@synkro-sh/cli 1.7.62 → 1.7.63

package/dist/bootstrap.js

@@ -132,7 +132,7 @@ function getIdentity() {
   if (cached2) return cached2;
   let cliVersion = "0.0.0";
   try {
-    cliVersion = "1.7.62";
+    cliVersion = "1.7.63";
   } catch {
   }
   const creds = loadCredentialsIdentity();
@@ -1388,11 +1388,45 @@ var init_agentDetect = __esm({
   }
 });
 
+// cli/installer/platform.ts
+import { existsSync as existsSync10 } from "fs";
+import { homedir as homedir8 } from "os";
+import { join as join8 } from "path";
+import { spawnSync } from "child_process";
+function resolveBunBin() {
+  const finder = IS_WINDOWS ? "where" : "which";
+  const r = spawnSync(finder, ["bun"], { encoding: "utf-8", timeout: 5e3 });
+  const resolved = (r.stdout || "").split(/\r?\n/).map((s) => s.trim()).find(Boolean);
+  if (resolved) return resolved;
+  const home = process.env.USERPROFILE || homedir8();
+  const candidates = IS_WINDOWS ? [join8(home, ".bun", "bin", "bun.exe"), "C:\\Program Files\\bun\\bin\\bun.exe"] : ["/opt/homebrew/bin/bun", "/usr/local/bin/bun", join8(home, ".bun", "bin", "bun")];
+  for (const p of candidates) if (existsSync10(p)) return p;
+  return IS_WINDOWS ? "bun.exe" : "bun";
+}
+function quoteArg(s) {
+  return IS_WINDOWS ? `"${s}"` : "'" + s.replace(/'/g, "'\\''") + "'";
+}
+function ccHookCommand(scriptPath) {
+  if (!IS_WINDOWS) return scriptPath;
+  return `${quoteArg(resolveBunBin())} ${quoteArg(scriptPath)}`;
+}
+function isSynkroHookCommand(command) {
+  if (typeof command !== "string") return false;
+  return command.replace(/\\/g, "/").includes("/.synkro/hooks/");
+}
+var IS_WINDOWS;
+var init_platform = __esm({
+  "cli/installer/platform.ts"() {
+    "use strict";
+    IS_WINDOWS = process.platform === "win32";
+  }
+});
+
 // cli/installer/ccHookConfig.ts
-import { existsSync as existsSync10, readFileSync as readFileSync8, writeFileSync as writeFileSync6, renameSync as renameSync3, mkdirSync as mkdirSync4 } from "fs";
+import { existsSync as existsSync11, readFileSync as readFileSync8, writeFileSync as writeFileSync6, renameSync as renameSync3, mkdirSync as mkdirSync4 } from "fs";
 import { dirname } from "path";
 function readSettings(path) {
-  if (!existsSync10(path)) return {};
+  if (!existsSync11(path)) return {};
   try {
     const raw = readFileSync8(path, "utf-8");
     return JSON.parse(raw);
@@ -1409,9 +1443,19 @@ function writeSettingsAtomic(path, settings) {
 function isSynkroEntry(entry) {
   if (entry?.[SYNKRO_MARKER]) return true;
   const hooks = Array.isArray(entry?.hooks) ? entry.hooks : [];
-  return hooks.some(
-    (h) => typeof h?.command === "string" && h.command.includes("/.synkro/hooks/")
-  );
+  return hooks.some((h) => isSynkroHookCommand(h?.command));
+}
+function finalizeHookCommands(hooks) {
+  for (const evt of Object.keys(hooks)) {
+    const arr = hooks[evt];
+    if (!Array.isArray(arr)) continue;
+    for (const entry of arr) {
+      if (!entry?.[SYNKRO_MARKER] || !Array.isArray(entry.hooks)) continue;
+      for (const h of entry.hooks) {
+        if (typeof h?.command === "string") h.command = ccHookCommand(h.command);
+      }
+    }
+  }
 }
 function removeSynkroEntries(events, eventName) {
   if (!events) return;
@@ -1592,10 +1636,11 @@ function installCCHooks(settingsPath, config) {
     delete settings.env.ANTHROPIC_BASE_URL;
     if (Object.keys(settings.env).length === 0) delete settings.env;
   }
+  finalizeHookCommands(settings.hooks);
   writeSettingsAtomic(settingsPath, settings);
 }
 function uninstallCCHooks(settingsPath) {
-  if (!existsSync10(settingsPath)) return false;
+  if (!existsSync11(settingsPath)) return false;
   const settings = readSettings(settingsPath);
   if (!settings.hooks) return false;
   const events = ["PreToolUse", "PostToolUse", "SessionEnd", "SessionStart", "Stop", "UserPromptSubmit"];
@@ -1621,6 +1666,7 @@ var SYNKRO_MARKER, USAGE_PROXY_URL;
 var init_ccHookConfig = __esm({
   "cli/installer/ccHookConfig.ts"() {
     "use strict";
+    init_platform();
     SYNKRO_MARKER = "__synkro_managed__";
     USAGE_PROXY_URL = `http://127.0.0.1:${process.env.SYNKRO_HOST_USAGE_PROXY_PORT || "18927"}`;
   }
@@ -1629,7 +1675,7 @@ var init_ccHookConfig = __esm({
 // cli/installer/cursorHookConfig.ts
 import { readFileSync as readFileSync9, writeFileSync as writeFileSync7, renameSync as renameSync4, mkdirSync as mkdirSync5 } from "fs";
 import { dirname as dirname2, resolve, normalize } from "path";
-import { homedir as homedir8 } from "os";
+import { homedir as homedir9 } from "os";
 function shellQuote(s) {
   return "'" + s.replace(/'/g, "'\\''") + "'";
 }
@@ -1665,7 +1711,7 @@ function writeHooksFileAtomic(rawPath, data) {
 }
 function isSynkroEntry2(entry) {
   if (entry?.[SYNKRO_MARKER2]) return true;
-  return typeof entry?.command === "string" && entry.command.includes("/.synkro/hooks/");
+  return isSynkroHookCommand(entry?.command);
 }
 function removeSynkroEntries2(hooks, event) {
   if (!hooks) return;
@@ -1828,10 +1874,11 @@ var SYNKRO_MARKER2, ALLOWED_PARENT_DIRS, ALL_EVENTS;
 var init_cursorHookConfig = __esm({
   "cli/installer/cursorHookConfig.ts"() {
     "use strict";
+    init_platform();
     SYNKRO_MARKER2 = "__synkro_managed__";
     ALLOWED_PARENT_DIRS = [
-      resolve(homedir8(), ".cursor"),
-      resolve(homedir8(), ".config", "cursor")
+      resolve(homedir9(), ".cursor"),
+      resolve(homedir9(), ".config", "cursor")
     ];
     ALL_EVENTS = [
       "sessionStart",
@@ -1851,13 +1898,12 @@ var init_cursorHookConfig = __esm({
 });
 
 // cli/installer/mcpConfig.ts
-import { existsSync as existsSync11, readFileSync as readFileSync10, writeFileSync as writeFileSync8, renameSync as renameSync5, mkdirSync as mkdirSync6 } from "fs";
-import { homedir as homedir9 } from "os";
-import { dirname as dirname3, join as join8 } from "path";
-import { spawnSync } from "child_process";
+import { existsSync as existsSync12, readFileSync as readFileSync10, writeFileSync as writeFileSync8, renameSync as renameSync5, mkdirSync as mkdirSync6 } from "fs";
+import { homedir as homedir10 } from "os";
+import { dirname as dirname3, join as join9 } from "path";
 import { randomBytes } from "crypto";
 function readClaudeJson() {
-  if (!existsSync11(CC_CONFIG_PATH)) return {};
+  if (!existsSync12(CC_CONFIG_PATH)) return {};
   try {
     const raw = readFileSync10(CC_CONFIG_PATH, "utf-8");
     return JSON.parse(raw);
@@ -1878,7 +1924,7 @@ function installMcpConfig(opts) {
     if (entry?.[SYNKRO_MARKER3] === true) delete config.mcpServers[name];
   }
   if (opts.local) {
-    const proxyScript = join8(homedir9(), ".synkro", "hooks", "mcp-stdio-proxy.ts");
+    const proxyScript = join9(homedir10(), ".synkro", "hooks", "mcp-stdio-proxy.ts");
     config.mcpServers[SYNKRO_SERVER_NAME] = {
       type: "stdio",
       command: "bun",
@@ -1899,7 +1945,7 @@ function installMcpConfig(opts) {
   return { path: CC_CONFIG_PATH, url };
 }
 function uninstallMcpConfig() {
-  if (!existsSync11(CC_CONFIG_PATH)) return false;
+  if (!existsSync12(CC_CONFIG_PATH)) return false;
   const config = readClaudeJson();
   if (!config.mcpServers || Object.keys(config.mcpServers).length === 0) return false;
   let removed = false;
@@ -1915,7 +1961,7 @@ function uninstallMcpConfig() {
   return true;
 }
 function readCursorMcpJson() {
-  if (!existsSync11(CURSOR_MCP_PATH)) return {};
+  if (!existsSync12(CURSOR_MCP_PATH)) return {};
   try {
     const raw = readFileSync10(CURSOR_MCP_PATH, "utf-8");
     return JSON.parse(raw);
@@ -1938,7 +1984,7 @@ function installCursorMcpConfig(opts) {
   if (opts.local) {
     const port = process.env.SYNKRO_MCP_PORT || "18931";
     const url2 = `http://127.0.0.1:${port}/`;
-    const jwtPath = join8(homedir9(), ".synkro", ".mcp-jwt");
+    const jwtPath = join9(homedir10(), ".synkro", ".mcp-jwt");
     let jwt2 = "";
     try {
       jwt2 = readFileSync10(jwtPath, "utf-8").trim();
@@ -1962,7 +2008,7 @@ function installCursorMcpConfig(opts) {
   return { path: CURSOR_MCP_PATH, url };
 }
 function uninstallCursorMcpConfig() {
-  if (!existsSync11(CURSOR_MCP_PATH)) return false;
+  if (!existsSync12(CURSOR_MCP_PATH)) return false;
   const config = readCursorMcpJson();
   if (!config.mcpServers || Object.keys(config.mcpServers).length === 0) return false;
   let removed = false;
@@ -1977,17 +2023,11 @@ function uninstallCursorMcpConfig() {
   writeCursorMcpJsonAtomic(config);
   return true;
 }
-function resolveBunBin() {
-  const r = spawnSync("which", ["bun"], { encoding: "utf-8", timeout: 5e3 });
-  const resolved = (r.stdout || "").split("\n")[0].trim();
-  if (resolved) return resolved;
-  for (const p of ["/opt/homebrew/bin/bun", "/usr/local/bin/bun", join8(homedir9(), ".bun", "bin", "bun")]) {
-    if (existsSync11(p)) return p;
-  }
-  return "bun";
+function resolveBunBin2() {
+  return resolveBunBin();
 }
 function readDesktopJson() {
-  if (!existsSync11(CLAUDE_DESKTOP_CONFIG_PATH)) return {};
+  if (!existsSync12(CLAUDE_DESKTOP_CONFIG_PATH)) return {};
   try {
     return JSON.parse(readFileSync10(CLAUDE_DESKTOP_CONFIG_PATH, "utf-8"));
   } catch (err) {
@@ -2001,7 +2041,7 @@ function writeDesktopJsonAtomic(config) {
   renameSync5(tmpPath, CLAUDE_DESKTOP_CONFIG_PATH);
 }
 function installClaudeDesktopMcpConfig() {
-  if (!existsSync11(MCP_STDIO_PROXY_PATH)) {
+  if (!existsSync12(MCP_STDIO_PROXY_PATH)) {
     return {
       ok: false,
       path: CLAUDE_DESKTOP_CONFIG_PATH,
@@ -2015,7 +2055,7 @@ function installClaudeDesktopMcpConfig() {
     if (entry?.[SYNKRO_MARKER3] === true) delete config.mcpServers[name];
   }
   config.mcpServers[SYNKRO_SERVER_NAME] = {
-    command: resolveBunBin(),
+    command: resolveBunBin2(),
     args: ["run", MCP_STDIO_PROXY_PATH],
     env: { SYNKRO_MCP_PORT: process.env.SYNKRO_MCP_PORT || "18931" },
     [SYNKRO_MARKER3]: true
@@ -2024,7 +2064,7 @@ function installClaudeDesktopMcpConfig() {
   return { ok: true, path: CLAUDE_DESKTOP_CONFIG_PATH, proxy: MCP_STDIO_PROXY_PATH };
 }
 function uninstallClaudeDesktopMcpConfig() {
-  if (!existsSync11(CLAUDE_DESKTOP_CONFIG_PATH)) return false;
+  if (!existsSync12(CLAUDE_DESKTOP_CONFIG_PATH)) return false;
   const config = readDesktopJson();
   if (!config.mcpServers || Object.keys(config.mcpServers).length === 0) return false;
   let removed = false;
@@ -2043,26 +2083,27 @@ var SYNKRO_MARKER3, SYNKRO_SERVER_NAME, CC_CONFIG_PATH, CURSOR_MCP_PATH, CLAUDE_
 var init_mcpConfig = __esm({
   "cli/installer/mcpConfig.ts"() {
     "use strict";
+    init_platform();
     SYNKRO_MARKER3 = "__synkro_managed__";
     SYNKRO_SERVER_NAME = "synkro-guardrails";
-    CC_CONFIG_PATH = join8(homedir9(), ".claude.json");
-    CURSOR_MCP_PATH = join8(homedir9(), ".cursor", "mcp.json");
-    CLAUDE_DESKTOP_CONFIG_PATH = join8(
-      homedir9(),
+    CC_CONFIG_PATH = join9(homedir10(), ".claude.json");
+    CURSOR_MCP_PATH = join9(homedir10(), ".cursor", "mcp.json");
+    CLAUDE_DESKTOP_CONFIG_PATH = join9(
+      homedir10(),
       "Library",
       "Application Support",
       "Claude",
       "claude_desktop_config.json"
     );
-    MCP_STDIO_PROXY_PATH = join8(homedir9(), ".synkro", "hooks", "mcp-stdio-proxy.ts");
+    MCP_STDIO_PROXY_PATH = join9(homedir10(), ".synkro", "hooks", "mcp-stdio-proxy.ts");
   }
 });
 
