@quantiya/codevibe-codex-plugin 2.0.4 → 2.0.6

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/cli.js

@@ -6,8 +6,13 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __esm = (fn, res) => function __init() {
-  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+var __esm = (fn, res, err) => function __init() {
+  if (err) throw err[0];
+  try {
+    return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+  } catch (e) {
+    throw err = [e], e;
+  }
 };
 var __export = (target, all) => {
   for (var name in all)
@@ -321,7 +326,7 @@ var init_types = __esm({
 // src/continuation/dirty-state-collector.ts
 function isPathInAuthorityScope(repoPath, scope) {
   const scopes = [...scope.writeScopes, ...scope.readScopes];
-  return scopes.some((s) => repoPath === s || repoPath.startsWith(s + path9.sep));
+  return scopes.some((s) => repoPath === s || repoPath.startsWith(s + path8.sep));
 }
 async function collectOne(knownRepo, gitExec, timeoutMs) {
   let headSha = "unknown";
@@ -373,12 +378,12 @@ async function collectRepoStates(authority, knownRepos, options = {}) {
   );
   return Promise.all(clamped.map((r) => collectOne(r, gitExec, timeoutMs)));
 }
-var import_node_child_process, path9, GIT_TIMEOUT_MS, SCRUBBED_ENV, defaultGitExec;
+var import_node_child_process, path8, GIT_TIMEOUT_MS, SCRUBBED_ENV, defaultGitExec;
 var init_dirty_state_collector = __esm({
   "src/continuation/dirty-state-collector.ts"() {
     "use strict";
     import_node_child_process = require("node:child_process");
-    path9 = __toESM(require("node:path"));
+    path8 = __toESM(require("node:path"));
     GIT_TIMEOUT_MS = 5e3;
     SCRUBBED_ENV = (() => {
       const out = {};
@@ -520,11 +525,11 @@ ${yaml}---
 
 ${prose}`;
 }
-function getTaskDirectoryPath(taskId, homeDir = os10.homedir()) {
-  return path10.join(homeDir, ".codevibe", "tasks", taskId);
+function getTaskDirectoryPath(taskId, homeDir = os9.homedir()) {
+  return path9.join(homeDir, ".codevibe", "tasks", taskId);
 }
-function getPacketFilePath(taskId, homeDir = os10.homedir()) {
-  return path10.join(getTaskDirectoryPath(taskId, homeDir), "CONTINUATION.md");
+function getPacketFilePath(taskId, homeDir = os9.homedir()) {
+  return path9.join(getTaskDirectoryPath(taskId, homeDir), "CONTINUATION.md");
 }
 async function atomicWritePacket(taskDir, finalPath, bytes, pid, ts, randHex) {
   await import_node_fs.promises.mkdir(taskDir, { recursive: true, mode: 448 });
@@ -538,7 +543,7 @@ async function atomicWritePacket(taskDir, finalPath, bytes, pid, ts, randHex) {
       );
     }
   }
-  const tmpPath = path10.join(
+  const tmpPath = path9.join(
     taskDir,
     `CONTINUATION.md.${pid}.${ts}.${randHex}.tmp`
   );
@@ -587,7 +592,7 @@ async function atomicWritePacket(taskDir, finalPath, bytes, pid, ts, randHex) {
 }
 function createContinuationPacketWriter(deps) {
   const perTaskMutex = /* @__PURE__ */ new Map();
-  const homeDir = deps.homeDir ?? os10.homedir();
+  const homeDir = deps.homeDir ?? os9.homedir();
   const clock = deps.clock ?? Date.now;
   const randomHex = deps.randomHex ?? defaultRandomHex;
   const collector = deps.dirtyStateCollector ?? {
@@ -630,7 +635,7 @@ function createContinuationPacketWriter(deps) {
           ts,
           randomHex()
         );
-        const packetRelativePath = path10.relative(path10.join(homeDir, ".codevibe", "tasks"), finalPath).split(path10.sep).join("/");
+        const packetRelativePath = path9.relative(path9.join(homeDir, ".codevibe", "tasks"), finalPath).split(path9.sep).join("/");
         const result = await deps.appsync.recordContinuationPacketWritten({
           taskId: input.taskId,
           offerId: input.offerId ?? null,
@@ -675,13 +680,13 @@ function createContinuationPacketWriter(deps) {
     }
   };
 }
-var import_node_fs, path10, os10, crypto3, import_json_freeze, import_yaml, Mutex, WORK_NOT_ENUMERATED_SENTINEL, VERIFICATION_NOT_RECORDED_SENTINEL;
+var import_node_fs, path9, os9, crypto3, import_json_freeze, import_yaml, Mutex, WORK_NOT_ENUMERATED_SENTINEL, VERIFICATION_NOT_RECORDED_SENTINEL;
 var init_packet_writer = __esm({
   "src/continuation/packet-writer.ts"() {
     "use strict";
     import_node_fs = require("node:fs");
-    path10 = __toESM(require("node:path"));
-    os10 = __toESM(require("node:os"));
+    path9 = __toESM(require("node:path"));
+    os9 = __toESM(require("node:os"));
     crypto3 = __toESM(require("node:crypto"));
     import_json_freeze = require("json-freeze");
     import_yaml = require("yaml");
@@ -841,22 +846,22 @@ var init_resolve_agent = __esm({
 });
 
 // src/companion-mode/persist-preference.ts
-function resolveHome6() {
+function resolveHome5() {
   const isTestEnv = process.env.VITEST === "true" || process.env.NODE_ENV === "test";
   if (isTestEnv && process.env.CODEVIBE_HOME_OVERRIDE) {
     return process.env.CODEVIBE_HOME_OVERRIDE;
   }
-  return os31.homedir();
+  return os30.homedir();
 }
 function companionPreferenceFilePath() {
-  return path53.join(resolveHome6(), ".codevibe", "companion-preference.json");
+  return path52.join(resolveHome5(), ".codevibe", "companion-preference.json");
 }
 async function readCompanionPreference() {
   const filePath = companionPreferenceFilePath();
   let raw;
   let st;
   try {
-    st = await fs44.stat(filePath);
+    st = await fs43.stat(filePath);
   } catch (err) {
     const code = err?.code;
     if (code !== "ENOENT") {
@@ -875,7 +880,7 @@ async function readCompanionPreference() {
     return null;
   }
   try {
-    raw = await fs44.readFile(filePath, "utf8");
+    raw = await fs43.readFile(filePath, "utf8");
   } catch (err) {
     logger.debug("[companion-preference] read error \u2014 treating as missing", {
       filePath,
@@ -897,21 +902,21 @@ async function readCompanionPreference() {
 }
 async function persistCompanionPreference(pref) {
   const filePath = companionPreferenceFilePath();
-  const dir = path53.dirname(filePath);
-  await fs44.mkdir(dir, { recursive: true });
-  await fs44.writeFile(filePath, JSON.stringify(pref, null, 2), {
+  const dir = path52.dirname(filePath);
+  await fs43.mkdir(dir, { recursive: true });
+  await fs43.writeFile(filePath, JSON.stringify(pref, null, 2), {
     encoding: "utf8",
     mode: 384
   });
   try {
-    await fs44.chmod(filePath, 384);
+    await fs43.chmod(filePath, 384);
   } catch {
   }
 }
 async function clearCompanionPreference() {
   const filePath = companionPreferenceFilePath();
   try {
-    await fs44.unlink(filePath);
+    await fs43.unlink(filePath);
   } catch (err) {
     const code = err?.code;
     if (code !== "ENOENT") {
@@ -922,13 +927,13 @@ async function clearCompanionPreference() {
     }
   }
 }
-var fs44, path53, os31, import_zod4, CompanionPreferenceSchema;
+var fs43, path52, os30, import_zod4, CompanionPreferenceSchema;
 var init_persist_preference = __esm({
   "src/companion-mode/persist-preference.ts"() {
     "use strict";
-    fs44 = __toESM(require("fs/promises"));
-    path53 = __toESM(require("path"));
-    os31 = __toESM(require("os"));
+    fs43 = __toESM(require("fs/promises"));
+    path52 = __toESM(require("path"));
+    os30 = __toESM(require("os"));
     import_zod4 = require("zod");
     init_logger2();
     CompanionPreferenceSchema = import_zod4.z.object({
@@ -998,9 +1003,9 @@ function defaultResolveBinPath(kind) {
   }
 }
 async function isCodevibeWrapper(kind, binPath, versionProbe = defaultVersionProbe) {
-  const dir = path54.join(os32.homedir(), `.codevibe-${kind.toLowerCase()}`);
+  const dir = path53.join(os31.homedir(), `.codevibe-${kind.toLowerCase()}`);
   try {
-    const st = await fs45.stat(dir);
+    const st = await fs44.stat(dir);
     if (!st.isDirectory()) return false;
   } catch {
     return false;
@@ -1119,15 +1124,15 @@ async function runCompanionMode(args) {
   const handoff = args.execFile ?? import_child_process7.execFileSync;
   handoff(selected.binPath, args.passthrough, { stdio: "inherit" });
 }
-var import_child_process7, import_child_process8, path54, fs45, os32, NoAgentInstalledError, AGENT_BIN, AGENT_VERSION_PROBE_TIMEOUT_MS;
+var import_child_process7, import_child_process8, path53, fs44, os31, NoAgentInstalledError, AGENT_BIN, AGENT_VERSION_PROBE_TIMEOUT_MS;
 var init_companion_mode = __esm({
   "src/companion-mode/index.ts"() {
     "use strict";
     import_child_process7 = require("child_process");
     import_child_process8 = require("child_process");
-    path54 = __toESM(require("path"));
-    fs45 = __toESM(require("fs/promises"));
-    os32 = __toESM(require("os"));
+    path53 = __toESM(require("path"));
+    fs44 = __toESM(require("fs/promises"));
+    os31 = __toESM(require("os"));
     init_logger2();
     init_detect_agents();
     init_process_markers();
@@ -6330,10 +6335,10 @@ function truncate(s, max) {
   if (max === 1) return "\u2026";
   return s.slice(0, max - 1) + "\u2026";
 }
-function formatProjectPath(projectPath, homedir21, maxCols) {
+function formatProjectPath(projectPath, homedir20, maxCols) {
   let p = projectPath ?? "";
-  if (homedir21 && (p === homedir21 || p.startsWith(homedir21 + "/"))) {
-    p = "~" + p.slice(homedir21.length);
+  if (homedir20 && (p === homedir20 || p.startsWith(homedir20 + "/"))) {
+    p = "~" + p.slice(homedir20.length);
   }
   if (p.length > maxCols) {
     if (maxCols <= 0) return "";
@@ -6360,117 +6365,17 @@ function plannerBadge(kind, label) {
   return null;
 }
 function computeStatusLayout(args) {
-  const { tier, homedir: homedir21, columns, badge } = args;
+  const { tier, homedir: homedir20, columns, badge } = args;
   const SEP = " \xB7 ";
   const badgeText = badge ? truncate(badge.text, Math.max(0, columns - SEP.length - tier.length - 2)) : "";
   const rightWidth = badgeText ? badgeText.length + 1 : 0;
   const cwdMax = Math.max(0, columns - rightWidth - SEP.length - tier.length);
-  const cwd = formatProjectPath(args.cwd, homedir21, cwdMax);
+  const cwd = formatProjectPath(args.cwd, homedir20, cwdMax);
   const leftFull = cwd ? `${cwd}${SEP}${tier}` : tier;
   const leftText = truncate(leftFull, Math.max(0, columns - rightWidth));
   return { leftText, badgeText };
 }
 
-// src/orchestration-shell/sticky-preference.ts
-var fs4 = __toESM(require("fs/promises"));
-var path4 = __toESM(require("path"));
-var os6 = __toESM(require("os"));
-var import_zod = require("zod");
-init_logger2();
-function resolveHome() {
-  const isTestEnv = process.env.VITEST === "true" || process.env.NODE_ENV === "test";
-  if (isTestEnv && process.env.CODEVIBE_HOME_OVERRIDE) {
-    return process.env.CODEVIBE_HOME_OVERRIDE;
-  }
-  return os6.homedir();
-}
-function stickyPreferenceFilePath() {
-  return path4.join(resolveHome(), ".codevibe", "last-mode.json");
-}
-var LastModeFileSchema = import_zod.z.object({
-  schemaVersion: import_zod.z.literal(1),
-  mode: import_zod.z.union([import_zod.z.literal("companion"), import_zod.z.literal("orchestration")]),
-  pickedAt: import_zod.z.string(),
-  pickedByTier: import_zod.z.union([import_zod.z.literal("PRO"), import_zod.z.literal("MAX")])
-});
-async function readStickyPreference(currentTier) {
-  const filePath = stickyPreferenceFilePath();
-  let st;
-  try {
-    st = await fs4.stat(filePath);
-  } catch (err) {
-    const code = err?.code;
-    if (code !== "ENOENT") {
-      logger.debug("[sticky-preference] stat error \u2014 treating as missing", {
-        filePath,
-        error: err?.message
-      });
-    }
-    return null;
-  }
-  if ((st.mode & 63) !== 0) {
-    process.stderr.write(
-      `last-mode.json has loose permissions; ignoring
-`
-    );
-    return null;
-  }
-  let raw;
-  try {
-    raw = await fs4.readFile(filePath, "utf8");
-  } catch (err) {
-    logger.debug("[sticky-preference] Read error \u2014 falling back to prompt", {
-      filePath,
-      error: err?.message
-    });
-    return null;
-  }
-  let parsedJson;
-  try {
-    parsedJson = JSON.parse(raw);
-  } catch (err) {
-    logger.debug("[sticky-preference] Malformed JSON \u2014 falling back to prompt", {
-      filePath,
-      error: err?.message
-    });
-    return null;
-  }
-  const result = LastModeFileSchema.safeParse(parsedJson);
-  if (!result.success) {
-    logger.debug("[sticky-preference] Schema mismatch \u2014 falling back to prompt", {
-      filePath,
-      issues: result.error.issues
-    });
-    return null;
-  }
-  const file = result.data;
-  if (currentTier === "FREE") {
-    logger.debug(
-      "[sticky-preference] Tier downgrade to FREE invalidates sticky \u2014 falling back to prompt",
-      { filePath, pickedByTier: file.pickedByTier }
-    );
-    return null;
-  }
-  return file.mode;
-}
-async function writeStickyPreference(args) {
-  const filePath = stickyPreferenceFilePath();
-  const dir = path4.dirname(filePath);
-  await fs4.mkdir(dir, { recursive: true });
-  const file = {
-    schemaVersion: 1,
-    mode: args.mode,
-    pickedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    pickedByTier: args.pickedByTier
-  };
-  await fs4.writeFile(filePath, JSON.stringify(file, null, 2), { encoding: "utf8", mode: 384 });
-  try {
-    await fs4.chmod(filePath, 384);
-  } catch {
-  }
-  logger.debug("[sticky-preference] Wrote", { filePath, mode: args.mode });
-}
-
 // src/orchestration-shell/mode-selection.ts
 var TierError = class extends Error {
   constructor(message) {
@@ -6490,18 +6395,10 @@ async function pickMode(args, tier, deps = defaultDeps()) {
   if (tier === "FREE") {
     return "companion";
   }
-  const sticky = await deps.readStickyPreference(tier);
-  if (sticky) {
-    return sticky;
-  }
-  const picked = await deps.promptUserForMode(tier);
-  await deps.writeStickyPreference({ mode: picked, pickedByTier: tier });
-  return picked;
+  return await deps.promptUserForMode(tier);
 }
 function defaultDeps() {
   return {
-    readStickyPreference: (tier) => readStickyPreference(tier),
-    writeStickyPreference,
     promptUserForMode: defaultPromptUserForMode
   };
 }
@@ -6530,8 +6427,8 @@ CodeVibe \u2014 choose mode (${tier} tier):
 
 // src/orchestration-shell/index.ts
 var React20 = __toESM(require("react"));
-var path43 = __toESM(require("path"));
-var os24 = __toESM(require("os"));
+var path42 = __toESM(require("path"));
+var os23 = __toESM(require("os"));
 init_logger2();
 
 // src/orchestration-shell/ink-runtime.ts
@@ -9086,9 +8983,9 @@ function ConversationPane(props) {
 }
 
 // src/orchestration-shell/components/StatusBar.tsx
-var os7 = __toESM(require("os"));
+var os6 = __toESM(require("os"));
 var React13 = __toESM(require("react"));
-var HOME = os7.homedir();
+var HOME = os6.homedir();
 function StatusBar(props) {
   const { ink } = getInkRuntime();
   const { Box, Text } = ink;
@@ -9115,7 +9012,7 @@ function StatusBar(props) {
 }
 
 // src/orchestration-shell/slash-router.ts
-var path5 = __toESM(require("path"));
+var path4 = __toESM(require("path"));
 var TIER_RANK = { FREE: 0, PRO: 1, MAX: 2 };
 function tierMeets(actual, required) {
   if (!required) return true;
@@ -9288,7 +9185,7 @@ var CATALOG = [
             "Usage: /structural-summary --include-bodies <absolute-path>"
           );
         }
-        if (!path5.isAbsolute(subdir)) {
+        if (!path4.isAbsolute(subdir)) {
           return staticOutput(
             "/structural-summary",
             `Path must be absolute (got: ${subdir}). Example: /structural-summary --include-bodies /Users/me/Workspace/myrepo/src`
@@ -9584,11 +9481,11 @@ function LiveProgressLine(props) {
 
 // src/orchestration-shell/components/InputBar.tsx
 var React16 = __toESM(require("react"));
-var os8 = __toESM(require("node:os"));
+var os7 = __toESM(require("node:os"));
 
 // src/orchestration-shell/attachments.ts
-var fs5 = __toESM(require("node:fs"));
-var path6 = __toESM(require("node:path"));
+var fs4 = __toESM(require("node:fs"));
+var path5 = __toESM(require("node:path"));
 var import_node_url = require("node:url");
 var import_node_crypto = require("node:crypto");
 var MAX_IMAGE_BYTES = 10 * 1024 * 1024;
@@ -9606,7 +9503,7 @@ function sniffImageMime(head) {
   return null;
 }
 var IMAGE_EXT_RE = /\.(png|jpe?g|gif|webp|bmp)$/i;
-function unescapeToken(raw, homedir21) {
+function unescapeToken(raw, homedir20) {
   let s = raw.trim();
   let wasQuoted = false;
   if (s.startsWith("'") && s.endsWith("'") || s.startsWith('"') && s.endsWith('"')) {
@@ -9620,11 +9517,11 @@ function unescapeToken(raw, homedir21) {
     }
   }
   if (!wasQuoted) s = s.replace(/\\(.)/g, "$1");
-  return expandHome(s, homedir21);
+  return expandHome(s, homedir20);
 }
-function expandHome(p, homedir21) {
-  if (p === "~") return homedir21;
-  if (p.startsWith("~/")) return path6.join(homedir21, p.slice(2));
+function expandHome(p, homedir20) {
+  if (p === "~") return homedir20;
+  if (p.startsWith("~/")) return path5.join(homedir20, p.slice(2));
   return p;
 }
 function extractImagePathSpans(text2) {
@@ -9685,7 +9582,7 @@ function detectImageAttachments(text2, opts) {
     let lexical;
     try {
       const unescaped = unescapeToken(rawToken, opts.homedir);
-      lexical = path6.resolve(opts.cwd, unescaped);
+      lexical = path5.resolve(opts.cwd, unescaped);
     } catch {
       rejects.push({ token: rawToken, reason: "could not resolve the path" });
       continue;
@@ -9704,7 +9601,7 @@ function promoteLexicalImagePath(lexical, rawToken, bySource, rejects, newId) {
   }
   let st;
   try {
-    st = fs5.statSync(lexical);
+    st = fs4.statSync(lexical);
   } catch {
     rejects.push({ token: rawToken, reason: "not found" });
     return;
@@ -9720,16 +9617,16 @@ function promoteLexicalImagePath(lexical, rawToken, bySource, rejects, newId) {
   let head;
   let fd;
   try {
-    fd = fs5.openSync(lexical, "r");
+    fd = fs4.openSync(lexical, "r");
     head = Buffer.alloc(32);
-    const n = fs5.readSync(fd, head, 0, 32, 0);
+    const n = fs4.readSync(fd, head, 0, 32, 0);
     head = head.subarray(0, n);
   } catch {
     rejects.push({ token: rawToken, reason: "could not read" });
     return;
   } finally {
     if (fd !== void 0) try {
-      fs5.closeSync(fd);
+      fs4.closeSync(fd);
     } catch {
     }
   }
@@ -9746,7 +9643,7 @@ function promoteLexicalImagePath(lexical, rawToken, bySource, rejects, newId) {
     id: newId(),
     sourcePath: lexical,
     rawTokens: [rawToken],
-    filename: path6.basename(lexical),
+    filename: path5.basename(lexical),
     mime: sniff.mime,
     sizeBytes: st.size
   });
@@ -9759,7 +9656,7 @@ function attachmentsFromPaths(paths, opts) {
   for (const raw of paths) {
     let lexical;
     try {
-      lexical = path6.resolve(raw);
+      lexical = path5.resolve(raw);
     } catch {
       rejects.push({ token: raw, reason: "could not resolve the path" });
       continue;
@@ -9797,41 +9694,41 @@ function prepareAttachmentsForSpawn(roundBrief, attachments, shadowDir) {
   const failedAttachments = [];
   let brief = roundBrief;
   if (attachments.length === 0) return { copiedAttachments, failedAttachments, roundBrief: brief };
-  const destDir = path6.join(shadowDir, SHADOW_ATTACHMENTS_DIR);
+  const destDir = path5.join(shadowDir, SHADOW_ATTACHMENTS_DIR);
   try {
-    const st = fs5.lstatSync(destDir);
+    const st = fs4.lstatSync(destDir);
     if (st.isSymbolicLink() || !st.isDirectory()) {
-      fs5.rmSync(destDir, { recursive: true, force: true });
-      fs5.mkdirSync(destDir, { recursive: true, mode: 448 });
+      fs4.rmSync(destDir, { recursive: true, force: true });
+      fs4.mkdirSync(destDir, { recursive: true, mode: 448 });
     }
   } catch {
     try {
-      fs5.mkdirSync(destDir, { recursive: true, mode: 448 });
+      fs4.mkdirSync(destDir, { recursive: true, mode: 448 });
     } catch {
     }
   }
   for (const a of attachments) {
     const rel = attachmentRelPath(a);
-    const dest = path6.join(shadowDir, rel);
-    const tmp = path6.join(destDir, `.${a.id}.${(0, import_node_crypto.randomUUID)()}.tmp`);
+    const dest = path5.join(shadowDir, rel);
+    const tmp = path5.join(destDir, `.${a.id}.${(0, import_node_crypto.randomUUID)()}.tmp`);
     let fd;
     try {
       const { buf } = readImageFdSafe(a.sourcePath, MAX_IMAGE_BYTES);
-      fd = fs5.openSync(tmp, fs5.constants.O_CREAT | fs5.constants.O_EXCL | fs5.constants.O_WRONLY | fs5.constants.O_NOFOLLOW, 384);
-      fs5.writeSync(fd, buf);
-      fs5.closeSync(fd);
+      fd = fs4.openSync(tmp, fs4.constants.O_CREAT | fs4.constants.O_EXCL | fs4.constants.O_WRONLY | fs4.constants.O_NOFOLLOW, 384);
+      fs4.writeSync(fd, buf);
+      fs4.closeSync(fd);
       fd = void 0;
-      fs5.renameSync(tmp, dest);
+      fs4.renameSync(tmp, dest);
       copiedAttachments.push({ id: a.id, relPath: rel, mime: a.mime });
     } catch {
       if (fd !== void 0) {
         try {
-          fs5.closeSync(fd);
+          fs4.closeSync(fd);
         } catch {
         }
       }
       try {
-        fs5.unlinkSync(tmp);
+        fs4.unlinkSync(tmp);
       } catch {
       }
       brief = brief.split(rel).join("[attached image skipped]");
@@ -9896,19 +9793,19 @@ function rewriteChipTokensByNumber(brief, orderedPaths, attachments) {
 }
 var MAX_BASE64_SOURCE_BYTES = 8 * 1024 * 1024;
 function readImageFdSafe(sourcePath, maxBytes = MAX_IMAGE_BYTES) {
-  const fd = fs5.openSync(sourcePath, fs5.constants.O_RDONLY | fs5.constants.O_NOFOLLOW);
+  const fd = fs4.openSync(sourcePath, fs4.constants.O_RDONLY | fs4.constants.O_NOFOLLOW);
   try {
-    const st = fs5.fstatSync(fd);
+    const st = fs4.fstatSync(fd);
     if (!st.isFile()) throw new Error("not a regular file");
     if (st.size > maxBytes) throw new Error(`exceeds byte ceiling (${st.size} > ${maxBytes})`);
     const head = Buffer.alloc(32);
-    const n = fs5.readSync(fd, head, 0, 32, 0);
+    const n = fs4.readSync(fd, head, 0, 32, 0);
     const sniff = sniffImageMime(head.subarray(0, n));
     if (!sniff) throw new Error("not a raster image (fd re-sniff failed)");
     const buf = Buffer.alloc(st.size);
     let off = 0;
     while (off < st.size) {
-      const n2 = fs5.readSync(fd, buf, off, st.size - off, off);
+      const n2 = fs4.readSync(fd, buf, off, st.size - off, off);
       if (n2 <= 0) break;
       off += n2;
       if (off > maxBytes) throw new Error("exceeds byte ceiling (grew during read)");
@@ -9916,7 +9813,7 @@ function readImageFdSafe(sourcePath, maxBytes = MAX_IMAGE_BYTES) {
     return { buf: buf.subarray(0, off), mime: sniff.mime };
   } finally {
     try {
-      fs5.closeSync(fd);
+      fs4.closeSync(fd);
     } catch {
     }
   }
@@ -10221,17 +10118,66 @@ function imageChip(n) {
 function displayChips(v) {
   return v.split(CHIP_SENTINEL).join("[");
 }
+var NEWLINE_MARKER = "\u23CE";
+function displayValue(v) {
+  return displayChips(v).split("\n").join(NEWLINE_MARKER);
+}
 var EMPTY_CMDS = [];
+var CARET_X_BASE = 4;
+var CARET_Y_BASE = 1;
+function caretPosition(rowLeft, rowTop, visibleCol) {
+  return { x: rowLeft + CARET_X_BASE + visibleCol, y: rowTop + CARET_Y_BASE };
+}
+var clampN = (n, lo, hi) => n < lo ? lo : n > hi ? hi : n;
+function computeInputWindow(display, caretCol, valueWidth, prevScroll) {
+  const len = display.length;
+  const cw = Math.max(1, valueWidth);
+  const cc = clampN(caretCol, 0, len);
+  if (len <= cw) {
+    return { text: display, visibleCol: cc, scroll: 0 };
+  }
+  const maxScroll = len - cw;
+  let scroll = clampN(prevScroll, 0, maxScroll);
+  if (cc < scroll) scroll = cc;
+  else if (cc > scroll + cw) scroll = cc - cw;
+  scroll = clampN(scroll, 0, maxScroll);
+  let text2 = display.slice(scroll, scroll + cw);
+  if (scroll > 0) text2 = "\u2026" + text2.slice(1);
+  if (scroll + cw < len) text2 = text2.slice(0, -1) + "\u2026";
+  return { text: text2, visibleCol: cc - scroll, scroll };
+}
+function measureRowOrigin(node) {
+  try {
+    let left = 0;
+    let top = 0;
+    let n = node;
+    while (n && n.nodeName !== "ink-root") {
+      const yn = n.yogaNode;
+      if (yn && typeof yn.getComputedLeft === "function") {
+        left += yn.getComputedLeft();
+        top += yn.getComputedTop();
+      }
+      n = n.parentNode;
+    }
+    return { left, top };
+  } catch {
+    return null;
+  }
+}
 var GATE_PROMPT_NOTES_CANCEL_SENTINEL = "__GATE_PROMPT_NOTES_CANCEL__";
 var clampCursor = (c, len) => c < 0 ? 0 : c > len ? len : c;
 function InputBar(props) {
   const { ink } = getInkRuntime();
-  const { Box, Text, useStdout, useStdin } = ink;
+  const { Box, Text, useStdout, useStdin, useCursor } = ink;
+  const { setCursorPosition } = useCursor();
+  const rowRef = React16.useRef(null);
+  const [rowOrigin, setRowOrigin] = React16.useState(null);
   const initial = props.initialValue ?? "";
   const [value, setValue] = React16.useState(initial);
   const [cursor, setCursor] = React16.useState(initial.length);
   const valueRef = React16.useRef(initial);
   const cursorRef = React16.useRef(initial.length);
+  const scrollRef = React16.useRef(0);
   const [errorHint, setErrorHint] = React16.useState(null);
   const [highlight, setHighlightState] = React16.useState(0);
   const highlightRef = React16.useRef(0);
@@ -10387,7 +10333,7 @@ function InputBar(props) {
         return;
       }
       if (gatePromptMode === null && chunk.length <= 4096) {
-        const detected = detectImageAttachments(chunk, { cwd: process.cwd(), homedir: os8.homedir() });
+        const detected = detectImageAttachments(chunk, { cwd: process.cwd(), homedir: os7.homedir() });
         if (detected.attachments.length > 0) {
           let wc = chunk;
           for (const att of detected.attachments) {
@@ -10522,7 +10468,15 @@ function InputBar(props) {
       emitter.removeListener("input", onRawChunk);
     };
   }, [internal_eventEmitter, onRawChunk]);
+  React16.useEffect(() => {
+    const origin2 = measureRowOrigin(rowRef.current);
+    if (!origin2) return;
+    setRowOrigin(
+      (prev) => prev && prev.left === origin2.left && prev.top === origin2.top ? prev : origin2
+    );
+  });
   if (gatePromptMode?.kind === "submitting") {
+    setCursorPosition(void 0);
     return React16.createElement(
       Box,
       {
@@ -10545,17 +10499,18 @@ function InputBar(props) {
   } else if (gatePromptMode?.kind === "awaiting-notes") {
     placeholder = "Type your notes + Enter";
   }
-  const shown = displayChips(value);
+  const shown = displayValue(value);
   const cur = clampCursor(cursor, shown.length);
-  const head = shown.slice(0, cur);
-  const at = shown.slice(cur, cur + 1);
-  const tail = shown.slice(cur + 1);
-  const cursorEl = at.length > 0 ? React16.createElement(Text, { key: "cursor", inverse: true }, at) : React16.createElement(Text, { key: "cursor" }, "\u2588");
+  const valueWidth = Math.max(1, columns - 6);
+  const win = computeInputWindow(shown, cur, valueWidth, scrollRef.current);
+  scrollRef.current = win.scroll;
+  const origin = rowOrigin ?? { left: 0, top: 0 };
+  setCursorPosition(caretPosition(origin.left, origin.top, win.visibleCol));
   const rowChildren = [
     React16.createElement(Text, { key: "prompt", color: ACCENT }, "\u276F "),
-    React16.createElement(Text, { key: "head" }, head),
-    cursorEl,
-    React16.createElement(Text, { key: "tail" }, tail)
+    // wrap:'truncate' — the value is PRE-WINDOWED to fit; truncate is a belt-and-
+    // suspenders guard so it can NEVER wrap even if the width math is off by a cell.
+    React16.createElement(Text, { key: "value", wrap: "truncate" }, win.text)
   ];
   if (value.length === 0 && placeholder.length > 0) {
     rowChildren.push(
@@ -10573,6 +10528,9 @@ function InputBar(props) {
       Box,
       {
         key: "row",
+        // ink 7 forwards a `ref` on <Box> to its DOMElement (yogaNode) — measured
+        // by the effect above to place the real terminal cursor on the right line.
+        ref: rowRef,
         flexDirection: "row",
         borderStyle: "round",
         borderColor: ACCENT,
@@ -11835,9 +11793,9 @@ function validateGeminiEnvelope(value) {
 }
 
