@sailorbridge/client 0.2.2 → 0.2.4

package/dist/src/cli.js

@@ -2,10 +2,10 @@
 import { createRequire } from "node:module";
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
-// .dist-releases/1784862378006-1249051/src/cli.js
+// .dist-releases/1784894032002-2676534/src/cli.js
 import { hostname as hostname3 } from "node:os";
 import { writeSync } from "node:fs";
-// .dist-releases/1784862378006-1249051/src/auth/host-pairing.js
+// .dist-releases/1784894032002-2676534/src/auth/host-pairing.js
 import { chmod, mkdir, readFile, writeFile } from "node:fs/promises";
 import { homedir, hostname, platform } from "node:os";
 import path from "node:path";
@@ -220,7 +220,7 @@ function _assertObject(value) {
     throw new Error("host pairing response must be an object");
   return value;
 }
-// .dist-releases/1784862378006-1249051/src/host/repo-tip-reporter.js
+// .dist-releases/1784894032002-2676534/src/host/repo-tip-reporter.js
 import { createHash } from "node:crypto";
 import { existsSync, mkdirSync } from "node:fs";
 import { homedir as homedir2 } from "node:os";
@@ -402,10 +402,10 @@ ${error.message}`));
     proc.on("close", (code) => finish(code ?? 1));
   });
 }
-// .dist-releases/1784862378006-1249051/src/host/request-consumer.js
+// .dist-releases/1784894032002-2676534/src/host/request-consumer.js
 import { hostname as hostname2 } from "node:os";
 
-// .dist-releases/1784862378006-1249051/src/driver/secrets.js
+// .dist-releases/1784894032002-2676534/src/driver/secrets.js
 function redactSensitiveText(text, env = {}, explicitSecrets = []) {
   let redacted = text;
   for (const [key, value] of Object.entries(env)) {
@@ -424,16 +424,16 @@ function isSensitiveEnvKey(key) {
   return /(TOKEN|KEY|SECRET|AUTHORIZATION|PASSWORD)/i.test(key);
 }
 
-// .dist-releases/1784862378006-1249051/src/version.js
-var CLIENT_VERSION = "0.2.2";
-var CLIENT_GIT_SHA = "f943ffe8e731-dirty";
-var CLIENT_BUILD_DIRTY = true;
+// .dist-releases/1784894032002-2676534/src/version.js
+var CLIENT_VERSION = "0.2.4";
+var CLIENT_GIT_SHA = "22d3b8376a97";
+var CLIENT_BUILD_DIRTY = false;
 var CLIENT_VERSION_LABEL = formatClientVersion(CLIENT_VERSION, CLIENT_GIT_SHA);
 function formatClientVersion(version, gitSha) {
   return `${version}+git.${gitSha}`;
 }
 
-// .dist-releases/1784862378006-1249051/src/host/request-consumer.js
+// .dist-releases/1784894032002-2676534/src/host/request-consumer.js
 var MAX_ERROR_LENGTH = 500;
 function defaultHostIdentity(config) {
   const captainId = config.captainId?.trim();
@@ -455,7 +455,8 @@ async function runHostRequestOnce(options) {
     hostId: options.hostId,
     displayName: options.displayName,
     clientVersion: CLIENT_VERSION,
-    clientGitSha: CLIENT_GIT_SHA
+    clientGitSha: CLIENT_GIT_SHA,
+    ...options.updateError === undefined ? {} : { updateError: options.updateError }
   });
   if (options.workspaceInventory) {
     try {
@@ -488,7 +489,7 @@ function limitErrorMessage(error, explicitSecrets) {
   const trimmed = redactSensitiveText(message, process.env, explicitSecrets).trim() || "host request starter failed";
   return trimmed.length <= MAX_ERROR_LENGTH ? trimmed : `${trimmed.slice(0, MAX_ERROR_LENGTH - 3)}...`;
 }
-// .dist-releases/1784862378006-1249051/src/product/start-request.js
+// .dist-releases/1784894032002-2676534/src/product/start-request.js
 async function createAgentStartRequest(options) {
   const apiUrl = _required(options.apiUrl, "product API URL").replace(/\/+$/u, "");
   const accessToken = _required(options.accessToken, "product API bearer token");
@@ -548,7 +549,7 @@ function _string(value, label) {
     throw new Error(`${label} must be a non-empty string`);
   return value;
 }
-// .dist-releases/1784862378006-1249051/src/product/pair.js
+// .dist-releases/1784894032002-2676534/src/product/pair.js
 async function createPair(options) {
   const apiUrl = _required2(options.apiUrl, "product API URL").replace(/\/+$/u, "");
   const accessToken = _required2(options.accessToken, "product API bearer token");
@@ -625,7 +626,7 @@ function _string2(value, label) {
     throw new Error(`${label} must be a non-empty string`);
   return value;
 }
-// .dist-releases/1784862378006-1249051/src/product/worker.js
+// .dist-releases/1784894032002-2676534/src/product/worker.js
 async function createWorker(options) {
   const apiUrl = _required3(options.apiUrl, "product API URL").replace(/\/+$/u, "");
   const accessToken = _required3(options.accessToken, "product API bearer token");
@@ -689,7 +690,7 @@ function _string3(value, label) {
     throw new Error(`${label} must be a non-empty string`);
   return value;
 }
-// .dist-releases/1784862378006-1249051/src/driver/events.js
+// .dist-releases/1784894032002-2676534/src/driver/events.js
 class DriverEventEmitter {
   callbacks = new Map;
   on(type, callback) {
@@ -704,7 +705,7 @@ class DriverEventEmitter {
     }
   }
 }
-// .dist-releases/1784862378006-1249051/src/driver/async-queue.js
+// .dist-releases/1784894032002-2676534/src/driver/async-queue.js
 class AsyncQueue {
   values = [];
   waiters = [];
@@ -743,7 +744,7 @@ class AsyncQueue {
   }
 }
 
-// .dist-releases/1784862378006-1249051/src/driver/types.js
+// .dist-releases/1784894032002-2676534/src/driver/types.js
 class DriverUnsupportedError extends Error {
   constructor(message) {
     super(message);
@@ -758,7 +759,7 @@ class DriverTargetNotReadyError extends Error {
   }
 }
 
-// .dist-releases/1784862378006-1249051/src/driver/sdk-loader.js
+// .dist-releases/1784894032002-2676534/src/driver/sdk-loader.js
 async function loadSdk(loader, packageName, env = {}, installHint = `Install the optional SDK dependency ${packageName} and its peers for this transport.`) {
   try {
     return await loader();
@@ -768,7 +769,7 @@ async function loadSdk(loader, packageName, env = {}, installHint = `Install the
   }
 }
 
-// .dist-releases/1784862378006-1249051/src/driver/claude/driver.js
+// .dist-releases/1784894032002-2676534/src/driver/claude/driver.js
 class ClaudeAgentSdkDriver {
   options;
   capabilities = { structured: true, resume: true, attach: false };
@@ -944,7 +945,7 @@ function asRecord(value) {
 function stringValue(value) {
   return typeof value === "string" ? value : undefined;
 }
-// .dist-releases/1784862378006-1249051/src/driver/codex/driver.js
+// .dist-releases/1784894032002-2676534/src/driver/codex/driver.js
 class CodexSdkDriver {
   options;
   capabilities = { structured: true, resume: true, attach: false };
@@ -1125,7 +1126,7 @@ function asRecord2(value) {
 function stringValue2(value) {
   return typeof value === "string" ? value : undefined;
 }
-// .dist-releases/1784862378006-1249051/src/driver/liveness-heuristics.js
+// .dist-releases/1784894032002-2676534/src/driver/liveness-heuristics.js
 var BUSY_MARKERS = ["Working (", "Waiting for background", "Pasted Content", "tab to queue"];
 var ANSI_PATTERN = /\x1B(?:[@-Z\\-_]|\[[0-?]*[ -/]*[@-~]|\][^\x07]*(?:\x07|\x1B\\)|[PX^_][\s\S]*?\x1B\\)/g;
 function stripAnsi(text) {
@@ -1152,7 +1153,7 @@ function classifyInteractiveOutput(input) {
 function isOutputStable(now, lastOutputAt, idleStableMs) {
   return Boolean(lastOutputAt && now.getTime() - lastOutputAt.getTime() >= idleStableMs);
 }
-// .dist-releases/1784862378006-1249051/src/driver/pty/loader.js
+// .dist-releases/1784894032002-2676534/src/driver/pty/loader.js
 async function loadNodePty(loader = defaultNodePtyLoader) {
   try {
     return await loader();
@@ -1178,7 +1179,7 @@ async function defaultNodePtyLoader() {
   return loaded;
 }
 
-// .dist-releases/1784862378006-1249051/src/driver/pty/driver.js
+// .dist-releases/1784894032002-2676534/src/driver/pty/driver.js
 class PtyDriver {
   options;
   capabilities = { structured: false, resume: false, attach: false };
@@ -1330,12 +1331,12 @@ function tail(text, lines) {
 function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
-// .dist-releases/1784862378006-1249051/src/driver/tmux/driver.js
+// .dist-releases/1784894032002-2676534/src/driver/tmux/driver.js
 import { mkdtemp, rm, writeFile as writeFile2 } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 
-// .dist-releases/1784862378006-1249051/src/driver/tmux/launch.js
+// .dist-releases/1784894032002-2676534/src/driver/tmux/launch.js
 var ENV_KEY_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
 var PANE_BOOTSTRAP_COMMAND = 'tmux set-option -t "$TMUX_PANE" remain-on-exit on >/dev/null 2>&1 || true; tmux wait-for -S "$1"; shift; exec "$@"';
 function buildTmuxNewSessionArgs(input) {
@@ -1358,7 +1359,7 @@ function validateEnv(env) {
   }
 }
 
-// .dist-releases/1784862378006-1249051/src/driver/tmux/paste.js
+// .dist-releases/1784894032002-2676534/src/driver/tmux/paste.js
 function buildDispatchPlan(text, useTyping) {
   return {
     mode: useTyping ? "type-literal" : "paste-buffer",
@@ -1382,7 +1383,7 @@ function arraysEqual(left, right) {
   return left.length === right.length && left.every((item, index) => item === right[index]);
 }
 
-// .dist-releases/1784862378006-1249051/src/driver/tmux/liveness.js
+// .dist-releases/1784894032002-2676534/src/driver/tmux/liveness.js
 var SHELL_COMMANDS = new Set(["", "bash", "zsh", "sh", "fish", "pwsh", "powershell"]);
 function classifyTmuxLiveness(input) {
   if (!input.hasSession) {
@@ -1402,7 +1403,7 @@ function isTmuxProcessAlive(command, runningCommands) {
   return !SHELL_COMMANDS.has(command);
 }
 
-// .dist-releases/1784862378006-1249051/src/driver/tmux/runner.js
+// .dist-releases/1784894032002-2676534/src/driver/tmux/runner.js
 import { spawn as spawn2 } from "node:child_process";
 var DEFAULT_TIMEOUT_MS = 15000;
 
@@ -1527,7 +1528,7 @@ class TmuxClient {
   }
 }
 
-// .dist-releases/1784862378006-1249051/src/driver/tmux/driver.js
+// .dist-releases/1784894032002-2676534/src/driver/tmux/driver.js
 var ATTACHED_STOP_GRACE_MS = 1e4;
 var DEFAULT_STOP_TIMEOUT_MS = 15000;
 var DEFAULT_READY_TIMEOUT_MS = 90000;
@@ -1922,12 +1923,12 @@ function isMissingTmuxSessionError(error) {
 ${error.result.stderr}`.toLowerCase();
   return text.includes("can't find session") || text.includes("cannot find session") || text.includes("no such session") || text.includes("session not found");
 }
-// .dist-releases/1784862378006-1249051/src/relay/client.js
+// .dist-releases/1784894032002-2676534/src/relay/client.js
 import { Buffer as Buffer2 } from "node:buffer";
 import http from "node:http";
 import https from "node:https";
 
-// .dist-releases/1784862378006-1249051/src/relay/errors.js
+// .dist-releases/1784894032002-2676534/src/relay/errors.js
 class RelayError extends Error {
   method;
   path;
@@ -1964,7 +1965,7 @@ class RelayProtocolError extends RelayError {
   }
 }
 
-// .dist-releases/1784862378006-1249051/src/worker/protocol.js
+// .dist-releases/1784894032002-2676534/src/worker/protocol.js
 var DEFAULT_RELAY_URL = DEFAULT_PRODUCT_API_URL;
 var DEFAULT_WORKER = "host";
 var DEFAULT_WORKDIR = "~/sailorbridge-workdir";
@@ -1994,7 +1995,7 @@ function effectiveJobKind(kind, spec) {
   return kind === "stream" || spec.stream === true ? "stream" : kind;
 }
 
