@snowyroad/braid 0.74.0 → 0.76.0

package/dist/cli.js

@@ -22,6 +22,7 @@ import {
   InviteExpiredError,
   KeystorePermsError,
   RebootstrapError,
+  STRICT_IPC_ENV_STRIP,
   acquireAgentLock,
   assertKeystorePerms,
   boundedJsonFetch,
@@ -46,16 +47,18 @@ import {
   pickRejectOptionId,
   pinEndpoint,
   readPathWithFallback,
-  redactConfig,
   redeemInvite,
   relayHostSegment,
   resolveAgentSelection,
   resolveConfig,
+  resolveIpcProfile,
   resolveKnobs,
+  resolveScope,
   restoreTerminal,
   sanitizeForTty,
   saveAgent,
   snapshotHttpMetrics,
+  startingLines,
   takeDenialHint,
   toolModeLabel,
   toolStatusLine,
@@ -63,7 +66,7 @@ import {
   validateReplacementToken,
   verifyCardSignature,
   wsToHttp
-} from "./chunk-IARPNMQJ.js";
+} from "./chunk-IBUDDALN.js";
 
 // src/health.ts
 var CEILING_STRIKES_TO_DEAD = 3;
@@ -2786,7 +2789,7 @@ var ActivityBeacon = class {
 // src/adapter.ts
 import { query } from "@anthropic-ai/claude-agent-sdk";
 import { accessSync, constants, existsSync, statSync } from "fs";
-import { delimiter, dirname as dirname2, join as join3, resolve } from "path";
+import { delimiter, dirname as dirname2, join as join2, resolve } from "path";
 import { homedir } from "os";
 
 // src/acp/client.ts
@@ -3529,323 +3532,9 @@ function modelLaunchFor(agent, model) {
 // src/scope/sandbox.ts
 import { SandboxManager, SandboxRuntimeConfigSchema, installWindowsSandbox, getSrtWinPath } from "@anthropic-ai/sandbox-runtime";
 import path2 from "path";
-import { realpathSync as realpathSync2 } from "fs";
+import { realpathSync } from "fs";
 import { spawnSync as nodeSpawnSync } from "child_process";
 