 // src/reviewer/providers/codex.ts
-var fs6 = __toESM(require("fs"));
-var os9 = __toESM(require("os"));
-var path7 = __toESM(require("path"));
+var fs5 = __toESM(require("fs"));
+var os8 = __toESM(require("os"));
+var path6 = __toESM(require("path"));
 var import_uuid5 = require("uuid");
 var CodexReviewerProvider = class {
   constructor(opts = {}) {
@@ -11881,7 +11839,7 @@ var CodexReviewerProvider = class {
     }
     let lastMessage;
     try {
-      lastMessage = fs6.readFileSync(hostPath, "utf8");
+      lastMessage = fs5.readFileSync(hostPath, "utf8");
     } catch (ioErr) {
       bestEffortUnlink(hostPath);
       const reason = ioErr instanceof Error ? ioErr.message : String(ioErr);
@@ -11986,7 +11944,7 @@ function sumCodexTokens(stdout) {
   return totals.reduce((a, b) => a + b, 0);
 }
 function makeLastMessagePath() {
-  return path7.join(os9.tmpdir(), `quorum-codex-last-${process.pid}-${(0, import_uuid5.v4)()}.txt`);
+  return path6.join(os8.tmpdir(), `quorum-codex-last-${process.pid}-${(0, import_uuid5.v4)()}.txt`);
 }
 function makeLastMessageBasename() {
   return `quorum-codex-last-${process.pid}-${(0, import_uuid5.v4)()}.txt`;
@@ -12005,11 +11963,11 @@ function resolveLastMessagePaths(sandboxed, workdir) {
     });
   }
   const name = makeLastMessageBasename();
-  return { argPath: name, hostPath: path7.join(workdir, name) };
+  return { argPath: name, hostPath: path6.join(workdir, name) };
 }
 function bestEffortUnlink(p) {
   try {
-    fs6.unlinkSync(p);
+    fs5.unlinkSync(p);
   } catch {
   }
 }
@@ -12917,7 +12875,7 @@ function OrchestrationApp(props) {
     }
     return () => disableBracketedPaste();
   }, [wizardOpen, isRawModeSupported]);
-  const staticOrderRef = React18.useRef();
+  const staticOrderRef = React18.useRef(null);
   if (!staticOrderRef.current) {
     staticOrderRef.current = makeStaticOrderAccum();
   }
@@ -15119,8 +15077,8 @@ ${formatPacket(packet, hash)}`
 
 // src/continuation/packet-reader.ts
 var import_node_fs2 = require("node:fs");
-var path11 = __toESM(require("node:path"));
-var os11 = __toESM(require("node:os"));
+var path10 = __toESM(require("node:path"));
+var os10 = __toESM(require("node:os"));
 var import_yaml2 = require("yaml");
 init_types();
 init_packet_writer();
@@ -15241,21 +15199,21 @@ async function packetHashIsInAudit(appsync, packet, packetHash) {
   }
 }
 function createContinuationPacketReader(deps) {
-  const homeDir = deps.homeDir ?? os11.homedir();
+  const homeDir = deps.homeDir ?? os10.homedir();
   return {
     async read(taskId, expectedHash) {
       const filePath = getPacketFilePath(taskId, homeDir);
-      let stat7;
+      let stat6;
       try {
-        stat7 = await import_node_fs2.promises.lstat(filePath);
+        stat6 = await import_node_fs2.promises.lstat(filePath);
       } catch (err) {
         if (err.code === "ENOENT") {
           throw new PacketNotFound(filePath);
         }
         throw err;
       }
-      if (isPathPermissivelyOpen(stat7.mode)) {
-        throw new PacketPermissionsLoose(filePath, stat7.mode);
+      if (isPathPermissivelyOpen(stat6.mode)) {
+        throw new PacketPermissionsLoose(filePath, stat6.mode);
       }
       let body;
       try {
@@ -15291,7 +15249,7 @@ function createContinuationPacketReader(deps) {
       return packet;
     },
     async list() {
-      const tasksDir = path11.join(homeDir, ".codevibe", "tasks");
+      const tasksDir = path10.join(homeDir, ".codevibe", "tasks");
       let entries;
       try {
         entries = await import_node_fs2.promises.readdir(tasksDir, { withFileTypes: true });
@@ -15310,9 +15268,9 @@ function createContinuationPacketReader(deps) {
         let lastModified = null;
         let packetHash;
         try {
-          const stat7 = await import_node_fs2.promises.lstat(packetPath);
+          const stat6 = await import_node_fs2.promises.lstat(packetPath);
           packetExists = true;
-          lastModified = stat7.mtime;
+          lastModified = stat6.mtime;
           try {
             const body = await import_node_fs2.promises.readFile(packetPath, "utf8");
             const { yaml } = splitFrontmatter(body);
@@ -15340,24 +15298,24 @@ function createContinuationPacketReader(deps) {
 init_logger2();
 
 // src/orchestration-shell/cohort-flag.ts
-var fs9 = __toESM(require("fs/promises"));
-var path12 = __toESM(require("path"));
-var os12 = __toESM(require("os"));
+var fs8 = __toESM(require("fs/promises"));
+var path11 = __toESM(require("path"));
+var os11 = __toESM(require("os"));
 init_logger2();
-function resolveHome2() {
+function resolveHome() {
   const isTestEnv = process.env.VITEST === "true" || process.env.NODE_ENV === "test";
   if (isTestEnv && process.env.CODEVIBE_HOME_OVERRIDE) {
     return process.env.CODEVIBE_HOME_OVERRIDE;
   }
-  return os12.homedir();
+  return os11.homedir();
 }
 function cohortFlagFilePath() {
-  return path12.join(resolveHome2(), ".codevibe", "cohort-flags.json");
+  return path11.join(resolveHome(), ".codevibe", "cohort-flags.json");
 }
 async function getCohortFlag(name, _sessionId) {
   const filePath = cohortFlagFilePath();
   try {
-    const raw = await fs9.readFile(filePath, "utf8");
+    const raw = await fs8.readFile(filePath, "utf8");
     const parsed = JSON.parse(raw);
     const value = parsed[name];
     if (typeof value !== "boolean") {
@@ -15750,15 +15708,15 @@ ${result.upgradeHint}`;
 
 // src/structural-summary/generator.ts
 var crypto4 = __toESM(require("crypto"));
-var path19 = __toESM(require("path"));
+var path18 = __toESM(require("path"));
 init_logger2();
 
 // src/structural-summary/privacy-filter.ts
-var path13 = __toESM(require("path"));
+var path12 = __toESM(require("path"));
 function isOutsideRoot(rel) {
   if (rel === "..") return true;
-  if (rel.startsWith(".." + path13.sep)) return true;
-  if (path13.sep !== "/" && rel.startsWith("../")) return true;
+  if (rel.startsWith(".." + path12.sep)) return true;
+  if (path12.sep !== "/" && rel.startsWith("../")) return true;
   return false;
 }
 var SECRET_DENY_LIST = [
@@ -15784,12 +15742,12 @@ var SECRET_DENY_SUFFIXES = [
   ".keystore"
 ];
 function matchesSecretDenyList(absolutePath) {
-  const base = path13.basename(absolutePath);
+  const base = path12.basename(absolutePath);
   for (const entry of SECRET_DENY_LIST) {
     if (base === entry) {
       if (entry === "credentials") {
-        const dir = path13.dirname(absolutePath);
-        if (path13.basename(dir) === ".aws") return true;
+        const dir = path12.dirname(absolutePath);
+        if (path12.basename(dir) === ".aws") return true;
         continue;
       }
       return true;
@@ -15809,7 +15767,7 @@ function isPathInIgnoredPrefixes(absolutePath, exactPaths, dirPrefixes) {
   let p = absolutePath;
   for (let i = 0; i < 4096; i++) {
     if (dirPrefixes.has(p)) return true;
-    const parent = path13.dirname(p);
+    const parent = path12.dirname(p);
     if (parent === p) return false;
     p = parent;
   }
@@ -15820,7 +15778,7 @@ function isPathAccountedFor(realFile, countedExactPaths, countedPrunedPrefixes)
   let p = realFile;
   for (let i = 0; i < 4096; i++) {
     if (countedPrunedPrefixes.has(p)) return true;
-    const parent = path13.dirname(p);
+    const parent = path12.dirname(p);
     if (parent === p) return false;
     p = parent;
   }
@@ -15840,8 +15798,8 @@ function isPathAdmissible(absolutePath, state, isDir = false) {
   )) {
     return { admissible: false, reason: "gitignore" };
   }
-  const rel = path13.relative(state.realRootPath, absolutePath);
-  if (rel.length > 0 && !isOutsideRoot(rel) && !path13.isAbsolute(rel) && state.userIgnoreMatcher.ignores(rel, isDir)) {
+  const rel = path12.relative(state.realRootPath, absolutePath);
+  if (rel.length > 0 && !isOutsideRoot(rel) && !path12.isAbsolute(rel) && state.userIgnoreMatcher.ignores(rel, isDir)) {
     return { admissible: false, reason: "userIgnore" };
   }
   return { admissible: true };
@@ -15857,8 +15815,8 @@ var StructuralSummaryError = class extends Error {
 };
 
 // src/structural-summary/walker.ts
-var fs10 = __toESM(require("fs/promises"));
-var path14 = __toESM(require("path"));
+var fs9 = __toESM(require("fs/promises"));
+var path13 = __toESM(require("path"));
 var import_child_process3 = require("child_process");
 var import_util = require("util");
 init_logger2();
@@ -16006,7 +15964,7 @@ var DEFAULT_SKIP_DIRS = /* @__PURE__ */ new Set([
 async function walk(opts) {
   let realRootPath;
   try {
-    realRootPath = await fs10.realpath(opts.rootPath);
+    realRootPath = await fs9.realpath(opts.rootPath);
   } catch {
     realRootPath = opts.rootPath;
   }
@@ -16078,7 +16036,7 @@ async function walkDir(realDir, presentedPath, depth, ctx, isRoot) {
   }
   let entries;
   try {
-    entries = await fs10.readdir(realDir, { withFileTypes: true });
+    entries = await fs9.readdir(realDir, { withFileTypes: true });
   } catch (err) {
     if (isRoot) {
       throw new StructuralSummaryError(
@@ -16098,8 +16056,8 @@ async function walkDir(realDir, presentedPath, depth, ctx, isRoot) {
       ctx.truncated = true;
       break;
     }
-    const childReal = path14.join(realDir, entry.name);
-    const childPresented = path14.join(presentedPath, entry.name);
+    const childReal = path13.join(realDir, entry.name);
+    const childPresented = path13.join(presentedPath, entry.name);
     if (entry.isDirectory() && DEFAULT_SKIP_DIRS.has(entry.name)) {
       ctx.counts.excludedByGitignore++;
       ctx.countedPrunedPrefixes.add(childReal);
@@ -16158,7 +16116,7 @@ async function walkDir(realDir, presentedPath, depth, ctx, isRoot) {
     if (entry.isFile()) {
       let size = 0;
       try {
-        const st = await fs10.stat(childReal);
+        const st = await fs9.stat(childReal);
         size = st.size;
       } catch {
         continue;
@@ -16166,7 +16124,7 @@ async function walkDir(realDir, presentedPath, depth, ctx, isRoot) {
       ctx.opts.fileCountBudget.remaining--;
       node.fileCount++;
       node.bytes += size;
-      const ext = path14.extname(entry.name).toLowerCase();
+      const ext = path13.extname(entry.name).toLowerCase();
       if (ext) {
         ctx.fileExtensions.set(ext, (ctx.fileExtensions.get(ext) ?? 0) + 1);
       }
@@ -16191,7 +16149,7 @@ async function walkDir(realDir, presentedPath, depth, ctx, isRoot) {
           const cap = Math.min(size, MAX_BODY_PER_FILE);
           if (size > MAX_BODY_PER_FILE) {
             try {
-              const handle = await fs10.open(childReal, "r");
+              const handle = await fs9.open(childReal, "r");
               try {
                 const buf = Buffer.alloc(cap);
                 await handle.read(buf, 0, cap, 0);
@@ -16205,7 +16163,7 @@ async function walkDir(realDir, presentedPath, depth, ctx, isRoot) {
             }
           } else {
             try {
-              bodyNode.body = await fs10.readFile(childReal, "utf8");
+              bodyNode.body = await fs9.readFile(childReal, "utf8");
             } catch {
               bodyNode.bodyTruncated = true;
             }
@@ -16225,9 +16183,9 @@ function shouldIncludeBody(realFile, includeBodies, realRootPath) {
   if (!includeBodies || includeBodies.length === 0) return false;
   void realRootPath;
   for (const optIn of includeBodies) {
-    if (!path14.isAbsolute(optIn)) continue;
+    if (!path13.isAbsolute(optIn)) continue;
     if (realFile === optIn) return true;
-    const sep16 = optIn.endsWith(path14.sep) ? optIn : optIn + path14.sep;
+    const sep16 = optIn.endsWith(path13.sep) ? optIn : optIn + path13.sep;
     if (realFile.startsWith(sep16)) return true;
   }
   return false;
@@ -16243,8 +16201,8 @@ async function buildExclusionState(callerRoot, realRootPath, ignoreFile) {
     if (!repoTopLevel) {
       notInGitRepo = true;
     } else {
-      const rel = path14.relative(repoTopLevel, realRootPath);
-      if (rel.length > 0 && (isOutsideRoot(rel) || path14.isAbsolute(rel))) {
+      const rel = path13.relative(repoTopLevel, realRootPath);
+      if (rel.length > 0 && (isOutsideRoot(rel) || path13.isAbsolute(rel))) {
         notInGitRepo = true;
         logger.info("[structural-summary] realRootPath outside repoTopLevel \u2014 non-git fallback", {
           realRootPath,
@@ -16271,9 +16229,9 @@ async function buildExclusionState(callerRoot, realRootPath, ignoreFile) {
       for (const rec of records) {
         if (rec.startsWith("?? ")) {
           const relPath = rec.slice(3);
-          const abs = path14.join(repoTopLevel, relPath);
-          const relFromRoot = path14.relative(realRootPath, abs);
-          if (relFromRoot.length > 0 && !isOutsideRoot(relFromRoot) && !path14.isAbsolute(relFromRoot)) {
+          const abs = path13.join(repoTopLevel, relPath);
+          const relFromRoot = path13.relative(realRootPath, abs);
+          if (relFromRoot.length > 0 && !isOutsideRoot(relFromRoot) && !path13.isAbsolute(relFromRoot)) {
             untrackedSet.add(abs);
           }
         }
@@ -16304,7 +16262,7 @@ async function buildExclusionState(callerRoot, realRootPath, ignoreFile) {
       for (const rec of records) {
         const isDir = rec.endsWith("/");
         const trimmed = isDir ? rec.slice(0, -1) : rec;
-        const abs = path14.join(repoTopLevel, trimmed);
+        const abs = path13.join(repoTopLevel, trimmed);
         if (isDir) {
           ignoredDirPrefixes.add(abs);
         } else {
@@ -16320,7 +16278,7 @@ async function buildExclusionState(callerRoot, realRootPath, ignoreFile) {
   let userIgnoreMatcher = emptyUserIgnoreMatcher();
   if (ignoreFile) {
     try {
-      const text2 = await fs10.readFile(ignoreFile, "utf8");
+      const text2 = await fs9.readFile(ignoreFile, "utf8");
       userIgnoreMatcher = compileUserIgnore(text2);
     } catch (err) {
       const code = err.code;
@@ -16346,7 +16304,7 @@ async function buildExclusionState(callerRoot, realRootPath, ignoreFile) {
 }
 
 // src/structural-summary/manifest-parsers/index.ts
-var path18 = __toESM(require("path"));
+var path17 = __toESM(require("path"));
 init_logger2();
 
 // src/structural-summary/manifest-parsers/npm.ts
@@ -16355,16 +16313,16 @@ __export(npm_exports, {
   findManifest: () => findManifest,
   parse: () => parse
 });
-var fs12 = __toESM(require("fs/promises"));
-var path15 = __toESM(require("path"));
+var fs11 = __toESM(require("fs/promises"));
+var path14 = __toESM(require("path"));
 
 // src/structural-summary/safe-file-read.ts
-var fs11 = __toESM(require("fs/promises"));
+var fs10 = __toESM(require("fs/promises"));
 var fsConstants2 = __toESM(require("fs"));
 async function safeReadTextFile(absPath) {
   let lstatResult;
   try {
-    lstatResult = await fs11.lstat(absPath, { bigint: true });
+    lstatResult = await fs10.lstat(absPath, { bigint: true });
   } catch {
     return null;
   }
@@ -16374,7 +16332,7 @@ async function safeReadTextFile(absPath) {
   const flags = fsConstants2.constants.O_RDONLY | (oNofollow ?? 0);
   let handle;
   try {
-    handle = await fs11.open(absPath, flags);
+    handle = await fs10.open(absPath, flags);
   } catch {
     return null;
   }
@@ -16397,9 +16355,9 @@ async function safeReadTextFile(absPath) {
 
 // src/structural-summary/manifest-parsers/npm.ts
 async function findManifest(rootPath) {
-  const candidate = path15.join(rootPath, "package.json");
+  const candidate = path14.join(rootPath, "package.json");
   try {
-    const st = await fs12.lstat(candidate);
+    const st = await fs11.lstat(candidate);
     if (st.isSymbolicLink()) return null;
     if (st.isFile()) return candidate;
   } catch {
@@ -16439,13 +16397,13 @@ __export(cargo_exports, {
   findManifest: () => findManifest2,
   parse: () => parse3
 });
-var fs13 = __toESM(require("fs/promises"));
-var path16 = __toESM(require("path"));
+var fs12 = __toESM(require("fs/promises"));
+var path15 = __toESM(require("path"));
 var toml = __toESM(require("@iarna/toml"));
 async function findManifest2(rootPath) {
-  const candidate = path16.join(rootPath, "Cargo.toml");
+  const candidate = path15.join(rootPath, "Cargo.toml");
   try {
-    const st = await fs13.lstat(candidate);
+    const st = await fs12.lstat(candidate);
     if (st.isSymbolicLink()) return null;
     if (st.isFile()) return candidate;
   } catch {
@@ -16492,14 +16450,14 @@ async function parse3(file) {
 }
 
 // src/structural-summary/manifest-parsers/other.ts
-var fs14 = __toESM(require("fs/promises"));
-var path17 = __toESM(require("path"));
+var fs13 = __toESM(require("fs/promises"));
+var path16 = __toESM(require("path"));
 init_logger2();
 var pyproject = {
   async findManifest(rootPath) {
-    const candidate = path17.join(rootPath, "pyproject.toml");
+    const candidate = path16.join(rootPath, "pyproject.toml");
     try {
-      const st = await fs14.lstat(candidate);
+      const st = await fs13.lstat(candidate);
       if (st.isSymbolicLink()) return null;
       if (st.isFile()) return candidate;
     } catch {
@@ -16546,9 +16504,9 @@ var pyproject = {
 };
 var gomod = {
   async findManifest(rootPath) {
-    const candidate = path17.join(rootPath, "go.mod");
+    const candidate = path16.join(rootPath, "go.mod");
     try {
-      const st = await fs14.lstat(candidate);
+      const st = await fs13.lstat(candidate);
       if (st.isSymbolicLink()) return null;
       if (st.isFile()) return candidate;
     } catch {
@@ -16592,9 +16550,9 @@ var gomod = {
 };
 var podfile = {
   async findManifest(rootPath) {
-    const candidate = path17.join(rootPath, "Podfile");
+    const candidate = path16.join(rootPath, "Podfile");
     try {
-      const st = await fs14.lstat(candidate);
+      const st = await fs13.lstat(candidate);
       if (st.isSymbolicLink()) return null;
       if (st.isFile()) return candidate;
     } catch {
@@ -16635,9 +16593,9 @@ var podfile = {
 var gradle = {
   async findManifest(rootPath) {
     for (const name of ["build.gradle", "build.gradle.kts"]) {
-      const candidate = path17.join(rootPath, name);
+      const candidate = path16.join(rootPath, name);
       try {
-        const st = await fs14.lstat(candidate);
+        const st = await fs13.lstat(candidate);
         if (st.isSymbolicLink()) continue;
         if (st.isFile()) return candidate;
       } catch {
@@ -16677,7 +16635,7 @@ async function parse4(rootPath, exclusionState, countedExactPaths, countedPruned
   for (const parser of PARSERS) {
     const file = await parser.findManifest(rootPath);
     if (!file) continue;
-    const lexicalFile = path18.join(exclusionState.realRootPath, path18.basename(file));
+    const lexicalFile = path17.join(exclusionState.realRootPath, path17.basename(file));
     const admission = isPathAdmissible(lexicalFile, exclusionState);
     if (!admission.admissible) {
       const walkerAccountedFor = isPathAccountedFor(
@@ -16733,7 +16691,7 @@ async function generate(opts) {
   }
   if (opts.includeBodies) {
     for (const p of opts.includeBodies) {
-      if (!path19.isAbsolute(p)) {
+      if (!path18.isAbsolute(p)) {
         throw new StructuralSummaryError(
           `includeBodies entry must be absolute (got: ${p}).`,
           "invalid_path"
@@ -16867,7 +16825,7 @@ var README_CANDIDATES = ["README.md", "README.rst", "README.txt", "README"];
 async function readReadmePreview(rootPath, exclusionState, countedExactPaths, countedPrunedPrefixes, counters) {
   void rootPath;
   for (const name of README_CANDIDATES) {
-    const candidatePath = path19.join(exclusionState.realRootPath, name);
+    const candidatePath = path18.join(exclusionState.realRootPath, name);
     try {
       const admission = isPathAdmissible(candidatePath, exclusionState);
       if (!admission.admissible) {
@@ -16955,19 +16913,19 @@ function inferLanguages(extensions) {
 }
 
 // src/structural-summary/opt-in-store.ts
-var fs15 = __toESM(require("fs/promises"));
-var path20 = __toESM(require("path"));
-var os13 = __toESM(require("os"));
+var fs14 = __toESM(require("fs/promises"));
+var path19 = __toESM(require("path"));
+var os12 = __toESM(require("os"));
 init_logger2();
-function resolveHome3() {
+function resolveHome2() {
   const isTestEnv = process.env.VITEST === "true" || process.env.NODE_ENV === "test";
   if (isTestEnv && process.env.CODEVIBE_HOME_OVERRIDE) {
     return process.env.CODEVIBE_HOME_OVERRIDE;
   }
-  return os13.homedir();
+  return os12.homedir();
 }
 function optInFilePath() {
-  return path20.join(resolveHome3(), ".codevibe", "structural-summary.opt-in.json");
+  return path19.join(resolveHome2(), ".codevibe", "structural-summary.opt-in.json");
 }
 function isOptInFile(value) {
   if (!value || typeof value !== "object") return false;
@@ -16985,7 +16943,7 @@ function filterToAbsolutePaths(file) {
   const dropped = [];
   const kept = [];
   for (const p of file.bodyInclusionPaths) {
-    if (path20.isAbsolute(p)) {
+    if (path19.isAbsolute(p)) {
       kept.push(p);
     } else {
       dropped.push(p);
@@ -17006,7 +16964,7 @@ async function readOptIn(currentTier) {
   const filePath = optInFilePath();
   let st;
   try {
-    st = await fs15.stat(filePath);
+    st = await fs14.stat(filePath);
   } catch (err) {
     const code = err?.code;
     if (code !== "ENOENT") {
@@ -17026,7 +16984,7 @@ async function readOptIn(currentTier) {
   }
   let raw;
   try {
-    raw = await fs15.readFile(filePath, "utf8");
+    raw = await fs14.readFile(filePath, "utf8");
   } catch (err) {
     logger.debug("[structural-summary] opt-in read error \u2014 treating as missing", {
       filePath,
@@ -17062,14 +17020,14 @@ async function readOptIn(currentTier) {
 }
 async function writeOptInRaw(file) {
   const filePath = optInFilePath();
-  const dir = path20.dirname(filePath);
-  await fs15.mkdir(dir, { recursive: true });
-  await fs15.writeFile(filePath, JSON.stringify(file, null, 2), {
+  const dir = path19.dirname(filePath);
+  await fs14.mkdir(dir, { recursive: true });
+  await fs14.writeFile(filePath, JSON.stringify(file, null, 2), {
     encoding: "utf8",
     mode: 384
   });
   try {
-    await fs15.chmod(filePath, 384);
+    await fs14.chmod(filePath, 384);
   } catch {
   }
 }
@@ -17080,16 +17038,16 @@ async function addBodyPath(bodyPath, currentTier) {
       "tier_gate"
     );
   }
-  if (!path20.isAbsolute(bodyPath)) {
+  if (!path19.isAbsolute(bodyPath)) {
     throw new StructuralSummaryError(
       `Body inclusion opt-in path must be absolute (got: ${bodyPath}).`,
       "invalid_path"
     );
   }
-  const normalised = path20.resolve(bodyPath);
+  const normalised = path19.resolve(bodyPath);
   let canonical;
   try {
-    canonical = await fs15.realpath(normalised);
+    canonical = await fs14.realpath(normalised);
   } catch (err) {
     const code = err?.code;
     throw new StructuralSummaryError(
@@ -17112,8 +17070,8 @@ async function addBodyPath(bodyPath, currentTier) {
 
