@super-one/cli 0.50.5-alpha → 0.50.7-alpha

package/MANIFEST.json

@@ -1,7 +1,7 @@
 {
   "name": "@super-one/cli",
-  "version": "0.50.5-alpha",
+  "version": "0.50.7-alpha",
   "kind": "npm",
   "minNodeMajor": 20,
-  "builtAt": "2026-08-07T07:57:09.216Z"
+  "builtAt": "2026-08-08T03:37:34.425Z"
 }

package/lib/cli.mjs

@@ -256,7 +256,7 @@ var init_host_action_superone_descriptors = __esm({
                       },
                       "worktree": {
                         "type": "object",
-                        "description": 'Request a host-managed worktree for same-repo isolation while cwd stays omitted or at the project root. Set enabled, baseBranch, and mode; use a unique branchName with branch. See read_manual({ domain: "product", topic: "collaboration" }) for implementer and reviewer recipes.',
+                        "description": 'Request a host-managed worktree for same-repo isolation while cwd stays omitted or at the project root. Use for parallel implementers (mode branch + unique branchName), not for default read-only review of the current shared checkout. Use mode detach only when reviewing a feature branch another implementer already has checked out. See read_manual({ domain: "product", topic: "collaboration" }).',
                         "properties": {
                           "enabled": {
                             "type": "boolean"
@@ -12027,8 +12027,11 @@ var init_session_runtime = __esm({
         const s2 = this.live.get(sessionId);
         return s2 ? this.clone(s2) : null;
       }
-      list(projectId) {
-        return [...this.live.values()].filter((s2) => !projectId || s2.projectId === projectId).map((s2) => this.clone(s2));
+      list(projectId, options) {
+        const rows = [...this.live.values()].filter((s2) => !projectId || s2.projectId === projectId).sort((a, b2) => (b2.updatedAt ?? 0) - (a.updatedAt ?? 0) || (b2.createdAt ?? 0) - (a.createdAt ?? 0));
+        const offset = Math.max(0, options?.offset ?? 0);
+        const limited = options?.limit != null && options.limit >= 0 ? rows.slice(offset, offset + options.limit) : offset > 0 ? rows.slice(offset) : rows;
+        return limited.map((s2) => this.clone(s2));
       }
       snapshotSequence() {
         return this.events.headSequence();
@@ -13837,6 +13840,19 @@ function parseSimpleFrontmatter(content) {
   }
   return result;
 }
+function resolveArgumentHint(fm) {
+  if (!fm) return "";
+  const fromArguments = (fm.arguments ?? "").trim();
+  if (fromArguments) return fromArguments;
+  return (fm["argument-hint"] ?? "").trim();
+}
+function readArgumentHintFromMarkdownFile(filePath) {
+  try {
+    return resolveArgumentHint(parseSimpleFrontmatter(safeReadText(filePath)));
+  } catch {
+    return "";
+  }
+}
 function firstMarkdownHeading(content) {
   for (const line of content.split("\n")) {
     const m2 = line.match(/^#\s+(.+)$/);
@@ -13867,7 +13883,7 @@ function discoverClaudeSkillsAndCommands(projectRoot2, opts) {
       skills.push({
         name: ent.name,
         description: fm.description ?? "",
-        argumentHint: fm.arguments ?? fm["argument-hint"] ?? "",
+        argumentHint: resolveArgumentHint(fm),
         isSkill: true,
         scope
       });
@@ -13891,7 +13907,7 @@ function discoverClaudeSkillsAndCommands(projectRoot2, opts) {
       commands.push({
         name,
         description: fm.description ?? firstMarkdownHeading(content),
-        argumentHint: fm["argument-hint"] ?? "",
+        argumentHint: resolveArgumentHint(fm),
         isSkill: false,
         scope
       });
@@ -14124,7 +14140,7 @@ function discoverCodexUserPrompts(opts) {
     out.push({
       name,
       description: fm.description ?? "",
-      argumentHint: fm["argument-hint"] ?? "",
+      argumentHint: resolveArgumentHint(fm),
       isSkill: false
     });
   }
@@ -18529,9 +18545,23 @@ var init_turn_attachments = __esm({
   }
 });
 
+// ../../packages/shared/src/agent-transcript-path.ts
+function isAgentTranscriptAbsolutePath(filePath) {
+  if (!filePath || filePath.includes("\0")) return false;
+  const norm = filePath.replace(/\\/g, "/");
+  if (!norm.startsWith("/") && !/^[A-Za-z]:\//.test(norm)) return false;
+  return norm.includes("/.grok/sessions/") || norm.includes("/.claude/projects/") || /\/\.grok\/sessions\/?$/.test(norm) || /\/\.claude\/projects\/?$/.test(norm);
+}
+var init_agent_transcript_path = __esm({
+  "../../packages/shared/src/agent-transcript-path.ts"() {
+    "use strict";
+  }
+});
+
 // ../../packages/runtime/src/fs/path-security.ts
 import { realpathSync as realpathSync2, existsSync as existsSync11, lstatSync, statSync } from "node:fs";
-import { isAbsolute, join as join9, normalize, resolve, sep } from "node:path";
+import { homedir as homedir3 } from "node:os";
+import { dirname as dirname5, isAbsolute, join as join9, normalize, resolve, sep } from "node:path";
 function resolveProjectPath(projectRoot2, relativePath) {
   if (relativePath.includes("\0")) {
     return { ok: false, reason: "null byte in path" };
@@ -18600,6 +18630,41 @@ function isToolOutputRelativePath(relativePath) {
   if (n === "." || n === "" || n === ".." || n.startsWith("../")) return false;
   return n === "temp" || n.startsWith(TOOL_OUTPUT_REL_PREFIX);
 }
+function getAgentTranscriptRoots(opts) {
+  const homeDir = opts?.homeDir ?? homedir3();
+  return [
+    join9(homeDir, ".grok", "sessions"),
+    join9(homeDir, ".claude", "projects")
+  ];
+}
+function assertAgentTranscriptAbsolutePath(filePath, opts) {
+  if (!isAgentTranscriptAbsolutePath(filePath)) return false;
+  if (!isAbsolute(filePath) && !filePath.replace(/\\/g, "/").startsWith("/")) return false;
+  const candidate = normalizeSep(resolve(filePath));
+  const roots = getAgentTranscriptRoots(opts).map((root) => {
+    const resolved = normalizeSep(resolve(root));
+    const real = existsSync11(resolved) ? normalizeSep(resolveRealPath(resolved)) : resolved;
+    return { resolved, real };
+  });
+  const underAnyRoot = (abs) => {
+    const n = normalizeSep(abs);
+    return roots.some(
+      (r) => n === r.resolved || n.startsWith(r.resolved + sep) || n === r.real || n.startsWith(r.real + sep)
+    );
+  };
+  if (!underAnyRoot(candidate)) return false;
+  if (existsSync11(candidate)) {
+    return underAnyRoot(resolveRealPath(candidate));
+  }
+  let existing = candidate;
+  while (!existsSync11(existing)) {
+    const parent = dirname5(existing);
+    if (parent === existing) return true;
+    if (!underAnyRoot(parent)) return true;
+    existing = parent;
+  }
+  return underAnyRoot(resolveRealPath(existing));
+}
 function pathKind(absolutePath) {
   try {
     const st = lstatSync(absolutePath);
@@ -18644,6 +18709,8 @@ var TOOL_OUTPUT_REL_PREFIX;
 var init_path_security = __esm({
   "../../packages/runtime/src/fs/path-security.ts"() {
     "use strict";
+    init_agent_transcript_path();
+    init_agent_transcript_path();
     TOOL_OUTPUT_REL_PREFIX = "temp/";
   }
 });
@@ -18734,7 +18801,7 @@ import {
   statSync as statSync3,
   writeFileSync as writeFileSync4
 } from "node:fs";
-import { basename, dirname as dirname5, join as join11, resolve as resolve2, sep as sep2 } from "node:path";
+import { basename, dirname as dirname6, join as join11, resolve as resolve2, sep as sep2 } from "node:path";
 import { homedir as osHomedir3 } from "node:os";
 function homeOf2(opts) {
   return opts?.homeDir ?? osHomedir3();
@@ -18771,7 +18838,7 @@ function parseFrontmatterFile(filePath) {
     return {
       name: fm.name ?? "",
       description,
-      argumentHint: fm.arguments ?? fm["argument-hint"] ?? ""
+      argumentHint: resolveArgumentHint(fm)
     };
   } catch {
     return { name: "", description: "", argumentHint: "" };
@@ -19068,7 +19135,7 @@ function installManagedSkill(provider, cwd, input, opts) {
           code: "invalid_argument"
         });
       }
-      mkdirSync6(dirname5(abs), { recursive: true });
+      mkdirSync6(dirname6(abs), { recursive: true });
       writeFileSync4(abs, content, "utf8");
     }
   } catch (err) {
@@ -19100,7 +19167,7 @@ var init_skills_manage = __esm({
 
