@threadbase-sh/streamer 1.54.2 → 1.55.0

package/dist/index.cjs

@@ -3982,13 +3982,13 @@ async function readGitBranch(dir) {
 // src/server.ts
 var import_node_ws = require("@hono/node-ws");
 var import_client = require("@temporalio/client");
-var import_crypto11 = require("crypto");
+var import_crypto12 = require("crypto");
 var import_events = require("events");
-var import_fs27 = require("fs");
+var import_fs28 = require("fs");
 var import_promises7 = require("fs/promises");
 var import_http = require("http");
-var import_os13 = require("os");
-var import_path23 = require("path");
+var import_os14 = require("os");
+var import_path24 = require("path");
 
 // src/api/app.ts
 var import_hono18 = require("hono");
@@ -5160,7 +5160,7 @@ function createLogsRoutes() {
 var import_node_child_process = require("child_process");
 var import_node_crypto3 = require("crypto");
 var import_hono11 = require("hono");
-var import_os6 = require("os");
+var import_os7 = require("os");
 
 // src/config/update-config.ts
 var import_node_fs4 = require("fs");
@@ -5452,6 +5452,66 @@ var PushRepository = class {
   }
 };
 
+// src/server-identity.ts
+var import_crypto5 = require("crypto");
+var import_fs8 = require("fs");
+var import_os6 = require("os");
+var import_path9 = require("path");
+var IDENTITY_FILE_VERSION = 1;
+function serverIdentityKeyPath() {
+  const dir = process.env.THREADBASE_CONFIG_DIR ?? (0, import_path9.join)((0, import_os6.homedir)(), ".threadbase");
+  return (0, import_path9.join)(dir, "keys", "server-identity.key");
+}
+function loadOrCreateServerIdentity() {
+  const path = serverIdentityKeyPath();
+  let raw;
+  try {
+    raw = (0, import_fs8.readFileSync)(path, "utf-8");
+  } catch (err) {
+    if (err.code !== "ENOENT") throw err;
+    return generateIdentity(path);
+  }
+  let privateKey;
+  try {
+    privateKey = (0, import_crypto5.createPrivateKey)({ key: JSON.parse(raw).key, format: "jwk" });
+  } catch {
+    throw new Error(
+      `Server identity key at ${path} could not be read. Refusing to generate a new one \u2014 that would invalidate every paired device. Repair or delete the file deliberately.`
+    );
+  }
+  return { publicKey: publicKeyOf(privateKey), privateKey };
+}
+function serverIdentityPublicKey() {
+  return loadOrCreateServerIdentity().publicKey;
+}
+function generateIdentity(path) {
+  const { privateKey } = (0, import_crypto5.generateKeyPairSync)("x25519");
+  const file = {
+    v: IDENTITY_FILE_VERSION,
+    createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+    key: privateKey.export({ format: "jwk" })
+  };
+  (0, import_fs8.mkdirSync)((0, import_path9.dirname)(path), { recursive: true, mode: 448 });
+  const tmp = `${path}.tmp`;
+  (0, import_fs8.writeFileSync)(tmp, `${JSON.stringify(file)}
+`, { encoding: "utf-8", mode: 384 });
+  (0, import_fs8.chmodSync)(tmp, 384);
+  (0, import_fs8.renameSync)(tmp, path);
+  const publicKey = publicKeyOf(privateKey);
+  getLogger("identity").info(`Generated server identity key ${publicKey}`, {
+    event: "identity.key_generated",
+    path
+  });
+  return { publicKey, privateKey };
+}
+function publicKeyOf(privateKey) {
+  const jwk = (0, import_crypto5.createPublicKey)(privateKey).export({ format: "jwk" });
+  if (jwk.crv !== "X25519" || typeof jwk.x !== "string") {
+    throw new Error(`Server identity key at ${serverIdentityKeyPath()} is not an X25519 key`);
+  }
+  return jwk.x;
+}
+
 // src/services/push/apnsClient.ts
 var import_node_crypto2 = require("crypto");
 var import_node_http2 = require("http2");
@@ -5660,6 +5720,21 @@ function describePushCapability(liveActivityEnabled, env = process.env) {
     liveActivityReason: describeMissingApnsCredentials(env) ?? "APNs credentials are set but the push token store is unavailable, so Live Activity push is disabled."
   };
 }
+var identityKeyFailureLogged = false;
+function describeServerIdentityKey() {
+  try {
+    return serverIdentityPublicKey();
+  } catch (err) {
+    if (!identityKeyFailureLogged) {
+      identityKeyFailureLogged = true;
+      getLogger("identity").error(
+        `Server identity key unavailable, so /api/info will omit it: ${err instanceof Error ? err.message : String(err)}`,
+        { event: "identity.unavailable" }
+      );
+    }
+    return void 0;
+  }
+}
 var clientLog = getLogger("client");
 var createMiscRoutes = (deps) => {
   const app = new import_hono11.Hono();
@@ -5667,7 +5742,7 @@ var createMiscRoutes = (deps) => {
     const ptyIds = deps.ptyAttachedIds();
     return c.json({
       version: getVersion(),
-      machineName: (0, import_os6.hostname)(),
+      machineName: (0, import_os7.hostname)(),
       platform: process.platform,
       activeSessions: deps.sessionStore.list(ptyIds).filter((s) => s.status === "running").length,
       publicUrl: deps.publicUrl,
@@ -5693,7 +5768,13 @@ var createMiscRoutes = (deps) => {
       // actually send a push, so mobile can hide an affordance instead of
       // registering tokens nothing will ever send to. Absent on older servers,
       // which a client should read as "unknown", not "unavailable".
-      push: describePushCapability(deps.liveActivityPushEnabled())
+      push: describePushCapability(deps.liveActivityPushEnabled()),
+      // This server's long-term X25519 public key, base64url. The same value the
+      // pair QR carries as `spk`, served here so an already-paired client can
+      // learn it without re-scanning. Additive: absent means a server with no
+      // readable identity key, which a client must read as "cannot verify this
+      // server" — never as a reason to fail the rest of this response.
+      serverIdentityKey: describeServerIdentityKey()
     });
   });
   app.get("/api/profiles", (c) => c.json([]));
@@ -6204,16 +6285,16 @@ var createHonoApp = (deps, upgradeWebSocket) => {
 
