+  return { ...env, ...ASK_AI_CHILD_SWITCHES };
+}
+function withAskAiChildEnv(start) {
+  const saved = Object.keys(ASK_AI_CHILD_SWITCHES).map((key) => [key, process.env[key]]);
+  Object.assign(process.env, ASK_AI_CHILD_SWITCHES);
+  try {
+    return start();
+  } finally {
+    for (const [key, value] of saved) {
+      if (value === undefined)
+        delete process.env[key];
+      else
+        process.env[key] = value;
+    }
+  }
+}
+function codexAskAiConfigArgs(configTexts) {
+  const texts = configTexts === null ? [] : typeof configTexts === "string" ? [configTexts] : configTexts;
+  if (texts.some((text) => codexInboxEntryHasUrl(text))) {
+    return ["-c", `mcp_servers.${CODEX_INBOX_SERVER}.enabled=false`];
+  }
+  return [
+    "-c",
+    `mcp_servers.${CODEX_INBOX_SERVER}={command='plannotator',args=['inbox','mcp'],env={PLANNOTATOR_ASK_AI_CHILD='1'},enabled=false}`
+  ];
+}
+function readCodexConfigTexts(cwd, env = process.env) {
+  const start = resolve10(cwd);
+  const home = env.CODEX_HOME?.trim();
+  const codexHome = home ? resolve10(start, home) : join22(homedir5(), ".codex");
+  const dirs = [];
+  for (let dir = start;; dir = dirname8(dir)) {
+    dirs.push(dir);
+    if (isGitRoot(dir))
+      break;
+    if (dirname8(dir) === dir) {
+      dirs.length = 1;
+      break;
+    }
+  }
+  const folders = [codexHome, ...dirs.map((dir) => join22(dir, ".codex")).filter((dot) => dot !== codexHome)];
+  return folders.flatMap((folder) => {
+    try {
+      return [readFileSync15(join22(folder, "config.toml"), "utf8")];
+    } catch {
+      return [];
+    }
+  });
+}
+function isGitRoot(dir) {
+  try {
+    const git = statSync14(join22(dir, ".git"));
+    return git.isFile() || git.isDirectory() && existsSync15(join22(dir, ".git", "HEAD"));
+  } catch {
+    return false;
+  }
+}
+function tomlKeyPath(text) {
+  const part = /\s*(?:"((?:[^"\\]|\\.)*)"|'([^']*)'|([A-Za-z0-9_-]+))\s*(\.|$)/y;
+  const parts = [];
+  let at = 0;
+  while (at < text.length) {
+    part.lastIndex = at;
+    const match = part.exec(text);
+    if (!match)
+      return null;
+    parts.push(match[1] ?? match[2] ?? match[3]);
+    at = part.lastIndex;
+    if (match[4] !== ".")
+      break;
+  }
+  return parts.length > 0 && at >= text.length ? parts : null;
+}
+function inlineTableKeys(value) {
+  let inner = value.replace(/"(?:[^"\\]|\\.)*"|'[^']*'/g, '""').trim();
+  if (!inner.startsWith("{"))
+    return [];
+  const close = inner.lastIndexOf("}");
+  inner = inner.slice(1, close < 0 ? undefined : close);
+  const nested = /[{[][^{}[\]]*[}\]]/;
+  while (nested.test(inner))
+    inner = inner.replace(new RegExp(nested.source, "g"), "");
+  return inner.split(",").map((member) => tomlKeyPath(member.slice(0, Math.max(0, member.indexOf("="))))?.[0]).filter((key) => key !== undefined);
+}
+function codexInboxEntryHasUrl(configText) {
+  let table = [];
+  for (const raw of configText.split(/\r?\n/)) {
+    const line = raw.trim();
+    if (!line || line.startsWith("#"))
+      continue;
+    const header = /^\[\[?([^\]]*)\]\]?\s*(?:#.*)?$/.exec(line);
+    if (header) {
+      table = tomlKeyPath(header[1]) ?? [""];
+      continue;
+    }
+    const eq = line.indexOf("=");
+    const key = eq > 0 ? tomlKeyPath(line.slice(0, eq)) : null;
+    if (!key)
+      continue;
+    const path = [...table, ...key];
+    if (path[0] !== "mcp_servers" || path[1] !== CODEX_INBOX_SERVER)
+      continue;
+    if (path.length > 2 ? path[2] === "url" : inlineTableKeys(line.slice(eq + 1)).includes("url"))
+      return true;
+  }
+  return false;
+}
+var ASK_AI_CHILD_ENV = "PLANNOTATOR_ASK_AI_CHILD", ASK_AI_CHILD_SWITCHES, CODEX_INBOX_SERVER = "plannotator-inbox";
+var init_ask_ai_env = __esm(() => {
+  ASK_AI_CHILD_SWITCHES = {
+    PLANNOTATOR_INBOX_TOOL: "0",
+    PLANNOTATOR_AGENT_TOOL: "0",
+    [ASK_AI_CHILD_ENV]: "1"
+  };
+});
+
 // ../../node_modules/.bun/@anthropic-ai+claude-agent-sdk@0.3.303+cc97d28afeb89aea/node_modules/@anthropic-ai/claude-agent-sdk/sdk.mjs
 import { createRequire as EJ } from "module";
 import { createHash as fv, randomBytes as RJ, randomUUID as Sa } from "crypto";
@@ -82191,6 +82360,7 @@ class ClaudeAgentSDKProvider {
           persistSession: false,
           settingSources: [],
           strictMcpConfig: true,
+          env: askAiChildEnv(),
           ...this.config.claudeExecutablePath && {
             pathToClaudeCodeExecutable: this.config.claudeExecutablePath
           }
@@ -82332,11 +82502,12 @@ function mapSDKMessage(msg) {
       return [{ type: "unknown", raw: msg }];
   }
 }
-var PROVIDER_NAME = "claude-agent-sdk", DEFAULT_ALLOWED_TOOLS, DEFAULT_MAX_TURNS = 99, DEFAULT_MODEL = "sonnet", MODEL_DISCOVERY_TIMEOUT_MS = 1e4, sdkQueryFn = null, ClaudeAgentSDKSession;
+var PROVIDER_NAME = "claude-agent-sdk", DEFAULT_ALLOWED_TOOLS, DEFAULT_MAX_TURNS = 99, DEFAULT_MODEL = "sonnet", MODEL_DISCOVERY_TIMEOUT_MS = 1e4, ASK_AI_DISALLOWED_TOOLS, sdkQueryFn = null, ClaudeAgentSDKSession;
 var init_claude_agent_sdk = __esm(() => {
   init_context();
   init_base_session();
   init_model_catalog();
+  init_ask_ai_env();
   init_provider();
   DEFAULT_ALLOWED_TOOLS = [
     "Read",
@@ -82351,6 +82522,7 @@ var init_claude_agent_sdk = __esm(() => {
     "Bash(git merge-base:*)",
     "Bash(git ls-files:*)"
   ];
+  ASK_AI_DISALLOWED_TOOLS = ["mcp__plannotator-inbox"];
   ClaudeAgentSDKSession = class ClaudeAgentSDKSession extends BaseSession {
     config;
     _activeQuery = null;
@@ -82414,10 +82586,12 @@ var init_claude_agent_sdk = __esm(() => {
         ...this.config.effort && { effort: this.config.effort },
         maxTurns: this.config.maxTurns,
         allowedTools: this.config.allowedTools,
+        disallowedTools: ASK_AI_DISALLOWED_TOOLS,
         cwd: this.config.cwd,
         abortController: this._currentAbort,
         includePartialMessages: true,
         persistSession: true,
+        env: askAiChildEnv(),
         ...this.config.claudeExecutablePath && {
           pathToClaudeCodeExecutable: this.config.claudeExecutablePath
         },
@@ -82668,14 +82842,15 @@ class CodexAppServerProcess {
   }
   async doStart(codexPath, cwd, initTimeoutMs) {
     const commandPath = resolveWindowsCommandShim(codexPath);
-    const command = buildWindowsCommandScriptSpawnCommand(commandPath, ["app-server"]) ?? [
+    const appServerArgs = [...codexAskAiConfigArgs(readCodexConfigTexts(cwd)), "app-server"];
+    const command = buildWindowsCommandScriptSpawnCommand(commandPath, appServerArgs) ?? [
       commandPath,
-      "app-server"
+      ...appServerArgs
     ];
     let proc;
     try {
       const [file, ...args] = command;
-      proc = spawn4(file, args, { cwd, stdio: ["pipe", "pipe", "ignore"] });
+      proc = spawn4(file, args, { cwd, env: askAiChildEnv(), stdio: ["pipe", "pipe", "ignore"] });
     } catch (err) {
       const error = err instanceof Error ? err : new Error(String(err));
       this.handleProcessEnd(error);
@@ -82951,7 +83126,9 @@ var init_codex_app_server = __esm(() => {
   init_context();
   init_provider();
   init_command_path();
+  init_ask_ai_env();
   init_model_catalog();
+  init_ask_ai_env();
   IDLE_TIMEOUT_MS = 10 * 60000;
   CodexAppServerSession = class CodexAppServerSession extends BaseSession {
     config;
@@ -83348,7 +83525,7 @@ class PiProcess {
     try {
       this.proc = Bun.spawn(command, {
         cwd,
-        env: { ...process.env },
+        env: askAiChildEnv(),
         stdin: "pipe",
         stdout: "pipe",
         stderr: "ignore"
@@ -83557,6 +83734,7 @@ var init_pi_sdk = __esm(() => {
   init_model_catalog();
   init_command_path();
   init_pi_version();
+  init_ask_ai_env();
   init_provider();
   PiSDKSession = class PiSDKSession extends BaseSession {
     config;
@@ -85774,11 +85952,11 @@ class OpenCodeProvider {
     const { createOpencodeServer, createOpencodeClient } = await getSDK();
     let server;
     try {
-      server = await createOpencodeServer({
+      server = await withAskAiChildEnv(() => createOpencodeServer({
         hostname: this.config.hostname ?? "127.0.0.1",
         port: this.config.port ?? 0,
         timeout: 15000
-      });
+      }));
     } catch (err) {
       if (err?.code === "ENOENT") {
         throw new Error("OpenCode CLI (`opencode`) was not found on PATH. Install it (https://opencode.ai) or choose a different AI provider.", { cause: err });
@@ -86115,6 +86293,7 @@ var PROVIDER_NAME4 = "opencode-sdk", sdk = null, OpenCodeSession, OPENCODE_FIRST
 var init_opencode_sdk = __esm(() => {
   init_base_session();
   init_context();
+  init_ask_ai_env();
   init_provider();
   OpenCodeSession = class OpenCodeSession extends BaseSession {
     config;
@@ -86332,18 +86511,18 @@ var QWEN_ASK_AI_SESSION_PREFIX = "a5ca1000";
 // ../../packages/ai/providers/qwen-sdk.ts
 import { spawn as spawn5 } from "child_process";
 import { readFile as readFile2 } from "fs/promises";
-import { homedir as homedir5 } from "os";
-import { join as join23, resolve as resolve11 } from "path";
-function qwenHomeDir(env = process.env, home = homedir5(), cwd = process.cwd()) {
+import { homedir as homedir6 } from "os";
+import { join as join24, resolve as resolve12 } from "path";
+function qwenHomeDir(env = process.env, home = homedir6(), cwd = process.cwd()) {
   const configured = env.QWEN_HOME?.trim();
   if (!configured)
-    return join23(home, ".qwen");
+    return join24(home, ".qwen");
   if (configured === "~")
     return home;
   if (configured.startsWith("~/") || configured.startsWith("~\\")) {
-    return join23(home, configured.slice(2));
+    return join24(home, configured.slice(2));
   }
-  return resolve11(cwd, configured);
+  return resolve12(cwd, configured);
 }
 function stripJsonComments(text) {
   let out = "";
@@ -86376,7 +86555,7 @@ function stripJsonComments(text) {
 }
 async function readQwenCatalog(qwenHome) {
   try {
-    const text = (await readFile2(join23(qwenHome, "settings.json"), "utf8")).replace(/^\uFEFF/, "");
+    const text = (await readFile2(join24(qwenHome, "settings.json"), "utf8")).replace(/^\uFEFF/, "");
     return qwenCatalogFromSettings(JSON.parse(stripJsonComments(text)));
   } catch {
     return [];
@@ -86422,7 +86601,7 @@ class QwenProcess {
     try {
       proc = spawn5(file, rest, {
         cwd,
-        env: { ...process.env },
+        env: askAiChildEnv(),
         stdio: ["pipe", "pipe", "pipe"],
         windowsHide: true
       });
@@ -86567,7 +86746,7 @@ class QwenSDKProvider {
   }
   async fetchModels() {
     const cwd = this.config.cwd ?? process.cwd();
-    const models = await readQwenCatalog(qwenHomeDir(process.env, homedir5(), cwd));
+    const models = await readQwenCatalog(qwenHomeDir(process.env, homedir6(), cwd));
     if (models.length > 0)
       this.models = models;
   }
@@ -86579,6 +86758,7 @@ var init_qwen_sdk = __esm(() => {
   init_context();
   init_provider();
   init_command_path();
+  init_ask_ai_env();
   QWEN_EXCLUDED_TOOLS = [
     "exit_plan_mode",
     "edit",
@@ -88857,8 +89037,8 @@ var init_review_core = __esm(() => {
 
 // ../../packages/shared/review-progress.ts
 import { createHash as createHash3, randomUUID } from "crypto";
-import { mkdirSync as mkdirSync11, readFileSync as readFileSync16, realpathSync as realpathSync8, renameSync as renameSync8, unlinkSync as unlinkSync8, writeFileSync as writeFileSync10 } from "fs";
-import { join as join24, resolve as resolve12 } from "path";
+import { mkdirSync as mkdirSync11, readFileSync as readFileSync17, realpathSync as realpathSync8, renameSync as renameSync8, unlinkSync as unlinkSync8, writeFileSync as writeFileSync10 } from "fs";
+import { join as join25, resolve as resolve13 } from "path";
 function reviewFileFingerprints(patch, identities) {
   const result = Object.create(null);
   for (const file of parseDiffToFiles(patch)) {
@@ -88920,11 +89100,11 @@ function canonicalPath(path) {
   try {
     return realpathSync8(path);
   } catch {
-    return resolve12(path);
+    return resolve13(path);
   }
 }
 function recordPath(snapshot, path) {
-  return join24(getPlannotatorDataDir(), "review-progress", snapshot.key, `${hash(path)}.json`);
+  return join25(getPlannotatorDataDir(), "review-progress", snapshot.key, `${hash(path)}.json`);
 }
 function loadReviewProgress(snapshot, platformViewed = []) {
   const viewedFiles = [];
@@ -88933,7 +89113,7 @@ function loadReviewProgress(snapshot, platformViewed = []) {
   for (const [path, fingerprint] of Object.entries(snapshot.fingerprints)) {
     let record;
     try {
-      const value = JSON.parse(readFileSync16(recordPath(snapshot, path), "utf8"));
+      const value = JSON.parse(readFileSync17(recordPath(snapshot, path), "utf8"));
       if (value?.v === 1 && value.path === path && typeof value.fingerprint === "string" && typeof value.viewed === "boolean" && typeof value.suppressed === "boolean")
         record = value;
     } catch {}
@@ -88957,7 +89137,7 @@ function saveReviewProgress(snapshot, changes) {
   for (const change of changes) {
     const file = recordPath(snapshot, change.path);
     const tmp = `${file}.${randomUUID()}.tmp`;
-    mkdirSync11(join24(getPlannotatorDataDir(), "review-progress", snapshot.key), { recursive: true });
+    mkdirSync11(join25(getPlannotatorDataDir(), "review-progress", snapshot.key), { recursive: true });
     try {
       const record = {
         v: 1,
@@ -89195,7 +89375,7 @@ var init_review_draft = __esm(() => {
 });
 
