@sma1lboy/rove 0.9.110 → 0.9.147

package/dist/cli/kobe.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import{join as $1}from"node:path";import{createInterface as J1}from"node:readline/promises";import{pathToFileURL as Q1}from"node:url";import{spawnSync as L}from"node:child_process";import{constants as u,accessSync as l}from"node:fs";import{homedir as t}from"node:os";import{basename as o,delimiter as r,dirname as i,join as Y}from"node:path";import{fileURLToPath as C}from"node:url";var U={$schema:"https://json.schemastore.org/package.json",name:"@sma1lboy/rove",version:"0.9.110",description:"Rove — the agent multiplexer for your terminal. Run coding agents on parallel tasks with isolated worktrees and persistent sessions.",keywords:["terminal","tui","cli","multiplexer","ai-agents","coding-agent","ai-coding-assistant","agentic-ai","parallel-agents","git-worktree","claude-code","codex","llm","developer-tools"],type:"module",packageManager:"bun@1.3.13",bin:{kobe:"dist/cli/kobe.js",rove:"dist/cli/rove.js"},files:["dist/cli","dist/web-ui","dist/skills","dist/*.wav","README.md","LICENSE"],publishConfig:{access:"public"},repository:{type:"git",url:"git+https://github.com/Sma1lboy/rove.git"},homepage:"https://rove.run",bugs:{url:"https://github.com/Sma1lboy/rove/issues"},engines:{bun:">=1.3.11"},scripts:{dev:"ROVE_DEV=1 bun --conditions=browser ./src/cli/rove.ts","dev:kobe":"KOBE_DEV=1 bun --conditions=browser ./src/cli/kobe.ts","dev:mock":"KOBE_DEV=1 bun ./src/tui-react/mock/host.tsx","dev:sandbox":"bun run scripts/dev-sandbox.ts run","dev:sandbox:reset":"bun run scripts/dev-sandbox.ts reset",build:"bun run scripts/build.ts",compile:"bun run scripts/compile.ts",typecheck:"tsc --noEmit","check-i18n":"bun run scripts/check-i18n.ts",test:"bun run test:fast && bun run test:socket","perf:golden":"bun scripts/perf-golden.ts","pty:soak":"bun scripts/pty-soak.ts","test:fast":"vitest run --passWithNoTests --minWorkers=1 --maxWorkers=8","test:socket":"KOBE_INCLUDE_SOCKET=1 vitest run test/daemon --pool forks --minWorkers=1 --maxWorkers=4 --passWithNoTests","test:socket:coverage":"KOBE_INCLUDE_SOCKET=1 KOBE_COVERAGE_DAEMON=1 vitest run test/daemon --coverage --pool forks --minWorkers=1 --maxWorkers=4 --passWithNoTests","test:behavior":"KOBE_INCLUDE_BEHAVIOR=1 vitest run test/behavior --pool forks --minWorkers=1 --maxWorkers=1 --retry=2 --passWithNoTests","test:render":"bun test test/render --coverage --coverage-reporter=text --coverage-reporter=lcov --coverage-dir=coverage-render",coverage:"vitest run --coverage --passWithNoTests",bench:"vitest bench --run",lint:"biome check .",knip:"knip-bun",postinstall:"bun run scripts/check-preview-deps.ts || true",prepublishOnly:"bun run typecheck && bun run build","plugin-sandbox":"bun run scripts/plugin-sandbox.ts"},"//":"biome.json + bunfig.toml live at the monorepo root since they apply repo-wide; bun.lock also lives at root (workspace-shared).",dependencies:{"@ansi-tools/parser":"^1.0.15","@opentui/core":"0.4.3","@opentui/react":"0.4.3","@xterm/addon-serialize":"^0.14.0","@xterm/addon-unicode11":"^0.9.0","@xterm/headless":"^6.0.0","node-pty":"^1.1.0",react:"^19.2.8",ws:"^8.18.0"},devDependencies:{"@biomejs/biome":"1.9.4","@sma1lboy/kobe-daemon":"0.7.18","@tsconfig/bun":"1.0.10","@types/bun":"1.3.14","@types/node":"25.6.2","@types/react":"^19.2.0","@vitest/coverage-v8":"2.1.9",knip:"^6.14.2","react-devtools-core":"^7.0.1",typescript:"5.8.2",vitest:"2.1.9"},trustedDependencies:[]};var x="rove",j="kobe";var E="ROVE_INVOKED_AS";function F(W=process.env){return W[E]===x?x:j}var k="ROVE_BUN",a="ROVE_NO_BUN_BOOTSTRAP",M="ROVE_SKIP_BUN_CHECK",G=U.engines.bun.match(/\d+\.\d+\.\d+/)?.[0]??"0.0.0",T=(W)=>{try{return l(W,u.X_OK),!0}catch{return!1}},n=(W)=>W==="win32"?"bun.exe":"bun",e=(W)=>{let b=L(W,["--version"],{encoding:"utf8",timeout:5000});if(b.error||b.status!==0)return null;return b.stdout?.split(`