 // src/api/handlers/conversations.handlers.ts
 var import_scanner3 = require("@threadbase-sh/scanner");
-var import_fs12 = require("fs");
-var import_path12 = require("path");
+var import_fs13 = require("fs");
+var import_path13 = require("path");
 var import_readline = require("readline");
 
 // src/conversation-cache.ts
 var import_scanner2 = require("@threadbase-sh/scanner");
 var import_better_sqlite3 = __toESM(require("better-sqlite3"), 1);
-var import_fs10 = require("fs");
+var import_fs11 = require("fs");
 var import_promises2 = require("fs/promises");
-var import_path11 = require("path");
+var import_path12 = require("path");
 var import_promises3 = require("timers/promises");
 
 // src/db/query-timing.ts
@@ -6285,18 +6366,18 @@ function labelStatements(statements) {
 }
 
 // src/db/sqlite-migrate.ts
-var import_fs8 = require("fs");
-var import_path9 = require("path");
+var import_fs9 = require("fs");
+var import_path10 = require("path");
 var import_url2 = require("url");
 var import_meta2 = {};
 function getMigrationsDir2() {
   if (typeof import_meta2 !== "undefined" && import_meta2.url) {
-    return (0, import_path9.dirname)((0, import_url2.fileURLToPath)(import_meta2.url));
+    return (0, import_path10.dirname)((0, import_url2.fileURLToPath)(import_meta2.url));
   }
   return __dirname;
 }
 function resolveMigrationsDir(name = "migrations") {
-  return (0, import_path9.join)(getMigrationsDir2(), name);
+  return (0, import_path10.join)(getMigrationsDir2(), name);
 }
 var SCHEMA_MIGRATIONS_SQL = `
 CREATE TABLE IF NOT EXISTS schema_migrations (
@@ -6307,7 +6388,7 @@ CREATE TABLE IF NOT EXISTS schema_migrations (
 function runSqliteMigrations(db, migrationsDir) {
   db.exec(SCHEMA_MIGRATIONS_SQL);
   const dir = migrationsDir ?? resolveMigrationsDir();
-  const files = (0, import_fs8.readdirSync)(dir).filter((f) => f.endsWith(".sql")).sort();
+  const files = (0, import_fs9.readdirSync)(dir).filter((f) => f.endsWith(".sql")).sort();
   const appliedRows = db.prepare("SELECT id FROM schema_migrations").all();
   const appliedSet = new Set(appliedRows.map((r) => r.id));
   const recordApplied = db.prepare("INSERT INTO schema_migrations (id, applied_at) VALUES (?, ?)");
@@ -6318,7 +6399,7 @@ function runSqliteMigrations(db, migrationsDir) {
       skipped.push(file);
       continue;
     }
-    const sql = (0, import_fs8.readFileSync)((0, import_path9.join)(dir, file), "utf-8");
+    const sql = (0, import_fs9.readFileSync)((0, import_path10.join)(dir, file), "utf-8");
     const tx = db.transaction(() => {
       db.exec(sql);
       recordApplied.run(file, (/* @__PURE__ */ new Date()).toISOString());
@@ -6330,7 +6411,7 @@ function runSqliteMigrations(db, migrationsDir) {
 }
 