 // cli/installer/skillParser.ts
-import { existsSync as existsSync12 } from "fs";
+import { existsSync as existsSync13 } from "fs";
 import { resolve as resolve2 } from "path";
 function resolveSkillPaths(skills, repoRoot) {
-  return skills.filter((s) => s.endsWith(".md")).map((s) => resolve2(repoRoot, s)).filter((p) => existsSync12(p));
+  return skills.filter((s) => s.endsWith(".md")).map((s) => resolve2(repoRoot, s)).filter((p) => existsSync13(p));
 }
 var init_skillParser = __esm({
   "cli/installer/skillParser.ts"() {
@@ -2721,9 +2762,9 @@ __export(stub_exports, {
   saveCredentials: () => saveCredentials
 });
 import { createServer } from "http";
-import { writeFileSync as writeFileSync9, readFileSync as readFileSync11, existsSync as existsSync13, mkdirSync as mkdirSync7, unlinkSync as unlinkSync4 } from "fs";
-import { homedir as homedir10, platform as platform2 } from "os";
-import { join as join9, dirname as dirname4 } from "path";
+import { writeFileSync as writeFileSync9, readFileSync as readFileSync11, existsSync as existsSync14, mkdirSync as mkdirSync7, unlinkSync as unlinkSync4 } from "fs";
+import { homedir as homedir11, platform as platform2 } from "os";
+import { join as join10, dirname as dirname4 } from "path";
 import { execFile } from "child_process";
 import jwt from "jsonwebtoken";
 function openBrowser(url) {
@@ -2752,13 +2793,13 @@ function openBrowser(url) {
 }
 function saveCredentials(data) {
   const dir = dirname4(AUTH_FILE);
-  if (!existsSync13(dir)) {
+  if (!existsSync14(dir)) {
     mkdirSync7(dir, { recursive: true, mode: 448 });
   }
   writeFileSync9(AUTH_FILE, JSON.stringify(data, null, 2), { mode: 384 });
 }
 function loadCredentials() {
-  if (!existsSync13(AUTH_FILE)) {
+  if (!existsSync14(AUTH_FILE)) {
     return null;
   }
   try {
@@ -3017,7 +3058,7 @@ async function ensureValidToken() {
   return true;
 }
 function clearCredentials() {
-  if (existsSync13(AUTH_FILE)) {
+  if (existsSync14(AUTH_FILE)) {
     unlinkSync4(AUTH_FILE);
   }
 }
@@ -3037,7 +3078,7 @@ var init_stub = __esm({
     PORT = 8100;
     RAW_WEB_AUTH_URL = process.env.SYNKRO_WEB_AUTH_URL;
     SYNKRO_WEB_AUTH_URL = RAW_WEB_AUTH_URL && /^https?:\/\//.test(RAW_WEB_AUTH_URL) ? RAW_WEB_AUTH_URL : "https://app.synkro.sh";
-    AUTH_FILE = process.env.SYNKRO_AUTH_FILE || join9(homedir10(), ".synkro", "credentials.json");
+    AUTH_FILE = process.env.SYNKRO_AUTH_FILE || join10(homedir11(), ".synkro", "credentials.json");
     RAW_API_URL = process.env.SYNKRO_CRUD_URL || process.env.SYNKRO_API_URL;
     SYNKRO_API_URL = RAW_API_URL && /^https?:\/\//.test(RAW_API_URL) ? RAW_API_URL : "https://api.synkro.sh";
     ERROR_HTML = `
@@ -3197,9 +3238,9 @@ jobs:
 });
 
 // cli/installer/githubSetup.ts
-import { existsSync as existsSync14, mkdirSync as mkdirSync8, writeFileSync as writeFileSync10 } from "fs";
+import { existsSync as existsSync15, mkdirSync as mkdirSync8, writeFileSync as writeFileSync10 } from "fs";
 import { execSync as execSync2 } from "child_process";
-import { join as join10 } from "path";
+import { join as join11 } from "path";
 function ghSecretSet(token, owner, repo, name, value) {
   execSync2(`gh secret set ${name} --repo ${owner}/${repo} --body -`, {
     input: value,
@@ -3245,17 +3286,17 @@ async function pushSecretsToRepo(opts, owner, repo, secrets) {
   ghSecretSet(opts.token, owner, repo, "SYNKRO_API_KEY", secrets.synkroApiKey);
 }
 function writeWorkflowFile(repoRootPath) {
-  const workflowDir = join10(repoRootPath, ".github", "workflows");
+  const workflowDir = join11(repoRootPath, ".github", "workflows");
   mkdirSync8(workflowDir, { recursive: true });
-  const workflowFile = join10(workflowDir, "synkro.yml");
+  const workflowFile = join11(workflowDir, "synkro.yml");
   writeFileSync10(workflowFile, SYNKRO_WORKFLOW_YAML, "utf-8");
   return workflowFile;
 }
 function findGitRoot(startCwd) {
   let cur = startCwd;
   while (cur && cur !== "/") {
-    if (existsSync14(join10(cur, ".git"))) return cur;
-    const parent = join10(cur, "..");
+    if (existsSync15(join11(cur, ".git"))) return cur;
+    const parent = join11(cur, "..");
     if (parent === cur) break;
     cur = parent;
   }
@@ -3605,11 +3646,11 @@ __export(claudeDesktopTap_exports, {
   runClaudeDesktopTap: () => runClaudeDesktopTap
 });
 import { spawn as spawn2 } from "child_process";
-import { writeFileSync as writeFileSync11, mkdtempSync, mkdirSync as mkdirSync9, readFileSync as readFileSync12, existsSync as existsSync15 } from "fs";
-import { join as join11 } from "path";
-import { homedir as homedir11 } from "os";
+import { writeFileSync as writeFileSync11, mkdtempSync, mkdirSync as mkdirSync9, readFileSync as readFileSync12, existsSync as existsSync16 } from "fs";
+import { join as join12 } from "path";
+import { homedir as homedir12 } from "os";
 function claudeDesktopInstalled() {
-  return process.platform === "darwin" && existsSync15("/Applications/Claude.app/Contents/MacOS/Claude");
+  return process.platform === "darwin" && existsSync16("/Applications/Claude.app/Contents/MacOS/Claude");
 }
 function buildRunner(sessionDir) {
   return `#!/bin/bash
@@ -3744,13 +3785,13 @@ async function runClaudeDesktopTap(opts = {}) {
   } catch (err) {
     console.log(`  \u26A0 Could not register Claude Desktop MCP: ${err.message}`);
   }
-  const cdRoot = join11(homedir11(), ".synkro", "cd-sessions");
+  const cdRoot = join12(homedir12(), ".synkro", "cd-sessions");
   mkdirSync9(cdRoot, { recursive: true });
-  const sessionDir = mkdtempSync(join11(cdRoot, "synkro-cd-"));
-  writeFileSync11(join11(sessionDir, "tap.py"), ADDON_PY, "utf-8");
-  writeFileSync11(join11(sessionDir, "mcp_proxy.py"), MCP_PROXY_PY, { mode: 493 });
-  writeFileSync11(join11(sessionDir, "mcp_patch.py"), MCP_PATCH_PY, "utf-8");
-  const runnerPath = join11(sessionDir, "run.sh");
+  const sessionDir = mkdtempSync(join12(cdRoot, "synkro-cd-"));
+  writeFileSync11(join12(sessionDir, "tap.py"), ADDON_PY, "utf-8");
+  writeFileSync11(join12(sessionDir, "mcp_proxy.py"), MCP_PROXY_PY, { mode: 493 });
+  writeFileSync11(join12(sessionDir, "mcp_patch.py"), MCP_PATCH_PY, "utf-8");
+  const runnerPath = join12(sessionDir, "run.sh");
   writeFileSync11(runnerPath, buildRunner(sessionDir), { mode: 493 });
   await new Promise((resolve4) => {
     const child = spawn2("bash", [runnerPath], {
@@ -3784,7 +3825,7 @@ var init_claudeDesktopTap = __esm({
     TURN_VERDICTS_URL = "http://127.0.0.1:18931/api/local/turn-verdicts";
     TURN_VERDICT_URL = "http://127.0.0.1:18931/api/local/turn-verdict";
     MCP_EVENT_URL = "http://127.0.0.1:18931/api/local/mcp/event";
-    JWT_PATH = join11(homedir11(), ".synkro", ".mcp-jwt");
+    JWT_PATH = join12(homedir12(), ".synkro", ".mcp-jwt");
     ADDON_PY = `import os, json, threading, urllib.request, urllib.error, re, base64, time, hashlib
 from mitmproxy import http
 