-// .dist-releases/1784862378006-1249051/src/relay/client.js
+// .dist-releases/1784894032002-2676534/src/relay/client.js
 var JSON_CONTENT_TYPE = "application/json";
 var MAX_MAILBOX_LIMIT = 16;
 var MAX_WAIT_TIMEOUT_SEC = 120;
@@ -2161,13 +2162,15 @@ class RelayClient {
     }
     return { status: "queued", ids: response.ids, recipients: response.recipients };
   }
-  async postSessionReply(session, text, target = { kind: "captain" }, inReplyToMessageId, tag = "REPLY") {
+  async postSessionReply(session, text, target = { kind: "captain" }, inReplyToMessageId, tag = "REPLY", origin) {
     requireSegment(session, "session");
     const toAgent = target.kind === "captain" ? "captain" : target.agentName;
     requireNonEmpty(toAgent, "reply target");
     requireNonEmpty(tag, "reply tag");
     if (inReplyToMessageId !== undefined)
       requireNonEmpty(inReplyToMessageId, "in_reply_to_message_id");
+    if (origin !== undefined && target.kind !== "captain")
+      throw new Error("origin is only valid for captain replies");
     const response = await this.requestJson("POST", `/api/v1/mailbox/session/${segment(session)}`, {
       tag,
       to_agents: [toAgent],
@@ -2175,13 +2178,18 @@ class RelayClient {
       payload_json: text,
       ...inReplyToMessageId === undefined ? {} : {
         in_reply_to_message_id: inReplyToMessageId
-      }
+      },
+      ...origin === undefined ? {} : { origin }
     });
-    const expectedStatus = target.kind === "captain" ? "recorded" : "queued";
-    if (response.status !== expectedStatus || !isNonEmptyStringArray(response.ids) || !isStringArray(response.recipients)) {
-      throw new RelayProtocolError("POST", `/api/v1/mailbox/session/${segment(session)}`, "invalid session reply response");
+    const validRecipients = isStringArray(response.recipients) && response.recipients.length === 1 && response.recipients[0] === toAgent;
+    if (origin !== undefined && response.status === "skipped") {
+      if (!validRecipients || typeof response.reason !== "string" || !response.reason) {
+        throw new RelayProtocolError("POST", `/api/v1/mailbox/session/${segment(session)}`, "invalid session reply skip response");
+      }
+      return { ids: [], recipients: response.recipients, skippedReason: response.reason };
     }
-    if (response.recipients.length !== 1 || response.recipients[0] !== toAgent) {
+    const expectedStatus = target.kind === "captain" ? "recorded" : "queued";
+    if (response.status !== expectedStatus || !isNonEmptyStringArray(response.ids) || !validRecipients) {
       throw new RelayProtocolError("POST", `/api/v1/mailbox/session/${segment(session)}`, "invalid session reply response");
     }
     return { ids: response.ids, recipients: response.recipients };
@@ -2370,7 +2378,8 @@ class RelayClient {
       host_id: body.hostId,
       display_name: body.displayName,
       ...body.clientVersion === undefined ? {} : { client_version: body.clientVersion },
-      ...body.clientGitSha === undefined ? {} : { client_git_sha: body.clientGitSha }
+      ...body.clientGitSha === undefined ? {} : { client_git_sha: body.clientGitSha },
+      ...body.updateError === undefined ? {} : { update_error: body.updateError }
     });
     return parseClientHostReport(response, "POST", path3);
   }
@@ -2384,7 +2393,8 @@ class RelayClient {
     const response = await this.requestJson("POST", path3, {
       ...body.displayName === undefined ? {} : { display_name: body.displayName },
       ...body.clientVersion === undefined ? {} : { client_version: body.clientVersion },
-      ...body.clientGitSha === undefined ? {} : { client_git_sha: body.clientGitSha }
+      ...body.clientGitSha === undefined ? {} : { client_git_sha: body.clientGitSha },
+      ...body.updateError === undefined ? {} : { update_error: body.updateError }
     });
     return parseClientHostReport(response, "POST", path3);
   }
@@ -3471,6 +3481,8 @@ function optionalClientHostMetadata(host, method, path3) {
   const minimum = optionalClientHostString(host, "minimum_client_version", method, path3);
   if (minimum === null)
     throw new RelayProtocolError(method, path3, "host.minimum_client_version must be a string");
+  const latest = optionalClientHostString(host, "latest_client_version", method, path3);
+  const updateError = optionalClientHostString(host, "update_error", method, path3);
   const compatibility = host.client_compatibility;
   if (compatibility !== undefined && compatibility !== "current" && compatibility !== "outdated" && compatibility !== "unknown" && compatibility !== "development") {
     throw new RelayProtocolError(method, path3, "host.client_compatibility is invalid");
@@ -3479,7 +3491,9 @@ function optionalClientHostMetadata(host, method, path3) {
     ...version === undefined ? {} : { client_version: version },
     ...gitSha === undefined ? {} : { client_git_sha: gitSha },
     ...minimum === undefined ? {} : { minimum_client_version: minimum },
-    ...compatibility === undefined ? {} : { client_compatibility: compatibility }
+    ...latest === undefined ? {} : { latest_client_version: latest },
+    ...compatibility === undefined ? {} : { client_compatibility: compatibility },
+    ...updateError === undefined ? {} : { update_error: updateError }
   };
 }
 function optionalClientHostString(host, field, method, path3) {
@@ -4047,7 +4061,7 @@ function redact(value, token) {
 function bytesToBase64(bytes) {
   return Buffer2.from(bytes).toString("base64");
 }
-// .dist-releases/1784862378006-1249051/src/relay/config.js
+// .dist-releases/1784894032002-2676534/src/relay/config.js
 import { existsSync as existsSync2, readFileSync } from "node:fs";
 import { homedir as homedir3 } from "node:os";
 import path3 from "node:path";
@@ -4065,6 +4079,7 @@ function loadRelayConfig(env = process.env) {
   const captainId = optionalCaptainId(env.SAILORBRIDGE_CAPTAIN_ID) ?? stored?.captain_id;
   const hostId = nonEmpty(env.SAILORBRIDGE_HOST_ID) ?? stored?.host_id;
   const hostDisplayName = nonEmpty(env.SAILORBRIDGE_HOST_DISPLAY_NAME);
+  const keyScope = !envBearerToken && stored ? "host" : undefined;
   return {
     relayUrl,
     bearerToken,
@@ -4072,7 +4087,8 @@ function loadRelayConfig(env = process.env) {
     ...session ? { session } : {},
     ...captainId ? { captainId } : {},
     ...hostId ? { hostId } : {},
-    ...hostDisplayName ? { hostDisplayName } : {}
+    ...hostDisplayName ? { hostDisplayName } : {},
+    ...keyScope ? { keyScope } : {}
   };
 }
 function loadStoredHostCredential(env, options = {}) {
@@ -4122,7 +4138,7 @@ function storedCaptainId(value) {
   }
   return;
 }
-// .dist-releases/1784862378006-1249051/src/supervisor/retirement.js
+// .dist-releases/1784894032002-2676534/src/supervisor/retirement.js
 var DEFAULT_THRESHOLD = 3;
 var DEFAULT_WINDOW_MS = 30000;
 var DEFAULT_COOLDOWN_MS = 1000;
@@ -4197,7 +4213,7 @@ function isAuthoritativeRetirementReason(reason) {
   return reason === "monitor_fetch" || reason === "agent_session_patch";
 }
 
-// .dist-releases/1784862378006-1249051/src/supervisor/wait.js
+// .dist-releases/1784894032002-2676534/src/supervisor/wait.js
 async function waitForWakeableTimeout(ms, setWake, sleep3) {
   if (sleep3) {
     await Promise.race([
@@ -4228,7 +4244,7 @@ async function waitForWakeableTimeout(ms, setWake, sleep3) {
   setWake(null);
 }
 
-// .dist-releases/1784862378006-1249051/src/supervisor/mailbox.js
+// .dist-releases/1784894032002-2676534/src/supervisor/mailbox.js
 var CLEAR_TAG = "CLEAR";
 var REFRESH_TAG = "WORKFLOW-REFRESH";
 var SYNC_TAG = "SYNC";
@@ -4299,7 +4315,9 @@ class MailboxSupervisor {
     let handled = await this.dispatchBatch(controls, true);
     if (this.stopped)
       return handled;
-    const messages = await this.claimOwnedMessages(true, undefined, true, this.limit, [...MAILBOX_CLAIM_EXCLUDED_TAGS]);
+    const preview = await this.claimOwnedMessages(true);
+    handled += await this.dispatchBatch(preview.filter(isControl));
+    const messages = preview.filter((message) => !isControl(message));
     this.restoreDoorbellAttempts(messages);
     this.pruneDoorbellAttempts(messages);
     if (messages.length === 0)
@@ -4409,7 +4427,7 @@ class MailboxSupervisor {
     if (this.stopped && !deliver)
       return 0;
     try {
-      await this.deliverRefreshCue();
+      await this.deliverRefreshCue(refreshNotices(pending));
     } catch (error) {
       await this.recordSurfaceBatch(pending, { status: "failed", error: this.redact(errorMessage2(error)) });
       return 0;
@@ -4421,8 +4439,8 @@ class MailboxSupervisor {
     await this.claimDeliveredControls(messages);
     return pending.length;
   }
-  async deliverRefreshCue() {
-    const text = refreshCue(this.options.cli);
+  async deliverRefreshCue(notices = []) {
+    const text = refreshCue(this.options.cli, notices);
     await this.options.driver.send(text, { verifyText: REFRESH_TAG });
   }
   async handleSyncMessages(messages, deliver = false) {
@@ -4706,7 +4724,7 @@ function formatWorkDoorbell(input, toDisplay) {
     throw new Error("cannot format an empty work doorbell");
   const sender = message.sender_agent_name ?? message.sender_role ?? "unknown";
   const tag = canonicalDoorbellTag(tagOf(message));
-  return `[${sender}->${toDisplay}] ${tag} ${doorbellToken(message.id)} \uD83D\uDCEC ${messages.length} new message(s). Read and claim: sail mailbox claim; complete obligation tags; direct workflows use the returned lease token.`;
+  return `[${sender}->${toDisplay}] ${tag} ${doorbellToken(message.id)} \uD83D\uDCEC ${messages.length} new message(s). Read: sail mailbox claim. Conversational tags: answer with one sail reply — no ack owed. Obligation tags: complete them; their claim output prints the ack line.`;
 }
 function canonicalDoorbellTag(tag) {
   const printable = Array.from(tag, (char) => char >= " " && char <= "~" ? char : " ").join("");
@@ -4719,10 +4737,27 @@ function unsurfaced(messages) {
 function doorbellToken(messageId) {
   return `#${messageId}#`;
 }
-function refreshCue(_cli) {
-  return `${REFRESH_TAG}
+function refreshCue(_cli, notices = []) {
+  return [
+    REFRESH_TAG,
+    ...notices,
+    "Run `sail refresh` now to reload your role and instructions, then continue."
+  ].join(`
 
-Run \`sail refresh\` before handling mailbox work.`;
+`);
+}
+function refreshNotices(messages) {
+  const notices = [];
+  for (const message of messages) {
+    const payload = message.payload_json;
+    if (!payload || typeof payload !== "object" || Array.isArray(payload))
+      continue;
+    const notice = payload.notice;
+    if (typeof notice === "string" && notice.trim() && !notices.includes(notice.trim())) {
+      notices.push(notice.trim());
+    }
+  }
+  return notices;
 }
 function saveContextCue(agentName, checkpointId) {
   return [
@@ -4764,19 +4799,19 @@ function ordinaryDeliveryAttempt(error) {
 function _isMissingModerator(error) {
   return error instanceof RelayHttpError && error.status === 400 && error.body.includes("no agents match");
 }
-// .dist-releases/1784862378006-1249051/src/supervisor/runtime.js
+// .dist-releases/1784894032002-2676534/src/supervisor/runtime.js
 import path9 from "node:path";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 
-// .dist-releases/1784862378006-1249051/src/host/managed-materialization.js
+// .dist-releases/1784894032002-2676534/src/host/managed-materialization.js
 import { createHash as createHash2, randomBytes } from "node:crypto";
 import { constants as fsConstants } from "node:fs";
 import { lstat, mkdir as mkdir3, open, readdir, rename, rm as rm2 } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
 import path5 from "node:path";
 
-// .dist-releases/1784862378006-1249051/src/host/memory-stub.js
+// .dist-releases/1784894032002-2676534/src/host/memory-stub.js
 import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile3 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
 import path4 from "node:path";
@@ -4923,7 +4958,7 @@ function _safePathLabel(value, field) {
   return trimmed;
 }
 
-// .dist-releases/1784862378006-1249051/src/host/managed-materialization.js
+// .dist-releases/1784894032002-2676534/src/host/managed-materialization.js
 var MANIFEST_FILE = ".sailorbridge-managed-manifest.json";
 var BANNER_PREFIX = "# SailorBridge managed file";
 var HASH_RE = /^sha256:[a-f0-9]{64}$/u;
@@ -5449,7 +5484,7 @@ function _expandHome2(value) {
   return value;
 }
 
-// .dist-releases/1784862378006-1249051/src/host/credential-guardian.js
+// .dist-releases/1784894032002-2676534/src/host/credential-guardian.js
 import { lstat as lstat2, readFile as readFile3, rename as rename2, symlink, unlink, writeFile as writeFile4 } from "node:fs/promises";
 import path6 from "node:path";
 var DEFAULT_CREDENTIAL_SWEEP_INTERVAL_MS = 60000;
@@ -5595,7 +5630,7 @@ function _tmpSibling(filePath) {
   return path6.join(path6.dirname(filePath), `.${path6.basename(filePath)}.sb-guardian.${process.pid}.${tmpSequence}.tmp`);
 }
 
-// .dist-releases/1784862378006-1249051/src/supervisor/resolve.js
+// .dist-releases/1784894032002-2676534/src/supervisor/resolve.js
 var DEFAULT_CAPTURE_LINES = 200;
 var MAX_CAPTURE_LINES = 1000;
 
@@ -5801,7 +5836,7 @@ function defaultSleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
 