 // ../../packages/runtime/src/fs/mcp-config-claude.ts
 import { existsSync as existsSync14, mkdirSync as mkdirSync7, readFileSync as readFileSync9, writeFileSync as writeFileSync5 } from "node:fs";
-import { dirname as dirname6, join as join12 } from "node:path";
+import { dirname as dirname7, join as join12 } from "node:path";
 import { homedir as osHomedir4 } from "node:os";
 function homeOf3(opts) {
   return opts?.homeDir ?? osHomedir4();
@@ -19123,7 +19190,7 @@ function readJsonFile(filePath) {
   }
 }
 function writeJsonFile(filePath, data) {
-  mkdirSync7(dirname6(filePath), { recursive: true });
+  mkdirSync7(dirname7(filePath), { recursive: true });
   writeFileSync5(filePath, JSON.stringify(data, null, 2) + "\n", "utf8");
 }
 function extractServers(config2, scope) {
@@ -20154,7 +20221,7 @@ var init_dist = __esm({
 
 // ../../packages/runtime/src/fs/mcp-config-codex.ts
 import { existsSync as existsSync15, mkdirSync as mkdirSync8, readFileSync as readFileSync10, writeFileSync as writeFileSync6 } from "node:fs";
-import { dirname as dirname7, join as join13 } from "node:path";
+import { dirname as dirname8, join as join13 } from "node:path";
 import { homedir as osHomedir5 } from "node:os";
 function homeOf4(opts) {
   return opts?.homeDir ?? osHomedir5();
@@ -20176,7 +20243,7 @@ function readConfigFile2(filePath) {
   }
 }
 function writeConfigFile(filePath, data) {
-  mkdirSync8(dirname7(filePath), { recursive: true });
+  mkdirSync8(dirname8(filePath), { recursive: true });
   writeFileSync6(filePath, stringify(data), "utf8");
 }
 function parseConfigFile(filePath, scope) {
@@ -20434,7 +20501,7 @@ import {
   statSync as statSync4,
   writeFileSync as writeFileSync7
 } from "node:fs";
-import { dirname as dirname8, join as join14, resolve as resolve3 } from "node:path";
+import { dirname as dirname9, join as join14, resolve as resolve3 } from "node:path";
 import { homedir as osHomedir6 } from "node:os";
 function homeOf5(opts) {
   return opts?.homeDir ?? osHomedir6();
@@ -20491,7 +20558,7 @@ function getMarketplaceScopeMap(cwd, opts) {
   return map2;
 }
 function writeSettingsJson(filePath, data) {
-  mkdirSync9(dirname8(filePath), { recursive: true });
+  mkdirSync9(dirname9(filePath), { recursive: true });
   writeFileSync7(filePath, JSON.stringify(data, null, 2) + "\n");
 }
 function removeMarketplaceFromSettings(filePath, name) {
@@ -21030,7 +21097,7 @@ var init_plugins_manage = __esm({
 
 // ../../packages/runtime/src/fs/hooks-config.ts
 import { existsSync as existsSync17, mkdirSync as mkdirSync10, readFileSync as readFileSync12, writeFileSync as writeFileSync8 } from "node:fs";
-import { dirname as dirname9, join as join15 } from "node:path";
+import { dirname as dirname10, join as join15 } from "node:path";
 import { homedir as osHomedir7 } from "node:os";
 function homeOf6(opts) {
   return opts?.homeDir ?? osHomedir7();
@@ -21058,7 +21125,7 @@ function readJsonFile2(filePath) {
   }
 }
 function writeJsonFile2(filePath, data) {
-  mkdirSync10(dirname9(filePath), { recursive: true });
+  mkdirSync10(dirname10(filePath), { recursive: true });
   writeFileSync8(filePath, JSON.stringify(data, null, 2));
 }
 function getHooksMap(data) {
@@ -40991,8 +41058,11 @@ var init_tool_result_map = __esm({
 });
 