 // src/orchestration-shell/quorum-loop.ts
 var import_node_fs18 = require("node:fs");
-var path40 = __toESM(require("node:path"));
-var os22 = __toESM(require("node:os"));
+var path39 = __toESM(require("node:path"));
+var os21 = __toESM(require("node:os"));
 var import_node_child_process6 = require("node:child_process");
 var import_node_util3 = require("node:util");
 var import_uuid11 = require("uuid");
@@ -17121,7 +17079,7 @@ var import_ulid3 = require("ulid");
 
 // src/local-executor/authority.ts
 var import_node_fs3 = require("node:fs");
-var path21 = __toESM(require("node:path"));
+var path20 = __toESM(require("node:path"));
 var AuthorityError = class extends Error {
   constructor(refusal) {
     super(`${refusal.category}: ${refusal.detail}`);
@@ -17145,8 +17103,8 @@ function authorityExpired(scope) {
 async function enforceWrite(scope, p) {
   const canonical = await import_node_fs3.promises.realpath(p).catch((e) => {
     if (e.code === "ENOENT") {
-      const parent = path21.dirname(p);
-      return import_node_fs3.promises.realpath(parent).then((realParent) => path21.join(realParent, path21.basename(p))).catch((parentErr) => {
+      const parent = path20.dirname(p);
+      return import_node_fs3.promises.realpath(parent).then((realParent) => path20.join(realParent, path20.basename(p))).catch((parentErr) => {
         throw new AuthorityError({
           category: "authority_scope_conflict",
           detail: `parent directory ${parent} for write target ${p} does not exist or is unresolvable: ${parentErr.message}`
@@ -17158,7 +17116,7 @@ async function enforceWrite(scope, p) {
       detail: `realpath(${p}) failed: ${e.message}`
     });
   });
-  const inScope = scope.writeScopes.some((s) => canonical.startsWith(s + path21.sep) || canonical === s);
+  const inScope = scope.writeScopes.some((s) => canonical.startsWith(s + path20.sep) || canonical === s);
   if (!inScope) {
     throw new AuthorityError({
       category: "authority_scope_conflict",
@@ -17184,7 +17142,7 @@ async function enforceRead(scope, p) {
   } catch (e) {
     const err = e;
     if (err.code === "ENOENT") {
-      const parent = path21.dirname(p);
+      const parent = path20.dirname(p);
       let realParent;
       try {
         realParent = await import_node_fs3.promises.realpath(parent);
@@ -17196,7 +17154,7 @@ async function enforceRead(scope, p) {
         });
       }
       const parentInScope = scope.readScopes.some(
-        (s) => realParent.startsWith(s + path21.sep) || realParent === s
+        (s) => realParent.startsWith(s + path20.sep) || realParent === s
       );
       if (!parentInScope) {
         throw new AuthorityError({
@@ -17210,14 +17168,14 @@ async function enforceRead(scope, p) {
           detail: "authority expired; re-authorize"
         });
       }
-      throw new FileNotFound(path21.join(realParent, path21.basename(p)), err);
+      throw new FileNotFound(path20.join(realParent, path20.basename(p)), err);
     }
     throw new AuthorityError({
       category: "authority_scope_conflict",
       detail: `realpath(${p}) failed: ${err.message}`
     });
   }
-  const inScope = scope.readScopes.some((s) => canonical.startsWith(s + path21.sep) || canonical === s);
+  const inScope = scope.readScopes.some((s) => canonical.startsWith(s + path20.sep) || canonical === s);
   if (!inScope) {
     throw new AuthorityError({
       category: "authority_scope_conflict",
@@ -18017,7 +17975,7 @@ var HookBridge = class {
 
 // src/local-executor/local-executor-impl.ts
 var import_node_fs13 = require("node:fs");
-var path32 = __toESM(require("node:path"));
+var path31 = __toESM(require("node:path"));
 
 // src/local-executor/class-a-emit.ts
 var import_node_fs6 = require("node:fs");
@@ -18323,8 +18281,8 @@ function normalizeTrackAssignedWire(raw) {
   if (!raw || typeof raw !== "object") return {};
   const o = raw;
   const osRaw = pick(o, "ownershipScope", "ownership_scope");
-  const os33 = osRaw && typeof osRaw === "object" ? osRaw : {};
-  const sharedContracts = pick(os33, "sharedContracts", "shared_contracts");
+  const os32 = osRaw && typeof osRaw === "object" ? osRaw : {};
+  const sharedContracts = pick(os32, "sharedContracts", "shared_contracts");
   const ccRaw = pick(o, "conflictContext", "conflict_context");
   const conflictContext = ccRaw && typeof ccRaw === "object" ? normalizeConflictContext(ccRaw) : void 0;
   return {
@@ -18333,10 +18291,10 @@ function normalizeTrackAssignedWire(raw) {
     task_id: pick(o, "taskId", "task_id"),
     implementor_agent: upperAgentKind(pick(o, "implementorAgent", "implementor_agent")),
     ownership_scope: {
-      write_paths: pick(os33, "writePaths", "write_paths"),
+      write_paths: pick(os32, "writePaths", "write_paths"),
       shared_contracts: sharedContracts,
-      test_surfaces: pick(os33, "testSurfaces", "test_surfaces"),
-      auto_modified_files: pick(os33, "autoModifiedFiles", "auto_modified_files")
+      test_surfaces: pick(os32, "testSurfaces", "test_surfaces"),
+      auto_modified_files: pick(os32, "autoModifiedFiles", "auto_modified_files")
     },
     is_shared_test_owner: pick(o, "isSharedTestOwner", "is_shared_test_owner"),
     state_dir: pick(o, "stateDir", "state_dir"),
@@ -18452,15 +18410,15 @@ function isValidTrackAssignedPayload(payload) {
     return false;
   }
   if (typeof payload.is_shared_test_owner !== "boolean") return false;
-  const os33 = payload.ownership_scope;
-  if (!os33 || typeof os33 !== "object") return false;
-  if (!Array.isArray(os33.write_paths)) return false;
-  if (!Array.isArray(os33.auto_modified_files)) return false;
-  if (!Array.isArray(os33.shared_contracts)) return false;
-  if (!Array.isArray(os33.test_surfaces)) return false;
-  if (!os33.write_paths.every((p) => typeof p === "string")) return false;
-  if (!os33.auto_modified_files.every((p) => typeof p === "string")) return false;
-  if (!os33.test_surfaces.every((p) => typeof p === "string")) return false;
+  const os32 = payload.ownership_scope;
+  if (!os32 || typeof os32 !== "object") return false;
+  if (!Array.isArray(os32.write_paths)) return false;
+  if (!Array.isArray(os32.auto_modified_files)) return false;
+  if (!Array.isArray(os32.shared_contracts)) return false;
+  if (!Array.isArray(os32.test_surfaces)) return false;
+  if (!os32.write_paths.every((p) => typeof p === "string")) return false;
+  if (!os32.auto_modified_files.every((p) => typeof p === "string")) return false;
+  if (!os32.test_surfaces.every((p) => typeof p === "string")) return false;
   return true;
 }
 function isValidMergeGateDispatchPayload(payload) {
@@ -18940,17 +18898,17 @@ var ClassBConsumer = class {
 
 // src/local-executor/merge-train.ts
 var crypto8 = __toESM(require("node:crypto"));
-var fs23 = __toESM(require("node:fs/promises"));
-var os16 = __toESM(require("node:os"));
-var path28 = __toESM(require("node:path"));
+var fs22 = __toESM(require("node:fs/promises"));
+var os15 = __toESM(require("node:os"));
+var path27 = __toESM(require("node:path"));
 init_logger2();
 
 // src/orchestration-shell/declared-test-runner.ts
-var path23 = __toESM(require("node:path"));
+var path22 = __toESM(require("node:path"));
 var DECLARED_TEST_TIMEOUT_MS = 3e5;
 var SUPPORTED_JS_EXTS = [".js", ".mjs", ".cjs"];
 function normalizeScopePath(rel) {
-  const n = path23.posix.normalize(rel.replace(/\\/g, "/")).replace(/\/+$/, "");
+  const n = path22.posix.normalize(rel.replace(/\\/g, "/")).replace(/\/+$/, "");
   return n === "." ? "" : n;
 }
 function shadowDiffDrift(before, after) {
@@ -18972,16 +18930,16 @@ function shadowDiffDrift(before, after) {
   return [...drift].sort();
 }
 function isContained(abs, shadowReal) {
-  return abs === shadowReal || abs.startsWith(shadowReal + path23.sep);
+  return abs === shadowReal || abs.startsWith(shadowReal + path22.sep);
 }
 function toShadowRel(raw, shadowReal) {
-  const abs = path23.resolve(shadowReal, normalizeScopePath(raw));
+  const abs = path22.resolve(shadowReal, normalizeScopePath(raw));
   if (!isContained(abs, shadowReal)) return { kind: "escape" };
-  const rel = path23.relative(shadowReal, abs);
+  const rel = path22.relative(shadowReal, abs);
   return rel.length === 0 ? { kind: "empty" } : { kind: "rel", rel };
 }
 async function classify(rel, shadowReal, deps) {
-  const abs = path23.resolve(shadowReal, rel);
+  const abs = path22.resolve(shadowReal, rel);
   if (!isContained(abs, shadowReal)) {
     return { kind: "escape" };
   }
@@ -19014,7 +18972,7 @@ function isDeleted(rel, deletedPaths) {
   return deletedPaths.some((d) => d === rel || d.startsWith(rel + "/"));
 }
 function isSupportedJs(rel) {
-  return SUPPORTED_JS_EXTS.includes(path23.extname(rel).toLowerCase());
+  return SUPPORTED_JS_EXTS.includes(path22.extname(rel).toLowerCase());
 }
 var FRAMEWORK_RUNNERS = [
   // `vitest run <file>` — `run` forces single-shot (no watch); the path filters to that file.
@@ -19026,11 +18984,11 @@ var FRAMEWORK_RUNNERS = [
 ];
 async function detectFramework(fileAbsReal, shadowReal, deps) {
   let framework;
-  let dir = path23.dirname(fileAbsReal);
+  let dir = path22.dirname(fileAbsReal);
   while (isContained(dir, shadowReal)) {
     let declared;
     try {
-      const pkg = JSON.parse(await deps.readFile(path23.join(dir, "package.json")));
+      const pkg = JSON.parse(await deps.readFile(path22.join(dir, "package.json")));
       const allDeps = { ...pkg.dependencies ?? {}, ...pkg.devDependencies ?? {} };
       declared = FRAMEWORK_RUNNERS.find((r) => Object.prototype.hasOwnProperty.call(allDeps, r.dep));
     } catch {
@@ -19040,22 +18998,22 @@ async function detectFramework(fileAbsReal, shadowReal, deps) {
       framework = declared;
       break;
     }
-    const parent = path23.dirname(dir);
+    const parent = path22.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
   if (!framework) {
     return { kind: "node" };
   }
-  let bdir = path23.dirname(fileAbsReal);
+  let bdir = path22.dirname(fileAbsReal);
   while (isContained(bdir, shadowReal)) {
-    const binAbs = path23.join(bdir, "node_modules", ".bin", framework.bin);
+    const binAbs = path22.join(bdir, "node_modules", ".bin", framework.bin);
     try {
       await deps.lstat(binAbs);
       return { kind: "framework", name: framework.dep, binAbs, args: framework.args(fileAbsReal) };
     } catch {
     }
-    const parent = path23.dirname(bdir);
+    const parent = path22.dirname(bdir);
     if (parent === bdir) break;
     bdir = parent;
   }
@@ -19224,7 +19182,7 @@ async function runDeclaredTestSurfaces(args) {
         return {
           outcome: "fail",
           failingPath: rel,
-          reason: `no supported runner for ${path23.extname(rel)}`,
+          reason: `no supported runner for ${path22.extname(rel)}`,
           ranCount: ran.count,
           skipped
         };
@@ -19267,7 +19225,7 @@ async function runDeclaredTestSurfaces(args) {
 
 // src/local-executor/verification-gates/build.ts
 var import_node_fs7 = require("node:fs");
-var path24 = __toESM(require("node:path"));
+var path23 = __toESM(require("node:path"));
 
 // src/local-executor/verification-gates/shell-runner.ts
 var import_node_child_process3 = require("node:child_process");
@@ -19368,8 +19326,8 @@ verification-gate spawn error: ${err.message ?? err.code ?? "unknown"}`;
 
 // src/local-executor/verification-gates/build.ts
 async function runBuildGate(args) {
-  const hasCargo = await fileExists(path24.join(args.cwd, "Cargo.toml"));
-  const hasPackageJson = await fileExists(path24.join(args.cwd, "package.json"));
+  const hasCargo = await fileExists(path23.join(args.cwd, "Cargo.toml"));
+  const hasPackageJson = await fileExists(path23.join(args.cwd, "package.json"));
   if (hasCargo) {
     return runShellCommand({
       command: "cargo",
@@ -19404,10 +19362,10 @@ async function fileExists(p) {
 
 // src/local-executor/verification-gates/tests.ts
 var import_node_fs8 = require("node:fs");
-var path25 = __toESM(require("node:path"));
+var path24 = __toESM(require("node:path"));
 async function runTestsGate(args) {
-  const hasCargo = await fileExists2(path25.join(args.cwd, "Cargo.toml"));
-  const hasPackageJson = await fileExists2(path25.join(args.cwd, "package.json"));
+  const hasCargo = await fileExists2(path24.join(args.cwd, "Cargo.toml"));
+  const hasPackageJson = await fileExists2(path24.join(args.cwd, "package.json"));
   if (hasCargo) {
     return runShellCommand({
       command: "cargo",
@@ -19442,10 +19400,10 @@ async function fileExists2(p) {
 
 // src/local-executor/verification-gates/typecheck.ts
 var import_node_fs9 = require("node:fs");
-var path26 = __toESM(require("node:path"));
+var path25 = __toESM(require("node:path"));
 async function runTypecheckGate(args) {
-  const hasCargo = await fileExists3(path26.join(args.cwd, "Cargo.toml"));
-  const hasPackageJson = await fileExists3(path26.join(args.cwd, "package.json"));
+  const hasCargo = await fileExists3(path25.join(args.cwd, "Cargo.toml"));
+  const hasPackageJson = await fileExists3(path25.join(args.cwd, "package.json"));
   if (hasCargo) {
     return runShellCommand({
       command: "cargo",
@@ -19481,9 +19439,9 @@ async function fileExists3(p) {
 // src/local-executor/worktree-merge.ts
 var import_node_child_process4 = require("node:child_process");
 var crypto7 = __toESM(require("node:crypto"));
-var fs22 = __toESM(require("node:fs/promises"));
-var os15 = __toESM(require("node:os"));
-var path27 = __toESM(require("node:path"));
+var fs21 = __toESM(require("node:fs/promises"));
+var os14 = __toESM(require("node:os"));
+var path26 = __toESM(require("node:path"));
 var import_node_util = require("node:util");
 
 // src/local-executor/git-lock-retry.ts
@@ -19972,8 +19930,8 @@ function canonPath(p, caseInsensitive) {
 async function captureUntrackedTree(repoDir, taskGroupId, repoId) {
   const paths = await untrackedPaths(repoDir);
   if (paths.length === 0) return null;
-  const tmpIndex = path27.join(
-    os15.tmpdir(),
+  const tmpIndex = path26.join(
+    os14.tmpdir(),
     `cv-untracked-idx.${process.pid}.${crypto7.randomBytes(6).toString("hex")}`
   );
   try {
@@ -19990,7 +19948,7 @@ async function captureUntrackedTree(repoDir, taskGroupId, repoId) {
     });
     return tree;
   } finally {
-    await fs22.rm(tmpIndex, { force: true }).catch(() => void 0);
+    await fs21.rm(tmpIndex, { force: true }).catch(() => void 0);
   }
 }
 async function restoreUntrackedTree(repoDir, treeSha, guard) {
@@ -20103,8 +20061,8 @@ async function snapshotWorktreeTree(repoDir) {
   return snapshotWorktreeTreeSeeded(repoDir, "HEAD");
 }
 async function snapshotWorktreeTreeSeeded(repoDir, seedRef) {
-  const tmpIndex = path27.join(
-    os15.tmpdir(),
+  const tmpIndex = path26.join(
+    os14.tmpdir(),
     `cv-wt-snap-idx.${process.pid}.${crypto7.randomBytes(6).toString("hex")}`
   );
   try {
@@ -20122,7 +20080,7 @@ async function snapshotWorktreeTreeSeeded(repoDir, seedRef) {
     const { stdout } = await gitWithIndex(repoDir, tmpIndex, ["write-tree"]);
     return stdout.trim();
   } finally {
-    await fs22.rm(tmpIndex, { force: true }).catch(() => void 0);
+    await fs21.rm(tmpIndex, { force: true }).catch(() => void 0);
   }
 }
 async function treeEntryMap(repoDir, treeSha) {
@@ -20173,7 +20131,7 @@ async function normalizingRawDigest(repoDir, paths) {
   for (const p of normalizing) {
     hash.update(`${p.length}:${p}\0`);
     try {
-      const bytes = await fs22.readFile(path27.join(repoDir, p));
+      const bytes = await fs21.readFile(path26.join(repoDir, p));
       hash.update(`${bytes.length}:`);
       hash.update(bytes);
     } catch {
@@ -20208,8 +20166,8 @@ async function refTreeNormalizingRawDigest(repoDir, ref) {
   }
 }
 async function reconstructPostResetAnchor(repoDir, targetRef, entryWorktreeTree, entryIndexTree) {
-  const tmpIndex = path27.join(
-    os15.tmpdir(),
+  const tmpIndex = path26.join(
+    os14.tmpdir(),
     `cv-postreset-idx.${process.pid}.${crypto7.randomBytes(6).toString("hex")}`
   );
   try {
@@ -20245,12 +20203,12 @@ async function reconstructPostResetAnchor(repoDir, targetRef, entryWorktreeTree,
     });
     return void 0;
   } finally {
-    await fs22.rm(tmpIndex, { force: true }).catch(() => void 0);
+    await fs21.rm(tmpIndex, { force: true }).catch(() => void 0);
   }
 }
 async function reconstructDirtyUncommittedPostPromoteTree(repoDir, integrationTree, prePromoteWorktreeTree, applySet) {
-  const tmpIndex = path27.join(
-    os15.tmpdir(),
+  const tmpIndex = path26.join(
+    os14.tmpdir(),
     `cv-du-post-idx.${process.pid}.${crypto7.randomBytes(6).toString("hex")}`
   );
   try {
@@ -20277,7 +20235,7 @@ async function reconstructDirtyUncommittedPostPromoteTree(repoDir, integrationTr
     });
     return void 0;
   } finally {
-    await fs22.rm(tmpIndex, { force: true }).catch(() => void 0);
+    await fs21.rm(tmpIndex, { force: true }).catch(() => void 0);
   }
 }
 async function reconstructUntrackedCheckoutAnchor(repoDir, prePromoteUserRef, trackedStashSha) {
@@ -21307,31 +21265,31 @@ async function catBlobRaw(repoDir, oid) {
   return res.stdout;
 }
 async function hashObjectW(repoDir, bytes) {
-  const tmp = path27.join(os15.tmpdir(), `cp14-w3-blob-${crypto7.randomBytes(8).toString("hex")}`);
-  await fs22.writeFile(tmp, bytes);
+  const tmp = path26.join(os14.tmpdir(), `cp14-w3-blob-${crypto7.randomBytes(8).toString("hex")}`);
+  await fs21.writeFile(tmp, bytes);
   try {
     const r = await git(repoDir, ["hash-object", "-w", "--no-filters", "--", tmp], { hermetic: true });
     return r.stdout.trim();
   } finally {
-    await fs22.rm(tmp, { force: true });
+    await fs21.rm(tmp, { force: true });
   }
 }
 async function diff3MergeBlobs(repoDir, oursOid, baseOid, theirsOid) {
-  const dir = await fs22.mkdtemp(path27.join(os15.tmpdir(), "cp14-w3-mf-"));
+  const dir = await fs21.mkdtemp(path26.join(os14.tmpdir(), "cp14-w3-mf-"));
   try {
-    const oursF = path27.join(dir, "ours");
-    const baseF = path27.join(dir, "base");
-    const theirsF = path27.join(dir, "theirs");
-    await fs22.writeFile(oursF, await catBlobRaw(repoDir, oursOid));
-    await fs22.writeFile(baseF, baseOid ? await catBlobRaw(repoDir, baseOid) : Buffer.alloc(0));
-    await fs22.writeFile(theirsF, await catBlobRaw(repoDir, theirsOid));
+    const oursF = path26.join(dir, "ours");
+    const baseF = path26.join(dir, "base");
+    const theirsF = path26.join(dir, "theirs");
+    await fs21.writeFile(oursF, await catBlobRaw(repoDir, oursOid));
+    await fs21.writeFile(baseF, baseOid ? await catBlobRaw(repoDir, baseOid) : Buffer.alloc(0));
+    await fs21.writeFile(theirsF, await catBlobRaw(repoDir, theirsOid));
     const r = await git(repoDir, ["merge-file", "-p", "--diff3", oursF, baseF, theirsF], {
       allowFail: true,
       hermetic: true
     });
     return r.stdout;
   } finally {
-    await fs22.rm(dir, { recursive: true, force: true });
+    await fs21.rm(dir, { recursive: true, force: true });
   }
 }
 async function extractThreeWayConflict(repoDir, oursCommit, theirsCommit, p) {
@@ -21398,7 +21356,7 @@ async function extractThreeWayConflict(repoDir, oursCommit, theirsCommit, p) {
   return { meta, conflictedBlob, multipleMergeBases };
 }
 async function assembleResolvedTree(repoDir, conflictedTree, resolved) {
-  const idx = path27.join(os15.tmpdir(), `cp14-w3-idx-${crypto7.randomBytes(8).toString("hex")}`);
+  const idx = path26.join(os14.tmpdir(), `cp14-w3-idx-${crypto7.randomBytes(8).toString("hex")}`);
   const runIdx = async (args) => {
     const env = sanitizeGitEnv();
     env.GIT_INDEX_FILE = idx;
@@ -21417,7 +21375,7 @@ async function assembleResolvedTree(repoDir, conflictedTree, resolved) {
     }
     return await runIdx(["write-tree"]);
   } finally {
-    await fs22.rm(idx, { force: true });
+    await fs21.rm(idx, { force: true });
   }
 }
 async function commitTreeOffBranch(repoDir, tree, parents, message, opts = {}) {
@@ -22589,8 +22547,8 @@ function stableStringify2(v) {
   const keys = Object.keys(obj).sort();
   return `{${keys.map((k) => `${JSON.stringify(k)}:${stableStringify2(obj[k])}`).join(",")}}`;
 }
-function lockfileCanonicalEntries(path55, content) {
-  const base = path55.replace(/\\/g, "/").toLowerCase();
+function lockfileCanonicalEntries(path54, content) {
+  const base = path54.replace(/\\/g, "/").toLowerCase();
   const name = base.slice(base.lastIndexOf("/") + 1);
   try {
     if (name === "cargo.lock") {
@@ -22891,18 +22849,18 @@ function globToRegExp(glob) {
   }
   return new RegExp("^" + re + "$");
 }
-function normalizePath(path55) {
-  let p = path55.replace(/\\/g, "/");
+function normalizePath(path54) {
+  let p = path54.replace(/\\/g, "/");
   if (p.startsWith("./")) p = p.slice(2);
   return p;
 }
-function basenameLower(path55) {
-  const p = normalizePath(path55);
+function basenameLower(path54) {
+  const p = normalizePath(path54);
   const slash = p.lastIndexOf("/");
   return (slash >= 0 ? p.slice(slash + 1) : p).toLowerCase();
 }
-function pathMatchesGlob(path55, glob) {
-  const p = normalizePath(path55);
+function pathMatchesGlob(path54, glob) {
+  const p = normalizePath(path54);
   const g = glob.replace(/\\/g, "/");
   if (!g.includes("/")) {
     const base = p.slice(p.lastIndexOf("/") + 1);
@@ -22910,8 +22868,8 @@ function pathMatchesGlob(path55, glob) {
   }
   return globToRegExp(g).test(p);
 }
-function detectSharedContract(path55, opts = {}) {
-  const base = basenameLower(path55);
+function detectSharedContract(path54, opts = {}) {
+  const base = basenameLower(path54);
   for (const [ext, category] of HARD_GATE_EXTENSIONS) {
     if (base.endsWith(ext)) {
       return {
@@ -22933,7 +22891,7 @@ function detectSharedContract(path55, opts = {}) {
     }
   }
   for (const glob of opts.alwaysGateGlobs ?? []) {
-    if (glob.length > 0 && pathMatchesGlob(path55, glob)) {
+    if (glob.length > 0 && pathMatchesGlob(path54, glob)) {
       return {
         category: "always_gate_glob",
         hardGate: true,
@@ -22943,7 +22901,7 @@ function detectSharedContract(path55, opts = {}) {
     }
   }
   for (const pattern of opts.plannerSharedContracts ?? []) {
-    if (pattern.length > 0 && pathMatchesGlob(path55, pattern)) {
+    if (pattern.length > 0 && pathMatchesGlob(path54, pattern)) {
       return {
         category: "planner",
         hardGate: true,
@@ -24206,7 +24164,7 @@ async function runTier1OnIntegrationWorktree(repoDir, integrationTip, tracks, co
     });
     return { status: "attribute_halt", attributePaths: treeDanger };
   }
-  const wtDir = await fs23.mkdtemp(path28.join(os16.tmpdir(), "cv-tier1-"));
+  const wtDir = await fs22.mkdtemp(path27.join(os15.tmpdir(), "cv-tier1-"));
   let worktreeAdded = false;
   try {
     const add = await pinnedGit(
@@ -24253,11 +24211,11 @@ async function runTier1OnIntegrationWorktree(repoDir, integrationTip, tracks, co
         trackIndex: -1,
         // a union run — not a single track.
         runShell: runShellCommand,
-        lstat: fs23.lstat,
-        realpath: fs23.realpath,
-        stat: fs23.stat,
-        readdir: (p) => fs23.readdir(p, { withFileTypes: true }),
-        readFile: (p) => fs23.readFile(p, "utf8"),
+        lstat: fs22.lstat,
+        realpath: fs22.realpath,
+        stat: fs22.stat,
+        readdir: (p) => fs22.readdir(p, { withFileTypes: true }),
+        readFile: (p) => fs22.readFile(p, "utf8"),
         timeoutMs
       });
       if (declared.outcome === "fail") {
@@ -24273,7 +24231,7 @@ async function runTier1OnIntegrationWorktree(repoDir, integrationTip, tracks, co
     if (worktreeAdded) {
       await pinnedGit(repoDir, ["worktree", "remove", "--force", wtDir], { allowFail: true });
     }
-    await fs23.rm(wtDir, { recursive: true, force: true }).catch(() => void 0);
+    await fs22.rm(wtDir, { recursive: true, force: true }).catch(() => void 0);
     if (worktreeAdded) {
       await pinnedGit(repoDir, ["worktree", "prune"], { allowFail: true });
     }
@@ -24573,10 +24531,10 @@ async function detectGraftsHalt(repoDir, integrationTip) {
   if (gp.code !== 0) return null;
   const graftsPath = gp.stdout.trim();
   if (graftsPath.length === 0) return null;
-  const resolved = path28.isAbsolute(graftsPath) ? graftsPath : path28.join(repoDir, graftsPath);
+  const resolved = path27.isAbsolute(graftsPath) ? graftsPath : path27.join(repoDir, graftsPath);
   let content;
   try {
-    content = await fs23.readFile(resolved, "utf8");
+    content = await fs22.readFile(resolved, "utf8");
   } catch (err) {
     if (err?.code === "ENOENT") return null;
     return { status: "grafts_halt", graftsPath: resolved, integrationTip };
@@ -24594,7 +24552,7 @@ async function detectShallowHalt(repoDir, integrationTip) {
   });
   const gp = await pinnedGit(repoDir, ["rev-parse", "--git-path", "shallow"], { allowFail: true });
   const shallowPathRaw = gp.code === 0 ? gp.stdout.trim() : "";
-  const resolved = shallowPathRaw.length === 0 ? `${repoDir}/.git/shallow` : path28.isAbsolute(shallowPathRaw) ? shallowPathRaw : path28.join(repoDir, shallowPathRaw);
+  const resolved = shallowPathRaw.length === 0 ? `${repoDir}/.git/shallow` : path27.isAbsolute(shallowPathRaw) ? shallowPathRaw : path27.join(repoDir, shallowPathRaw);
   if (isShallow.code === 0 && isShallow.stdout.trim() === "true") {
     return { status: "shallow_halt", shallowPath: resolved, integrationTip };
   }
@@ -24603,7 +24561,7 @@ async function detectShallowHalt(repoDir, integrationTip) {
   }
   let present;
   try {
-    await fs23.access(resolved);
+    await fs22.access(resolved);
     present = true;
   } catch (err) {
     if (err?.code === "ENOENT") return null;
@@ -25221,9 +25179,9 @@ async function reconstructResolutionSetEntry(repoDir, commit, setHash, repoId, m
 // src/local-executor/conflict-resolution-durable-store.ts
 var import_node_crypto7 = require("node:crypto");
 var import_node_fs10 = require("node:fs");
-var fs24 = __toESM(require("node:fs/promises"));
-var os17 = __toESM(require("node:os"));
-var path29 = __toESM(require("node:path"));
+var fs23 = __toESM(require("node:fs/promises"));
+var os16 = __toESM(require("node:os"));
+var path28 = __toESM(require("node:path"));
 var DIR_MODE = 448;
 var FILE_MODE = 384;
 var RECORDS_FILE = "records.json";
@@ -25231,30 +25189,30 @@ var AGENTIC_RECORDS_FILE = "agentic-records.json";
 var PENDING_FILE = "pending-attempts.json";
 var INDEX_FILE = "resolution-sets.json";
 function defaultRoot() {
-  return path29.join(os17.homedir(), ".codevibe", "conflict-resolutions");
+  return path28.join(os16.homedir(), ".codevibe", "conflict-resolutions");
 }
 var SafeGroupDir = class {
   constructor(rootDir, taskGroupId) {
     this.rootDir = rootDir;
     this.taskGroupId = taskGroupId;
-    if (typeof taskGroupId !== "string" || taskGroupId.length === 0 || taskGroupId === "." || taskGroupId === ".." || taskGroupId.includes("/") || taskGroupId.includes("\\") || taskGroupId.includes("\0") || path29.isAbsolute(taskGroupId)) {
+    if (typeof taskGroupId !== "string" || taskGroupId.length === 0 || taskGroupId === "." || taskGroupId === ".." || taskGroupId.includes("/") || taskGroupId.includes("\\") || taskGroupId.includes("\0") || path28.isAbsolute(taskGroupId)) {
       throw new Error("ConflictResolutionDurableStore: taskGroupId is not a safe path segment");
     }
   }
   dir() {
-    return path29.join(this.rootDir, this.taskGroupId);
+    return path28.join(this.rootDir, this.taskGroupId);
   }
   async assertNoSymlinkComponents(target) {
-    const rel = path29.relative(this.rootDir, target);
-    if (rel.startsWith("..") || path29.isAbsolute(rel)) {
+    const rel = path28.relative(this.rootDir, target);
+    if (rel.startsWith("..") || path28.isAbsolute(rel)) {
       throw new Error("ConflictResolutionDurableStore: refusing a path outside the store root");
     }
-    const segments = rel.length === 0 ? [] : rel.split(path29.sep);
+    const segments = rel.length === 0 ? [] : rel.split(path28.sep);
     let cur = this.rootDir;
     for (let i = -1; i < segments.length; i++) {
-      if (i >= 0) cur = path29.join(cur, segments[i]);
+      if (i >= 0) cur = path28.join(cur, segments[i]);
       try {
-        const st = await fs24.lstat(cur);
+        const st = await fs23.lstat(cur);
         if (st.isSymbolicLink()) {
           throw new Error("ConflictResolutionDurableStore: refusing a symlinked path component");
         }
@@ -25265,10 +25223,10 @@ var SafeGroupDir = class {
     }
   }
   async readJson(file) {
-    const p = path29.join(this.dir(), file);
+    const p = path28.join(this.dir(), file);
     await this.assertNoSymlinkComponents(p);
     try {
-      const raw = await fs24.readFile(p, "utf8");
+      const raw = await fs23.readFile(p, "utf8");
       return JSON.parse(raw);
     } catch (err) {
       if (err.code === "ENOENT") return null;
@@ -25277,24 +25235,24 @@ var SafeGroupDir = class {
   }
   async writeJsonAtomic(file, value) {
     const dir = this.dir();
-    const p = path29.join(dir, file);
+    const p = path28.join(dir, file);
     await this.assertNoSymlinkComponents(p);
-    await fs24.mkdir(dir, { recursive: true, mode: DIR_MODE });
+    await fs23.mkdir(dir, { recursive: true, mode: DIR_MODE });
     const data = JSON.stringify(value);
     const tmp = `${p}.tmp.${process.pid}.${(0, import_node_crypto7.randomBytes)(6).toString("hex")}`;
     let fh;
     try {
-      fh = await fs24.open(tmp, import_node_fs10.constants.O_WRONLY | import_node_fs10.constants.O_CREAT | import_node_fs10.constants.O_EXCL, FILE_MODE);
+      fh = await fs23.open(tmp, import_node_fs10.constants.O_WRONLY | import_node_fs10.constants.O_CREAT | import_node_fs10.constants.O_EXCL, FILE_MODE);
       await fh.writeFile(data, "utf8");
       await fh.sync();
     } finally {
       await fh?.close().catch(() => void 0);
     }
-    await fs24.chmod(tmp, FILE_MODE).catch(() => void 0);
-    await fs24.rename(tmp, p);
+    await fs23.chmod(tmp, FILE_MODE).catch(() => void 0);
+    await fs23.rename(tmp, p);
     let dirFh;
     try {
-      dirFh = await fs24.open(dir, import_node_fs10.constants.O_RDONLY);
+      dirFh = await fs23.open(dir, import_node_fs10.constants.O_RDONLY);
       await dirFh.sync();
     } catch {
     } finally {
@@ -25474,17 +25432,17 @@ var DurableResolutionSetIndex = class {
 