-// src/scope/scopeConfig.ts
-import { realpathSync, readdirSync, lstatSync } from "fs";
-import { execSync } from "child_process";
-import { join as join2 } from "path";
-function resolveIpcProfile(scope, flagValue) {
-  if (flagValue !== void 0) return flagValue;
-  if (scope?.ipcProfile !== void 0) return scope.ipcProfile;
-  return "compat";
-}
-var STRICT_IPC_ENV_STRIP = [
-  "SSH_AUTH_SOCK",
-  "DOCKER_HOST",
-  "DBUS_SESSION_BUS_ADDRESS",
-  "DBUS_SYSTEM_BUS_ADDRESS",
-  "GPG_AGENT_INFO",
-  "DISPLAY",
-  "WAYLAND_DISPLAY"
-];
-function strictIpcDenyRead(env, lstatFn = lstatSync) {
-  const base = ["/run", "/var/run", "/tmp/.X11-unix"];
-  const xdg = env["XDG_RUNTIME_DIR"];
-  const candidates = xdg ? (() => {
-    const segments = xdg.split("/").filter((s) => s.length > 0);
-    if (!xdg.startsWith("/") || segments.length < 2) {
-      console.warn(
-        `[braid] warn: XDG_RUNTIME_DIR="${xdg}" failed the sanity gate (must be absolute, not "/", and have \u22652 path segments) \u2014 skipping from strict IPC denyRead shroud`
-      );
-      return base;
-    }
-    return [...base, xdg];
-  })() : base;
-  return candidates.filter((p) => {
-    try {
-      return !lstatFn(p).isSymbolicLink();
-    } catch {
-      return true;
-    }
-  });
-}
-var DEFAULT_ALLOWED_DOMAINS = [
-  // Anthropic / Claude
-  "api.anthropic.com",
-  "*.anthropic.com",
-  // OpenAI / Codex
-  "api.openai.com",
-  // Google / Gemini
-  "generativelanguage.googleapis.com",
-  "*.googleapis.com",
-  // xAI / Grok
-  "api.x.ai",
-  // Cursor
-  "api.cursor.sh",
-  // opencode (BL-169): its serve process fetches the models.dev registry AT BOOT;
-  // without it opencode dies inside the jail (`ServeError` / ACP connection closed
-  // on every connect). `models.dev` is repro-CONFIRMED (blocked → 403, allowed →
-  // 200 through the srt proxy). `opencode.ai` (opencode's own service) and the
-  // ChatGPT-sign-in OAuth hosts are opencode's documented auth/boot endpoints
-  // (from the 2026-07-02 dry-run that hard-failed opencode). claude-code was
-  // unaffected because all its hosts were already listed above.
-  "models.dev",
-  "opencode.ai",
-  "*.opencode.ai",
-  "auth.openai.com",
-  "chatgpt.com",
-  // npm
-  "registry.npmjs.org",
-  "*.npmjs.org",
-  // PyPI
-  "pypi.org",
-  "files.pythonhosted.org",
-  // Go modules
-  "proxy.golang.org",
-  // Crates.io
-  "crates.io",
-  "static.crates.io",
-  // Source hosts
-  "github.com",
-  "*.github.com",
-  "*.githubusercontent.com",
-  "gitlab.com",
-  "bitbucket.org"
-];
-var PROVIDER_PATHS = {
-  "claude-code": ["~/.claude", "~/.claude.json"],
-  codex: ["~/.codex"],
-  gemini: ["~/.gemini"],
-  grok: ["~/.grok"],
-  cursor: ["~/.cursor"],
-  opencode: ["~/.local/share/opencode", "~/.config/opencode"],
-  goose: ["~/.config/goose"],
-  cline: ["~/.cline"],
-  copilot: ["~/.copilot"],
-  qwen: ["~/.qwen"]
-};
-function expandHome(p, home) {
-  if (p.startsWith("~/")) return `${home}${p.slice(1)}`;
-  if (p === "~") return home;
-  return p;
-}
-function canonicalize(p) {
-  try {
-    return realpathSync(p);
-  } catch {
-    return p;
-  }
-}
-function parseEnvList(val) {
-  if (!val) return [];
-  return val.split(/[,:]/).map((s) => s.trim()).filter((s) => s.length > 0);
-}
-function dedup(arr) {
-  return [...new Set(arr)];
-}
-function darwinMdsCacheDir() {
-  try {
-    const cacheRoot = execSync("/usr/bin/getconf DARWIN_USER_CACHE_DIR", {
-      encoding: "utf8"
-    }).trim();
-    if (!cacheRoot) return [];
-    return [`${cacheRoot.replace(/\/+$/, "")}/mds`];
-  } catch {
-    return [];
-  }
-}
-function resolvePaths(paths, home) {
-  return dedup(paths.map((p) => canonicalize(expandHome(p, home))));
-}
-function foldCase(p, platform) {
-  return platform === "darwin" || platform === "win32" ? p.toLowerCase() : p;
-}
-function checkGrantsAgainstReservations(grants, reservations, platform) {
-  const sep2 = platform === "win32" ? "\\" : "/";
-  const out = [];
-  for (const g of grants) {
-    const gf = foldCase(g.path, platform);
-    for (const r of reservations) {
-      const rf = foldCase(r, platform);
-      if (gf === rf) {
-        out.push({ grant: g.path, source: g.source, reservation: r, relation: "equal" });
-      } else if (gf.startsWith(rf + sep2)) {
-        out.push({ grant: g.path, source: g.source, reservation: r, relation: "descendant" });
-      }
-    }
-  }
-  return out;
-}
-function resolveScope(cfg, provider, env, platform = process.platform) {
-  const scope = cfg.scope ?? {};
-  const home = env["HOME"] ?? "";
-  const cwd = env["PWD"] ?? process.cwd();
-  const tmpDir = env["TMPDIR"] ?? "/tmp";
-  const braidConfigDir = env["BRAID_CONFIG_DIR"]?.trim() || expandHome("~/.braid", home);
-  const legacyArpConfigDir = expandHome("~/.arp", home);