 // ../../packages/acp/src/xai-state.ts
-function createXaiCorrelationState() {
+import { homedir as homedir4 } from "node:os";
+import { join as join16 } from "node:path";
+function createXaiCorrelationState(opts) {
   return {
+    ...opts?.cwd ? { cwd: opts.cwd } : {},
     workflowToolByRunId: /* @__PURE__ */ new Map(),
     workflowRevision: /* @__PURE__ */ new Map(),
     workflowStarted: /* @__PURE__ */ new Set(),
@@ -41000,6 +41070,7 @@ function createXaiCorrelationState() {
     smokeWorkflowToolIds: /* @__PURE__ */ new Set(),
     pendingToolNamesById: /* @__PURE__ */ new Map(),
     subagentToolById: /* @__PURE__ */ new Map(),
+    subagentOutputById: /* @__PURE__ */ new Map(),
     subagentStarted: /* @__PURE__ */ new Set(),
     bgTaskById: /* @__PURE__ */ new Map(),
     goalStarted: /* @__PURE__ */ new Set(),
@@ -41008,6 +41079,17 @@ function createXaiCorrelationState() {
     lastMessageId: null
   };
 }
+function resolveGrokChildChatHistoryPath(cwd, childSessionId) {
+  if (!cwd || !childSessionId) return void 0;
+  return join16(homedir4(), ".grok", "sessions", encodeURIComponent(cwd), childSessionId, "chat_history.jsonl");
+}
+function noteSubagentOutputFile(state, subagentId, childSessionId) {
+  const existing = state.subagentOutputById.get(subagentId);
+  if (existing) return existing;
+  const path = resolveGrokChildChatHistoryPath(state.cwd, childSessionId || subagentId);
+  if (path) state.subagentOutputById.set(subagentId, path);
+  return path;
+}
 function isSubagentLaunchToolName(name) {
   if (!name) return false;
   const n = name.toLowerCase();
@@ -41270,6 +41352,12 @@ function mapXaiSessionUpdate(update, state, ctx = {}) {
       return mapAutoRecoveryStarted(update);
     case "auto_recovery_exhausted":
       return mapAutoRecoveryExhausted(update);
+    case "last_turn_summary":
+      return mapLastTurnSummary(update, ctx);
+    case "session_recap":
+      return mapSessionRecap(update);
+    case "session_recap_unavailable":
+      return [];
     case "unknown":
       return [];
     default:
@@ -41469,18 +41557,23 @@ function mapSubagentSpawned(u, state) {
     state.subagentToolById.delete(id);
   }
   const toolUseId = workflowRunId ? void 0 : state.subagentToolById.get(id);
+  const childSessionId = strField(u, "child_session_id", "childSessionId") ?? id;
+  const outputFile = workflowRunId ? void 0 : noteSubagentOutputFile(state, id, childSessionId);
   return [{
     type: "task_started",
     taskId: id,
     ...toolUseId ? { toolUseId } : {},
     description,
-    ...subagentType ? { taskType: subagentType } : {}
+    ...subagentType ? { taskType: subagentType } : {},
+    ...outputFile ? { outputFile } : {}
   }];
 }
 function mapSubagentProgress(u, state) {
   const id = strField(u, "subagent_id", "subagentId");
   if (!id) return [];
   if (state.workflowOwnedSubagents.has(id)) return [];
+  const childSessionId = strField(u, "child_session_id", "childSessionId") ?? id;
+  const outputFile = noteSubagentOutputFile(state, id, childSessionId);
   const events = [];
   if (!state.subagentStarted.has(id)) {
     state.subagentStarted.add(id);
@@ -41488,28 +41581,26 @@ function mapSubagentProgress(u, state) {
       type: "task_started",
       taskId: id,
       ...state.subagentToolById.get(id) ? { toolUseId: state.subagentToolById.get(id) } : {},
-      description: id
+      description: id,
+      ...outputFile ? { outputFile } : {}
     });
   }
   const durationMs = numField(u, "duration_ms", "durationMs") ?? 0;
   const toolCalls = numField(u, "tool_call_count", "toolCallCount") ?? 0;
   const tokens = numField(u, "tokens_used", "tokensUsed") ?? 0;
   const toolsUsed = (arrField(u, "tools_used", "toolsUsed") ?? []).filter((t) => typeof t === "string" && t.length > 0);
-  const recent = toolsUsed.slice(-8);
-  const lastTool = recent[recent.length - 1];
-  const activityText = recent.length ? recent.join(", ") : void 0;
-  const toolEntries = recent.map((toolName) => ({ toolName, description: "" }));
+  const activityText = toolsUsed.length ? toolsUsed.join(", ") : void 0;
   const toolUseId = state.subagentToolById.get(id);
   events.push({
     type: "task_progress",
     taskId: id,
     ...toolUseId ? { toolUseId } : {},
-    // Prefer last tool name as description so reducer toolHistory advances.
-    description: lastTool ?? id,
-    ...lastTool ? { lastToolName: lastTool } : {},
+    // Keep a stable non-tool description so reducer does not invent history from
+    // description transitions when no transcript path is available.
+    description: id,
     usage: { totalTokens: tokens, toolUses: toolCalls, durationMs },
     ...activityText ? { activityText } : {},
-    ...toolEntries.length ? { toolEntries } : {}
+    ...outputFile ? { outputFile } : {}
   });
   return events;
 }
@@ -41525,6 +41616,8 @@ function mapSubagentFinished(u, state) {
   const durationMs = numField(u, "duration_ms", "durationMs") ?? 0;
   const toolCalls = numField(u, "tool_calls", "toolCalls") ?? 0;
   const tokens = numField(u, "tokens_used", "tokensUsed") ?? 0;
+  const childSessionId = strField(u, "child_session_id", "childSessionId") ?? id;
+  const outputFile = noteSubagentOutputFile(state, id, childSessionId) ?? "";
   const events = [];
   if (!state.subagentStarted.has(id)) {
     state.subagentStarted.add(id);
@@ -41532,7 +41625,8 @@ function mapSubagentFinished(u, state) {
       type: "task_started",
       taskId: id,
       ...toolUseId ? { toolUseId } : {},
-      description: id
+      description: id,
+      ...outputFile ? { outputFile } : {}
     });
   }
   events.push({
@@ -41540,7 +41634,7 @@ function mapSubagentFinished(u, state) {
     taskId: id,
     ...toolUseId ? { toolUseId } : {},
     taskStatus,
-    outputFile: "",
+    outputFile,
     summary: error51 ?? status,
     usage: { totalTokens: tokens, toolUses: toolCalls, durationMs },
     ...output ? { resultText: output } : error51 ? { resultText: error51 } : {}
@@ -41873,6 +41967,27 @@ function mapAutoCompactFailed(u) {
     compactError: error51
   }];
 }
+function mapLastTurnSummary(u, ctx) {
+  const summary = strField(u, "summary")?.trim();
+  if (!summary) return [];
+  const promptId = strField(u, "prompt_id", "promptId");
+  return [{
+    type: "turn_summary",
+    summary,
+    ...promptId ? { promptId } : {},
+    ...ctx.messageId ? { messageId: ctx.messageId } : {}
+  }];
+}
+function mapSessionRecap(u) {
+  const summary = strField(u, "summary")?.trim();
+  if (!summary) return [];
+  const auto = boolField(u, "auto");
+  return [{
+    type: "session_recap",