 // src/local-executor/merge-journal-store.ts
 var crypto9 = __toESM(require("node:crypto"));
-var fs25 = __toESM(require("node:fs/promises"));
+var fs24 = __toESM(require("node:fs/promises"));
 var import_node_fs11 = require("node:fs");
-var os18 = __toESM(require("node:os"));
-var path30 = __toESM(require("node:path"));
+var os17 = __toESM(require("node:os"));
+var path29 = __toESM(require("node:path"));
 init_logger2();
 var DIR_MODE2 = 448;
 var FILE_MODE2 = 384;
 var MERGE_JOURNAL_VERSION = 1;
 var MERGE_JOURNAL_FILE = "merge.json";
 function defaultRoot2() {
-  return path30.join(os18.homedir(), ".codevibe", "merge-journal");
+  return path29.join(os17.homedir(), ".codevibe", "merge-journal");
 }
 function computeMergeKey(args) {
   const canonical = [
@@ -25502,20 +25460,20 @@ var MergeJournalStore = class {
   }
   /** The per-`(group, repo)` directory `<root>/<taskGroupId>/<repoId>/`. */
   repoDir(taskGroupId, repoId) {
-    return path30.join(this.rootDir, this.safeSegment(taskGroupId), this.safeSegment(repoId));
+    return path29.join(this.rootDir, this.safeSegment(taskGroupId), this.safeSegment(repoId));
   }
   /**
    * Validate `seg` is a safe SINGLE path segment so a malicious id can't escape
    * `<root>/` (defense-in-depth, mirrors #589-G / W1 `PromoteWalStore.safeSegment`).
    */
   safeSegment(seg) {
-    if (typeof seg !== "string" || seg.length === 0 || seg === "." || seg === ".." || seg.includes("/") || seg.includes("\\") || seg.includes("\0") || path30.isAbsolute(seg)) {
+    if (typeof seg !== "string" || seg.length === 0 || seg === "." || seg === ".." || seg.includes("/") || seg.includes("\\") || seg.includes("\0") || path29.isAbsolute(seg)) {
       throw new Error("MergeJournalStore: id is not a safe path segment");
     }
     return seg;
   }
   async mkdirSecure(dir) {
-    await fs25.mkdir(dir, { recursive: true, mode: DIR_MODE2 });
+    await fs24.mkdir(dir, { recursive: true, mode: DIR_MODE2 });
   }
   /**
    * Refuse to operate under a path whose any in-`rootDir` component is a symlink
@@ -25523,17 +25481,17 @@ var MergeJournalStore = class {
    * down; a symlinked component throws. Missing components are fine.
    */
   async assertNoSymlinkComponents(target) {
-    const rel = path30.relative(this.rootDir, target);
-    if (rel.startsWith("..") || path30.isAbsolute(rel)) {
+    const rel = path29.relative(this.rootDir, target);
+    if (rel.startsWith("..") || path29.isAbsolute(rel)) {
       throw new Error("MergeJournalStore: refusing a path outside the store root");
     }
-    const segments = rel.length === 0 ? [] : rel.split(path30.sep);
+    const segments = rel.length === 0 ? [] : rel.split(path29.sep);
     let cur = this.rootDir;
     for (let i = -1; i < segments.length; i++) {
-      if (i >= 0) cur = path30.join(cur, segments[i]);
+      if (i >= 0) cur = path29.join(cur, segments[i]);
       let st;
       try {
-        st = await fs25.lstat(cur);
+        st = await fs24.lstat(cur);
       } catch (err) {
         if (err.code === "ENOENT") return;
         throw err;
@@ -25545,13 +25503,13 @@ var MergeJournalStore = class {
   }
   /** Atomic write: `<final>.tmp.<pid>.<rand>` (0600) → fsync → rename → fsync(dir). */
   async atomicWrite(finalPath, data) {
-    const dir = path30.dirname(finalPath);
+    const dir = path29.dirname(finalPath);
     await this.assertNoSymlinkComponents(finalPath);
     await this.mkdirSecure(dir);
     const tmp = `${finalPath}.tmp.${process.pid}.${crypto9.randomBytes(6).toString("hex")}`;
     let fh;
     try {
-      fh = await fs25.open(
+      fh = await fs24.open(
         tmp,
         import_node_fs11.constants.O_WRONLY | import_node_fs11.constants.O_CREAT | import_node_fs11.constants.O_EXCL,
         FILE_MODE2
@@ -25561,11 +25519,11 @@ var MergeJournalStore = class {
     } finally {
       await fh?.close().catch(() => void 0);
     }
-    await fs25.chmod(tmp, FILE_MODE2).catch(() => void 0);
-    await fs25.rename(tmp, finalPath);
+    await fs24.chmod(tmp, FILE_MODE2).catch(() => void 0);
+    await fs24.rename(tmp, finalPath);
     let dirFh;
     try {
-      dirFh = await fs25.open(dir, import_node_fs11.constants.O_RDONLY);
+      dirFh = await fs24.open(dir, import_node_fs11.constants.O_RDONLY);
       await dirFh.sync();
     } catch {
     } finally {
@@ -25575,7 +25533,7 @@ var MergeJournalStore = class {
   async readJson(p) {
     await this.assertNoSymlinkComponents(p);
     try {
-      const raw = await fs25.readFile(p, "utf8");
+      const raw = await fs24.readFile(p, "utf8");
       return JSON.parse(raw);
     } catch (err) {
       if (err.code === "ENOENT") return null;
@@ -25885,7 +25843,7 @@ var MergeJournalStore = class {
   /** Read the journal record for `(group, repo)`, or `null` if none. */
   async readRecord(taskGroupId, repoId) {
     const rec = await this.readJson(
-      path30.join(this.repoDir(taskGroupId, repoId), MERGE_JOURNAL_FILE)
+      path29.join(this.repoDir(taskGroupId, repoId), MERGE_JOURNAL_FILE)
     );
     if (rec && !Array.isArray(rec.steps)) rec.steps = [];
     return rec;
@@ -25898,13 +25856,13 @@ var MergeJournalStore = class {
   }
   async writeRecord(taskGroupId, repoId, record) {
     await this.atomicWrite(
-      path30.join(this.repoDir(taskGroupId, repoId), MERGE_JOURNAL_FILE),
+      path29.join(this.repoDir(taskGroupId, repoId), MERGE_JOURNAL_FILE),
       JSON.stringify(record, null, 2)
     );
   }
   /** Delete the journal record for `(group, repo)` (terminal cleanup / GC). */
   async deleteRecord(taskGroupId, repoId) {
-    await fs25.rm(this.repoDir(taskGroupId, repoId), { recursive: true, force: true }).catch(() => void 0);
+    await fs24.rm(this.repoDir(taskGroupId, repoId), { recursive: true, force: true }).catch(() => void 0);
   }
 };
 function arraysEqual(a, b) {
@@ -25927,17 +25885,17 @@ function tracksEqual(a, b) {
 
 // src/local-executor/promote-wal-store.ts
 var crypto10 = __toESM(require("node:crypto"));
-var fs26 = __toESM(require("node:fs/promises"));
+var fs25 = __toESM(require("node:fs/promises"));
 var import_node_fs12 = require("node:fs");
-var os19 = __toESM(require("node:os"));
-var path31 = __toESM(require("node:path"));
+var os18 = __toESM(require("node:os"));
+var path30 = __toESM(require("node:path"));
 init_logger2();
 var DIR_MODE3 = 448;
 var FILE_MODE3 = 384;
 var PROMOTE_WAL_VERSION = 1;
 var PROMOTE_WAL_FILE = "promote.json";
 function defaultRoot3() {
-  return path31.join(os19.homedir(), ".codevibe", "promote-wal");
+  return path30.join(os18.homedir(), ".codevibe", "promote-wal");
 }
 function computePromoteKey(args) {
   const canonical = [
@@ -25956,20 +25914,20 @@ var PromoteWalStore = class {
   }
   /** The per-`(group, repo)` directory `<root>/<taskGroupId>/<repoId>/`. */
   repoDir(taskGroupId, repoId) {
-    return path31.join(this.rootDir, this.safeSegment(taskGroupId), this.safeSegment(repoId));
+    return path30.join(this.rootDir, this.safeSegment(taskGroupId), this.safeSegment(repoId));
   }
   /**
    * Validate `seg` is a safe SINGLE path segment so a malicious id can't escape
    * `<root>/` (defense-in-depth, mirrors #589-G `RevertManifestStore.safeSegment`).
    */
   safeSegment(seg) {
-    if (typeof seg !== "string" || seg.length === 0 || seg === "." || seg === ".." || seg.includes("/") || seg.includes("\\") || seg.includes("\0") || path31.isAbsolute(seg)) {
+    if (typeof seg !== "string" || seg.length === 0 || seg === "." || seg === ".." || seg.includes("/") || seg.includes("\\") || seg.includes("\0") || path30.isAbsolute(seg)) {
       throw new Error("PromoteWalStore: id is not a safe path segment");
     }
     return seg;
   }
   async mkdirSecure(dir) {
-    await fs26.mkdir(dir, { recursive: true, mode: DIR_MODE3 });
+    await fs25.mkdir(dir, { recursive: true, mode: DIR_MODE3 });
   }
   /**
    * Refuse to operate under a path whose any in-`rootDir` component is a symlink
@@ -25977,17 +25935,17 @@ var PromoteWalStore = class {
    * down; a symlinked component throws. Missing components are fine.
    */
   async assertNoSymlinkComponents(target) {
-    const rel = path31.relative(this.rootDir, target);
-    if (rel.startsWith("..") || path31.isAbsolute(rel)) {
+    const rel = path30.relative(this.rootDir, target);
+    if (rel.startsWith("..") || path30.isAbsolute(rel)) {
       throw new Error("PromoteWalStore: refusing a path outside the store root");
     }
-    const segments = rel.length === 0 ? [] : rel.split(path31.sep);
+    const segments = rel.length === 0 ? [] : rel.split(path30.sep);
     let cur = this.rootDir;
     for (let i = -1; i < segments.length; i++) {
-      if (i >= 0) cur = path31.join(cur, segments[i]);
+      if (i >= 0) cur = path30.join(cur, segments[i]);
       let st;
       try {
-        st = await fs26.lstat(cur);
+        st = await fs25.lstat(cur);
       } catch (err) {
         if (err.code === "ENOENT") return;
         throw err;
@@ -25999,13 +25957,13 @@ var PromoteWalStore = class {
   }
   /** Atomic write: `<final>.tmp.<pid>.<rand>` (0600) → fsync → rename → fsync(dir). */
   async atomicWrite(finalPath, data) {
-    const dir = path31.dirname(finalPath);
+    const dir = path30.dirname(finalPath);
     await this.assertNoSymlinkComponents(finalPath);
     await this.mkdirSecure(dir);
     const tmp = `${finalPath}.tmp.${process.pid}.${crypto10.randomBytes(6).toString("hex")}`;
     let fh;
     try {
-      fh = await fs26.open(
+      fh = await fs25.open(
         tmp,
         import_node_fs12.constants.O_WRONLY | import_node_fs12.constants.O_CREAT | import_node_fs12.constants.O_EXCL,
         FILE_MODE3
@@ -26015,11 +25973,11 @@ var PromoteWalStore = class {
     } finally {
       await fh?.close().catch(() => void 0);
     }
-    await fs26.chmod(tmp, FILE_MODE3).catch(() => void 0);
-    await fs26.rename(tmp, finalPath);
+    await fs25.chmod(tmp, FILE_MODE3).catch(() => void 0);
+    await fs25.rename(tmp, finalPath);
     let dirFh;
     try {
-      dirFh = await fs26.open(dir, import_node_fs12.constants.O_RDONLY);
+      dirFh = await fs25.open(dir, import_node_fs12.constants.O_RDONLY);
       await dirFh.sync();
     } catch {
     } finally {
@@ -26029,7 +25987,7 @@ var PromoteWalStore = class {
   async readJson(p) {
     await this.assertNoSymlinkComponents(p);
     try {
-      const raw = await fs26.readFile(p, "utf8");
+      const raw = await fs25.readFile(p, "utf8");
       return JSON.parse(raw);
     } catch (err) {
       if (err.code === "ENOENT") return null;
@@ -26213,18 +26171,18 @@ var PromoteWalStore = class {
   /** Read the WAL record for `(group, repo)`, or `null` if none. */
   async readRecord(taskGroupId, repoId) {
     return this.readJson(
-      path31.join(this.repoDir(taskGroupId, repoId), PROMOTE_WAL_FILE)
+      path30.join(this.repoDir(taskGroupId, repoId), PROMOTE_WAL_FILE)
     );
   }
   async writeRecord(taskGroupId, repoId, record) {
     await this.atomicWrite(
-      path31.join(this.repoDir(taskGroupId, repoId), PROMOTE_WAL_FILE),
+      path30.join(this.repoDir(taskGroupId, repoId), PROMOTE_WAL_FILE),
       JSON.stringify(record, null, 2)
     );
   }
   /** Delete the WAL record for `(group, repo)` (terminal cleanup / GC). */
   async deleteRecord(taskGroupId, repoId) {
-    await fs26.rm(this.repoDir(taskGroupId, repoId), { recursive: true, force: true }).catch(() => void 0);
+    await fs25.rm(this.repoDir(taskGroupId, repoId), { recursive: true, force: true }).catch(() => void 0);
   }
   /**
    * List every `(group, repo)` that has a started-but-not-committed WAL record —
@@ -26235,7 +26193,7 @@ var PromoteWalStore = class {
     const out = [];
     let groups;
     try {
-      groups = (await fs26.readdir(this.rootDir, { withFileTypes: true })).filter((e) => e.isDirectory()).map((e) => e.name);
+      groups = (await fs25.readdir(this.rootDir, { withFileTypes: true })).filter((e) => e.isDirectory()).map((e) => e.name);
     } catch (err) {
       if (err.code === "ENOENT") return out;
       throw err;
@@ -26243,7 +26201,7 @@ var PromoteWalStore = class {
     for (const gid of groups) {
       let repos;
       try {
-        repos = (await fs26.readdir(path31.join(this.rootDir, gid), { withFileTypes: true })).filter((e) => e.isDirectory()).map((e) => e.name);
+        repos = (await fs25.readdir(path30.join(this.rootDir, gid), { withFileTypes: true })).filter((e) => e.isDirectory()).map((e) => e.name);
       } catch {
         continue;
       }
@@ -27477,7 +27435,7 @@ var LocalExecutorImpl = class {
       return null;
     }
     const taskGroupId = payload.task_group_id;
-    if (typeof taskGroupId !== "string" || taskGroupId.length === 0 || taskGroupId === "." || taskGroupId === ".." || taskGroupId.includes("/") || taskGroupId.includes("\\") || taskGroupId.includes("\0") || path32.isAbsolute(taskGroupId)) {
+    if (typeof taskGroupId !== "string" || taskGroupId.length === 0 || taskGroupId === "." || taskGroupId === ".." || taskGroupId.includes("/") || taskGroupId.includes("\\") || taskGroupId.includes("\0") || path31.isAbsolute(taskGroupId)) {
       this.logger.warn(
         "[LocalExecutorImpl] TrackAssigned rejected \u2014 task_group_id is not a safe single path segment",
         { taskGroupId, trackIndex: payload.track_index }
@@ -27493,10 +27451,10 @@ var LocalExecutorImpl = class {
       return null;
     }
     const repoRootCanonical = await import_node_fs13.promises.realpath(repoRoot);
-    const stateRoot = path32.join(repoRootCanonical, ".codevibe", "state");
+    const stateRoot = path31.join(repoRootCanonical, ".codevibe", "state");
     await import_node_fs13.promises.mkdir(stateRoot, { recursive: true });
     const stateRootReal = await import_node_fs13.promises.realpath(stateRoot);
-    const groupDir = path32.join(stateRootReal, taskGroupId);
+    const groupDir = path31.join(stateRootReal, taskGroupId);
     await import_node_fs13.promises.mkdir(groupDir, { recursive: true });
     const groupLstat = await import_node_fs13.promises.lstat(groupDir);
     if (groupLstat.isSymbolicLink()) {
@@ -27507,31 +27465,31 @@ var LocalExecutorImpl = class {
       return null;
     }
     const groupReal = await import_node_fs13.promises.realpath(groupDir);
-    const groupRel = path32.relative(stateRootReal, groupReal);
-    if (groupRel === "" || groupRel === ".." || groupRel.startsWith(".." + path32.sep) || path32.isAbsolute(groupRel)) {
+    const groupRel = path31.relative(stateRootReal, groupReal);
+    if (groupRel === "" || groupRel === ".." || groupRel.startsWith(".." + path31.sep) || path31.isAbsolute(groupRel)) {
       this.logger.warn(
         "[LocalExecutorImpl] TrackAssigned rejected \u2014 task_group_id group dir escapes the trusted state root",
         { taskGroupId, trackIndex, stateRootReal, groupReal }
       );
       return null;
     }
-    const derived = path32.join(groupReal, String(trackIndex));
+    const derived = path31.join(groupReal, String(trackIndex));
     await import_node_fs13.promises.mkdir(derived, { recursive: true });
     const derivedReal = await import_node_fs13.promises.realpath(derived);
-    const rel = path32.relative(stateRootReal, derivedReal);
-    if (rel === "" || rel === ".." || rel.startsWith(".." + path32.sep) || path32.isAbsolute(rel)) {
+    const rel = path31.relative(stateRootReal, derivedReal);
+    if (rel === "" || rel === ".." || rel.startsWith(".." + path31.sep) || path31.isAbsolute(rel)) {
       this.logger.warn(
         "[LocalExecutorImpl] TrackAssigned rejected \u2014 derived state dir escapes the trusted state root",
         { taskGroupId, trackIndex, stateRootReal, derived: derivedReal }
       );
       return null;
     }
-    const suppliedAnchored = path32.isAbsolute(payload.state_dir) ? payload.state_dir : path32.join(repoRootCanonical, payload.state_dir);
+    const suppliedAnchored = path31.isAbsolute(payload.state_dir) ? payload.state_dir : path31.join(repoRootCanonical, payload.state_dir);
     let suppliedCanonical;
     try {
       suppliedCanonical = await import_node_fs13.promises.realpath(suppliedAnchored);
     } catch {
-      suppliedCanonical = path32.resolve(suppliedAnchored);
+      suppliedCanonical = path31.resolve(suppliedAnchored);
     }
     if (suppliedCanonical !== derivedReal) {
       this.logger.warn(
@@ -27556,7 +27514,7 @@ var LocalExecutorImpl = class {
    */
   scopeFromOwnership(payload, stateDir) {
     const repoRoot = this.teamDeps.repoRoot;
-    const toAbs = (p) => path32.isAbsolute(p) ? p : repoRoot ? path32.join(repoRoot, p) : p;
+    const toAbs = (p) => path31.isAbsolute(p) ? p : repoRoot ? path31.join(repoRoot, p) : p;
     const writeScopes = [
       ...payload.ownership_scope.write_paths.map(toAbs),
       ...payload.ownership_scope.auto_modified_files.map(toAbs),
@@ -28048,16 +28006,16 @@ var Cp7AuditWriter = class {
 };
 
 // src/local-executor/verification-gates/deploy-preflight.ts
-var path33 = __toESM(require("node:path"));
-var DEPLOY_PREFLIGHT_SCRIPT = path33.join("scripts", "deploy-preflight.sh");
+var path32 = __toESM(require("node:path"));
+var DEPLOY_PREFLIGHT_SCRIPT = path32.join("scripts", "deploy-preflight.sh");
 
 // src/local-executor/verification-gates/hostile-grep.ts
-var path34 = __toESM(require("node:path"));
-var HOSTILE_GREP_SCRIPT = path34.join("scripts", "hostile-grep.sh");
+var path33 = __toESM(require("node:path"));
+var HOSTILE_GREP_SCRIPT = path33.join("scripts", "hostile-grep.sh");
 
 // src/local-executor/verification-gates/source-traceability.ts
-var path35 = __toESM(require("node:path"));
-var SOURCE_TRACE_SCRIPT = path35.join("scripts", "source-traceability.sh");
+var path34 = __toESM(require("node:path"));
+var SOURCE_TRACE_SCRIPT = path34.join("scripts", "source-traceability.sh");
 
 // src/local-executor/verification-runner.ts
 var NO_OP_PASS = Object.freeze({
@@ -28069,10 +28027,10 @@ var NO_OP_PASS = Object.freeze({
 