@@ -4900,9 +4941,9 @@ __export(macKeychain_exports, {
   writeCursorApiKey: () => writeCursorApiKey,
   writeRefreshAgent: () => writeRefreshAgent
 });
-import { existsSync as existsSync16, mkdirSync as mkdirSync10, writeFileSync as writeFileSync12, chmodSync as chmodSync2, readFileSync as readFileSync13 } from "fs";
-import { homedir as homedir12, platform as platform3 } from "os";
-import { join as join12 } from "path";
+import { existsSync as existsSync17, mkdirSync as mkdirSync10, writeFileSync as writeFileSync12, chmodSync as chmodSync2, readFileSync as readFileSync13 } from "fs";
+import { homedir as homedir13, platform as platform3 } from "os";
+import { join as join13 } from "path";
 import { spawnSync as spawnSync2 } from "child_process";
 function needsKeychainBridge() {
   return platform3() === "darwin";
@@ -4924,7 +4965,7 @@ function exportKeychainCreds() {
   chmodSync2(CLAUDE_CREDS_DIR, 448);
   let changed = true;
   try {
-    if (existsSync16(CLAUDE_CREDS_FILE)) {
+    if (existsSync17(CLAUDE_CREDS_FILE)) {
       changed = readFileSync13(CLAUDE_CREDS_FILE, "utf-8") !== blob;
     }
   } catch {
@@ -4935,7 +4976,7 @@ function exportKeychainCreds() {
 }
 function cursorApiKeyConfigured() {
   try {
-    return existsSync16(CURSOR_API_KEY_FILE) && readFileSync13(CURSOR_API_KEY_FILE, "utf-8").trim().length > 0;
+    return existsSync17(CURSOR_API_KEY_FILE) && readFileSync13(CURSOR_API_KEY_FILE, "utf-8").trim().length > 0;
   } catch {
     return false;
   }
@@ -4970,7 +5011,7 @@ async function validateCursorApiKey() {
   }
 }
 function credsAreStale() {
-  if (!existsSync16(CLAUDE_CREDS_FILE)) return true;
+  if (!existsSync17(CLAUDE_CREDS_FILE)) return true;
   try {
     const raw = readFileSync13(CLAUDE_CREDS_FILE, "utf-8");
     const exp = JSON.parse(raw)?.claudeAiOauth?.expiresAt ?? 0;
@@ -4987,7 +5028,7 @@ function writeRefreshAgent(synkroBinPath) {
   if (platform3() !== "darwin") {
     throw new KeychainExportError("writeRefreshAgent is darwin-only");
   }
-  mkdirSync10(join12(homedir12(), "Library", "LaunchAgents"), { recursive: true });
+  mkdirSync10(join13(homedir13(), "Library", "LaunchAgents"), { recursive: true });
   mkdirSync10(SYNKRO_DIR6, { recursive: true });
   const script = `#!/bin/bash
 # Generated by synkro (writeRefreshAgent). Expiry-aware Claude creds refresher.
@@ -5073,8 +5114,8 @@ function uninstallRefreshAgent() {
   });
   try {
     const fs = __require("fs");
-    if (existsSync16(LAUNCHD_PLIST)) fs.unlinkSync(LAUNCHD_PLIST);
-    if (existsSync16(REFRESH_SCRIPT)) fs.unlinkSync(REFRESH_SCRIPT);
+    if (existsSync17(LAUNCHD_PLIST)) fs.unlinkSync(LAUNCHD_PLIST);
+    if (existsSync17(REFRESH_SCRIPT)) fs.unlinkSync(REFRESH_SCRIPT);
   } catch {
   }
 }
@@ -5093,16 +5134,16 @@ var SYNKRO_DIR6, CLAUDE_CREDS_DIR, CLAUDE_CREDS_FILE, CURSOR_CREDS_DIR, CURSOR_A
 var init_macKeychain = __esm({
   "cli/local-cc/macKeychain.ts"() {
     "use strict";
-    SYNKRO_DIR6 = join12(homedir12(), ".synkro");
-    CLAUDE_CREDS_DIR = join12(SYNKRO_DIR6, "claude-creds");
-    CLAUDE_CREDS_FILE = join12(CLAUDE_CREDS_DIR, ".credentials.json");
-    CURSOR_CREDS_DIR = join12(SYNKRO_DIR6, "cursor-creds");
-    CURSOR_API_KEY_FILE = join12(CURSOR_CREDS_DIR, "api-key");
+    SYNKRO_DIR6 = join13(homedir13(), ".synkro");
+    CLAUDE_CREDS_DIR = join13(SYNKRO_DIR6, "claude-creds");
+    CLAUDE_CREDS_FILE = join13(CLAUDE_CREDS_DIR, ".credentials.json");
+    CURSOR_CREDS_DIR = join13(SYNKRO_DIR6, "cursor-creds");
+    CURSOR_API_KEY_FILE = join13(CURSOR_CREDS_DIR, "api-key");
     KEYCHAIN_SERVICE = "Claude Code-credentials";
     LAUNCHD_LABEL = "com.synkro.cli.claude-creds-refresh";
-    LAUNCHD_PLIST = join12(homedir12(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
-    REFRESH_SCRIPT = join12(SYNKRO_DIR6, "claude-creds-refresh-loop.sh");
-    REFRESH_LOG = join12(SYNKRO_DIR6, "claude-creds-refresh.log");
+    LAUNCHD_PLIST = join13(homedir13(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
+    REFRESH_SCRIPT = join13(SYNKRO_DIR6, "claude-creds-refresh-loop.sh");
+    REFRESH_LOG = join13(SYNKRO_DIR6, "claude-creds-refresh.log");
     REFRESH_EXPIRY_BUFFER_SECONDS = 120;
     MIN_REFRESH_INTERVAL_SECONDS = 30;
     MAX_REFRESH_INTERVAL_SECONDS = 5 * 60;
@@ -5141,9 +5182,9 @@ __export(dockerInstall_exports, {
   waitForContainerReady: () => waitForContainerReady,
   waitForWorkersReady: () => waitForWorkersReady
 });
-import { copyFileSync, existsSync as existsSync17, mkdirSync as mkdirSync11, readFileSync as readFileSync14, readdirSync as readdirSync2 } from "fs";
-import { homedir as homedir13 } from "os";
-import { join as join13 } from "path";
+import { copyFileSync, existsSync as existsSync18, mkdirSync as mkdirSync11, readFileSync as readFileSync14, readdirSync as readdirSync2 } from "fs";
+import { homedir as homedir14 } from "os";
+import { join as join14 } from "path";
 import { execSync as execSync4, spawnSync as spawnSync3 } from "child_process";
 function splitWorkers(total, providers) {
   const t = Math.max(0, Math.floor(total));
@@ -5238,8 +5279,8 @@ function readSynkroFileConfig() {
   try {
     const root = execSync4("git rev-parse --show-toplevel 2>/dev/null", { encoding: "utf-8", timeout: 3e3, stdio: ["pipe", "pipe", "pipe"] }).trim();
     if (!root) return { pool: "auto", warnings: [] };
-    const fp = join13(root, "synkro.toml");
-    if (!existsSync17(fp)) return { pool: "auto", warnings: [] };
+    const fp = join14(root, "synkro.toml");
+    if (!existsSync18(fp)) return { pool: "auto", warnings: [] };
     const parsed = parseSynkroToml(readFileSync14(fp, "utf-8"));
     return resolveGraderPool(parsed);
   } catch {
@@ -5315,7 +5356,7 @@ function assertDockerAvailable() {
 }
 function claudeCredsHostDir() {
   if (needsKeychainBridge()) return CLAUDE_CREDS_DIR;
-  return join13(homedir13(), ".claude");
+  return join14(homedir14(), ".claude");
 }
 function resolveSynkroBin() {
   const which2 = spawnSync3("which", ["synkro"], { encoding: "utf-8", timeout: 5e3 });
@@ -5371,11 +5412,11 @@ async function dockerInstall(opts = {}) {
   mkdirSync11(PGDATA_PATH, { recursive: true });
   mkdirSync11(BACKUP_DIR, { recursive: true });
   mkdirSync11(CLAUDE_HOST_STATE_DIR, { recursive: true });
-  const hostClaudeJson = join13(homedir13(), ".claude.json");
-  if (existsSync17(hostClaudeJson)) {
+  const hostClaudeJson = join14(homedir14(), ".claude.json");
+  if (existsSync18(hostClaudeJson)) {
     copyFileSync(hostClaudeJson, CLAUDE_HOST_STATE_FILE);
   }
-  if (!existsSync17(MCP_JWT_PATH)) {
+  if (!existsSync18(MCP_JWT_PATH)) {
     throw new DockerInstallError(
       `MCP JWT missing at ${MCP_JWT_PATH}. The installer should mint this before calling dockerInstall.`
     );
@@ -5404,7 +5445,7 @@ async function dockerInstall(opts = {}) {
       console.warn(`    Plist written to ${plist} \u2014 load manually with launchctl bootstrap when ready.`);
     }
   } else {
-    mkdirSync11(join13(homedir13(), ".claude"), { recursive: true });
+    mkdirSync11(join14(homedir14(), ".claude"), { recursive: true });
   }
   const imageExistsLocally = () => spawnSync3("docker", ["image", "inspect", image], { stdio: "ignore", timeout: 3e4 }).status === 0;
   const skipPull = process.env.SYNKRO_SKIP_PULL === "1" || process.env.SYNKRO_SKIP_PULL === "true";
@@ -5457,7 +5498,7 @@ async function dockerInstall(opts = {}) {
     "-v",
     `${credsDir}:/home/synkro/.claude:rw`,
     "-v",
-    `${join13(homedir13(), ".claude")}:/data/claude-host:ro`,
+    `${join14(homedir14(), ".claude")}:/data/claude-host:ro`,
     "-v",
     `${CLAUDE_HOST_STATE_DIR}:/data/claude-host-state:ro`,
     // Cursor creds — mounted RW so the in-container refresher can rotate the
@@ -5652,7 +5693,7 @@ async function dockerSafeStart() {
     return { ok: false, pgdataState: "no_container", error: "No synkro-server container found. Run `synkro install` first." };
   }
   const pgCheck = checkPgdata();
-  if (existsSync17(PGDATA_PATH) && readdirSync2(PGDATA_PATH).length > 0) {
+  if (existsSync18(PGDATA_PATH) && readdirSync2(PGDATA_PATH).length > 0) {
     if (pgCheck.healthy) {
       console.log(`  pgdata: existing data found \u2014 ${pgCheck.details}`);
     } else {
@@ -5692,7 +5733,7 @@ async function dockerSafeRestart() {
   return { ok: startResult.ok, stop: stopResult, start: startResult };
 }
 function checkPgdata() {
-  if (!existsSync17(PGDATA_PATH)) return { healthy: false, details: "pgdata directory does not exist" };
+  if (!existsSync18(PGDATA_PATH)) return { healthy: false, details: "pgdata directory does not exist" };
   const entries = readdirSync2(PGDATA_PATH);
   if (entries.length === 0) return { healthy: true, details: "empty (fresh start)" };
   const hasPidFile = entries.includes("postmaster.pid");
@@ -5709,11 +5750,11 @@ var init_dockerInstall = __esm({
     "use strict";
     init_agentDetect();
     init_macKeychain();
-    SYNKRO_DIR7 = join13(homedir13(), ".synkro");
-    MCP_JWT_PATH = join13(SYNKRO_DIR7, ".mcp-jwt");
-    PGDATA_PATH = join13(SYNKRO_DIR7, "pgdata");
-    CLAUDE_HOST_STATE_DIR = join13(SYNKRO_DIR7, "claude-host-state");
-    CLAUDE_HOST_STATE_FILE = join13(CLAUDE_HOST_STATE_DIR, ".claude.json");
+    SYNKRO_DIR7 = join14(homedir14(), ".synkro");
+    MCP_JWT_PATH = join14(SYNKRO_DIR7, ".mcp-jwt");
+    PGDATA_PATH = join14(SYNKRO_DIR7, "pgdata");
+    CLAUDE_HOST_STATE_DIR = join14(SYNKRO_DIR7, "claude-host-state");
+    CLAUDE_HOST_STATE_FILE = join14(CLAUDE_HOST_STATE_DIR, ".claude.json");
     HOST_MCP_PORT = parseInt(process.env.SYNKRO_HOST_MCP_PORT || "18931", 10);
     HOST_GRADER_PORT = parseInt(process.env.SYNKRO_HOST_GRADER_PORT || "18929", 10);
     HOST_CWE_PORT = parseInt(process.env.SYNKRO_HOST_CWE_PORT || "18930", 10);
@@ -5728,17 +5769,17 @@ var init_dockerInstall = __esm({
       }
       cause;
     };
-    BACKUP_DIR = join13(SYNKRO_DIR7, "pgdata-backups");
+    BACKUP_DIR = join14(SYNKRO_DIR7, "pgdata-backups");
   }
 });
 