+    summary,
+    ...auto != null ? { auto } : {}
+  }];
+}
 function mapModelChanged(u) {
   const modelId = strField(u, "model_id", "modelId");
   if (!modelId) return [];
@@ -42189,12 +42304,18 @@ function mapSessionUpdate(update, ctx, opts) {
         const name = c.name.replace(/^\//, "").trim();
         if (!name) continue;
         if (isHiddenAcpPermissionSlashCommand(name)) continue;
-        const hint = c.input && typeof c.input === "object" && typeof c.input.hint === "string" ? c.input.hint : "";
+        let hint = c.input && typeof c.input === "object" && typeof c.input.hint === "string" ? c.input.hint.trim() : "";
+        if (!hint && c._meta && typeof c._meta === "object" && typeof c._meta.path === "string") {
+          hint = readArgumentHintFromMarkdownFile(c._meta.path);
+        }
+        const isSkill = Boolean(
+          c._meta && typeof c._meta === "object" && typeof c._meta.path === "string" && /SKILL\.md$/i.test(c._meta.path)
+        );
         commands.push({
           name,
           description: typeof c.description === "string" ? c.description : "",
           argumentHint: hint,
-          isSkill: false
+          isSkill
         });
       }
       return [{ type: "acp_commands", commands }];
@@ -42259,7 +42380,9 @@ function createAcpAgentEventMapper(options) {
   const nativeToLocal = /* @__PURE__ */ new Map();
   const localMessageIds = /* @__PURE__ */ new Set([options.messageId]);
   const openTools = /* @__PURE__ */ new Set();
-  const xaiCorrelation = createXaiCorrelationState();
+  const xaiCorrelation = createXaiCorrelationState(
+    options.cwd ? { cwd: options.cwd } : void 0
+  );
   let currentMessageId = options.messageId;
   let started = false;
   let terminal = false;
@@ -42377,6 +42500,7 @@ function createAcpAgentEventMapper(options) {
 var init_agent_event_mapper3 = __esm({
   "../../packages/acp/src/agent-event-mapper.ts"() {
     "use strict";
+    init_fs();
     init_config_map();
     init_slash_filter();
     init_tool_normalization();
@@ -42579,7 +42703,8 @@ function createAcpAgentTurnRunner(opts = {}) {
       const blockId = `acp-${sessionId}`;
       agentEventMapper = input.onAgentEvent ? createAcpAgentEventMapper({
         messageId: input.messageId ?? blockId,
-        emit: input.onAgentEvent
+        emit: input.onAgentEvent,
+        cwd
       }) : null;
       agentEventMapper?.start(sessionId);
       if (agentEventMapper) {
@@ -49109,23 +49234,23 @@ var init_parse4 = __esm({
 // ../../packages/opencode/src/server.ts
 import { spawn as spawn3 } from "node:child_process";
 import { existsSync as existsSync20 } from "node:fs";
-import { homedir as homedir3 } from "node:os";
-import { delimiter, join as join16 } from "node:path";
+import { homedir as homedir5 } from "node:os";
+import { delimiter, join as join17 } from "node:path";
 function appendOutput(current, chunk) {
   const next = current + chunk.toString();
   return next.length <= maxServerOutput ? next : next.slice(-maxServerOutput);
 }
 function defaultOpenCodeBinaryPath() {
   const filename = process.platform === "win32" ? "opencode.exe" : "opencode";
-  const installed = join16(homedir3(), ".opencode", "bin", filename);
+  const installed = join17(homedir5(), ".opencode", "bin", filename);
   return existsSync20(installed) ? installed : filename;
 }
 function openCodePath(pathEnv) {
-  const home = homedir3();
+  const home = homedir5();
   const paths = [
-    join16(home, ".opencode", "bin"),
-    join16(home, ".local", "bin"),
-    join16(home, ".bun", "bin"),
+    join17(home, ".opencode", "bin"),
+    join17(home, ".local", "bin"),
+    join17(home, ".bun", "bin"),
     "/opt/homebrew/bin",
     "/usr/local/bin",
     ...(pathEnv ?? "").split(delimiter)
@@ -49944,7 +50069,7 @@ __export(managed_harness_official_exports, {
 });
 import { existsSync as existsSync24, mkdirSync as mkdirSync12, readFileSync as readFileSync14, readdirSync as readdirSync8, statSync as statSync6 } from "node:fs";
 import { arch as osArch2, platform as osPlatform2 } from "node:os";
-import { join as join18, resolve as resolve5 } from "node:path";
+import { join as join19, resolve as resolve5 } from "node:path";
 import { spawn as spawn4 } from "node:child_process";
 function managedNpmPrefix(nodeHome, harnessId) {
   return resolve5(nodeHome, "managed-npm", harnessId);
@@ -49990,29 +50115,29 @@ function officialPackageSpecs(harnessId) {
 function resolveOfficialInstallBinary(harnessId, prefix) {
   if (harnessId === "codex") {
     const candidates = [
-      join18(prefix, "bin", "codex"),
-      join18(prefix, "bin", "codex.cmd"),
-      join18(prefix, "lib", "node_modules", "@openai", "codex", "bin", "codex.js")
+      join19(prefix, "bin", "codex"),
+      join19(prefix, "bin", "codex.cmd"),
+      join19(prefix, "lib", "node_modules", "@openai", "codex", "bin", "codex.js")
     ];
     for (const c of candidates) {
       if (existsSync24(c) && (c.endsWith(".js") || isExecutableFile(c))) return c;
     }
     return null;
   }
-  const nm = join18(prefix, "lib", "node_modules");
-  const scoped = join18(nm, "@anthropic-ai");
+  const nm = join19(prefix, "lib", "node_modules");
+  const scoped = join19(nm, "@anthropic-ai");
   try {
     if (existsSync24(scoped)) {
       const names = readdirSync8(scoped).filter((n) => n.startsWith("claude-agent-sdk-"));
       for (const n of names) {
         const ext = process.platform === "win32" ? ".exe" : "";
-        const bin = join18(scoped, n, `claude${ext}`);
+        const bin = join19(scoped, n, `claude${ext}`);
         if (existsSync24(bin)) return bin;
       }
     }
   } catch {
   }
-  const direct = join18(
+  const direct = join19(
     nm,
     ...claudePlatformPackageName().split("/"),
     process.platform === "win32" ? "claude.exe" : "claude"
@@ -50067,7 +50192,7 @@ async function installManagedFromOfficialNpm(opts) {
 }
 function readInstalledVersion(prefix, harnessId) {
   try {
-    const pkgPath = harnessId === "claude" ? join18(prefix, "lib", "node_modules", "@anthropic-ai", "claude-agent-sdk", "package.json") : join18(prefix, "lib", "node_modules", "@openai", "codex", "package.json");
+    const pkgPath = harnessId === "claude" ? join19(prefix, "lib", "node_modules", "@anthropic-ai", "claude-agent-sdk", "package.json") : join19(prefix, "lib", "node_modules", "@openai", "codex", "package.json");
     if (!existsSync24(pkgPath)) return null;
     const raw = JSON.parse(readFileSync14(pkgPath, "utf8"));
     return raw.version?.trim() || null;
@@ -57259,7 +57384,7 @@ var require_dist = __commonJS({
 });
 