-`)[0]?.trim()??""};function K(W){return W.trim().match(/^v?(\d+\.\d+\.\d+)/)?.[1]??null}function P(W,b=G){let z=K(W),Q=K(b);if(!z||!Q)return!0;let J=z.split(".").map(Number),$=Q.split(".").map(Number);for(let X=0;X<3;X++){let q=J[X]??0,H=$[X]??0;if(q!==H)return q>H}return!0}function g(W=process.env){return W[M]==="1"}function p(W={}){let b=W.env??process.env,z=W.platform??process.platform,Q=W.home??b.HOME??b.USERPROFILE??t(),J=n(z),$=[],X=b[k]?.trim();if(X)$.push(X);for(let D of(b.PATH??b.Path??"").split(r))if(D)$.push(Y(D,J));let q=b.BUN_INSTALL?.trim();if(q)$.push(Y(q,"bin",J));if(Q)$.push(Y(Q,".bun","bin",J));let H=W.launcherDir;if(H)$.push(Y(H,"..","..","node_modules","bun","bin",J)),$.push(Y(H,"..","..","..","bun","bin",J));return $}function W1(W={}){let b=W.isExecutable??T;return p(W).find((z)=>b(z))??null}function w(W={}){let b=W.isExecutable??T,z=W.bunVersionOf??e;if(g(W.env??process.env))return{bun:W1(W),stale:null,unusable:null};let Q=null,J=null;for(let $ of p(W)){if(!b($))continue;let X=z($);if(X===null){J??=$;continue}if(P(X))return{bun:$,stale:Q,unusable:J};Q??={path:$,version:K(X)??X}}return{bun:null,stale:Q,unusable:J}}function B(W){return i(C(W))}function O(W){return o(C(W)).replace(/\.[cm]?[jt]s$/,"")}function b1(W=process.platform){return W==="win32"?["powershell","-NoProfile","-Command","irm bun.sh/install.ps1 | iex"]:["bash","-c","curl -fsSL https://bun.sh/install | bash"]}function y(W=F(),b=process.platform){let z=b==="win32"?'powershell -c "irm bun.sh/install.ps1 | iex"':"curl -fsSL https://bun.sh/install | bash";return[`${W}: Rove runs on the Bun runtime, and no Bun was found on this machine.`,"","Install Bun, then run this command again:",`  ${z}`,"  npm install -g bun          # any platform, if you already have npm","","Or install Bun and Rove together in one step:","  curl -fsSL https://rove.run/install.sh | sh","",`Already have Bun somewhere unusual? Point Rove at it: ${k}=/path/to/bun`,""].join(`
-`)}function h(W,b,z=F()){return[`${z}: this machine's Bun is too old for Rove — found ${b} at ${W}, need ${G} or newer.`,"","Rove's terminals are built on Bun's PTY API. An older Bun ignores it silently,","so every terminal and engine tab would open empty and stay empty.","","Upgrade Bun, then run this command again:","  bun upgrade                 # Bun installed itself (~/.bun)","  brew upgrade bun            # Homebrew","  npm install -g bun@latest   # npm-managed Bun","",`Have a newer Bun elsewhere? Point Rove at it: ${k}=/path/to/bun`,`Run on this one anyway (unsupported, terminals will be blank): ${M}=1`,""].join(`
-`)}function A(W,b=F()){return[`${b}: the Bun at ${W} could not be run — \`${W} --version\` failed or never returned.`,"","Rove skipped it rather than starting through it, which would hang or fail","with a message from that binary instead of this one.","","Reinstall Bun, then run this command again:","  curl -fsSL https://bun.sh/install | bash","",`Have a working Bun elsewhere? Point Rove at it: ${k}=/path/to/bun`,""].join(`
-`)}function f(W=process.env,b=process.stdin,z=process.stdout){if(W[a]==="1")return!1;if(W.CI==="true"||W.CI==="1")return!1;return Boolean(b.isTTY&&z.isTTY)}function I(W={},b=L){let z=W.platform??process.platform,[Q,...J]=b1(z);if(!Q)return null;let $=b(Q,J,{stdio:"inherit"});if($.error||$.status!==0)return null;return w(W).bun}function z1(W){if(typeof W.status==="number")return W.status;if(W.signal)return 128+(Object.hasOwn(V,W.signal)?V[W.signal]:0);return 1}var V={SIGINT:2,SIGQUIT:3,SIGKILL:9,SIGTERM:15};function R(W,b,z,Q=L){let J=Q(W,[b,...z],{stdio:"inherit"});if(J.error)return process.stderr.write(`rove: could not start Bun at ${W}: ${J.error.message}