 // ../../packages/shared/annotate-draft.ts
-import { realpathSync as realpathSync9, statSync as statSync15 } from "fs";
+import { realpathSync as realpathSync9, statSync as statSync16 } from "fs";
 import { isAbsolute as isAbsolute7, resolve as resolvePath } from "path";
 function annotateFileDraftKey(absolutePath) {
   return `file-${contentHash(`v1|file|${absolutePath}`)}`;
@@ -89512,7 +89692,7 @@ function canonicalDocumentPath(path) {
     return null;
   try {
     const real = realpathSync9(resolvePath(path));
-    return statSync15(real).isFile() ? real : null;
+    return statSync16(real).isFile() ? real : null;
   } catch {
     return null;
   }
@@ -89583,14 +89763,14 @@ __export(exports_server, {
   startPlannotatorServer: () => startPlannotatorServer,
   stripH1: () => stripH1
 });
-import { isAbsolute as isAbsolute8, resolve as resolve13 } from "path";
-import { statSync as statSync16 } from "fs";
+import { isAbsolute as isAbsolute8, resolve as resolve14 } from "path";
+import { statSync as statSync17 } from "fs";
 async function historyProjects(historyRoot) {
   const cwdProject = await detectProjectName() ?? "_unknown";
-  if (!historyRoot || !isAbsolute8(historyRoot) || resolve13(historyRoot) === process.cwd())
+  if (!historyRoot || !isAbsolute8(historyRoot) || resolve14(historyRoot) === process.cwd())
     return [cwdProject];
   try {
-    if (!statSync16(historyRoot).isDirectory())
+    if (!statSync17(historyRoot).isDirectory())
       return [cwdProject];
   } catch {
     return [cwdProject];
@@ -90199,11 +90379,11 @@ var init_server2 = __esm(() => {
 // ../../packages/shared/diagram-engine-assets.ts
 import { createHash as createHash4 } from "crypto";
 import { readFile as readFile3 } from "fs/promises";
-import { join as join25 } from "path";
+import { join as join26 } from "path";
 function diagramEngineSourcesFromDir(dir) {
   return async () => {
     try {
-      const [engine, mermaid, graphviz] = await Promise.all(DIAGRAM_ENGINE_FILE_NAMES.map((name) => readFile3(join25(dir, `${name}.js`), "utf8")));
+      const [engine, mermaid, graphviz] = await Promise.all(DIAGRAM_ENGINE_FILE_NAMES.map((name) => readFile3(join26(dir, `${name}.js`), "utf8")));
       return { engine, mermaid, graphviz };
     } catch {
       return null;
@@ -91591,8 +91771,8 @@ var init_package_metadata = __esm(() => {
 });
 
 // ../../packages/shared/package-changes-service.ts
-import { readFileSync as readFileSync17, statSync as statSync17 } from "fs";
-import { dirname as dirname9, join as join26, parse as parsePath } from "path";
+import { readFileSync as readFileSync18, statSync as statSync18 } from "fs";
+import { dirname as dirname10, join as join27, parse as parsePath } from "path";
 function settingsNames(env) {
   const names = [
     [".npmrc", "npmrc"],
@@ -91618,7 +91798,7 @@ function userSettingsFiles(env, home) {
   if (userconfig)
     out.push([userconfig, "npmrc"]);
   else if (home)
-    out.push([join26(home, ".npmrc"), "npmrc"]);
+    out.push([join27(home, ".npmrc"), "npmrc"]);
   const globalconfig = envValue(env, "npm_config_globalconfig");
   if (globalconfig)
     out.push([globalconfig, "npmrc"]);
@@ -91632,7 +91812,7 @@ function userSettingsFiles(env, home) {
         continue;
       const hasNode = ["node", "node.exe"].some((n) => {
         try {
-          return statSync17(join26(dir, n)).isFile();
+          return statSync18(join27(dir, n)).isFile();
         } catch {
           return false;
         }
@@ -91640,30 +91820,30 @@ function userSettingsFiles(env, home) {
       if (!hasNode)
         continue;
       prefixes.add(dir);
-      prefixes.add(dirname9(dir));
+      prefixes.add(dirname10(dir));
     }
     for (const p of prefixes)
-      out.push([join26(p, "etc", "npmrc"), "npmrc"]);
+      out.push([join27(p, "etc", "npmrc"), "npmrc"]);
   }
   if (home) {
-    out.push([join26(home, ".yarnrc.yml"), "yarnrc"], [join26(home, ".yarnrc"), "yarnrcClassic"], [join26(home, ".bunfig.toml"), "bunfig"]);
+    out.push([join27(home, ".yarnrc.yml"), "yarnrc"], [join27(home, ".yarnrc"), "yarnrcClassic"], [join27(home, ".bunfig.toml"), "bunfig"]);
     const custom = envValue(env, "YARN_RC_FILENAME");
     if (custom && !custom.includes("/") && !custom.includes("\\"))
-      out.push([join26(home, custom), "yarnrc"]);
+      out.push([join27(home, custom), "yarnrc"]);
   }
-  const xdg = envValue(env, "XDG_CONFIG_HOME") ?? (home ? join26(home, ".config") : null);
+  const xdg = envValue(env, "XDG_CONFIG_HOME") ?? (home ? join27(home, ".config") : null);
   if (xdg)
-    out.push([join26(xdg, ".bunfig.toml"), "bunfig"]);
+    out.push([join27(xdg, ".bunfig.toml"), "bunfig"]);
   return out;
 }
 function readLocalSettingsFile(path) {
   try {
-    const st = statSync17(path);
+    const st = statSync18(path);
     if (!st.isFile())
       return { kind: "unreadable", reason: "not a file" };
     if (st.size > SETTINGS_MAX_BYTES)
       return { kind: "unreadable", reason: "too large" };
-    return { kind: "ok", text: readFileSync17(path, "utf-8") };
+    return { kind: "ok", text: readFileSync18(path, "utf-8") };
   } catch (err) {
     const code = err?.code;
     if (code === "ENOENT" || code === "ENOTDIR")
@@ -91726,7 +91906,7 @@ function absoluteAncestors(dir) {
     out.push(cur);
     if (cur === root)
       break;
-    const up = dirname9(cur);
+    const up = dirname10(cur);
     if (up === cur)
       break;
     cur = up;
@@ -91910,7 +92090,7 @@ function createPackageChangesService(host) {
       }
       for (const dir of dirs)
         for (const [name, kind] of names)
-          take(readLocal(join26(dir, name)), kind);
+          take(readLocal(join27(dir, name)), kind);
     } else {
       const dirs = new Set;
       for (const anchor of anchors)
@@ -92622,7 +92802,7 @@ var init_jj_core = __esm(() => {
 
 // ../../packages/shared/gitbutler-core.ts
 import { lstat as lstat4, readlink } from "fs/promises";
-import { basename as basename7, resolve as resolve14 } from "path";
+import { basename as basename7, resolve as resolve15 } from "path";
 function isUnexpectedArgumentRejection(result, flag) {
   return result.exitCode !== 0 && result.stderr.includes(`unexpected argument '${flag}'`);
 }
@@ -93097,7 +93277,7 @@ async function gitShow(runtime, ref, path, cwd) {
   return result.exitCode === 0 ? result.stdout : null;
 }
 async function readWorkingTreeFile(runtime, root, path) {
-  const fullPath = resolve14(root, path);
+  const fullPath = resolve15(root, path);
   try {
     const fileStat = await lstat4(fullPath);
     if (fileStat.isSymbolicLink())
@@ -93210,12 +93390,12 @@ var init_gitbutler_core = __esm(() => {
 // ../../packages/shared/vcs-core.ts
 import { mkdtemp } from "fs/promises";
 import { tmpdir as tmpdir2 } from "os";
-import { isAbsolute as isAbsolute9, join as join27, relative as relative6, resolve as resolve15 } from "path";
+import { isAbsolute as isAbsolute9, join as join28, relative as relative6, resolve as resolve16 } from "path";
 import { rmSync as rmSync2 } from "fs";
 function selectNearestProvider(candidates, cwd) {
   if (candidates.length === 0)
     return null;
-  const effectiveCwd = resolve15(cwd ?? process.cwd());
+  const effectiveCwd = resolve16(cwd ?? process.cwd());
   const ranked = candidates.map((candidate) => ({
     ...candidate,
     rootDepth: candidate.root ? vcsRootDepth(candidate.root) : -1,
@@ -93230,11 +93410,11 @@ function selectNearestProvider(candidates, cwd) {
   return ranked[0]?.provider ?? null;
 }
 function isSameOrAncestor(root, child) {
-  const relativePath = relative6(resolve15(root), child);
+  const relativePath = relative6(resolve16(root), child);
   return relativePath === "" || !relativePath.startsWith("..") && !isAbsolute9(relativePath);
 }
 function vcsRootDepth(root) {
-  return resolve15(root).split(/[\\/]+/).filter(Boolean).length;
+  return resolve16(root).split(/[\\/]+/).filter(Boolean).length;
 }
 function createGitProvider(runtime) {
   return {
@@ -93642,8 +93822,8 @@ function removeDirectoryBestEffort(path) {
   } catch {}
 }
 async function createSyntheticSnapshot(runtime, sourceCwd, baseCommit, patches) {
-  const tempRoot = await mkdtemp(join27(tmpdir2(), "plannotator-review-snapshot-"));
-  const snapshotCwd = join27(tempRoot, "repo");
+  const tempRoot = await mkdtemp(join28(tmpdir2(), "plannotator-review-snapshot-"));
+  const snapshotCwd = join28(tempRoot, "repo");
   const cleanup = () => removeDirectoryBestEffort(tempRoot);
   try {
     await git(runtime, sourceCwd, ["clone", "--shared", "--no-checkout", "--quiet", "--", sourceCwd, snapshotCwd]);
@@ -93756,8 +93936,8 @@ async function materializeJjSnapshot(jjRuntime, gitRuntime, options) {
   const fromRevision = await resolveJjSnapshotEndpoint(jjRuntime, endpoints.from, options.cwd);
   const toRevision = await resolveJjSnapshotEndpoint(jjRuntime, endpoints.to, options.cwd);
   const filesets = options.includedExtensions.map((extension) => `root-glob-i:"**/*${extension}"`);
-  const tempRoot = await mkdtemp(join27(tmpdir2(), "plannotator-review-jj-snapshot-"));
-  const snapshotCwd = join27(tempRoot, "repo");
+  const tempRoot = await mkdtemp(join28(tmpdir2(), "plannotator-review-jj-snapshot-"));
+  const snapshotCwd = join28(tempRoot, "repo");
   const cleanup = () => removeDirectoryBestEffort(tempRoot);
   try {
     await git(gitRuntime, tempRoot, ["init", "--quiet", "--", snapshotCwd]);
@@ -94097,7 +94277,7 @@ var init_p4 = __esm(() => {
 // ../../packages/shared/repo-file.ts
 import { constants as fsConstants } from "fs";
 import { open as open2 } from "fs/promises";
-import { resolve as resolve16 } from "path";
+import { resolve as resolve17 } from "path";
 function repoFileErrorBody(failure) {
   return {
     error: failure.message,
@@ -94162,7 +94342,7 @@ async function readRepoFile(root, rawPath, options = {}) {
   } catch {
     return fail("invalid-path", "Invalid path");
   }
-  return readFileCapped(resolve16(root, rawPath), options);
+  return readFileCapped(resolve17(root, rawPath), options);
 }
 var MAX_REPO_FILE_BYTES, decodeUtf8 = (bytes) => Buffer.from(bytes.buffer, bytes.byteOffset, bytes.byteLength).toString("utf8"), REPO_FILE_ERROR_STATUS, OPEN_FLAGS;
 var init_repo_file = __esm(() => {
@@ -96151,9 +96331,9 @@ var init_review_repo_watch = __esm(() => {
 // ../../packages/shared/semantic-diff.ts
 import { spawn as spawn6 } from "child_process";
 import { createHash as createHash5 } from "crypto";
-import { existsSync as existsSync16, mkdirSync as mkdirSync12 } from "fs";
+import { existsSync as existsSync17, mkdirSync as mkdirSync12 } from "fs";
 import { tmpdir as tmpdir3 } from "os";
-import { delimiter, join as join28 } from "path";
+import { delimiter, join as join29 } from "path";
 function defaultRunCommand(command, args, options = {}) {
   return new Promise((resolveResult) => {
     let settled = false;
@@ -96232,7 +96412,7 @@ function defaultRunCommand(command, args, options = {}) {
 function createDefaultSemanticDiffRuntime() {
   return {
     runCommand: defaultRunCommand,
-    fileExists: existsSync16,
+    fileExists: existsSync17,
     env: process.env,
     cwd: process.cwd(),
     dataDir: getPlannotatorDataDir(),
@@ -96244,15 +96424,15 @@ function semBinaryName(platform) {
   return platform === "win32" ? "sem.exe" : "sem";
 }
 function getManagedSemBinaryPath(dataDir = getPlannotatorDataDir(), platform = process.platform) {
-  return join28(dataDir, "vendor", "sem", PLANNOTATOR_SEM_VERSION, semBinaryName(platform));
+  return join29(dataDir, "vendor", "sem", PLANNOTATOR_SEM_VERSION, semBinaryName(platform));
 }
 function getSemanticDiffScratchCwd(dataDir = getPlannotatorDataDir()) {
-  const primary = join28(dataDir, "semantic-diff", "patch-only");
+  const primary = join29(dataDir, "semantic-diff", "patch-only");
   try {
     mkdirSync12(primary, { recursive: true });
     return primary;
   } catch {
-    const fallback = join28(tmpdir3(), "plannotator-semantic-diff");
+    const fallback = join29(tmpdir3(), "plannotator-semantic-diff");
     try {
       mkdirSync12(fallback, { recursive: true });
       return fallback;
@@ -96269,7 +96449,7 @@ function pathCandidates(runtime) {
     const pathext = (runtime.env.PATHEXT || ".EXE;.CMD;.BAT;.COM").split(";").map((ext) => ext.trim()).filter(Boolean);
     for (const dir of (runtime.env.PATH || "").split(runtime.pathDelimiter)) {
       for (const ext of pathext) {
-        const candidate = join28(dir, `sem${ext.toLowerCase()}`);
+        const candidate = join29(dir, `sem${ext.toLowerCase()}`);
         if (runtime.fileExists(candidate)) {
           return [{ command: candidate, source: "path", explicit: false }];
         }
@@ -96572,12 +96752,12 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "plannotator-call-flow-runtime",
-    version: "0.4.1-plannotator.2",
+    version: "0.6.0-plannotator.1",
     private: true,
     description: "Managed offline runtime for Plannotator call-flow analysis",
     dependencies: {
       "@types/node": "24.2.0",
-      calldiff: "file:calldiff-a3194d20ca91ef6a314273d634e9b9c0db1c2707.tar.gz",
+      calldiff: "file:calldiff-2086f6e4e9ed3c410bba7c94ca3dde77791b1956.tar.gz",
       "tree-sitter": "0.25.1",
       "tree-sitter-javascript": "0.25.0",
       "tree-sitter-typescript": "0.23.2",
@@ -96596,16 +96776,16 @@ var package_lock_default;
 var init_package_lock = __esm(() => {
   package_lock_default = {
     name: "plannotator-call-flow-runtime",
-    version: "0.4.1-plannotator.2",
+    version: "0.6.0-plannotator.1",
     lockfileVersion: 3,
     requires: true,
     packages: {
       "": {
         name: "plannotator-call-flow-runtime",
-        version: "0.4.1-plannotator.2",
+        version: "0.6.0-plannotator.1",
         dependencies: {
           "@types/node": "24.2.0",
-          calldiff: "file:calldiff-a3194d20ca91ef6a314273d634e9b9c0db1c2707.tar.gz",
+          calldiff: "file:calldiff-2086f6e4e9ed3c410bba7c94ca3dde77791b1956.tar.gz",
           "tree-sitter": "0.25.1",
           "tree-sitter-javascript": "0.25.0",
           "tree-sitter-typescript": "0.23.2",
@@ -96660,9 +96840,9 @@ var init_package_lock = __esm(() => {
         }
       },
       "node_modules/calldiff": {
-        version: "0.4.1",
-        resolved: "file:calldiff-a3194d20ca91ef6a314273d634e9b9c0db1c2707.tar.gz",
-        integrity: "sha512-5y6tjre5UE00qPrVFPurnk9RBdk8WlRok+0w41lxLt1MyPLOlNUEaAT2/j/nz2xWlhDm3DfDYvW/5KBD2b9TLg==",
+        version: "0.6.0",
+        resolved: "file:calldiff-2086f6e4e9ed3c410bba7c94ca3dde77791b1956.tar.gz",
+        integrity: "sha512-t+YCPz0WkETiwSOznwx3mLxVkEUe7DVACV+it2HJER7q/ha+K0IavN9IfBvP+7/ijzPXoUHgJIkAM/kg1O5S6A==",
         license: "MIT",
         dependencies: {
           incur: "^0.4.26",
@@ -96674,7 +96854,7 @@ var init_package_lock = __esm(() => {
           calldiff: "dist/cli.js"
         },
         engines: {
-          node: ">=22"
+          node: ">=22.18.0"
         }
       },
       "node_modules/incur": {
@@ -98325,23 +98505,23 @@ import {
   closeSync as closeSync5,
   mkdirSync as mkdirSync13,
   openSync as openSync5,
-  readFileSync as readFileSync18,
+  readFileSync as readFileSync19,
   rmSync as rmSync3,
-  statSync as statSync18,
+  statSync as statSync19,
   writeFileSync as writeFileSync11
 } from "fs";
-import { dirname as dirname10, join as join29 } from "path";
+import { dirname as dirname11, join as join30 } from "path";
 function hasErrorCode(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 function removeOwnedLock(lockPath, token) {
   try {
-    if (readFileSync18(lockPath, "utf8") === token)
+    if (readFileSync19(lockPath, "utf8") === token)
       rmSync3(lockPath, { force: true });
   } catch {}
 }
 async function withCallFlowInstallLock(work, options = {}) {
-  const lockPath = options.lockPath ?? join29(getPlannotatorDataDir(), "vendor", "call-flow", ".install.lock");
+  const lockPath = options.lockPath ?? join30(getPlannotatorDataDir(), "vendor", "call-flow", ".install.lock");
   const staleAfterMs = options.staleAfterMs ?? DEFAULT_STALE_AFTER_MS;
   const waitTimeoutMs = options.waitTimeoutMs ?? DEFAULT_WAIT_TIMEOUT_MS;
   const pollIntervalMs = options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
@@ -98349,7 +98529,7 @@ async function withCallFlowInstallLock(work, options = {}) {
   const sleep = options.sleep ?? ((milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)));
   const token = `${process.pid}:${randomUUID2()}`;
   const deadline = now() + waitTimeoutMs;
-  mkdirSync13(dirname10(lockPath), { recursive: true });
+  mkdirSync13(dirname11(lockPath), { recursive: true });
   while (true) {
     try {
       const descriptor = openSync5(lockPath, "wx", 384);
@@ -98363,7 +98543,7 @@ async function withCallFlowInstallLock(work, options = {}) {
       if (!hasErrorCode(error, "EEXIST"))
         throw error;
       try {
-        if (now() - statSync18(lockPath).mtimeMs > staleAfterMs) {
+        if (now() - statSync19(lockPath).mtimeMs > staleAfterMs) {
           rmSync3(lockPath);
           continue;
         }
@@ -98472,7 +98652,7 @@ var init_call_flow_languages = __esm(() => {
     { id: "java", label: "Java", extensions: [".java"], kind: "pack", packageName: "tree-sitter-java", packageVersion: "0.23.5", installSizeBytes: 1 * MB2 },
     { id: "ruby", label: "Ruby", extensions: [".rb"], kind: "pack", packageName: "tree-sitter-ruby", packageVersion: "0.23.1", installSizeBytes: 3 * MB2 },
     { id: "c", label: "C", extensions: [".c", ".h"], kind: "pack", packageName: "tree-sitter-c", packageVersion: "0.24.1", installSizeBytes: 1 * MB2 },
-    { id: "cpp", label: "C++", extensions: [".cc", ".cpp", ".cxx", ".hpp", ".hh"], kind: "pack", packageName: "tree-sitter-cpp", packageVersion: "0.23.4", installSizeBytes: 4 * MB2 },
+    { id: "cpp", label: "C++", extensions: [".cc", ".cpp", ".cu", ".cuh", ".cxx", ".hpp", ".hh"], kind: "pack", packageName: "tree-sitter-cpp", packageVersion: "0.23.4", installSizeBytes: 4 * MB2 },
     { id: "csharp", label: "C#", extensions: [".cs"], kind: "pack", packageName: "tree-sitter-c-sharp", packageVersion: "0.23.1", installSizeBytes: 6 * MB2 },
     { id: "php", label: "PHP", extensions: [".php"], kind: "pack", packageName: "tree-sitter-php", packageVersion: "0.24.2", installSizeBytes: 17 * MB2 },
     { id: "kotlin", label: "Kotlin", extensions: [".kt", ".kts"], kind: "pack", packageName: "tree-sitter-kotlin", packageVersion: "0.3.8", installSizeBytes: 4 * MB2 },
@@ -98674,28 +98854,28 @@ var init_call_flow_types = __esm(() => {
 