-  const protectedConfigDirs = braidConfigDir === legacyArpConfigDir ? [braidConfigDir] : [braidConfigDir, legacyArpConfigDir];
-  const flagOverride = cfg.scopeFlags?.scopeOverride;
-  const disabled = flagOverride !== void 0 ? flagOverride === "off" : scope.disabled === true || env["BRAID_SCOPE"] === "off";
-  const secretDirs = [
-    "~/.ssh",
-    "~/.aws",
-    "~/.gnupg",
-    "~/.kube/config"
-  ].map((p) => expandHome(p, home));
-  const protectedConfigDirEntries = protectedConfigDirs.flatMap((configDirPath) => {
-    if (platform !== "win32") return [configDirPath];
-    try {
-      const children = readdirSync(configDirPath, { withFileTypes: true });
-      const denied = children.filter((entry) => entry.name !== "runtime").map((entry) => canonicalize(join2(configDirPath, entry.name)));
-      if (denied.length === 0) return [configDirPath];
-      return denied;
-    } catch {
-      return [configDirPath];
-    }
-  });
-  const providerPaths = PROVIDER_PATHS[provider].map((p) => expandHome(p, home));
-  const uid = process.getuid?.();
-  const claudeTmpRoot = provider === "claude-code" && uid !== void 0 ? [`${canonicalize("/tmp")}/claude-${uid}`, `${canonicalize("/tmp")}/claude-*-cwd`] : [];
-  const mdsCacheDir = platform === "darwin" ? darwinMdsCacheDir() : [];
-  const opAllowWrite = (scope.allowWrite ?? []).map((p) => expandHome(p, home));
-  const envAllowWrite = parseEnvList(env["BRAID_SCOPE_ALLOW_WRITE"]).map((p) => expandHome(p, home));
-  const flagAllowWrite = (cfg.scopeFlags?.allowWrite ?? []).map((p) => expandHome(p, home));
-  const rawAllowWrite = [
-    cwd,
-    ...providerPaths,
-    ...claudeTmpRoot,
-    ...mdsCacheDir,
-    expandHome("~/.npm", home),
-    tmpDir,
-    ...opAllowWrite,
-    ...envAllowWrite,
-    ...flagAllowWrite
-  ];
-  const allowWrite = resolvePaths(rawAllowWrite, home);
-  const rawDenyWrite = [
-    ...secretDirs,
-    ...protectedConfigDirEntries,
-    ...(scope.denyWrite ?? []).map((p) => expandHome(p, home)),
-    ...parseEnvList(env["BRAID_SCOPE_DENY_WRITE"]).map((p) => expandHome(p, home))
-  ];
-  const denyWrite = resolvePaths(rawDenyWrite, home);
-  const ipcProfile = resolveIpcProfile(scope, cfg.scopeFlags?.ipcProfile);
-  const rawDenyRead = [
-    ...secretDirs,
-    ...protectedConfigDirEntries,
-    ...(scope.denyRead ?? []).map((p) => expandHome(p, home)),
-    ...parseEnvList(env["BRAID_SCOPE_DENY_READ"]).map((p) => expandHome(p, home))
-  ];
-  const denyRead = dedup([
-    ...resolvePaths(rawDenyRead, home),
-    ...ipcProfile === "strict" && platform === "linux" ? strictIpcDenyRead(env) : []
-  ]);
-  const opAllowRead = (scope.allowRead ?? []).map((p) => expandHome(p, home));
-  const envAllowRead = parseEnvList(env["BRAID_SCOPE_ALLOW_READ"]).map((p) => expandHome(p, home));
-  const flagAllowRead = (cfg.scopeFlags?.allowRead ?? []).map((p) => expandHome(p, home));
-  const rawAllowRead = [
-    ...opAllowRead,
-    ...envAllowRead,
-    ...flagAllowRead
-  ];
-  const allowRead = resolvePaths(rawAllowRead, home);
-  if (!disabled) {
-    const reservations = resolvePaths([...secretDirs, ...protectedConfigDirs], home);
-    const labelled = (paths, source) => resolvePaths(paths, home).map((p) => ({ path: p, source }));
-    const grants = [
-      ...labelled([cwd], "launch directory (cwd)"),
-      ...labelled(providerPaths, "provider default paths"),
-      ...labelled(opAllowWrite, "scope.allowWrite"),
-      ...labelled(envAllowWrite, "BRAID_SCOPE_ALLOW_WRITE"),
-      ...labelled(flagAllowWrite, "--allow-write"),
-      ...labelled(opAllowRead, "scope.allowRead"),
-      ...labelled(envAllowRead, "BRAID_SCOPE_ALLOW_READ"),
-      ...labelled(flagAllowRead, "--allow-read")
-    ];
-    const conflicts = checkGrantsAgainstReservations(grants, reservations, platform);
-    if (conflicts.length > 0) {
-      const detail = conflicts.map((c) => `  - ${c.source}: "${c.grant}" is ${c.relation === "equal" ? "" : "inside "}the protected path "${c.reservation}"`).join("\n");
-      throw new Error(
-        `[braid] SCOPE ERROR: a grant covers a protected credential/secret path and was refused:
-${detail}
-Protected paths (never grantable): ${reservations.join(", ")}
-Narrow the grant to a path outside the protected set. (Ancestor grants like "~" are fine \u2014 the protected dirs are carved back out automatically.)`
-      );
-    }
-    const writableDefaults = resolvePaths(
-      [...providerPaths, expandHome("~/.npm", home), tmpDir],
-      home
-    );
-    const resolvedConfigDir = canonicalize(braidConfigDir);
-    const placement = checkGrantsAgainstReservations(
-      [{ path: resolvedConfigDir, source: "BRAID_CONFIG_DIR" }],
-      writableDefaults,
-      platform
-    );
-    if (placement.length > 0) {
-      const c = placement[0];