-`),1;return z1(J)}var N=B(import.meta.url),Z=O(import.meta.url),c=$1(N,`${Z}-run.js`);async function X1(W){let b=J1({input:process.stdin,output:process.stdout});try{let z=(await b.question(W)).trim().toLowerCase();return z===""||z==="y"||z==="yes"}finally{b.close()}}async function Z1(){let W={launcherDir:N},b=w(W);if(b.bun||!f())return b;let z=b.stale?`${Z}: Bun ${b.stale.version} is too old for Rove (needs ${G}+). Install the latest Bun now? [Y/n] `:`${Z}: Rove runs on the Bun runtime, and none is installed. Install Bun now? [Y/n] `;if(!await X1(z))return b;return{bun:I(W),stale:b.stale,unusable:b.unusable}}var v=globalThis.Bun;if(v){let W=v.version;if(W&&!g()&&!P(W))process.stderr.write(h(process.execPath,W,Z)),process.exit(1);await import(Q1(c).href)}else{let{bun:W,stale:b,unusable:z}=await Z1();if(!W){let Q=b?h(b.path,b.version,Z):z?A(z,Z):y(Z);process.stderr.write(Q),process.exit(1)}process.exit(R(W,c,process.argv.slice(2)))}
+import{join as z1}from"node:path";import{createInterface as $1}from"node:readline/promises";import{pathToFileURL as J1}from"node:url";import{spawnSync as L}from"node:child_process";import{constants as m,accessSync as u}from"node:fs";import{homedir as l}from"node:os";import{basename as t,delimiter as o,dirname as r,join as Y}from"node:path";import{fileURLToPath as T}from"node:url";var h={$schema:"https://json.schemastore.org/package.json",name:"@sma1lboy/rove",version:"0.9.147",description:"Rove — the agent multiplexer for your terminal. Run coding agents on parallel tasks with isolated worktrees and persistent sessions.",keywords:["terminal","tui","cli","multiplexer","ai-agents","coding-agent","ai-coding-assistant","agentic-ai","parallel-agents","git-worktree","claude-code","codex","llm","developer-tools"],type:"module",packageManager:"bun@1.3.13",bin:{kobe:"dist/cli/kobe.js",rove:"dist/cli/rove.js"},files:["dist/cli","dist/web-ui","dist/skills","dist/*.wav","README.md","LICENSE"],publishConfig:{access:"public"},repository:{type:"git",url:"git+https://github.com/Sma1lboy/rove.git"},homepage:"https://rove.run",bugs:{url:"https://github.com/Sma1lboy/rove/issues"},engines:{bun:">=1.3.11"},scripts:{dev:"ROVE_DEV=1 bun --conditions=browser ./src/cli/rove.ts","dev:kobe":"KOBE_DEV=1 bun --conditions=browser ./src/cli/kobe.ts","dev:mock":"KOBE_DEV=1 bun ./src/tui-react/mock/host.tsx","dev:sandbox":"bun run scripts/dev-sandbox.ts run","dev:sandbox:reset":"bun run scripts/dev-sandbox.ts reset",build:"bun run scripts/build.ts",compile:"bun run scripts/compile.ts",typecheck:"tsc --noEmit","check-i18n":"bun run scripts/check-i18n.ts",test:"bun run test:fast && bun run test:socket","perf:golden":"bun scripts/perf-golden.ts","pty:soak":"bun scripts/pty-soak.ts","test:fast":"vitest run --passWithNoTests --minWorkers=1 --maxWorkers=8","test:socket":"KOBE_INCLUDE_SOCKET=1 vitest run test/daemon --pool forks --minWorkers=1 --maxWorkers=4 --passWithNoTests","test:socket:coverage":"KOBE_INCLUDE_SOCKET=1 KOBE_COVERAGE_DAEMON=1 vitest run test/daemon --coverage --pool forks --minWorkers=1 --maxWorkers=4 --passWithNoTests","test:behavior":"KOBE_INCLUDE_BEHAVIOR=1 vitest run test/behavior --pool forks --minWorkers=1 --maxWorkers=1 --retry=2 --passWithNoTests","test:render":"bun test test/render --coverage --coverage-reporter=text --coverage-reporter=lcov --coverage-dir=coverage-render",coverage:"vitest run --coverage --passWithNoTests",bench:"vitest bench --run",lint:"biome check .",knip:"knip-bun",postinstall:"bun run scripts/check-preview-deps.ts || true",prepublishOnly:"bun run typecheck && bun run build","plugin-sandbox":"bun run scripts/plugin-sandbox.ts"},"//":"biome.json + bunfig.toml live at the monorepo root since they apply repo-wide; bun.lock also lives at root (workspace-shared).",dependencies:{"@ansi-tools/parser":"^1.0.15","@opentui/core":"0.4.3","@opentui/react":"0.4.3","@xterm/addon-serialize":"^0.14.0","@xterm/addon-unicode11":"^0.9.0","@xterm/headless":"^6.0.0","node-pty":"^1.1.0",react:"^19.2.8",ws:"^8.18.0"},devDependencies:{"@biomejs/biome":"1.9.4","@sma1lboy/kobe-daemon":"0.7.18","@tsconfig/bun":"1.0.10","@types/bun":"1.3.14","@types/node":"25.6.2","@types/react":"^19.2.0","@vitest/coverage-v8":"2.1.9",knip:"^6.14.2","react-devtools-core":"^7.0.1",typescript:"5.8.2",vitest:"2.1.9"},trustedDependencies:[]};var U="rove",C="kobe";var V=C;var k=U;var E="ROVE_INVOKED_AS";function x(W=process.env){return W[E]===k?k:V}var F="ROVE_BUN",i="ROVE_NO_BUN_BOOTSTRAP",O="ROVE_SKIP_BUN_CHECK",G=h.engines.bun.match(/\d+\.