 // ../../packages/shared/call-flow.ts
 import { createHash as createHash6 } from "crypto";
-import { chmodSync as chmodSync2, cpSync, existsSync as existsSync17, mkdirSync as mkdirSync14, readFileSync as readFileSync19, readdirSync as readdirSync6, renameSync as renameSync9, rmSync as rmSync4, statSync as statSync19, writeFileSync as writeFileSync12 } from "fs";
+import { chmodSync as chmodSync2, cpSync, existsSync as existsSync18, mkdirSync as mkdirSync14, readFileSync as readFileSync20, readdirSync as readdirSync6, renameSync as renameSync9, rmSync as rmSync4, statSync as statSync20, writeFileSync as writeFileSync12 } from "fs";
 import { mkdtemp as mkdtemp2 } from "fs/promises";
 import { tmpdir as tmpdir4 } from "os";
-import { basename as basename8, dirname as dirname11, isAbsolute as isAbsolute11, join as join30 } from "path";
+import { basename as basename8, dirname as dirname12, isAbsolute as isAbsolute11, join as join31 } from "path";
 import { spawn as spawn7, spawnSync as spawnSync5 } from "child_process";
 function getCallFlowManagedRuntimeDir(dataDir = getPlannotatorDataDir()) {
-  return join30(dataDir, "vendor", "call-flow", `calldiff-${CALLDIFF_VERSION}`);
+  return join31(dataDir, "vendor", "call-flow", `calldiff-${CALLDIFF_VERSION}`);
 }
 function getCallFlowGrammarCacheDir(runtimeDir) {
-  return join30(runtimeDir, "grammar-cache");
+  return join31(runtimeDir, "grammar-cache");
 }
 function getLanguagePackageRoot(runtimeDir, language) {
   if (language.kind === "core")
-    return join30(runtimeDir, "node_modules", "tree-sitter-typescript");
-  return join30(getCallFlowGrammarCacheDir(runtimeDir), "node_modules", ...(language.packageName ?? "").split("/"));
+    return join31(runtimeDir, "node_modules", "tree-sitter-typescript");
+  return join31(getCallFlowGrammarCacheDir(runtimeDir), "node_modules", ...(language.packageName ?? "").split("/"));
 }
 function getLanguageLockMarker(runtimeDir, id) {
-  return join30(getCallFlowGrammarCacheDir(runtimeDir), ".plannotator-locks", `${id}.json`);
+  return join31(getCallFlowGrammarCacheDir(runtimeDir), ".plannotator-locks", `${id}.json`);
 }
 function packHasCommittedLock(runtimeDir, id) {
   try {
-    const installed = JSON.parse(readFileSync19(getLanguageLockMarker(runtimeDir, id), "utf8"));
+    const installed = JSON.parse(readFileSync20(getLanguageLockMarker(runtimeDir, id), "utf8"));
     return JSON.stringify(installed) === JSON.stringify(CALL_FLOW_PACK_LOCKS[id]);
   } catch {
     return false;
@@ -98703,7 +98883,7 @@ function packHasCommittedLock(runtimeDir, id) {
 }
 function installDirHasCommittedPackLock(installDir, id) {
   try {
-    const installed = JSON.parse(readFileSync19(join30(installDir, "package-lock.json"), "utf8"));
+    const installed = JSON.parse(readFileSync20(join31(installDir, "package-lock.json"), "utf8"));
     return JSON.stringify(installed) === JSON.stringify(CALL_FLOW_PACK_LOCKS[id]);
   } catch {
     return false;
@@ -98712,22 +98892,22 @@ function installDirHasCommittedPackLock(installDir, id) {
 function isLanguageInstalled(runtimeDir, language, managed) {
   if (language.kind === "core")
     return true;
-  const packageRoot = managed ? getLanguagePackageRoot(runtimeDir, language) : join30(runtimeDir, "node_modules", ...(language.packageName ?? "").split("/"));
+  const packageRoot = managed ? getLanguagePackageRoot(runtimeDir, language) : join31(runtimeDir, "node_modules", ...(language.packageName ?? "").split("/"));
   if (readPackageVersion(packageRoot) !== language.packageVersion)
     return false;
   return !managed || packHasCommittedLock(runtimeDir, language.id);
 }
 function readPackageVersion(packageRoot) {
   try {
-    const parsed = JSON.parse(readFileSync19(join30(packageRoot, "package.json"), "utf8"));
+    const parsed = JSON.parse(readFileSync20(join31(packageRoot, "package.json"), "utf8"));
     return typeof parsed.version === "string" ? parsed.version : null;
   } catch {
     return null;
   }
 }
 function resolvePackageEntry(packageRoot) {
-  const entry = join30(packageRoot, "dist", "run.js");
-  return existsSync17(entry) ? entry : null;
+  const entry = join31(packageRoot, "dist", "run.js");
+  return existsSync18(entry) ? entry : null;
 }
 function runtimeJson(value) {
   return `${JSON.stringify(value, null, 2)}
@@ -98735,19 +98915,29 @@ function runtimeJson(value) {
 }
 function hasCommittedRuntimeLock(runtimeDir) {
   try {
-    const lock = JSON.parse(readFileSync19(join30(runtimeDir, "package-lock.json"), "utf8"));
+    const lock = JSON.parse(readFileSync20(join31(runtimeDir, "package-lock.json"), "utf8"));
     return JSON.stringify(lock) === JSON.stringify(package_lock_default);
   } catch {
     return false;
   }
 }
-async function checkNode22(nodePath) {
+function callFlowNodeVersionSupported(version) {
+  const match = /^v?(\d+)\.(\d+)/.exec(version.trim());
+  if (!match)
+    return false;
+  const major = Number(match[1]);
+  const minor = Number(match[2]);
+  const floor = CALL_FLOW_MIN_NODE_VERSION;
+  return major > floor.major || major === floor.major && minor >= floor.minor;
+}
+async function checkCallFlowNode(nodePath) {
   const result = await runCommand(nodePath, ["--version"], { timeoutMs: 3000 });
-  const match = /^v(\d+)/.exec(result.stdout.trim());
-  if (result.exitCode !== 0 || !match)
+  const found = result.stdout.trim();
+  if (result.exitCode !== 0 || !/^v\d+\.\d+/.test(found))
     return { ok: false, message: "Node.js could not be started." };
-  if (Number(match[1]) < 22)
-    return { ok: false, message: `Node.js 22 or newer is required (found ${result.stdout.trim()}).` };
+  if (!callFlowNodeVersionSupported(found)) {
+    return { ok: false, message: `Call flow needs ${CALL_FLOW_NODE_REQUIREMENT}. You have Node.js ${found}.` };
+  }
   return { ok: true };
 }
 function findExecutable(name) {
@@ -98759,8 +98949,8 @@ function findExecutable(name) {
     if (!directory)
       continue;
     for (const extension of extensions) {
-      const candidate = join30(directory, `${name}${extension}`);
-      if (existsSync17(candidate))
+      const candidate = join31(directory, `${name}${extension}`);
+      if (existsSync18(candidate))
         return candidate;
     }
   }
@@ -98769,8 +98959,8 @@ function findExecutable(name) {
 async function preflightCallFlowNode() {
   const nodePath = findExecutable("node");
   if (!nodePath)
-    return { ok: false, reason: "node-unavailable", message: "Call flow requires Node.js 22 or newer, which was not found on PATH." };
-  const nodeCheck = await checkNode22(nodePath);
+    return { ok: false, reason: "node-unavailable", message: `Call flow needs ${CALL_FLOW_NODE_REQUIREMENT}, which was not found on PATH.` };
+  const nodeCheck = await checkCallFlowNode(nodePath);
   if (!nodeCheck.ok)
     return { ok: false, reason: "node-version", message: nodeCheck.message };
   return { ok: true };
@@ -98778,8 +98968,8 @@ async function preflightCallFlowNode() {
 async function resolveCallFlowRuntime() {
   const nodePath = findExecutable("node");
   if (!nodePath)
-    return { ok: false, reason: "node-unavailable", message: "Call flow requires Node.js 22 or newer." };
-  const nodeCheck = await checkNode22(nodePath);
+    return { ok: false, reason: "node-unavailable", message: `Call flow needs ${CALL_FLOW_NODE_REQUIREMENT}, which was not found on PATH.` };
+  const nodeCheck = await checkCallFlowNode(nodePath);
   if (!nodeCheck.ok)
     return { ok: false, reason: "node-version", message: nodeCheck.message };
   const override = process.env.PLANNOTATOR_CALLDIFF_PATH?.trim();
@@ -98792,7 +98982,7 @@ async function resolveCallFlowRuntime() {
   }
   const runtimeDir = override ?? getCallFlowManagedRuntimeDir();
   const managed = !override;
-  const packageRoot = override ? runtimeDir : join30(runtimeDir, "node_modules", "calldiff");
+  const packageRoot = override ? runtimeDir : join31(runtimeDir, "node_modules", "calldiff");
   const version = readPackageVersion(packageRoot);
   const packageEntry = resolvePackageEntry(packageRoot);
   if (!version || !packageEntry) {
@@ -98806,8 +98996,8 @@ async function resolveCallFlowRuntime() {
     return { ok: false, reason: "version-mismatch", message: `CallDiff ${version} is installed; Plannotator requires ${CALLDIFF_VERSION}.` };
   }
   if (!override) {
-    const revisionPath = join30(runtimeDir, ".calldiff-revision");
-    const installedRevision = existsSync17(revisionPath) ? readFileSync19(revisionPath, "utf8").trim() : "";
+    const revisionPath = join31(runtimeDir, ".calldiff-revision");
+    const installedRevision = existsSync18(revisionPath) ? readFileSync20(revisionPath, "utf8").trim() : "";
     if (installedRevision !== CALLDIFF_COMMIT) {
       return { ok: false, reason: "revision-mismatch", message: "The managed Call flow core is stale and needs reinstalling." };
     }
@@ -98815,7 +99005,7 @@ async function resolveCallFlowRuntime() {
       return { ok: false, reason: "runtime-lock-mismatch", message: "The managed Call flow core dependency lock is stale and needs reinstalling." };
     }
   }
-  const invalidCore = CORE_RUNTIME_DEPENDENCIES.filter(({ packageName, version: expected }) => readPackageVersion(join30(runtimeDir, "node_modules", packageName)) !== expected);
+  const invalidCore = CORE_RUNTIME_DEPENDENCIES.filter(({ packageName, version: expected }) => readPackageVersion(join31(runtimeDir, "node_modules", packageName)) !== expected);
   if (invalidCore.length > 0) {
     return {
       ok: false,
@@ -98838,8 +99028,8 @@ async function resolveCallFlowRuntime() {
   };
 }
 function writeRuntimeManifest(runtimeDir) {
-  writeFileSync12(join30(runtimeDir, "package.json"), runtimeJson(package_default), "utf8");
-  writeFileSync12(join30(runtimeDir, "package-lock.json"), runtimeJson(package_lock_default), "utf8");
+  writeFileSync12(join31(runtimeDir, "package.json"), runtimeJson(package_default), "utf8");
+  writeFileSync12(join31(runtimeDir, "package-lock.json"), runtimeJson(package_lock_default), "utf8");
 }
 function removeDirectoryBestEffort2(path) {
   try {
@@ -98928,14 +99118,14 @@ async function downloadVerifiedLockArtifacts(lock, destination, onStage) {
     if (integrity !== artifact.integrity) {
       throw new Error(`Pinned grammar package failed its repository-owned SHA-512 check: ${artifact.url}`);
     }
-    const path = join30(destination, `artifact-${index}.tgz`);
+    const path = join31(destination, `artifact-${index}.tgz`);
     writeFileSync12(path, artifact.bytes);
     verifiedPaths.push(path);
   }
   return verifiedPaths;
 }
 async function seedVerifiedNpmCache(npmPath, installDir, artifacts) {
-  const cacheDir = join30(installDir, ".verified-npm-cache");
+  const cacheDir = join31(installDir, ".verified-npm-cache");
   for (const artifact of artifacts) {
     const cached = await runCommand(npmPath, [
       "cache",
@@ -98966,31 +99156,31 @@ function removeDirectoryStrict(path) {
   rmSync4(path, { recursive: true, force: true });
 }
 function assertPathRemoved(path, description) {
-  if (existsSync17(path))
+  if (existsSync18(path))
     throw new Error(`Call-flow pruning did not remove ${description}.`);
 }
 function prunePrebuilds(packageRoot) {
-  const prebuilds = join30(packageRoot, "prebuilds");
-  if (!existsSync17(prebuilds))
+  const prebuilds = join31(packageRoot, "prebuilds");
+  if (!existsSync18(prebuilds))
     return;
   const currentPlatform = `${process.platform}-${process.arch}`;
   for (const entry of readdirSync6(prebuilds)) {
     if (entry !== currentPlatform)
-      removeDirectoryStrict(join30(prebuilds, entry));
+      removeDirectoryStrict(join31(prebuilds, entry));
   }
 }
 function assertNativePackagePruned(packageRoot) {
   for (const directory of PRUNED_PACKAGE_DIRECTORIES) {
     if (directory !== "build") {
-      assertPathRemoved(join30(packageRoot, directory), `${basename8(packageRoot)}/${directory}`);
+      assertPathRemoved(join31(packageRoot, directory), `${basename8(packageRoot)}/${directory}`);
     }
   }
-  assertPathRemoved(join30(packageRoot, "node_modules"), `${basename8(packageRoot)}/node_modules`);
+  assertPathRemoved(join31(packageRoot, "node_modules"), `${basename8(packageRoot)}/node_modules`);
   for (const file of ["binding.gyp", "grammar.js", "tree-sitter.json"]) {
-    assertPathRemoved(join30(packageRoot, file), `${basename8(packageRoot)}/${file}`);
+    assertPathRemoved(join31(packageRoot, file), `${basename8(packageRoot)}/${file}`);
   }
-  const prebuilds = join30(packageRoot, "prebuilds");
-  if (existsSync17(prebuilds)) {
+  const prebuilds = join31(packageRoot, "prebuilds");
+  if (existsSync18(prebuilds)) {
     const currentPlatform = `${process.platform}-${process.arch}`;
     const foreign = readdirSync6(prebuilds).filter((entry) => entry !== currentPlatform);
     if (foreign.length > 0) {
@@ -98998,10 +99188,10 @@ function assertNativePackagePruned(packageRoot) {
     }
   }
   const assertOnlyNativeAddons = (directory) => {
-    if (!existsSync17(directory))
+    if (!existsSync18(directory))
       return;
     for (const entry of readdirSync6(directory, { withFileTypes: true })) {
-      const path = join30(directory, entry.name);
+      const path = join31(directory, entry.name);
       if (entry.isDirectory())
         assertOnlyNativeAddons(path);
       else if (!entry.isFile() || !entry.name.endsWith(".node")) {
@@ -99009,14 +99199,14 @@ function assertNativePackagePruned(packageRoot) {
       }
     }
   };
-  assertOnlyNativeAddons(join30(packageRoot, "build"));
-  const bindings = join30(packageRoot, "bindings", "node");
-  if (existsSync17(bindings)) {
+  assertOnlyNativeAddons(join31(packageRoot, "build"));
+  const bindings = join31(packageRoot, "bindings", "node");
+  if (existsSync18(bindings)) {
     const retainedSource = readdirSync6(bindings).find((file) => file === "binding.cc" || file.endsWith("_test.js"));
     if (retainedSource)
       throw new Error(`Call-flow pruning retained ${basename8(packageRoot)}/${retainedSource}.`);
   }
-  if (existsSync17(packageRoot)) {
+  if (existsSync18(packageRoot)) {
     const wasm = readdirSync6(packageRoot).find((file) => file.endsWith(".wasm"));
     if (wasm)
       throw new Error(`Call-flow pruning retained ${basename8(packageRoot)}/${wasm}.`);
@@ -99025,67 +99215,67 @@ function assertNativePackagePruned(packageRoot) {
 function pruneCallFlowNativePackage(packageRoot) {
   const builtAddons = [];
   const collectBuiltAddons = (directory) => {
-    if (!existsSync17(directory))
+    if (!existsSync18(directory))
       return;
     for (const entry of readdirSync6(directory, { withFileTypes: true })) {
-      const path = join30(directory, entry.name);
+      const path = join31(directory, entry.name);
       if (entry.isDirectory())
         collectBuiltAddons(path);
       else if (entry.isFile() && entry.name.endsWith(".node")) {
-        builtAddons.push({ name: basename8(path), bytes: readFileSync19(path) });
+        builtAddons.push({ name: basename8(path), bytes: readFileSync20(path) });
       }
     }
   };
-  collectBuiltAddons(join30(packageRoot, "build"));
+  collectBuiltAddons(join31(packageRoot, "build"));
   prunePrebuilds(packageRoot);
   for (const directory of PRUNED_PACKAGE_DIRECTORIES) {
-    removeDirectoryStrict(join30(packageRoot, directory));
+    removeDirectoryStrict(join31(packageRoot, directory));
   }
-  removeDirectoryStrict(join30(packageRoot, "node_modules"));
-  const bindings = join30(packageRoot, "bindings", "node");
-  if (existsSync17(bindings)) {
+  removeDirectoryStrict(join31(packageRoot, "node_modules"));
+  const bindings = join31(packageRoot, "bindings", "node");
+  if (existsSync18(bindings)) {
     for (const file of readdirSync6(bindings)) {
       if (file === "binding.cc" || file.endsWith("_test.js"))
-        rmSync4(join30(bindings, file), { force: true });
+        rmSync4(join31(bindings, file), { force: true });
     }
   }
   for (const file of ["binding.gyp", "grammar.js", "tree-sitter.json"]) {
-    rmSync4(join30(packageRoot, file), { force: true });
+    rmSync4(join31(packageRoot, file), { force: true });
   }
   if (builtAddons.length > 0) {
-    const releaseDir = join30(packageRoot, "build", "Release");
+    const releaseDir = join31(packageRoot, "build", "Release");
     mkdirSync14(releaseDir, { recursive: true });
     for (const addon of builtAddons)
-      writeFileSync12(join30(releaseDir, addon.name), addon.bytes);
+      writeFileSync12(join31(releaseDir, addon.name), addon.bytes);
   }
-  if (existsSync17(packageRoot)) {
+  if (existsSync18(packageRoot)) {
     for (const file of readdirSync6(packageRoot)) {
       if (file.endsWith(".wasm"))
-        rmSync4(join30(packageRoot, file), { force: true });
+        rmSync4(join31(packageRoot, file), { force: true });
     }
   }
   assertNativePackagePruned(packageRoot);
 }
 function pruneCoreRuntime(runtimeDir) {
   for (const packageName of ["tree-sitter", ...CORE_GRAMMAR_PACKAGES]) {
-    pruneCallFlowNativePackage(join30(runtimeDir, "node_modules", packageName));
+    pruneCallFlowNativePackage(join31(runtimeDir, "node_modules", packageName));
   }
-  const packageRoot = join30(runtimeDir, "node_modules", "calldiff");
-  removeDirectoryStrict(join30(packageRoot, "src"));
-  for (const file of readdirSync6(join30(packageRoot, "dist"))) {
+  const packageRoot = join31(runtimeDir, "node_modules", "calldiff");
+  removeDirectoryStrict(join31(packageRoot, "src"));
+  for (const file of readdirSync6(join31(packageRoot, "dist"))) {
     if (file.startsWith("cli.") || file === "index.js" || file === "index.d.ts") {
-      rmSync4(join30(packageRoot, "dist", file), { force: true });
+      rmSync4(join31(packageRoot, "dist", file), { force: true });
     }
   }
   for (const packagePath of CORE_PRUNED_PACKAGES) {
-    removeDirectoryStrict(join30(runtimeDir, "node_modules", ...packagePath.split("/")));
+    removeDirectoryStrict(join31(runtimeDir, "node_modules", ...packagePath.split("/")));
   }
-  removeDirectoryStrict(join30(runtimeDir, "node_modules", ".bin"));
-  assertPathRemoved(join30(packageRoot, "src"), "calldiff/src");
+  removeDirectoryStrict(join31(runtimeDir, "node_modules", ".bin"));
+  assertPathRemoved(join31(packageRoot, "src"), "calldiff/src");
   for (const packagePath of CORE_PRUNED_PACKAGES) {
-    assertPathRemoved(join30(runtimeDir, "node_modules", ...packagePath.split("/")), `node_modules/${packagePath}`);
+    assertPathRemoved(join31(runtimeDir, "node_modules", ...packagePath.split("/")), `node_modules/${packagePath}`);
   }
-  assertPathRemoved(join30(runtimeDir, "node_modules", ".bin"), "node_modules/.bin");
+  assertPathRemoved(join31(runtimeDir, "node_modules", ".bin"), "node_modules/.bin");
 }
 function validationFilesForLanguage(id) {
   if (id === CALL_FLOW_CORE_LANGUAGE_ID) {
@@ -99095,7 +99285,7 @@ function validationFilesForLanguage(id) {
   return [`validation${extension}`];
 }
 async function validatePrunedLanguage(nodePath, runtimeDir, grammarCacheDir, ids) {