-      throw new Error(
-        `[braid] SCOPE ERROR: BRAID_CONFIG_DIR ("${c.grant}") is ${c.relation === "equal" ? "" : "inside "}a default provider-writable location ("${c.reservation}"). The bridge credential store must live outside provider/tmp/npm paths. Move it (default: ~/.braid) or unset BRAID_CONFIG_DIR.`
-      );
-    }
-  }
-  const allowedDomains = dedup([
-    ...DEFAULT_ALLOWED_DOMAINS,
-    ...scope.network?.allowedDomains ?? [],
-    ...cfg.derivedAllowedDomains ?? [],
-    ...parseEnvList(env["BRAID_SCOPE_ALLOW_DOMAINS"]),
-    ...cfg.scopeFlags?.allowDomains ?? []
-  ]);
-  const deniedDomains = dedup([
-    ...scope.network?.deniedDomains ?? [],
-    ...parseEnvList(env["BRAID_SCOPE_DENY_DOMAINS"])
-  ]);
-  function describe() {
-    const lines = [];
-    if (disabled) {
-      lines.push("[scope] SANDBOX DISABLED (BRAID_SCOPE=off or scope.disabled:true) \u2014 agent runs unconfined");
-      return lines;
-    }
-    lines.push("[scope] Agent sandbox is ACTIVE");
-    lines.push(
-      `[scope] protected (never readable/writable by the agent): ${resolvePaths([...secretDirs, ...protectedConfigDirs], home).join(", ")}`
-    );
-    lines.push(`[scope] cwd (writable): ${cwd}`);
-    if (providerPaths.length > 0) {
-      lines.push(`[scope] provider paths (writable): ${providerPaths.join(", ")}`);
-    }
-    lines.push(`[scope] allowed domains (${allowedDomains.length}): ${allowedDomains.slice(0, 5).join(", ")}${allowedDomains.length > 5 ? " ..." : ""}`);
-    if ((cfg.derivedAllowedDomains ?? []).length > 0) {
-      lines.push(`[scope] model endpoints (derived): ${(cfg.derivedAllowedDomains ?? []).join(", ")}`);
-    }
-    lines.push(`[scope] denied read: ${denyRead.join(", ")}`);
-    if (denyWrite.length > 0) {
-      lines.push(`[scope] denied write: ${denyWrite.join(", ")}`);
-    }
-    if (deniedDomains.length > 0) {
-      lines.push(`[scope] denied domains: ${deniedDomains.join(", ")}`);
-    }
-    if (ipcProfile === "compat") {
-      lines.push("[scope] ipc profile: compat \u2014 all unix sockets reachable inside the jail (Linux seccomp constraint)");
-    } else {
-      lines.push("[scope] ipc profile: strict \u2014 /run, /var/run, XDG_RUNTIME_DIR, /tmp/.X11-unix hidden; socket env vars stripped");
-    }
-    lines.push("[scope] To widen: add paths to scope.allowWrite/allowRead in agent config, or BRAID_SCOPE_ALLOW_WRITE/BRAID_SCOPE=off env.");
-    return lines;
-  }
-  return {
-    runtimeConfig: {
-      filesystem: { allowWrite, denyWrite, allowRead, denyRead },
-      network: { allowedDomains, deniedDomains }
-    },
-    disabled,
-    ipcProfile,
-    describe
-  };
-}
-
 // src/mcp/broker.ts
 import http from "http";
 import os from "os";
@@ -4201,7 +3890,7 @@ function brokerSocketNetworkExtras() {
     const dir = brokerSocketDir();
     const subpaths = [dir];
     try {
-      const resolved = path2.join(realpathSync2(path2.dirname(dir)), path2.basename(dir));
+      const resolved = path2.join(realpathSync(path2.dirname(dir)), path2.basename(dir));
       if (resolved !== dir) subpaths.push(resolved);
     } catch {
     }
@@ -4397,13 +4086,13 @@ function pinned(pkg) {
 function computeNpxLaunch(platform, execPath, exists) {
   const nodeDir = dirname2(execPath);
   if (platform === "win32") {
-    const npxCliJs = join3(nodeDir, "node_modules", "npm", "bin", "npx-cli.js");
+    const npxCliJs = join2(nodeDir, "node_modules", "npm", "bin", "npx-cli.js");
     if (exists(npxCliJs)) {
       return { command: execPath, argsPrefix: [npxCliJs] };
     }
   }
   for (const name of ["npx", "npx.cmd"]) {
-    const candidate = join3(nodeDir, name);
+    const candidate = join2(nodeDir, name);
     if (exists(candidate)) {
       return { command: candidate, argsPrefix: [] };
     }
@@ -4426,7 +4115,7 @@ function which(cmd, pathEnv = process.env.PATH ?? "", platform = process.platfor
   const name = platform === "win32" && !cmd.toLowerCase().endsWith(".exe") ? `${cmd}.exe` : cmd;
   for (const dir of pathEnv.split(delimiter)) {
     if (!dir) continue;
-    const candidate = join3(dir, name);
+    const candidate = join2(dir, name);
     try {
       accessSync(candidate, constants.X_OK);
       if (statSync(candidate).isFile()) return resolve(candidate);
@@ -4554,8 +4243,8 @@ function launchSpecFor(agent) {
   }
 }
 function handoffFallbackDirs(name, home) {
-  const dirs = [join3(home, ".local", "bin")];
-  if (name === "claude") dirs.push(join3(home, ".claude", "local"));
+  const dirs = [join2(home, ".local", "bin")];
+  if (name === "claude") dirs.push(join2(home, ".claude", "local"));
   return dirs;
 }
 function findHandoffBinary(name, pathEnv = process.env.PATH ?? "", home = homedir(), platform = process.platform) {
@@ -5171,8 +4860,8 @@ function withTimeout(p, ms) {
 }
 