\d+\.\d+/)?.[0]??"0.0.0",B=(W)=>{try{return u(W,m.X_OK),!0}catch{return!1}},a=(W)=>W==="win32"?"bun.exe":"bun",n=(W)=>{let b=L(W,["--version"],{encoding:"utf8",timeout:5000});if(b.error||b.status!==0)return null;return b.stdout?.split(`
+`)[0]?.trim()??""};function K(W){return W.trim().match(/^v?(\d+\.\d+\.\d+)/)?.[1]??null}function j(W,b=G){let z=K(W),Q=K(b);if(!z||!Q)return!0;let J=z.split(".").map(Number),$=Q.split(".").map(Number);for(let X=0;X<3;X++){let q=J[X]??0,H=$[X]??0;if(q!==H)return q>H}return!0}function P(W=process.env){return W[O]==="1"}function p(W={}){let b=W.env??process.env,z=W.platform??process.platform,Q=W.home??b.HOME??b.USERPROFILE??l(),J=a(z),$=[],X=b[F]?.trim();if(X)$.push(X);for(let w of(b.PATH??b.Path??"").split(o))if(w)$.push(Y(w,J));let q=b.BUN_INSTALL?.trim();if(q)$.push(Y(q,"bin",J));if(Q)$.push(Y(Q,".bun","bin",J));let H=W.launcherDir;if(H)$.push(Y(H,"..","..","node_modules","bun","bin",J)),$.push(Y(H,"..","..","..","bun","bin",J));return $}function e(W={}){let b=W.isExecutable??B;return p(W).find((z)=>b(z))??null}function D(W={}){let b=W.isExecutable??B,z=W.bunVersionOf??n;if(P(W.env??process.env))return{bun:e(W),stale:null,unusable:null};let Q=null,J=null;for(let $ of p(W)){if(!b($))continue;let X=z($);if(X===null){J??=$;continue}if(j(X))return{bun:$,stale:Q,unusable:J};Q??={path:$,version:K(X)??X}}return{bun:null,stale:Q,unusable:J}}function A(W){return r(T(W))}function R(W){return t(T(W)).replace(/\.[cm]?[jt]s$/,"")}function W1(W=process.platform){return W==="win32"?["powershell","-NoProfile","-Command","irm bun.sh/install.ps1 | iex"]:["bash","-c","curl -fsSL https://bun.sh/install | bash"]}function y(W=x(),b=process.platform){let z=b==="win32"?'powershell -c "irm bun.sh/install.ps1 | iex"':"curl -fsSL https://bun.sh/install | bash";return[`${W}: Rove runs on the Bun runtime, and no Bun was found on this machine.`,"","Install Bun, then run this command again:",`  ${z}`,"  npm install -g bun          # any platform, if you already have npm","","Or install Bun and Rove together in one step:","  curl -fsSL https://rove.run/install.sh | sh","",`Already have Bun somewhere unusual? Point Rove at it: ${F}=/path/to/bun`,""].join(`
+`)}function g(W,b,z=x()){return[`${z}: this machine's Bun is too old for Rove — found ${b} at ${W}, need ${G} or newer.`,"","Rove's terminals are built on Bun's PTY API. An older Bun ignores it silently,","so every terminal and engine tab would open empty and stay empty.","","Upgrade Bun, then run this command again:","  bun upgrade                 # Bun installed itself (~/.bun)","  brew upgrade bun            # Homebrew","  npm install -g bun@latest   # npm-managed Bun","",`Have a newer Bun elsewhere? Point Rove at it: ${F}=/path/to/bun`,`Run on this one anyway (unsupported, terminals will be blank): ${O}=1`,""].join(`
+`)}function I(W,b=x()){return[`${b}: the Bun at ${W} could not be run — \`${W} --version\` failed or never returned.`,"","Rove skipped it rather than starting through it, which would hang or fail","with a message from that binary instead of this one.","","Reinstall Bun, then run this command again:","  curl -fsSL https://bun.sh/install | bash","",`Have a working Bun elsewhere? Point Rove at it: ${F}=/path/to/bun`,""].join(`