-// .dist-releases/1784862378006-1249051/src/supervisor/transcript-backfill.js
+// .dist-releases/1784894032002-2676534/src/supervisor/transcript-backfill.js
 import { createHash as createHash3 } from "node:crypto";
 import {
   closeSync,
@@ -6220,6 +6255,17 @@ class TranscriptBackfillWorker {
       store.rememberPostedEvent(source, event.eventId, item.nextOffset, fingerprint);
       this.clearPendingIfUnchanged(pendingMessageId);
       this.resetRetry();
+      if (result.skippedReason !== undefined) {
+        this.log("transcript_backfill_relay_skipped", {
+          agent: this.options.agentName,
+          engine: this.options.engine,
+          source,
+          offset: item.startOffset,
+          eventId: event.eventId,
+          reason: result.skippedReason
+        });
+        break;
+      }
       count += 1;
       this.log("transcript_backfill_posted", {
         agent: this.options.agentName,
@@ -6248,7 +6294,8 @@ class TranscriptBackfillWorker {
       throw new Error("transcript backfill requires session");
     const target = this.pending?.replyTarget ?? { kind: "captain" };
     const inReplyToMessageId = target.kind === "captain" ? this.pending?.messageId : undefined;
-    return this.options.relay.postSessionReply(this.options.session, event.text, target, inReplyToMessageId);
+    const origin = target.kind === "captain" ? "transcript-backfill" : undefined;
+    return this.options.relay.postSessionReply(this.options.session, event.text, target, inReplyToMessageId, "REPLY", origin);
   }
   clearPendingIfUnchanged(pendingMessageId) {
     if (this.pending && this.pending.messageId === pendingMessageId)
@@ -6458,7 +6505,7 @@ function errorMessage4(error) {
   return error instanceof Error ? error.message : String(error);
 }
 
-// .dist-releases/1784862378006-1249051/src/supervisor/usage-collector.js
+// .dist-releases/1784894032002-2676534/src/supervisor/usage-collector.js
 import { statSync as statSync2 } from "node:fs";
 import path8 from "node:path";
 var SUPPORTED_USAGE_ENGINES = new Set(["claude", "codex"]);
@@ -6867,7 +6914,7 @@ function sourceUnreadableReason(source) {
   }
 }
 
-// .dist-releases/1784862378006-1249051/src/supervisor/runtime.js
+// .dist-releases/1784894032002-2676534/src/supervisor/runtime.js
 var RESOLVE_CAPTURE_LINES = 200;
 var SHORT_LIVED_EXIT_MS = 5000;
 var STARTUP_OBSERVATION_MS = 1e4;
@@ -7537,7 +7584,7 @@ function errorMessage5(error) {
 function formatRestartCommand(command) {
   return command.map((part) => /^[A-Za-z0-9_./:=@%+-]+$/.test(part) ? part : `'${part.replaceAll("'", "'\\''")}'`).join(" ");
 }
-// .dist-releases/1784862378006-1249051/src/supervisor/transport.js
+// .dist-releases/1784894032002-2676534/src/supervisor/transport.js
 var SUPPORTED_PHASE1_CLI_KINDS = ["claude", "codex"];
 var PHASE1_ENGINE_GATE_MESSAGE = "Only claude and codex engines are available in this release; opencode and custom CLI engines will open in the next release.";
 var PHASE1_TRANSPORT_GATE_MESSAGE = "Only tmux transport is available in this release; sdk, headless, and pty transports will open in the next release.";
@@ -7745,7 +7792,7 @@ function hasCodexSafetyDriverOptions(options) {
   return options?.codex?.sandboxMode !== undefined || options?.codex?.approvalPolicy !== undefined || options?.codex?.yolo !== undefined;
 }
 
-// .dist-releases/1784862378006-1249051/src/supervisor/cli-options.js
+// .dist-releases/1784894032002-2676534/src/supervisor/cli-options.js
 function parseSuperviseArgs(argv) {
   const split = argv.indexOf("--");
   const flagArgs = split >= 0 ? argv.slice(0, split) : argv;
@@ -7897,7 +7944,7 @@ function optionalBoolean(value, label) {
     return false;
   throw new Error(`${label} must be true or false`);
 }
-// .dist-releases/1784862378006-1249051/src/supervisor/tmux-availability.js
+// .dist-releases/1784894032002-2676534/src/supervisor/tmux-availability.js
 import { spawn as spawn3 } from "node:child_process";
 import { createInterface } from "node:readline";
 function isTmuxAvailable(spawnFn = spawn3) {
@@ -8014,7 +8061,7 @@ function _tmuxMissingMessage(platform2) {
   const how = platform2 === "darwin" ? "brew install tmux" : platform2 === "linux" ? "install tmux via your package manager (e.g. sudo apt-get install -y tmux)" : "install tmux";
   return `tmux is required in this release but was not found. Install tmux (${how}) and re-run.`;
 }
-// .dist-releases/1784862378006-1249051/src/output-format.js
+// .dist-releases/1784894032002-2676534/src/output-format.js
 function parseOutputArgs(argv) {
   const separator = argv.indexOf("--");
   const localArgv = separator < 0 ? argv : argv.slice(0, separator);
@@ -8107,7 +8154,7 @@ ${normalized.split(`
 `)}`;
 }
 
-// .dist-releases/1784862378006-1249051/src/plain-output-fields.js
+// .dist-releases/1784894032002-2676534/src/plain-output-fields.js
 var PREVIEW_LIMIT = 20;
 var UNSAFE_DISPLAY_CODE_POINT = /[\u007f-\u009f\u2028-\u202e\u2066-\u2069]/gu;
 function renderTaskPlain(command, value) {
@@ -8515,7 +8562,7 @@ function _omissionLine(total) {
   return total > PREVIEW_LIMIT ? `Omitted ${total - PREVIEW_LIMIT}; rerun with --format json for the complete response.` : undefined;
 }
 
-// .dist-releases/1784862378006-1249051/src/host/cli.js
+// .dist-releases/1784894032002-2676534/src/host/cli.js
 var HOST_RELAY_SUBCOMMANDS = new Set(["consume", "heartbeat", "list", "register"]);
 async function runHostCommandFromCli(client, argv, config, io) {
   const sub = argv[0] ?? "list";
@@ -8753,7 +8800,7 @@ function optionalDisplayName(value) {
   const trimmed = value?.trim();
   return trimmed || undefined;
 }
-// .dist-releases/1784862378006-1249051/src/host/service.js
+// .dist-releases/1784894032002-2676534/src/host/service.js
 import { execFile as execFileCb } from "node:child_process";
 import { createHash as createHash4 } from "node:crypto";
 import { constants as fsConstants2 } from "node:fs";
@@ -8779,6 +8826,18 @@ async function installHostService(options, deps = {}) {
     return installSystemd(flags, runtime, paths, command);
   return installLaunchd(flags, runtime, paths, command);
 }
+async function restartRunningHostService(deps = {}) {
+  const runtime = serviceRuntime(deps);
+  if (runtime.platform !== "linux" && runtime.platform !== "darwin") {
+    return { restarted: false, reason: "unsupported-platform" };
+  }
+  const paths = servicePaths(runtime, { dryRun: false });
+  if (!await _isManagedHostService(runtime, paths))
+    return { restarted: false, reason: "not-managed" };
+  if (runtime.platform === "linux")
+    return _restartRunningSystemd(runtime, paths);
+  return _restartRunningLaunchd(runtime, paths);
+}
 var UNSUPPORTED_SERVICE_PLATFORM = "host service supports Linux systemd and macOS launchd only";
 async function runHostServiceCommandFromCli(argv, io, deps = {}) {
   const action = argv[0] ?? "status";
@@ -8968,6 +9027,32 @@ async function statusLaunchd(runtime, paths, io) {
   const installed = await fileExists(runtime, paths.file);
   _writeServiceOutput(io, { status: active ? "active" : "inactive", installed, platform: "launchd", file: paths.file, linger: "not-applicable" });
 }
+async function _restartRunningSystemd(runtime, paths) {
+  const active = await optionalExec(runtime, "systemctl", ["--user", "is-active", paths.serviceName]);
+  if (active?.stdout.trim() !== "active")
+    return { restarted: false, reason: "not-running" };
+  await runtime.execFile("systemctl", ["--user", "restart", paths.serviceName]);
+  return { restarted: true, platform: "systemd", target: paths.serviceName };
+}
+async function _restartRunningLaunchd(runtime, paths) {
+  const target = launchdServiceTarget(runtime.uid, paths.launchdLabel);
+  if (!await optionalExec(runtime, "launchctl", ["print", target])) {
+    return { restarted: false, reason: "not-running" };
+  }
+  await runtime.execFile("launchctl", ["kickstart", "-k", target]);
+  return { restarted: true, platform: "launchd", target: paths.launchdLabel };
+}
+async function _isManagedHostService(runtime, paths) {
+  try {
+    const definition = await _readDefinition(runtime, paths.file);
+    if (!definition)
+      return false;
+    const manager = runtime.platform === "linux" ? "systemd" : "launchd";
+    return _isLegacyHostDefinition(definition, manager);
+  } catch {
+    return false;
+  }
+}
 function serviceRuntime(deps) {
   const info = userInfo();
   return {
@@ -9105,8 +9190,8 @@ function _isLegacyHostDefinition(text, manager) {
 function _isSailorBridgeEntry(value) {
   if (!value)
     return false;
-  const segments = value.replace(/\\/gu, "/").split("/").filter(Boolean);
-  return segments.at(-1) === "cli.js" && segments.at(-2) === "dist" && segments.at(-3) === "client" && segments.at(-4) === "@sailorbridge";
+  const normalized = `/${value.replace(/\\/gu, "/").split("/").filter(Boolean).join("/")}`;
+  return normalized.endsWith("/@sailorbridge/client/dist/cli.js") || normalized.endsWith("/@sailorbridge/client/dist/src/cli.js");
 }
 function _systemdExecStart(text) {
   const values = [...text.matchAll(/^\s*ExecStart\s*=(.*)$/gmu)].map((match) => match[1]?.trim() ?? "").filter(Boolean);
@@ -9236,7 +9321,7 @@ function writeServiceLog(io, event, fields) {
   io.stderr.write(`${JSON.stringify({ ts: new Date().toISOString(), event, ...fields ?? {} })}
 `);
 }
-// .dist-releases/1784862378006-1249051/src/host/git-remote.js
+// .dist-releases/1784894032002-2676534/src/host/git-remote.js
 var GIT_SECRET_PATH_MARKERS = [
   "token",
   "credential",
@@ -9328,7 +9413,7 @@ function looksLikeCredential(segment2) {
   return value.length >= 32 && /^[A-Za-z0-9_-]+$/u.test(value);
 }
 