 // src/cardFromDisk.ts
-import { readdirSync as readdirSync2, readFileSync as readFileSync2, lstatSync as lstatSync2 } from "fs";
-import { join as join4, relative, sep } from "path";
+import { readdirSync, readFileSync as readFileSync2, lstatSync } from "fs";
+import { join as join3, relative, sep } from "path";
 import { homedir as homedir2 } from "os";
 
 // src/skillMd.ts
@@ -5226,22 +4915,22 @@ function parseSkillFrontmatter(raw) {
 var MAX_DESC = 500;
 var MAX_NAME = 100;
 var MAX_SKILLS = 200;
-var skillsRoot = () => process.env.BRAID_SKILLS_DIR ?? join4(homedir2(), ".claude", "skills");
-var pluginsRoot = () => process.env.BRAID_PLUGINS_DIR ?? join4(homedir2(), ".claude", "plugins");
+var skillsRoot = () => process.env.BRAID_SKILLS_DIR ?? join3(homedir2(), ".claude", "skills");
+var pluginsRoot = () => process.env.BRAID_PLUGINS_DIR ?? join3(homedir2(), ".claude", "plugins");
 function collectSkillMd(root) {
   const out = [];
   const walk = (dir) => {
     let entries;
     try {
-      entries = readdirSync2(dir);
+      entries = readdirSync(dir);
     } catch {
       return;
     }
     for (const name of entries) {
-      const full = join4(dir, name);
+      const full = join3(dir, name);
       let st;
       try {
-        st = lstatSync2(full);
+        st = lstatSync(full);
       } catch {
         continue;
       }
@@ -5329,20 +5018,20 @@ import {
   writeFileSync as writeFileSync2,
   renameSync as renameSync2,
   chmodSync as chmodSync2,
-  readdirSync as readdirSync3,
+  readdirSync as readdirSync2,
   statSync as statSync2,
   existsSync as existsSync2
 } from "fs";
 import { createHash } from "crypto";
 import { homedir as homedir3 } from "os";
-import { join as join5, dirname as dirname3 } from "path";
+import { join as join4, dirname as dirname3 } from "path";
 function safe2(s) {
   return s.replace(/[^a-zA-Z0-9._-]/g, "_");
 }
 function cardCacheFilePath(cfg) {
   const dir = configDir(process.env);
   const safeName = safe2(cfg.agentName);
-  return join5(dir, "card-cache", relayHostSegment(cfg.relayWsUrl), `${safeName}.json`);
+  return join4(dir, "card-cache", relayHostSegment(cfg.relayWsUrl), `${safeName}.json`);
 }
 function cardCacheReadPath(cfg) {
   return readPathWithFallback(
@@ -5356,12 +5045,12 @@ function collectSkillMdPaths(root) {
   function walk(dir) {
     let entries;
     try {
-      entries = readdirSync3(dir);
+      entries = readdirSync2(dir);
     } catch {
       return;
     }
     for (const entry of entries) {
-      const full = join5(dir, entry);
+      const full = join4(dir, entry);
       let st;
       try {
         st = statSync2(full);
@@ -5378,7 +5067,7 @@ function collectSkillMdPaths(root) {
   walk(root);
   return out;
 }
-function computeCapabilityFingerprint(cfg, skillsDir = process.env.BRAID_SKILLS_DIR ?? join5(homedir3(), ".claude", "skills"), pluginsDir = process.env.BRAID_PLUGINS_DIR ?? join5(homedir3(), ".claude", "plugins")) {
+function computeCapabilityFingerprint(cfg, skillsDir = process.env.BRAID_SKILLS_DIR ?? join4(homedir3(), ".claude", "skills"), pluginsDir = process.env.BRAID_PLUGINS_DIR ?? join4(homedir3(), ".claude", "plugins")) {
   const paths1 = collectSkillMdPaths(skillsDir);
   const paths2 = collectSkillMdPaths(pluginsDir);
   const allPaths = [...paths1, ...paths2].sort();
@@ -5517,11 +5206,11 @@ function installCrashGuard() {
 
 // src/service/needsHumanMarker.ts
 import { mkdirSync as mkdirSync5, chmodSync as chmodSync4, writeFileSync as writeFileSync5, readFileSync as readFileSync6, existsSync as existsSync6, unlinkSync as unlinkSync2 } from "fs";
-import { join as join8 } from "path";
+import { join as join7 } from "path";
 