 // cli/local-cc/setupToken.ts
 import { spawn as nodeSpawn } from "child_process";
 import { readFileSync as readFileSync15, unlinkSync as unlinkSync5 } from "fs";
-import { homedir as homedir14, platform as platform4 } from "os";
-import { join as join14 } from "path";
+import { homedir as homedir15, platform as platform4 } from "os";
+import { join as join15 } from "path";
 function captureClaudeSetupToken() {
-  const tmpFile = join14(SYNKRO_DIR8, `token-capture-${Date.now()}.raw`);
+  const tmpFile = join15(SYNKRO_DIR8, `token-capture-${Date.now()}.raw`);
   const isMac = platform4() === "darwin";
   const bin = "script";
   const args2 = isMac ? ["-q", tmpFile, "claude", "setup-token"] : ["-qec", "claude setup-token", tmpFile];
@@ -5818,7 +5859,7 @@ var SYNKRO_DIR8;
 var init_setupToken = __esm({
   "cli/local-cc/setupToken.ts"() {
     "use strict";
-    SYNKRO_DIR8 = join14(homedir14(), ".synkro");
+    SYNKRO_DIR8 = join15(homedir15(), ".synkro");
   }
 });
 
@@ -5828,9 +5869,9 @@ __export(codexCloudSetup_exports, {
   setupCodexCloud: () => setupCodexCloud
 });
 import { spawn as nodeSpawn2, spawnSync as spawnSync4 } from "child_process";
-import { readFileSync as readFileSync16, mkdirSync as mkdirSync12, rmSync, existsSync as existsSync18 } from "fs";
-import { homedir as homedir15 } from "os";
-import { join as join15 } from "path";
+import { readFileSync as readFileSync16, mkdirSync as mkdirSync12, rmSync, existsSync as existsSync19 } from "fs";
+import { homedir as homedir16 } from "os";
+import { join as join16 } from "path";
 function findCodexBinary() {
   if (process.env.SYNKRO_CODEX_BIN) return process.env.SYNKRO_CODEX_BIN;
   const r = spawnSync4("which", ["codex"], { encoding: "utf-8" });
@@ -5859,8 +5900,8 @@ async function setupCodexCloud(gatewayUrl, bearerToken, onStatus) {
   } catch (e) {
     return { ok: false, error: `Codex login failed: ${e.message}` };
   }
-  const authPath = join15(CODEX_CLOUD_HOME, "auth.json");
-  if (!existsSync18(authPath)) {
+  const authPath = join16(CODEX_CLOUD_HOME, "auth.json");
+  if (!existsSync19(authPath)) {
     return { ok: false, error: "codex login completed but no auth.json was written \u2014 did the browser approval finish?" };
   }
   let auth;
@@ -5898,8 +5939,8 @@ var SYNKRO_DIR9, CODEX_CLOUD_HOME;
 var init_codexCloudSetup = __esm({
   "cli/local-cc/codexCloudSetup.ts"() {
     "use strict";
-    SYNKRO_DIR9 = join15(homedir15(), ".synkro");
-    CODEX_CLOUD_HOME = join15(SYNKRO_DIR9, "codex-cloud-session");
+    SYNKRO_DIR9 = join16(homedir16(), ".synkro");
+    CODEX_CLOUD_HOME = join16(SYNKRO_DIR9, "codex-cloud-session");
   }
 });
 
@@ -5912,12 +5953,12 @@ __export(setupGithub_exports, {
 import { createInterface as createInterface2 } from "readline/promises";
 import { stdin as input, stdout as output } from "process";
 import { execSync as execSync5 } from "child_process";
-import { existsSync as existsSync19, readFileSync as readFileSync17 } from "fs";
-import { homedir as homedir16, platform as platform5 } from "os";
-import { join as join16 } from "path";
+import { existsSync as existsSync20, readFileSync as readFileSync17 } from "fs";
+import { homedir as homedir17, platform as platform5 } from "os";
+import { join as join17 } from "path";
 import { execFile as execFile2 } from "child_process";
 function readConfig() {
-  if (!existsSync19(CONFIG_PATH3)) return {};
+  if (!existsSync20(CONFIG_PATH3)) return {};
   const out = {};
   for (const line of readFileSync17(CONFIG_PATH3, "utf-8").split("\n")) {
     const t = line.trim();
@@ -6226,8 +6267,8 @@ var init_setupGithub = __esm({
     init_githubSetup();
     init_stub();
     init_setupToken();
-    SYNKRO_DIR10 = join16(homedir16(), ".synkro");
-    CONFIG_PATH3 = join16(SYNKRO_DIR10, "config.env");
+    SYNKRO_DIR10 = join17(homedir17(), ".synkro");
+    CONFIG_PATH3 = join17(SYNKRO_DIR10, "config.env");
   }
 });
 