 // src/services/conversations/isAgentConversation.ts
-var import_fs9 = require("fs");
+var import_fs10 = require("fs");
 var DEFAULT_AGENT_ENTRYPOINTS = /* @__PURE__ */ new Set(["sdk-cli", "claude-vscode"]);
 var CHUNK_BYTES = 64 * 1024;
 var ENTRYPOINT_PROBE = `"entrypoint":`;
@@ -6352,12 +6433,12 @@ function isAgentFile(filePath, entrypoints = DEFAULT_AGENT_ENTRYPOINTS) {
   if (cached3 !== void 0) return cached3;
   let fd;
   try {
-    fd = (0, import_fs9.openSync)(filePath, "r");
+    fd = (0, import_fs10.openSync)(filePath, "r");
   } catch {
     return false;
   }
   try {
-    const fileSize = (0, import_fs9.statSync)(filePath).size;
+    const fileSize = (0, import_fs10.statSync)(filePath).size;
     if (fileSize === 0) {
       fileDecisionCache.set(key, false);
       return false;
@@ -6368,7 +6449,7 @@ function isAgentFile(filePath, entrypoints = DEFAULT_AGENT_ENTRYPOINTS) {
     let carry = "";
     while (offset < fileSize) {
       const toRead = Math.min(CHUNK_BYTES, fileSize - offset);
-      const got = (0, import_fs9.readSync)(fd, buf, 0, toRead, offset);
+      const got = (0, import_fs10.readSync)(fd, buf, 0, toRead, offset);
       if (got <= 0) break;
       const chunk = carry + buf.toString("utf8", 0, got);
       for (const marker of markers) {
@@ -6389,7 +6470,7 @@ function isAgentFile(filePath, entrypoints = DEFAULT_AGENT_ENTRYPOINTS) {
   } catch {
     return false;
   } finally {
-    (0, import_fs9.closeSync)(fd);
+    (0, import_fs10.closeSync)(fd);
   }
 }
 function parseAgentEntrypointsEnv(raw) {
@@ -6399,12 +6480,12 @@ function parseAgentEntrypointsEnv(raw) {
 }
 
 // src/utils/canonicalizeFilePath.ts
-var import_path10 = require("path");
+var import_path11 = require("path");
 function canonicalizeFilePath(filePath) {
   return filePath.trim().replace(/\\/g, "/");
 }
 function toNativeFilePath(filePath) {
-  return (0, import_path10.normalize)(filePath.trim());
+  return (0, import_path11.normalize)(filePath.trim());
 }
 function canonicalLivePathSet(metas) {
   const live = /* @__PURE__ */ new Set();
@@ -6424,11 +6505,11 @@ function joinStatCacheByNativePath(metas, canonicalStats) {
 }
 