-  const extractEntry = join30(runtimeDir, "node_modules", "calldiff", "dist", "extract.js");
+  const extractEntry = join31(runtimeDir, "node_modules", "calldiff", "dist", "extract.js");
   const script = String.raw`
 import { pathToFileURL } from "node:url";
 const request = JSON.parse(process.argv[1]);
@@ -99131,39 +99321,98 @@ for (const file of request.files) mod.extractFunctions(file, "");
 }
 function ensureGrammarCacheManifest(cacheDir) {
   mkdirSync14(cacheDir, { recursive: true });
-  writeFileSync12(join30(cacheDir, "package.json"), runtimeJson({
+  writeFileSync12(join31(cacheDir, "package.json"), runtimeJson({
     name: "plannotator-calldiff-grammar-cache",
     private: true
   }), "utf8");
 }
-async function preserveValidatedLanguagePacks(nodePath, currentRuntimeDir, candidateRuntimeDir) {
+async function preserveValidatedLanguagePacks(nodePath, sourceRuntimeDirs, candidateRuntimeDir) {
   const candidateCache = getCallFlowGrammarCacheDir(candidateRuntimeDir);
   ensureGrammarCacheManifest(candidateCache);
+  const preserved = [];
   for (const language of CALL_FLOW_LANGUAGES) {
-    if (language.kind !== "pack" || !isLanguageInstalled(currentRuntimeDir, language, true))
+    if (language.kind !== "pack")
       continue;
     const packId = language.id;
-    const currentRoot = getLanguagePackageRoot(currentRuntimeDir, language);
     const candidateRoot = getLanguagePackageRoot(candidateRuntimeDir, language);
-    mkdirSync14(dirname11(candidateRoot), { recursive: true });
-    cpSync(currentRoot, candidateRoot, { recursive: true, force: true });
+    for (const sourceRuntimeDir of sourceRuntimeDirs) {
+      if (!isLanguageInstalled(sourceRuntimeDir, language, true))
+        continue;
+      mkdirSync14(dirname12(candidateRoot), { recursive: true });
+      cpSync(getLanguagePackageRoot(sourceRuntimeDir, language), candidateRoot, { recursive: true, force: true });
+      try {
+        await validatePrunedLanguage(nodePath, candidateRuntimeDir, candidateCache, [language.id]);
+        const marker = getLanguageLockMarker(candidateRuntimeDir, language.id);
+        mkdirSync14(dirname12(marker), { recursive: true });
+        writeFileSync12(marker, runtimeJson(CALL_FLOW_PACK_LOCKS[packId]), "utf8");
+        preserved.push(language.id);
+        break;
+      } catch {
+        removeDirectoryStrict(candidateRoot);
+      }
+    }
+  }
+  return preserved;
+}
+function compareVersionTriples(a, b) {
+  for (let index = 0;index < 3; index += 1) {
+    if (a[index] !== b[index])
+      return a[index] - b[index];
+  }
+  return 0;
+}
+function listStaleCallFlowRuntimeDirs(dataDir = getPlannotatorDataDir()) {
+  const currentDir = getCallFlowManagedRuntimeDir(dataDir);
+  const parent = dirname12(currentDir);
+  const current = CALLDIFF_VERSION.split(".").map(Number);
+  let entries;
+  try {
+    entries = readdirSync6(parent, { withFileTypes: true });
+  } catch {
+    return [];
+  }
+  const stale = [];
+  for (const entry of entries) {
+    if (!entry.isDirectory())
+      continue;
+    const match = MANAGED_CORE_DIR_PATTERN.exec(entry.name);
+    if (!match)
+      continue;
+    const isBackup = match[4] !== undefined;
+    const version = [Number(match[1]), Number(match[2]), Number(match[3])];
+    const order = compareVersionTriples(version, current);
+    if (order < 0 || isBackup && order === 0)
+      stale.push(join31(parent, entry.name));
+  }
+  return stale.sort();
+}
+function removeStaleCallFlowRuntimeDirs(dataDir = getPlannotatorDataDir()) {
+  const parent = dirname12(getCallFlowManagedRuntimeDir(dataDir));
+  const stamp = `${process.pid}-${Date.now()}`;
+  listStaleCallFlowRuntimeDirs(dataDir).forEach((path, index) => {
     try {
-      await validatePrunedLanguage(nodePath, candidateRuntimeDir, candidateCache, [language.id]);
-      const marker = getLanguageLockMarker(candidateRuntimeDir, language.id);
-      mkdirSync14(dirname11(marker), { recursive: true });
-      writeFileSync12(marker, runtimeJson(CALL_FLOW_PACK_LOCKS[packId]), "utf8");
-    } catch {
-      removeDirectoryStrict(candidateRoot);
+      renameSync9(path, join31(parent, `.calldiff-stale-${stamp}-${index}`));
+    } catch {}
+  });
+  let entries;
+  try {
+    entries = readdirSync6(parent, { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    if (entry.isDirectory() && STALE_TOMBSTONE_PATTERN.test(entry.name)) {
+      removeDirectoryBestEffort2(join31(parent, entry.name));
     }
   }
 }
 function measureCallFlowDirectoryBytes(path) {
-  if (!existsSync17(path))
+  if (!existsSync18(path))
     return 0;
-  const stat = statSync19(path);
+  const stat = statSync20(path);
   if (!stat.isDirectory())
     return stat.size;
-  return readdirSync6(path).reduce((total, entry) => total + measureCallFlowDirectoryBytes(join30(path, entry)), 0);
+  return readdirSync6(path).reduce((total, entry) => total + measureCallFlowDirectoryBytes(join31(path, entry)), 0);
 }
 async function installCallFlowRuntime(onStage = () => {}) {
   return await withCallFlowInstallLock(() => installCallFlowRuntimeUnlocked(onStage));
@@ -99173,22 +99422,23 @@ async function installCallFlowRuntimeUnlocked(onStage) {
   const nodePath = findExecutable("node");
   const npmPath = findExecutable("npm");
   if (!nodePath || !npmPath) {
-    return { ok: false, status: "failed", runtimeDir, message: "Call-flow runtime requires Node.js 22+ and npm." };
+    return { ok: false, status: "failed", runtimeDir, message: `Call flow needs ${CALL_FLOW_NODE_REQUIREMENT} and npm on PATH.` };
   }
-  const nodeCheck = await checkNode22(nodePath);
+  const nodeCheck = await checkCallFlowNode(nodePath);
   if (!nodeCheck.ok)
     return { ok: false, status: "failed", runtimeDir, message: nodeCheck.message };
   const existing = await resolveCallFlowRuntime();
   if (existing.ok && existing.runtime.runtimeDir === runtimeDir) {
+    removeStaleCallFlowRuntimeDirs();
     return { ok: true, status: "already-installed", runtimeDir, languageId: CALL_FLOW_CORE_LANGUAGE_ID, message: `Call-flow core already installed at ${runtimeDir}.` };
   }
-  const runtimeParent = dirname11(runtimeDir);
+  const runtimeParent = dirname12(runtimeDir);
   mkdirSync14(runtimeParent, { recursive: true });
-  const installDir = await mkdtemp2(join30(runtimeParent, ".calldiff-install-"));
+  const installDir = await mkdtemp2(join31(runtimeParent, ".calldiff-install-"));
   const backupDir = `${runtimeDir}.previous-${process.pid}-${Date.now()}`;
   try {
     writeRuntimeManifest(installDir);
-    await downloadVerifiedCallDiffArchive(join30(installDir, CALLDIFF_ARCHIVE_FILE), onStage);
+    await downloadVerifiedCallDiffArchive(join31(installDir, CALLDIFF_ARCHIVE_FILE), onStage);
     onStage("installing-deps");
     const install = await runCommand(npmPath, [
       "ci",
@@ -99222,8 +99472,8 @@ async function installCallFlowRuntimeUnlocked(onStage) {
       throw new Error(rebuild.stderr.trim() || rebuild.stdout.trim() || "grammar rebuild failed");
     }
     onStage("building");
-    const packageRoot = join30(installDir, "node_modules", "calldiff");
-    const tscPath = process.platform === "win32" ? join30(installDir, "node_modules", ".bin", "tsc.cmd") : join30(installDir, "node_modules", ".bin", "tsc");
+    const packageRoot = join31(installDir, "node_modules", "calldiff");
+    const tscPath = process.platform === "win32" ? join31(installDir, "node_modules", ".bin", "tsc.cmd") : join31(installDir, "node_modules", ".bin", "tsc");
     const build = await runCommand(tscPath, ["-p", "tsconfig.json"], {
       cwd: packageRoot,
       timeoutMs: 120000,
@@ -99232,8 +99482,8 @@ async function installCallFlowRuntimeUnlocked(onStage) {
     if (build.exitCode !== 0) {
       throw new Error(build.stderr.trim() || build.stdout.trim() || "CallDiff TypeScript build failed");
     }
-    rmSync4(join30(installDir, CALLDIFF_ARCHIVE_FILE), { force: true });
-    writeFileSync12(join30(installDir, ".calldiff-revision"), `${CALLDIFF_COMMIT}
+    rmSync4(join31(installDir, CALLDIFF_ARCHIVE_FILE), { force: true });
+    writeFileSync12(join31(installDir, ".calldiff-revision"), `${CALLDIFF_COMMIT}
 `, "utf8");
     if (readPackageVersion(packageRoot) !== CALLDIFF_VERSION || !resolvePackageEntry(packageRoot)) {
       throw new Error("The verified CallDiff package did not produce the expected runtime entry.");
@@ -99246,18 +99496,19 @@ async function installCallFlowRuntimeUnlocked(onStage) {
     await validatePrunedLanguage(nodePath, installDir, getCallFlowGrammarCacheDir(installDir), [CALL_FLOW_CORE_LANGUAGE_ID]);
     const sizeAfterPruneBytes = measureCallFlowDirectoryBytes(installDir);
     const nextCache = getCallFlowGrammarCacheDir(installDir);
-    await preserveValidatedLanguagePacks(nodePath, runtimeDir, installDir);
+    await preserveValidatedLanguagePacks(nodePath, [runtimeDir, ...listStaleCallFlowRuntimeDirs()], installDir);
     ensureGrammarCacheManifest(nextCache);
-    if (existsSync17(runtimeDir))
+    if (existsSync18(runtimeDir))
       renameSync9(runtimeDir, backupDir);
     try {
       renameSync9(installDir, runtimeDir);
     } catch (error) {
-      if (existsSync17(backupDir))
+      if (existsSync18(backupDir))
         renameSync9(backupDir, runtimeDir);
       throw error;
     }
     removeDirectoryBestEffort2(backupDir);
+    removeStaleCallFlowRuntimeDirs();
     return { ok: true, status: "installed", runtimeDir, languageId: CALL_FLOW_CORE_LANGUAGE_ID, sizeBeforePruneBytes, sizeAfterPruneBytes, message: `Installed the pruned CallDiff ${CALLDIFF_VERSION} core at ${runtimeDir}.` };
   } catch (error) {
     return {
@@ -99292,7 +99543,7 @@ async function installCallFlowLanguagePackUnlocked(id, onStage) {
   const nodePath = findExecutable("node");
   const npmPath = findExecutable("npm");
   if (!nodePath || !npmPath) {
-    return { ok: false, status: "failed", runtimeDir, message: "Call-flow language packs require Node.js 22+ and npm." };
+    return { ok: false, status: "failed", runtimeDir, message: `Call flow language support needs ${CALL_FLOW_NODE_REQUIREMENT} and npm on PATH.` };
   }
   const runtime = await resolveCallFlowRuntime();
   if (!runtime.ok || !runtime.runtime.managed || runtime.runtime.runtimeDir !== runtimeDir) {
@@ -99301,17 +99552,17 @@ async function installCallFlowLanguagePackUnlocked(id, onStage) {
   if (runtime.runtime.installedLanguageIds.includes(id)) {
     return { ok: true, status: "already-installed", runtimeDir, languageId: id, message: `${language.label} support is already installed.` };
   }
-  const runtimeParent = dirname11(runtimeDir);
-  const installDir = await mkdtemp2(join30(runtimeParent, `.calldiff-${id}-install-`));
-  const stagingCache = await mkdtemp2(join30(runtimeDir, `.grammar-cache-${id}-`));
-  const packageRoot = join30(installDir, "node_modules", ...(language.packageName ?? "").split("/"));
-  const stagedPackageRoot = join30(stagingCache, "node_modules", ...(language.packageName ?? "").split("/"));
+  const runtimeParent = dirname12(runtimeDir);
+  const installDir = await mkdtemp2(join31(runtimeParent, `.calldiff-${id}-install-`));
+  const stagingCache = await mkdtemp2(join31(runtimeDir, `.grammar-cache-${id}-`));
+  const packageRoot = join31(installDir, "node_modules", ...(language.packageName ?? "").split("/"));
+  const stagedPackageRoot = join31(stagingCache, "node_modules", ...(language.packageName ?? "").split("/"));
   const finalPackageRoot = getLanguagePackageRoot(runtimeDir, language);
   const backupPackageRoot = `${finalPackageRoot}.previous-${process.pid}-${Date.now()}`;
   try {
-    writeFileSync12(join30(installDir, "package.json"), runtimeJson(packManifest(id)), "utf8");
-    writeFileSync12(join30(installDir, "package-lock.json"), runtimeJson(CALL_FLOW_PACK_LOCKS[id]), "utf8");
-    const verifiedArtifacts = await downloadVerifiedLockArtifacts(CALL_FLOW_PACK_LOCKS[id], join30(installDir, ".verified-artifacts"), onStage);
+    writeFileSync12(join31(installDir, "package.json"), runtimeJson(packManifest(id)), "utf8");
+    writeFileSync12(join31(installDir, "package-lock.json"), runtimeJson(CALL_FLOW_PACK_LOCKS[id]), "utf8");
+    const verifiedArtifacts = await downloadVerifiedLockArtifacts(CALL_FLOW_PACK_LOCKS[id], join31(installDir, ".verified-artifacts"), onStage);
     const npmCacheDir = await seedVerifiedNpmCache(npmPath, installDir, verifiedArtifacts);
     onStage("installing-deps");
     const install = await runCommand(npmPath, [
@@ -99362,21 +99613,21 @@ async function installCallFlowLanguagePackUnlocked(id, onStage) {
     const sizeBeforePruneBytes = measureCallFlowDirectoryBytes(packageRoot);
     pruneCallFlowNativePackage(packageRoot);
     const sizeAfterPruneBytes = measureCallFlowDirectoryBytes(packageRoot);
-    mkdirSync14(dirname11(stagedPackageRoot), { recursive: true });
+    mkdirSync14(dirname12(stagedPackageRoot), { recursive: true });
     cpSync(packageRoot, stagedPackageRoot, { recursive: true });
     ensureGrammarCacheManifest(stagingCache);
     await validatePrunedLanguage(nodePath, runtimeDir, stagingCache, [id]);
     ensureGrammarCacheManifest(getCallFlowGrammarCacheDir(runtimeDir));
-    mkdirSync14(dirname11(finalPackageRoot), { recursive: true });
-    if (existsSync17(finalPackageRoot))
+    mkdirSync14(dirname12(finalPackageRoot), { recursive: true });
+    if (existsSync18(finalPackageRoot))
       renameSync9(finalPackageRoot, backupPackageRoot);
     try {
       renameSync9(stagedPackageRoot, finalPackageRoot);
-      mkdirSync14(dirname11(getLanguageLockMarker(runtimeDir, id)), { recursive: true });
+      mkdirSync14(dirname12(getLanguageLockMarker(runtimeDir, id)), { recursive: true });
       writeFileSync12(getLanguageLockMarker(runtimeDir, id), runtimeJson(CALL_FLOW_PACK_LOCKS[id]), "utf8");
     } catch (error) {
       removeDirectoryBestEffort2(finalPackageRoot);
-      if (existsSync17(backupPackageRoot))
+      if (existsSync18(backupPackageRoot))
         renameSync9(backupPackageRoot, finalPackageRoot);
       throw error;
     }
@@ -99487,15 +99738,15 @@ async function runCommand(executable, args, options = {}) {
 }
 function grammarChecksForLanguages(runtime, ids) {
   const checks = new Map;
-  const callDiffRoot = runtime.managed ? join30(runtime.runtimeDir, "node_modules", "calldiff") : runtime.runtimeDir;
+  const callDiffRoot = runtime.managed ? join31(runtime.runtimeDir, "node_modules", "calldiff") : runtime.runtimeDir;
   checks.set("calldiff", {
-    packageJson: join30(callDiffRoot, "package.json"),
+    packageJson: join31(callDiffRoot, "package.json"),
     version: CALLDIFF_VERSION,
     message: `CallDiff ${CALLDIFF_VERSION} is not installed.`
   });
   for (const dependency of CORE_RUNTIME_DEPENDENCIES) {
     checks.set(dependency.packageName, {
-      packageJson: join30(runtime.runtimeDir, "node_modules", dependency.packageName, "package.json"),
+      packageJson: join31(runtime.runtimeDir, "node_modules", dependency.packageName, "package.json"),
       version: dependency.version,
       message: `${dependency.label} support is not installed at the required version.`
     });
@@ -99504,9 +99755,9 @@ function grammarChecksForLanguages(runtime, ids) {
     const language = getCallFlowLanguage(id);
     if (language.kind !== "pack" || !language.packageName || !language.packageVersion)
       continue;
-    const packageRoot = runtime.managed ? getLanguagePackageRoot(runtime.runtimeDir, language) : join30(runtime.runtimeDir, "node_modules", ...language.packageName.split("/"));
+    const packageRoot = runtime.managed ? getLanguagePackageRoot(runtime.runtimeDir, language) : join31(runtime.runtimeDir, "node_modules", ...language.packageName.split("/"));
     checks.set(language.packageName, {
-      packageJson: join30(packageRoot, "package.json"),
+      packageJson: join31(packageRoot, "package.json"),
       version: language.packageVersion,
       message: `${language.label} support is not installed.`
     });
@@ -99514,14 +99765,14 @@ function grammarChecksForLanguages(runtime, ids) {
   return [...checks.values()];
 }
 async function createNpmBlocker() {
-  const root = await mkdtemp2(join30(tmpdir4(), "plannotator-call-flow-path-"));
+  const root = await mkdtemp2(join31(tmpdir4(), "plannotator-call-flow-path-"));
   if (process.platform === "win32") {
-    writeFileSync12(join30(root, "npm.cmd"), `@echo CallDiff package installation is disabled during analysis. 1>&2\r
+    writeFileSync12(join31(root, "npm.cmd"), `@echo CallDiff package installation is disabled during analysis. 1>&2\r
 @exit /b 91\r
 `, "utf8");
-    writeFileSync12(join30(root, "npm.exe"), "", "utf8");
+    writeFileSync12(join31(root, "npm.exe"), "", "utf8");
   } else {
-    const blocker = join30(root, "npm");
+    const blocker = join31(root, "npm");
     writeFileSync12(blocker, `#!/bin/sh
 echo 'CallDiff package installation is disabled during analysis.' >&2
 exit 91
@@ -99884,7 +100135,7 @@ class CallFlowService {
     }
   }
 }
-var CALLDIFF_VERSION = "0.4.1", CALLDIFF_COMMIT = "a3194d20ca91ef6a314273d634e9b9c0db1c2707", CALLDIFF_SOURCE_SPEC, CALLDIFF_SOURCE_INTEGRITY = "sha512-5y6tjre5UE00qPrVFPurnk9RBdk8WlRok+0w41lxLt1MyPLOlNUEaAT2/j/nz2xWlhDm3DfDYvW/5KBD2b9TLg==", CALLDIFF_TREE_SITTER_VERSION = "0.25.1", CALLDIFF_ARCHIVE_FILE, MAX_CALLDIFF_ARCHIVE_BYTES, MAX_PACK_ARCHIVES_BYTES, CORE_GRAMMAR_PACKAGES, CORE_RUNTIME_DEPENDENCIES, CORE_PRUNED_PACKAGES, WORKER_TIMEOUT_MS = 45000, GIT_TIMEOUT_MS = 20000, MAX_PROCESS_OUTPUT_BYTES, CallFlowMissingGrammarError, WORKER_SOURCE, PRUNED_PACKAGE_DIRECTORIES;
+var CALLDIFF_VERSION = "0.6.0", CALLDIFF_COMMIT = "2086f6e4e9ed3c410bba7c94ca3dde77791b1956", CALLDIFF_SOURCE_SPEC, CALLDIFF_SOURCE_INTEGRITY = "sha512-t+YCPz0WkETiwSOznwx3mLxVkEUe7DVACV+it2HJER7q/ha+K0IavN9IfBvP+7/ijzPXoUHgJIkAM/kg1O5S6A==", CALLDIFF_TREE_SITTER_VERSION = "0.25.1", CALL_FLOW_MIN_NODE_VERSION, CALL_FLOW_NODE_REQUIREMENT = "Node.js 22.18 or newer", CALLDIFF_ARCHIVE_FILE, MAX_CALLDIFF_ARCHIVE_BYTES, MAX_PACK_ARCHIVES_BYTES, CORE_GRAMMAR_PACKAGES, CORE_RUNTIME_DEPENDENCIES, CORE_PRUNED_PACKAGES, WORKER_TIMEOUT_MS = 45000, GIT_TIMEOUT_MS = 20000, MAX_PROCESS_OUTPUT_BYTES, CallFlowMissingGrammarError, WORKER_SOURCE, PRUNED_PACKAGE_DIRECTORIES, MANAGED_CORE_DIR_PATTERN, STALE_TOMBSTONE_PATTERN;
 var init_call_flow = __esm(() => {
   init_package();
   init_package_lock();
@@ -99895,6 +100146,7 @@ var init_call_flow = __esm(() => {
   init_review_core();
   init_call_flow_types();
   CALLDIFF_SOURCE_SPEC = `https://github.com/tanishqkancharla/calldiff/archive/${CALLDIFF_COMMIT}.tar.gz`;
+  CALL_FLOW_MIN_NODE_VERSION = { major: 22, minor: 18 };
   CALLDIFF_ARCHIVE_FILE = `calldiff-${CALLDIFF_COMMIT}.tar.gz`;
   MAX_CALLDIFF_ARCHIVE_BYTES = 20 * 1024 * 1024;
   MAX_PACK_ARCHIVES_BYTES = 256 * 1024 * 1024;
@@ -99978,6 +100230,8 @@ try {
     "typescript",
     "tsx"
   ];
+  MANAGED_CORE_DIR_PATTERN = /^calldiff-(\d+)\.(\d+)\.(\d+)(\.previous-\d+-\d+)?$/;
+  STALE_TOMBSTONE_PATTERN = /^\.calldiff-stale-\d+-\d+-\d+$/;
 });
 