@@ -6246,9 +6287,9 @@ __export(install_exports, {
   syncSkillFiles: () => syncSkillFiles,
   writeHookScripts: () => writeHookScripts
 });
-import { existsSync as existsSync20, mkdirSync as mkdirSync13, writeFileSync as writeFileSync13, chmodSync as chmodSync3, readFileSync as readFileSync18, readdirSync as readdirSync3, unlinkSync as unlinkSync6, statSync as statSync2 } from "fs";
-import { homedir as homedir17 } from "os";
-import { join as join17 } from "path";
+import { existsSync as existsSync21, mkdirSync as mkdirSync13, writeFileSync as writeFileSync13, chmodSync as chmodSync3, readFileSync as readFileSync18, readdirSync as readdirSync3, unlinkSync as unlinkSync6, statSync as statSync2 } from "fs";
+import { homedir as homedir18 } from "os";
+import { join as join18 } from "path";
 import { execSync as execSync6 } from "child_process";
 import { createInterface as createInterface3 } from "readline";
 import { createHash as createHash2 } from "crypto";
@@ -6397,33 +6438,33 @@ function ensureSynkroDir() {
   mkdirSync13(HOOKS_DIR, { recursive: true });
   mkdirSync13(BIN_DIR, { recursive: true });
   mkdirSync13(OFFSETS_DIR, { recursive: true });
-  mkdirSync13(join17(SYNKRO_DIR11, "sessions"), { recursive: true });
+  mkdirSync13(join18(SYNKRO_DIR11, "sessions"), { recursive: true });
 }
 function writeHookScripts() {
-  const installExtractCorePath = join17(HOOKS_DIR, "installExtractCore.ts");
-  const bashScriptPath = join17(HOOKS_DIR, "cc-bash-judge.ts");
-  const skillJudgeScriptPath = join17(HOOKS_DIR, "cc-skill-judge.ts");
-  const cursorSkillJudgePath = join17(HOOKS_DIR, "cursor-skill-judge.ts");
-  const bashFollowupScriptPath = join17(HOOKS_DIR, "cc-bash-followup.ts");
-  const editPrecheckScriptPath = join17(HOOKS_DIR, "cc-edit-precheck.ts");
-  const cwePrecheckScriptPath = join17(HOOKS_DIR, "cc-cwe-precheck.ts");
-  const cvePrecheckScriptPath = join17(HOOKS_DIR, "cc-cve-precheck.ts");
-  const planJudgeScriptPath = join17(HOOKS_DIR, "cc-plan-judge.ts");
-  const agentJudgeScriptPath = join17(HOOKS_DIR, "cc-agent-judge.ts");
-  const stopSummaryScriptPath = join17(HOOKS_DIR, "cc-stop-summary.ts");
-  const sessionStartScriptPath = join17(HOOKS_DIR, "cc-session-start.ts");
-  const transcriptSyncScriptPath = join17(HOOKS_DIR, "cc-transcript-sync.ts");
-  const userPromptSubmitScriptPath = join17(HOOKS_DIR, "cc-user-prompt-submit.ts");
-  const commonScriptPath = join17(HOOKS_DIR, "_synkro-common.ts");
-  const commonBashScriptPath = join17(HOOKS_DIR, "_synkro-common.sh");
-  const installScanScriptPath = join17(HOOKS_DIR, "cc-install-scan.ts");
-  const cursorBashJudgePath = join17(HOOKS_DIR, "cursor-bash-judge.ts");
-  const cursorEditCapturePath = join17(HOOKS_DIR, "cursor-edit-capture.ts");
-  const cursorAgentCapturePath = join17(HOOKS_DIR, "cursor-agent-capture.ts");
-  const mcpStdioProxyPath = join17(HOOKS_DIR, "mcp-stdio-proxy.ts");
-  const taskActivateIntentScriptPath = join17(HOOKS_DIR, "cc-task-activate-intent.ts");
-  const mcpGateScriptPath = join17(HOOKS_DIR, "cc-mcp-gate.ts");
-  const stubCommonPath = join17(HOOKS_DIR, "_synkro-stub-common.ts");
+  const installExtractCorePath = join18(HOOKS_DIR, "installExtractCore.ts");
+  const bashScriptPath = join18(HOOKS_DIR, "cc-bash-judge.ts");
+  const skillJudgeScriptPath = join18(HOOKS_DIR, "cc-skill-judge.ts");
+  const cursorSkillJudgePath = join18(HOOKS_DIR, "cursor-skill-judge.ts");
+  const bashFollowupScriptPath = join18(HOOKS_DIR, "cc-bash-followup.ts");
+  const editPrecheckScriptPath = join18(HOOKS_DIR, "cc-edit-precheck.ts");
+  const cwePrecheckScriptPath = join18(HOOKS_DIR, "cc-cwe-precheck.ts");
+  const cvePrecheckScriptPath = join18(HOOKS_DIR, "cc-cve-precheck.ts");
+  const planJudgeScriptPath = join18(HOOKS_DIR, "cc-plan-judge.ts");
+  const agentJudgeScriptPath = join18(HOOKS_DIR, "cc-agent-judge.ts");
+  const stopSummaryScriptPath = join18(HOOKS_DIR, "cc-stop-summary.ts");
+  const sessionStartScriptPath = join18(HOOKS_DIR, "cc-session-start.ts");
+  const transcriptSyncScriptPath = join18(HOOKS_DIR, "cc-transcript-sync.ts");
+  const userPromptSubmitScriptPath = join18(HOOKS_DIR, "cc-user-prompt-submit.ts");
+  const commonScriptPath = join18(HOOKS_DIR, "_synkro-common.ts");
+  const commonBashScriptPath = join18(HOOKS_DIR, "_synkro-common.sh");
+  const installScanScriptPath = join18(HOOKS_DIR, "cc-install-scan.ts");
+  const cursorBashJudgePath = join18(HOOKS_DIR, "cursor-bash-judge.ts");
+  const cursorEditCapturePath = join18(HOOKS_DIR, "cursor-edit-capture.ts");
+  const cursorAgentCapturePath = join18(HOOKS_DIR, "cursor-agent-capture.ts");
+  const mcpStdioProxyPath = join18(HOOKS_DIR, "mcp-stdio-proxy.ts");
+  const taskActivateIntentScriptPath = join18(HOOKS_DIR, "cc-task-activate-intent.ts");
+  const mcpGateScriptPath = join18(HOOKS_DIR, "cc-mcp-gate.ts");
+  const stubCommonPath = join18(HOOKS_DIR, "_synkro-stub-common.ts");
   const stubFiles = [
     [stubCommonPath, STUB_COMMON_TS],
     [bashScriptPath, STUB_BASH_JUDGE_TS],
@@ -6454,7 +6495,7 @@ function writeHookScripts() {
   chmodSync3(mcpStdioProxyPath, 493);
   for (const stale of ["_synkro-common.ts", "_synkro-common.sh", "installExtractCore.ts"]) {
     try {
-      unlinkSync6(join17(HOOKS_DIR, stale));
+      unlinkSync6(join18(HOOKS_DIR, stale));
     } catch {
     }
   }
@@ -6489,11 +6530,11 @@ function shellQuoteSingle2(value) {
 }
 function resolveSynkroBundle() {
   const scriptPath = process.argv[1];
-  if (scriptPath && existsSync20(scriptPath)) return scriptPath;
+  if (scriptPath && existsSync21(scriptPath)) return scriptPath;
   return null;
 }
 function writeConfigEnv(opts) {
-  const credsPath = join17(SYNKRO_DIR11, "credentials.json");
+  const credsPath = join18(SYNKRO_DIR11, "credentials.json");
   const safeGateway = sanitizeConfigValue(opts.gatewayUrl);
   const safeUserId = sanitizeConfigValue(opts.userId);
   const safeOrgId = sanitizeConfigValue(opts.orgId);
@@ -6509,7 +6550,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle2(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle2(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle2(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle2("1.7.62")}`
+    `SYNKRO_VERSION=${shellQuoteSingle2("1.7.63")}`
   ];
   if (safeSynkroBin) lines.push(`SYNKRO_CLI_BIN=${shellQuoteSingle2(safeSynkroBin)}`);
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle2(safeUserId)}`);
@@ -6601,7 +6642,7 @@ async function provisionCloudContainer(opts) {
   let cursorApiKey = "";
   if (cursorTotal > 0) {
     try {
-      cursorApiKey = readFileSync18(join17(SYNKRO_DIR11, "cursor-creds", "api-key"), "utf-8").trim();
+      cursorApiKey = readFileSync18(join18(SYNKRO_DIR11, "cursor-creds", "api-key"), "utf-8").trim();
     } catch {
     }
   }
@@ -6758,7 +6799,7 @@ async function verifyCloudGrader(jwt2) {
 }
 function readPersistedDeployLocation() {
   try {
-    if (existsSync20(CONFIG_PATH4)) {
+    if (existsSync21(CONFIG_PATH4)) {
       const m = readFileSync18(CONFIG_PATH4, "utf-8").match(/^SYNKRO_DEPLOY_LOCATION='([^']*)'/m);
       if (m?.[1] === "cloud") return "cloud";
     }
@@ -6767,7 +6808,7 @@ function readPersistedDeployLocation() {
   return "local";
 }
 function updateConfigEnvLocation(location) {
-  if (!existsSync20(CONFIG_PATH4)) return;
+  if (!existsSync21(CONFIG_PATH4)) return;
   let env = readFileSync18(CONFIG_PATH4, "utf-8");
   const set = (k, v) => {
     const re = new RegExp(`^${k}=.*$`, "m");
@@ -6783,7 +6824,7 @@ async function applyMcpConfig(opts) {
   if (!opts.hasClaudeCode && !opts.hasCursor) return;
   let mcpJwt = "";
   try {
-    mcpJwt = readFileSync18(join17(SYNKRO_DIR11, ".mcp-jwt"), "utf-8").trim();
+    mcpJwt = readFileSync18(join18(SYNKRO_DIR11, ".mcp-jwt"), "utf-8").trim();
   } catch {
   }
   if (!mcpJwt) {
@@ -6901,7 +6942,7 @@ function resolveDeploymentMode() {
   const envOverride = process.env.SYNKRO_DEPLOYMENT_MODE?.toLowerCase();
   if (envOverride === "bare-host" || envOverride === "docker") return envOverride;
   try {
-    if (existsSync20(CONFIG_PATH4)) {
+    if (existsSync21(CONFIG_PATH4)) {
       const m = readFileSync18(CONFIG_PATH4, "utf-8").match(/^SYNKRO_DEPLOYMENT_MODE='([^']*)'/m);
       const val = m?.[1]?.toLowerCase();
       if (val === "bare-host" || val === "docker") return val;
@@ -6929,16 +6970,16 @@ function collectLocalMetadata(includeClaudeCode = true) {
     meta.cc_version = execSync6("claude --version", { encoding: "utf-8", timeout: 5e3 }).trim().split("\n")[0];
   } catch {
   }
-  const claudeDir = join17(homedir17(), ".claude");
+  const claudeDir = join18(homedir18(), ".claude");
   try {
-    const settings = JSON.parse(readFileSync18(join17(claudeDir, "settings.json"), "utf-8"));
+    const settings = JSON.parse(readFileSync18(join18(claudeDir, "settings.json"), "utf-8"));
     const plugins = Object.keys(settings.enabledPlugins ?? {}).filter((k) => settings.enabledPlugins[k]);
     if (plugins.length) meta.enabled_plugins = plugins;
     if (settings.permissions?.defaultMode) meta.permissions_mode = settings.permissions.defaultMode;
   } catch {
   }
   try {
-    const mcpCache = JSON.parse(readFileSync18(join17(claudeDir, "mcp-needs-auth-cache.json"), "utf-8"));
+    const mcpCache = JSON.parse(readFileSync18(join18(claudeDir, "mcp-needs-auth-cache.json"), "utf-8"));
     const mcpNames = Object.keys(mcpCache);
     if (mcpNames.length) meta.mcp_servers = mcpNames;
   } catch {
@@ -6950,10 +6991,10 @@ function collectLocalMetadata(includeClaudeCode = true) {
   } catch {
   }
   try {
-    const sessionsDir = join17(claudeDir, "sessions");
+    const sessionsDir = join18(claudeDir, "sessions");
     const files = readdirSync3(sessionsDir).filter((f) => f.endsWith(".json")).slice(-5);
     for (const f of files) {
-      const s = JSON.parse(readFileSync18(join17(sessionsDir, f), "utf-8"));
+      const s = JSON.parse(readFileSync18(join18(sessionsDir, f), "utf-8"));
       if (s.version) {
         meta.cc_version = meta.cc_version || s.version;
         break;
@@ -7149,7 +7190,7 @@ async function installCommand(opts = {}) {
   await setTelemetryState({ enabled: true, remoteFlushEnabled: telemetryConsent });
   emit("install", {
     phase: "started",
-    cli_version_to: "1.7.62",
+    cli_version_to: "1.7.63",
     agents_detected: agents.map((a) => a.kind),
     with_github: false,
     with_local_cc: false,
@@ -7161,7 +7202,7 @@ async function installCommand(opts = {}) {
   const scripts = writeHookScripts();
   console.log("Wrote hook scripts to ~/.synkro/hooks/\n");
   for (const mode of ["edit", "bash"]) {
-    const pidFile = join17(SYNKRO_DIR11, "daemon", mode, "daemon.pid");
+    const pidFile = join18(SYNKRO_DIR11, "daemon", mode, "daemon.pid");
     try {
       const pid = parseInt(readFileSync18(pidFile, "utf-8").trim(), 10);
       if (pid > 0) {
@@ -7248,7 +7289,7 @@ async function installCommand(opts = {}) {
         if (mintResp.ok) {
           const minted = await mintResp.json();
           mcpJwt = minted.token;
-          writeFileSync13(join17(SYNKRO_DIR11, ".mcp-jwt"), mcpJwt + "\n", { mode: 384 });
+          writeFileSync13(join18(SYNKRO_DIR11, ".mcp-jwt"), mcpJwt + "\n", { mode: 384 });
         } else {
           console.warn("  \u26A0 Could not mint MCP token \u2014 local server will reject requests until re-installed.");
         }
@@ -7276,7 +7317,7 @@ async function installCommand(opts = {}) {
           throw new Error(`mcp-token mint failed (${mintResp.status}): ${errText.slice(0, 200)}`);
         }
         const minted = await mintResp.json();
-        writeFileSync13(join17(SYNKRO_DIR11, ".mcp-jwt"), minted.token + "\n", { mode: 384 });
+        writeFileSync13(join18(SYNKRO_DIR11, ".mcp-jwt"), minted.token + "\n", { mode: 384 });
         const mcp = installMcpConfig({ gatewayUrl, bearerToken: minted.token });
         console.log(`Registered Synkro guardrails MCP server in ${mcp.path}`);
         console.log(`  url:        ${mcp.url}`);
@@ -7293,8 +7334,8 @@ async function installCommand(opts = {}) {
   if (hasCursor && !opts.noMcp) {
     try {
       if (useLocalMcp) {
-        const jwtPath = join17(SYNKRO_DIR11, ".mcp-jwt");
-        if (!existsSync20(jwtPath)) {
+        const jwtPath = join18(SYNKRO_DIR11, ".mcp-jwt");
+        if (!existsSync21(jwtPath)) {
           const mintResp = await fetch(`${gatewayUrl}/api/v1/cli/mcp-token`, {
             method: "POST",
             headers: { "Authorization": `Bearer ${token}`, "Content-Type": "application/json" },
@@ -7322,7 +7363,7 @@ async function installCommand(opts = {}) {
           throw new Error(`mcp-token mint failed (${mintResp.status}): ${errText.slice(0, 200)}`);
         }
         const minted = await mintResp.json();
-        writeFileSync13(join17(SYNKRO_DIR11, ".mcp-jwt"), minted.token + "\n", { mode: 384 });
+        writeFileSync13(join18(SYNKRO_DIR11, ".mcp-jwt"), minted.token + "\n", { mode: 384 });
         const mcp = installCursorMcpConfig({ gatewayUrl, bearerToken: minted.token });
         console.log(`Registered Synkro guardrails MCP server in ${mcp.path}`);
         console.log(`  url:        ${mcp.url}`);
@@ -7415,7 +7456,7 @@ async function installCommand(opts = {}) {
     const ready = await waitForContainerReady(6e4);
     if (ready) {
       console.log("  \u2713 container ready");
-      const mcpJwt = readFileSync18(join17(SYNKRO_DIR11, ".mcp-jwt"), "utf-8").trim();
+      const mcpJwt = readFileSync18(join18(SYNKRO_DIR11, ".mcp-jwt"), "utf-8").trim();
       try {
         const ingestResp = await fetch(`http://127.0.0.1:${hostMcpPort}/api/ingest`, {
           method: "POST",
@@ -7463,7 +7504,7 @@ async function installCommand(opts = {}) {
         try {
           let mcpToken = "";
           try {
-            mcpToken = readFileSync18(join17(SYNKRO_DIR11, ".mcp-jwt"), "utf-8").trim();
+            mcpToken = readFileSync18(join18(SYNKRO_DIR11, ".mcp-jwt"), "utf-8").trim();
           } catch {
           }
           if (mcpToken) {
@@ -7599,8 +7640,8 @@ function writeSynkroFileIfMissing(opts) {
   try {
     const root = execSync6("git rev-parse --show-toplevel", { encoding: "utf-8", timeout: 3e3, stdio: ["pipe", "pipe", "pipe"] }).trim();
     if (!root) return;
-    if (root === homedir17()) return;
-    const fp = join17(root, "synkro.toml");
+    if (root === homedir18()) return;
+    const fp = join18(root, "synkro.toml");
     let hasFile = false;
     try {
       hasFile = statSync2(fp).isFile();
@@ -7645,8 +7686,8 @@ function readFullSynkroFile() {
   try {
     const root = execSync6("git rev-parse --show-toplevel", { encoding: "utf-8", timeout: 3e3, stdio: ["pipe", "pipe", "pipe"] }).trim();
     if (!root) return null;
-    const fp = join17(root, "synkro.toml");
-    if (!existsSync20(fp)) return null;
+    const fp = join18(root, "synkro.toml");
+    if (!existsSync21(fp)) return null;
     const parsed = parseSynkroToml2(readFileSync18(fp, "utf-8"));
     const valid = ["claude-code", "cursor"];
     const harness = Array.isArray(parsed.harness) ? parsed.harness.filter((h) => valid.includes(h)) : ["claude-code", "cursor"];
@@ -7685,7 +7726,7 @@ function reconcileHarness() {
   console.log(`synkro.toml: harness=[${sf.harness.join(", ")}] pool=${poolLabel(sf.grader.pool)} mode=${sf.grader.mode}`);
   const scripts = writeHookScripts();
   console.log("Wrote hook scripts to ~/.synkro/hooks/");
-  const ccSettings = join17(homedir17(), ".claude", "settings.json");
+  const ccSettings = join18(homedir18(), ".claude", "settings.json");
   if (wantCC) {
     installCCHooks(ccSettings, {
       bashJudgeScriptPath: scripts.bashScript,
@@ -7706,7 +7747,7 @@ function reconcileHarness() {
     });
     console.log("  \u2713 Claude Code hooks registered");
     try {
-      const mcpJwt = readFileSync18(join17(SYNKRO_DIR11, ".mcp-jwt"), "utf-8").trim();
+      const mcpJwt = readFileSync18(join18(SYNKRO_DIR11, ".mcp-jwt"), "utf-8").trim();
       if (mcpJwt) {
         installMcpConfig({ gatewayUrl: "", bearerToken: mcpJwt, local: true });
         console.log("  \u2713 Claude Code MCP registered");
@@ -7718,7 +7759,7 @@ function reconcileHarness() {
     if (uninstallMcpConfig()) console.log("  \u2717 Claude Code MCP removed");
     if (uninstallClaudeDesktopMcpConfig()) console.log("  \u2717 Claude Desktop MCP removed");
   }
-  const cursorHooks = join17(homedir17(), ".cursor", "hooks.json");
+  const cursorHooks = join18(homedir18(), ".cursor", "hooks.json");
   if (wantCursor) {
     installCursorHooks(cursorHooks, {
       bashJudgeScriptPath: scripts.cursorBashJudgeScript,
@@ -7822,15 +7863,15 @@ function discoverSkillFiles(repoRoot, excludeHashes, ingestedHashes, ingestedNam
   const roots = [];
   const add = (p) => {
     try {
-      if (p && existsSync20(p) && statSync2(p).isDirectory()) roots.push(p);
+      if (p && existsSync21(p) && statSync2(p).isDirectory()) roots.push(p);
     } catch {
     }
   };
-  add(join17(homedir17(), ".claude", "skills"));
-  add(join17(homedir17(), ".agents", "skills"));
+  add(join18(homedir18(), ".claude", "skills"));
+  add(join18(homedir18(), ".agents", "skills"));
   if (repoRoot) {
-    add(join17(repoRoot, ".claude", "skills"));
-    add(join17(repoRoot, ".agents", "skills"));
+    add(join18(repoRoot, ".claude", "skills"));
+    add(join18(repoRoot, ".agents", "skills"));
   }
   const out = [];
   const seen = /* @__PURE__ */ new Set();
@@ -7861,7 +7902,7 @@ function discoverSkillFiles(repoRoot, excludeHashes, ingestedHashes, ingestedNam
     }
     for (const entry of entries) {
       if (entry.startsWith(".")) continue;
-      const full = join17(root, entry);
+      const full = join18(root, entry);
       let st;
       try {
         st = statSync2(full);
@@ -7869,8 +7910,8 @@ function discoverSkillFiles(repoRoot, excludeHashes, ingestedHashes, ingestedNam
         continue;
       }
       if (st.isDirectory()) {
-        const skillMd = join17(full, "SKILL.md");
-        if (existsSync20(skillMd)) consider(skillMd, entry);
+        const skillMd = join18(full, "SKILL.md");
+        if (existsSync21(skillMd)) consider(skillMd, entry);
       } else if (/\.mdx?$/i.test(entry) && entry.toUpperCase() !== "README.MD") {
         consider(full, entry.replace(/\.mdx?$/i, ""));
       }
@@ -7990,15 +8031,15 @@ function detectGitRepo2() {
 function getClaudeProjectsFolder() {
   const cwd = process.cwd();
   const sanitized = "-" + cwd.replace(/\//g, "-");
-  const projectsDir = join17(homedir17(), ".claude", "projects", sanitized);
-  return existsSync20(projectsDir) ? projectsDir : null;
+  const projectsDir = join18(homedir18(), ".claude", "projects", sanitized);
+  return existsSync21(projectsDir) ? projectsDir : null;
 }
 function extractSessionInsights(projectsDir) {
   const insights = [];
   const files = readdirSync3(projectsDir).filter((f) => f.endsWith(".jsonl"));
   for (const file of files) {
     const sessionId = file.replace(".jsonl", "");
-    const filePath = join17(projectsDir, file);
+    const filePath = join18(projectsDir, file);
     try {
       const content = readFileSync18(filePath, "utf-8");
       const lines = content.split("\n").filter(Boolean);
@@ -8079,8 +8120,8 @@ function cursorProjectSlug(workspaceRoot) {
   return workspaceRoot.replace(/^[/]+/, "").replace(/[^a-zA-Z0-9]+/g, "-").replace(/^-+|-+$/g, "");
 }
 function getCursorTranscriptsDir() {
-  const dir = join17(homedir17(), ".cursor", "projects", cursorProjectSlug(process.cwd()), "agent-transcripts");
-  return existsSync20(dir) ? dir : null;
+  const dir = join18(homedir18(), ".cursor", "projects", cursorProjectSlug(process.cwd()), "agent-transcripts");
+  return existsSync21(dir) ? dir : null;
 }
 function isSafeConvId(id) {
   return /^[A-Za-z0-9_-]+$/.test(id);
@@ -8118,8 +8159,8 @@ async function syncCursorTranscriptsLocal(mcpPort, mcpToken, repo) {
   for (let i = 0; i < convDirs.length; i++) {
     const convId = convDirs[i];
     if (!isSafeConvId(convId)) continue;
-    const filePath = join17(dir, convId, `${convId}.jsonl`);
-    if (!existsSync20(filePath)) continue;
+    const filePath = join18(dir, convId, `${convId}.jsonl`);
+    if (!existsSync21(filePath)) continue;
     try {
       const all = parseCursorTranscriptFile(filePath);
       const messages = all.length > 500 ? all.slice(-500) : all;
@@ -8142,7 +8183,7 @@ async function syncCursorTranscriptsLocal(mcpPort, mcpToken, repo) {
     }
     try {
       const lc = readFileSync18(filePath, "utf-8").split("\n").filter(Boolean).length;
-      writeFileSync13(join17(OFFSETS_DIR, convId), String(lc), "utf-8");
+      writeFileSync13(join18(OFFSETS_DIR, convId), String(lc), "utf-8");
     } catch {
     }
   }
@@ -8198,7 +8239,7 @@ async function syncTranscriptsLocal(mcpPort, mcpToken, repo) {
   for (let i = 0; i < files.length; i++) {
     const file = files[i];
     const sessionId = file.replace(".jsonl", "");
-    const filePath = join17(projectsDir, file);
+    const filePath = join18(projectsDir, file);
     try {
       const allMessages = parseTranscriptFile(filePath);
       const messages = allMessages.length > 500 ? allMessages.slice(-500) : allMessages;
@@ -8220,9 +8261,9 @@ async function syncTranscriptsLocal(mcpPort, mcpToken, repo) {
       process.stdout.write(`\r  Progress: ${i + 1}/${files.length} sessions (${totalMessages} messages embedded)   `);
     }
     try {
-      const content = readFileSync18(join17(projectsDir, file), "utf-8");
+      const content = readFileSync18(join18(projectsDir, file), "utf-8");
       const lineCount = content.split("\n").filter(Boolean).length;
-      writeFileSync13(join17(OFFSETS_DIR, sessionId), String(lineCount), "utf-8");
+      writeFileSync13(join18(OFFSETS_DIR, sessionId), String(lineCount), "utf-8");
     } catch {
     }
   }
@@ -8243,7 +8284,7 @@ async function syncTranscriptsBulk(gatewayUrl, token, repo) {
     const sessions = [];
     for (const file of batch) {
       const sessionId = file.replace(".jsonl", "");
-      const filePath = join17(projectsDir, file);
+      const filePath = join18(projectsDir, file);
       try {
         const allMessages = parseTranscriptFile(filePath);
         const messages = allMessages.length > maxMessagesPerSession ? allMessages.slice(-maxMessagesPerSession) : allMessages;
@@ -8272,11 +8313,11 @@ async function syncTranscriptsBulk(gatewayUrl, token, repo) {
     }
     for (const file of batch) {
       const sessionId = file.replace(".jsonl", "");
-      const filePath = join17(projectsDir, file);
+      const filePath = join18(projectsDir, file);
       try {
         const content = readFileSync18(filePath, "utf-8");
         const lineCount = content.split("\n").filter(Boolean).length;
-        writeFileSync13(join17(OFFSETS_DIR, sessionId), String(lineCount), "utf-8");
+        writeFileSync13(join18(OFFSETS_DIR, sessionId), String(lineCount), "utf-8");
       } catch {
       }
     }
@@ -8301,10 +8342,10 @@ var init_install = __esm({
     init_claudeDesktopTap();
     init_dockerInstall();
     init_setupToken();
-    SYNKRO_DIR11 = join17(homedir17(), ".synkro");
-    HOOKS_DIR = join17(SYNKRO_DIR11, "hooks");
-    BIN_DIR = join17(SYNKRO_DIR11, "bin");
-    CONFIG_PATH4 = join17(SYNKRO_DIR11, "config.env");
+    SYNKRO_DIR11 = join18(homedir18(), ".synkro");
+    HOOKS_DIR = join18(SYNKRO_DIR11, "hooks");
+    BIN_DIR = join18(SYNKRO_DIR11, "bin");
+    CONFIG_PATH4 = join18(SYNKRO_DIR11, "config.env");
     MCP_STDIO_PROXY_SRC = `#!/usr/bin/env bun
 import { readFileSync } from 'node:fs';
 import { homedir } from 'node:os';
@@ -8415,16 +8456,16 @@ rl.on('line', async (line) => {
   }
 });
 `;
-    OFFSETS_DIR = join17(SYNKRO_DIR11, ".transcript-offsets");
-    CLOUD_JWT_PATH = join17(SYNKRO_DIR11, ".cloud-jwt");
-    SKILLS_DISCOVERED_PATH = join17(SYNKRO_DIR11, ".skills-discovered");
+    OFFSETS_DIR = join18(SYNKRO_DIR11, ".transcript-offsets");
+    CLOUD_JWT_PATH = join18(SYNKRO_DIR11, ".cloud-jwt");
+    SKILLS_DISCOVERED_PATH = join18(SYNKRO_DIR11, ".skills-discovered");
   }
 });
 