 // src/local-executor/durable-store.ts
 var crypto11 = __toESM(require("node:crypto"));
-var fs28 = __toESM(require("node:fs/promises"));
+var fs27 = __toESM(require("node:fs/promises"));
 var import_node_fs15 = require("node:fs");
-var os20 = __toESM(require("node:os"));
-var path36 = __toESM(require("node:path"));
+var os19 = __toESM(require("node:os"));
+var path35 = __toESM(require("node:path"));
 init_logger2();
 var DIR_MODE4 = 448;
 var FILE_MODE4 = 384;
@@ -28088,7 +28046,7 @@ function revertEntryKey(promoteOrder, relPath) {
   return `${promoteOrder} ${relPath}`;
 }
 function defaultRoot4() {
-  return path36.join(os20.homedir(), ".codevibe", "revert-state");
+  return path35.join(os19.homedir(), ".codevibe", "revert-state");
 }
 function hashContent(content) {
   return crypto11.createHash("sha256").update(Buffer.from(content, "utf8")).digest("hex");
@@ -28121,7 +28079,7 @@ var RevertManifestStore = class {
   }
   /** The per-group directory `<root>/<taskGroupId>/`. */
   groupDir(taskGroupId) {
-    return path36.join(this.rootDir, this.safeSegment(taskGroupId));
+    return path35.join(this.rootDir, this.safeSegment(taskGroupId));
   }
   /**
    * Validate `taskGroupId` is a safe SINGLE path segment so a malicious id can't
@@ -28129,7 +28087,7 @@ var RevertManifestStore = class {
    * trust a field as a path segment, #589-G).
    */
   safeSegment(taskGroupId) {
-    if (typeof taskGroupId !== "string" || taskGroupId.length === 0 || taskGroupId === "." || taskGroupId === ".." || taskGroupId.includes("/") || taskGroupId.includes("\\") || taskGroupId.includes("\0") || path36.isAbsolute(taskGroupId)) {
+    if (typeof taskGroupId !== "string" || taskGroupId.length === 0 || taskGroupId === "." || taskGroupId === ".." || taskGroupId.includes("/") || taskGroupId.includes("\\") || taskGroupId.includes("\0") || path35.isAbsolute(taskGroupId)) {
       throw new Error("RevertManifestStore: taskGroupId is not a safe path segment");
     }
     return taskGroupId;
@@ -28140,7 +28098,7 @@ var RevertManifestStore = class {
    * `recursive: true` honors `mode` for the components it creates.
    */
   async mkdirSecure(dir) {
-    await fs28.mkdir(dir, { recursive: true, mode: DIR_MODE4 });
+    await fs27.mkdir(dir, { recursive: true, mode: DIR_MODE4 });
   }
   /**
    * Refuse to operate under a path whose any in-`rootDir` component is a symlink
@@ -28149,17 +28107,17 @@ var RevertManifestStore = class {
    * created). The `rootDir` itself is lstat-checked too.
    */
   async assertNoSymlinkComponents(target) {
-    const rel = path36.relative(this.rootDir, target);
-    if (rel.startsWith("..") || path36.isAbsolute(rel)) {
+    const rel = path35.relative(this.rootDir, target);
+    if (rel.startsWith("..") || path35.isAbsolute(rel)) {
       throw new Error("RevertManifestStore: refusing a path outside the store root");
     }
-    const segments = rel.length === 0 ? [] : rel.split(path36.sep);
+    const segments = rel.length === 0 ? [] : rel.split(path35.sep);
     let cur = this.rootDir;
     for (let i = -1; i < segments.length; i++) {
-      if (i >= 0) cur = path36.join(cur, segments[i]);
+      if (i >= 0) cur = path35.join(cur, segments[i]);
       let st;
       try {
-        st = await fs28.lstat(cur);
+        st = await fs27.lstat(cur);
       } catch (err) {
         if (err.code === "ENOENT") return;
         throw err;
@@ -28174,23 +28132,23 @@ var RevertManifestStore = class {
    * fsync(dir). Refuses symlinked components first. NEVER logs CONTENT.
    */
   async atomicWrite(finalPath, data) {
-    const dir = path36.dirname(finalPath);
+    const dir = path35.dirname(finalPath);
     await this.assertNoSymlinkComponents(finalPath);
     await this.mkdirSecure(dir);
     const tmp = `${finalPath}.tmp.${process.pid}.${crypto11.randomBytes(6).toString("hex")}`;
     let fh;
     try {
-      fh = await fs28.open(tmp, import_node_fs15.constants.O_WRONLY | import_node_fs15.constants.O_CREAT | import_node_fs15.constants.O_EXCL, FILE_MODE4);
+      fh = await fs27.open(tmp, import_node_fs15.constants.O_WRONLY | import_node_fs15.constants.O_CREAT | import_node_fs15.constants.O_EXCL, FILE_MODE4);
       await fh.writeFile(data, "utf8");
       await fh.sync();
     } finally {
       await fh?.close().catch(() => void 0);
     }
-    await fs28.chmod(tmp, FILE_MODE4).catch(() => void 0);
-    await fs28.rename(tmp, finalPath);
+    await fs27.chmod(tmp, FILE_MODE4).catch(() => void 0);
+    await fs27.rename(tmp, finalPath);
     let dirFh;
     try {
-      dirFh = await fs28.open(dir, import_node_fs15.constants.O_RDONLY);
+      dirFh = await fs27.open(dir, import_node_fs15.constants.O_RDONLY);
       await dirFh.sync();
     } catch {
     } finally {
@@ -28200,7 +28158,7 @@ var RevertManifestStore = class {
   async readJson(p) {
     await this.assertNoSymlinkComponents(p);
     try {
-      const raw = await fs28.readFile(p, "utf8");
+      const raw = await fs27.readFile(p, "utf8");
       return JSON.parse(raw);
     } catch (err) {
       if (err.code === "ENOENT") return null;
@@ -28220,11 +28178,11 @@ var RevertManifestStore = class {
   async appendPromote(taskGroupId, _trackIndex, entries) {
     if (entries.length === 0) return;
     const dir = this.groupDir(taskGroupId);
-    await this.assertNoSymlinkComponents(path36.join(dir, PREIMAGE_DIR));
+    await this.assertNoSymlinkComponents(path35.join(dir, PREIMAGE_DIR));
     await this.mkdirSecure(dir);
-    await this.mkdirSecure(path36.join(dir, PREIMAGE_DIR));
+    await this.mkdirSecure(path35.join(dir, PREIMAGE_DIR));
     const now = Date.now();
-    const existing = await this.readJson(path36.join(dir, MANIFEST_FILE)) ?? {
+    const existing = await this.readJson(path35.join(dir, MANIFEST_FILE)) ?? {
       version: REVERT_MANIFEST_VERSION,
       taskGroupId,
       lifecycle: "in_flight",
@@ -28240,10 +28198,10 @@ var RevertManifestStore = class {
         preImageRef = ABSENT_PREIMAGE;
       } else {
         const sha = e.preImageHash ?? hashContent(e.preImageContent);
-        preImageRef = path36.join(PREIMAGE_DIR, `${sha}.blob`);
-        const blobPath = path36.join(dir, preImageRef);
+        preImageRef = path35.join(PREIMAGE_DIR, `${sha}.blob`);
+        const blobPath = path35.join(dir, preImageRef);
         try {
-          await fs28.access(blobPath, import_node_fs15.constants.F_OK);
+          await fs27.access(blobPath, import_node_fs15.constants.F_OK);
         } catch {
           await this.atomicWrite(blobPath, e.preImageContent);
         }
@@ -28273,13 +28231,13 @@ var RevertManifestStore = class {
   }
   async writeRecord(taskGroupId, record) {
     await this.atomicWrite(
-      path36.join(this.groupDir(taskGroupId), MANIFEST_FILE),
+      path35.join(this.groupDir(taskGroupId), MANIFEST_FILE),
       JSON.stringify(record, null, 2)
     );
   }
   /** Read the full unified record, or `null` if none exists. */
   async readRecord(taskGroupId) {
-    return this.readJson(path36.join(this.groupDir(taskGroupId), MANIFEST_FILE));
+    return this.readJson(path35.join(this.groupDir(taskGroupId), MANIFEST_FILE));
   }
   /** Read just the manifest entries (empty when no record). */
   async readManifest(taskGroupId) {
@@ -28297,10 +28255,10 @@ var RevertManifestStore = class {
   async appendTrackTip(taskGroupId, baseSha, tip) {
     return this.withTrackTipLock(taskGroupId, async () => {
       const dir = this.groupDir(taskGroupId);
-      await this.assertNoSymlinkComponents(path36.join(dir, TRACK_TIPS_FILE));
+      await this.assertNoSymlinkComponents(path35.join(dir, TRACK_TIPS_FILE));
       await this.mkdirSecure(dir);
       const now = Date.now();
-      const existing = await this.readJson(path36.join(dir, TRACK_TIPS_FILE)) ?? {
+      const existing = await this.readJson(path35.join(dir, TRACK_TIPS_FILE)) ?? {
         version: TRACK_TIPS_VERSION,
         taskGroupId,
         baseSha,
@@ -28317,7 +28275,7 @@ var RevertManifestStore = class {
       else existing.tips.push(tip);
       existing.updatedAtMs = now;
       await this.atomicWrite(
-        path36.join(dir, TRACK_TIPS_FILE),
+        path35.join(dir, TRACK_TIPS_FILE),
         JSON.stringify(existing, null, 2)
       );
       logger.info("[RevertManifestStore] recorded track tip", {
@@ -28337,7 +28295,7 @@ var RevertManifestStore = class {
    */
   async readTrackTips(taskGroupId) {
     const rec = await this.readJson(
-      path36.join(this.groupDir(taskGroupId), TRACK_TIPS_FILE)
+      path35.join(this.groupDir(taskGroupId), TRACK_TIPS_FILE)
     );
     return { baseSha: rec?.baseSha ?? null, tips: rec?.tips ?? [] };
   }
@@ -28346,9 +28304,9 @@ var RevertManifestStore = class {
     if (preImageRef === ABSENT_PREIMAGE) {
       throw new Error("RevertManifestStore: readPreImage called for an ABSENT (created) entry");
     }
-    const blobPath = path36.join(this.groupDir(taskGroupId), preImageRef);
+    const blobPath = path35.join(this.groupDir(taskGroupId), preImageRef);
     await this.assertNoSymlinkComponents(blobPath);
-    return fs28.readFile(blobPath, "utf8");
+    return fs27.readFile(blobPath, "utf8");
   }
   // ─── lifecycle transitions (the GC predicate key) ─────────────────────────
   async setLifecycle(taskGroupId, lifecycle) {
@@ -28500,7 +28458,7 @@ var RevertManifestStore = class {
    */
   async beginRevert(taskGroupId) {
     const existing = await this.readJson(
-      path36.join(this.groupDir(taskGroupId), JOURNAL_FILE)
+      path35.join(this.groupDir(taskGroupId), JOURNAL_FILE)
     );
     if (existing && existing.state === "reverting") {
       logger.info("[RevertManifestStore] resuming revert from journal", {
@@ -28526,11 +28484,11 @@ var RevertManifestStore = class {
   }
   /** Read the current journal (or `null`). */
   async readJournal(taskGroupId) {
-    return this.readJson(path36.join(this.groupDir(taskGroupId), JOURNAL_FILE));
+    return this.readJson(path35.join(this.groupDir(taskGroupId), JOURNAL_FILE));
   }
   async writeJournal(taskGroupId, journal) {
     await this.atomicWrite(
-      path36.join(this.groupDir(taskGroupId), JOURNAL_FILE),
+      path35.join(this.groupDir(taskGroupId), JOURNAL_FILE),
       JSON.stringify(journal, null, 2)
     );
   }
@@ -28575,7 +28533,7 @@ var RevertManifestStore = class {
   /** List every group id with a durable record under `<root>/`. */
   async listManifests() {
     try {
-      const entries = await fs28.readdir(this.rootDir, { withFileTypes: true });
+      const entries = await fs27.readdir(this.rootDir, { withFileTypes: true });
       const out = [];
       for (const ent of entries) {
         if (!ent.isDirectory()) continue;
@@ -28603,7 +28561,7 @@ var RevertManifestStore = class {
       const terminal = this.isLifecycleTerminal(rec.lifecycle);
       const orphanExpired = now - rec.updatedAtMs > ttlMs;
       if (terminal || orphanExpired) {
-        await fs28.rm(this.groupDir(taskGroupId), { recursive: true, force: true });
+        await fs27.rm(this.groupDir(taskGroupId), { recursive: true, force: true });
         removed.push(taskGroupId);
         logger.info("[RevertManifestStore] gc removed group revert-state", {
           taskGroupId,
@@ -28618,13 +28576,13 @@ var RevertManifestStore = class {
 
 // src/local-executor/revert-runner.ts
 var crypto12 = __toESM(require("node:crypto"));
-var fs29 = __toESM(require("node:fs/promises"));
-var path37 = __toESM(require("node:path"));
+var fs28 = __toESM(require("node:fs/promises"));
+var path36 = __toESM(require("node:path"));
 init_logger2();
 var FILE_MODE5 = 384;
 async function hashRealFile(workingDir, rel) {
   try {
-    const buf = await fs29.readFile(path37.join(workingDir, rel));
+    const buf = await fs28.readFile(path36.join(workingDir, rel));
     return crypto12.createHash("sha256").update(buf).digest("hex");
   } catch (err) {
     if (err.code === "ENOENT") return null;
@@ -28681,7 +28639,7 @@ async function revertGroup(store, taskGroupId, workingDir) {
   return { reverted, alreadyReverted, conflicts };
 }
 async function revertOne(store, taskGroupId, workingDir, entry) {
-  const realPath = path37.join(workingDir, entry.path);
+  const realPath = path36.join(workingDir, entry.path);
   const onDiskHash = await hashRealFile(workingDir, entry.path);
   if (entry.changeKind === "created") {
     if (onDiskHash === null) return "already";
@@ -28693,14 +28651,14 @@ async function revertOne(store, taskGroupId, workingDir, entry) {
     return "conflict";
   }
   if (entry.changeKind === "created") {
-    await fs29.rm(realPath, { force: true });
+    await fs28.rm(realPath, { force: true });
   } else {
     if (entry.preImageRef === ABSENT_PREIMAGE) {
       return "conflict";
     }
     const preImage = await store.readPreImage(taskGroupId, entry.preImageRef);
-    await fs29.mkdir(path37.dirname(realPath), { recursive: true });
-    await fs29.writeFile(realPath, preImage, { encoding: "utf8", mode: FILE_MODE5 });
+    await fs28.mkdir(path36.dirname(realPath), { recursive: true });
+    await fs28.writeFile(realPath, preImage, { encoding: "utf8", mode: FILE_MODE5 });
   }
   return "reverted";
 }
@@ -28870,13 +28828,13 @@ var ConfinedModelCaller = class {
 };
 
 // src/local-executor/agentic-resolve.ts
-var fs31 = __toESM(require("node:fs/promises"));
+var fs30 = __toESM(require("node:fs/promises"));
 
 // src/local-executor/agentic-disposable-repo.ts
 var import_node_crypto10 = require("node:crypto");
 var import_node_fs16 = require("node:fs");
-var fs30 = __toESM(require("node:fs/promises"));
-var path38 = __toESM(require("node:path"));
+var fs29 = __toESM(require("node:fs/promises"));
+var path37 = __toESM(require("node:path"));
 var DisposableRepoError = class extends Error {
   constructor(reason, message) {
     super(message);
@@ -28900,10 +28858,10 @@ var HERMETIC_LOCAL_CONFIG = [
   ["commit.gpgSign", "false"]
 ];
 async function materializeDisposableRepo(opts) {
-  const repoDir = path38.join(opts.parentDir, `cp14-wb2-resolve-${(0, import_node_crypto10.randomBytes)(8).toString("hex")}`);
-  await fs30.mkdir(repoDir, { recursive: true, mode: 448 });
+  const repoDir = path37.join(opts.parentDir, `cp14-wb2-resolve-${(0, import_node_crypto10.randomBytes)(8).toString("hex")}`);
+  await fs29.mkdir(repoDir, { recursive: true, mode: 448 });
   const cleanup = async () => {
-    await fs30.rm(repoDir, { recursive: true, force: true }).catch(() => void 0);
+    await fs29.rm(repoDir, { recursive: true, force: true }).catch(() => void 0);
   };
   try {
     const init = await pinnedGit(repoDir, ["-c", "init.templateDir=", "init", "--quiet"], {
@@ -28927,7 +28885,7 @@ async function materializeDisposableRepo(opts) {
       opts.conflictedTree,
       ...ls.stdout.split("\n").map((s) => s.trim()).filter((s) => s.length > 0)
     ];
-    const packBase = path38.join(repoDir, ".git", "objects", "pack", "cp14-import");
+    const packBase = path37.join(repoDir, ".git", "objects", "pack", "cp14-import");
     const pk = await pinnedGitWithInput(
       opts.realRepoDir,
       ["pack-objects", "-q", packBase],
@@ -28960,8 +28918,8 @@ async function materializeDisposableRepo(opts) {
   }
 }
 async function stageDirForRead(dir) {
-  const staged = path38.join(path38.dirname(dir), `.cp14-staged-${(0, import_node_crypto10.randomBytes)(12).toString("hex")}`);
-  await fs30.rename(dir, staged);
+  const staged = path37.join(path37.dirname(dir), `.cp14-staged-${(0, import_node_crypto10.randomBytes)(12).toString("hex")}`);
+  await fs29.rename(dir, staged);
   return staged;
 }
 async function fdSafeReadFile(rootDir, relPath) {
@@ -28971,18 +28929,18 @@ async function fdSafeReadFile(rootDir, relPath) {
   if (relPath.includes("\0")) {
     throw new FdSafeImportError("nul", "fd-safe import: NUL in path");
   }
-  if (path38.isAbsolute(relPath)) {
+  if (path37.isAbsolute(relPath)) {
     throw new FdSafeImportError("absolute", `fd-safe import: absolute path ${relPath}`);
   }
   const parts = relPath.split(/[\\/]+/).filter((p) => p.length > 0);
   if (parts.length === 0 || parts.some((p) => p === "." || p === "..")) {
     throw new FdSafeImportError("traversal", `fd-safe import: traversal in ${relPath}`);
   }
-  const rootReal = await fs30.realpath(rootDir);
-  const expected = path38.join(rootReal, ...parts);
+  const rootReal = await fs29.realpath(rootDir);
+  const expected = path37.join(rootReal, ...parts);
   let real;
   try {
-    real = await fs30.realpath(path38.join(rootDir, relPath));
+    real = await fs29.realpath(path37.join(rootDir, relPath));
   } catch (err) {
     if (err.code === "ENOENT") {
       throw new FdSafeImportError("missing", `fd-safe import: ${relPath} not found`);
@@ -28997,7 +28955,7 @@ async function fdSafeReadFile(rootDir, relPath) {
   }
   let fh;
   try {
-    fh = await fs30.open(real, import_node_fs16.constants.O_RDONLY | import_node_fs16.constants.O_NOFOLLOW | import_node_fs16.constants.O_NONBLOCK);
+    fh = await fs29.open(real, import_node_fs16.constants.O_RDONLY | import_node_fs16.constants.O_NOFOLLOW | import_node_fs16.constants.O_NONBLOCK);
     const st = await fh.stat();
     if (!st.isFile()) {
       throw new FdSafeImportError("not-regular", `fd-safe import: ${relPath} is not a regular file`);
@@ -29082,17 +29040,17 @@ async function resolveAgenticSlot(args) {
     return { status: "resolved", resolvedBlobs };
   } finally {
     await disp.cleanup().catch(() => void 0);
-    if (staged) await fs31.rm(staged, { recursive: true, force: true }).catch(() => void 0);
+    if (staged) await fs30.rm(staged, { recursive: true, force: true }).catch(() => void 0);
   }
 }
 
 // src/local-executor/workspace-shadow.ts
 var import_node_child_process5 = require("node:child_process");
 var crypto13 = __toESM(require("node:crypto"));
-var fs32 = __toESM(require("node:fs/promises"));
+var fs31 = __toESM(require("node:fs/promises"));
 var import_node_fs17 = require("node:fs");
-var os21 = __toESM(require("node:os"));
-var path39 = __toESM(require("node:path"));
+var os20 = __toESM(require("node:os"));
+var path38 = __toESM(require("node:path"));
 var import_node_util2 = require("node:util");
 var import_uuid10 = require("uuid");
 init_logger2();
@@ -29121,11 +29079,11 @@ var BUILD_ENV_FILENAMES = [
 var SHADOW_STATE_FILE = "shadow-state.json";
 var DEFAULT_SHADOW_TTL_MS = 24 * 60 * 60 * 1e3;
 var realSleep2 = (ms) => new Promise((r) => setTimeout(r, ms));
-function resolveHome4() {
-  return os21.homedir();
+function resolveHome3() {
+  return os20.homedir();
 }
 function defaultStateRoot() {
-  return path39.join(resolveHome4(), ".codevibe", "shadow-state");
+  return path38.join(resolveHome3(), ".codevibe", "shadow-state");
 }
 var WorkspaceShadow = class _WorkspaceShadow {
   constructor(args) {
@@ -29162,14 +29120,14 @@ var WorkspaceShadow = class _WorkspaceShadow {
     }
     let canonicalWorkingDir;
     try {
-      canonicalWorkingDir = await fs32.realpath(workingDir);
+      canonicalWorkingDir = await fs31.realpath(workingDir);
     } catch {
       canonicalWorkingDir = workingDir;
     }
-    const shadowRoot = env.shadowRootDir ?? os21.tmpdir();
-    let shadowDir = path39.join(shadowRoot, `codevibe-shadow-${taskId}-${(0, import_uuid10.v4)()}`);
+    const shadowRoot = env.shadowRootDir ?? os20.tmpdir();
+    let shadowDir = path38.join(shadowRoot, `codevibe-shadow-${taskId}-${(0, import_uuid10.v4)()}`);
     const stateRoot = env.stateRootDir ?? defaultStateRoot();
-    const stateDir = path39.join(stateRoot, taskId);
+    const stateDir = path38.join(stateRoot, taskId);
     const sleep = env.sleep ?? realSleep2;
     const isGit = await isGitWorkspace(canonicalWorkingDir);
     if (opts.trackBranch !== void 0 && !isGit) {
@@ -29188,7 +29146,7 @@ var WorkspaceShadow = class _WorkspaceShadow {
     } else {
       trackedSet = await createCopyShadow(canonicalWorkingDir, shadowDir);
     }
-    shadowDir = await fs32.realpath(shadowDir);
+    shadowDir = await fs31.realpath(shadowDir);
     const preTaskHashes = /* @__PURE__ */ new Map();
     for (const rel of trackedSet) {
       preTaskHashes.set(rel, await hashRealFile2(canonicalWorkingDir, rel));
@@ -29322,7 +29280,7 @@ var WorkspaceShadow = class _WorkspaceShadow {
     }
     const message = opts.message ?? `CodeVibe track ${this.trackBranch}`;
     const baseSha = (await execFile4("git", ["-C", this.shadowDir, "rev-parse", "HEAD"])).stdout.trim();
-    const idxFile = path39.join(os21.tmpdir(), `cv-track-idx-${(0, import_uuid10.v4)()}`);
+    const idxFile = path38.join(os20.tmpdir(), `cv-track-idx-${(0, import_uuid10.v4)()}`);
     const idxEnv = { ...process.env, GIT_INDEX_FILE: idxFile };
     const runIdx = (args) => execFile4("git", ["-C", this.shadowDir, ...args], {
       env: idxEnv,
@@ -29343,13 +29301,13 @@ var WorkspaceShadow = class _WorkspaceShadow {
           const m = staged.split(/\s+/)[0];
           if (/^\d{6}$/.test(m)) mode = m;
         }
-        const blobTmp = path39.join(os21.tmpdir(), `cv-track-blob-${(0, import_uuid10.v4)()}`);
-        await fs32.writeFile(blobTmp, f.content, "utf8");
+        const blobTmp = path38.join(os20.tmpdir(), `cv-track-blob-${(0, import_uuid10.v4)()}`);
+        await fs31.writeFile(blobTmp, f.content, "utf8");
         try {
           const oid = (await runIdx(["hash-object", "-w", "--no-filters", "--", blobTmp])).stdout.trim();
           await runIdx(["update-index", "--add", "--cacheinfo", `${mode},${oid},${f.path}`]);
         } finally {
-          await fs32.rm(blobTmp, { force: true });
+          await fs31.rm(blobTmp, { force: true });
         }
       }
       const treeOid = (await runIdx(["write-tree"])).stdout.trim();
@@ -29396,7 +29354,7 @@ var WorkspaceShadow = class _WorkspaceShadow {
       });
       return commitOid;
     } finally {
-      await fs32.rm(idxFile, { force: true });
+      await fs31.rm(idxFile, { force: true });
     }
   }
   // ─── promote (§4 / #PM-1 / #PM-2 / #PR-2 / #PR-4) ────────────────────────
@@ -29462,7 +29420,7 @@ var WorkspaceShadow = class _WorkspaceShadow {
         });
         continue;
       }
-      const realPath = path39.join(this.workingDir, rel);
+      const realPath = path38.join(this.workingDir, rel);
       const expected = this.preTaskHashes.get(rel) ?? null;
       let currentHash;
       try {
@@ -29477,10 +29435,10 @@ var WorkspaceShadow = class _WorkspaceShadow {
       }
       try {
         if (file.change_kind === "deleted") {
-          await fs32.rm(realPath, { force: true });
+          await fs31.rm(realPath, { force: true });
         } else {
-          await fs32.mkdir(path39.dirname(realPath), { recursive: true });
-          await fs32.writeFile(realPath, file.content, "utf8");
+          await fs31.mkdir(path38.dirname(realPath), { recursive: true });
+          await fs31.writeFile(realPath, file.content, "utf8");
         }
         promoted.push(rel);
       } catch (err) {
@@ -29538,7 +29496,7 @@ var WorkspaceShadow = class _WorkspaceShadow {
       if (this.isGit) {
         await this.removeGitWorktree();
       } else {
-        await fs32.rm(this.shadowDir, { recursive: true, force: true });
+        await fs31.rm(this.shadowDir, { recursive: true, force: true });
       }
       removed = true;
     } catch (err) {
@@ -29549,7 +29507,7 @@ var WorkspaceShadow = class _WorkspaceShadow {
       });
     }
     if (removed && !opts.preserveStateDir) {
-      await fs32.rm(this.stateDir, { recursive: true, force: true }).catch(() => void 0);
+      await fs31.rm(this.stateDir, { recursive: true, force: true }).catch(() => void 0);
     }
   }
   /**
@@ -29585,15 +29543,15 @@ var WorkspaceShadow = class _WorkspaceShadow {
       createdAtMs: Date.now()
     };
     const json = JSON.stringify(marker, null, 2);
-    await fs32.mkdir(this.stateDir, { recursive: true });
-    await fs32.writeFile(path39.join(this.stateDir, SHADOW_STATE_FILE), json, "utf8");
+    await fs31.mkdir(this.stateDir, { recursive: true });
+    await fs31.writeFile(path38.join(this.stateDir, SHADOW_STATE_FILE), json, "utf8");
     if (promoteState === "pending") {
-      await fs32.writeFile(path39.join(this.shadowDir, SHADOW_STATE_FILE), json, "utf8").catch(() => void 0);
+      await fs31.writeFile(path38.join(this.shadowDir, SHADOW_STATE_FILE), json, "utf8").catch(() => void 0);
     }
   }
   async readStateMarker() {
     try {
-      const raw = await fs32.readFile(path39.join(this.stateDir, SHADOW_STATE_FILE), "utf8");
+      const raw = await fs31.readFile(path38.join(this.stateDir, SHADOW_STATE_FILE), "utf8");
       return JSON.parse(raw);
     } catch {
       return null;
@@ -29655,15 +29613,15 @@ async function listRecoverableShadows(env = {}) {
   const stateRoot = env.stateRootDir ?? defaultStateRoot();
   let entries;
   try {
-    entries = await fs32.readdir(stateRoot);
+    entries = await fs31.readdir(stateRoot);
   } catch {
     return [];
   }
   const out = [];
   for (const taskId of entries) {
-    const stateDir = path39.join(stateRoot, taskId);
+    const stateDir = path38.join(stateRoot, taskId);
     try {
-      const raw = await fs32.readFile(path39.join(stateDir, SHADOW_STATE_FILE), "utf8");
+      const raw = await fs31.readFile(path38.join(stateDir, SHADOW_STATE_FILE), "utf8");
       const marker = JSON.parse(raw);
       out.push({
         taskId: marker.taskId,
@@ -29681,7 +29639,7 @@ async function listRecoverableShadows(env = {}) {
 }
 async function reopenShadow(recovered, env = {}) {
   try {
-    await fs32.access(recovered.shadowDir, import_node_fs17.constants.F_OK);
+    await fs31.access(recovered.shadowDir, import_node_fs17.constants.F_OK);
   } catch {
     return null;
   }
@@ -29708,7 +29666,7 @@ async function reapOrphanShadows(keepTaskIds, env = {}) {
     if (shadow) {
       await shadow.discard();
     } else {
-      await fs32.rm(r.stateDir, { recursive: true, force: true }).catch(() => void 0);
+      await fs31.rm(r.stateDir, { recursive: true, force: true }).catch(() => void 0);
     }
     reaped.push(r.taskId);
   }
@@ -29747,9 +29705,9 @@ async function createGitWorktreeShadow(workingDir, shadowDir, sleep, trackBranch
   await withGitLockRetry(() => execFile4("git", addArgs), { sleep });
   try {
     const { stdout: excludeRel } = await execFile4("git", ["-C", shadowDir, "rev-parse", "--git-path", "info/exclude"]);
-    const excludeAbs = path39.resolve(shadowDir, excludeRel.trim());
-    await fs32.mkdir(path39.dirname(excludeAbs), { recursive: true });
-    await fs32.appendFile(excludeAbs, `
+    const excludeAbs = path38.resolve(shadowDir, excludeRel.trim());
+    await fs31.mkdir(path38.dirname(excludeAbs), { recursive: true });
+    await fs31.appendFile(excludeAbs, `
 ${SHADOW_ATTACHMENTS_DIR2}/
 `);
   } catch (err) {
@@ -29781,48 +29739,48 @@ ${SHADOW_ATTACHMENTS_DIR2}/
   return tracked;
 }
 async function createCopyShadow(workingDir, shadowDir) {
-  await fs32.mkdir(shadowDir, { recursive: true });
+  await fs31.mkdir(shadowDir, { recursive: true });
   const tracked = /* @__PURE__ */ new Set();
   await copyTree(workingDir, shadowDir, "", tracked);
-  const realNodeModules = path39.join(workingDir, "node_modules");
+  const realNodeModules = path38.join(workingDir, "node_modules");
   try {
-    await fs32.access(realNodeModules, import_node_fs17.constants.F_OK);
-    await fs32.symlink(realNodeModules, path39.join(shadowDir, "node_modules"), "dir").catch(() => void 0);
+    await fs31.access(realNodeModules, import_node_fs17.constants.F_OK);
+    await fs31.symlink(realNodeModules, path38.join(shadowDir, "node_modules"), "dir").catch(() => void 0);
   } catch {
   }
   for (const name of BUILD_ENV_FILENAMES) {
-    const src = path39.join(workingDir, name);
+    const src = path38.join(workingDir, name);
     if (matchesSecretDenyList(src)) continue;
     try {
-      const stat7 = await fs32.lstat(src);
-      if (!stat7.isFile()) continue;
-      await fs32.copyFile(src, path39.join(shadowDir, name));
+      const stat6 = await fs31.lstat(src);
+      if (!stat6.isFile()) continue;
+      await fs31.copyFile(src, path38.join(shadowDir, name));
     } catch {
     }
   }
   return tracked;
 }
 async function copyTree(srcRoot, dstRoot, relDir, tracked) {
-  const srcDir = path39.join(srcRoot, relDir);
+  const srcDir = path38.join(srcRoot, relDir);
   let entries;
   try {
-    entries = await fs32.readdir(srcDir, { withFileTypes: true });
+    entries = await fs31.readdir(srcDir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const ent of entries) {
-    const rel = relDir ? path39.join(relDir, ent.name) : ent.name;
-    const srcPath = path39.join(srcRoot, rel);
-    const dstPath = path39.join(dstRoot, rel);
+    const rel = relDir ? path38.join(relDir, ent.name) : ent.name;
+    const srcPath = path38.join(srcRoot, rel);
+    const dstPath = path38.join(dstRoot, rel);
     if (ent.isDirectory()) {
       if (SHADOW_SKIP_DIRS.has(ent.name)) continue;
-      await fs32.mkdir(dstPath, { recursive: true });
+      await fs31.mkdir(dstPath, { recursive: true });
       await copyTree(srcRoot, dstRoot, rel, tracked);
     } else if (ent.isFile()) {
       if (matchesSecretDenyList(srcPath)) continue;
       if (relDir === "" && BUILD_ENV_FILENAMES.includes(ent.name)) continue;
-      await fs32.mkdir(path39.dirname(dstPath), { recursive: true });
-      await fs32.copyFile(srcPath, dstPath);
+      await fs31.mkdir(path38.dirname(dstPath), { recursive: true });
+      await fs31.copyFile(srcPath, dstPath);
       tracked.add(rel);
     }
   }
@@ -29830,15 +29788,15 @@ async function copyTree(srcRoot, dstRoot, relDir, tracked) {
 async function listShadowRegularFiles(shadowDir) {
   const out = [];
   async function walk2(relDir) {
-    const dir = path39.join(shadowDir, relDir);
+    const dir = path38.join(shadowDir, relDir);
     let entries;
     try {
-      entries = await fs32.readdir(dir, { withFileTypes: true });
+      entries = await fs31.readdir(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const ent of entries) {
-      const rel = relDir ? path39.join(relDir, ent.name) : ent.name;
+      const rel = relDir ? path38.join(relDir, ent.name) : ent.name;
       if (ent.isDirectory()) {
         if (SHADOW_SKIP_DIRS.has(ent.name)) continue;
         await walk2(rel);
@@ -29853,14 +29811,14 @@ async function listShadowRegularFiles(shadowDir) {
   return out;
 }
 async function readShadowFile(shadowDir, rel) {
-  return fs32.readFile(path39.join(shadowDir, rel), "utf8");
+  return fs31.readFile(path38.join(shadowDir, rel), "utf8");
 }
 function hashBuffer(buf) {
   return crypto13.createHash("sha256").update(buf).digest("hex");
 }
 async function readRealFileForManifest(workingDir, rel) {
   try {
-    const buf = await fs32.readFile(path39.join(workingDir, rel));
+    const buf = await fs31.readFile(path38.join(workingDir, rel));
     return { content: buf.toString("utf8"), hash: hashBuffer(buf) };
   } catch (err) {
     if (err.code === "ENOENT") {
@@ -29871,7 +29829,7 @@ async function readRealFileForManifest(workingDir, rel) {
 }
 async function hashRealFile2(workingDir, rel) {
   try {
-    const buf = await fs32.readFile(path39.join(workingDir, rel));
+    const buf = await fs31.readFile(path38.join(workingDir, rel));
     return hashBuffer(buf);
   } catch (err) {
     if (err.code === "ENOENT") return null;
@@ -32828,7 +32786,7 @@ var QuorumLoop = class {
       implementorAgent,
       implementorTaskId
     }) => {
-      const parentDir = await import_node_fs18.promises.mkdtemp(path40.join(os22.tmpdir(), "codevibe-wb2-resolve-"));
+      const parentDir = await import_node_fs18.promises.mkdtemp(path39.join(os21.tmpdir(), "codevibe-wb2-resolve-"));
       return resolveAgenticSlot({
         realRepoDir: this.deps.workingDir,
         // canonical loop workdir == repo root
@@ -34164,37 +34122,37 @@ function capFindingsOldestFirst(findings, budget) {
 