 // ../../packages/shared/call-flow-install.ts
@@ -100984,15 +101238,16 @@ var init_claude_review = __esm(() => {
     "Bash(glab api *)",
     "Bash(jj --config*)",
     "Bash(jj * --config*)",
-    "Bash(jj * --tool*)"
+    "Bash(jj * --tool*)",
+    "mcp__plannotator-inbox"
   ];
   CLAUDE_SHELL_BLOCKED_WARNING = "Claude Code refused every shell command this job tried, so it could not inspect the repository with git. " + "If your Claude Code settings enable its sandbox and the sandbox cannot start on this machine " + "(for example Linux without bubblewrap and socat), set PLANNOTATOR_CLAUDE_SANDBOX=0 or " + '{ "claudeSandbox": false } in ~/.plannotator/config.json and run the job again.';
 });
 
 // ../../packages/shared/agent-program.ts
 import { spawn as spawn8 } from "child_process";
-import { existsSync as existsSync18, realpathSync as realpathSync10, statSync as statSync20 } from "fs";
-import { dirname as dirname12, join as join31 } from "path";
+import { existsSync as existsSync19, realpathSync as realpathSync10, statSync as statSync21 } from "fs";
+import { dirname as dirname13, join as join32 } from "path";
 function killTree(pid) {
   if (pid === undefined)
     return;
@@ -101045,8 +101300,8 @@ function readVersionLine(path, timeoutMs = VERSION_PROBE_TIMEOUT_MS) {
 }
 function inInstallLayout(real, realName, platform) {
   if (platform === "win32") {
-    const dir = dirname12(real);
-    return existsSync18(join31(dir, `${realName}.exe`)) || existsSync18(join31(dir, `${realName}.cmd`));
+    const dir = dirname13(real);
+    return existsSync19(join32(dir, `${realName}.exe`)) || existsSync19(join32(dir, `${realName}.cmd`));
   }
   const parts = real.split("/");
   const n = parts.length;
@@ -101077,7 +101332,7 @@ var CURSOR_CLI_SIGNATURE, VERSION_PROBE_TIMEOUT_MS = 2000, MAX_VERSION_OUTPUT, W
     return false;
   let key;
   try {
-    const st = statSync20(real);
+    const st = statSync21(real);
     if (!st.isFile())
       return false;
     key = [real, st.size, st.mtimeMs, signature.versionLine.source].join("\x00");
@@ -101877,10 +102132,10 @@ var init_guide2 = __esm(() => {
 });
 