 // src/cli.ts
-import { homedir as homedir7 } from "node:os";
+import { homedir as homedir9 } from "node:os";
 import { resolve as resolve12 } from "node:path";
 
 // src/config.ts
@@ -57301,8 +57426,8 @@ import { fileURLToPath } from "node:url";
 function resolveCliReleaseVersion() {
   const fromEnv = process.env.SUPERONE_CLI_VERSION?.trim();
   if (fromEnv) return fromEnv;
-  if ("0.50.5-alpha".trim()) {
-    return "0.50.5-alpha".trim();
+  if ("0.50.7-alpha".trim()) {
+    return "0.50.7-alpha".trim();
   }
   const fromDist = readDistManifestVersion();
   if (fromDist) return fromDist;
@@ -58918,7 +59043,7 @@ import {
   writeFileSync as writeFileSync9
 } from "node:fs";
 import { createHash as createHash4, randomBytes as randomBytes3 } from "node:crypto";
-import { dirname as dirname10, join as join17, relative, resolve as resolve4, sep as sep3 } from "node:path";
+import { dirname as dirname11, join as join18, relative, resolve as resolve4, sep as sep3 } from "node:path";
 import { arch as osArch, platform as osPlatform } from "node:os";
 var MANAGED_PAYLOAD_BASENAME = "payload.bin";
 var MANAGED_META_BASENAME = "artifact.json";
@@ -59037,7 +59162,7 @@ function loadHarnessReleaseManifest(nodeHome) {
     }
     return parseHarnessReleaseManifest(JSON.parse(readFileSync13(fromEnv, "utf8")));
   }
-  const local = join17(nodeHome, "release-manifest.json");
+  const local = join18(nodeHome, "release-manifest.json");
   if (existsSync23(local)) {
     return parseHarnessReleaseManifest(JSON.parse(readFileSync13(local, "utf8")));
   }
@@ -59125,8 +59250,8 @@ async function installManagedArtifactFromFile(opts) {
     opts.harnessId,
     pin.artifactVersion
   );
-  const finalFile = join17(destDir, MANAGED_PAYLOAD_BASENAME);
-  const metaPath = join17(destDir, MANAGED_META_BASENAME);
+  const finalFile = join18(destDir, MANAGED_PAYLOAD_BASENAME);
+  const metaPath = join18(destDir, MANAGED_META_BASENAME);
   assertStrictChild(finalFile, destDir, "payload path");
   assertStrictChild(metaPath, destDir, "meta path");
   const metaBody = JSON.stringify(
@@ -59165,15 +59290,15 @@ async function installManagedArtifactFromFile(opts) {
       );
     }
   } else {
-    const harnessRoot2 = dirname10(destDir);
+    const harnessRoot2 = dirname11(destDir);
     mkdirSync11(harnessRoot2, { recursive: true });
     assertPathInside(destDir, harnessRoot2, "version dir");
     const stagingDir = mkdtempSync(
-      join17(harnessRoot2, `.staging-${opts.harnessId}-${randomBytes3(8).toString("hex")}-`)
+      join18(harnessRoot2, `.staging-${opts.harnessId}-${randomBytes3(8).toString("hex")}-`)
     );
     assertPathInside(stagingDir, harnessRoot2, "staging dir");
-    const stagingFile = join17(stagingDir, MANAGED_PAYLOAD_BASENAME);
-    const stagingMeta = join17(stagingDir, MANAGED_META_BASENAME);
+    const stagingFile = join18(stagingDir, MANAGED_PAYLOAD_BASENAME);
+    const stagingMeta = join18(stagingDir, MANAGED_META_BASENAME);
     try {
       copyFileSync(opts.artifactPath, stagingFile);
       const stagedDigest = await sha256File(stagingFile);
@@ -59209,7 +59334,7 @@ async function installManagedArtifactFromFile(opts) {
   if (finalDigest !== art.digestSha256) {
     throw new Error(`final payload digest mismatch for ${opts.harnessId}`);
   }
-  const harnessRoot = join17(
+  const harnessRoot = join18(
     releasesRoot(opts.nodeHome),
     opts.manifest.cliVersion,
     "harnesses",
@@ -59217,8 +59342,8 @@ async function installManagedArtifactFromFile(opts) {
   );
   assertPathInside(harnessRoot, releasesRoot(opts.nodeHome), "harness root");
   mkdirSync11(harnessRoot, { recursive: true });
-  const currentPath = join17(harnessRoot, MANAGED_CURRENT_BASENAME);
-  const currentTmp = join17(
+  const currentPath = join18(harnessRoot, MANAGED_CURRENT_BASENAME);
+  const currentTmp = join18(
     harnessRoot,
     `.${MANAGED_CURRENT_BASENAME}.${process.pid}.${randomBytes3(6).toString("hex")}.tmp`
   );
@@ -59257,8 +59382,8 @@ async function installManagedArtifactFromFile(opts) {
 async function replacePayloadAtomically(opts) {
   mkdirSync11(opts.destDir, { recursive: true });
   const nonce = randomBytes3(8).toString("hex");
-  const payloadTmp = join17(opts.destDir, `.${MANAGED_PAYLOAD_BASENAME}.${nonce}.tmp`);
-  const metaTmp = join17(opts.destDir, `.${MANAGED_META_BASENAME}.${nonce}.tmp`);
+  const payloadTmp = join18(opts.destDir, `.${MANAGED_PAYLOAD_BASENAME}.${nonce}.tmp`);
+  const metaTmp = join18(opts.destDir, `.${MANAGED_META_BASENAME}.${nonce}.tmp`);
   assertStrictChild(payloadTmp, opts.destDir, "payload temp");
   assertStrictChild(metaTmp, opts.destDir, "meta temp");
   try {
@@ -59566,7 +59691,7 @@ function looksLikeSecretArg(value) {
 // ../../packages/shared/src/git-clone.ts
 import { execFile as execFile2 } from "node:child_process";
 import { existsSync as existsSync26, mkdirSync as mkdirSync13 } from "node:fs";
-import { isAbsolute as isAbsolute3, join as join19, resolve as resolve7 } from "node:path";
+import { isAbsolute as isAbsolute3, join as join20, resolve as resolve7 } from "node:path";
 
 // ../../packages/shared/src/git-remote.ts
 function repoNameFromGitUrl(url2) {
@@ -59631,7 +59756,7 @@ function resolveCloneDestination(input) {
   if (name.includes("/") || name.includes("\\") || name === "." || name === "..") {
     throw invalid(`invalid folder name: ${name}`);
   }
-  return { path: join19(resolve7(parent), name), name };
+  return { path: join20(resolve7(parent), name), name };
 }
 async function cloneRepository(input) {
   const destination = resolveCloneDestination(input);
@@ -59681,7 +59806,7 @@ async function cloneRepository(input) {
 init_resolve_service();
 import { existsSync as existsSync27, mkdirSync as mkdirSync14, readdirSync as readdirSync9, statSync as statSync8 } from "node:fs";
 import { join as pathJoin, resolve as pathResolve } from "node:path";
-import { arch, cpus, freemem, homedir as homedir4, hostname as hostname4, platform, totalmem, uptime } from "node:os";
+import { arch, cpus, freemem, homedir as homedir6, hostname as hostname4, platform, totalmem, uptime } from "node:os";
 