 // src/orchestration-shell/team-decompose.ts
 var import_node_fs19 = require("node:fs");
-var import_zod2 = require("zod");
+var import_zod = require("zod");
 init_logger2();
 var AGENT_KINDS = ["CLAUDE", "CODEX", "GEMINI", "ANTIGRAVITY"];
-var ContractRefInputSchema = import_zod2.z.object({
-  path: import_zod2.z.string(),
-  access: import_zod2.z.enum(["write", "read"])
+var ContractRefInputSchema = import_zod.z.object({
+  path: import_zod.z.string(),
+  access: import_zod.z.enum(["write", "read"])
 });
-var OwnershipScopeInputSchema = import_zod2.z.object({
-  write_paths: import_zod2.z.array(import_zod2.z.string()),
-  shared_contracts: import_zod2.z.array(ContractRefInputSchema),
-  test_surfaces: import_zod2.z.array(import_zod2.z.string()),
-  auto_modified_files: import_zod2.z.array(import_zod2.z.string())
+var OwnershipScopeInputSchema = import_zod.z.object({
+  write_paths: import_zod.z.array(import_zod.z.string()),
+  shared_contracts: import_zod.z.array(ContractRefInputSchema),
+  test_surfaces: import_zod.z.array(import_zod.z.string()),
+  auto_modified_files: import_zod.z.array(import_zod.z.string())
 });
-var ImplementorAgentSchema = import_zod2.z.preprocess(
+var ImplementorAgentSchema = import_zod.z.preprocess(
   (v) => typeof v === "string" ? v.toUpperCase() : v,
-  import_zod2.z.enum(AGENT_KINDS)
+  import_zod.z.enum(AGENT_KINDS)
 );
-var WorkItemWithDescriptionSchema = import_zod2.z.object({
+var WorkItemWithDescriptionSchema = import_zod.z.object({
   ownershipScope: OwnershipScopeInputSchema,
   implementorAgent: ImplementorAgentSchema,
-  isSharedTestOwner: import_zod2.z.boolean(),
-  description: import_zod2.z.string()
+  isSharedTestOwner: import_zod.z.boolean(),
+  description: import_zod.z.string()
 });
-var WorkItemInputSchema = import_zod2.z.discriminatedUnion("decompose", [
-  import_zod2.z.object({
-    decompose: import_zod2.z.literal(true),
-    workItems: import_zod2.z.array(WorkItemWithDescriptionSchema).min(2)
+var WorkItemInputSchema = import_zod.z.discriminatedUnion("decompose", [
+  import_zod.z.object({
+    decompose: import_zod.z.literal(true),
+    workItems: import_zod.z.array(WorkItemWithDescriptionSchema).min(2)
   }),
-  import_zod2.z.object({
-    decompose: import_zod2.z.literal(false),
-    reason: import_zod2.z.string()
+  import_zod.z.object({
+    decompose: import_zod.z.literal(false),
+    reason: import_zod.z.string()
   })
 ]);
 async function readImplementorFinalMessage(plan, handle, agent, exitCode) {
@@ -34415,10 +34373,10 @@ function validateAgentAvailability(workItems, detected) {
 var import_node_crypto11 = require("node:crypto");
 
 // src/orchestration-shell/context-store.ts
-var fs35 = __toESM(require("fs/promises"));
+var fs34 = __toESM(require("fs/promises"));
 var import_fs = require("fs");
-var path41 = __toESM(require("path"));
-var os23 = __toESM(require("os"));
+var path40 = __toESM(require("path"));
+var os22 = __toESM(require("os"));
 var crypto14 = __toESM(require("crypto"));
 var import_child_process4 = require("child_process");
 var import_util2 = require("util");
@@ -34436,39 +34394,39 @@ function isSha256Hex(s) {
   return SHA256_HEX_RE.test(s);
 }
 function deriveWorkspaceId(absoluteWorkspaceRoot) {
-  const canonical = path41.resolve(absoluteWorkspaceRoot);
+  const canonical = path40.resolve(absoluteWorkspaceRoot);
   return crypto14.createHash("sha256").update(canonical, "utf8").digest("hex").slice(0, 16);
 }
 async function canonicalizeRoot(p) {
   try {
-    return await fs35.realpath(p);
+    return await fs34.realpath(p);
   } catch {
-    return path41.resolve(p);
+    return path40.resolve(p);
   }
 }
-function resolveHome5() {
+function resolveHome4() {
   const isTestEnv = process.env.VITEST === "true" || process.env.NODE_ENV === "test";
   if (isTestEnv && process.env.CODEVIBE_HOME_OVERRIDE) {
     return process.env.CODEVIBE_HOME_OVERRIDE;
   }
-  return os23.homedir();
+  return os22.homedir();
 }
 function contextStoreDir(workspaceId) {
-  return path41.join(resolveHome5(), ".codevibe", "context", workspaceId);
+  return path40.join(resolveHome4(), ".codevibe", "context", workspaceId);
 }
 async function atomicWriteFile(finalPath, bytes) {
-  const dir = path41.dirname(finalPath);
-  await fs35.mkdir(dir, { recursive: true, mode: DIR_MODE5 });
+  const dir = path40.dirname(finalPath);
+  await fs34.mkdir(dir, { recursive: true, mode: DIR_MODE5 });
   if (process.platform !== "win32") {
     try {
-      await fs35.chmod(dir, DIR_MODE5);
+      await fs34.chmod(dir, DIR_MODE5);
     } catch {
     }
   }
   const tmpPath = `${finalPath}.tmp.${process.pid}.${crypto14.randomBytes(6).toString("hex")}`;
   let fh = null;
   try {
-    fh = await fs35.open(
+    fh = await fs34.open(
       tmpPath,
       import_fs.constants.O_WRONLY | import_fs.constants.O_CREAT | import_fs.constants.O_EXCL,
       FILE_MODE6
@@ -34479,11 +34437,11 @@ async function atomicWriteFile(finalPath, bytes) {
     fh = null;
     if (process.platform !== "win32") {
       try {
-        await fs35.chmod(tmpPath, FILE_MODE6);
+        await fs34.chmod(tmpPath, FILE_MODE6);
       } catch {
       }
     }
-    await fs35.rename(tmpPath, finalPath);
+    await fs34.rename(tmpPath, finalPath);
   } catch (err) {
     if (fh) {
       try {
@@ -34492,14 +34450,14 @@ async function atomicWriteFile(finalPath, bytes) {
       }
     }
     try {
-      await fs35.unlink(tmpPath);
+      await fs34.unlink(tmpPath);
     } catch {
     }
     throw err;
   }
   let dirFh = null;
   try {
-    dirFh = await fs35.open(dir, import_fs.constants.O_RDONLY);
+    dirFh = await fs34.open(dir, import_fs.constants.O_RDONLY);
     await dirFh.sync();
   } catch {
   } finally {
@@ -34521,20 +34479,20 @@ async function writeContextStore(deps) {
     summarySha256: deps.summary.sha256
   };
   await removeStoreFile(dir, DIGEST_FILE);
-  await atomicWriteFile(path41.join(dir, SUMMARY_FILE), JSON.stringify(deps.summary));
-  await atomicWriteFile(path41.join(dir, METADATA_FILE), JSON.stringify(metadata));
-  await atomicWriteFile(path41.join(dir, DIGEST_FILE), deps.summary.sha256);
+  await atomicWriteFile(path40.join(dir, SUMMARY_FILE), JSON.stringify(deps.summary));
+  await atomicWriteFile(path40.join(dir, METADATA_FILE), JSON.stringify(metadata));
+  await atomicWriteFile(path40.join(dir, DIGEST_FILE), deps.summary.sha256);
 }
 async function removeStoreFile(dir, name) {
   try {
-    await fs35.unlink(path41.join(dir, name));
+    await fs34.unlink(path40.join(dir, name));
   } catch {
   }
 }
 async function purgeContextStoreFiles(dir) {
   for (const name of [SUMMARY_FILE, DIGEST_FILE, METADATA_FILE]) {
     try {
-      await fs35.unlink(path41.join(dir, name));
+      await fs34.unlink(path40.join(dir, name));
     } catch {
     }
   }
@@ -34542,7 +34500,7 @@ async function purgeContextStoreFiles(dir) {
 async function purgeContextStoreFilesStrict(dir) {
   for (const name of [SUMMARY_FILE, DIGEST_FILE, METADATA_FILE]) {
     try {
-      await fs35.unlink(path41.join(dir, name));
+      await fs34.unlink(path40.join(dir, name));
     } catch (err) {
       if (err?.code === "ENOENT") continue;
       throw new Error(`failed to purge context store file ${name}: ${err.message}`);
@@ -34553,9 +34511,9 @@ async function loadContextStore(workspaceId) {
   const dir = contextStoreDir(workspaceId);
   try {
     const [summaryRaw, digestRaw, metadataRaw] = await Promise.all([
-      fs35.readFile(path41.join(dir, SUMMARY_FILE), "utf8"),
-      fs35.readFile(path41.join(dir, DIGEST_FILE), "utf8"),
-      fs35.readFile(path41.join(dir, METADATA_FILE), "utf8")
+      fs34.readFile(path40.join(dir, SUMMARY_FILE), "utf8"),
+      fs34.readFile(path40.join(dir, DIGEST_FILE), "utf8"),
+      fs34.readFile(path40.join(dir, METADATA_FILE), "utf8")
     ]);
     const summary = JSON.parse(summaryRaw);
     const metadata = JSON.parse(metadataRaw);
@@ -34625,10 +34583,10 @@ async function computeSummaryInputHash(deps) {
   const canonicalRootPaths = await canonicalizeRootPaths(deps.rootPaths);
   const optIn = await readOptIn(deps.tier);
   const bodyPaths = (optIn?.bodyInclusionPaths ?? []).slice().sort();
-  const ignoreFilePath = path41.join(resolveHome5(), ".codevibe", "structural-summary.ignore");
+  const ignoreFilePath = path40.join(resolveHome4(), ".codevibe", "structural-summary.ignore");
   let ignoreFileHash = "absent";
   try {
-    const raw = await fs35.readFile(ignoreFilePath, "utf8");
+    const raw = await fs34.readFile(ignoreFilePath, "utf8");
     ignoreFileHash = crypto14.createHash("sha256").update(raw, "utf8").digest("hex");
   } catch {
   }
@@ -34658,7 +34616,7 @@ async function canonicalizeRootPaths(rootPaths) {
 function stableUniqueRootPaths(rootPaths) {
   const seen = /* @__PURE__ */ new Set();
   const result = [];
-  for (const root of rootPaths.map((p) => path41.resolve(p)).sort(strictStringCompare)) {
+  for (const root of rootPaths.map((p) => path40.resolve(p)).sort(strictStringCompare)) {
     if (seen.has(root)) continue;
     seen.add(root);
     result.push(root);
@@ -34702,10 +34660,10 @@ async function probeFreshness(deps) {
     return stale("input-hash-mismatch", true);
   }
   const cachedFreshnessByRoot = new Map(
-    deps.cached.metadata.rootFreshness.map((root) => [path41.resolve(root.rootPath), root])
+    deps.cached.metadata.rootFreshness.map((root) => [path40.resolve(root.rootPath), root])
   );
   for (const liveRoot of rootFreshness) {
-    const cachedRoot = cachedFreshnessByRoot.get(path41.resolve(liveRoot.rootPath));
+    const cachedRoot = cachedFreshnessByRoot.get(path40.resolve(liveRoot.rootPath));
     if (!cachedRoot) {
       return stale("root-set-mismatch");
     }
@@ -34729,7 +34687,7 @@ async function probeFreshness(deps) {
 }
 function rootFreshnessFromProbe(rootPath, git2) {
   return {
-    rootPath: path41.resolve(rootPath),
+    rootPath: path40.resolve(rootPath),
     ...git2.gitTopLevel ? { gitTopLevel: git2.gitTopLevel } : {},
     isGitRepo: git2.isGitRepo,
     ...git2.head ? { head: git2.head } : {},
@@ -34805,7 +34763,7 @@ async function ensureFreshContextStore(deps) {
     const optIn = await readOptIn(tier);
     const summary = await generator.generate({
       rootPaths: canonicalRootPaths,
-      ignoreFile: path41.join(resolveHome5(), ".codevibe", "structural-summary.ignore"),
+      ignoreFile: path40.join(resolveHome4(), ".codevibe", "structural-summary.ignore"),
       includeBodies: optIn?.bodyInclusionPaths ?? [],
       userId,
       tier
@@ -34858,8 +34816,8 @@ async function ensureFreshContextStore(deps) {
 }
 
 // src/orchestration-shell/root-discovery.ts
-var fs36 = __toESM(require("fs/promises"));
-var path42 = __toESM(require("path"));
+var fs35 = __toESM(require("fs/promises"));
+var path41 = __toESM(require("path"));
 var DEFAULT_DISCOVERY_MAX_DEPTH = 2;
 var DEFAULT_DISCOVERY_MAX_ROOTS = 25;
 var PRUNED_DIRECTORY_NAMES = /* @__PURE__ */ new Set([
@@ -34928,7 +34886,7 @@ async function discoverRepositoryRoots(deps = {}) {
       return true;
     }).sort(compareStrings);
     for (const child of childDirs) {
-      await walk2(path42.join(dir, child), depth + 1);
+      await walk2(path41.join(dir, child), depth + 1);
     }
   }
   await walk2(launchDir, 0);
@@ -34951,16 +34909,16 @@ async function discoverRepositoryRoots(deps = {}) {
   };
 }
 async function canonicalizeDirectory(dir) {
-  const resolved = path42.resolve(dir);
+  const resolved = path41.resolve(dir);
   try {
-    return await fs36.realpath(resolved);
+    return await fs35.realpath(resolved);
   } catch {
     return resolved;
   }
 }
 async function readDirSafe(dir) {
   try {
-    return await fs36.readdir(dir, { withFileTypes: true });
+    return await fs35.readdir(dir, { withFileTypes: true });
   } catch {
     return null;
   }
@@ -34976,8 +34934,8 @@ function ancestorRootsWithChildren(candidates) {
   ).sort(compareStrings);
 }
 function isStrictSubpath(parent, child) {
-  const rel = path42.relative(parent, child);
-  return rel.length > 0 && rel !== ".." && !rel.startsWith(`..${path42.sep}`) && !path42.isAbsolute(rel);
+  const rel = path41.relative(parent, child);
+  return rel.length > 0 && rel !== ".." && !rel.startsWith(`..${path41.sep}`) && !path41.isAbsolute(rel);
 }
 function compareStrings(a, b) {
   if (a < b) return -1;
@@ -34988,6 +34946,16 @@ function compareStrings(a, b) {
 // src/orchestration-shell/index.ts
 init_process_markers();
 
+// src/orchestration-shell/sticky-preference.ts
+var import_zod2 = require("zod");
+init_logger2();
+var LastModeFileSchema = import_zod2.z.object({
+  schemaVersion: import_zod2.z.literal(1),
+  mode: import_zod2.z.union([import_zod2.z.literal("companion"), import_zod2.z.literal("orchestration")]),
+  pickedAt: import_zod2.z.string(),
+  pickedByTier: import_zod2.z.union([import_zod2.z.literal("PRO"), import_zod2.z.literal("MAX")])
+});
+
 // src/orchestration-shell/components/AuditLogPanel.tsx
 var React19 = __toESM(require("react"));
 