 // cli/local-cc/install.ts
-import { existsSync as existsSync21, mkdirSync as mkdirSync14, writeFileSync as writeFileSync14, readFileSync as readFileSync19, chmodSync as chmodSync4, copyFileSync as copyFileSync2, renameSync as renameSync6, unlinkSync as unlinkSync7, openSync as openSync2, fsyncSync, closeSync as closeSync2 } from "fs";
-import { join as join18 } from "path";
-import { homedir as homedir18 } from "os";
+import { existsSync as existsSync22, mkdirSync as mkdirSync14, writeFileSync as writeFileSync14, readFileSync as readFileSync19, chmodSync as chmodSync4, copyFileSync as copyFileSync2, renameSync as renameSync6, unlinkSync as unlinkSync7, openSync as openSync2, fsyncSync, closeSync as closeSync2 } from "fs";
+import { join as join19 } from "path";
+import { homedir as homedir19 } from "os";
 import { spawnSync as spawnSync6 } from "child_process";
 function writePluginFiles() {
   for (const c of CHANNELS) {
@@ -8465,7 +8506,7 @@ function runBunInstall() {
   }
 }
 function safelyMutateClaudeJson(mutator) {
-  if (!existsSync21(CLAUDE_JSON_PATH)) {
+  if (!existsSync22(CLAUDE_JSON_PATH)) {
     return;
   }
   const originalText = readFileSync19(CLAUDE_JSON_PATH, "utf-8");
@@ -8610,42 +8651,42 @@ var CLAUDE_JSON_BACKUP_PATH, SESSION_DIR, PLUGIN_PATH, PLUGIN_PKG_PATH, PLUGIN_S
 var init_install2 = __esm({
   "cli/local-cc/install.ts"() {
     "use strict";
-    CLAUDE_JSON_BACKUP_PATH = join18(homedir18(), ".claude.json.synkro-bak");
-    SESSION_DIR = join18(homedir18(), ".synkro", "cc_sessions");
-    PLUGIN_PATH = join18(SESSION_DIR, "synkro-channel.ts");
-    PLUGIN_PKG_PATH = join18(SESSION_DIR, "package.json");
-    PLUGIN_SETTINGS_DIR = join18(SESSION_DIR, ".claude");
-    PLUGIN_SETTINGS_PATH = join18(PLUGIN_SETTINGS_DIR, "settings.json");
-    PROJECT_MCP_PATH = join18(SESSION_DIR, ".mcp.json");
-    CLAUDE_JSON_PATH = join18(homedir18(), ".claude.json");
-    RUN_SCRIPT_PATH = join18(SESSION_DIR, "run-claude.sh");
+    CLAUDE_JSON_BACKUP_PATH = join19(homedir19(), ".claude.json.synkro-bak");
+    SESSION_DIR = join19(homedir19(), ".synkro", "cc_sessions");
+    PLUGIN_PATH = join19(SESSION_DIR, "synkro-channel.ts");
+    PLUGIN_PKG_PATH = join19(SESSION_DIR, "package.json");
+    PLUGIN_SETTINGS_DIR = join19(SESSION_DIR, ".claude");
+    PLUGIN_SETTINGS_PATH = join19(PLUGIN_SETTINGS_DIR, "settings.json");
+    PROJECT_MCP_PATH = join19(SESSION_DIR, ".mcp.json");
+    CLAUDE_JSON_PATH = join19(homedir19(), ".claude.json");
+    RUN_SCRIPT_PATH = join19(SESSION_DIR, "run-claude.sh");
     TMUX_SESSION_NAME = "synkro-local-cc";
     CHANNEL_1_PORT = 8941;
-    SESSION_DIR_2 = join18(homedir18(), ".synkro", "cc_sessions_2");
-    PLUGIN_PATH_2 = join18(SESSION_DIR_2, "synkro-channel.ts");
-    PLUGIN_PKG_PATH_2 = join18(SESSION_DIR_2, "package.json");
-    PLUGIN_SETTINGS_DIR_2 = join18(SESSION_DIR_2, ".claude");
-    PLUGIN_SETTINGS_PATH_2 = join18(PLUGIN_SETTINGS_DIR_2, "settings.json");
-    PROJECT_MCP_PATH_2 = join18(SESSION_DIR_2, ".mcp.json");
-    RUN_SCRIPT_PATH_2 = join18(SESSION_DIR_2, "run-claude.sh");
+    SESSION_DIR_2 = join19(homedir19(), ".synkro", "cc_sessions_2");
+    PLUGIN_PATH_2 = join19(SESSION_DIR_2, "synkro-channel.ts");
+    PLUGIN_PKG_PATH_2 = join19(SESSION_DIR_2, "package.json");
+    PLUGIN_SETTINGS_DIR_2 = join19(SESSION_DIR_2, ".claude");
+    PLUGIN_SETTINGS_PATH_2 = join19(PLUGIN_SETTINGS_DIR_2, "settings.json");
+    PROJECT_MCP_PATH_2 = join19(SESSION_DIR_2, ".mcp.json");
+    RUN_SCRIPT_PATH_2 = join19(SESSION_DIR_2, "run-claude.sh");
     TMUX_SESSION_NAME_2 = "synkro-local-cc-2";
     CHANNEL_2_PORT = 8951;
-    SESSION_DIR_3 = join18(homedir18(), ".synkro", "cc_sessions_3");
-    PLUGIN_PATH_3 = join18(SESSION_DIR_3, "synkro-channel.ts");
-    PLUGIN_PKG_PATH_3 = join18(SESSION_DIR_3, "package.json");
-    PLUGIN_SETTINGS_DIR_3 = join18(SESSION_DIR_3, ".claude");
-    PLUGIN_SETTINGS_PATH_3 = join18(PLUGIN_SETTINGS_DIR_3, "settings.json");
-    PROJECT_MCP_PATH_3 = join18(SESSION_DIR_3, ".mcp.json");
-    RUN_SCRIPT_PATH_3 = join18(SESSION_DIR_3, "run-claude.sh");
+    SESSION_DIR_3 = join19(homedir19(), ".synkro", "cc_sessions_3");
+    PLUGIN_PATH_3 = join19(SESSION_DIR_3, "synkro-channel.ts");
+    PLUGIN_PKG_PATH_3 = join19(SESSION_DIR_3, "package.json");
+    PLUGIN_SETTINGS_DIR_3 = join19(SESSION_DIR_3, ".claude");
+    PLUGIN_SETTINGS_PATH_3 = join19(PLUGIN_SETTINGS_DIR_3, "settings.json");
+    PROJECT_MCP_PATH_3 = join19(SESSION_DIR_3, ".mcp.json");
+    RUN_SCRIPT_PATH_3 = join19(SESSION_DIR_3, "run-claude.sh");
     TMUX_SESSION_NAME_3 = "synkro-local-cc-3";
     CHANNEL_3_PORT = 8942;
-    SESSION_DIR_4 = join18(homedir18(), ".synkro", "cc_sessions_4");
-    PLUGIN_PATH_4 = join18(SESSION_DIR_4, "synkro-channel.ts");
-    PLUGIN_PKG_PATH_4 = join18(SESSION_DIR_4, "package.json");
-    PLUGIN_SETTINGS_DIR_4 = join18(SESSION_DIR_4, ".claude");
-    PLUGIN_SETTINGS_PATH_4 = join18(PLUGIN_SETTINGS_DIR_4, "settings.json");
-    PROJECT_MCP_PATH_4 = join18(SESSION_DIR_4, ".mcp.json");
-    RUN_SCRIPT_PATH_4 = join18(SESSION_DIR_4, "run-claude.sh");
+    SESSION_DIR_4 = join19(homedir19(), ".synkro", "cc_sessions_4");
+    PLUGIN_PATH_4 = join19(SESSION_DIR_4, "synkro-channel.ts");
+    PLUGIN_PKG_PATH_4 = join19(SESSION_DIR_4, "package.json");
+    PLUGIN_SETTINGS_DIR_4 = join19(SESSION_DIR_4, ".claude");
+    PLUGIN_SETTINGS_PATH_4 = join19(PLUGIN_SETTINGS_DIR_4, "settings.json");
+    PROJECT_MCP_PATH_4 = join19(SESSION_DIR_4, ".mcp.json");
+    RUN_SCRIPT_PATH_4 = join19(SESSION_DIR_4, "run-claude.sh");
     TMUX_SESSION_NAME_4 = "synkro-local-cc-4";
     CHANNEL_4_PORT = 8952;
     RUN_SCRIPT_SOURCE = `#!/usr/bin/env bash
@@ -8919,9 +8960,9 @@ var disconnect_exports = {};
 __export(disconnect_exports, {
   disconnectCommand: () => disconnectCommand
 });
-import { existsSync as existsSync22, rmSync as rmSync2, readdirSync as readdirSync4 } from "fs";
-import { homedir as homedir19 } from "os";
-import { join as join19 } from "path";
+import { existsSync as existsSync23, rmSync as rmSync2, readdirSync as readdirSync4 } from "fs";
+import { homedir as homedir20 } from "os";
+import { join as join20 } from "path";
 import { spawnSync as spawnSync7 } from "child_process";
 import { createInterface as createInterface4 } from "readline";
 async function tearDownLocalCC() {
@@ -9007,7 +9048,7 @@ async function disconnectCommand(args2 = [], opts = {}) {
     if (desktopMcpRemoved) removed.mcp = true;
     console.log(`${desktopMcpRemoved ? "\u2713" : "\xB7"} MCP guardrails (Claude Desktop): ${desktopMcpRemoved ? "removed from claude_desktop_config.json" : "no entry found"}`);
   }
-  if (existsSync22(SYNKRO_DIR12)) {
+  if (existsSync23(SYNKRO_DIR12)) {
     if (purge2) {
       emit("uninstall", {
         flavor,
@@ -9021,13 +9062,13 @@ async function disconnectCommand(args2 = [], opts = {}) {
       console.log(`\u2713 wiped ${SYNKRO_DIR12} entirely \u2014 including all scan data and backups`);
     } else {
       const keep = /* @__PURE__ */ new Set([
-        join19(SYNKRO_DIR12, "pgdata"),
-        join19(SYNKRO_DIR12, "pgdata-backups"),
-        join19(SYNKRO_DIR12, ".transcript-offsets")
+        join20(SYNKRO_DIR12, "pgdata"),
+        join20(SYNKRO_DIR12, "pgdata-backups"),
+        join20(SYNKRO_DIR12, ".transcript-offsets")
       ]);
       const preserved = [];
       for (const entry of readdirSync4(SYNKRO_DIR12)) {
-        const full = join19(SYNKRO_DIR12, entry);
+        const full = join20(SYNKRO_DIR12, entry);
         if (keep.has(full)) {
           preserved.push(entry);
           continue;
@@ -9062,14 +9103,14 @@ var init_disconnect = __esm({
     init_dockerInstall();
     init_macKeychain();
     init_telemetry();
-    SYNKRO_DIR12 = join19(homedir19(), ".synkro");
+    SYNKRO_DIR12 = join20(homedir20(), ".synkro");
   }
 });
 