+`)}function f(W=process.env,b=process.stdin,z=process.stdout){if(W[i]==="1")return!1;if(W.CI==="true"||W.CI==="1")return!1;return Boolean(b.isTTY&&z.isTTY)}function c(W={},b=L){let z=W.platform??process.platform,[Q,...J]=W1(z);if(!Q)return null;let $=b(Q,J,{stdio:"inherit"});if($.error||$.status!==0)return null;return D(W).bun}function b1(W){if(typeof W.status==="number")return W.status;if(W.signal)return 128+(Object.hasOwn(M,W.signal)?M[W.signal]:0);return 1}var M={SIGINT:2,SIGQUIT:3,SIGKILL:9,SIGTERM:15};function _(W,b,z,Q=L){let J=Q(W,[b,...z],{stdio:"inherit"});if(J.error)return process.stderr.write(`rove: could not start Bun at ${W}: ${J.error.message}
+`),1;return b1(J)}var S=A(import.meta.url),Z=R(import.meta.url),N=z1(S,`${Z}-run.js`);async function Q1(W){let b=$1({input:process.stdin,output:process.stdout});try{let z=(await b.question(W)).trim().toLowerCase();return z===""||z==="y"||z==="yes"}finally{b.close()}}async function X1(){let W={launcherDir:S},b=D(W);if(b.bun||!f())return b;let z=b.stale?`${Z}: Bun ${b.stale.version} is too old for Rove (needs ${G}+). Install the latest Bun now? [Y/n] `:`${Z}: Rove runs on the Bun runtime, and none is installed. Install Bun now? [Y/n] `;if(!await Q1(z))return b;return{bun:c(W),stale:b.stale,unusable:b.unusable}}var v=globalThis.Bun;if(v){let W=v.version;if(W&&!P()&&!j(W))process.stderr.write(g(process.execPath,W,Z)),process.exit(1);await import(J1(N).href)}else{let{bun:W,stale:b,unusable:z}=await X1();if(!W){let Q=b?g(b.path,b.version,Z):z?I(z,Z):y(Z);process.stderr.write(Q),process.exit(1)}process.exit(_(W,N,process.argv.slice(2)))}

package/dist/cli/pty-host-node.mjs

@@ -32,6 +32,14 @@ var COMPAT_STATE_DIR_BASENAME = ".kobe";
 function readRoveEnv(suffix, env = process.env) {
   return env[`${ROVE_ENV_PREFIX}${suffix}`] ?? env[`${LEGACY_KOBE_ENV_PREFIX}${suffix}`];
 }
+function readRoveHomeDirEnv(env = process.env) {
+  for (const key of [`${ROVE_ENV_PREFIX}HOME_DIR`, `${LEGACY_KOBE_ENV_PREFIX}HOME_DIR`]) {
+    const value = env[key]?.trim();
+    if (value)
+      return value;
+  }
+  return;
+}
 
 // ../kobe-daemon/src/daemon/paths.ts
 function stateDirs(homeDir) {
@@ -85,7 +93,7 @@ function fitSocketPath(naturalPath, homeDir, role, pidTag) {
   throw new Error(`daemon socket path exceeds ${SOCKET_PATH_SAFETY_LIMIT} bytes even after fallback: ${fallback}`);
 }
 function resolveDaemonHomeDir(homeDir) {
-  const explicit = homeDir ?? readRoveEnv("HOME_DIR");
+  const explicit = homeDir ?? readRoveHomeDirEnv();
   return explicit && explicit.length > 0 ? explicit : homedir();
 }
 function isWindowsPipePath(path) {
@@ -98,7 +106,7 @@ function defaultPtyHostSocketPath(homeDir, platform = process.platform) {
   const override = readRoveEnv("PTY_SOCKET_PATH");
   if (override && override.length > 0)
     return override;
-  const explicit = homeDir ?? readRoveEnv("HOME_DIR");
+  const explicit = homeDir ?? readRoveHomeDirEnv();
   if (platform === "win32")
     return windowsPipePath(explicit || homedir(), "pty");
   if (explicit && explicit.length > 0) {
@@ -111,19 +119,19 @@ function defaultPtyHostSocketPath(homeDir, platform = process.platform) {
   const home = homedir();
   return fitSocketPath(runtimePath(home, "pty.sock", "pty.pid"), home, "pty");
 }
-function defaultPtyHostPidPath(homeDir = readRoveEnv("HOME_DIR") ?? homedir()) {
+function defaultPtyHostPidPath(homeDir = readRoveHomeDirEnv() ?? homedir()) {
   const override = readRoveEnv("PTY_PID_PATH");
   if (override && override.length > 0)
     return override;
   return runtimePath(homeDir, "pty.pid", "pty.pid");
 }
-function defaultPtyHostLogPath(homeDir = readRoveEnv("HOME_DIR") ?? homedir()) {
+function defaultPtyHostLogPath(homeDir = readRoveHomeDirEnv() ?? homedir()) {
   return join(homeDir, ROVE_STATE_DIR_BASENAME, "pty.log");
 }
-function defaultPtyExitsPath(homeDir = readRoveEnv("HOME_DIR") ?? homedir()) {
+function defaultPtyExitsPath(homeDir = readRoveHomeDirEnv() ?? homedir()) {
   return runtimeDataPath(homeDir, "pty-exits.json");
 }
-function defaultPtyFreezeDir(homeDir = readRoveEnv("HOME_DIR") ?? homedir()) {
+function defaultPtyFreezeDir(homeDir = readRoveHomeDirEnv() ?? homedir()) {