@@ -35131,15 +35099,21 @@ async function runOrchestrationShell(args) {
     try {
       unsubscribeEvents = args.appsyncClient.subscribeToEvents(
         args.session.sessionId,
-        (event) => {
-          handleSubscribedEvent(
-            event,
-            store,
-            sessionKeyResolver,
-            reviewSummaryFetcher,
-            maybeAutoContinueMax
-          );
-        },
+        // The dispatcher routes MOBILE `USER_PROMPT`s into the shell's serialized
+        // submission pipeline (mobile→desktop RETURN path) and everything else into
+        // `handleSubscribedEvent` (gate/continuation prompts). `submit` is a THUNK so
+        // the forward reference to `handleUserInput` (declared below) is read only when
+        // an event actually arrives (async) — never during this synchronous setup.
+        createSubscribedEventDispatcher({
+          store,
+          submit: (text2, images, options) => handleUserInput(text2, images, options),
+          sessionKeyResolver,
+          reviewSummaryFetcher,
+          maybeAutoContinue: maybeAutoContinueMax,
+          // Advance the mobile prompt's delivery checkmarks (DELIVERED → EXECUTED) via the
+          // same `updateEventStatus` mutation the companion plugins use.
+          updateEventStatus: (input) => args.appsyncClient.updateEventStatus(input)
+        }),
         (err) => {
           logger.warn("[orchestration-shell] subscribeToEvents error (non-fatal)", {
             error: err.message
@@ -35150,8 +35124,12 @@ async function runOrchestrationShell(args) {
         // `source = DESKTOP` (`emittedBy = SYSTEM`). Opt into DESKTOP-source
         // delivery so those prompts reach handleSubscribedEvent — without
         // this they are filtered out as Companion-style desktop echoes and
-        // the orchestration loop appears to hang. The shell originates no
-        // createEvent rows of its own, so there are no self-echoes to drop.
+        // the orchestration loop appears to hang. The shell now ALSO emits its
+        // OWN DESKTOP mirror rows (Bug-A `emitOrchestrationTurnMirror`:
+        // USER_PROMPT + ASSISTANT_RESPONSE), which are re-delivered here — they
+        // are harmlessly dropped by `handleSubscribedEvent`'s INTERACTIVE_PROMPT
+        // pre-check, and the mobile-return branch above only ever feeds
+        // `source === 'MOBILE'` prompts, so the shell never re-feeds its own echo.
         { receiveDesktopEvents: true }
       );
     } catch (err) {
@@ -35262,16 +35240,29 @@ async function runOrchestrationShell(args) {
     }
   }
   const handleUserInput = serializeShellSubmissions(
-    (text2, images) => handleShellUserInput({
-      text: text2,
-      store,
-      args,
-      emitShellEventBound,
-      generator,
-      // IMAGE-ATTACHMENT-DESIGN.md §13 (Option 2) — the `[Image #N]` input-chip paths
-      // carried out-of-band from the InputBar (never re-detected from the chip text).
-      ...images && images.length ? { images } : {}
-    })
+    async (text2, images, options) => {
+      const fromMobile = options?.fromMobile === true;
+      const convLenBefore = store.getState().conversation.length;
+      const userTurnTimestamp = (/* @__PURE__ */ new Date()).toISOString();
+      await handleShellUserInput({
+        text: text2,
+        store,
+        args,
+        emitShellEventBound,
+        generator,
+        // IMAGE-ATTACHMENT-DESIGN.md §13 (Option 2) — the `[Image #N]` input-chip paths
+        // carried out-of-band from the InputBar (never re-detected from the chip text).
+        ...images && images.length ? { images } : {}
+      });
+      await emitOrchestrationTurnMirror({
+        store,
+        sessionId: args.session.sessionId,
+        emitShellEventBound,
+        convLenBefore,
+        userTurnTimestamp,
+        skipUserPromptMirror: fromMobile
+      });
+    }
   );
   let teardownDone = false;
   const runPlannerTeardown = async () => {
@@ -35293,13 +35284,44 @@ async function runOrchestrationShell(args) {
     } catch {
     }
   };
+  const SESSION_RETIRE_TIMEOUT_MS = 3e3;
+  let sessionRetired = false;
+  const retireSession = async () => {
+    if (sessionRetired) return;
+    sessionRetired = true;
+    const sessionId = args.session.sessionId;
+    if (sessionId.startsWith("cp1a-local-")) return;
+    try {
+      args.appsyncClient.stopHeartbeat(sessionId);
+    } catch (err) {
+      logger.warn("[orchestration-shell] stopHeartbeat on teardown failed", {
+        error: err.message
+      });
+    }
+    let retireTimer;
+    try {
+      await Promise.race([
+        args.appsyncClient.updateSession({ sessionId, status: "INACTIVE" /* INACTIVE */ }),
+        new Promise((resolve9) => {
+          retireTimer = setTimeout(resolve9, SESSION_RETIRE_TIMEOUT_MS);
+          retireTimer.unref?.();
+        })
+      ]);
+    } catch (err) {
+      logger.warn("[orchestration-shell] session retire (updateSession INACTIVE) on teardown failed", {
+        error: err.message
+      });
+    } finally {
+      if (retireTimer) clearTimeout(retireTimer);
+    }
+  };
   let inkUnmount = null;
   let nonTtyAbort = null;
   const signalsRegistered = /* @__PURE__ */ new Set();
   const onSignal = (sig) => {
     disableBracketedPaste();
-    void runPlannerTeardown().catch(() => void 0).finally(() => {
-      logger.info(`[orchestration-shell] caught ${sig}, planner teardown complete`);
+    void Promise.allSettled([runPlannerTeardown(), retireSession()]).finally(() => {
+      logger.info(`[orchestration-shell] caught ${sig}, teardown complete`);
       try {
         if (inkUnmount) {
           inkUnmount();
@@ -35429,7 +35451,10 @@ async function runOrchestrationShell(args) {
         // store merged; pass it straight through. ABSENT on a non-team session →
         // the optional spread keeps the props byte-identical.
         ...gateDecisionDeps.groupDecision ? { groupDecision: gateDecisionDeps.groupDecision } : {}
-      })
+      }),
+      // ink 7 emits synchronized output (DEC 2026) natively + manages the cursor
+      // itself (via <InputBar>'s `useCursor`), so pass `process.stdout` straight.
+      { stdout: process.stdout }
     );
     inkUnmount = unmount;
     const unsubscribe = store.subscribe((state) => {
@@ -35489,6 +35514,7 @@ async function runOrchestrationShell(args) {
     }
     signalsRegistered.clear();
     await runPlannerTeardown();
+    await retireSession();
   }
 }
 var TASK_REVIEW_SUMMARY_FETCH_TIMEOUT_MS = 5e3;
@@ -35719,6 +35745,87 @@ async function routeNonGateInteractivePrompt(event, metadata, store, sessionKeyR
     });
   }
 }
+async function routeMobileUserPrompt(event, sessionKeyResolver, submit, updateEventStatus) {
+  try {
+    if (event.sessionId.startsWith("cp1a-local-")) return;
+    let text2;
+    if (event.isEncrypted) {
+      if (!sessionKeyResolver) {
+        logger.warn("[orchestration-shell] mobile USER_PROMPT dropped \u2014 no session-key resolver", {
+          eventId: event.eventId
+        });
+        return;
+      }
+      let sessionKey = null;
+      try {
+        sessionKey = await sessionKeyResolver(event.sessionId);
+      } catch (err) {
+        logger.warn("[orchestration-shell] mobile USER_PROMPT session-key resolve threw", {
+          eventId: event.eventId,
+          error: err.message
+        });
+        return;
+      }
+      if (sessionKey === null) {
+        logger.warn(
+          "[orchestration-shell] mobile USER_PROMPT \u2014 session key unavailable, cannot decrypt",
+          { eventId: event.eventId, sessionId: event.sessionId }
+        );
+        return;
+      }
+      try {
+        text2 = cryptoService.decryptContent(event.content, sessionKey);
+      } catch (err) {
+        logger.warn("[orchestration-shell] mobile USER_PROMPT decryptContent failed", {
+          eventId: event.eventId,
+          error: err.message
+        });
+        return;
+      }
+    } else {
+      text2 = typeof event.content === "string" ? event.content : "";
+    }
+    if (typeof text2 !== "string" || text2.trim().length === 0) return;
+    const markStatus = async (status) => {
+      if (!updateEventStatus || !event.eventId) return;
+      try {
+        await updateEventStatus({
+          eventId: event.eventId,
+          sessionId: event.sessionId,
+          timestamp: event.timestamp,
+          deliveryStatus: status
+        });
+      } catch (err) {
+        logger.warn("[orchestration-shell] mobile USER_PROMPT status update failed (non-fatal)", {
+          eventId: event.eventId,
+          status,
+          error: err.message
+        });
+      }
+    };
+    await markStatus("DELIVERED" /* DELIVERED */);
+    try {
+      await submit(text2, void 0, { fromMobile: true });
+    } finally {
+      await markStatus("EXECUTED" /* EXECUTED */);
+    }
+  } catch (err) {
+    logger.warn("[orchestration-shell] mobile USER_PROMPT routing failed (non-fatal)", {
+      eventId: event.eventId,
+      error: err.message
+    });
+  }
+}
+function createSubscribedEventDispatcher(deps) {
+  const { store, submit, sessionKeyResolver, reviewSummaryFetcher, maybeAutoContinue, updateEventStatus } = deps;
+  return (event) => {
+    if (event.source === "MOBILE" && event.type === "USER_PROMPT") {
+      void routeMobileUserPrompt(event, sessionKeyResolver, submit, updateEventStatus);
+      return;
+    }
+    handleSubscribedEvent(event, store, sessionKeyResolver, reviewSummaryFetcher, maybeAutoContinue);
+  };
+}
 function routeTeamShellEventToStore(store, evt) {
   const md = evt.metadata;
   if (!md || typeof md !== "object") return;
@@ -36570,8 +36677,8 @@ function parseTeamWorkItems(rawArg) {
     if (item !== null && typeof item === "object") {
       const rec = item;
       if (typeof rec.description === "string" && rec.description.length > 0) {
-        const os33 = rec.ownershipScope;
-        const rawTestSurfaces = os33?.test_surfaces;
+        const os32 = rec.ownershipScope;
+        const rawTestSurfaces = os32?.test_surfaces;
         const testSurfaces = Array.isArray(rawTestSurfaces) ? rawTestSurfaces.filter((p) => typeof p === "string") : [];
         briefsByTrackIndex.set(i, appendTestSurfaceGuidance(rec.description, testSurfaces));
       }
@@ -36583,11 +36690,11 @@ function parseTeamWorkItems(rawArg) {
 }
 function serializeShellSubmissions(handler) {
   let queue = Promise.resolve();
-  return (text2, images) => {
+  return (text2, images, options) => {
     if (/^\/[a-zA-Z][\w-]*(?:\s|$)/.test(text2)) {
-      return handler(text2, images);
+      return handler(text2, images, options);
     }
-    const turn = queue.then(() => handler(text2, images));
+    const turn = queue.then(() => handler(text2, images, options));
     queue = turn.then(
       () => void 0,
       () => void 0
@@ -37116,7 +37223,7 @@ async function handleShellUserInput(deps) {
   const isAnsweringPending = !!pendingForIngest && pendingForIngest.rounds.length > 0 && pendingForIngest.rounds[pendingForIngest.rounds.length - 1].answer === void 0;
   const existingAttachments = !text2.startsWith("/") && isAnsweringPending ? pendingForIngest.attachments : void 0;
   const cwd = args.cwd ?? process.cwd();
-  const homedir21 = os24.homedir();
+  const homedir20 = os23.homedir();
   let ingest;
   if (deps.images && deps.images.length > 0) {
     const carried = attachmentsFromPaths(
@@ -37125,19 +37232,19 @@ async function handleShellUserInput(deps) {
     );
     const fromText = detectImageAttachments(text2.replace(/\[Image #\d+\]/g, " "), {
       cwd,
-      homedir: homedir21,
+      homedir: homedir20,
       existing: carried.attachments
     });
     ingest = { attachments: fromText.attachments, rejects: [...carried.rejects, ...fromText.rejects] };
   } else {
     ingest = detectImageAttachments(text2, {
       cwd,
-      homedir: homedir21,
+      homedir: homedir20,
       ...existingAttachments && existingAttachments.length ? { existing: existingAttachments } : {}
     });
   }
   const turnAttachments = ingest.attachments;
-  const turnImagePaths = (deps.images ?? []).map((p) => path43.resolve(p));
+  const turnImagePaths = (deps.images ?? []).map((p) => path42.resolve(p));
   const teamDurableStore = typeof args.quorumLoop?.getDurableStore === "function" ? args.quorumLoop.getDurableStore() : void 0;
   const ingestAdvisory = formatIngestRejects(ingest.rejects);
   if (ingestAdvisory) {
@@ -37750,6 +37857,58 @@ async function handleShellUserInput(deps) {
     });
   }
 }
+async function emitOrchestrationTurnMirror(deps) {
+  const {
+    store,
+    sessionId,
+    emitShellEventBound,
+    convLenBefore,
+    userTurnTimestamp,
+    skipUserPromptMirror
+  } = deps;
+  const delta = store.getState().conversation.slice(convLenBefore);
+  const userEntry = delta.find(
+    (e) => e.kind === "user-message"
+  );
+  if (!userEntry) return;
+  if (userEntry.text.trim().length === 0) return;
+  if (!skipUserPromptMirror) {
+    await emitShellEventBound({
+      sessionId,
+      type: "USER_PROMPT",
+      source: "DESKTOP",
+      isEncrypted: true,
+      content: userEntry.text,
+      timestamp: userTurnTimestamp
+    }).catch((err) => {
+      logger.warn("[orchestration-shell] emit USER_PROMPT mirror failed (non-fatal)", {
+        error: err.message
+      });
+    });
+  }
+  const isTeamTurn = delta.some(
+    (e) => e.kind === "planner-decision" && (e.action === "start_task" || e.action === "team_decompose")
+  );
+  if (isTeamTurn) return;
+  const replyText = delta.map((e) => {
+    if (e.kind === "advisory") return e.text;
+    if (e.kind === "slash-output" && e.command === "planner-error") return e.output;
+    return "";
+  }).map((t) => t.trim()).filter((t) => t.length > 0).join("\n\n").trim();
+  if (replyText.length === 0) return;
+  await emitShellEventBound({
+    sessionId,
+    type: "ASSISTANT_RESPONSE",
+    source: "DESKTOP",
+    isEncrypted: true,
+    content: replyText,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString()
+  }).catch((err) => {
+    logger.warn("[orchestration-shell] emit ASSISTANT_RESPONSE mirror failed (non-fatal)", {
+      error: err.message
+    });
+  });
+}
 function buildStatusSummary(state, quorumLoop) {
   const lines = [];
   if (state.team) {
@@ -37910,7 +38069,7 @@ async function runStructuralSummarySessionStart(deps) {
     const discovery = await discoverRepositoryRoots({ launchDir: process.cwd() });
     const summary = await generator.generate({
       rootPaths: discovery.rootPaths,
-      ignoreFile: path43.join(os24.homedir(), ".codevibe", "structural-summary.ignore"),
+      ignoreFile: path42.join(os23.homedir(), ".codevibe", "structural-summary.ignore"),
       includeBodies: optIn?.bodyInclusionPaths ?? [],
       userId: args.session.userId,
       tier: args.tier
@@ -38075,8 +38234,8 @@ var PlannerDecisionSchema = import_zod3.z.object({
 
 // src/planner/cache.ts
 var import_node_fs20 = require("node:fs");
-var path44 = __toESM(require("node:path"));
-var os25 = __toESM(require("node:os"));
+var path43 = __toESM(require("node:path"));
+var os24 = __toESM(require("node:os"));
 var crypto15 = __toESM(require("node:crypto"));
 var TAXONOMY_VERSION = 2;
 var CACHE_SCHEMA_VERSION = 2;
@@ -38115,7 +38274,7 @@ var PlannerCacheLayer = class {
     this.signatureCache = /* @__PURE__ */ new Map();
     this.hydrated = /* @__PURE__ */ new Set();
     this.mutex = new AsyncMutex();
-    this.cacheRoot = cacheRoot ?? path44.join(os25.homedir(), ".codevibe", "cache");
+    this.cacheRoot = cacheRoot ?? path43.join(os24.homedir(), ".codevibe", "cache");
   }
   async getWorkflowClassification(userId, prompt) {
     await this.hydrateWorkflowIfNeeded(userId);
@@ -38214,7 +38373,7 @@ var PlannerCacheLayer = class {
         const entries = await import_node_fs20.promises.readdir(this.cacheRoot, { withFileTypes: true });
         for (const ent of entries) {
           if (ent.isDirectory()) {
-            await this.rmRecursiveSafe(path44.join(this.cacheRoot, ent.name));
+            await this.rmRecursiveSafe(path43.join(this.cacheRoot, ent.name));
           }
         }
       } catch {
@@ -38224,7 +38383,7 @@ var PlannerCacheLayer = class {
   async purgeOnUserSwitch(newUserId) {
     await this.mutex.run(async () => {
       const newPrefix = this.userIdPrefix(newUserId);
-      const markerPath = path44.join(this.cacheRoot, ".last-user");
+      const markerPath = path43.join(this.cacheRoot, ".last-user");
       let lastUserPrefix = null;
       try {
         const raw = (await import_node_fs20.promises.readFile(markerPath, "utf-8")).trim();
@@ -38246,7 +38405,7 @@ var PlannerCacheLayer = class {
           const entries = await import_node_fs20.promises.readdir(this.cacheRoot, { withFileTypes: true });
           for (const ent of entries) {
             if (ent.isDirectory()) {
-              await this.rmRecursiveSafe(path44.join(this.cacheRoot, ent.name));
+              await this.rmRecursiveSafe(path43.join(this.cacheRoot, ent.name));
             }
           }
         } catch {
@@ -38266,8 +38425,8 @@ var PlannerCacheLayer = class {
     this.hydrated.add(userId);
     const filePath = this.workflowFilePath(userId);
     try {
-      const stat7 = await import_node_fs20.promises.stat(filePath);
-      if ((stat7.mode & 63) !== 0) {
+      const stat6 = await import_node_fs20.promises.stat(filePath);
+      if ((stat6.mode & 63) !== 0) {
         await this.rotateCorrupt(filePath);
         return;
       }
@@ -38305,13 +38464,13 @@ var PlannerCacheLayer = class {
     await import_node_fs20.promises.rename(tmp, filePath);
   }
   cacheDir(userId) {
-    return path44.join(this.cacheRoot, this.userIdPrefix(userId));
+    return path43.join(this.cacheRoot, this.userIdPrefix(userId));
   }
   userIdPrefix(userId) {
     return crypto15.createHash("sha256").update(userId).digest("hex").slice(0, 16);
   }
   workflowFilePath(userId) {
-    return path44.join(this.cacheDir(userId), "workflow-query-classifications.json");
+    return path43.join(this.cacheDir(userId), "workflow-query-classifications.json");
   }
   canonicalize(prompt) {
     return crypto15.createHash("sha256").update(`taxonomy:${TAXONOMY_VERSION}\0${prompt.trim().toLowerCase()}`).digest("hex");
@@ -39038,7 +39197,7 @@ var import_uuid12 = require("uuid");
 
 // src/substrate-launch/engage-substrate.ts
 var import_node_fs26 = require("node:fs");
-var path49 = __toESM(require("node:path"));
+var path48 = __toESM(require("node:path"));
 
 // src/credential-broker/types.ts
 var BROKER_ROUTES = [
@@ -39121,9 +39280,9 @@ var PROVIDER_CONFIGS = {
 function getProviderConfig(provider) {
   return PROVIDER_CONFIGS[provider];
 }
-function providerForPath(path55) {
-  if (path55 === "/v1/messages") return "anthropic";
-  if (path55 === "/v1/responses") return "openai";
+function providerForPath(path54) {
+  if (path54 === "/v1/messages") return "anthropic";
+  if (path54 === "/v1/responses") return "openai";
   return null;
 }
 
@@ -39363,16 +39522,16 @@ function joinPath(base, key) {
   }
   return `${base}['${key.replace(/\\/g, "\\\\").replace(/'/g, "\\'")}']`;
 }
-function scrubValue(value, path55, findings) {
+function scrubValue(value, path54, findings) {
   if (typeof value === "string") {
     const { redacted, classes } = scrubString(value);
     for (const patternClass of classes) {
-      findings.push({ field: path55, patternClass });
+      findings.push({ field: path54, patternClass });
     }
     return redacted;
   }
   if (Array.isArray(value)) {
-    return value.map((item, i) => scrubValue(item, joinPath(path55, i), findings));
+    return value.map((item, i) => scrubValue(item, joinPath(path54, i), findings));
   }
   if (value !== null && typeof value === "object") {
     const out = /* @__PURE__ */ Object.create(null);
@@ -39381,11 +39540,11 @@ function scrubValue(value, path55, findings) {
       if (keyIsSecret(k)) {
         redactedKeyCount += 1;
         const placeholder = `${KEY_REDACTION}-${redactedKeyCount}`;
-        const placeholderPath = joinPath(path55, placeholder);
+        const placeholderPath = joinPath(path54, placeholder);
         findings.push({ field: placeholderPath, patternClass: "secret_object_key" });
         out[placeholder] = scrubValue(v, placeholderPath, findings);
       } else {
-        out[k] = scrubValue(v, joinPath(path55, k), findings);
+        out[k] = scrubValue(v, joinPath(path54, k), findings);
       }
     }
     return out;
@@ -39469,8 +39628,8 @@ function selfCredentialGuard(body, secrets) {
   const SELF_CRED_KEY_REDACTION = "[REDACTED-SELF-CRED-KEY]";
   const GENERAL_KEY_REDACTION = "[REDACTED-CP7-KEY]";
   const keyHasSelfCred = (k) => nonEmpty.some((secret) => k.includes(secret));
-  const buildPath = (path55, k) => /^[A-Za-z_][A-Za-z0-9_]*$/.test(k) ? `${path55}.${k}` : `${path55}['${k.replace(/\\/g, "\\\\").replace(/'/g, "\\'")}']`;
-  const walk2 = (value, path55) => {
+  const buildPath = (path54, k) => /^[A-Za-z_][A-Za-z0-9_]*$/.test(k) ? `${path54}.${k}` : `${path54}['${k.replace(/\\/g, "\\\\").replace(/'/g, "\\'")}']`;
+  const walk2 = (value, path54) => {
     if (typeof value === "string") {
       if (nonEmpty.length === 0) return value;
       let out = value;
@@ -39481,11 +39640,11 @@ function selfCredentialGuard(body, secrets) {
           leaked = true;
         }
       }
-      if (leaked) leakedPaths.push(path55);
+      if (leaked) leakedPaths.push(path54);
       return out;
     }
     if (Array.isArray(value)) {
-      return value.map((item, i) => walk2(item, `${path55}[${i}]`));
+      return value.map((item, i) => walk2(item, `${path54}[${i}]`));
     }
     if (value !== null && typeof value === "object") {
       const out = /* @__PURE__ */ Object.create(null);
@@ -39495,17 +39654,17 @@ function selfCredentialGuard(body, secrets) {
         if (nonEmpty.length > 0 && keyHasSelfCred(k)) {
           selfCredKeyCount += 1;
           const placeholderKey = `${SELF_CRED_KEY_REDACTION}-${selfCredKeyCount}`;
-          const placeholderPath = buildPath(path55, placeholderKey);
+          const placeholderPath = buildPath(path54, placeholderKey);
           leakedPaths.push(placeholderPath);
           out[placeholderKey] = walk2(v, placeholderPath);
         } else if (keyIsSecret(k)) {
           secretKeyCount += 1;
           const placeholderKey = `${GENERAL_KEY_REDACTION}-${secretKeyCount}`;
-          const placeholderPath = buildPath(path55, placeholderKey);
+          const placeholderPath = buildPath(path54, placeholderKey);
           keyScrubs.push({ field: placeholderPath, patternClass: "secret_object_key" });
           out[placeholderKey] = walk2(v, placeholderPath);
         } else {
-          out[k] = walk2(v, buildPath(path55, k));
+          out[k] = walk2(v, buildPath(path54, k));
         }
       }
       return out;
@@ -39764,10 +39923,10 @@ var LocalModelGatewayBroker = class {
     const selfSecrets = [key, ...this.tokenMinter.acceptedValues()];
     const guard = selfCredentialGuard(canonical.body, selfSecrets);
     const scrub = scrubRequestBody(guard.body);
-    for (const path55 of guard.leakedPaths) {
+    for (const path54 of guard.leakedPaths) {
       const acked = await this.emitGated("model_context_scrubbed", {
         model_call_id: modelCallId,
-        field: path55,
+        field: path54,
         pattern_class: "self_credential"
       });
       if (!acked) {
@@ -39960,7 +40119,7 @@ var LocalModelGatewayBroker = class {
     try {
       const method = req.method ?? "GET";
       const url = new URL(req.url ?? "/", "http://127.0.0.1");
-      const path55 = url.pathname;
+      const path54 = url.pathname;
       const agentHeaders = {};
       for (const [k, v] of Object.entries(req.headers)) {
         if (typeof v === "string") agentHeaders[k.toLowerCase()] = v;
@@ -39981,13 +40140,13 @@ var LocalModelGatewayBroker = class {
           }
         }
       }
-      if (bodyParseFailed && BROKER_ROUTES.some((r) => r.method === method && r.path === path55)) {
+      if (bodyParseFailed && BROKER_ROUTES.some((r) => r.method === method && r.path === path54)) {
         this.writeJson(res, 400, { error: "malformed JSON body" });
         return;
       }
       const result = await this.handle({
         method,
-        path: path55,
+        path: path54,
         brokerToken,
         body,
         agentHeaders,
@@ -40083,8 +40242,8 @@ init_logger2();
 
 // src/substrate/docker.ts
 var import_node_fs23 = require("node:fs");
-var os26 = __toESM(require("node:os"));
-var path46 = __toESM(require("node:path"));
+var os25 = __toESM(require("node:os"));
+var path45 = __toESM(require("node:path"));
 
 // src/substrate/command-runner.ts
 var import_node_child_process7 = require("node:child_process");
@@ -40305,7 +40464,7 @@ var defaultForwarderFactory = (spec) => new HostEgressForwarder(spec);
 
 // src/substrate/git-proxy.ts
 var import_node_fs22 = require("node:fs");
-var path45 = __toESM(require("node:path"));
+var path44 = __toESM(require("node:path"));
 var COPIED_GIT_ENTRIES = ["HEAD", "refs", "packed-refs", "objects"];
 var SCRUBBED_CONFIG = [
   "[core]",
@@ -40316,14 +40475,14 @@ var SCRUBBED_CONFIG = [
   ""
 ].join("\n");
 async function resolveGitCommonDir(workdir) {
-  const dotGit = path45.join(workdir, ".git");
-  let stat7;
+  const dotGit = path44.join(workdir, ".git");
+  let stat6;
   try {
-    stat7 = await import_node_fs22.promises.stat(dotGit);
+    stat6 = await import_node_fs22.promises.stat(dotGit);
   } catch {
     return null;
   }
-  if (stat7.isDirectory()) {
+  if (stat6.isDirectory()) {
     return dotGit;
   }
   let contents;
@@ -40335,10 +40494,10 @@ async function resolveGitCommonDir(workdir) {
   const m = contents.match(/^gitdir:\s*(.+)\s*$/m);
   if (!m) return null;
   const worktreeGitDir = m[1].trim();
-  const worktreesDir = path45.dirname(worktreeGitDir);
-  const commonDir = path45.dirname(worktreesDir);
+  const worktreesDir = path44.dirname(worktreeGitDir);
+  const commonDir = path44.dirname(worktreesDir);
   try {
-    await import_node_fs22.promises.access(path45.join(commonDir, "objects"));
+    await import_node_fs22.promises.access(path44.join(commonDir, "objects"));
   } catch {
     return null;
   }
@@ -40350,7 +40509,7 @@ async function buildScrubbedGitProxy(workdir, destDir) {
   await import_node_fs22.promises.rm(destDir, { recursive: true, force: true });
   await import_node_fs22.promises.mkdir(destDir, { recursive: true });
   for (const entry of COPIED_GIT_ENTRIES) {
-    const src = path45.join(commonDir, entry);
+    const src = path44.join(commonDir, entry);
     let exists = true;
     try {
       await import_node_fs22.promises.access(src);
@@ -40358,20 +40517,20 @@ async function buildScrubbedGitProxy(workdir, destDir) {
       exists = false;
     }
     if (!exists) continue;
-    const dest = path45.join(destDir, entry);
+    const dest = path44.join(destDir, entry);
     await import_node_fs22.promises.cp(src, dest, {
       recursive: true,
       filter: (s) => !isUnderRefsRemotes(commonDir, s)
     });
   }
-  await scrubPackedRefsRemotes(path45.join(destDir, "packed-refs"));
-  await import_node_fs22.promises.writeFile(path45.join(destDir, "config"), SCRUBBED_CONFIG, "utf8");
+  await scrubPackedRefsRemotes(path44.join(destDir, "packed-refs"));
+  await import_node_fs22.promises.writeFile(path44.join(destDir, "config"), SCRUBBED_CONFIG, "utf8");
   return destDir;
 }
 function isUnderRefsRemotes(commonDir, srcPath) {
-  const rel = path45.relative(commonDir, srcPath);
+  const rel = path44.relative(commonDir, srcPath);
   if (rel === "" || rel.startsWith("..")) return false;
-  const parts = rel.split(path45.sep);
+  const parts = rel.split(path44.sep);
   return parts[0] === "refs" && parts[1] === "remotes";
 }
 async function scrubPackedRefsRemotes(packedRefsPath) {
@@ -40537,13 +40696,13 @@ var DockerSubstrate = class {
     this.forwarderFactory = deps.forwarderFactory ?? defaultForwarderFactory;
     this.onEgressDenied = deps.onEgressDenied ?? NOOP_EGRESS_HOOK;
     this.image = deps.image ?? DEFAULT_IMAGE;
-    this.sessionRoot = deps.sessionRoot ?? os26.tmpdir();
+    this.sessionRoot = deps.sessionRoot ?? os25.tmpdir();
   }
   async launch(spec) {
     await this.assertDockerAvailable();
     const id = randomId();
-    const sessionDir = path46.join(this.sessionRoot, `codevibe-substrate-${id}`);
-    const udsDir = path46.join(sessionDir, "uds");
+    const sessionDir = path45.join(this.sessionRoot, `codevibe-substrate-${id}`);
+    const udsDir = path45.join(sessionDir, "uds");
     try {
       await import_node_fs23.promises.mkdir(sessionDir, { recursive: true, mode: 448 });
       await import_node_fs23.promises.mkdir(udsDir, { recursive: true, mode: 448 });
@@ -40555,8 +40714,8 @@ var DockerSubstrate = class {
         e
       );
     }
-    const udsPath = path46.join(udsDir, BROKER_SOCK_NAME);
-    const relayScriptPath = path46.join(sessionDir, "relay.js");
+    const udsPath = path45.join(udsDir, BROKER_SOCK_NAME);
+    const relayScriptPath = path45.join(sessionDir, "relay.js");
     try {
       await import_node_fs23.promises.writeFile(relayScriptPath, IN_CONTAINER_RELAY_SOURCE, {
         encoding: "utf8",
@@ -40589,7 +40748,7 @@ var DockerSubstrate = class {
     let gitProxyPath = null;
     let gitProxyIsEmptyFallback = false;
     try {
-      const dest = path46.join(sessionDir, "gitproxy");
+      const dest = path45.join(sessionDir, "gitproxy");
       gitProxyPath = await buildScrubbedGitProxy(spec.workdir, dest);
       if (gitProxyPath === null) {
         gitProxyPath = await this.ensureGitOverlayOrFailClosed(
@@ -40676,16 +40835,16 @@ var DockerSubstrate = class {
    * those "exists" cases must be shadowed.
    */
   async ensureGitOverlayOrFailClosed(workdir, sessionDir, forwarder) {
-    const hasRealGit = await import_node_fs23.promises.stat(path46.join(workdir, ".git")).then(() => true).catch(() => false);
+    const hasRealGit = await import_node_fs23.promises.stat(path45.join(workdir, ".git")).then(() => true).catch(() => false);
     if (!hasRealGit) {
       return null;
     }
     try {
-      const emptyDest = path46.join(sessionDir, "gitproxy");
+      const emptyDest = path45.join(sessionDir, "gitproxy");
       await import_node_fs23.promises.rm(emptyDest, { recursive: true, force: true });
       await import_node_fs23.promises.mkdir(emptyDest, { recursive: true, mode: 448 });
       await import_node_fs23.promises.writeFile(
-        path46.join(emptyDest, "config"),
+        path45.join(emptyDest, "config"),
         EMPTY_SCRUBBED_GIT_CONFIG,
         { encoding: "utf8", mode: 384 }
       );
@@ -40727,8 +40886,8 @@ function randomId() {
 