 // src/rpc/resource-handlers.ts
 init_environment();
@@ -62286,9 +62411,9 @@ function handleProjectGet(payload, ctx) {
 function expandHostPath(path) {
   const trimmed = path.trim();
   if (!trimmed) return trimmed;
-  if (trimmed === "~") return homedir4();
+  if (trimmed === "~") return homedir6();
   if (trimmed.startsWith("~/") || trimmed.startsWith("~\\")) {
-    return pathResolve(pathJoin(homedir4(), trimmed.slice(2)));
+    return pathResolve(pathJoin(homedir6(), trimmed.slice(2)));
   }
   return pathResolve(trimmed);
 }
@@ -62571,10 +62696,12 @@ function handleWorkspaceTailWatchStart(payload, ctx) {
   const p2 = asRecord14(payload);
   try {
     const offset = typeof p2.offset === "number" ? p2.offset : void 0;
+    const absolutePath = typeof p2.absolutePath === "string" ? p2.absolutePath : void 0;
     return {
       result: ctx.workspaceTailWatch.start(String(p2.projectId ?? ""), String(p2.relativePath ?? ""), {
         offset,
-        ownerClientId: ctx.client.clientSessionId
+        ownerClientId: ctx.client.clientSessionId,
+        ...absolutePath ? { absolutePath } : {}
       })
     };
   } catch (err) {
@@ -63062,8 +63189,33 @@ function handleSessionList(payload, ctx) {
   const denied = requireScopes6(ctx.client, OPERATION_SCOPES.readSession);
   if (denied) return denied;
   const p2 = asRecord14(payload);
+  const projectId = typeof p2.projectId === "string" ? p2.projectId : void 0;
+  if (typeof p2.limit !== "number" || !Number.isFinite(p2.limit)) {
+    return { error: { code: "invalid_argument", message: "session.list requires finite limit" } };
+  }
+  if (typeof p2.offset !== "number" || !Number.isFinite(p2.offset)) {
+    return { error: { code: "invalid_argument", message: "session.list requires finite offset" } };
+  }
+  const limit = Math.min(Math.max(Math.floor(p2.limit), 0), 500);
+  const offset = Math.max(Math.floor(p2.offset), 0);
+  const rows = ctx.sessions.list(projectId, { limit, offset });
   return {
-    result: ctx.sessions.list(typeof p2.projectId === "string" ? p2.projectId : void 0)
+    result: rows.map((s2) => ({
+      sessionId: s2.sessionId,
+      projectId: s2.projectId,
+      harnessId: s2.harnessId,
+      providerId: s2.providerId,
+      title: s2.title,
+      status: s2.status,
+      messageCount: Array.isArray(s2.transcript) ? s2.transcript.length : 0,
+      cwd: s2.cwd,
+      createdAt: s2.createdAt,
+      updatedAt: s2.updatedAt,
+      isPinned: s2.isPinned,
+      isHidden: s2.isHidden,
+      isAutomation: s2.isAutomation === true,
+      automationId: s2.automationId ?? null
+    }))
   };
 }
 function handleSessionAcquireControl(payload, ctx) {
@@ -64311,7 +64463,7 @@ import {
   unlinkSync,
   writeFileSync as writeFileSync10
 } from "node:fs";
-import { dirname as dirname11, join as join20, relative as relative2 } from "node:path";
+import { dirname as dirname12, join as join21, relative as relative2 } from "node:path";
 import { createHash as createHash6 } from "node:crypto";
 function normalizeRel(path) {
   return path.replace(/\\/g, "/").replace(/\/+$/, "") || ".";
@@ -64367,7 +64519,7 @@ var WorkspaceFsService = class {
     this.projects.touch(projectId);
     const ents = readdirSync10(resolved.absolutePath, { withFileTypes: true });
     return ents.map((ent) => {
-      const abs = join20(resolved.absolutePath, ent.name);
+      const abs = join21(resolved.absolutePath, ent.name);
       let size;
       let mtimeMs;
       try {
@@ -64444,7 +64596,7 @@ var WorkspaceFsService = class {
         throw Object.assign(new Error("content hash mismatch"), { code: "conflict" });
       }
     }
-    mkdirSync15(dirname11(resolved.absolutePath), { recursive: true });
+    mkdirSync15(dirname12(resolved.absolutePath), { recursive: true });
     const data = typeof content === "string" ? Buffer.from(content, "utf8") : Buffer.from(content);
     if (data.length > MAX_READ_BYTES) {
       throw Object.assign(new Error("write payload too large"), { code: "invalid_argument" });
@@ -64520,7 +64672,7 @@ var WorkspaceFsService = class {
       for (const ent of ents) {
         if (hits.length >= MAX_SEARCH_HITS) return;
         if (ent.name === ".git" || ent.name === "node_modules") continue;
-        const abs = join20(dir, ent.name);
+        const abs = join21(dir, ent.name);
         const rel = relative2(root, abs).split("\\").join("/");
         const check2 = resolveProjectPath(root, rel);
         if (!check2.ok) continue;
@@ -64653,7 +64805,7 @@ var WorkspaceFsService = class {
         code: "conflict"
       });
     }
-    mkdirSync15(dirname11(to.absolutePath), { recursive: true });
+    mkdirSync15(dirname12(to.absolutePath), { recursive: true });
     renameSync3(from.absolutePath, to.absolutePath);
     this.projects.touch(projectId);
     return { from: fromN, to: toN };
@@ -64679,7 +64831,7 @@ function hashFileBounded(absolutePath, size) {
 
 // src/workspace/git-service.ts
 import { existsSync as existsSync31, mkdirSync as mkdirSync16, realpathSync as realpathSync5, rmSync as rmSync4, writeFileSync as writeFileSync11 } from "node:fs";
-import { join as join22, resolve as resolve10 } from "node:path";
+import { join as join23, resolve as resolve10 } from "node:path";
 import { tmpdir as tmpdir2 } from "node:os";
 import { randomUUID as randomUUID8 } from "node:crypto";
 