-// .dist-releases/1784862378006-1249051/src/host/start-spec.js
+// .dist-releases/1784894032002-2676534/src/host/start-spec.js
 var TRANSPORTS = ["auto", "sdk", "pty", "tmux", "headless"];
 var SUPPORTED_PHASE1_ENGINES = ["claude", "codex"];
 var ENGINE_PATTERN = /^[a-z][a-z0-9._-]{0,63}$/u;
@@ -9578,7 +9663,7 @@ function _trimmed(value, label) {
     throw new Error(`${label} must not be empty`);
   return trimmed;
 }
-// .dist-releases/1784862378006-1249051/src/host/workspace.js
+// .dist-releases/1784894032002-2676534/src/host/workspace.js
 import { spawn as spawn4 } from "node:child_process";
 import { existsSync as existsSync4 } from "node:fs";
 import { mkdir as mkdir5, readdir as readdir2, rename as rename4, stat } from "node:fs/promises";
@@ -9809,7 +9894,7 @@ function _safeSegment(value) {
     throw new Error("workspace path segment is empty after sanitizing");
   return segment2;
 }
-// .dist-releases/1784862378006-1249051/src/host/workspace-inventory.js
+// .dist-releases/1784894032002-2676534/src/host/workspace-inventory.js
 import { access as access2 } from "node:fs/promises";
 import { constants } from "node:fs";
 import { execFile as execFile2 } from "node:child_process";
@@ -9901,25 +9986,179 @@ async function canAccess(path12, mode, deps) {
     return false;
   }
 }
-// .dist-releases/1784862378006-1249051/src/host/host-config.js
-import { chmod as chmod3, mkdir as mkdir6, readFile as readFile5, writeFile as writeFile6 } from "node:fs/promises";
-import { homedir as homedir10 } from "node:os";
+// .dist-releases/1784894032002-2676534/src/upgrade.js
+import { spawn as spawn5 } from "node:child_process";
+import { execFile as execFileCb2 } from "node:child_process";
+import { readFile as readFile5 } from "node:fs/promises";
 import path12 from "node:path";
+import { promisify as promisify4 } from "node:util";
+var execFileDefault2 = promisify4(execFileCb2);
+var CLIENT_PACKAGE = "@sailorbridge/client";
+var LATEST_PACKAGE = `${CLIENT_PACKAGE}@latest`;
+async function runUpgradeFromCli(argv, io, deps = {}) {
+  if (argv.length)
+    throw new Error(`upgrade takes no arguments: ${argv.join(" ")}`);
+  const before = deps.currentVersion ?? CLIENT_VERSION;
+  await (deps.installLatest ?? installLatestClientPackage)();
+  const after = await (deps.readInstalledVersion ?? readInstalledClientVersion)();
+  if (before === after) {
+    io.stdout.write(`SailorBridge client is already up to date (${after}).
+`);
+    return;
+  }
+  const service = await (deps.restartHostService ?? restartRunningHostService)();
+  _writeUpgradeResult(io.stdout, before, after, service);
+}
+function installLatestClientPackage() {
+  return new Promise((resolve2, reject) => {
+    const child = spawn5("npm", ["i", "-g", LATEST_PACKAGE], { stdio: "inherit" });
+    child.once("error", reject);
+    child.once("close", (code, signal) => {
+      if (code === 0)
+        resolve2();
+      else
+        reject(new Error(`npm i -g ${LATEST_PACKAGE} failed (${signal ?? `exit ${code ?? "unknown"}`})`));
+    });
+  });
+}
+async function readInstalledClientVersion() {
+  const { stdout } = await execFileDefault2("npm", ["root", "-g"]);
+  const root = String(stdout).trim();
+  if (!root)
+    throw new Error("npm root -g returned an empty path after upgrade");
+  const packageJson = path12.join(root, "@sailorbridge", "client", "package.json");
+  const parsed = JSON.parse(await readFile5(packageJson, "utf8"));
+  const version = typeof parsed === "object" && parsed !== null ? Reflect.get(parsed, "version") : undefined;
+  if (typeof version !== "string" || !version.trim()) {
+    throw new Error(`${packageJson} has no valid version after upgrade`);
+  }
+  return version.trim();
+}
+function _writeUpgradeResult(output, before, after, service) {
+  if (service.restarted) {
+    output.write(`Updated SailorBridge client from ${before} to ${after} and restarted ${service.target} (${service.platform}).
+`);
+    return;
+  }
+  output.write(`Updated SailorBridge client from ${before} to ${after}. No running SailorBridge-managed host service was found; stop and rerun 'sailorbridge host run' to load ${after}.
+`);
+}
+
+// .dist-releases/1784894032002-2676534/src/host/auto-update.js
+var AUTO_UPDATE_HARD_DEADLINE_MS = 24 * 60 * 60 * 1000;
+var AUTO_UPDATE_ATTEMPT_COOLDOWN_MS = 60 * 1000;
+var MAX_UPDATE_ERROR_LENGTH = 500;
+function createAutoUpdater(options) {
+  const logger = options.logger ?? (() => {});
+  const deps = options.deps ?? {};
+  const now = deps.now ?? (() => Date.now());
+  const currentVersion = deps.currentVersion ?? CLIENT_VERSION;
+  const installLatest = deps.installLatest ?? installLatestClientPackage;
+  const readInstalledVersion = deps.readInstalledVersion ?? readInstalledClientVersion;
+  const restartHostService = deps.restartHostService ?? restartRunningHostService;
+  let pendingSince;
+  let lastAttemptAt;
+  let updateError;
+  let installedVersion;
+  const _attempt = async (reason, target) => {
+    if (lastAttemptAt !== undefined && now() - lastAttemptAt < AUTO_UPDATE_ATTEMPT_COOLDOWN_MS)
+      return;
+    lastAttemptAt = now();
+    logger("host_auto_update_start", { reason, target, current: currentVersion });
+    try {
+      await installLatest();
+      const after = await readInstalledVersion();
+      updateError = undefined;
+      installedVersion = after;
+      if (after === currentVersion) {
+        logger("host_auto_update_noop", { reason, target, installed: after });
+        return;
+      }
+      const report = await restartHostService();
+      if (report.restarted) {
+        logger("host_auto_update_restarting", { from: currentVersion, to: after, platform: report.platform, target: report.target });
+      } else {
+        logger("host_auto_update_installed_pending_restart", { from: currentVersion, to: after, reason: report.reason });
+      }
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      updateError = message.length <= MAX_UPDATE_ERROR_LENGTH ? message : `${message.slice(0, MAX_UPDATE_ERROR_LENGTH - 3)}...`;
+      logger("host_auto_update_error", { reason, target, error: updateError });
+    }
+  };
+  return {
+    async onHostReport(host) {
+      if (!options.enabled)
+        return;
+      const latest = host.latest_client_version;
+      if (!latest || compareReleaseSemver(latest, currentVersion) !== 1) {
+        pendingSince = undefined;
+        return;
+      }
+      const installedCmp = installedVersion === undefined ? null : compareReleaseSemver(installedVersion, latest);
+      if (installedCmp === 0 || installedCmp === 1)
+        return;
+      if (pendingSince === undefined) {
+        pendingSince = now();
+        logger("host_auto_update_pending", { latest, current: currentVersion });
+      }
+      const forced = now() - pendingSince >= AUTO_UPDATE_HARD_DEADLINE_MS;
+      if (options.isActive() && !forced)
+        return;
+      if (options.isMidWork())
+        return;
+      await _attempt(forced ? "deadline-forced" : "scheduled", latest);
+    },
+    async onUpgradeRequired(detail) {
+      if (!options.enabled) {
+        logger("host_auto_update_disabled_upgrade_required", { detail });
+        return;
+      }
+      if (options.isMidWork())
+        return;
+      await _attempt("relay-rejected", null);
+    },
+    pendingUpdateError() {
+      return updateError;
+    }
+  };
+}
+function compareReleaseSemver(a, b) {
+  const left = _releaseTuple(a);
+  const right = _releaseTuple(b);
+  if (left === null || right === null)
+    return null;
+  for (let i = 0;i < 3; i += 1) {
+    if (left[i] !== right[i])
+      return left[i] < right[i] ? -1 : 1;
+  }
+  return 0;
+}
+function _releaseTuple(value) {
+  const match = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/.exec(value);
+  if (!match)
+    return null;
+  return [Number(match[1]), Number(match[2]), Number(match[3])];
+}
+// .dist-releases/1784894032002-2676534/src/host/host-config.js
+import { chmod as chmod3, mkdir as mkdir6, readFile as readFile6, writeFile as writeFile6 } from "node:fs/promises";
+import { homedir as homedir10 } from "node:os";
+import path13 from "node:path";
 var HOST_CONFIG_KIND = "sailorbridge-host-config";
 function defaultHostConfigPath() {
-  return path12.join(homedir10(), ".sailorbridge", "host-config.json");
+  return path13.join(homedir10(), ".sailorbridge", "host-config.json");
 }
 function normalizeWorkspacePath(entry) {
   const trimmed = entry.trim();
   if (!trimmed)
     throw new Error("workspace path must not be empty");
   const expanded = trimmed === "~" ? homedir10() : trimmed.startsWith("~/") ? `${homedir10()}${trimmed.slice(1)}` : trimmed;
-  return path12.resolve(expanded);
+  return path13.resolve(expanded);
 }
 async function loadHostConfig(configPath = defaultHostConfigPath()) {
   let text;
   try {
-    text = await readFile5(configPath, "utf8");
+    text = await readFile6(configPath, "utf8");
   } catch (error) {
     if (error.code === "ENOENT")
       return { kind: HOST_CONFIG_KIND, workspaces: [] };
@@ -9928,8 +10167,8 @@ async function loadHostConfig(configPath = defaultHostConfigPath()) {
   return _parseHostConfig(text, configPath);
 }
 async function saveHostConfig(configPath, config) {
-  await mkdir6(path12.dirname(configPath), { recursive: true, mode: 448 });
-  await chmod3(path12.dirname(configPath), 448);
+  await mkdir6(path13.dirname(configPath), { recursive: true, mode: 448 });
+  await chmod3(path13.dirname(configPath), 448);
   await writeFile6(configPath, `${JSON.stringify(config, null, 2)}
 `, { mode: 384 });
   await chmod3(configPath, 384);
@@ -9939,7 +10178,7 @@ async function addHostWorkspace(configPath, workspacePath) {
   const config = await loadHostConfig(configPath);
   if (config.workspaces.includes(normalized))
     return { config, path: normalized, added: false };
-  const next = { kind: HOST_CONFIG_KIND, workspaces: [...config.workspaces, normalized] };
+  const next = { ...config, workspaces: [...config.workspaces, normalized] };
   await saveHostConfig(configPath, next);
   return { config: next, path: normalized, added: true };
 }
@@ -9960,7 +10199,7 @@ async function removeHostWorkspace(configPath, workspacePath) {
   const config = await loadHostConfig(configPath);
   if (!config.workspaces.includes(normalized))
     return { config, path: normalized, removed: false };
-  const next = { kind: HOST_CONFIG_KIND, workspaces: config.workspaces.filter((entry) => entry !== normalized) };
+  const next = { ...config, workspaces: config.workspaces.filter((entry) => entry !== normalized) };
   await saveHostConfig(configPath, next);
   return { config: next, path: normalized, removed: true };
 }
@@ -9984,9 +10223,16 @@ function _parseHostConfig(text, configPath) {
       throw new Error(`host config workspaces[${index}] must be a non-empty string`);
     return value.trim();
   });
-  return { kind: HOST_CONFIG_KIND, workspaces };
+  if (record.auto_update !== undefined && typeof record.auto_update !== "boolean") {
+    throw new Error(`host config at ${configPath} auto_update must be a boolean`);
+  }
+  return {
+    kind: HOST_CONFIG_KIND,
+    workspaces,
+    ...record.auto_update === undefined ? {} : { auto_update: record.auto_update }
+  };
 }
-// .dist-releases/1784862378006-1249051/src/host/host-workspace-cli.js
+// .dist-releases/1784894032002-2676534/src/host/host-workspace-cli.js
 async function runHostWorkspaceCommandFromCli(argv, io, deps = {}) {
   const configPath = deps.configPath ?? defaultHostConfigPath();
   const sub = argv[0] ?? "list";
@@ -10030,7 +10276,7 @@ function _renderAddPlain(result) {
   return result.note ? `${status} ${result.path}
 ${result.note}` : `${status} ${result.path}`;
 }
-// .dist-releases/1784862378006-1249051/src/host/agent-env.js
+// .dist-releases/1784894032002-2676534/src/host/agent-env.js
 var RUNTIME_NATIVE_HOME_ENV = new Set(["CLAUDE_CONFIG_DIR", "CODEX_HOME"]);
 function buildAgentEnv(options) {
   const env = {};
@@ -10059,25 +10305,25 @@ function buildAgentEnv(options) {
   }
   return env;
 }
-// .dist-releases/1784862378006-1249051/src/host/runtime-env.js
-import path16 from "node:path";
+// .dist-releases/1784894032002-2676534/src/host/runtime-env.js
+import path17 from "node:path";
 
-// .dist-releases/1784862378006-1249051/src/host/agent-defaults.js
-import { chmod as chmod4, mkdir as mkdir7, readFile as readFile7, stat as stat2, writeFile as writeFile7 } from "node:fs/promises";
+// .dist-releases/1784894032002-2676534/src/host/agent-defaults.js
+import { chmod as chmod4, mkdir as mkdir7, readFile as readFile8, stat as stat2, writeFile as writeFile7 } from "node:fs/promises";
 import { homedir as homedir11 } from "node:os";
-import path14 from "node:path";
+import path15 from "node:path";
 
-// .dist-releases/1784862378006-1249051/src/host/claude-settings.js
-import { readFile as readFile6 } from "node:fs/promises";
-import path13 from "node:path";
+// .dist-releases/1784894032002-2676534/src/host/claude-settings.js
+import { readFile as readFile7 } from "node:fs/promises";
+import path14 from "node:path";
 async function readHostClaudeSettings(claudeConfigDir) {
-  const settings = await _readSettingsObject(path13.join(claudeConfigDir, "settings.json"));
+  const settings = await _readSettingsObject(path14.join(claudeConfigDir, "settings.json"));
   return { env: _stringValues(settings.env), apiKeyHelper: _nonEmptyString(settings.apiKeyHelper) };
 }
 async function _readSettingsObject(filePath) {
   let text;
   try {
-    text = await readFile6(filePath, "utf8");
+    text = await readFile7(filePath, "utf8");
   } catch (error) {
     if (error.code === "ENOENT")
       return {};
@@ -10108,7 +10354,7 @@ function _nonEmptyString(value) {
   return typeof value === "string" && value.trim() ? value : null;
 }
 