 // src/utils/fileIdentity.ts
-var import_crypto5 = require("crypto");
+var import_crypto6 = require("crypto");
 function fileIdentity(stat3, headBytes) {
   if (stat3.ino && stat3.ino > 0) return `inode:${stat3.dev}:${stat3.ino}`;
   const head = headBytes ?? Buffer.alloc(0);
-  return `fp:${(0, import_crypto5.createHash)("sha1").update(head).digest("hex")}`;
+  return `fp:${(0, import_crypto6.createHash)("sha1").update(head).digest("hex")}`;
 }
 function splitCompleteLines(buf, baseOffset) {
   const spans = [];
@@ -6995,7 +7076,7 @@ var ConversationCache = class _ConversationCache {
     if (!fileState) return null;
     let stat3;
     try {
-      stat3 = (0, import_fs10.statSync)(filePath);
+      stat3 = (0, import_fs11.statSync)(filePath);
     } catch {
       return null;
     }
@@ -7016,17 +7097,17 @@ var ConversationCache = class _ConversationCache {
     );
     if (rows.length === 0) return { messages: [], total, fromIndex: from };
     const messages = [];
-    const fd = (0, import_fs10.openSync)(filePath, "r");
+    const fd = (0, import_fs11.openSync)(filePath, "r");
     try {
       const state = (0, import_scanner2.createJsonlParseState)();
       for (const row of rows) {
         const buf = Buffer.alloc(row.byte_length);
-        (0, import_fs10.readSync)(fd, buf, 0, row.byte_length, row.byte_offset);
+        (0, import_fs11.readSync)(fd, buf, 0, row.byte_length, row.byte_offset);
         const msg = (0, import_scanner2.parseJsonlLine)(buf.toString("utf-8"), state);
         if (msg) messages.push(msg);
       }
     } finally {
-      (0, import_fs10.closeSync)(fd);
+      (0, import_fs11.closeSync)(fd);
     }
     return { messages, total, fromIndex: from };
   }
@@ -7054,14 +7135,14 @@ var ConversationCache = class _ConversationCache {
   isAgentFileCached(filePath) {
     let s;
     try {
-      s = (0, import_fs10.statSync)(filePath);
+      s = (0, import_fs11.statSync)(filePath);
     } catch {
       return false;
     }
     return this.classifyAgentFile(filePath, s.mtimeMs, s.size);
   }
   static open(dbPath, tailSize = 10, migrationsDir, options) {
-    (0, import_fs10.mkdirSync)((0, import_path11.dirname)(dbPath), { recursive: true });
+    (0, import_fs11.mkdirSync)((0, import_path12.dirname)(dbPath), { recursive: true });
     const db = instrumentDatabase(new import_better_sqlite3.default(dbPath));
     db.pragma("journal_mode = WAL");
     db.pragma("foreign_keys = ON");
@@ -7265,7 +7346,7 @@ var ConversationCache = class _ConversationCache {
         let mtimeMs = null;
         let fileSize = null;
         try {
-          const s = (0, import_fs10.statSync)(m.filePath);
+          const s = (0, import_fs11.statSync)(m.filePath);
           mtimeMs = s.mtimeMs;
           fileSize = s.size;
         } catch {
@@ -7325,8 +7406,8 @@ var ConversationCache = class _ConversationCache {
     let fileSize;
     let fd;
     try {
-      fileSize = (0, import_fs10.statSync)(filePath).size;
-      fd = (0, import_fs10.openSync)(filePath, "r");
+      fileSize = (0, import_fs11.statSync)(filePath).size;
+      fd = (0, import_fs11.openSync)(filePath, "r");
     } catch {
       return false;
     }
@@ -7339,7 +7420,7 @@ var ConversationCache = class _ConversationCache {
       while (pos > 0 && lines.length < this.tailSize * 4) {
         const toRead = Math.min(CHUNK, pos);
         pos -= toRead;
-        (0, import_fs10.readSync)(fd, buf, 0, toRead, pos);
+        (0, import_fs11.readSync)(fd, buf, 0, toRead, pos);
         const chunk = buf.subarray(0, toRead).toString("utf8");
         const combined = chunk + partial;
         const parts = combined.split("\n");
@@ -7350,7 +7431,7 @@ var ConversationCache = class _ConversationCache {
       }
       if (partial) lines.push(partial);
     } finally {
-      (0, import_fs10.closeSync)(fd);
+      (0, import_fs11.closeSync)(fd);
     }
     const msgs = [];
     for (let i = 0; i < lines.length && msgs.length < this.tailSize; i++) {
@@ -7563,7 +7644,7 @@ var ConversationCache = class _ConversationCache {
    * `handleGetConversation` can still serve the cached tail even when the
    * JSONL has been deleted.
    */
-  pruneGhostFiles(exists = import_fs10.existsSync) {
+  pruneGhostFiles(exists = import_fs11.existsSync) {
     const rows = this.stmts.allFilePaths.all();
     const ghosts = [];
     const prune = this.db.transaction((ids) => {
@@ -7618,7 +7699,7 @@ var ConversationCache = class _ConversationCache {
    * Returns the removed IDs.
    */
   reconcileDeletions(livePaths, opts) {
-    const exists = opts?.exists ?? import_fs10.existsSync;
+    const exists = opts?.exists ?? import_fs11.existsSync;
     const rows = this.stmts.allFilePaths.all();
     const removed = [];
     const drop = this.db.transaction((ids) => {
@@ -7653,7 +7734,7 @@ var ConversationCache = class _ConversationCache {
    * reports drift for the CacheIntegrityMonitor to classify. `tailed` flags
    * rows that still have cached history (which pruneGhostFiles would keep).
    */
-  listMissingFiles(exists = import_fs10.existsSync) {
+  listMissingFiles(exists = import_fs11.existsSync) {
     const rows = this.stmts.allFilePathsWithTitle.all();
     const missing = [];
     for (const row of rows) {
@@ -7994,10 +8075,10 @@ function createScanProgressThrottle() {
 }
 