 // ../../packages/shared/guide-instructions-store.ts
-import { mkdirSync as mkdirSync15, readFileSync as readFileSync20, unlinkSync as unlinkSync9, writeFileSync as writeFileSync13 } from "fs";
-import { dirname as dirname13, join as join32 } from "path";
+import { mkdirSync as mkdirSync15, readFileSync as readFileSync21, unlinkSync as unlinkSync9, writeFileSync as writeFileSync13 } from "fs";
+import { dirname as dirname14, join as join33 } from "path";
 function instructionsPath() {
-  return join32(getPlannotatorDataDir(), "guide-instructions.md");
+  return join33(getPlannotatorDataDir(), "guide-instructions.md");
 }
 function bound(value) {
   const trimmed = value.trim();
@@ -101888,7 +102143,7 @@ function bound(value) {
 }
 function readGuideInstructions() {
   try {
-    return bound(readFileSync20(instructionsPath(), "utf8"));
+    return bound(readFileSync21(instructionsPath(), "utf8"));
   } catch {
     return "";
   }
@@ -101902,7 +102157,7 @@ function writeGuideInstructions(value) {
     } catch {}
     return "";
   }
-  mkdirSync15(dirname13(path), { recursive: true });
+  mkdirSync15(dirname14(path), { recursive: true });
   writeFileSync13(path, bounded + `
 `, "utf8");
   return bounded;
@@ -102034,7 +102289,7 @@ function createAgentJobHandler(options) {
         stdout: captureStdout ? "pipe" : "ignore",
         stderr: "pipe",
         env: {
-          ...process.env,
+          ...askAiChildEnv(),
           ...gitColorFreeEnvironment(process.env),
           PWD: resolvePath3(spawnCwd),
           PLANNOTATOR_AGENT_SOURCE: source,
@@ -102467,6 +102722,7 @@ function createAgentJobHandler(options) {
 }
 var BASE2 = "/api/agents", JOBS, JOBS_STREAM, CAPABILITIES, SERVER_BUILT_PROVIDERS;
 var init_agent_jobs2 = __esm(() => {
+  init_ask_ai_env();
   init_claude_review();
   init_marker_review();
   init_agent_jobs();
@@ -102491,10 +102747,10 @@ var init_agent_jobs2 = __esm(() => {
 });
 
 // ../../packages/server/codex-review.ts
-import { dirname as dirname14, join as join33 } from "path";
+import { dirname as dirname15, join as join34 } from "path";
 import { tmpdir as tmpdir5 } from "os";
 import { appendFile, mkdir, unlink, writeFile, readFile as readFile4 } from "fs/promises";
-import { existsSync as existsSync19 } from "fs";
+import { existsSync as existsSync20 } from "fs";
 async function debugLog(label, data) {
   if (!DEBUG_ENABLED)
     return;
@@ -102505,16 +102761,16 @@ async function debugLog(label, data) {
     const line = data !== undefined ? `[${timestamp}] ${label}: ${typeof data === "string" ? data : JSON.stringify(data, null, 2)}
 ` : `[${timestamp}] ${label}
 `;
-    await appendFile(join33(dataDir, "codex-review-debug.log"), line);
+    await appendFile(join34(dataDir, "codex-review-debug.log"), line);
   } catch {}
 }
 function getCodexReviewSchemaPath() {
-  return join33(getPlannotatorDataDir(), "codex-review-schema.json");
+  return join34(getPlannotatorDataDir(), "codex-review-schema.json");
 }
 async function ensureSchemaFile() {
   const schemaPath = getCodexReviewSchemaPath();
   if (!materializedSchemaPaths.has(schemaPath)) {
-    await mkdir(dirname14(schemaPath), { recursive: true });
+    await mkdir(dirname15(schemaPath), { recursive: true });
     await writeFile(schemaPath, CODEX_REVIEW_SCHEMA);
     materializedSchemaPaths.add(schemaPath);
   }
@@ -102531,6 +102787,7 @@ async function buildCodexCommand(options) {
     ...model ? ["-m", model] : [],
     ...reasoningEffort ? ["-c", `model_reasoning_effort=${reasoningEffort}`] : [],
     ...fastMode ? ["-c", "service_tier=fast"] : [],
+    ...codexAskAiConfigArgs(readCodexConfigTexts(cwd)),
     "exec",
     "--output-schema",
     schemaPath,
@@ -102552,12 +102809,12 @@ async function buildCodexCommand(options) {
   return command;
 }
 function generateOutputPath() {
-  return join33(tmpdir5(), `plannotator-codex-${crypto.randomUUID()}.json`);
+  return join34(tmpdir5(), `plannotator-codex-${crypto.randomUUID()}.json`);
 }
 async function parseCodexOutput(outputPath) {
   await debugLog("PARSE_OUTPUT_START", { outputPath });
   try {
-    if (!existsSync19(outputPath)) {
+    if (!existsSync20(outputPath)) {
       await debugLog("PARSE_OUTPUT_FILE_MISSING", outputPath);
       return null;
     }
@@ -102684,6 +102941,7 @@ var init_codex_review = __esm(() => {
   init_data_dir();
   init_review_profiles();
   init_external_annotation2();
+  init_ask_ai_env();
   DEBUG_ENABLED = !!process.env.PLANNOTATOR_DEBUG;
   CODEX_REVIEW_SCHEMA = JSON.stringify({
     type: "object",
@@ -103584,7 +103842,7 @@ var init_pr_github = __esm(() => {
 });
 
 // ../../packages/shared/pr-gitlab.ts
-import { join as join34 } from "path";
+import { join as join35 } from "path";
 import { mkdirSync as mkdirSync16, writeFileSync as writeFileSync14 } from "fs";
 function encodeProject(projectPath) {
   return encodeURIComponent(projectPath);
@@ -104101,10 +104359,10 @@ async function submitGlMRReview(runtime, ref, headSha, action, body, fileComment
       const failed = failedFileComments.map((failure) => failure.comment);
       let savedTo = null;
       try {
-        const dir = join34(getPlannotatorDataDir(), "failed-comments");
+        const dir = join35(getPlannotatorDataDir(), "failed-comments");
         mkdirSync16(dir, { recursive: true });
         const slug = `${ref.host}-${ref.projectPath.replace(/\//g, "_")}-mr${ref.iid}-${Date.now()}`;
-        savedTo = join34(dir, `${slug}.json`);
+        savedTo = join35(dir, `${slug}.json`);
         writeFileSync14(savedTo, JSON.stringify({ ref, headSha, baseSha, startSha, errors, failedComments: failed }, null, 2));
       } catch (writeErr) {
         console.error(`[plannotator] Failed to persist unposted comments: ${writeErr instanceof Error ? writeErr.message : String(writeErr)}`);
@@ -104163,7 +104421,7 @@ var init_pr_gitlab = __esm(() => {
 });
 
 // ../../packages/shared/pr-bitbucket.ts
-import { join as join35 } from "path";
+import { join as join36 } from "path";
 import { mkdirSync as mkdirSync17, writeFileSync as writeFileSync15 } from "fs";
 function context(runtime) {
   const apiBase = resolveBitbucketApiUrl();
@@ -104644,10 +104902,10 @@ async function submitBbPRReview(runtime, ref, headSha, action, body, fileComment
     const errors = failedFileComments.map((f) => f.error);
     let savedTo = null;
     try {
-      const dir = join35(getPlannotatorDataDir(), "failed-comments");
+      const dir = join36(getPlannotatorDataDir(), "failed-comments");
       mkdirSync17(dir, { recursive: true });
       const slug = `${ref.host}-${ref.workspace}_${ref.repo}-pr${ref.number}-${Date.now()}`;
-      savedTo = join35(dir, `${slug}.json`);
+      savedTo = join36(dir, `${slug}.json`);
       writeFileSync15(savedTo, JSON.stringify({ ref, headSha, errors, failedComments: failedFileComments.map((f) => f.comment) }, null, 2));
     } catch (writeErr) {
       console.error(`[plannotator] Failed to persist unposted comments: ${writeErr instanceof Error ? writeErr.message : String(writeErr)}`);
@@ -105201,7 +105459,7 @@ var init_agent_review_message = __esm(() => {
 });
 
 // ../../packages/server/tour/tour-review.ts
-import { dirname as dirname15, join as join36 } from "path";
+import { dirname as dirname16, join as join37 } from "path";
 import { tmpdir as tmpdir6 } from "os";
 import { mkdir as mkdir2, writeFile as writeFile2, readFile as readFile5, unlink as unlink2 } from "fs/promises";
 function buildTourUserMessage(patch, diffType, options, prMetadata) {
@@ -105297,19 +105555,19 @@ function buildTourClaudeCommand(prompt, model = "sonnet", effort, opts) {
   };
 }
 function tourSchemaPath() {
-  return join36(getPlannotatorDataDir(), "tour-schema.json");
+  return join37(getPlannotatorDataDir(), "tour-schema.json");
 }
 async function ensureTourSchemaFile() {
   const schemaPath = tourSchemaPath();
   if (!materializedTourSchemaPaths.has(schemaPath)) {
-    await mkdir2(dirname15(schemaPath), { recursive: true });
+    await mkdir2(dirname16(schemaPath), { recursive: true });
     await writeFile2(schemaPath, TOUR_SCHEMA_JSON);
     materializedTourSchemaPaths.add(schemaPath);
   }
   return schemaPath;
 }
 function generateTourOutputPath() {
-  return join36(tmpdir6(), `plannotator-tour-${crypto.randomUUID()}.json`);
+  return join37(tmpdir6(), `plannotator-tour-${crypto.randomUUID()}.json`);
 }
 async function buildTourCodexCommand(options) {
   const { cwd, outputPath, prompt, model, reasoningEffort, fastMode } = options;
@@ -105319,6 +105577,7 @@ async function buildTourCodexCommand(options) {
     ...model ? ["-m", model] : [],
     ...reasoningEffort ? ["-c", `model_reasoning_effort=${reasoningEffort}`] : [],
     ...fastMode ? ["-c", "service_tier=fast"] : [],
+    ...codexAskAiConfigArgs(readCodexConfigTexts(cwd)),
     "exec",
     "--output-schema",
     schemaPath,
@@ -105628,6 +105887,7 @@ callouts. The primary question is "what does this change do and why?" not
 "what's wrong with this code?"`, materializedTourSchemaPaths;
 var init_tour_review = __esm(() => {
   init_data_dir();
+  init_ask_ai_env();
   init_pr();
   init_agent_review_message();
   init_claude_review();
@@ -106131,7 +106391,7 @@ var init_guide_prompt2 = __esm(() => {
 });
 