-// .dist-releases/1784862378006-1249051/src/host/agent-defaults.js
+// .dist-releases/1784894032002-2676534/src/host/agent-defaults.js
 var CODEX_BLOCK_BEGIN = "# sailorbridge-terse-defaults:begin";
 var CODEX_BLOCK_END = "# sailorbridge-terse-defaults:end";
 var CODEX_MODEL_BLOCK_BEGIN = "# sailorbridge-host-model-settings:begin";
@@ -10760,23 +11006,23 @@ function _warnStatusLine(message) {
 `);
 }
 function resolveClaudeStatusLineCommand(runtime = { execPath: process.execPath, argv1: process.argv[1] }) {
-  const name = path14.basename(runtime.execPath);
-  const prefix = name === "node" || name === "bun" ? [path14.resolve(runtime.execPath), _requireEntry(runtime.argv1)] : [path14.resolve(runtime.execPath)];
+  const name = path15.basename(runtime.execPath);
+  const prefix = name === "node" || name === "bun" ? [path15.resolve(runtime.execPath), _requireEntry(runtime.argv1)] : [path15.resolve(runtime.execPath)];
   return [...prefix.map(_shellSingleQuote), "host", "statusline"].join(" ");
 }
 function _requireEntry(argv1) {
   const entry = argv1?.trim();
   if (!entry)
     throw new Error("cannot resolve claude statusline command: client entry point is unknown");
-  return path14.resolve(entry);
+  return path15.resolve(entry);
 }
 async function _materializeClaudeDefaults(homeDir, workspaceDir, statusLineCommand, warn = _warnStatusLine, sourceHomeDir) {
-  const settingsPath = path14.join(homeDir, "settings.json");
-  const stylePath = path14.join(homeDir, "output-styles", "sailorbridge-terse.md");
-  const hooksDir = path14.join(homeDir, "hooks");
-  const hygienePath = path14.join(hooksDir, "tool-output-hygiene.py");
-  const refsPath = path14.join(hooksDir, "stale-refs-guard.py");
-  await mkdir7(path14.dirname(stylePath), { recursive: true });
+  const settingsPath = path15.join(homeDir, "settings.json");
+  const stylePath = path15.join(homeDir, "output-styles", "sailorbridge-terse.md");
+  const hooksDir = path15.join(homeDir, "hooks");
+  const hygienePath = path15.join(hooksDir, "tool-output-hygiene.py");
+  const refsPath = path15.join(hooksDir, "stale-refs-guard.py");
+  await mkdir7(path15.dirname(stylePath), { recursive: true });
   await _writeManagedFile(stylePath, CLAUDE_TERSE_STYLE, false);
   await mkdir7(hooksDir, { recursive: true });
   await _writeManagedFile(hygienePath, TOOL_OUTPUT_HYGIENE, true);
@@ -10791,7 +11037,7 @@ async function _materializeClaudeDefaults(homeDir, workspaceDir, statusLineComma
     { matcher: "Bash", command: `python3 ${_shellSingleQuote(refsPath)}` }
   ]);
   _ensureClaudeStatusLine(settings, statusLineCommand ?? resolveClaudeStatusLineCommand(), warn);
-  await mkdir7(path14.dirname(settingsPath), { recursive: true });
+  await mkdir7(path15.dirname(settingsPath), { recursive: true });
   await writeFile7(settingsPath, JSON.stringify(settings, null, 2) + `
 `, { mode: 384 });
   if (workspaceDir)
@@ -10806,10 +11052,10 @@ async function _mergeHostClaudeEnv(settings, sourceHomeDir) {
   settings.env = { ..._jsonObject(settings.env, "Claude settings env"), ...hostEnv };
 }
 async function _trustClaudeWorkspace(homeDir, workspaceDir) {
-  const configPath = path14.join(homeDir, ".claude.json");
+  const configPath = path15.join(homeDir, ".claude.json");
   const config = await _readJsonObject(configPath);
   const projects = _jsonObject(config.projects, "Claude config projects");
-  const projectPath = path14.resolve(_expandHome3(workspaceDir));
+  const projectPath = path15.resolve(_expandHome3(workspaceDir));
   for (const trustedPath of await _claudeTrustRoots(projectPath)) {
     const project = _jsonObject(projects[trustedPath], `Claude config project ${trustedPath}`);
     project.hasTrustDialogAccepted = true;
@@ -10817,12 +11063,12 @@ async function _trustClaudeWorkspace(homeDir, workspaceDir) {
   }
   config.projects = projects;
   config.hasCompletedOnboarding = true;
-  await mkdir7(path14.dirname(configPath), { recursive: true });
+  await mkdir7(path15.dirname(configPath), { recursive: true });
   await writeFile7(configPath, JSON.stringify(config, null, 2) + `
 `, { mode: 384 });
 }
 async function _claudeTrustRoots(projectPath) {
-  const pointer = path14.join(projectPath, ".git");
+  const pointer = path15.join(projectPath, ".git");
   let stats;
   try {
     stats = await stat2(pointer);
@@ -10831,12 +11077,12 @@ async function _claudeTrustRoots(projectPath) {
   }
   if (!stats.isFile())
     return [projectPath];
-  const gitdir = /^gitdir:\s*(.+)\s*$/m.exec(await readFile7(pointer, "utf8"))?.[1];
+  const gitdir = /^gitdir:\s*(.+)\s*$/m.exec(await readFile8(pointer, "utf8"))?.[1];
   if (!gitdir) {
     throw new Error(`workspace ${projectPath} has an unreadable .git pointer — cannot pre-trust its main repository for claude`);
   }
-  const resolved = path14.resolve(projectPath, gitdir);
-  const marker = `${path14.sep}.git${path14.sep}worktrees${path14.sep}`;
+  const resolved = path15.resolve(projectPath, gitdir);
+  const marker = `${path15.sep}.git${path15.sep}worktrees${path15.sep}`;
   const markerIndex = resolved.indexOf(marker);
   if (markerIndex === -1)
     return [projectPath];
@@ -10865,26 +11111,26 @@ function _claudeStatusLineShouldBeReplaced(command) {
   if (CLAUDE_STATUSLINE_SUBCOMMAND_RE.test(trimmed))
     return true;
   const first = trimmed.split(/\s+/u)[0] ?? "";
-  return SAIL_CLAUDE_STATUSLINE_BASENAMES.has(path14.basename(first));
+  return SAIL_CLAUDE_STATUSLINE_BASENAMES.has(path15.basename(first));
 }
 function _claudeStatusLineConfig(command) {
   return { type: "command", command, refreshInterval: 20 };
 }
 async function _materializeCodexDefaults(homeDir, workspaceDir, sourceHomeDir, warn = _warnStatusLine) {
-  const configPath = path14.join(homeDir, "config.toml");
+  const configPath = path15.join(homeDir, "config.toml");
   let current = await _readTextIfExists2(configPath);
   current = current.replace(new RegExp(`${_escapeRegExp(CODEX_BLOCK_BEGIN)}[\\s\\S]*?${_escapeRegExp(CODEX_BLOCK_END)}\\n?`, "u"), "");
   current = current.replace(new RegExp(`${_escapeRegExp(CODEX_TRUST_BLOCK_BEGIN)}[\\s\\S]*?${_escapeRegExp(CODEX_TRUST_BLOCK_END)}\\n?`, "u"), "");
   current = await _refreshCodexModelSettings(current, sourceHomeDir);
   current = _removeTopLevelTomlKeys(current, CODEX_UPDATE_CHECK_KEYS);
-  const trustedWorkspace = workspaceDir ? path14.resolve(_expandHome3(workspaceDir)) : undefined;
+  const trustedWorkspace = workspaceDir ? path15.resolve(_expandHome3(workspaceDir)) : undefined;
   const trust = trustedWorkspace ? _setExistingCodexProjectTrust(current, trustedWorkspace) : { text: current, found: false };
   current = trust.text;
   const missing = Object.entries(CODEX_DEFAULTS).filter(([key]) => !_hasTopLevelTomlKey(current, key));
   const defaultsBlock = _codexManagedBlock(missing);
   const trustBlock = trustedWorkspace && !trust.found ? _codexTrustBlock(trustedWorkspace) : "";
   const next = _ensureCodexStatusLine(_appendTomlBlock(_insertBeforeFirstTomlTable(current, defaultsBlock), trustBlock), warn);
-  await mkdir7(path14.dirname(configPath), { recursive: true });
+  await mkdir7(path15.dirname(configPath), { recursive: true });
   await writeFile7(configPath, next, { mode: 384 });
 }
 function _ensureCodexStatusLine(text, warn) {
@@ -10934,7 +11180,7 @@ ${CODEX_CONTEXT_STATUS_LINE}`);
 async function _refreshCodexModelSettings(current, sourceHomeDir) {
   if (!sourceHomeDir)
     return current;
-  const source = await _readTextIfExists2(path14.join(sourceHomeDir, "config.toml"));
+  const source = await _readTextIfExists2(path15.join(sourceHomeDir, "config.toml"));
   const entries = _codexModelEntries(source);
   const withoutManaged = current.replace(new RegExp(`${_escapeRegExp(CODEX_MODEL_BLOCK_BEGIN)}[\\s\\S]*?${_escapeRegExp(CODEX_MODEL_BLOCK_END)}\\n?`, "u"), "");
   const keys = new Set(entries.map(({ key }) => key));
@@ -11201,7 +11447,7 @@ async function _writeManagedFile(filePath, content, executable) {
   if (existing && existing !== content && !existing.includes(MANAGED_MARKER2) && !_matchesMarkerlessManagedContent(existing, content)) {
     throw new Error(`refusing to overwrite unmanaged file: ${filePath}`);
   }
-  await mkdir7(path14.dirname(filePath), { recursive: true });
+  await mkdir7(path15.dirname(filePath), { recursive: true });
   await writeFile7(filePath, content, { mode: executable ? 493 : 384 });
   if (executable)
     await chmod4(filePath, 493);
@@ -11217,13 +11463,13 @@ async function _readTextIfExists2(filePath) {
       return "";
     throw error;
   }
-  return readFile7(filePath, "utf8");
+  return readFile8(filePath, "utf8");
 }
 function _expandHome3(value) {
   if (value === "~")
     return homedir11();
   if (value.startsWith("~/"))
-    return path14.join(homedir11(), value.slice(2));
+    return path15.join(homedir11(), value.slice(2));
   return value;
 }
 function _shellSingleQuote(value) {
@@ -11238,10 +11484,10 @@ function _escapeRegExp(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
 }
 
-// .dist-releases/1784862378006-1249051/src/host/engine-auth.js
+// .dist-releases/1784894032002-2676534/src/host/engine-auth.js
 import { lstat as lstat4, mkdir as mkdir8, readlink, realpath, stat as stat3, symlink as symlink2, unlink as unlink2 } from "node:fs/promises";
 import { homedir as homedir12 } from "node:os";
-import path15 from "node:path";
+import path16 from "node:path";
 class EngineNotLoggedInError extends Error {
   constructor(engine, authPath) {
     super(`engine-auth-missing[${engine}]: ${_notLoggedInMessage(engine, authPath)}`);
@@ -11256,9 +11502,9 @@ async function provisionEngineAuth(options) {
       return null;
     throw new EngineNotLoggedInError(options.engine, source);
   }
-  const target = path15.join(options.homeDir, engineAuthFileName(options.engine));
+  const target = path16.join(options.homeDir, engineAuthFileName(options.engine));
   const sharedTargetPath = await realpath(source);
-  await mkdir8(path15.dirname(target), { recursive: true });
+  await mkdir8(path16.dirname(target), { recursive: true });
   await _ensureSymlink(target, source, sharedTargetPath);
   return { linkPath: target, sharedTargetPath };
 }
@@ -11267,7 +11513,7 @@ async function _hasEnvBasedAuth(engine, env) {
     return _nonEmpty(env.OPENAI_API_KEY);
   if (_nonEmpty(env.ANTHROPIC_AUTH_TOKEN) || _nonEmpty(env.ANTHROPIC_API_KEY))
     return true;
-  const settings = await readHostClaudeSettings(path15.dirname(engineAuthSourcePath("claude", env)));
+  const settings = await readHostClaudeSettings(path16.dirname(engineAuthSourcePath("claude", env)));
   return _nonEmpty(settings.env.ANTHROPIC_AUTH_TOKEN) || _nonEmpty(settings.env.ANTHROPIC_API_KEY) || settings.apiKeyHelper !== null;
 }
 function _nonEmpty(value) {
@@ -11277,12 +11523,12 @@ function _notLoggedInMessage(engine, authPath) {
   if (engine === "codex") {
     return `engine is not authenticated: codex has no usable credential source. Provide either (1) auth.json at ${authPath} via codex login, or (2) OPENAI_API_KEY in the process environment.`;
   }
-  const settingsPath = path15.join(path15.dirname(authPath), "settings.json");
+  const settingsPath = path16.join(path16.dirname(authPath), "settings.json");
   return `engine is not authenticated: claude has no usable credential source. Provide one of: (1) ${authPath} via claude login; ` + `(2) ANTHROPIC_AUTH_TOKEN/ANTHROPIC_API_KEY or apiKeyHelper in ${settingsPath}; ` + `(3) ANTHROPIC_AUTH_TOKEN/ANTHROPIC_API_KEY in the process environment.`;
 }
 function engineAuthSourcePath(engine, env = process.env) {
   const spec = _engineAuthSpec(engine, env);
-  return path15.join(spec.sourceDir, spec.fileName);
+  return path16.join(spec.sourceDir, spec.fileName);
 }
 function engineAuthFileName(engine) {
   return _engineAuthSpec(engine, {}).fileName;
@@ -11290,9 +11536,9 @@ function engineAuthFileName(engine) {
 function _engineAuthSpec(engine, env) {
   const home = env.HOME?.trim() || homedir12();
   if (engine === "codex") {
-    return { sourceDir: env.CODEX_HOME?.trim() || path15.join(home, ".codex"), fileName: "auth.json" };
+    return { sourceDir: env.CODEX_HOME?.trim() || path16.join(home, ".codex"), fileName: "auth.json" };
   }
-  return { sourceDir: env.CLAUDE_CONFIG_DIR?.trim() || path15.join(home, ".claude"), fileName: ".credentials.json" };
+  return { sourceDir: env.CLAUDE_CONFIG_DIR?.trim() || path16.join(home, ".claude"), fileName: ".credentials.json" };
 }
 async function _isReadableAuthFile(filePath) {
   try {
@@ -11321,14 +11567,14 @@ async function _ensureSymlink(linkPath, targetPath, sharedTargetPath) {
     return;
   }
   const current = await readlink(linkPath);
-  const resolved = path15.resolve(path15.dirname(linkPath), current);
-  if (resolved === path15.resolve(targetPath))
+  const resolved = path16.resolve(path16.dirname(linkPath), current);
+  if (resolved === path16.resolve(targetPath))
     return;
   await unlink2(linkPath);
   await symlink2(targetPath, linkPath);
 }
 