 // src/api/handlers/http-helpers.ts
-var import_fs11 = require("fs");
+var import_fs12 = require("fs");
 function classifyResumability(cwd) {
   if (!cwd) return { resumable: true };
-  if ((0, import_fs11.existsSync)(cwd)) return { resumable: true };
+  if ((0, import_fs12.existsSync)(cwd)) return { resumable: true };
   const ranInWorktree = /\/\.worktrees\//.test(cwd) || /\/\.claude\/worktrees\//.test(cwd);
   return {
     resumable: false,
@@ -8352,15 +8433,15 @@ var ConversationHandlers = class {
   findJsonlPath(uuid) {
     const filename = `${uuid}.jsonl`;
     for (const projectsDir of this.scannerManager.projectsDirs()) {
-      if (!(0, import_fs12.existsSync)(projectsDir)) continue;
-      for (const dir of (0, import_fs12.readdirSync)(projectsDir)) {
-        const fp = (0, import_path12.join)(projectsDir, dir, filename);
-        if ((0, import_fs12.existsSync)(fp)) return fp;
-        const projectDir = (0, import_path12.join)(projectsDir, dir);
+      if (!(0, import_fs13.existsSync)(projectsDir)) continue;
+      for (const dir of (0, import_fs13.readdirSync)(projectsDir)) {
+        const fp = (0, import_path13.join)(projectsDir, dir, filename);
+        if ((0, import_fs13.existsSync)(fp)) return fp;
+        const projectDir = (0, import_path13.join)(projectsDir, dir);
         try {
-          for (const sub of (0, import_fs12.readdirSync)(projectDir)) {
-            const subagentPath = (0, import_path12.join)(projectDir, sub, "subagents", filename);
-            if ((0, import_fs12.existsSync)(subagentPath)) return subagentPath;
+          for (const sub of (0, import_fs13.readdirSync)(projectDir)) {
+            const subagentPath = (0, import_path13.join)(projectDir, sub, "subagents", filename);
+            if ((0, import_fs13.existsSync)(subagentPath)) return subagentPath;
           }
         } catch {
         }
@@ -8370,7 +8451,7 @@ var ConversationHandlers = class {
   }
   async readCwdFromJsonl(filePath) {
     return new Promise((resolve2) => {
-      const rl = (0, import_readline.createInterface)({ input: (0, import_fs12.createReadStream)(filePath), crlfDelay: Infinity });
+      const rl = (0, import_readline.createInterface)({ input: (0, import_fs13.createReadStream)(filePath), crlfDelay: Infinity });
       let found = false;
       rl.on("line", (line) => {
         if (found) return;
@@ -8833,11 +8914,11 @@ var ConversationHandlers = class {
 };
 
 // src/api/handlers/sessions.handlers.ts
-var import_fs14 = require("fs");
-var import_path15 = require("path");
+var import_fs15 = require("fs");
+var import_path16 = require("path");
 
 // node_modules/nanoid/index.js
-var import_crypto6 = __toESM(require("crypto"), 1);
+var import_crypto7 = __toESM(require("crypto"), 1);
 
 // node_modules/nanoid/url-alphabet/index.js
 var urlAlphabet = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
@@ -8851,10 +8932,10 @@ var fillPool = (bytes) => {
   try {
     if (!pool || pool.length < bytes) {
       pool = Buffer.allocUnsafe(bytes * POOL_SIZE_MULTIPLIER);
-      import_crypto6.default.randomFillSync(pool);
+      import_crypto7.default.randomFillSync(pool);
       poolOffset = 0;
     } else if (poolOffset + bytes > pool.length) {
-      import_crypto6.default.randomFillSync(pool);
+      import_crypto7.default.randomFillSync(pool);
       poolOffset = 0;
     }
   } catch (e) {
@@ -9093,7 +9174,7 @@ async function handleStartAgentSession(body, deps) {
 