 // cli/local-cc/turnLog.ts
-import { appendFileSync as appendFileSync3, existsSync as existsSync23, mkdirSync as mkdirSync15, openSync as openSync3, readFileSync as readFileSync20, readSync, closeSync as closeSync3, statSync as statSync3, watchFile, unwatchFile } from "fs";
-import { dirname as dirname6, join as join20 } from "path";
-import { homedir as homedir20 } from "os";
+import { appendFileSync as appendFileSync3, existsSync as existsSync24, mkdirSync as mkdirSync15, openSync as openSync3, readFileSync as readFileSync20, readSync, closeSync as closeSync3, statSync as statSync3, watchFile, unwatchFile } from "fs";
+import { dirname as dirname6, join as join21 } from "path";
+import { homedir as homedir21 } from "os";
 function truncate(s, max = PREVIEW_MAX) {
   if (s.length <= max) return s;
   return s.slice(0, max) + "\u2026 [+" + (s.length - max) + " chars]";
@@ -9105,7 +9146,7 @@ function appendTurn(args2) {
   }
 }
 function readRecentTurns(n = 20) {
-  if (!existsSync23(TURN_LOG_PATH)) return [];
+  if (!existsSync24(TURN_LOG_PATH)) return [];
   try {
     const size = statSync3(TURN_LOG_PATH).size;
     if (size === 0) return [];
@@ -9126,7 +9167,7 @@ function readRecentTurns(n = 20) {
 function followTurns(onEntry) {
   try {
     mkdirSync15(dirname6(TURN_LOG_PATH), { recursive: true });
-    if (!existsSync23(TURN_LOG_PATH)) {
+    if (!existsSync24(TURN_LOG_PATH)) {
       appendFileSync3(TURN_LOG_PATH, "", "utf-8");
     }
   } catch {
@@ -9188,7 +9229,7 @@ var TURN_LOG_PATH, PREVIEW_MAX;
 var init_turnLog = __esm({
   "cli/local-cc/turnLog.ts"() {
     "use strict";
-    TURN_LOG_PATH = join20(homedir20(), ".synkro", "cc_sessions", "turns.log");
+    TURN_LOG_PATH = join21(homedir21(), ".synkro", "cc_sessions", "turns.log");
     PREVIEW_MAX = 400;
   }
 });
@@ -9338,8 +9379,8 @@ var init_grade = __esm({
 
 // cli/local-cc/pueue.ts
 import { execFileSync as execFileSync4, spawnSync as spawnSync8, spawn as spawn3 } from "child_process";
-import { homedir as homedir21 } from "os";
-import { join as join21 } from "path";
+import { homedir as homedir22 } from "os";
+import { join as join22 } from "path";
 import { connect as connect2 } from "net";
 function pueueAvailable() {
   const r = spawnSync8("pueue", ["--version"], { encoding: "utf-8" });
@@ -9405,7 +9446,7 @@ function startTask(opts = {}) {
     spawnSync8("pueue", ["remove", String(existing.id)], { encoding: "utf-8" });
     existing = findTask(ch);
   }
-  const runScript = join21(cwd, "run-claude.sh");
+  const runScript = join22(cwd, "run-claude.sh");
   const args2 = [
     "add",
     "--label",
@@ -9535,12 +9576,12 @@ var init_pueue = __esm({
     "use strict";
     TASK_LABEL = "synkro-local-cc";
     TMUX_SESSION = "synkro-local-cc";
-    SESSION_DIR2 = join21(homedir21(), ".synkro", "cc_sessions");
+    SESSION_DIR2 = join22(homedir22(), ".synkro", "cc_sessions");
     TASK_LABEL_2 = "synkro-local-cc-2";
     TMUX_SESSION_2 = "synkro-local-cc-2";
-    SESSION_DIR_22 = join21(homedir21(), ".synkro", "cc_sessions_2");
-    SESSION_DIR_32 = join21(homedir21(), ".synkro", "cc_sessions_3");
-    SESSION_DIR_42 = join21(homedir21(), ".synkro", "cc_sessions_4");
+    SESSION_DIR_22 = join22(homedir22(), ".synkro", "cc_sessions_2");
+    SESSION_DIR_32 = join22(homedir22(), ".synkro", "cc_sessions_3");
+    SESSION_DIR_42 = join22(homedir22(), ".synkro", "cc_sessions_4");
     PueueError = class extends Error {
       constructor(message, cause) {
         super(message);
@@ -9555,11 +9596,11 @@ var init_pueue = __esm({
 });
 