-// .dist-releases/1784862378006-1249051/src/host/runtime-env.js
+// .dist-releases/1784894032002-2676534/src/host/runtime-env.js
 async function materializeAgentRuntimeEnv(options) {
   const env = buildAgentEnv({
     hostEnv: options.hostEnv,
@@ -11347,7 +11593,7 @@ async function materializeAgentRuntimeEnv(options) {
     agentName: options.agentName,
     engine: memoryStub.engine,
     homeDir: memoryStub.homeDir,
-    sourceHomeDir: path16.dirname(engineAuthSourcePath(memoryStub.engine, options.hostEnv))
+    sourceHomeDir: path17.dirname(engineAuthSourcePath(memoryStub.engine, options.hostEnv))
   });
   const credentialGuard = await provisionEngineAuth({
     engine: memoryStub.engine,
@@ -11368,7 +11614,7 @@ function _ensureRootSandboxEscape(env, engine, uid) {
 function _currentUid() {
   return typeof process.getuid === "function" ? process.getuid() : null;
 }
-// .dist-releases/1784862378006-1249051/src/host/context-statusline.js
+// .dist-releases/1784894032002-2676534/src/host/context-statusline.js
 function renderClaudeContextStatusLine(payload) {
   const percent = _usedPercentage(payload);
   if (percent === null)
@@ -11406,12 +11652,12 @@ function _bar(percent) {
   const filled = Math.min(10, Math.max(0, Math.trunc(percent / 10)));
   return "█".repeat(filled) + "░".repeat(10 - filled);
 }
-// .dist-releases/1784862378006-1249051/src/host/scratch-sweeper.js
+// .dist-releases/1784894032002-2676534/src/host/scratch-sweeper.js
 import { execFile as execFile3 } from "node:child_process";
 import { lstat as lstat5, readdir as readdir3, realpath as realpath2, unlink as unlink3 } from "node:fs/promises";
-import path17 from "node:path";
-import { promisify as promisify4 } from "node:util";
-var execFileAsync3 = promisify4(execFile3);
+import path18 from "node:path";
+import { promisify as promisify5 } from "node:util";
+var execFileAsync3 = promisify5(execFile3);
 var SCRATCH_SUBDIR = ".agent/tmp";
 var SCRATCH_SWEEP_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1000;
 var SCRATCH_SWEEP_MAX_BYTES = 512 * 1024 * 1024;
@@ -11423,8 +11669,8 @@ function scratchSweepEnabled(env) {
   return raw !== "0" && raw !== "false" && raw !== "no" && raw !== "off";
 }
 async function sweepWorkspaceScratch(options) {
-  const root = path17.resolve(options.workspaceRoot);
-  const tmpDir = path17.join(root, SCRATCH_SUBDIR);
+  const root = path18.resolve(options.workspaceRoot);
+  const tmpDir = path18.join(root, SCRATCH_SUBDIR);
   const state = await _tmpDirState(root, tmpDir);
   if (state === "missing")
     return EMPTY;
@@ -11462,7 +11708,7 @@ async function _trackedScratchFiles(root, options) {
     const tracked = new Set;
     for (const rel of stdout.split("\x00"))
       if (rel)
-        tracked.add(path17.join(root, rel));
+        tracked.add(path18.join(root, rel));
     return tracked;
   } catch (error) {
     options.logger?.("host_scratch_sweep_git_failed", { workspace: root, error: _errno(error) });
@@ -11472,7 +11718,7 @@ async function _trackedScratchFiles(root, options) {
 async function _collectScratchFiles(dir, root, logger) {
   const out = [];
   for (const entry of await readdir3(dir, { withFileTypes: true })) {
-    const abs = path17.join(dir, entry.name);
+    const abs = path18.join(dir, entry.name);
     if (!_within(root, abs)) {
       logger?.("host_scratch_sweep_out_of_bounds", { workspace: root, path: abs });
       continue;
@@ -11538,8 +11784,8 @@ async function _runGit2(root, args) {
   return String(stdout);
 }
 function _within(root, target) {
-  const rel = path17.relative(root, target);
-  return rel === "" || !rel.startsWith("..") && !path17.isAbsolute(rel);
+  const rel = path18.relative(root, target);
+  return rel === "" || !rel.startsWith("..") && !path18.isAbsolute(rel);
 }
 function _isEnoent(error) {
   return Boolean(error && typeof error === "object" && "code" in error && error.code === "ENOENT");
@@ -11549,7 +11795,7 @@ function _errno(error) {
     return String(error.code);
   return error instanceof Error ? error.message : String(error);
 }
-// .dist-releases/1784862378006-1249051/src/host/launcher.js
+// .dist-releases/1784894032002-2676534/src/host/launcher.js
 var MAX_TMUX_SESSION_SUFFIX = 100;
 async function launchSupervisedAgent(input, deps = {}) {
   const spec = parseAgentStartSpec(input.spec);
@@ -11700,10 +11946,10 @@ async function _tmuxSessionExists(session) {
     throw error;
   }
 }
-// .dist-releases/1784862378006-1249051/src/worker/capability.js
+// .dist-releases/1784894032002-2676534/src/worker/capability.js
 import { accessSync, constants as constants2, mkdirSync as mkdirSync3, mkdtempSync, readFileSync as readFileSync3, rmSync, writeFileSync as writeFileSync2 } from "node:fs";
 import os from "node:os";
-import path18 from "node:path";
+import path19 from "node:path";
 import { spawnSync } from "node:child_process";
 var TOOLS = ["podman", "git", "kubectl", "perf", "bpftrace"];
 var GPU_TAGS = new Set(["intel-b60", "nvidia-h100", "none"]);
@@ -11803,10 +12049,10 @@ function parseOsReleaseLine(line) {
 }
 function isReadonly(dir) {
   try {
-    const root = path18.resolve(dir);
+    const root = path19.resolve(dir);
     mkdirSync3(root, { recursive: true });
-    const temp = mkdtempSync(path18.join(root, ".sailorbridge-write-test-"));
-    writeFileSync2(path18.join(temp, "probe"), "");
+    const temp = mkdtempSync(path19.join(root, ".sailorbridge-write-test-"));
+    writeFileSync2(path19.join(temp, "probe"), "");
     rmSync(temp, { recursive: true, force: true });
     return false;
   } catch {
@@ -11831,10 +12077,10 @@ function commandExists(command) {
   return commandPath(command) !== null;
 }
 function commandPath(command) {
-  if (command.includes(path18.sep))
+  if (command.includes(path19.sep))
     return command;
-  for (const entry of (process.env.PATH ?? "").split(path18.delimiter)) {
-    const candidate = path18.join(entry, command);
+  for (const entry of (process.env.PATH ?? "").split(path19.delimiter)) {
+    const candidate = path19.join(entry, command);
     try {
       accessSync(candidate, constants2.X_OK);
       return candidate;
@@ -11843,7 +12089,7 @@ function commandPath(command) {
   return null;
 }
 
-// .dist-releases/1784862378006-1249051/src/host/worker-start-spec.js
+// .dist-releases/1784894032002-2676534/src/host/worker-start-spec.js
 var MAX_TAGS = 32;
 var TAG_PATTERN = /^[a-z0-9][a-z0-9=._:/-]{0,63}$/iu;
 var RESERVED_TAG_KEYS = new Set(["os", "kernel", "arch", "gpu", "mode", "role", "tool"]);
@@ -11903,16 +12149,16 @@ function _trimmed2(value, label) {
   return trimmed;
 }
 
-// .dist-releases/1784862378006-1249051/src/host/worker-launcher.js
+// .dist-releases/1784894032002-2676534/src/host/worker-launcher.js
 import { statSync as statSync3 } from "node:fs";
 import os4 from "node:os";
-import path21 from "node:path";
-// .dist-releases/1784862378006-1249051/src/worker/client.js
+import path22 from "node:path";
+// .dist-releases/1784894032002-2676534/src/worker/client.js
 import { readFileSync as readFileSync5 } from "node:fs";
 import os3 from "node:os";
-import path20 from "node:path";
+import path21 from "node:path";
 
-// .dist-releases/1784862378006-1249051/src/worker/errors.js
+// .dist-releases/1784894032002-2676534/src/worker/errors.js
 class LeaseFencingRejected extends Error {
   status;
   constructor(status, message) {
@@ -11926,10 +12172,10 @@ class WorkerHttpError extends Error {
   method;
   path;
   status;
-  constructor(method, path19, status, message) {
+  constructor(method, path20, status, message) {
     super(message || `HTTP ${status}`);
     this.method = method;
-    this.path = path19;
+    this.path = path20;
     this.status = status;
     this.name = "WorkerHttpError";
   }
@@ -11938,10 +12184,10 @@ class WorkerHttpError extends Error {
 class WorkerNetworkError extends Error {
   method;
   path;
-  constructor(method, path19, message) {
+  constructor(method, path20, message) {
     super(message);
     this.method = method;
-    this.path = path19;
+    this.path = path20;
     this.name = "WorkerNetworkError";
   }
 }
@@ -11949,14 +12195,14 @@ var LEASE_FENCING_BAD_REQUEST_MESSAGES = [
   "lease_token is required",
   "lease_token must be a non-empty string"
 ];
-function raiseForLeaseFencingOrStatus(method, path19, status, body) {
+function raiseForLeaseFencingOrStatus(method, path20, status, body) {
   if (status === 409)
     throw new LeaseFencingRejected(status, body);
   if (status === 400 && LEASE_FENCING_BAD_REQUEST_MESSAGES.some((message) => body.includes(message))) {
     throw new LeaseFencingRejected(status, body);
   }
   if (status >= 300)
-    throw new WorkerHttpError(method, path19, status, body);
+    throw new WorkerHttpError(method, path20, status, body);
 }
 function isNetworkError(error) {
   if (error instanceof WorkerNetworkError)
@@ -11968,23 +12214,23 @@ function isNetworkError(error) {
   const code = error.code;
   return code === "ECONNRESET" || code === "ECONNREFUSED" || code === "ETIMEDOUT" || code === "EPIPE" || error.name === "AbortError";
 }
-function countsTowardWorkerSessionRebuild(path19) {
-  if (path19 === "/api/v1/workers/register")
+function countsTowardWorkerSessionRebuild(path20) {
+  if (path20 === "/api/v1/workers/register")
     return false;
-  if (/^\/api\/v1\/workers\/[^/]+\/heartbeat$/u.test(path19))
+  if (/^\/api\/v1\/workers\/[^/]+\/heartbeat$/u.test(path20))
     return false;
   return true;
 }
 
-// .dist-releases/1784862378006-1249051/src/worker/executor.js
-import { spawn as spawn5 } from "node:child_process";
+// .dist-releases/1784894032002-2676534/src/worker/executor.js
+import { spawn as spawn6 } from "node:child_process";
 import { mkdirSync as mkdirSync4, mkdtempSync as mkdtempSync2, readFileSync as readFileSync4, realpathSync, rmSync as rmSync2, statfsSync, writeFileSync as writeFileSync3 } from "node:fs";
 import { tmpdir as tmpdir2, loadavg } from "node:os";
 import os2 from "node:os";
-import path19 from "node:path";
+import path20 from "node:path";
 import { TextDecoder } from "node:util";
 
-// .dist-releases/1784862378006-1249051/src/worker/async-queue.js
+// .dist-releases/1784894032002-2676534/src/worker/async-queue.js
 class AsyncByteQueue {
   maxSize;
   values = [];
@@ -12044,7 +12290,7 @@ class AsyncByteQueue {
   }
 }
 
-// .dist-releases/1784862378006-1249051/src/worker/http.js
+// .dist-releases/1784894032002-2676534/src/worker/http.js
 import { request as httpRequest } from "node:http";
 import { request as httpsRequest } from "node:https";
 import { URLSearchParams as URLSearchParams2 } from "node:url";
@@ -12074,27 +12320,27 @@ class WorkerHttpClient {
       throw new Error("token is required");
     this.relayUrl = relayUrl.replace(/\/+$/u, "");
   }
-  async getJson(path19, query, timeouts, options = {}) {
+  async getJson(path20, query, timeouts, options = {}) {
     const suffix = new URLSearchParams2(query).toString();
-    return this.requestJson("GET", suffix ? `${path19}?${suffix}` : path19, undefined, timeouts, options);
+    return this.requestJson("GET", suffix ? `${path20}?${suffix}` : path20, undefined, timeouts, options);
   }
-  async postJson(path19, value, timeouts) {
-    return this.requestJson("POST", path19, { type: "json", value }, timeouts, {});
+  async postJson(path20, value, timeouts) {
+    return this.requestJson("POST", path20, { type: "json", value }, timeouts, {});
   }
-  async postBytes(path19, body, headers, timeouts) {
-    const response = await this.request("POST", path19, { type: "bytes", value: body }, timeouts, headers);
-    raiseForLeaseFencingOrStatus("POST", path19, response.status, response.text);
+  async postBytes(path20, body, headers, timeouts) {
+    const response = await this.request("POST", path20, { type: "bytes", value: body }, timeouts, headers);
+    raiseForLeaseFencingOrStatus("POST", path20, response.status, response.text);
   }
-  async requestJson(method, path19, body, timeouts, options) {
-    const response = await this.request(method, path19, body, timeouts, {});
-    const errorPath = pathOnly(path19);
+  async requestJson(method, path20, body, timeouts, options) {
+    const response = await this.request(method, path20, body, timeouts, {});
+    const errorPath = pathOnly(path20);
     if (options.leaseFencing === false && response.status >= 300)
       throw new WorkerHttpError(method, errorPath, response.status, response.text);
     raiseForLeaseFencingOrStatus(method, errorPath, response.status, response.text);
     return parseJson(method, errorPath, response.text);
   }
-  async request(method, path19, body, timeouts, extraHeaders) {
-    const url = new URL(`${this.relayUrl}${path19}`);
+  async request(method, path20, body, timeouts, extraHeaders) {
+    const url = new URL(`${this.relayUrl}${path20}`);
     const headers = this.headers(body, extraHeaders);
     return sendRequest(method, url, body, headers, timeouts, this.signal);
   }
@@ -12221,7 +12467,7 @@ function waitForRequestDrain(req) {
     req.once("close", onClose);
   });
 }
-function parseJson(method, path19, text) {
+function parseJson(method, path20, text) {
   try {
     const parsed = JSON.parse(text);
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
@@ -12230,15 +12476,15 @@ function parseJson(method, path19, text) {
     return parsed;
   } catch (error) {
     if (error instanceof SyntaxError)
-      throw new WorkerNetworkError(method, path19, "response JSON is invalid");
+      throw new WorkerNetworkError(method, path20, "response JSON is invalid");
     throw error;
   }
 }
-function pathOnly(path19) {
-  return path19.split("?", 1)[0] || path19;
+function pathOnly(path20) {
+  return path20.split("?", 1)[0] || path20;
 }
 
-// .dist-releases/1784862378006-1249051/src/worker/stream-upload.js
+// .dist-releases/1784894032002-2676534/src/worker/stream-upload.js
 async function uploadStream(session, jobId, stream, leaseToken, chunks, workerId) {
   if (!leaseToken.trim())
     throw new Error("lease_token is required");
@@ -12248,7 +12494,7 @@ async function uploadStream(session, jobId, stream, leaseToken, chunks, workerId
   await session.http.postBytes(`/api/v1/jobs/${encodeURIComponent(jobId)}/stream-upload?${query.toString()}`, chunks, { "X-Lease-Token": leaseToken }, UPLOAD_TIMEOUTS);
 }
 