 // src/browse.ts
 var import_promises4 = require("fs/promises");
-var import_path13 = require("path");
+var import_path14 = require("path");
 var BrowsePathNotFoundError = class extends Error {
   constructor(message) {
     super(message);
@@ -9101,15 +9182,15 @@ var BrowsePathNotFoundError = class extends Error {
   }
 };
 async function resolveBrowsePath(browseRoot, relativePath) {
-  const normalizedRoot = (0, import_path13.resolve)(browseRoot);
+  const normalizedRoot = (0, import_path14.resolve)(browseRoot);
   let sanitized;
   if (process.platform !== "win32" && relativePath.startsWith("/") && relativePath.length > 1 && relativePath.includes("/", 1)) {
     sanitized = relativePath;
   } else {
     sanitized = relativePath.replace(/^[/\\]+/, "");
   }
-  const target = sanitized ? (0, import_path13.resolve)(normalizedRoot, sanitized) : normalizedRoot;
-  const rootPrefix = normalizedRoot.endsWith(import_path13.sep) ? normalizedRoot : `${normalizedRoot}${import_path13.sep}`;
+  const target = sanitized ? (0, import_path14.resolve)(normalizedRoot, sanitized) : normalizedRoot;
+  const rootPrefix = normalizedRoot.endsWith(import_path14.sep) ? normalizedRoot : `${normalizedRoot}${import_path14.sep}`;
   if (!target.startsWith(rootPrefix) && target !== normalizedRoot) {
     throw new Error("Path outside browse root");
   }
@@ -9135,7 +9216,7 @@ async function createDirectory(parentAbsolutePath, name) {
   if (name.includes("/") || name.includes("\\") || name === ".." || name === ".") {
     throw new Error("Invalid directory name");
   }
-  const target = (0, import_path13.join)(parentAbsolutePath, name);
+  const target = (0, import_path14.join)(parentAbsolutePath, name);
   try {
     const s = await (0, import_promises4.stat)(target);
     if (s.isDirectory()) throw new Error("Directory already exists");
@@ -9298,7 +9379,7 @@ async function findRolloutOwner(rolloutPath, options = {}) {
 }
 
 // src/services/sessions/conversationBusy.ts
-var import_fs13 = require("fs");
+var import_fs14 = require("fs");
 
 // src/utils/canonicalizeProjectPath.ts
 function canonicalizeProjectPath(projectPath) {
@@ -9322,7 +9403,7 @@ function conversationBusy(input) {
   let lastActivityMs = null;
   if (input.jsonlPath) {
     try {
-      const mtimeMs = (0, import_fs13.statSync)(input.jsonlPath).mtimeMs;
+      const mtimeMs = (0, import_fs14.statSync)(input.jsonlPath).mtimeMs;
       const age = now - mtimeMs;
       lastActivityMs = Math.max(0, age);
       const isSelfEcho = input.selfPtyEndedAt != null && mtimeMs <= input.selfPtyEndedAt + SELF_ACTIVITY_SKEW_MS;
@@ -9407,10 +9488,10 @@ function readIdempotencyKey(body) {
 }
 