 // ../../packages/server/guide/guide-review.ts
-import { dirname as dirname16, join as join37 } from "path";
+import { dirname as dirname17, join as join38 } from "path";
 import { tmpdir as tmpdir7 } from "os";
 import { mkdir as mkdir3, writeFile as writeFile3, readFile as readFile6, unlink as unlink3 } from "fs/promises";
 function composeGuideMethodology(extraInstructions) {
@@ -106176,19 +106436,19 @@ function buildGuideClaudeCommand(prompt, model = "sonnet", effort, opts) {
   };
 }
 function guideSchemaPath() {
-  return join37(getPlannotatorDataDir(), "guide-schema.json");
+  return join38(getPlannotatorDataDir(), "guide-schema.json");
 }
 async function ensureGuideSchemaFile() {
   const schemaPath = guideSchemaPath();
   if (!materializedGuideSchemaPaths.has(schemaPath)) {
-    await mkdir3(dirname16(schemaPath), { recursive: true });
+    await mkdir3(dirname17(schemaPath), { recursive: true });
     await writeFile3(schemaPath, GUIDE_SCHEMA_JSON);
     materializedGuideSchemaPaths.add(schemaPath);
   }
   return schemaPath;
 }
 function generateGuideOutputPath() {
-  return join37(tmpdir7(), `plannotator-guide-${crypto.randomUUID()}.json`);
+  return join38(tmpdir7(), `plannotator-guide-${crypto.randomUUID()}.json`);
 }
 async function buildGuideCodexCommand(options) {
   const { cwd, outputPath, prompt, model, reasoningEffort, fastMode } = options;
@@ -106198,6 +106458,7 @@ async function buildGuideCodexCommand(options) {
     ...model ? ["-m", model] : [],
     ...reasoningEffort ? ["-c", `model_reasoning_effort=${reasoningEffort}`] : [],
     ...fastMode ? ["-c", "service_tier=fast"] : [],
+    ...codexAskAiConfigArgs(readCodexConfigTexts(cwd)),
     "exec",
     "--output-schema",
     schemaPath,
@@ -106662,6 +106923,7 @@ function createGuideSession() {
 var GUIDE_EMPTY_OUTPUT_ERROR = "Guide generation returned empty or malformed output", materializedGuideSchemaPaths, MAX_FAILED_PAYLOAD_CHARS = 200000, MAX_LAUNCH_REVIEWS = 20;
 var init_guide_review = __esm(() => {
   init_data_dir();
+  init_ask_ai_env();
   init_config2();
   init_claude_review();
   init_guide_prompt2();
@@ -107187,8 +107449,8 @@ var init_guide_share = __esm(() => {
 });
 
 // ../../packages/shared/guide-store.ts
-import { join as join38, resolve as resolve17, basename as basename10 } from "path";
-import { mkdirSync as mkdirSync18, writeFileSync as writeFileSync16, readFileSync as readFileSync21, readdirSync as readdirSync7, renameSync as renameSync10, unlinkSync as unlinkSync10, existsSync as existsSync20 } from "fs";
+import { join as join39, resolve as resolve18, basename as basename10 } from "path";
+import { mkdirSync as mkdirSync18, writeFileSync as writeFileSync16, readFileSync as readFileSync22, readdirSync as readdirSync7, renameSync as renameSync10, unlinkSync as unlinkSync10, existsSync as existsSync21 } from "fs";
 import { createHash as createHash7 } from "crypto";
 function sanitizeKeySegment(segment) {
   const cleaned = segment.replace(/[^a-zA-Z0-9._-]+/g, "-").replace(/^[.\-]+|[.\-]+$/g, "");
@@ -107215,7 +107477,7 @@ function deriveGuideRepoKeyFromPRUrl(prUrl) {
   return [ref.host, ...path.split("/").filter(Boolean)].map(sanitizeKeySegment).join("__");
 }
 function deriveGuideRepoKeyFallback(dirPath) {
-  const resolved = resolve17(dirPath);
+  const resolved = resolve18(dirPath);
   const name = sanitizeKeySegment(basename10(resolved) || "repo");
   return `${name}-${hash8(resolved)}`;
 }
@@ -107227,13 +107489,13 @@ function makeGuideId(title, now = Date.now()) {
   return `${now}-${slug || "guide"}`;
 }
 function guidesDir(repoKey) {
-  return join38(getPlannotatorDataDir(), "guides", repoKey);
+  return join39(getPlannotatorDataDir(), "guides", repoKey);
 }
 function guidePath(repoKey, id) {
-  return join38(guidesDir(repoKey), `${id}.json`);
+  return join39(guidesDir(repoKey), `${id}.json`);
 }
 function guidePatchPath(repoKey, id) {
-  return join38(guidesDir(repoKey), `${id}.patch`);
+  return join39(guidesDir(repoKey), `${id}.patch`);
 }
 function coerceReviewed(value, sectionCount) {
   const out = new Array(sectionCount).fill(false);
@@ -107361,10 +107623,10 @@ function loadGuidePatch(repoKey, envelope) {
   if (!envelope.review)
     return null;
   try {
-    const filePath = join38(guidesDir(repoKey), envelope.review.patchFile);
-    if (!existsSync20(filePath))
+    const filePath = join39(guidesDir(repoKey), envelope.review.patchFile);
+    if (!existsSync21(filePath))
       return null;
-    return readFileSync21(filePath, "utf-8");
+    return readFileSync22(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -107396,9 +107658,9 @@ function loadGuide(repoKey, id) {
     return null;
   try {
     const filePath = guidePath(repoKey, id);
-    if (!existsSync20(filePath))
+    if (!existsSync21(filePath))
       return null;
-    return parseEnvelope(readFileSync21(filePath, "utf-8"));
+    return parseEnvelope(readFileSync22(filePath, "utf-8"));
   } catch {
     return null;
   }
@@ -107445,12 +107707,12 @@ function deleteGuide(repoKey, id) {
     return false;
   try {
     const filePath = guidePath(repoKey, id);
-    if (!existsSync20(filePath))
+    if (!existsSync21(filePath))
       return false;
     unlinkSync10(filePath);
     try {
       const patchPath = guidePatchPath(repoKey, id);
-      if (existsSync20(patchPath))
+      if (existsSync21(patchPath))
         unlinkSync10(patchPath);
     } catch {}
     return true;
@@ -107649,10 +107911,10 @@ var init_guide_store = __esm(() => {
 var GUIDE_VIEWER_MANIFEST;
 var init_guide_viewer_manifest = __esm(() => {
   GUIDE_VIEWER_MANIFEST = {
-    js: "viewer.BqcO9v_d.js",
-    css: "viewer.DejL7_DK.css",
-    jsIntegrity: "sha384-hv0Y+2gJFlY9p99fic5BMf0H8suh2cpCqppFI1GPYYBfCbMLs/4fTmf3astg5o8b",
-    cssIntegrity: "sha384-RC1v6OjikD4krGxtTP5dn1SNTtuT4wQWdRSS5HSVrmAdJk97gNs5wbKca+3/0Hdl",
+    js: "viewer.CdCl9A4y.js",
+    css: "viewer.DwkeqVw0.css",
+    jsIntegrity: "sha384-2X50K3TjsKUyCt69GjPLTwRrZcYV0LS4+5Nv93J3b8gE1sFjbXaviLKYZJTZb3HS",
+    cssIntegrity: "sha384-xdeDB20PiSkAJ7ueRdgFndT6bub5IF/tjxEaq7rwDqCBe1U2gH2B7GHtIr5R59/F",
     langs: {
       astro: "chunks/astro.Ts5EKq2l.js",
       c: "chunks/c.BIGW1oBm.js",
@@ -116597,15 +116859,15 @@ var init_html_assets = __esm(() => {
 });
 
 // ../../packages/shared/html-assets-node.ts
-import { existsSync as existsSync21, readFileSync as readFileSync22, realpathSync as realpathSync11, statSync as statSync21 } from "fs";
-import { dirname as dirname17, isAbsolute as isAbsolute12, relative as relative9, resolve as resolvePath4, posix as pathPosix2, sep as sep4 } from "path";
+import { existsSync as existsSync22, readFileSync as readFileSync23, realpathSync as realpathSync11, statSync as statSync22 } from "fs";
+import { dirname as dirname18, isAbsolute as isAbsolute12, relative as relative9, resolve as resolvePath4, posix as pathPosix2, sep as sep4 } from "path";
 function htmlAssetContext(htmlFilePath, folderPath) {
-  const directory = dirname17(resolvePath4(htmlFilePath));
+  const directory = dirname18(resolvePath4(htmlFilePath));
   const ownFolder = { root: directory, basePath: "", docDir: null };
   if (!folderPath || !isWithinDirectory(htmlFilePath, folderPath))
     return ownFolder;
   const root = realpathSync11(folderPath);
-  const documentDirectory = dirname17(realpathSync11(htmlFilePath));
+  const documentDirectory = dirname18(realpathSync11(htmlFilePath));
   const basePath = relative9(root, documentDirectory).split(sep4).join("/");
   if (basePath.split("/").some((segment) => segment.startsWith(".")))
     return ownFolder;
@@ -116643,12 +116905,12 @@ function inlineHtmlLocalAssets(html, htmlFilePath, folderPath) {
           return null;
         if (docDir && !folderSessionAssetAllowed(root, docDir, assetPath))
           return null;
-        if (!existsSync21(resolved))
+        if (!existsSync22(resolved))
           return null;
-        const stat = statSync21(resolved);
+        const stat = statSync22(resolved);
         if (!stat.isFile() || stat.size > MAX_HTML_ASSET_BYTES)
           return null;
-        let bytes = readFileSync22(resolved);
+        let bytes = readFileSync23(resolved);
         if (contentType.startsWith("text/css") && !activeCss.has(assetPath)) {
           activeCss.add(assetPath);
           try {
@@ -116686,7 +116948,7 @@ function isWithinDirectory(filePath, root) {
 function resolveOpenInTarget(filePath, base, resolveRoot) {
   const provided = resolveRoot?.();
   const roots = (provided == null ? [
-    base ? resolvePath4(base) : isAbsolute12(filePath) ? dirname17(resolvePath4(filePath)) : resolvePath4(process.cwd())
+    base ? resolvePath4(base) : isAbsolute12(filePath) ? dirname18(resolvePath4(filePath)) : resolvePath4(process.cwd())
   ] : Array.isArray(provided) ? provided : [provided]).filter((r) => !!r).map((r) => resolvePath4(r));
   for (const root of roots) {
     const abs = resolvePath4(root, filePath);
@@ -116952,8 +117214,8 @@ var init_open_in = __esm(() => {
 });
 
 // ../../packages/shared/review-workspace-node.ts
-import { existsSync as existsSync22, readdirSync as readdirSync8, realpathSync as realpathSync12, statSync as statSync22 } from "fs";
-import { basename as basename11, relative as relative10, resolve as resolve18 } from "path";
+import { existsSync as existsSync23, readdirSync as readdirSync8, realpathSync as realpathSync12, statSync as statSync23 } from "fs";
+import { basename as basename11, relative as relative10, resolve as resolve19 } from "path";
 function normalizeWorkspacePath(path) {
   return path.replace(/\\/g, "/").replace(/^\/+/, "");
 }
@@ -117056,11 +117318,11 @@ function resolveWorkspaceFilePath(repos, prefixedPath) {
   return null;
 }
 function hasVcsMarker(dirPath) {
-  return VCS_MARKERS.some((marker) => existsSync22(resolve18(dirPath, marker)));
+  return VCS_MARKERS.some((marker) => existsSync23(resolve19(dirPath, marker)));
 }
 function resolveDirectoryRealPath(path) {
   try {
-    if (!statSync22(path).isDirectory())
+    if (!statSync23(path).isDirectory())
       return null;
     return realpathSync12(path);
   } catch {
@@ -117098,11 +117360,11 @@ function collectWorkspaceRepos(root, current, state, results) {
       continue;
     if (!entry.isDirectory() && !entry.isSymbolicLink())
       continue;
-    collectWorkspaceRepos(root, resolve18(current, entry.name), state, results);
+    collectWorkspaceRepos(root, resolve19(current, entry.name), state, results);
   }
 }
 function discoverWorkspaceRepoPaths(root) {
-  const resolvedRoot = resolve18(root);
+  const resolvedRoot = resolve19(root);
   const results = [];
   collectWorkspaceRepos(resolvedRoot, resolvedRoot, { visitedRealPaths: new Set, limit: getFileBrowserMaxFiles() }, results);
   return results.sort();
@@ -117129,7 +117391,7 @@ function buildRepoLabel(root, cwd, used) {
   return next;
 }
 function buildWorkspaceRepoLabels(root, repoPaths) {
-  const resolvedRoot = resolve18(root);
+  const resolvedRoot = resolve19(root);
   const usedLabels = new Set;
   return repoPaths.map((cwd) => buildRepoLabel(resolvedRoot, cwd, usedLabels));
 }
@@ -117163,7 +117425,7 @@ var init_review_workspace_node = __esm(() => {
 });
 
 // ../../packages/shared/review-workspace.ts
-import { isAbsolute as isAbsolute13, relative as relative11, resolve as resolve19 } from "path";
+import { isAbsolute as isAbsolute13, relative as relative11, resolve as resolve20 } from "path";
 function isWorkspaceDiffType(value) {
   return !!value && WORKSPACE_DIFF_TYPES.has(value);
 }
@@ -117298,7 +117560,7 @@ class WorkspaceReviewSession {
   hideWhitespace;
   constructor(runtime, root, repos, diffType, hideWhitespace) {
     this.runtime = runtime;
-    this.root = resolve19(root);
+    this.root = resolve20(root);
     this.repos = repos;
     this.diffType = diffType;
     this.hideWhitespace = hideWhitespace;
@@ -117309,7 +117571,7 @@ class WorkspaceReviewSession {
     this.error = snapshot.error;
   }
   static async create(runtime, root, options = {}) {
-    const resolvedRoot = resolve19(root);
+    const resolvedRoot = resolve20(root);
     const repoPaths = discoverWorkspaceRepoPaths(resolvedRoot);
     const labels = buildWorkspaceRepoLabels(resolvedRoot, repoPaths);
     const repos = await Promise.all(repoPaths.map(async (cwd, index) => {
@@ -118125,7 +118387,7 @@ var init_code_nav = __esm(() => {
 });
 
 // ../../packages/server/code-nav.ts
-import { resolve as resolve20 } from "path";
+import { resolve as resolve21 } from "path";
 async function handleCodeNavResolve(req, cwd, changedFiles) {
   try {
     const body = await req.json();
@@ -118184,7 +118446,7 @@ var init_code_nav2 = __esm(() => {
       return { stdout, stderr, exitCode };
     },
     async readFile(path, options) {
-      const read = await readFileCapped(options?.cwd ? resolve20(options.cwd, path) : path, {
+      const read = await readFileCapped(options?.cwd ? resolve21(options.cwd, path) : path, {
         maxBytes: CODE_NAV_MAX_FILE_BYTES,
         decode: decodeBunText
       });
@@ -118224,9 +118486,9 @@ var init_repo_files_node = __esm(() => {
 });
 