 // src/service/install.ts
-import { existsSync as existsSync5, readdirSync as readdirSync5, readFileSync as readFileSync5 } from "fs";
-import { join as join7 } from "path";
+import { existsSync as existsSync5, readdirSync as readdirSync4, readFileSync as readFileSync5 } from "fs";
+import { join as join6 } from "path";
 
 // src/service/runtime.ts
 import {
@@ -5529,30 +5218,30 @@ import {
   mkdirSync as mkdirSync3,
   readFileSync as readFileSync4,
   writeFileSync as writeFileSync3,
-  readdirSync as readdirSync4,
+  readdirSync as readdirSync3,
   renameSync as renameSync3,
   rmSync,
   symlinkSync,
   readlinkSync,
-  lstatSync as lstatSync3,
+  lstatSync as lstatSync2,
   existsSync as existsSync3
 } from "fs";
 import { execFileSync } from "child_process";
 import { createHash as createHash2 } from "crypto";
-import { dirname as dirname4, join as join6 } from "path";
+import { dirname as dirname4, join as join5 } from "path";
 import { homedir as homedir4 } from "os";
 import { fileURLToPath } from "url";
 function defaultBraidDir() {
   const override = process.env.BRAID_CONFIG_DIR?.trim();
-  return override && override !== "" ? override : join6(homedir4(), ".braid");
+  return override && override !== "" ? override : join5(homedir4(), ".braid");
 }
 function runtimeRootForRead(braidDir, platform) {
-  const primary = join6(braidDir, "runtime");
-  const markerOf = (root) => platform === "win32" ? currentTxtPath(root) : join6(root, "current");
+  const primary = join5(braidDir, "runtime");
+  const markerOf = (root) => platform === "win32" ? currentTxtPath(root) : join5(root, "current");
   if (existsSync3(markerOf(primary))) return primary;
   const override = process.env.BRAID_CONFIG_DIR?.trim();
-  if (!override && braidDir === join6(homedir4(), ".braid")) {
-    const legacy = join6(homedir4(), ".arp", "runtime");
+  if (!override && braidDir === join5(homedir4(), ".braid")) {
+    const legacy = join5(homedir4(), ".arp", "runtime");
     if (existsSync3(markerOf(legacy))) return legacy;
   }
   return primary;
@@ -5560,7 +5249,7 @@ function runtimeRootForRead(braidDir, platform) {
 function runningPackageRoot() {
   let dir = dirname4(fileURLToPath(import.meta.url));
   for (let i = 0; i < 6; i++) {
-    if (existsSync3(join6(dir, "package.json")) && existsSync3(join6(dir, "dist"))) return dir;
+    if (existsSync3(join5(dir, "package.json")) && existsSync3(join5(dir, "dist"))) return dir;
     const parent = dirname4(dir);
     if (parent === dir) break;
     dir = parent;
@@ -5568,13 +5257,13 @@ function runningPackageRoot() {
   return dirname4(dirname4(fileURLToPath(import.meta.url)));
 }
 function currentTxtPath(runtimeRoot) {
-  return join6(runtimeRoot, "current.txt");
+  return join5(runtimeRoot, "current.txt");
 }
 function pinCurrentRuntime(opts = {}) {
   const sourceDir = opts.sourceDir ?? runningPackageRoot();
   const braidDir = opts.braidDir ?? defaultBraidDir();
   const platform = opts.platform ?? process.platform;
-  const pkg = JSON.parse(readFileSync4(join6(sourceDir, "package.json"), "utf8"));
+  const pkg = JSON.parse(readFileSync4(join5(sourceDir, "package.json"), "utf8"));
   const version = String(pkg.version ?? "").trim();
   if (version === "") throw new Error(`cannot pin runtime: package.json at ${sourceDir} has no version`);
   if (!/^\d+\.\d+\.\d+$/.test(version)) {
@@ -5583,20 +5272,20 @@ function pinCurrentRuntime(opts = {}) {
     );
   }
   const prodDeps = Object.keys(pkg.dependencies ?? {});
-  const runtimeRoot = join6(braidDir, "runtime");
-  const versionDir = join6(runtimeRoot, version);
+  const runtimeRoot = join5(braidDir, "runtime");
+  const versionDir = join5(runtimeRoot, version);
   mkdirSync3(versionDir, { recursive: true });
-  cpSync(join6(sourceDir, "dist"), join6(versionDir, "dist"), { recursive: true, force: true });
-  cpSync(join6(sourceDir, "package.json"), join6(versionDir, "package.json"), { force: true });
-  const shrinkwrapSrc = join6(sourceDir, "npm-shrinkwrap.json");
+  cpSync(join5(sourceDir, "dist"), join5(versionDir, "dist"), { recursive: true, force: true });
+  cpSync(join5(sourceDir, "package.json"), join5(versionDir, "package.json"), { force: true });
+  const shrinkwrapSrc = join5(sourceDir, "npm-shrinkwrap.json");
   const hasShrinkwrap = existsSync3(shrinkwrapSrc);
   if (hasShrinkwrap) {
-    cpSync(shrinkwrapSrc, join6(versionDir, "npm-shrinkwrap.json"), { force: true });
+    cpSync(shrinkwrapSrc, join5(versionDir, "npm-shrinkwrap.json"), { force: true });
   }
   const method = populateNodeModules(sourceDir, versionDir, prodDeps, hasShrinkwrap, opts.exec);
-  const shrinkwrapSha256 = hasShrinkwrap ? createHash2("sha256").update(readFileSync4(join6(versionDir, "npm-shrinkwrap.json"))).digest("hex") : null;
+  const shrinkwrapSha256 = hasShrinkwrap ? createHash2("sha256").update(readFileSync4(join5(versionDir, "npm-shrinkwrap.json"))).digest("hex") : null;
   writeFileSync3(
-    join6(versionDir, "closure.json"),
+    join5(versionDir, "closure.json"),
     JSON.stringify({ method, shrinkwrapSha256 }, null, 2) + "\n"
   );
   const previousVersion = installedRuntimeVersion({ braidDir, platform });
@@ -5612,12 +5301,12 @@ function pinCurrentRuntime(opts = {}) {
 function populateNodeModules(sourceDir, versionDir, prodDeps, hasShrinkwrap, exec) {
   if (prodDeps.length === 0) return "none";
   const marker = prodDeps[0];
-  const dest = join6(versionDir, "node_modules");
+  const dest = join5(versionDir, "node_modules");
   const plainTree = findCopyableNodeModules(sourceDir, marker);
   if (plainTree) {
     rmSync(dest, { recursive: true, force: true });
     cpSync(plainTree, dest, { recursive: true, force: true });
-    if (existsSync3(join6(dest, marker))) return "copy";
+    if (existsSync3(join5(dest, marker))) return "copy";
     rmSync(dest, { recursive: true, force: true });
   }
   return npmInstallProdDeps(versionDir, marker, hasShrinkwrap, exec);
@@ -5625,10 +5314,10 @@ function populateNodeModules(sourceDir, versionDir, prodDeps, hasShrinkwrap, exe
 function findCopyableNodeModules(sourceDir, marker) {
   let dir = sourceDir;
   for (let i = 0; i < 8; i++) {
-    const nm = join6(dir, "node_modules");
-    const markerPath = join6(nm, marker);
+    const nm = join5(dir, "node_modules");
+    const markerPath = join5(nm, marker);
     if (existsSync3(markerPath)) {
-      if (!lstatSync3(markerPath).isSymbolicLink()) return nm;
+      if (!lstatSync2(markerPath).isSymbolicLink()) return nm;