 // src/uploads.ts
-var import_crypto7 = require("crypto");
+var import_crypto8 = require("crypto");
 var import_promises5 = require("fs/promises");
 var import_heic_convert = __toESM(require("heic-convert"), 1);
-var import_path14 = require("path");
+var import_path15 = require("path");
 var UPLOAD_DIR_NAME = ".threadbase-uploads";
 var MAX_BYTES = 25 * 1024 * 1024;
 var HEIC_MIMES = /* @__PURE__ */ new Set(["image/heic", "image/heif"]);
@@ -9441,11 +9522,11 @@ async function saveUploadFile(input) {
     mimeType = "image/jpeg";
     originalName = originalName.replace(/\.(heic|heif)$/i, ".jpg");
   }
-  const id = `up_${(0, import_crypto7.randomBytes)(8).toString("hex")}`;
+  const id = `up_${(0, import_crypto8.randomBytes)(8).toString("hex")}`;
   const safeName = sanitizeFilename(originalName) || `file${MIME_TO_EXT[mimeType] ?? ""}`;
-  const dir = (0, import_path14.join)(input.projectPath, UPLOAD_DIR_NAME, input.sessionId);
+  const dir = (0, import_path15.join)(input.projectPath, UPLOAD_DIR_NAME, input.sessionId);
   await (0, import_promises5.mkdir)(dir, { recursive: true });
-  const filePath = (0, import_path14.join)(dir, `${Date.now()}-${id}-${safeName}`);
+  const filePath = (0, import_path15.join)(dir, `${Date.now()}-${id}-${safeName}`);
   await (0, import_promises5.writeFile)(filePath, buffer);
   return {
     id,
@@ -9677,7 +9758,7 @@ var SessionHandlers = class {
       const reconciled = this.deps.withReconciledLifecycle([base])[0];
       const session = {
         ...base,
-        ...(0, import_fs14.existsSync)(base.projectPath) ? {} : { failureReason: `Project directory not found: ${base.projectPath}` },
+        ...(0, import_fs15.existsSync)(base.projectPath) ? {} : { failureReason: `Project directory not found: ${base.projectPath}` },
         lifecycle: reconciled.lifecycle,
         lifecycleSource: reconciled.lifecycleSource
       };
@@ -10289,7 +10370,7 @@ var SessionHandlers = class {
       const jsonlCwd = jsonlPath ? await this.deps.readCwdFromJsonl(jsonlPath) : null;
       if (jsonlCwd) {
         projectPath = jsonlCwd;
-        projectName = projectName || (0, import_path15.basename)(jsonlCwd);
+        projectName = projectName || (0, import_path16.basename)(jsonlCwd);
       }
     }
     if (!projectPath) {
@@ -10366,7 +10447,7 @@ var SessionHandlers = class {
         sessionStore: this.sessionStore,
         // biome-ignore lint/style/noNonNullAssertion: agentClient is set when agentConfig.enabled is true
         agentClient: this.agentClient,
-        conversationsDir: this.cacheDir ? (0, import_path15.join)((0, import_path15.dirname)(this.cacheDir), "conversations") : "",
+        conversationsDir: this.cacheDir ? (0, import_path16.join)((0, import_path16.dirname)(this.cacheDir), "conversations") : "",
         agentConfig: this.agentConfig
       });
       json(res, result.status, result.body);
@@ -10721,7 +10802,7 @@ var ManagedSessionsRepository = class {
 };
 
 // src/db/repositories/projects.repository.ts
-var import_crypto8 = require("crypto");
+var import_crypto9 = require("crypto");
 function rowToProject(row) {
   return {
     id: row.id,
@@ -10806,7 +10887,7 @@ var ProjectsRepository = class {
       });
       return rowToProject(this.getById.get(existing.id));
     }
-    const id = (0, import_crypto8.randomUUID)();
+    const id = (0, import_crypto9.randomUUID)();
     this.insert.run({
       id,
       path,
@@ -10843,10 +10924,10 @@ var SessionsRepository = class {
 
 // src/db/runtime-store.ts
 var import_better_sqlite32 = __toESM(require("better-sqlite3"), 1);
-var import_os7 = require("os");
-var import_path16 = require("path");
+var import_os8 = require("os");
+var import_path17 = require("path");
 function resolveRuntimeDbPath(override) {
-  return override ?? process.env.THREADBASE_RUNTIME_DB ?? (0, import_path16.join)(process.env.THREADBASE_CONFIG_DIR ?? (0, import_path16.join)((0, import_os7.homedir)(), ".threadbase"), "runtime.db");
+  return override ?? process.env.THREADBASE_RUNTIME_DB ?? (0, import_path17.join)(process.env.THREADBASE_CONFIG_DIR ?? (0, import_path17.join)((0, import_os8.homedir)(), ".threadbase"), "runtime.db");
 }
 var RuntimeStore = class _RuntimeStore {
   constructor(db) {
@@ -10936,7 +11017,7 @@ var RuntimeStore = class _RuntimeStore {
 };
 
 // src/external-tails.ts
-var import_fs15 = require("fs");
+var import_fs16 = require("fs");
 var EXTERNAL_TAIL_RECENCY_MS = RESUME_BUSY_WINDOW_MS;
 var EXTERNAL_TAIL_MAX = 32;
 var EXTERNAL_TAIL_IDLE_MS = 3e5;
@@ -10969,7 +11050,7 @@ var ExternalTailManager = class {
     if (this.isManagedTailPath(key)) return;
     let mtimeMs;
     try {
-      mtimeMs = (0, import_fs15.statSync)(filePath).mtimeMs;
+      mtimeMs = (0, import_fs16.statSync)(filePath).mtimeMs;
     } catch {
       return;
     }
@@ -11106,7 +11187,7 @@ var ExternalTailManager = class {
 };
 