 // cli/local-cc/settings.ts
-import { existsSync as existsSync24, readFileSync as readFileSync21 } from "fs";
-import { homedir as homedir22 } from "os";
-import { join as join22 } from "path";
+import { existsSync as existsSync25, readFileSync as readFileSync21 } from "fs";
+import { homedir as homedir23 } from "os";
+import { join as join23 } from "path";
 function isLocalCCEnabled() {
-  if (!existsSync24(CONFIG_PATH5)) return false;
+  if (!existsSync25(CONFIG_PATH5)) return false;
   try {
     const content = readFileSync21(CONFIG_PATH5, "utf-8");
     const match = content.match(/^SYNKRO_LOCAL_INFERENCE='([^']*)'/m);
@@ -9572,7 +9613,7 @@ var CONFIG_PATH5;
 var init_settings = __esm({
   "cli/local-cc/settings.ts"() {
     "use strict";
-    CONFIG_PATH5 = join22(homedir22(), ".synkro", "config.env");
+    CONFIG_PATH5 = join23(homedir23(), ".synkro", "config.env");
   }
 });
 
@@ -9582,10 +9623,10 @@ __export(localCc_exports, {
   localCcCommand: () => localCcCommand
 });
 import { spawnSync as spawnSync9 } from "child_process";
-import { homedir as homedir23 } from "os";
-import { join as join23 } from "path";
+import { homedir as homedir24 } from "os";
+import { join as join24 } from "path";
 import { readFileSync as fsReadFileSync, existsSync as fsExistsSync } from "fs";
-import { existsSync as existsSync25, readFileSync as readFileSync22, writeFileSync as writeFileSync15 } from "fs";
+import { existsSync as existsSync26, readFileSync as readFileSync22, writeFileSync as writeFileSync15 } from "fs";
 function deploymentMode() {
   const env = (process.env.SYNKRO_DEPLOYMENT_MODE || "").toLowerCase();
   if (env === "docker") return "docker";
@@ -9691,14 +9732,14 @@ TROUBLESHOOTING
 `);
 }
 function readGatewayUrl() {
-  if (existsSync25(CONFIG_PATH6)) {
+  if (existsSync26(CONFIG_PATH6)) {
     const m = readFileSync22(CONFIG_PATH6, "utf-8").match(/^SYNKRO_GATEWAY_URL='([^']*)'/m);
     if (m) return m[1];
   }
   return "https://api.synkro.sh";
 }
 function updateLocalInferenceFlag(enabled) {
-  if (!existsSync25(CONFIG_PATH6)) return;
+  if (!existsSync26(CONFIG_PATH6)) return;
   let content = readFileSync22(CONFIG_PATH6, "utf-8");
   const flag = enabled ? "yes" : "no";
   if (content.includes("SYNKRO_LOCAL_INFERENCE=")) {
@@ -10140,8 +10181,8 @@ var init_localCc = __esm({
     init_install();
     init_client2();
     init_stub();
-    SYNKRO_CONFIG_PATH = join23(homedir23(), ".synkro", "config.env");
-    CONFIG_PATH6 = join23(homedir23(), ".synkro", "config.env");
+    SYNKRO_CONFIG_PATH = join24(homedir24(), ".synkro", "config.env");
+    CONFIG_PATH6 = join24(homedir24(), ".synkro", "config.env");
   }
 });
 
@@ -10150,9 +10191,9 @@ var import_exports = {};
 __export(import_exports, {
   importCommand: () => importCommand
 });
-import { existsSync as existsSync26, readFileSync as readFileSync23, readdirSync as readdirSync5 } from "fs";
-import { homedir as homedir24 } from "os";
-import { join as join24 } from "path";
+import { existsSync as existsSync27, readFileSync as readFileSync23, readdirSync as readdirSync5 } from "fs";
+import { homedir as homedir25 } from "os";
+import { join as join25 } from "path";
 import { execSync as execSync7 } from "child_process";
 import { createInterface as createInterface5 } from "readline";
 function readConfigEnv2() {
@@ -10170,8 +10211,8 @@ function readConfigEnv2() {
 }
 function projectsFolder() {
   const sanitized = process.cwd().replace(/\//g, "-");
-  const dir = join24(homedir24(), ".claude", "projects", sanitized);
-  return existsSync26(dir) ? dir : null;
+  const dir = join25(homedir25(), ".claude", "projects", sanitized);
+  return existsSync27(dir) ? dir : null;
 }
 function repoName() {
   try {
@@ -10267,7 +10308,7 @@ async function importCommand() {
       return;
     }
   }
-  const sessions = files.map((f) => parseSession(join24(dir, f), f.replace(".jsonl", ""))).filter((s) => s.messages.length > 0);
+  const sessions = files.map((f) => parseSession(join25(dir, f), f.replace(".jsonl", ""))).filter((s) => s.messages.length > 0);
   const totalMsgs = sessions.reduce((n, s) => n + s.messages.length, 0);
   let ok = 0, fail = 0;
   if (isCloud) {
@@ -10327,7 +10368,7 @@ var init_import = __esm({
   "cli/commands/import.ts"() {
     "use strict";
     init_stub();
-    CONFIG_PATH7 = join24(homedir24(), ".synkro", "config.env");
+    CONFIG_PATH7 = join25(homedir25(), ".synkro", "config.env");
   }
 });
 
@@ -10369,10 +10410,10 @@ var init_packVerify = __esm({
 });
 
 // cli/installer/lockfile.ts
-import { existsSync as existsSync27, readFileSync as readFileSync24, writeFileSync as writeFileSync16 } from "fs";
-import { join as join25 } from "path";
+import { existsSync as existsSync28, readFileSync as readFileSync24, writeFileSync as writeFileSync16 } from "fs";
+import { join as join26 } from "path";
 function lockPath(repoRoot) {
-  return join25(repoRoot, LOCK_FILE);
+  return join26(repoRoot, LOCK_FILE);
 }
 function writeLockfile(repoRoot, entries) {
   const sorted = [...entries].sort((a, b) => a.ref.localeCompare(b.ref));
@@ -10405,9 +10446,9 @@ var sync_exports = {};
 __export(sync_exports, {
   syncCommand: () => syncCommand
 });
-import { existsSync as existsSync28, mkdirSync as mkdirSync16, readdirSync as readdirSync6, rmSync as rmSync3, writeFileSync as writeFileSync17 } from "fs";
-import { homedir as homedir25 } from "os";
-import { join as join26 } from "path";
+import { existsSync as existsSync29, mkdirSync as mkdirSync16, readdirSync as readdirSync6, rmSync as rmSync3, writeFileSync as writeFileSync17 } from "fs";
+import { homedir as homedir26 } from "os";
+import { join as join27 } from "path";
 function cacheKey(ref, version) {
   return ref.replace(/\//g, "__").replace(/[^\w.@-]/g, "_") + "@" + version + ".json";
 }
@@ -10438,7 +10479,7 @@ async function syncCommand(_args = []) {
   }
   const gateway = (process.env.SYNKRO_GATEWAY_URL || "https://api.synkro.sh").replace(/\/$/, "");
   const cloud = process.env.SYNKRO_DEPLOY_LOCATION === "cloud";
-  const cacheDir = join26(homedir25(), ".synkro", "cache", "packs");
+  const cacheDir = join27(homedir26(), ".synkro", "cache", "packs");
   if (!cloud) mkdirSync16(cacheDir, { recursive: true });
   console.log(`Syncing ${refs.length} standard(s) from the registry\u2026`);
   const lock = [];
@@ -10467,7 +10508,7 @@ async function syncCommand(_args = []) {
     if (!cloud) {
       const fname = cacheKey(ref, data.version);
       keptCacheFiles.add(fname);
-      writeFileSync17(join26(cacheDir, fname), JSON.stringify({
+      writeFileSync17(join27(cacheDir, fname), JSON.stringify({
         ref,
         version: data.version,
         digest: data.digest,
@@ -10479,11 +10520,11 @@ async function syncCommand(_args = []) {
     const ruleCount = Array.isArray(pack.rules) ? pack.rules.length : 0;
     console.log(`  \u2713 ${ref}:${data.version} \u2014 verified (${ruleCount} rule${ruleCount === 1 ? "" : "s"})`);
   }
-  if (!cloud && existsSync28(cacheDir)) {
+  if (!cloud && existsSync29(cacheDir)) {
     for (const f of readdirSync6(cacheDir)) {
       if (f.endsWith(".json") && !keptCacheFiles.has(f)) {
         try {
-          rmSync3(join26(cacheDir, f));
+          rmSync3(join27(cacheDir, f));
         } catch {
         }
       }
@@ -10619,11 +10660,11 @@ var config_exports = {};
 __export(config_exports, {
   configCommand: () => configCommand
 });
-import { readFileSync as readFileSync25, writeFileSync as writeFileSync18, existsSync as existsSync29 } from "fs";
-import { join as join27 } from "path";
-import { homedir as homedir26 } from "os";
+import { readFileSync as readFileSync25, writeFileSync as writeFileSync18, existsSync as existsSync30 } from "fs";
+import { join as join28 } from "path";
+import { homedir as homedir27 } from "os";
 function readConfigEnv3() {
-  if (!existsSync29(CONFIG_PATH8)) return {};
+  if (!existsSync30(CONFIG_PATH8)) return {};
   const out = {};
   for (const line of readFileSync25(CONFIG_PATH8, "utf-8").split("\n")) {
     const t = line.trim();
@@ -10634,7 +10675,7 @@ function readConfigEnv3() {
   return out;
 }
 function updateConfigValue(key, value) {
-  if (!existsSync29(CONFIG_PATH8)) {
+  if (!existsSync30(CONFIG_PATH8)) {
     console.error("No config found. Run `synkro install` first.");
     process.exit(1);
   }
@@ -10807,8 +10848,8 @@ var init_config = __esm({
     "use strict";
     init_stub();
     init_optout();
-    SYNKRO_DIR13 = join27(homedir26(), ".synkro");
-    CONFIG_PATH8 = join27(SYNKRO_DIR13, "config.env");
+    SYNKRO_DIR13 = join28(homedir27(), ".synkro");
+    CONFIG_PATH8 = join28(SYNKRO_DIR13, "config.env");
   }
 });
 
@@ -10997,13 +11038,13 @@ Usage:
 });
 
 // cli/bootstrap.js
-import { readFileSync as readFileSync26, existsSync as existsSync30 } from "fs";
+import { readFileSync as readFileSync26, existsSync as existsSync31 } from "fs";
 import { resolve as resolve3 } from "path";
 var envCandidates = [
   resolve3(process.env.HOME ?? "", ".synkro", "config.env")
 ];
 for (const envPath of envCandidates) {
-  if (!existsSync30(envPath)) continue;
+  if (!existsSync31(envPath)) continue;
   const envContent = readFileSync26(envPath, "utf-8");
   for (const line of envContent.split("\n")) {
     const trimmed = line.trim();
@@ -11021,7 +11062,7 @@ var subArgs = args.slice(1);
 var isDetachedChild = process.env.SYNKRO_TELEMETRY_DETACHED === "1";
 var FLUSH_SKIP = /* @__PURE__ */ new Set(["grade", "version", "--version", "-v", "help", "--help", "-h", ""]);
 function printVersion() {
-  console.log("1.7.62");
+  console.log("1.7.63");
 }
 function printHelp2() {
   console.log(`Synkro CLI \u2014 runtime safety for AI coding agents