   return runtimeDataPath(homeDir, "pty-sessions");
 }
 
@@ -182,7 +190,7 @@ async function nodePtyDriver(spawn) {
 
 // ../kobe-daemon/src/daemon/pty-server.ts
 import { readFileSync as readFileSync4 } from "node:fs";
-import { mkdir, unlink as unlink2, writeFile } from "node:fs/promises";
+import { mkdir as mkdir2, unlink as unlink2, writeFile } from "node:fs/promises";
 import { createServer } from "node:net";
 import { dirname as dirname3 } from "node:path";
 import { StringDecoder as StringDecoder3 } from "node:string_decoder";
@@ -336,6 +344,30 @@ function requireString(payload, key) {
     throw new Error(`${key} is required`);
   return value;
 }
+
+// ../kobe-daemon/src/daemon/owner-only.ts
+import { chmod, mkdir } from "node:fs/promises";
+import { join as join2 } from "node:path";
+var OWNER_ONLY_DIR_MODE = 448;
+var OWNER_ONLY_FILE_MODE = 384;
+async function tighten(path, mode) {
+  try {
+    await chmod(path, mode);
+  } catch {}
+}
+function tightenDirPermissions(dir) {
+  return tighten(dir, OWNER_ONLY_DIR_MODE);
+}
+function tightenFilePermissions(file) {
+  return tighten(file, OWNER_ONLY_FILE_MODE);
+}
+async function ensureOwnerOnlyDir(dir) {
+  await mkdir(dir, { recursive: true, mode: OWNER_ONLY_DIR_MODE });
+  await tightenDirPermissions(dir);
+}
+function ensureOwnerOnlyStateDir(homeDir) {
+  return ensureOwnerOnlyDir(join2(homeDir, ROVE_STATE_DIR_BASENAME));
+}
 // ../kobe-plugin-sdk/dist/contract.js
 var DAEMON_CHANNELS = [
   "task.snapshot",
@@ -388,7 +420,7 @@ function frameToLine(frame) {
 // ../kobe-daemon/src/daemon/pty-data-migration.ts
 import { existsSync as existsSync3, lstatSync, mkdirSync, renameSync as renameSync2, symlinkSync } from "node:fs";
 import { homedir as homedir2 } from "node:os";
-import { join as join2 } from "node:path";
+import { join as join3 } from "node:path";
 var PTY_HOST_DATA_ENTRIES = ["pty-exits.json", "pty-sessions"];
 function lstatIfExists(path) {
   try {
@@ -397,15 +429,15 @@ function lstatIfExists(path) {
     return;
   }
 }
-function migrateLegacyPtyHostData(homeDir = readRoveEnv("HOME_DIR") ?? homedir2()) {
-  const canonicalDir = join2(homeDir, ROVE_STATE_DIR_BASENAME);
-  const legacyDir = join2(homeDir, COMPAT_STATE_DIR_BASENAME);
+function migrateLegacyPtyHostData(homeDir = readRoveHomeDirEnv() ?? homedir2()) {
+  const canonicalDir = join3(homeDir, ROVE_STATE_DIR_BASENAME);
+  const legacyDir = join3(homeDir, COMPAT_STATE_DIR_BASENAME);
   if (canonicalDir === legacyDir)
     return [];
   const moved = [];
   for (const name of PTY_HOST_DATA_ENTRIES) {
-    const canonical = join2(canonicalDir, name);
-    const legacy = join2(legacyDir, name);
+    const canonical = join3(canonicalDir, name);
+    const legacy = join3(legacyDir, name);
     try {
       if (existsSync3(canonical))
         continue;
@@ -424,7 +456,8 @@ function migrateLegacyPtyHostData(homeDir = readRoveEnv("HOME_DIR") ?? homedir2(
 }
 
 // ../kobe-daemon/src/daemon/pty-exit-store.ts
-import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync } from "node:fs";
+import { randomUUID } from "node:crypto";
+import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync as renameSync3, writeFileSync } from "node:fs";
 import { dirname as dirname2 } from "node:path";
 
 // ../kobe-daemon/src/daemon/terminal-rows.ts
@@ -457,14 +490,34 @@ function plainTail(raw) {
     lines.pop();
   return lines.slice(-TAIL_LINES);
 }
-function readPtyExitRecords(path = defaultPtyExitsPath()) {
+function engineExitCodeFromTail(tail) {
+  for (let i = tail.length - 1;i >= 0; i--) {
+    const m = ENGINE_EXIT_BANNER.exec(tail[i] ?? "");
+    if (m?.[1])
+      return Number.parseInt(m[1], 10);
+  }
+  return null;
+}
+var ENGINE_EXIT_BANNER = /Engine exited \(code (\d+)\)/;
+function readPtyExitStore(path = defaultPtyExitsPath()) {
+  const read = (status, records = {}) => ({
+    records,
+    status,
+    readable: status === "ok" || status === "absent"