       return null;
     }
     const parent = dirname4(dir);
@@ -5655,7 +5344,7 @@ function npmInstallProdDeps(versionDir, marker, hasShrinkwrap, exec) {
       `pinned runtime at ${versionDir} could not obtain its production dependencies (\`npm ${args[0]}\` failed \u2014 npm missing, no network, or shrinkwrap/platform mismatch?). Fix and re-run, or the service will crash-loop with ERR_MODULE_NOT_FOUND. Underlying error: ${detail}`
     );
   }
-  if (!existsSync3(join6(versionDir, "node_modules", marker))) {
+  if (!existsSync3(join5(versionDir, "node_modules", marker))) {
     throw new Error(
       `pinned runtime at ${versionDir} is missing dependency "${marker}" after \`npm ${args[0]}\`. Refusing to leave a runtime that will crash-loop with ERR_MODULE_NOT_FOUND.`
     );
@@ -5667,7 +5356,7 @@ function pruneOldVersions(runtimeRoot, currentVersion, previousVersion) {
   if (previousVersion && previousVersion !== currentVersion) keep.add(previousVersion);
   let entries;
   try {
-    entries = readdirSync4(runtimeRoot);
+    entries = readdirSync3(runtimeRoot);
   } catch {
     return;
   }
@@ -5676,9 +5365,9 @@ function pruneOldVersions(runtimeRoot, currentVersion, previousVersion) {
     if (name === "current.txt") continue;
     if (name.startsWith("current.tmp.")) continue;
     if (keep.has(name)) continue;
-    const dir = join6(runtimeRoot, name);
+    const dir = join5(runtimeRoot, name);
     try {
-      if (!lstatSync3(dir).isDirectory()) continue;
+      if (!lstatSync2(dir).isDirectory()) continue;
     } catch {
       continue;
     }
@@ -5687,8 +5376,8 @@ function pruneOldVersions(runtimeRoot, currentVersion, previousVersion) {
 }
 function flipCurrentSymlink(runtimeRoot, version) {
   mkdirSync3(runtimeRoot, { recursive: true });
-  const current = join6(runtimeRoot, "current");
-  const tmp = join6(runtimeRoot, `current.tmp.${process.pid}.${Date.now()}`);
+  const current = join5(runtimeRoot, "current");
+  const tmp = join5(runtimeRoot, `current.tmp.${process.pid}.${Date.now()}`);
   try {
     rmSync(tmp, { force: true });
   } catch {
@@ -5708,7 +5397,7 @@ function installedRuntimeVersion(q = {}) {
       return null;
     }
   }
-  const current = join6(runtimeRoot, "current");
+  const current = join5(runtimeRoot, "current");
   try {
     const target = readlinkSync(current);
     return target.split("/").pop() ?? null;
@@ -5721,9 +5410,9 @@ function pinnedEntryPath(q = {}) {
   const platform = q.platform ?? process.platform;
   if (platform === "win32") {
     const version = installedRuntimeVersion({ braidDir, platform });
-    if (version) return join6(braidDir, "runtime", version, "dist", "cli.js");
+    if (version) return join5(braidDir, "runtime", version, "dist", "cli.js");
   }
-  return join6(braidDir, "runtime", "current", "dist", "cli.js");
+  return join5(braidDir, "runtime", "current", "dist", "cli.js");
 }
 function installedClosureRecord(q = {}) {
   const braidDir = q.braidDir ?? defaultBraidDir();
@@ -5731,7 +5420,7 @@ function installedClosureRecord(q = {}) {
   const version = installedRuntimeVersion(q);
   if (!version) return null;
   try {
-    const raw = JSON.parse(readFileSync4(join6(runtimeRootForRead(braidDir, platform), version, "closure.json"), "utf8"));
+    const raw = JSON.parse(readFileSync4(join5(runtimeRootForRead(braidDir, platform), version, "closure.json"), "utf8"));
     if (typeof raw.method !== "string") return null;
     return {
       method: raw.method,
@@ -6017,13 +5706,13 @@ function validateServiceKey(name) {
   return trimmed;
 }
 function runDir(braidDir) {
-  return join7(braidDir, "run");
+  return join6(braidDir, "run");
 }
 function controlSocketPath(name, braidDir, platform = process.platform) {
   if (platform === "win32") {
     return `\\\\.\\pipe\\braid-${name}`;
   }
-  return join7(runDir(braidDir), `${name}.sock`);
+  return join6(runDir(braidDir), `${name}.sock`);
 }
 function legacyControlSocketPath(name, platform = process.platform) {
   if (platform !== "win32") return null;
@@ -6047,7 +5736,7 @@ function controlSocketReadPath(name, braidDir, platform = process.platform) {
 }
 function controlTokenPath(name, braidDir, platform = process.platform) {
   if (platform !== "win32") return null;
-  return join7(runDir(braidDir), `${name}.token`);
+  return join6(runDir(braidDir), `${name}.token`);
 }
 function readControlToken(name, braidDir, platform = process.platform) {
   let p = controlTokenPath(name, braidDir, platform);
@@ -6093,7 +5782,7 @@ function sleep(ms) {
 }
 function enumerateInstalledServices(platform, deps) {
   if (platform === "darwin") {
-    const dir = join7(deps.homeDir, "Library", "LaunchAgents");
+    const dir = join6(deps.homeDir, "Library", "LaunchAgents");
     return dedupe([
       ...globNames(dir, /^com\.snowyroad\.braid\.(.+)\.plist$/),
       ...globNames(dir, /^dev\.arp\.bridge\.(.+)\.plist$/)
@@ -6101,7 +5790,7 @@ function enumerateInstalledServices(platform, deps) {
     ]);
   }
   if (platform === "linux") {
-    const dir = join7(deps.homeDir, ".config", "systemd", "user");
+    const dir = join6(deps.homeDir, ".config", "systemd", "user");
     return dedupe([
       ...globNames(dir, /^braid-(.+)\.service$/),
       ...globNames(dir, /^arp-bridge-(.+)\.service$/)
@@ -6115,19 +5804,19 @@ function dedupe(names) {
 }
 function isLegacyFamilyService(platform, name, homeDir) {
   if (platform === "darwin") {
-    const dir = join7(homeDir, "Library", "LaunchAgents");
-    return !existsSync5(join7(dir, `com.snowyroad.braid.${name}.plist`)) && existsSync5(join7(dir, `dev.arp.bridge.${name}.plist`));
+    const dir = join6(homeDir, "Library", "LaunchAgents");
+    return !existsSync5(join6(dir, `com.snowyroad.braid.${name}.plist`)) && existsSync5(join6(dir, `dev.arp.bridge.${name}.plist`));
   }
   if (platform === "linux") {
-    const dir = join7(homeDir, ".config", "systemd", "user");
-    return !existsSync5(join7(dir, `braid-${name}.service`)) && existsSync5(join7(dir, `arp-bridge-${name}.service`));
+    const dir = join6(homeDir, ".config", "systemd", "user");
+    return !existsSync5(join6(dir, `braid-${name}.service`)) && existsSync5(join6(dir, `arp-bridge-${name}.service`));
   }
   return false;
 }
 function globNames(dir, pattern) {
   let entries = [];
   try {
-    entries = readdirSync5(dir);
+    entries = readdirSync4(dir);
   } catch {
     return [];
   }
@@ -6171,7 +5860,7 @@ async function updateInstalled(opts) {
 