 // ../../packages/server/review.ts
-import { homedir as homedir6 } from "os";
-import { basename as basename12, dirname as dirname18, join as join39 } from "path";
-import { existsSync as existsSync23 } from "fs";
+import { homedir as homedir7 } from "os";
+import { basename as basename12, dirname as dirname19, join as join40 } from "path";
+import { existsSync as existsSync24 } from "fs";
 async function startReviewServer(options) {
   const { htmlContent, origin, gitContext, sharingEnabled = true, shareBaseUrl, onReady } = options;
   const approvalNotesSupported = options.approvalNotesSupported === true;
@@ -118336,7 +118598,7 @@ async function startReviewServer(options) {
   let baseEverSwitched = false;
   let baseExplicitlyChosen = options.initialBaseExplicit === true;
   const remoteCheckEnabled = resolveGitRemoteCheck(options.gitRemoteCheck === false, loadConfig());
-  const agentCwdIfExists = () => options.agentCwd && existsSync23(options.agentCwd) ? options.agentCwd : undefined;
+  const agentCwdIfExists = () => options.agentCwd && existsSync24(options.agentCwd) ? options.agentCwd : undefined;
   const resolvePRLocalCwd = (meta = prMetadata) => {
     const pool = options.worktreePool;
     if (pool && meta) {
@@ -118411,6 +118673,7 @@ async function startReviewServer(options) {
   const fileContentFingerprintProbes = new SingleFlight;
   const callFlowService = new CallFlowService;
   const callFlowInstall = new CallFlowInstallCoordinator({
+    ...options.callFlowInstall,
     onSettled: (ok) => {
       if (ok)
         callFlowService.invalidateRuntimeState();
@@ -119296,7 +119559,7 @@ async function startReviewServer(options) {
           kind: "local",
           dirOf: async (path) => {
             const target = resolveWorkspaceFilePath(session.repos, path);
-            return target ? dirname18(join39(target.repo.cwd, target.repoRelativePath)) : null;
+            return target ? dirname19(join40(target.repo.cwd, target.repoRelativePath)) : null;
           }
         };
       }
@@ -119325,13 +119588,13 @@ async function startReviewServer(options) {
             };
           }
           const root = await packageRepoRoot.root;
-          return root ? dirname18(join39(root, path)) : null;
+          return root ? dirname19(join40(root, path)) : null;
         }
       };
     },
     homeDir: () => {
       try {
-        return homedir6();
+        return homedir7();
       } catch {
         return null;
       }
@@ -121185,7 +121448,7 @@ var init_annotate_history = __esm(() => {
 });
 
 // ../../packages/shared/annotate-live-version.ts
-import { statSync as statSync23 } from "fs";
+import { statSync as statSync24 } from "fs";
 function refuse(status, code, error) {
   return { status, body: { ok: false, code, error } };
 }
@@ -121210,7 +121473,7 @@ function saveAnnotateLiveVersion(body, ctx) {
   const tooLarge = () => refuse(413, "too_large", "The file is too large to keep as a version (max 2MB).");
   let snapshot;
   try {
-    if ((ctx.sizeOf ?? ((path) => statSync23(path).size))(ctx.resolvedFilePath) > MAX_ANNOTATABLE_FILE_BYTES) {
+    if ((ctx.sizeOf ?? ((path) => statSync24(path).size))(ctx.resolvedFilePath) > MAX_ANNOTATABLE_FILE_BYTES) {
       return tooLarge();
     }
     snapshot = (ctx.readSnapshot ?? readSourceFileSnapshot)(ctx.resolvedFilePath);
@@ -121579,7 +121842,7 @@ var init_html_diff = __esm(() => {
 
 // ../../packages/shared/annotate-reference-roots-node.ts
 import { realpathSync as realpathSync13 } from "fs";
-import { dirname as dirname19 } from "path";
+import { dirname as dirname20 } from "path";
 function getAnnotateReferenceRootPaths(options) {
   const roots = [];
   const addRoot = (root) => {
@@ -121601,9 +121864,9 @@ function getAnnotateReferenceRootPaths(options) {
   addRoot(process.cwd());
   if (options.mode === "annotate-bundle" && options.bundlePaths) {
     for (const path of options.bundlePaths) {
-      addRoot(dirname19(path));
+      addRoot(dirname20(path));
       try {
-        addRoot(dirname19(realpathSync13(path)));
+        addRoot(dirname20(realpathSync13(path)));
       } catch {}
     }
     return roots;
@@ -121611,8 +121874,8 @@ function getAnnotateReferenceRootPaths(options) {
   if (/^https?:\/\//i.test(options.filePath)) {
     return roots;
   }
-  addRoot(dirname19(options.filePath));
-  addRoot(options.initialSingleFileSourcePath ? dirname19(options.initialSingleFileSourcePath) : null);
+  addRoot(dirname20(options.filePath));
+  addRoot(options.initialSingleFileSourcePath ? dirname20(options.initialSingleFileSourcePath) : null);
   return roots;
 }
 var init_annotate_reference_roots_node = __esm(() => {
@@ -122053,11 +122316,11 @@ function shutdown() {
 var init_agent_terminal_node_sidecar = () => {};
 
 // ../../packages/server/agent-terminal-runtime.ts
-import { existsSync as existsSync24, mkdirSync as mkdirSync19, readFileSync as readFileSync24, writeFileSync as writeFileSync17 } from "fs";
-import { join as join40 } from "path";
+import { existsSync as existsSync25, mkdirSync as mkdirSync19, readFileSync as readFileSync25, writeFileSync as writeFileSync17 } from "fs";
+import { join as join41 } from "path";
 import { fileURLToPath } from "url";
 function getAgentTerminalManagedRuntimeDir(dataDir = getPlannotatorDataDir()) {
-  return join40(dataDir, "vendor", "agent-terminal", `webtui-${AGENT_TERMINAL_WEBTUI_VERSION}`);
+  return join41(dataDir, "vendor", "agent-terminal", `webtui-${AGENT_TERMINAL_WEBTUI_VERSION}`);
 }
 function isAgentTerminalRemoteEnabled(env = process.env) {
   return isTruthy(env.PLANNOTATOR_AGENT_TERMINAL_REMOTE);
@@ -122086,7 +122349,7 @@ function resolveBundledAgentTerminalSidecarPath(moduleUrl = import.meta.url) {
   const bundledSidecarPath = fileURLToPath(new URL("./agent-terminal-node-sidecar.mjs", moduleUrl));
   if (isBunVirtualPath(bundledSidecarPath))
     return null;
-  return existsSync24(bundledSidecarPath) ? bundledSidecarPath : null;
+  return existsSync25(bundledSidecarPath) ? bundledSidecarPath : null;
 }
 async function resolveBundledAgentTerminalRuntime(nodePath, bundledSidecarPath) {
   const webtuiCoreUrl = resolveImportUrl("@plannotator/webtui/core");
@@ -122138,7 +122401,7 @@ async function resolveManagedAgentTerminalRuntime(nodePath) {
 }
 function materializeAgentTerminalSidecar(runtimeDir) {
   mkdirSync19(runtimeDir, { recursive: true });
-  const sidecarPath = join40(runtimeDir, "agent-terminal-node-sidecar.mjs");
+  const sidecarPath = join41(runtimeDir, "agent-terminal-node-sidecar.mjs");
   writeFileSync17(sidecarPath, agent_terminal_node_sidecar_default, "utf8");
   return sidecarPath;
 }
@@ -122154,11 +122417,11 @@ function tryMaterializeAgentTerminalSidecar(runtimeDir) {
   }
 }
 function readInstalledWebTuiVersion(runtimeDir) {
-  const packageJsonPath = join40(runtimeDir, "node_modules", "@plannotator", "webtui", "package.json");
-  if (!existsSync24(packageJsonPath))
+  const packageJsonPath = join41(runtimeDir, "node_modules", "@plannotator", "webtui", "package.json");
+  if (!existsSync25(packageJsonPath))
     return null;
   try {
-    const parsed = JSON.parse(readFileSync24(packageJsonPath, "utf8"));
+    const parsed = JSON.parse(readFileSync25(packageJsonPath, "utf8"));
     return typeof parsed.version === "string" ? parsed.version : null;
   } catch {
     return null;
@@ -123985,10 +124248,10 @@ function annotateBundleDocumentCounts(paths, annotations) {
 var init_annotate_bundle = () => {};
 
 // ../../packages/server/annotate.ts
-import { existsSync as existsSync25 } from "fs";
-import { dirname as dirname20, resolve as resolvePath6 } from "path";
+import { existsSync as existsSync26 } from "fs";
+import { dirname as dirname21, resolve as resolvePath6 } from "path";
 import { randomBytes as randomBytes2 } from "crypto";
-import { readFileSync as readFileSync25 } from "fs";
+import { readFileSync as readFileSync26 } from "fs";
 function runGuardedShutdown(steps, closeListener, log = (message, error) => console.error(message, error)) {
   try {
     for (const [name, dispose] of steps) {
@@ -124077,7 +124340,7 @@ async function startAnnotateServer(options) {
       if (file.renderAs === "html" || !isAnnotatableTextPath2(file.path))
         continue;
       try {
-        computeFolderAnnotateHistory(file.path, readFileSync25(file.path, "utf-8"));
+        computeFolderAnnotateHistory(file.path, readFileSync26(file.path, "utf-8"));
       } catch {}
     }
   }
@@ -124202,9 +124465,9 @@ async function startAnnotateServer(options) {
     if (folderPath)
       roots.add(folderPath);
     for (const path of bundlePaths)
-      roots.add(dirname20(path));
+      roots.add(dirname21(path));
     if (!bundleFiles && !/^https?:\/\//i.test(filePath))
-      roots.add(dirname20(filePath));
+      roots.add(dirname21(filePath));
     for (const root of roots) {
       if (isWithinDirectory(targetPath, root))
         return true;
@@ -124571,7 +124834,7 @@ async function startAnnotateServer(options) {
         const docUrl = new URL(req.url);
         let changed = false;
         if (!docUrl.searchParams.has("base") && !/^https?:\/\//i.test(filePath)) {
-          docUrl.searchParams.set("base", mode === "annotate-folder" && folderPath ? folderPath : bundleRoot ?? dirname20(filePath));
+          docUrl.searchParams.set("base", mode === "annotate-folder" && folderPath ? folderPath : bundleRoot ?? dirname21(filePath));
           changed = true;
         }
         if (convertHtml && !docUrl.searchParams.has("convert")) {
@@ -124614,7 +124877,7 @@ async function startAnnotateServer(options) {
           targetPath = capability.enabled ? capability.path : initialSingleFileSourcePath;
         } else if (mode === "annotate-folder" && folderPath && typeof body.path === "string") {
           targetPath = body.allowMissingBase ? resolveFolderSourceFileForSave(body.path, folderPath) : resolveFolderSourceFile(body.path, folderPath);
-          if (body.allowMissingBase && targetPath && !existsSync25(targetPath) && !openedSourceFilePaths.has(targetPath)) {
+          if (body.allowMissingBase && targetPath && !existsSync26(targetPath) && !openedSourceFilePaths.has(targetPath)) {
             targetPath = null;
           }
         } else if (bundleSourceSavePaths && typeof body.path === "string") {
@@ -125209,7 +125472,7 @@ var init_plannotator_tool = __esm(() => {
 });
 
 // ../../packages/shared/annotate-target.ts
-import { existsSync as existsSync26, realpathSync as realpathSync14, statSync as statSync24 } from "fs";
+import { existsSync as existsSync27, realpathSync as realpathSync14, statSync as statSync25 } from "fs";
 function probeAnnotateToken(token, projectRoot, options) {
   if (!token)
     return null;
@@ -125220,7 +125483,7 @@ function probeAnnotateToken(token, projectRoot, options) {
   if (allowBareDirectory || /[\\/]/.test(token)) {
     const folder = resolveAtReference(token, (candidate) => {
       try {
-        return statSync24(resolveUserPath(candidate, projectRoot)).isDirectory();
+        return statSync25(resolveUserPath(candidate, projectRoot)).isDirectory();
       } catch {
         return false;
       }
@@ -125230,7 +125493,7 @@ function probeAnnotateToken(token, projectRoot, options) {
   }
   const html = resolveAtReference(token, (candidate) => {
     const abs = resolveUserPath(candidate, projectRoot);
-    return /\.html?$/i.test(abs) && existsSync26(abs);
+    return /\.html?$/i.test(abs) && existsSync27(abs);
   });
   if (html !== null)
     return resolveUserPath(html, projectRoot);
@@ -125244,7 +125507,7 @@ function probeAnnotateToken(token, projectRoot, options) {
     return unwrapped;
   const literal = resolveAtReference(token, (candidate) => {
     try {
-      return statSync24(resolveUserPath(candidate, projectRoot)).isFile();
+      return statSync25(resolveUserPath(candidate, projectRoot)).isFile();
     } catch {
       return false;
     }
@@ -125266,7 +125529,7 @@ function probeAnnotateBundlePath(token, projectRoot) {
     return null;
   const candidate = resolveAtReference(token, (value) => {
     try {
-      return statSync24(resolveUserPath(value, projectRoot)).isFile();
+      return statSync25(resolveUserPath(value, projectRoot)).isFile();
     } catch {
       return false;
     }
@@ -125274,7 +125537,7 @@ function probeAnnotateBundlePath(token, projectRoot) {
   return candidate === null ? null : resolveUserPath(candidate, projectRoot);
 }
 function annotatePathExists(token, projectRoot) {
-  return resolveAtReference(token, (value) => existsSync26(resolveUserPath(value, projectRoot))) !== null;
+  return resolveAtReference(token, (value) => existsSync27(resolveUserPath(value, projectRoot))) !== null;
 }
 function bundleIdentity(path) {
   try {
@@ -125363,7 +125626,7 @@ function resolveAnnotateBundleFiles(paths, options = {}) {
     identities.add(identity);
     let size;
     try {
-      const stat = statSync24(path);
+      const stat = statSync25(path);
       if (!stat.isFile())
         return { ok: false, message: `Not a file: ${path}` };
       size = stat.size;
@@ -125418,7 +125681,7 @@ var init_annotate_target = __esm(() => {
 });
 
 // ../../packages/shared/review-args.ts
-import { statSync as statSync25 } from "fs";
+import { statSync as statSync26 } from "fs";
 function parseReviewArgs(input) {
   const tokens = Array.isArray(input) ? input.map((token) => stripWrappingQuotes(token.trim())).filter(Boolean) : tokenizeReviewArgs(input ?? "");
   let vcsType;
@@ -125562,7 +125825,7 @@ function resolveReviewTarget(parsed, cwd) {
     const resolved = resolveUserPath(word, cwd);
     let isDirectory;
     try {
-      isDirectory = statSync25(resolved).isDirectory();
+      isDirectory = statSync26(resolved).isDirectory();
     } catch {
       isDirectory = undefined;
     }
@@ -126035,7 +126298,7 @@ __export(exports_commands, {
   handleAnnotateLastCommand: () => handleAnnotateLastCommand,
   handleReviewCommand: () => handleReviewCommand
 });
-import { statSync as statSync26 } from "fs";
+import { statSync as statSync27 } from "fs";
 import path3 from "path";
 async function handleReviewCommand(event, deps) {
   const { client, reviewHtmlContent, getSharingEnabled, getShareBaseUrl, directory } = deps;
@@ -126326,7 +126589,7 @@ async function handleAnnotateCommand(event, deps) {
     const projectRoot = agentCwd;
     const resolvedArg = resolveUserPath(filePath, projectRoot);
     try {
-      isFolder = statSync26(resolvedArg).isDirectory();
+      isFolder = statSync27(resolvedArg).isDirectory();
     } catch {}
     if (isFolder) {
       if (!hasMarkdownFiles(resolvedArg, FILE_BROWSER_EXCLUDED, getAnnotatableDocRegex())) {
@@ -126340,7 +126603,7 @@ async function handleAnnotateCommand(event, deps) {
       client.app.log({ level: "info", message: `Opening annotation UI for folder ${resolvedArg}...` });
     } else if (/\.html?$/i.test(resolvedArg)) {
       try {
-        statSync26(resolvedArg);
+        statSync27(resolvedArg);
       } catch {
         client.app.log({ level: "error", message: `File not found: ${filePath}` });
         return;