+  });
+  let raw;
   try {
-    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    raw = readFileSync2(path, "utf8");
+  } catch (err) {
+    return read(err.code === "ENOENT" ? "absent" : "unreadable");
+  }
+  try {
+    const parsed = JSON.parse(raw);
     if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed))
-      return {};
-    return parsed;
+      return read("unparsable");
+    return read("ok", parsed);
   } catch {
-    return {};
+    return read("unparsable");
   }
 }
 function recordPtyExit(info, path = defaultPtyExitsPath()) {
@@ -472,27 +525,33 @@ function recordPtyExit(info, path = defaultPtyExitsPath()) {
     return;
   if (info.exit.code === 0 && info.exit.signal === null)
     return;
+  const tail = plainTail(info.tail);
   writeRecord(info.key, {
     key: info.key,
     pid: info.pid,
-    code: info.exit.code,
+    code: info.exit.code ?? engineExitCodeFromTail(tail),
     signal: info.exit.signal,
     at: info.exit.at,
-    tail: plainTail(info.tail),
+    tail,
     layer: "pty"
   }, path);
 }
 function writeRecord(storeKey, record, path) {
-  const records = readPtyExitRecords(path);
+  const store = readPtyExitStore(path);
+  if (store.status === "unreadable")
+    throw new Error(`pty-exits store is unreadable (${path}) — refusing to overwrite it`);
+  const records = store.records;
   records[storeKey] = record;
   const newest = Object.entries(records).sort(([, a], [, b]) => a.at < b.at ? 1 : -1).slice(0, MAX_RECORDS);
   mkdirSync2(dirname2(path), { recursive: true });
-  writeFileSync(path, JSON.stringify(Object.fromEntries(newest), null, 2), { encoding: "utf8", mode: 384 });
+  const tmp = `${path}.tmp-${process.pid}-${randomUUID()}`;
+  writeFileSync(tmp, JSON.stringify(Object.fromEntries(newest), null, 2), { encoding: "utf8", mode: 384 });
+  renameSync3(tmp, path);
 }
 
 // ../kobe-daemon/src/daemon/pty-freeze-store.ts
-import { chmodSync, mkdirSync as mkdirSync3, readFileSync as readFileSync3, readdirSync, renameSync as renameSync3, rmSync, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join3 } from "node:path";
+import { chmodSync, mkdirSync as mkdirSync3, readFileSync as readFileSync3, readdirSync, renameSync as renameSync4, rmSync, statSync as statSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { join as join4 } from "node:path";
 import { StringDecoder } from "node:string_decoder";
 
 // ../kobe-daemon/src/daemon/terminal-colors.ts
@@ -602,7 +661,7 @@ function thawSession(record, cap) {
   };
 }
 function recordFile(dir, key) {
-  return join3(dir, `${encodeURIComponent(key)}.json`);
+  return join4(dir, `${encodeURIComponent(key)}.json`);
 }
 function parseRecord(raw) {
   try {
@@ -623,43 +682,64 @@ function parseRecord(raw) {
   }
 }
 var FREEZE_TTL_MS = 14 * 24 * 60 * 60 * 1000;
-var FREEZE_MAX_RECORDS = 64;
+var FREEZE_RESTORE_MAX_BYTES = 64 * 1024 * 1024;
 function updatedAtMs(record) {
   const t = Date.parse(record.updatedAt);
   return Number.isFinite(t) ? t : 0;
 }
-function loadFrozenSessions(dir = defaultPtyFreezeDir(), now = Date.now()) {
+function loadFrozenSessions(dir = defaultPtyFreezeDir(), now = Date.now(), report) {
   let names;
   try {
     names = readdirSync(dir);
   } catch {
     return [];
   }
-  const kept = [];
-  const stale = [];
+  const entries = [];
   for (const name of names) {
     if (!name.endsWith(".json"))
       continue;
+    try {
+      const st = statSync2(join4(dir, name));
+      entries.push({ name, size: st.size, mtimeMs: st.mtimeMs });
+    } catch {}
+  }
+  entries.sort((a, b) => b.mtimeMs - a.mtimeMs);
+  const kept = [];
+  const stale = [];
+  let bytesRead = 0;
+  let deferred = 0;
+  let unreadable = 0;
+  for (const entry of entries) {
+    if (now - entry.mtimeMs > FREEZE_TTL_MS) {
+      stale.push(entry.name);
+      continue;
+    }
+    if (bytesRead + entry.size > FREEZE_RESTORE_MAX_BYTES && kept.length > 0) {