-// .dist-releases/1784862378006-1249051/src/worker/executor.js
+// .dist-releases/1784894032002-2676534/src/worker/executor.js
 class StreamingProcessFailure extends Error {
   exitCode;
   stdout;
@@ -12320,8 +12566,8 @@ function sandboxPath(workdir, requested) {
   if (requested.startsWith("/") || parts.length === 0 || parts.includes("..")) {
     throw new Error("path must be a relative path inside the worker sandbox");
   }
-  const root = realpathSync(path19.resolve(workdir));
-  const target = path19.resolve(root, ...parts);
+  const root = realpathSync(path20.resolve(workdir));
+  const target = path20.resolve(root, ...parts);
   if (!isPathInside(root, target)) {
     throw new Error("path escapes worker sandbox");
   }
@@ -12461,7 +12707,7 @@ async function collectAndUpload(session, jobId, stream, pipe, leaseToken, worker
   return collected.join("");
 }
 function spawnProcess(argv, cwd) {
-  return spawn5(argv[0], argv.slice(1), { cwd, detached: process.platform !== "win32", stdio: ["ignore", "pipe", "pipe"] });
+  return spawn6(argv[0], argv.slice(1), { cwd, detached: process.platform !== "win32", stdio: ["ignore", "pipe", "pipe"] });
 }
 async function terminateProcess(proc) {
   if (proc.pid === undefined)
@@ -12497,9 +12743,9 @@ function writeFileJob(workdir, spec, startedAt, started) {
   if (typeof spec.content !== "string")
     throw new Error("write_file spec.content must be a string");
   const target = sandboxPath(workdir, String(spec.path ?? ""));
-  mkdirSync4(path19.dirname(target), { recursive: true });
+  mkdirSync4(path20.dirname(target), { recursive: true });
   writeFileSync3(target, spec.content, "utf8");
-  return output(0, path19.relative(realpathSync(path19.resolve(workdir)), target), "", startedAt, started);
+  return output(0, path20.relative(realpathSync(path20.resolve(workdir)), target), "", startedAt, started);
 }
 function readUtf8File(target) {
   return decodeUtf8(readFileSync4(target));
@@ -12507,8 +12753,8 @@ function readUtf8File(target) {
 async function applyDiff(workdir, spec, signal) {
   if (typeof spec.diff_unified_text !== "string")
     throw new Error("apply_diff spec.diff_unified_text must be a string");
-  const dir = mkdtempSync2(path19.join(tmpdir2(), "sailorbridge-patch-"));
-  const patch = path19.join(dir, "change.patch");
+  const dir = mkdtempSync2(path20.join(tmpdir2(), "sailorbridge-patch-"));
+  const patch = path20.join(dir, "change.patch");
   writeFileSync3(patch, spec.diff_unified_text, "utf8");
   try {
     return await runArgv(["patch", "-p1", "-i", patch], workdir, coerceJobTimeoutSeconds(spec) * 1000, signal);
@@ -12748,24 +12994,24 @@ function resolveExistingTarget(target) {
   let current = target;
   while (true) {
     try {
-      return path19.resolve(realpathSync(current), ...missingParts.reverse());
+      return path20.resolve(realpathSync(current), ...missingParts.reverse());
     } catch (error) {
       if (error.code !== "ENOENT")
         throw error;
-      const parent = path19.dirname(current);
+      const parent = path20.dirname(current);
       if (parent === current)
         throw error;
-      missingParts.push(path19.basename(current));
+      missingParts.push(path20.basename(current));
       current = parent;
     }
   }
 }
 function isPathInside(root, target) {
-  const relative = path19.relative(root, target);
-  return relative === "" || !relative.startsWith("..") && !path19.isAbsolute(relative);
+  const relative = path20.relative(root, target);
+  return relative === "" || !relative.startsWith("..") && !path20.isAbsolute(relative);
 }
 function prepareWorkdir(workdir) {
-  const resolved = path19.resolve(workdir);
+  const resolved = path20.resolve(workdir);
   mkdirSync4(resolved, { recursive: true });
   return resolved;
 }
@@ -12780,7 +13026,7 @@ function errorMessage6(error) {
   return error instanceof Error ? error.message : String(error);
 }
 
-// .dist-releases/1784862378006-1249051/src/worker/client.js
+// .dist-releases/1784894032002-2676534/src/worker/client.js
 var TOKEN_FILES = [
   "~/.config/sailorbridge/token",
   "/etc/sailorbridge/token"
@@ -13119,7 +13365,7 @@ ${JSON.stringify(result)}\r
 `);
   for (const file of attachments) {
     yield Buffer.from(`--${multipartBoundary}\r
-Content-Disposition: form-data; name="files"; filename="${path20.basename(file)}"\r
+Content-Disposition: form-data; name="files"; filename="${path21.basename(file)}"\r
 \r
 `);
     yield readFileSync5(file);
@@ -13153,7 +13399,7 @@ function parseFlags2(argv) {
   return values;
 }
 function expandHome2(value) {
-  return value === "~" || value.startsWith("~/") ? path20.join(os3.homedir(), value.slice(2)) : value;
+  return value === "~" || value.startsWith("~/") ? path21.join(os3.homedir(), value.slice(2)) : value;
 }
 function _sleep(ms, signal) {
   if (signal?.aborted)
@@ -13177,7 +13423,7 @@ function errorName2(error) {
 function errorMessage7(error) {
   return error instanceof Error ? error.message : String(error);
 }
-// .dist-releases/1784862378006-1249051/src/host/worker-launcher.js
+// .dist-releases/1784894032002-2676534/src/host/worker-launcher.js
 var DEFAULT_WORKER_READY_TIMEOUT_MS = 60000;
 async function launchSupervisedWorker(input, deps = {}) {
   const logger = input.logger ?? (() => {});
@@ -13260,7 +13506,7 @@ function _requireWorkerName(descriptor) {
   return worker;
 }
 function _resolveWorkdir(workdir, homeDir) {
-  return workdir === "~" || workdir.startsWith("~/") ? path21.join(homeDir, workdir.slice(2)) : workdir;
+  return workdir === "~" || workdir.startsWith("~/") ? path22.join(homeDir, workdir.slice(2)) : workdir;
 }
 function _assertWorkdir(workdir) {
   let stat4;
@@ -13274,7 +13520,7 @@ function _assertWorkdir(workdir) {
   return workdir;
 }
 
-// .dist-releases/1784862378006-1249051/src/host/daemon.js
+// .dist-releases/1784894032002-2676534/src/host/daemon.js
 async function runHostDaemon(options) {
   const logger = options.logger ?? (() => {});
   const sleep3 = options.sleep ?? ((ms) => new Promise((resolve2) => setTimeout(resolve2, ms)));
@@ -13302,6 +13548,13 @@ async function runHostDaemon(options) {
   let lastRepoTipReportAt = now() - repoTipReportIntervalMs;
   const reconcileIntervalMs = options.reconcileIntervalMs ?? 5 * 60 * 1000;
   let lastReconcileAt = now() - reconcileIntervalMs;
+  const autoUpdater = createAutoUpdater({
+    enabled: options.autoUpdate !== false,
+    isActive: () => runtimes.size > 0 || workerRuntimes.size > 0 || startLocks.size > 0 || cleanupLocks.size > 0,
+    isMidWork: () => startLocks.size > 0 || cleanupLocks.size > 0,
+    logger,
+    deps: { now, ...options.autoUpdateDeps }
+  });
   const _startWorker = async (request, recoveredDescriptor) => {
     const spec = parseWorkerStartSpec(request.spec);
     const descriptor = recoveredDescriptor ?? await options.resolveCredential(request);
@@ -13452,7 +13705,7 @@ async function runHostDaemon(options) {
   try {
     await _recoverDurableRuntimes();
     while (!options.signal?.aborted) {
-      const drained = await _drainOnce(options, identity, starter, logger, redactSecrets);
+      const drained = await _drainOnce(options, identity, starter, logger, redactSecrets, autoUpdater);
       if (drained === "retired") {
         logger("host_daemon_retired", { host_id: options.hostId, status: 401 });
         break;
@@ -13588,7 +13841,7 @@ async function _loadHostConfigBestEffort(options, logger) {
     return { kind: "sailorbridge-host-config", workspaces: [] };
   }
 }
-async function _drainOnce(options, identity, starter, logger, redactSecrets) {
+async function _drainOnce(options, identity, starter, logger, redactSecrets, autoUpdater) {
   try {
     const hostConfig = await _loadHostConfigBestEffort(options, logger);
     const workspaceInventory = await discoverWorkspaceInventoryBestEffort(hostWorkspacePaths(hostConfig, options.hostEnv ?? process.env), {
@@ -13597,17 +13850,20 @@ async function _drainOnce(options, identity, starter, logger, redactSecrets) {
         error: error instanceof Error ? error.message : String(error)
       })
     });
+    const updateError = autoUpdater.pendingUpdateError();
     const result = await runHostRequestOnce({
       relay: options.relay,
       ...identity,
       starter,
       redactSecrets,
       ...workspaceInventory.length ? { workspaceInventory } : {},
+      ...updateError === undefined ? {} : { updateError },
       onWorkspaceInventoryError: (error) => logger("host_workspace_inventory_error", {
         error: error instanceof Error ? error.message : String(error)
       }),
       ...options.signal ? { signal: options.signal } : {}
     });
+    await autoUpdater.onHostReport(result.host);
     if (result.status === "idle")
       return false;
     logger(`host_request_${result.status}`, {
@@ -13619,11 +13875,16 @@ async function _drainOnce(options, identity, starter, logger, redactSecrets) {
   } catch (error) {
     if (error instanceof RelayHttpError && error.status === 401)
       return "retired";
+    if (error instanceof RelayHttpError && error.status === 426) {
+      logger("host_daemon_upgrade_required", { error: error.message });
+      await autoUpdater.onUpgradeRequired(error.body);
+      return false;
+    }
     logger("host_daemon_poll_error", { error: error instanceof Error ? error.message : String(error) });
     return false;
   }
 }
-// .dist-releases/1784862378006-1249051/src/host/enrollment-redeem.js
+// .dist-releases/1784894032002-2676534/src/host/enrollment-redeem.js
 var DEFAULT_NOT_FOUND_RETRIES = 3;
 var NOT_FOUND_RETRY_DELAY_MS = 500;
 function createEnrollmentRedeemer(options) {
@@ -13760,7 +14021,7 @@ function _role2(enrollment) {
   }
   return _string4(enrollment.roles[0], "roles[0]").trim();
 }
-// .dist-releases/1784862378006-1249051/src/host/tutorial.js
+// .dist-releases/1784894032002-2676534/src/host/tutorial.js
 function buildTutorialSteps(state) {
   const paired = state.hasCredential;
   return [
@@ -13831,7 +14092,7 @@ async function runTutorial(options) {
   }
   return steps;
 }
-// .dist-releases/1784862378006-1249051/src/events.js
+// .dist-releases/1784894032002-2676534/src/events.js
 var EVENT_COMMANDS = new Set(["add", "list", "enable", "disable", "rm"]);
 var EVENT_FLAGS = new Set(["at", "days", "message", "run-date", "session", "tag", "tz"]);
 var PRODUCT_DAYS_MODES = new Set(["once", "daily", "weekday"]);
@@ -13921,9 +14182,9 @@ function _assertListArgs(args) {
   }
 }
 
-// .dist-releases/1784862378006-1249051/src/text-input.js
-import { readFile as readFile8 } from "node:fs/promises";
-var _readUtf8File = async (file) => await readFile8(file, "utf8");
+// .dist-releases/1784894032002-2676534/src/text-input.js
+import { readFile as readFile9 } from "node:fs/promises";
+var _readUtf8File = async (file) => await readFile9(file, "utf8");
 async function readTextInput(input) {
   let content = "";
   for await (const chunk of input)
@@ -13955,17 +14216,17 @@ async function rejectUnusedTextInput(input, message) {
     input.unref?.();
   }
 }
-async function readTextFile(path22, readUtf8File2 = _readUtf8File) {
-  return await readUtf8File2(path22);
+async function readTextFile(path23, readUtf8File2 = _readUtf8File) {
+  return await readUtf8File2(path23);
 }
-async function readTextFileOrStdin(path22, input, unusedInputMessage, readUtf8File2 = _readUtf8File) {
-  if (path22 === "-")
+async function readTextFileOrStdin(path23, input, unusedInputMessage, readUtf8File2 = _readUtf8File) {
+  if (path23 === "-")
     return await readTextInput(input);
   await rejectUnusedTextInput(input, unusedInputMessage);
-  return await readTextFile(path22, readUtf8File2);
+  return await readTextFile(path23, readUtf8File2);
 }
 
-// .dist-releases/1784862378006-1249051/src/ask.js
+// .dist-releases/1784894032002-2676534/src/ask.js
 var ASK_FLAGS = new Set(["body-file", "option", "reason", "recommend", "session", "title"]);
 async function runAskFromCli(client2, argv, config, input) {
   const args = _parseAskArgs(argv);
@@ -14080,8 +14341,8 @@ function _singleAskValue(values, name) {
   return entries[0];
 }
 