 // src/substrate-launch/apikey-bootstrap.ts
 var import_node_fs24 = require("node:fs");
-var os27 = __toESM(require("node:os"));
-var path47 = __toESM(require("node:path"));
+var os26 = __toESM(require("node:os"));
+var path46 = __toESM(require("node:path"));
 var HELPER_SCRIPT_NAME = "broker-apikey-helper.sh";
 var TOKEN_FILE_NAME = "broker-token";
 var CLAUDE_SETTINGS_NAME = "settings.json";
@@ -40769,8 +40928,8 @@ function tomlStr(s) {
 }
 function isInsideOrEqual(child, parent) {
   if (child === parent) return true;
-  const rel = path47.relative(parent, child);
-  return rel.length > 0 && !rel.startsWith("..") && !path47.isAbsolute(rel);
+  const rel = path46.relative(parent, child);
+  return rel.length > 0 && !rel.startsWith("..") && !path46.isAbsolute(rel);
 }
 var ApiKeyBootstrap = class _ApiKeyBootstrap {
   constructor(hostDir, sandboxDir, tokenFileHostPath) {
@@ -40784,8 +40943,8 @@ var ApiKeyBootstrap = class _ApiKeyBootstrap {
    * the live {@link ApiKeyBootstrap}.
    */
   static async create(input) {
-    const hostRoot = input.hostRoot ?? os27.tmpdir();
-    const rawHostDir = await import_node_fs24.promises.mkdtemp(path47.join(hostRoot, "codevibe-agent-"));
+    const hostRoot = input.hostRoot ?? os26.tmpdir();
+    const rawHostDir = await import_node_fs24.promises.mkdtemp(path46.join(hostRoot, "codevibe-agent-"));
     await import_node_fs24.promises.chmod(rawHostDir, 448).catch(() => void 0);
     const hostDir = await import_node_fs24.promises.realpath(rawHostDir);
     if (input.workdir !== void 0) {
@@ -40812,27 +40971,27 @@ var ApiKeyBootstrap = class _ApiKeyBootstrap {
         "ApiKeyBootstrap.create: provide `sandboxDir` or `sandboxDirEqualsHostDir`"
       );
     }
-    const tokenInSandbox = path47.posix.join(sandboxDir, TOKEN_FILE_NAME);
-    const helperInSandbox = path47.posix.join(sandboxDir, HELPER_SCRIPT_NAME);
-    const tokenFileHostPath = path47.join(hostDir, TOKEN_FILE_NAME);
+    const tokenInSandbox = path46.posix.join(sandboxDir, TOKEN_FILE_NAME);
+    const helperInSandbox = path46.posix.join(sandboxDir, HELPER_SCRIPT_NAME);
+    const tokenFileHostPath = path46.join(hostDir, TOKEN_FILE_NAME);
     await import_node_fs24.promises.writeFile(tokenFileHostPath, input.initialToken, {
       encoding: "utf8",
       mode: 384
     });
     await import_node_fs24.promises.writeFile(
-      path47.join(hostDir, HELPER_SCRIPT_NAME),
+      path46.join(hostDir, HELPER_SCRIPT_NAME),
       helperScriptSource(tokenInSandbox),
       { encoding: "utf8", mode: 448 }
     );
     if (input.provider === "anthropic") {
       await import_node_fs24.promises.writeFile(
-        path47.join(hostDir, CLAUDE_SETTINGS_NAME),
+        path46.join(hostDir, CLAUDE_SETTINGS_NAME),
         claudeSettings(helperInSandbox),
         { encoding: "utf8", mode: 384 }
       );
     } else {
       await import_node_fs24.promises.writeFile(
-        path47.join(hostDir, CODEX_CONFIG_NAME),
+        path46.join(hostDir, CODEX_CONFIG_NAME),
         codexConfig(input.sandboxBrokerUrl, helperInSandbox),
         { encoding: "utf8", mode: 384 }
       );
@@ -40864,8 +41023,8 @@ var ApiKeyBootstrap = class _ApiKeyBootstrap {
 
 // src/substrate/sandbox-exec.ts
 var import_node_fs25 = require("node:fs");
-var os28 = __toESM(require("node:os"));
-var path48 = __toESM(require("node:path"));
+var os27 = __toESM(require("node:os"));
+var path47 = __toESM(require("node:path"));
 var import_node_path2 = require("node:path");
 var NODE_PREFIXES = ["/opt/homebrew", "/usr/local", "/opt/local"];
 var FILE_KEYCHAIN_DIR_NAME = ".codevibe";
@@ -40892,10 +41051,10 @@ var SYSCTL_READ_ALLOW = [
 ];
 function ancestorDirEntries(dir) {
   const out = [];
-  let cur = path48.dirname(dir);
+  let cur = path47.dirname(dir);
   while (true) {
     out.push(cur);
-    const parent = path48.dirname(cur);
+    const parent = path47.dirname(cur);
     if (parent === cur) break;
     cur = parent;
   }
@@ -40914,7 +41073,7 @@ function nodeReadDirs(execPath) {
   }
   return [...dirs];
 }
-function buildSeatbeltProfile(workdir, execPath = process.execPath, extraReadDirs = [], gitProxyDir = null, homedir21 = os28.homedir(), auditDir = null) {
+function buildSeatbeltProfile(workdir, execPath = process.execPath, extraReadDirs = [], gitProxyDir = null, homedir20 = os27.homedir(), auditDir = null) {
   const esc = (s) => s.replace(/"/g, '\\"');
   const wd = esc(workdir);
   const lines = [
@@ -41040,7 +41199,7 @@ function buildSeatbeltProfile(workdir, execPath = process.execPath, extraReadDir
     `(deny file-read* (subpath "${wd}/.git"))`,
     `(deny file-write* (subpath "${wd}/.git"))`
   );
-  const fileKeychainDir = esc(path48.join(homedir21, FILE_KEYCHAIN_DIR_NAME));
+  const fileKeychainDir = esc(path47.join(homedir20, FILE_KEYCHAIN_DIR_NAME));
   lines.push(
     `(deny file-read* (subpath "${fileKeychainDir}"))`,
     `(deny file-write* (subpath "${fileKeychainDir}"))`
@@ -41065,7 +41224,7 @@ async function resolveOnParentPath(cmd) {
   const parentPath = process.env.PATH ?? "";
   for (const dir of parentPath.split(":")) {
     if (!dir) continue;
-    const candidate = path48.join(dir, cmd);
+    const candidate = path47.join(dir, cmd);
     try {
       await import_node_fs25.promises.access(candidate, import_node_fs25.constants.X_OK);
       return candidate;
@@ -41100,15 +41259,15 @@ var SandboxExecHandle = class {
     }
     const realArgv0 = await import_node_fs25.promises.realpath(resolvedArgv0).catch(() => resolvedArgv0);
     const deniedRoots = [
-      path48.join(os28.homedir(), ".codevibe"),
-      path48.join(this.workdir, ".git"),
+      path47.join(os27.homedir(), ".codevibe"),
+      path47.join(this.workdir, ".git"),
       ...this.auditDir !== null ? [this.auditDir] : []
     ];
     const overlapsDeniedRoot = (d) => deniedRoots.some(
-      (root) => d === root || d.startsWith(root + path48.sep) || root.startsWith(d + path48.sep)
+      (root) => d === root || d.startsWith(root + path47.sep) || root.startsWith(d + path47.sep)
     );
-    const broadRoots = /* @__PURE__ */ new Set(["/", "/Users", "/home", os28.homedir()]);
-    const binDirs = /* @__PURE__ */ new Set([path48.dirname(resolvedArgv0), path48.dirname(realArgv0)]);
+    const broadRoots = /* @__PURE__ */ new Set(["/", "/Users", "/home", os27.homedir()]);
+    const binDirs = /* @__PURE__ */ new Set([path47.dirname(resolvedArgv0), path47.dirname(realArgv0)]);
     for (const d of binDirs) {
       if (overlapsDeniedRoot(d) || broadRoots.has(d)) {
         throw new SubstrateLaunchError(
@@ -41155,7 +41314,7 @@ ${allowLines}
 var SandboxExecSubstrate = class {
   constructor(deps = {}) {
     this.runner = deps.runner ?? new ChildProcessCommandRunner();
-    this.profileRoot = deps.profileRoot ?? os28.tmpdir();
+    this.profileRoot = deps.profileRoot ?? os27.tmpdir();
     this.platform = deps.platform ?? process.platform;
   }
   async launch(spec) {
@@ -41184,10 +41343,10 @@ var SandboxExecSubstrate = class {
     let gitProxyDir = null;
     let gitEnv = {};
     try {
-      const sd = path48.join(this.profileRoot, `codevibe-seatbelt-${id}`);
+      const sd = path47.join(this.profileRoot, `codevibe-seatbelt-${id}`);
       await import_node_fs25.promises.mkdir(sd, { recursive: true, mode: 448 });
       sessionDir = sd;
-      const proxyDest = path48.join(sd, "gitproxy");
+      const proxyDest = path47.join(sd, "gitproxy");
       const builtProxy = await buildScrubbedGitProxy(canonicalWorkdir, proxyDest);
       if (builtProxy !== null) {
         gitProxyDir = await import_node_fs25.promises.realpath(builtProxy).catch(() => builtProxy);
@@ -41225,10 +41384,10 @@ var SandboxExecSubstrate = class {
       process.execPath,
       extraReadDirs,
       gitProxyDir,
-      os28.homedir(),
+      os27.homedir(),
       resolvedAuditDir
     );
-    const profilePath = path48.join(this.profileRoot, `codevibe-seatbelt-${id}.sb`);
+    const profilePath = path47.join(this.profileRoot, `codevibe-seatbelt-${id}.sb`);
     try {
       await import_node_fs25.promises.writeFile(profilePath, profile, { encoding: "utf8", mode: 384 });
     } catch (e) {
@@ -41381,21 +41540,21 @@ var CODEVIBE_DIR = ".codevibe";
 var AUDIT_FILE_NAME = "audit.jsonl";
 function isInsideOrEqual2(child, parent) {
   if (child === parent) return true;
-  const rel = path49.relative(parent, child);
-  return rel.length > 0 && !rel.startsWith("..") && !path49.isAbsolute(rel);
+  const rel = path48.relative(parent, child);
+  return rel.length > 0 && !rel.startsWith("..") && !path48.isAbsolute(rel);
 }
 function deriveAuditPath(workdir) {
-  const parts = workdir.split(path49.sep);
+  const parts = workdir.split(path48.sep);
   for (let i = parts.length - 2; i >= 0; i--) {
     if (parts[i] === CODEVIBE_DIR && parts[i + 1] === STATE_SEGMENT) {
       const swapped = [...parts];
       swapped[i + 1] = AUDIT_SEGMENT;
-      return path49.join(swapped.join(path49.sep), AUDIT_FILE_NAME);
+      return path48.join(swapped.join(path48.sep), AUDIT_FILE_NAME);
     }
   }
-  const parent = path49.dirname(workdir);
-  const base = path49.basename(workdir);
-  return path49.join(parent, ".codevibe-audit", base, AUDIT_FILE_NAME);
+  const parent = path48.dirname(workdir);
+  const base = path48.basename(workdir);
+  return path48.join(parent, ".codevibe-audit", base, AUDIT_FILE_NAME);
 }
 async function assertAuditOutsideWorkdir(auditPath, workdir) {
   let realWorkdir;
@@ -41406,7 +41565,7 @@ async function assertAuditOutsideWorkdir(auditPath, workdir) {
       `CP-7 W3: cannot realpath workdir "${workdir}" \u2014 refusing to launch (audit containment fail-closed)`
     );
   }
-  const auditDir = path49.dirname(auditPath);
+  const auditDir = path48.dirname(auditPath);
   await import_node_fs26.promises.mkdir(auditDir, { recursive: true });
   let realAuditDir;
   try {
@@ -41416,7 +41575,7 @@ async function assertAuditOutsideWorkdir(auditPath, workdir) {
       `CP-7 W3: cannot realpath audit dir "${auditDir}" \u2014 refusing to launch (fail-closed)`
     );
   }
-  const resolvedAuditPath = path49.join(realAuditDir, path49.basename(auditPath));
+  const resolvedAuditPath = path48.join(realAuditDir, path48.basename(auditPath));
   let leafStat;
   try {
     leafStat = await import_node_fs26.promises.lstat(resolvedAuditPath);
@@ -41469,7 +41628,7 @@ async function engageSubstrate(input) {
       derivedAuditPath,
       input.workdir
     );
-    resolvedAuditDir = path49.dirname(resolvedAuditPath);
+    resolvedAuditDir = path48.dirname(resolvedAuditPath);
     auditSink = new Cp7AuditWriter(input.taskId, resolvedAuditPath);
   }
   const upstreamClient = input.upstreamClient ?? new FetchUpstreamClient();
@@ -42015,6 +42174,8 @@ var DEFAULT_TIMEOUT_MS3 = 6e4;
 var MAX_TIMEOUT_MS2 = 5 * 6e4;
 var MAX_RESPONSE_BYTES = 512 * 1024;
 var OLLAMA_MODEL_RE = /^[A-Za-z0-9][A-Za-z0-9_.:/-]{0,127}$/;
+var PULL_STALL_TIMEOUT_MS = 5 * 6e4;
+var MAX_PULL_LINE_BYTES = 1024 * 1024;
 function trimEnvValue2(value) {
   const trimmed = value?.trim();
   return trimmed ? trimmed : null;
@@ -42149,23 +42310,108 @@ function requestOllamaGenerate(config, promptText, opts) {
     }
   });
 }
-async function requestOllamaPull(config) {
-  const body = JSON.stringify({
-    name: config.model,
-    stream: false
+function requestOllamaPull(config, onProgress = () => void 0, options) {
+  const url = new URL("/api/pull", config.host);
+  const body = JSON.stringify({ name: config.model, stream: true });
+  const stallTimeoutMs = typeof options?.stallTimeoutMs === "number" && options.stallTimeoutMs > 0 ? options.stallTimeoutMs : PULL_STALL_TIMEOUT_MS;
+  return new Promise((resolve9, reject) => {
+    let settled = false;
+    let buffer = "";
+    let stallTimer = null;
+    const clearStall = () => {
+      if (stallTimer) {
+        clearTimeout(stallTimer);
+        stallTimer = null;
+      }
+    };
+    const finish = (fn) => {
+      if (settled) return;
+      settled = true;
+      clearStall();
+      fn();
+    };
+    const resetStall = () => {
+      clearStall();
+      stallTimer = setTimeout(() => {
+        req.destroy(
+          new Error(
+            `Ollama pull stalled \u2014 no progress for ${Math.round(stallTimeoutMs / 1e3)}s`
+          )
+        );
+      }, stallTimeoutMs);
+    };
+    const handleLine = (line) => {
+      if (settled) return;
+      const trimmed = line.trim();
+      if (!trimmed) return;
+      let parsed;
+      try {
+        parsed = JSON.parse(trimmed);
+      } catch {
+        return;
+      }
+      if (parsed.error) {
+        finish(() => reject(new Error(`Ollama pull failed: ${parsed.error}`)));
+        return;
+      }
+      const status = typeof parsed.status === "string" ? parsed.status : "";
+      if (status) {
+        onProgress({
+          status,
+          completed: typeof parsed.completed === "number" ? parsed.completed : void 0,
+          total: typeof parsed.total === "number" ? parsed.total : void 0
+        });
+        if (status === "success") {
+          finish(() => resolve9());
+        }
+      }
+    };
+    const req = chooseHttpClient(url).request(
+      url,
+      {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "Content-Length": Buffer.byteLength(body)
+        }
+      },
+      (res) => {
+        const status = res.statusCode ?? 0;
+        if (status !== 200) {
+          res.resume();
+          finish(() => reject(new Error(`Ollama request failed with HTTP ${status}`)));
+          return;
+        }
+        res.on("error", (err) => finish(() => reject(err)));
+        res.on("data", (chunk) => {
+          if (settled) return;
+          resetStall();
+          buffer += chunk.toString("utf8");
+          let newlineIndex = buffer.indexOf("\n");
+          while (newlineIndex >= 0) {
+            const line = buffer.slice(0, newlineIndex);
+            buffer = buffer.slice(newlineIndex + 1);
+            handleLine(line);
+            if (settled) return;
+            newlineIndex = buffer.indexOf("\n");
+          }
+          if (buffer.length > MAX_PULL_LINE_BYTES) {
+            finish(() => reject(new Error("Ollama pull response line exceeded the size limit")));
+            res.destroy();
+          }
+        });
+        res.on("end", () => {
+          if (settled) return;
+          handleLine(buffer);
+          buffer = "";
+          finish(() => resolve9());
+        });
+      }
+    );
+    req.on("error", (err) => finish(() => reject(err)));
+    resetStall();
+    req.end(body);
   });
-  const responseBody = await requestOllamaJson(config, "/api/pull", body);
-  try {
-    const parsed = JSON.parse(responseBody);
-    if (parsed.error) {
-      throw new Error(`Ollama pull failed: ${parsed.error}`);
-    }
-  } catch (err) {
-    if (err.message.startsWith("Ollama pull")) {
-      throw err;
-    }
-    throw new Error(`Ollama pull response was not valid JSON: ${err.message}`);
-  }
 }
 var OllamaGemmaPlannerRunner = class {
   constructor(config) {
@@ -42294,8 +42540,8 @@ var FileSystemLocalModelStore = class {
     const artifactPath = localModelArtifactPath(config);
     if (!artifactPath) return false;
     try {
-      const stat7 = await import_fs3.promises.stat(artifactPath);
-      return stat7.isDirectory() || stat7.isFile();
+      const stat6 = await import_fs3.promises.stat(artifactPath);
+      return stat6.isDirectory() || stat6.isFile();
     } catch {
       return false;
     }
@@ -42402,7 +42648,7 @@ var OllamaProcessPuller = class {
     this.command = command;
     this.spawnPull = spawnPull;
   }
-  pull(model, localOllamaHost) {
+  pull(model, localOllamaHost, _onProgress) {
     return new Promise((resolve9, reject) => {
       const env = { ...process.env };
       if (localOllamaHost) {
@@ -42447,12 +42693,12 @@ function applyPersistedSelection(config, state) {
   };
 }
 var OllamaHttpPuller = class {
-  async pull(model) {
+  async pull(model, _localOllamaHost, onProgress) {
     const config = loadOllamaRuntimeConfigFromEnv(ollamaEnvForModel(model));
     if (!config.ok) {
       throw new Error(config.reason);
     }
-    await requestOllamaPull(config.config);
+    await requestOllamaPull(config.config, onProgress);
   }
 };
 var DefaultOllamaPuller = class {
@@ -42460,16 +42706,16 @@ var DefaultOllamaPuller = class {
     this.httpPuller = httpPuller;
     this.processPuller = processPuller;
   }
-  async pull(model) {
+  async pull(model, localOllamaHost, onProgress) {
     const runtimeConfig = loadOllamaRuntimeConfigFromEnv(ollamaEnvForModel(model));
     if (!runtimeConfig.ok) {
       throw new Error(runtimeConfig.reason);
     }
     try {
-      await this.httpPuller.pull(model);
+      await this.httpPuller.pull(model, localOllamaHost, onProgress);
     } catch (err) {
       if (process.env.CODEVIBE_OLLAMA_INSTALL_FALLBACK_CLI?.trim() === "1") {
-        await this.processPuller.pull(model, runtimeConfig.config.host);
+        await this.processPuller.pull(model, runtimeConfig.config.host, onProgress);
         return;
       }
       throw err;
@@ -42480,13 +42726,13 @@ var OllamaLocalModelInstaller = class {
   constructor(puller = new DefaultOllamaPuller()) {
     this.puller = puller;
   }
-  async install(config) {
+  async install(config, onProgress) {
     const artifactPath = localModelArtifactPath(config);
     const model = config.ollamaModel?.trim();
     if (!artifactPath || !isSafeOllamaModelName(model)) {
       throw new Error("local Gemma Ollama install requires CODEVIBE_LOCAL_MODEL_OLLAMA_MODEL");
     }
-    await this.puller.pull(model);
+    await this.puller.pull(model, void 0, onProgress);
     await import_fs3.promises.mkdir(import_path5.default.dirname(artifactPath), { recursive: true, mode: 448 });
     await import_fs3.promises.writeFile(
       artifactPath,
@@ -42500,7 +42746,7 @@ var HttpsLocalModelInstaller = class {
   constructor(transport = defaultLocalModelDownloadTransport) {
     this.transport = transport;
   }
-  async install(config) {
+  async install(config, _onProgress) {
     const artifactPath = localModelArtifactPath(config);
     const expectedBytes = config.expectedBytes;
     if (!artifactPath || !config.downloadUrl || !config.sha256 || typeof expectedBytes !== "number" || !Number.isSafeInteger(expectedBytes) || expectedBytes <= 0) {
@@ -42546,9 +42792,9 @@ var HttpsLocalModelInstaller = class {
   }
   async tryDigestExistingArtifact(artifactPath) {
     try {
-      const stat7 = await import_fs3.promises.stat(artifactPath);
-      if (!stat7.isFile()) {
-        return { kind: "other", sha256: "", bytes: stat7.size };
+      const stat6 = await import_fs3.promises.stat(artifactPath);
+      if (!stat6.isFile()) {
+        return { kind: "other", sha256: "", bytes: stat6.size };
       }
       return { kind: "file", ...await fileDigest(artifactPath) };
     } catch {
@@ -42561,11 +42807,11 @@ var DefaultLocalModelInstaller = class {
     this.httpsInstaller = new HttpsLocalModelInstaller();
     this.ollamaInstaller = new OllamaLocalModelInstaller();
   }
-  install(config) {
+  install(config, onProgress) {
     if (config.ollamaModel) {
-      return this.ollamaInstaller.install(config);
+      return this.ollamaInstaller.install(config, onProgress);
     }
-    return this.httpsInstaller.install(config);
+    return this.httpsInstaller.install(config, onProgress);
   }
 };
 var defaultLocalModelInstaller = new DefaultLocalModelInstaller();
@@ -42622,6 +42868,22 @@ function renderConfigSummary(config) {
   const bytes = typeof config.expectedBytes === "number" && Number.isFinite(config.expectedBytes) ? `, expected bytes: ${config.expectedBytes}` : "";
   return `artifact: ${id}${ollama}${bytes}, cache: ${config.cacheDir}`;
 }
+function createInstallProgressReporter(config, out) {
+  const label = config.ollamaModel ? ` ${config.ollamaModel}` : "";
+  const toMB = (bytes) => (bytes / (1024 * 1024)).toFixed(0);
+  let sawBytes = false;
+  const onProgress = (p) => {
+    if (typeof p.completed === "number" && typeof p.total === "number" && p.total > 0) {
+      const pct = Math.max(0, Math.min(100, Math.floor(p.completed / p.total * 100)));
+      out(`\rPulling${label}: ${pct}%  (${toMB(p.completed)}/${toMB(p.total)} MB)\x1B[K`);
+      sawBytes = true;
+    }
+  };
+  const finish = () => {
+    if (sawBytes) out("\n");
+  };
+  return { onProgress, finish };
+}
 async function runLocalModelCommand(options) {
   const out = options.stdout ?? ((s) => process.stdout.write(s));
   const err = options.stderr ?? ((s) => process.stderr.write(s));
@@ -42739,7 +43001,9 @@ No download was started.
     );
     return 2;
   }
-  await installer.install(config);
+  const progress = createInstallProgressReporter(config, out);
+  await installer.install(config, progress.onProgress);
+  progress.finish();
   await markLocalModelEnabled(config.artifactId, config.ollamaModel ?? null, stateStore);
   out(`Installed CodeVibe local Gemma artifact ${config.artifactId}.
 `);
@@ -42884,7 +43148,9 @@ function buildStubSession() {
   return {
     sessionId: `cp1a-local-${Date.now()}`,
     userId: "cp1a-local-user",
-    agentType: "CLAUDE" /* CLAUDE */,
+    // The orchestration shell IS CodeVibe 2.0 — stamp its own session CODEVIBE
+    // (not CLAUDE) so it surfaces as "CodeVibe" in the mobile companion.
+    agentType: "CODEVIBE" /* CODEVIBE */,
     projectPath: process.cwd(),
     status: "ACTIVE" /* ACTIVE */,
     createdAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -42991,7 +43257,9 @@ async function resumeOrCreateSession2(appsyncClient, deps) {
     const created = await appsyncClient.createSession({
       sessionId,
       userId,
-      agentType: "CLAUDE" /* CLAUDE */,
+      // The orchestration shell IS CodeVibe 2.0 — stamp its own session CODEVIBE
+      // (not CLAUDE) so it surfaces as "CodeVibe" in the mobile companion.
+      agentType: "CODEVIBE" /* CODEVIBE */,
       projectPath: sessionProjectPath,
       status: "ACTIVE" /* ACTIVE */,
       // E2E encryption fields (mirror session-resume.ts).
@@ -43153,11 +43421,31 @@ function resolveLocalModelBoot(args) {
     const skipped = args.state.choice === "skipped";
     return {
       mode: "companion",
-      notice: `Local Gemma is required for Orchestration Mode in CodeVibe 2.0. ` + (skipped ? "You previously skipped local model setup. " : "No enabled local model was found. ") + "Starting Companion Mode. Run `codevibe model install` with a Pro/Max account to enable local orchestration.\n"
+      notice: `Local Gemma is required for Orchestration Mode in CodeVibe 2.0. ` + (skipped ? "You previously skipped local model setup. " : "No enabled local model was found. ") + "Starting Companion Mode. Run `codevibe model install` with a Pro/Max account to enable local orchestration.\n",
+      // We are past the companion-request and tier < Pro guards above, so this
+      // branch is always Orchestration + Pro/Max. Signal the interactive install
+      // offer; keep `mode: 'companion'` + `notice` as the decline / non-TTY path.
+      promptInstall: args.requestedMode === "orchestration" && (args.entitlement.tier === "PRO" || args.entitlement.tier === "MAX")
     };
   }
   return { mode: "orchestration", notice: null };
 }
+async function promptInstallLocalModel() {
+  const readline3 = require("readline");
+  const rl = readline3.createInterface({ input: process.stdin, output: process.stdout });
+  try {
+    const answer = await new Promise((resolve9) => {
+      rl.question(
+        "Orchestration Mode needs the local model (~7GB), which isn't installed. Install it now? [Y/n]: ",
+        resolve9
+      );
+    });
+    const trimmed = answer.trim().toLowerCase();
+    return trimmed === "" || trimmed.startsWith("y");
+  } finally {
+    rl.close();
+  }
+}
 async function buildLocalGemmaPlannerAdapter(args) {
   const state = args.state;
   const config = applyPersistedSelection(
@@ -43349,14 +43637,57 @@ async function main(argv) {
     });
   }
   const emitter = createShellEventEmitter(appsyncClient);
-  const localModelState = await readLocalModelState();
+  let localModelState = await readLocalModelState();
   const localModelEntitlement = await resolveModelEntitlement(appsyncClient);
-  const localModelBoot = resolveLocalModelBoot({
+  let localModelBoot = resolveLocalModelBoot({
     requestedMode: mode,
     entitlement: localModelEntitlement,
     state: localModelState
   });
-  if (localModelBoot.notice) {
+  if (localModelBoot.promptInstall && process.stdin.isTTY) {
+    const proceed = await promptInstallLocalModel();
+    if (!proceed) {
+      if (localModelBoot.notice) {
+        process.stdout.write(localModelBoot.notice);
+      }
+    } else {
+      let installExit = null;
+      try {
+        installExit = await runModelCli(
+          { command: "install", viaWithLocalModelFlag: false },
+          {
+            appsyncClient,
+            resolveEntitlement: async () => localModelEntitlement
+          }
+        );
+      } catch (err) {
+        logger.warn("[cli] inline local model install threw", {
+          error: err?.message
+        });
+        process.stdout.write(
+          `Local model install failed: ${err?.message ?? "unknown error"}. Starting Companion Mode.
+`
+        );
+      }
+      if (installExit === 0) {
+        localModelState = await readLocalModelState();
+        localModelBoot = resolveLocalModelBoot({
+          requestedMode: mode,
+          entitlement: localModelEntitlement,
+          state: localModelState
+        });
+        if (localModelBoot.mode !== "orchestration") {
+          process.stdout.write(
+            "Local model install did not complete \u2014 starting Companion Mode.\n"
+          );
+        }
+      } else if (installExit !== null) {
+        process.stdout.write(
+          "Local model install did not complete \u2014 starting Companion Mode.\n"
+        );
+      }
+    }
+  } else if (localModelBoot.notice) {
     process.stdout.write(localModelBoot.notice);
   }
   mode = localModelBoot.mode;