+      deferred++;
+      continue;
+    }
     let record = null;
     try {
-      record = parseRecord(readFileSync3(join3(dir, name), "utf8"));
+      record = parseRecord(readFileSync3(join4(dir, entry.name), "utf8"));
     } catch {}
-    if (!record)
+    bytesRead += entry.size;
+    if (!record) {
+      unreadable++;
       continue;
+    }
     if (now - updatedAtMs(record) > FREEZE_TTL_MS)
-      stale.push(name);
+      stale.push(entry.name);
     else
-      kept.push({ name, record });
+      kept.push(record);
   }
-  kept.sort((a, b) => updatedAtMs(b.record) - updatedAtMs(a.record));
-  for (const over of kept.splice(FREEZE_MAX_RECORDS))
-    stale.push(over.name);
   for (const name of stale) {
     try {
-      rmSync(join3(dir, name), { force: true });
+      rmSync(join4(dir, name), { force: true });
     } catch {}
   }
-  return kept.map((entry) => entry.record);
+  kept.sort((a, b) => updatedAtMs(b) - updatedAtMs(a));
+  report?.({ restored: kept.length, bytesRead, deferred, expired: stale.length, unreadable });
+  return kept;
 }
 var DIR_MODE = 448;
 var FILE_MODE = 384;
@@ -677,7 +757,7 @@ function tightenExistingPermissions(dir) {
     if (!name.endsWith(".json"))
       continue;
     try {
-      chmodSync(join3(dir, name), FILE_MODE);
+      chmodSync(join4(dir, name), FILE_MODE);
     } catch {}
   }
 }
@@ -690,7 +770,7 @@ function fileFreezeSink(dir = defaultPtyFreezeDir()) {
         const target = recordFile(dir, record.key);
         const staging = `${target}.${process.pid}.tmp`;
         writeFileSync2(staging, JSON.stringify(record), { encoding: "utf8", mode: FILE_MODE });
-        renameSync3(staging, target);
+        renameSync4(staging, target);
       } catch {}
     },
     drop(key) {
@@ -1358,6 +1438,20 @@ class PtyHost {
   }
 }
 
+// ../kobe-daemon/src/daemon/socket-guard.ts
+async function listenOnUnixSocket(server, socketPath) {
+  await new Promise((resolve, reject) => {
+    const evented = server;
+    evented.once("error", reject);
+    server.listen(socketPath, () => {
+      evented.removeListener("error", reject);
+      resolve();
+    });
+  });
+  if (!isWindowsPipePath(socketPath))
+    await tightenFilePermissions(socketPath);
+}
+
 // ../kobe-daemon/src/daemon/pty-server.ts
 var DEFAULT_IDLE_EXIT_MS = 60000;
 var DEFAULT_ORPHAN_CHECK_MS = 30000;
@@ -1447,11 +1541,22 @@ async function startPtyHostServer(options = {}) {
     driver: options.driver,
     log
   });
-  ptys.restoreFrozen(loadFrozenSessions(freezeDir));
+  ptys.restoreFrozen(loadFrozenSessions(freezeDir, Date.now(), (s) => {
+    const mib = (bytes) => `${Math.round(bytes / (1024 * 1024))}MB`;
+    const notes = [`restored ${s.restored} (${mib(s.bytesRead)})`];
+    if (s.deferred > 0)
+      notes.push(`${s.deferred} left unread past the ${mib(FREEZE_RESTORE_MAX_BYTES)} budget`);
+    if (s.expired > 0)
+      notes.push(`${s.expired} deleted past the ${FREEZE_TTL_MS / 86400000}-day TTL`);
+    if (s.unreadable > 0)
+      notes.push(`${s.unreadable} unreadable`);
+    log("freeze", notes.join(", "));
+  }));
   const pipeSocket = isWindowsPipePath(socketPath);
+  await ensureOwnerOnlyStateDir(resolveDaemonHomeDir());
   if (!pipeSocket)
-    await mkdir(dirname3(socketPath), { recursive: true });
-  await mkdir(dirname3(pidPath), { recursive: true });
+    await mkdir2(dirname3(socketPath), { recursive: true });
+  await mkdir2(dirname3(pidPath), { recursive: true });
   const server = createServer((socket) => {
     const client = {
       socket,
@@ -1596,10 +1701,7 @@ async function startPtyHostServer(options = {}) {
 `);
     }
   }
-  await new Promise((resolve, reject) => {
-    server.once("error", reject);
-    server.listen(socketPath, () => resolve());
-  });
+  await listenOnUnixSocket(server, socketPath);
   await writeFile(pidPath, `${process.pid}
 `, "utf8");
   if (!pipeSocket) {