@@ -64874,19 +65026,19 @@ function gitRunSync(folderPath, args, env) {
 }
 
 // ../../packages/runtime/src/git/worktree-plan.ts
-import { basename as basename3, dirname as dirname12, join as join21, resolve as resolve9, sep as sep4 } from "node:path";
-import { homedir as homedir5 } from "node:os";
+import { basename as basename3, dirname as dirname13, join as join22, resolve as resolve9, sep as sep4 } from "node:path";
+import { homedir as homedir7 } from "node:os";
 function resolveMainDirFromCommonDir(folderPath, gitCommonDir) {
   const repoRoot = resolve9(folderPath, gitCommonDir.trim());
-  return repoRoot.endsWith(`${sep4}.git`) || repoRoot.endsWith("/.git") ? dirname12(repoRoot) : repoRoot;
+  return repoRoot.endsWith(`${sep4}.git`) || repoRoot.endsWith("/.git") ? dirname13(repoRoot) : repoRoot;
 }
 function planNewWorktreePaths(input) {
-  const home = input.homeDir ?? homedir5();
+  const home = input.homeDir ?? homedir7();
   const repoName = basename3(input.mainDir);
   const epoch = Math.floor((input.nowMs ?? Date.now()) / 1e3).toString(36);
   const short = input.shortHash.slice(0, 7);
-  const wtDir = join21(home, ".worktrees", repoName);
-  const wtPath = join21(wtDir, `${epoch}-${short}`);
+  const wtDir = join22(home, ".worktrees", repoName);
+  const wtPath = join22(wtDir, `${epoch}-${short}`);
   return { wtDir, wtPath };
 }
 function worktreeAddArgs(mode, wtPath, baseRef, branchName) {
@@ -64978,7 +65130,7 @@ var WorkspaceGitService = class {
    * --ignored walks the whole tree of ignored paths and dominates remote latency.
    */
   statusForCwd(cwd) {
-    if (!existsSync31(join22(cwd, ".git")) && !isGitWorktree(cwd)) {
+    if (!existsSync31(join23(cwd, ".git")) && !isGitWorktree(cwd)) {
       return { isRepo: false, branch: null, dirty: false, ahead: 0, behind: 0, porcelain: "" };
     }
     try {
@@ -65233,7 +65385,7 @@ var WorkspaceGitService = class {
       const mainStatus = git(diff.mainDir, ["status", "--porcelain"]).trim();
       if (mainStatus) return { ok: false, reason: "main-dirty" };
       const patch = git(diff.worktreePath, ["diff", "--binary", diff.base, diff.tree]);
-      const patchFile = join22(tmpdir2(), `s1-handoff-${randomUUID8()}.patch`);
+      const patchFile = join23(tmpdir2(), `s1-handoff-${randomUUID8()}.patch`);
       writeFileSync11(patchFile, `${patch}
 `);
       if (git(diff.mainDir, ["status", "--porcelain"]).trim()) {
@@ -65295,7 +65447,7 @@ var WorkspaceGitService = class {
     };
   }
   writeWorkingTree(worktreePath) {
-    const tmpIndex = join22(tmpdir2(), `s1-handoff-${randomUUID8()}.index`);
+    const tmpIndex = join23(tmpdir2(), `s1-handoff-${randomUUID8()}.index`);
     const env = { GIT_INDEX_FILE: tmpIndex };
     try {
       git(worktreePath, ["read-tree", "HEAD"], env);
@@ -66503,7 +66655,7 @@ var CollaborationService = class {
 
 // src/provider/secret-crypto.ts
 import { existsSync as existsSync33, mkdirSync as mkdirSync17, readFileSync as readFileSync16, writeFileSync as writeFileSync12, chmodSync as chmodSync2 } from "node:fs";
-import { dirname as dirname13 } from "node:path";
+import { dirname as dirname14 } from "node:path";
 import { createCipheriv, createDecipheriv, randomBytes as randomBytes5 } from "node:crypto";
 var ENC_PREFIX = "enc:v1:";
 var KEY_BYTES = 32;
@@ -66515,7 +66667,7 @@ function ensureKeyFile(keyPath) {
     const raw = readFileSync16(keyPath);
     if (raw.length === KEY_BYTES) return raw;
   }
-  mkdirSync17(dirname13(keyPath), { recursive: true, mode: 448 });
+  mkdirSync17(dirname14(keyPath), { recursive: true, mode: 448 });
   const key = randomBytes5(KEY_BYTES);
   writeFileSync12(keyPath, key, { mode: 384 });
   try {
@@ -66659,7 +66811,7 @@ var WorkspaceWatchService = class {
 