-// .dist-releases/1784862378006-1249051/src/task.js
-import { readFile as readFile9 } from "node:fs/promises";
+// .dist-releases/1784894032002-2676534/src/task.js
+import { readFile as readFile10 } from "node:fs/promises";
 import { basename } from "node:path";
 var TASK_FLAGS = new Set(["after", "all", "artifact-id", "before", "body-file", "commit", "depends", "description", "description-file", "draft", "findings", "image", "level", "limit", "owner-of-resume", "pair", "priority", "query", "reason", "resume-condition", "resume-dependency", "session", "status", "type", "version"]);
 var TASK_BOOLEAN_FLAGS = new Set(["all", "draft"]);
@@ -14312,7 +14573,7 @@ async function _createTaskRequest(args, input) {
 async function _uploadTaskImages(client2, captainId, session, imagePaths) {
   const artifactIds = [];
   for (const imagePath of imagePaths) {
-    const content = await readFile9(imagePath);
+    const content = await readFile10(imagePath);
     const artifact = await client2.uploadSessionArtifact(captainId, session, {
       name: basename(imagePath),
       content_bytes_base64: bytesToBase64(content)
@@ -14570,7 +14831,7 @@ function _taskListFooter(shown, returned, total, hasMore, cursor) {
   return `Shown ${shown} of ${total}${local}${next}`;
 }
 
-// .dist-releases/1784862378006-1249051/src/team.js
+// .dist-releases/1784894032002-2676534/src/team.js
 var TEAM_BOOTSTRAP_ENGINES = new Set(["claude", "codex"]);
 var SLOT_SPEC_RE = /^([^=\s]+)=([^:@\s]+):([^:@\s]+)$/;
 var TEAM_PLAIN_LIMIT = 20;
@@ -14725,7 +14986,7 @@ function _slotTable(slots) {
 Shown ${shown.length} of ${slots.length}${omitted ? `; ${omitted} omitted (use --format json)` : ""}`;
 }
 
-// .dist-releases/1784862378006-1249051/src/memory.js
+// .dist-releases/1784894032002-2676534/src/memory.js
 var VALUE_FLAGS = new Set(["file", "source"]);
 var MEMORY_SEARCH_PLAIN_LIMIT = 20;
 async function runMemoryFromCli(client2, argv, config, input, format) {
@@ -14860,7 +15121,7 @@ function _summary(value) {
   return value.replace(/\s+/gu, " ").trim().slice(0, 180);
 }
 
-// .dist-releases/1784862378006-1249051/src/mailbox-send.js
+// .dist-releases/1784894032002-2676534/src/mailbox-send.js
 var SEND_FLAGS = new Set(["body-file", "commit", "session", "tag", "task-id", "task-version", "to-agents", "to-roles", "to-host"]);
 function parseMailboxSendArgs(argv) {
   const parsed = argsFromValues(parseFlagValues(argv));
@@ -14959,7 +15220,7 @@ function splitList(value) {
   return list?.length ? list : undefined;
 }
 
-// .dist-releases/1784862378006-1249051/src/reply.js
+// .dist-releases/1784894032002-2676534/src/reply.js
 var REPLY_FLAGS = new Set(["agent", "body-file", "in-reply-to", "session"]);
 async function sendReplyFromCli(client2, argv, config, io) {
   const args = _parseReplyArgs(argv);
@@ -15016,12 +15277,13 @@ function _requiredReplyValue(values, name) {
   return value;
 }
 
-// .dist-releases/1784862378006-1249051/src/worker-command.js
+// .dist-releases/1784894032002-2676534/src/worker-command.js
 async function runWorkerCommandFromCli(client2, argv, config, io, format = "plain") {
+  const command = argv[0];
+  _requireWorkerCredential(config.keyScope, command);
   const captainId = config.captainId;
   if (!captainId)
     throw new Error("SAILORBRIDGE_CAPTAIN_ID is required for worker commands");
-  const command = argv[0];
   switch (command) {
     case "list":
       return _listWorkers(client2, captainId, _requireSession(config.session), argv.slice(1), io, format);
@@ -15033,6 +15295,14 @@ async function runWorkerCommandFromCli(client2, argv, config, io, format = "plai
       throw new Error("worker command must be job, list, run, or serve");
   }
 }
+function _requireWorkerCredential(keyScope, command) {
+  if (keyScope !== "host")
+    return;
+  if (command === "list") {
+    throw new Error("worker list cannot use a paired host credential. " + "Open this team's Workers page in the SailorBridge console.");
+  }
+  throw new Error("worker run/job requires a member-runtime credential; this command loaded a paired host credential. " + "Retry from a member workspace where SAILORBRIDGE_TOKEN is already set.");
+}
 function _requireSession(session) {
   if (!session)
     throw new Error("SAILORBRIDGE_SESSION is required for worker list and run");
@@ -15197,7 +15467,7 @@ function _writeSignalStatus(remoteCode, localStatus, remoteStderr, io) {
 `);
 }
 
-// .dist-releases/1784862378006-1249051/src/create.js
+// .dist-releases/1784894032002-2676534/src/create.js
 var CREATE_ENGINES = new Set(["claude", "codex"]);
 var DEFAULT_ENGINE = "claude";
 var WORKSPACE_PLAIN_LIMIT = 20;
@@ -15251,9 +15521,9 @@ async function _startTeamSlots(deps, ctx, team, hostId, workspaceRoot, engine, s
   }
   return requests;
 }
-async function _postConsoleJson(deps, ctx, path22, body) {
+async function _postConsoleJson(deps, ctx, path23, body) {
   const fetchImpl = deps.fetchImpl ?? fetch;
-  const response = await fetchImpl(`${ctx.apiUrl.replace(/\/$/, "")}${path22}`, {
+  const response = await fetchImpl(`${ctx.apiUrl.replace(/\/$/, "")}${path23}`, {
     method: "POST",
     headers: { Authorization: `Bearer ${ctx.token}`, "Content-Type": "application/json" },
     body: JSON.stringify(body)
@@ -15266,9 +15536,9 @@ async function _postConsoleJson(deps, ctx, path22, body) {
     throw new Error("SailorBridge API returned a malformed object");
   return parsed;
 }
-async function _getConsoleJson(deps, ctx, path22) {
+async function _getConsoleJson(deps, ctx, path23) {
   const fetchImpl = deps.fetchImpl ?? fetch;
-  const response = await fetchImpl(`${ctx.apiUrl.replace(/\/$/, "")}${path22}`, {
+  const response = await fetchImpl(`${ctx.apiUrl.replace(/\/$/, "")}${path23}`, {
     headers: { Authorization: `Bearer ${ctx.token}` }
   });
   const text = await response.text();
@@ -15343,15 +15613,15 @@ function _rejectMemberFlags(role, flags) {
     throw new Error(`create ${role} does not accept ${found[0]}`);
 }
 async function _memberSlotForCreate(deps, ctx, session, role) {
-  const path22 = `/api/console/teams/${encodeURIComponent(session)}/agent-slots`;
-  const slots = _responseMemberSlots(await _getConsoleJson(deps, ctx, path22));
+  const path23 = `/api/console/teams/${encodeURIComponent(session)}/agent-slots`;
+  const slots = _responseMemberSlots(await _getConsoleJson(deps, ctx, path23));
   const retryable = slots.find((slot) => _isRetryableMemberSlot(slot, role));
   if (retryable)
     return retryable;
   if (role === "planner" && slots.some((slot) => slot.role === role)) {
     throw new Error("duplicate-singleton-role: team already has a planner slot");
   }
-  const created = _responseMemberSlot(await _postConsoleJson(deps, ctx, path22, { role }));
+  const created = _responseMemberSlot(await _postConsoleJson(deps, ctx, path23, { role }));
   if (created.role !== role)
     throw new Error("SailorBridge API returned a member slot with the wrong role");
   return created;
@@ -15587,7 +15857,7 @@ function _workerPlain(hostId, workdir, result) {
 `);
 }
 
-// .dist-releases/1784862378006-1249051/src/cli.js
+// .dist-releases/1784894032002-2676534/src/cli.js
 var FORMATTED_COMMANDS = new Set([
   "ask",
   "create",
@@ -15647,6 +15917,10 @@ async function main(argv) {
     });
     return;
   }
+  if (command === "upgrade") {
+    await runUpgradeFromCli(argv.slice(1), { stdout: process.stdout });
+    return;
+  }
   if (command === "host" && argv[1] === "start-request") {
     await runHostStartRequestCommandFromCli(argv.slice(2), { stdout: process.stdout, stderr: process.stderr, format: output2.format });
     return;
@@ -15753,6 +16027,7 @@ var KNOWN_COMMANDS = new Set([
   "task",
   "team",
   "tutorial",
+  "upgrade",
   "workflow",
   "worker"
 ]);
@@ -15780,6 +16055,7 @@ var SUBCOMMANDS = {
     "unpark"
   ]),
   team: new Set(["bootstrap"]),
+  upgrade: new Set,
   worker: new Set(["job", "list", "run", "serve"])
 };
 function _assertKnownCommand(command, subcommand) {
@@ -15981,8 +16257,9 @@ function _resolveOptionalApiUrl(flag, env) {
   }
   return env?.trim() || undefined;
 }
+var AUTO_UPDATE_SKIP_FLAG = "--disable-auto-update";
 async function hostRun(argv) {
-  const input = parseFlags3(argv);
+  const input = parseFlags3(argv.filter((arg) => arg !== AUTO_UPDATE_SKIP_FLAG));
   const credentialsPath = input["credentials-path"] ?? process.env.SAILORBRIDGE_CREDENTIALS_FILE ?? defaultHostCredentialsPath();
   const credential = await loadHostCredential(credentialsPath);
   const relayUrl = credential.relay_url ?? process.env.SAILORBRIDGE_RELAY_URL;
@@ -16000,6 +16277,7 @@ async function hostRun(argv) {
     process.stderr.write(`${JSON.stringify({ ts: new Date().toISOString(), event, host_id: credential.host_id, ...fields })}
 `);
   };
+  const autoUpdate = !argv.includes(AUTO_UPDATE_SKIP_FLAG) && await _hostConfigAllowsAutoUpdate(emit);
   await runHostDaemon({
     relay,
     resolveCredential,
@@ -16010,9 +16288,19 @@ async function hostRun(argv) {
     signal: controller.signal,
     redactSecrets: [credential.token],
     ...input["workspace-root"] ? { workspaceRoot: input["workspace-root"] } : {},
+    autoUpdate,
     logger: emit
   });
 }
+async function _hostConfigAllowsAutoUpdate(emit) {
+  try {
+    const config = await loadHostConfig(process.env.SAILORBRIDGE_HOST_CONFIG_FILE ?? defaultHostConfigPath());
+    return config.auto_update !== false;
+  } catch (error) {
+    emit("host_config_load_error", { error: error instanceof Error ? error.message : String(error) });
+    return true;
+  }
+}
 async function supervise(client2, argv, config) {
   const parsed = parseSuperviseArgs(argv);
   assertSingleOwnerConfirmed(parsed);
@@ -16234,6 +16522,8 @@ function _usageText() {
   sailorbridge workflow
   sailorbridge refresh
   sailorbridge --version
+  sailorbridge upgrade
+    installs @sailorbridge/client@latest and restarts a running SailorBridge-managed host service.
   sailorbridge tutorial [--check] [--api-url URL] [--credentials-path PATH] (default API: ${DEFAULT_PRODUCT_API_URL})
   sailorbridge login [--api-url URL] [--host-id H] [--display-name N] [--credentials-path PATH] [--binary PATH] [${SERVICE_SKIP_FLAG}] [--service-dir DIR] [--service-name NAME] (default API: ${DEFAULT_PRODUCT_API_URL})
     pairs this host, then installs and starts the host service so the console can start workers and agents here.
@@ -16247,7 +16537,7 @@ function _usageText() {
   sailorbridge event add --at HH:MM --tz IANA --days once|daily|weekday --message TEXT [--run-date YYYY-MM-DD] [--tag T] [--disabled] [--session S]
   sailorbridge event list [--session S]
   sailorbridge event enable|disable|rm EVENT_ID [--session S]
-  sailorbridge ask --title TITLE --option LABEL::DESCRIPTION --option LABEL::DESCRIPTION --recommend A --reason TEXT [--reason TEXT] [--body-file PATH|-] [--session S]
+  sailorbridge ask --title TITLE --option LABEL::DESCRIPTION --option LABEL::DESCRIPTION --recommend A --reason TEXT [--reason TEXT] --body-file - [--session S]
   sailorbridge ask list [--session S]
   sailorbridge ask get|status DECISION_ID [--session S]
   sailorbridge task create [--description TEXT|-|--body-file PATH|-|--description-file PATH|-] [--pair PAIR] [--draft|--status draft|new] [--type feature|bug|docs|chore] [--priority high|normal|low] [--level d1|d2|d3|d4] [--depends TASK[,TASK]] [--artifact-id ID] [--image PATH] [--session S]
@@ -16283,7 +16573,7 @@ function _usageText() {
   sailorbridge host consume --once --dry-run-start [--host-id H] [--display-name N]
   sailorbridge host service install|uninstall|status [--binary PATH] [--credentials-path PATH] [--workspace-root DIR] [--service-dir DIR] [--service-name NAME]
   sailorbridge host start-request [--credentials-path PATH] [--api-url URL] [--access-token TOKEN] --team T [--host-id H] --agent A --engine codex --roles operator --workspace-mode fresh|git [--git-url URL]
-  sailorbridge host run [--credentials-path PATH] [--api-url URL] [--host-id H] [--display-name N] [--workspace-root DIR]
+  sailorbridge host run [--credentials-path PATH] [--api-url URL] [--host-id H] [--display-name N] [--workspace-root DIR] [--disable-auto-update]
   sailorbridge worker list [--format plain|json]
   sailorbridge worker run [--detach] --worker NAME [--timeout SEC] [--format plain|json] -- ARGV...
   sailorbridge worker job ID [--format plain|json]
@@ -16337,5 +16627,5 @@ function _looksLikeNetworkFailure(message) {
   return /fetch failed|network|ECONN(?:REFUSED|RESET)|ENOTFOUND|ETIMEDOUT/iu.test(message);
 }
 
-//# debugId=3B810968682A4A6F64756E2164756E21
+//# debugId=F9747B92FC45FFDB64756E2164756E21
 //# sourceMappingURL=cli.js.map