 // src/service/needsHumanMarker.ts
 function needsHumanMarkerPath(name, braidDir) {
-  return join8(runDir(braidDir), `${name}.needs-human`);
+  return join7(runDir(braidDir), `${name}.needs-human`);
 }
 function writeNeedsHumanMarker(name, reason, braidDir) {
   try {
@@ -7913,7 +7602,7 @@ import { homedir as homedir6 } from "os";
 
 // src/service/manager.ts
 import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync7, rmSync as rmSync2, existsSync as existsSync7 } from "fs";
-import { join as join10 } from "path";
+import { join as join9 } from "path";
 
 // src/service/templates.ts
 function escapeXml(s) {
@@ -8084,18 +7773,18 @@ function schtasksXml(p) {
 }
 
 // src/service/win32.ts
-import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync6, readdirSync as readdirSync6, readFileSync as readFileSync7, unlinkSync as unlinkSync3 } from "fs";
-import { join as join9 } from "path";
+import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync6, readdirSync as readdirSync5, readFileSync as readFileSync7, unlinkSync as unlinkSync3 } from "fs";
+import { join as join8 } from "path";
 function win32LogDir(homeDir) {
-  return join9(homeDir, "AppData", "Local", "braid", "logs");
+  return join8(homeDir, "AppData", "Local", "braid", "logs");
 }
 function win32Manager(ctx) {
-  const serviceDir = join9(ctx.braidDir, "service");
+  const serviceDir = join8(ctx.braidDir, "service");
   const task = (name) => schtasksLabel(name);
   const legacyTask = (name) => legacySchtasksLabel(name);
-  const xmlPath = (name) => join9(serviceDir, `${task(name)}.xml`);
-  const wrapperPath = (name) => join9(serviceDir, `${task(name)}.cmd`);
-  const launcherPath = (name) => join9(serviceDir, `${task(name)}.vbs`);
+  const xmlPath = (name) => join8(serviceDir, `${task(name)}.xml`);
+  const wrapperPath = (name) => join8(serviceDir, `${task(name)}.cmd`);
+  const launcherPath = (name) => join8(serviceDir, `${task(name)}.vbs`);
   const st = (...args) => ctx.exec("schtasks", args);
   const stx = async (...args) => {
     const res = await st(...args);
@@ -8106,18 +7795,18 @@ function win32Manager(ctx) {
   };
   const killBridgeProcess = async (name) => {
     const legacyAgents = legacyTwinPath(ctx.braidDir, ["agents"]);
-    const agentDirs = [join9(ctx.braidDir, "agents"), ...legacyAgents ? [legacyAgents] : []];
+    const agentDirs = [join8(ctx.braidDir, "agents"), ...legacyAgents ? [legacyAgents] : []];
     const hostDirs = [];
     for (const agentsDir of agentDirs) {
       try {
-        for (const host of readdirSync6(agentsDir)) hostDirs.push(join9(agentsDir, host));
+        for (const host of readdirSync5(agentsDir)) hostDirs.push(join8(agentsDir, host));
       } catch {
       }
     }
     for (const hostDir of hostDirs) {
       let pid = NaN;
       try {
-        pid = Number(readFileSync7(join9(hostDir, `${name}.json.lock`), "utf8").trim());
+        pid = Number(readFileSync7(join8(hostDir, `${name}.json.lock`), "utf8").trim());
       } catch {
         continue;
       }
@@ -8161,7 +7850,7 @@ function win32Manager(ctx) {
       await st("/delete", "/tn", task(name), "/f");
       await st("/delete", "/tn", legacyTask(name), "/f");
       try {
-        unlinkSync3(join9(runDir(ctx.braidDir), `${name}.token`));
+        unlinkSync3(join8(runDir(ctx.braidDir), `${name}.token`));
       } catch {
       }
       const legacyToken = legacyTwinPath(ctx.braidDir, ["run", `${name}.token`]);
@@ -8199,7 +7888,7 @@ function win32Manager(ctx) {
       return { installed, loaded, running };
     },
     logsPath(name) {
-      return join9(win32LogDir(ctx.homeDir), `${name}.err.log`);
+      return join8(win32LogDir(ctx.homeDir), `${name}.err.log`);
     }
   };
 }
@@ -8213,7 +7902,7 @@ var NotSupportedError = class extends Error {
 };
 function makeServiceManager(platform, exec, deps = {}) {
   const homeDir = deps.homeDir ?? process.env.HOME ?? "";
-  const braidDir = deps.braidDir ?? join10(homeDir, ".braid");
+  const braidDir = deps.braidDir ?? join9(homeDir, ".braid");
   const uid = deps.uid ?? (typeof process.getuid === "function" ? process.getuid() : 0);
   const nodePath = deps.nodePath ?? process.execPath;
   const entryPath = pinnedEntryPath({ braidDir });
@@ -8238,11 +7927,11 @@ function notSupportedManager(platform) {
   };
 }
 function darwinManager(ctx) {
-  const launchAgentsDir = join10(ctx.homeDir, "Library", "LaunchAgents");
-  const logDir = join10(ctx.homeDir, "Library", "Logs", "braid");
-  const legacyLogDir = join10(ctx.homeDir, "Library", "Logs", "arp-bridge");
-  const plistPath = (name) => join10(launchAgentsDir, `${launchdLabel(name)}.plist`);
-  const legacyPlistPath = (name) => join10(launchAgentsDir, `${legacyLaunchdLabel(name)}.plist`);
+  const launchAgentsDir = join9(ctx.homeDir, "Library", "LaunchAgents");
+  const logDir = join9(ctx.homeDir, "Library", "Logs", "braid");
+  const legacyLogDir = join9(ctx.homeDir, "Library", "Logs", "arp-bridge");
+  const plistPath = (name) => join9(launchAgentsDir, `${launchdLabel(name)}.plist`);
+  const legacyPlistPath = (name) => join9(launchAgentsDir, `${legacyLaunchdLabel(name)}.plist`);
   const legacyInstalled = (name) => !existsSync7(plistPath(name)) && existsSync7(legacyPlistPath(name));
   const domainTarget = `gui/${ctx.uid}`;
   const serviceTarget = (name) => `${domainTarget}/${legacyInstalled(name) ? legacyLaunchdLabel(name) : launchdLabel(name)}`;
@@ -8307,16 +7996,16 @@ function darwinManager(ctx) {
       };
     },
     logsPath(name) {
-      return join10(legacyInstalled(name) ? legacyLogDir : logDir, `${name}.err.log`);
+      return join9(legacyInstalled(name) ? legacyLogDir : logDir, `${name}.err.log`);
     }
   };
 }
 function linuxManager(ctx) {
-  const unitDir = join10(ctx.homeDir, ".config", "systemd", "user");
+  const unitDir = join9(ctx.homeDir, ".config", "systemd", "user");
   const newUnitName = (name) => `braid-${name}.service`;
   const legacyUnitName = (name) => `arp-bridge-${name}.service`;
-  const newUnitPath = (name) => join10(unitDir, newUnitName(name));
-  const legacyUnitPath = (name) => join10(unitDir, legacyUnitName(name));
+  const newUnitPath = (name) => join9(unitDir, newUnitName(name));
+  const legacyUnitPath = (name) => join9(unitDir, legacyUnitName(name));
   const legacyInstalled = (name) => !existsSync7(newUnitPath(name)) && existsSync7(legacyUnitPath(name));
   const unitName = (name) => legacyInstalled(name) ? legacyUnitName(name) : newUnitName(name);
   const unitPath = (name) => legacyInstalled(name) ? legacyUnitPath(name) : newUnitPath(name);
@@ -8598,7 +8287,7 @@ function printStatusHuman(name, st, logsPath) {
 
 // src/service/serviceLog.ts
 import { createWriteStream, mkdirSync as mkdirSync8 } from "fs";
-import { dirname as dirname6, join as join11 } from "path";
+import { dirname as dirname6, join as join10 } from "path";
 
 // src/service/logRotation.ts
 import {
@@ -8651,16 +8340,16 @@ function rotateLogFileIfNeeded(logPath, opts = {}) {
 
 // src/service/serviceLog.ts
 function darwinLogDir(homeDir) {
-  return join11(homeDir, "Library", "Logs", "braid");
+  return join10(homeDir, "Library", "Logs", "braid");
 }
 function serviceLogTargets(name, platform, homeDir) {
   if (platform === "darwin") {
     const d = darwinLogDir(homeDir);
-    return [join11(d, `${name}.out.log`), join11(d, `${name}.err.log`)];
+    return [join10(d, `${name}.out.log`), join10(d, `${name}.err.log`)];
   }
   if (platform === "win32") {
     const d = win32LogDir(homeDir);
-    return [join11(d, `${name}.out.log`), join11(d, `${name}.err.log`)];
+    return [join10(d, `${name}.out.log`), join10(d, `${name}.err.log`)];
   }
   return [];
 }
@@ -9026,7 +8715,7 @@ async function main() {
     }
     assertKeystorePerms(dir, file);
   }
-  console.log("[braid] starting", redactConfig(cfg));
+  console.log(banner("braid", "STARTING", startingLines(cfg)));
   if (cfg.toolMode === "full") {
     console.error(
       "[braid] WARNING full tool access: remote channel content can drive local tool use on this machine"