 // src/workspace/tail-watch-service.ts
 init_fs();
-import { existsSync as existsSync34, fstatSync as fstatSync2, openSync as openSync2, closeSync as closeSync2, statSync as statSync12 } from "node:fs";
+import { existsSync as existsSync34, fstatSync as fstatSync2, openSync as openSync2, closeSync as closeSync2, statSync as statSync12, readSync as readSync2, realpathSync as realpathSync6 } from "node:fs";
 var MAX_POLL_BYTES = 10 * 1024 * 1024;
 var WorkspaceTailWatchService = class {
   constructor(projects, fs) {
@@ -66670,16 +66822,41 @@ var WorkspaceTailWatchService = class {
   start(projectId, relativePath, opts) {
     const project = this.projects.get(projectId);
     if (!project) throw Object.assign(new Error("project not found"), { code: "not_found" });
-    const rel = normalizeProjectRelativePath(relativePath || "");
-    if (!isToolOutputRelativePath(rel)) {
-      throw Object.assign(
-        new Error("tail watch is limited to project-relative paths under temp/"),
-        { code: "invalid_argument" }
-      );
-    }
-    const resolved = resolveProjectPath(project.path, rel);
-    if (!resolved.ok) {
-      throw Object.assign(new Error(resolved.reason), { code: "invalid_argument" });
+    const absolutePath = typeof opts?.absolutePath === "string" && opts.absolutePath ? opts.absolutePath : void 0;
+    let rel = "";
+    let resolvedAbs = "";
+    if (absolutePath) {
+      if (!assertAgentTranscriptAbsolutePath(absolutePath)) {
+        throw Object.assign(
+          new Error("absolute tail watch is limited to agent transcript roots (~/.grok/sessions, ~/.claude/projects)"),
+          { code: "invalid_argument" }
+        );
+      }
+      try {
+        resolvedAbs = existsSync34(absolutePath) ? realpathSync6(absolutePath) : absolutePath;
+      } catch {
+        resolvedAbs = absolutePath;
+      }
+      if (!assertAgentTranscriptAbsolutePath(resolvedAbs)) {
+        throw Object.assign(
+          new Error("absolute tail watch resolved outside agent transcript roots"),
+          { code: "invalid_argument" }
+        );
+      }
+      rel = absolutePath;
+    } else {
+      rel = normalizeProjectRelativePath(relativePath || "");
+      if (!isToolOutputRelativePath(rel)) {
+        throw Object.assign(
+          new Error("tail watch is limited to project-relative paths under temp/"),
+          { code: "invalid_argument" }
+        );
+      }
+      const resolved = resolveProjectPath(project.path, rel);
+      if (!resolved.ok) {
+        throw Object.assign(new Error(resolved.reason), { code: "invalid_argument" });
+      }
+      resolvedAbs = resolved.absolutePath;
     }
     let offset = opts?.offset ?? 0;
     if (!Number.isSafeInteger(offset) || offset < 0) {
@@ -66687,9 +66864,9 @@ var WorkspaceTailWatchService = class {
         code: "invalid_argument"
       });
     }
-    if (existsSync34(resolved.absolutePath)) {
+    if (existsSync34(resolvedAbs)) {
       try {
-        const st = statSync12(resolved.absolutePath);
+        const st = statSync12(resolvedAbs);
         if (!st.isFile()) {
           throw Object.assign(new Error("not a file"), { code: "invalid_argument" });
         }
@@ -66702,12 +66879,19 @@ var WorkspaceTailWatchService = class {
     const watchId = crypto.randomUUID();
     this.entries.set(watchId, {
       projectId,
-      relativePath: rel,
+      relativePath: absolutePath ? "" : rel,
+      // Store resolved path so poll opens the verified target, not a swapped symlink.
+      ...absolutePath ? { absolutePath: resolvedAbs } : {},
       offset,
       owner: opts?.ownerClientId ?? ""
     });
     this.projects.touch(projectId);
-    return { watchId, offset, relativePath: rel };
+    return {
+      watchId,
+      offset,
+      relativePath: absolutePath ? "" : rel,
+      ...absolutePath ? { absolutePath: resolvedAbs } : {}
+    };
   }
   poll(watchId, ownerClientId) {
     const entry = this.entries.get(watchId);
@@ -66718,11 +66902,20 @@ var WorkspaceTailWatchService = class {
     if (!project) {
       throw Object.assign(new Error("project not found"), { code: "not_found" });
     }
-    const resolved = resolveProjectPath(project.path, entry.relativePath);
-    if (!resolved.ok) {
-      throw Object.assign(new Error(resolved.reason), { code: "invalid_argument" });
+    let absolutePath = entry.absolutePath;
+    if (!absolutePath) {
+      const resolved = resolveProjectPath(project.path, entry.relativePath);
+      if (!resolved.ok) {
+        throw Object.assign(new Error(resolved.reason), { code: "invalid_argument" });
+      }
+      absolutePath = resolved.absolutePath;
+    } else if (!assertAgentTranscriptAbsolutePath(absolutePath)) {
+      throw Object.assign(
+        new Error("absolute tail watch resolved outside agent transcript roots"),
+        { code: "invalid_argument" }
+      );
     }
-    if (!existsSync34(resolved.absolutePath)) {
+    if (!existsSync34(absolutePath)) {
       return {
         content: "",
         encoding: "base64",
@@ -66733,7 +66926,7 @@ var WorkspaceTailWatchService = class {
     }
     let size = 0;
     try {
-      const fd = openSync2(resolved.absolutePath, "r");
+      const fd = openSync2(absolutePath, "r");
       try {
         size = fstatSync2(fd).size;
       } finally {
@@ -66755,14 +66948,27 @@ var WorkspaceTailWatchService = class {
       return { content: "", encoding: "base64", offset: entry.offset, size };
     }
     const toRead = Math.min(MAX_POLL_BYTES, size - entry.offset);
-    const slice = this.fs.readFile(entry.projectId, entry.relativePath, {
-      offset: entry.offset,
-      limit: toRead
-    });
+    let contentB64;
+    if (entry.absolutePath) {
+      const buf = Buffer.alloc(toRead);
+      const fd = openSync2(absolutePath, "r");
+      try {
+        const n = readSync2(fd, buf, 0, toRead, entry.offset);
+        contentB64 = buf.subarray(0, n).toString("base64");
+      } finally {
+        closeSync2(fd);
+      }
+    } else {
+      const slice = this.fs.readFile(entry.projectId, entry.relativePath, {
+        offset: entry.offset,
+        limit: toRead
+      });
+      contentB64 = slice.content;
+    }
     entry.offset = entry.offset + toRead;
     this.projects.touch(entry.projectId);
     return {
-      content: slice.content,
+      content: contentB64,
       encoding: "base64",
       offset: entry.offset,
       size
@@ -79693,7 +79899,7 @@ function readRuntimeStatus(nodeHome) {
 // src/systemd/install.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
 import { chmodSync as chmodSync3, existsSync as existsSync36, mkdirSync as mkdirSync18, unlinkSync as unlinkSync2, writeFileSync as writeFileSync14 } from "node:fs";
-import { dirname as dirname14 } from "node:path";
+import { dirname as dirname15 } from "node:path";
 
 // src/systemd/unit.ts
 function renderSystemdUserUnit(opts) {
@@ -79750,7 +79956,7 @@ function checkLinger(user) {
   return { enabled: null, raw };
 }
 function writeSystemdUserUnit(opts, unitPath = systemdUserUnitPath()) {
-  mkdirSync18(dirname14(unitPath), { recursive: true });
+  mkdirSync18(dirname15(unitPath), { recursive: true });
   writeFileSync14(unitPath, renderSystemdUserUnit(opts), { encoding: "utf8", mode: 420 });
   try {
     chmodSync3(unitPath, 420);
@@ -79827,9 +80033,9 @@ function systemdUserStatus() {
 
 // src/session/harness-cli.ts
 init_environment();
-import { accessSync as accessSync2, constants as constants2, existsSync as existsSync37, realpathSync as realpathSync6, statSync as statSync13 } from "node:fs";
+import { accessSync as accessSync2, constants as constants2, existsSync as existsSync37, realpathSync as realpathSync7, statSync as statSync13 } from "node:fs";
 import { isAbsolute as isAbsolute4, resolve as resolve11 } from "node:path";
-import { homedir as homedir6 } from "node:os";
+import { homedir as homedir8 } from "node:os";
 var DEFERRED_FLAGS = /* @__PURE__ */ new Set([
   "--env-file",
   "--server-password-stdin",
@@ -80345,7 +80551,7 @@ function resolveExternalCommand2(explicit, pathCandidates) {
   }
   const pathEnv = process.env.PATH || "";
   const dirs = pathEnv.split(":").filter(Boolean);
-  const home = process.env.HOME || homedir6();
+  const home = process.env.HOME || homedir8();
   const extra = [
     `${home}/.local/bin`,
     `${home}/.npm-global/bin`,
@@ -80376,7 +80582,7 @@ function isUsableExecutable(path) {
     return null;
   }
   try {
-    return realpathSync6(path);
+    return realpathSync7(path);
   } catch {
     return path;
   }
@@ -80744,7 +80950,7 @@ async function main() {
     const result = installSystemdUserService({
       execStart: `${process.execPath} ${execStart}`,
       nodeHome,
-      home: process.env.HOME || homedir7(),
+      home: process.env.HOME || homedir9(),
       bindHost: host,
       bindPort: port
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@super-one/cli",
-  "version": "0.50.5-alpha",
+  "version": "0.50.7-alpha",
   "description": "SuperOne headless node CLI — remote execution environment (RPC, workspaces, sessions).",
   "type": "module",
   "license": "BUSL-1.1",