 // src/pair-store.ts
-var import_crypto9 = require("crypto");
+var import_crypto10 = require("crypto");
 var DEFAULT_TTL_SECONDS = 180;
 var SWEEP_INTERVAL_MS = 6e4;
 var PairTokenStore = class {
@@ -11121,7 +11202,7 @@ var PairTokenStore = class {
     }
   }
   mint() {
-    const token = `pt_${(0, import_crypto9.randomBytes)(16).toString("hex")}`;
+    const token = `pt_${(0, import_crypto10.randomBytes)(16).toString("hex")}`;
     const expiresAt = Date.now() + this.ttlMs;
     this.current = { token, expiresAt, used: false };
     return {
@@ -11243,9 +11324,9 @@ function spawnDetachedHost(socketPath, entryPoint) {
 
 // src/scanner-manager.ts
 var import_scanner4 = require("@threadbase-sh/scanner");
-var import_fs17 = require("fs");
-var import_os9 = require("os");
-var import_path18 = require("path");
+var import_fs18 = require("fs");
+var import_os10 = require("os");
+var import_path19 = require("path");
 
 // src/services/cache/cacheMetadata.ts
 function getCacheMetadata(repo, key) {
@@ -11344,22 +11425,22 @@ function refreshConversationCache(deps) {
 }
 
 // src/services/conversations/shouldRefreshProjectsFromHdd.ts
-var import_fs16 = require("fs");
-var import_os8 = require("os");
-var import_path17 = require("path");
-var DEFAULT_PROJECTS_DIR = (0, import_path17.join)((0, import_os8.homedir)(), ".claude", "projects");
+var import_fs17 = require("fs");
+var import_os9 = require("os");
+var import_path18 = require("path");
+var DEFAULT_PROJECTS_DIR = (0, import_path18.join)((0, import_os9.homedir)(), ".claude", "projects");
 function maxProjectsTreeMtimeMs(projectsDir) {
   let maxMs;
   try {
-    maxMs = (0, import_fs16.statSync)(projectsDir).mtimeMs;
+    maxMs = (0, import_fs17.statSync)(projectsDir).mtimeMs;
   } catch {
     return null;
   }
   try {
-    for (const ent of (0, import_fs16.readdirSync)(projectsDir, { withFileTypes: true })) {
+    for (const ent of (0, import_fs17.readdirSync)(projectsDir, { withFileTypes: true })) {
       if (!ent.isDirectory()) continue;
       try {
-        const childMs = (0, import_fs16.statSync)((0, import_path17.join)(projectsDir, ent.name)).mtimeMs;
+        const childMs = (0, import_fs17.statSync)((0, import_path18.join)(projectsDir, ent.name)).mtimeMs;
         if (childMs > maxMs) maxMs = childMs;
       } catch {
       }
@@ -11531,9 +11612,9 @@ var ScannerManager = class {
   projectsDirs() {
     const profiles = this.deps.scanProfiles;
     if (profiles && profiles.length > 0) {
-      return profiles.filter((p) => p.enabled).map((p) => (0, import_path18.join)(p.configDir, "projects"));
+      return profiles.filter((p) => p.enabled).map((p) => (0, import_path19.join)(p.configDir, "projects"));
     }
-    return [(0, import_path18.join)((0, import_os9.homedir)(), ".claude", "projects")];
+    return [(0, import_path19.join)((0, import_os10.homedir)(), ".claude", "projects")];
   }
   // ─── staleness ────────────────────────────────────────────────────
   // Drain the stale set and disarm the flag together. The caller owns the
@@ -11571,7 +11652,7 @@ var ScannerManager = class {
     if (!conv.filePath) return false;
     let mtimeMs = null;
     try {
-      mtimeMs = (0, import_fs17.statSync)(conv.filePath).mtimeMs;
+      mtimeMs = (0, import_fs18.statSync)(conv.filePath).mtimeMs;
     } catch {
       return false;
     }
@@ -11810,27 +11891,27 @@ function seal(plaintext, recipientPublicKeyBase64) {
 }
 
 // src/server-wiring.ts
-var import_fs19 = require("fs");
+var import_fs20 = require("fs");
 
 // src/handlers/handleListProjects.ts
-var import_fs18 = require("fs");
-var import_os10 = require("os");
-var import_path19 = require("path");
+var import_fs19 = require("fs");
+var import_os11 = require("os");
+var import_path20 = require("path");
 var HEAD_BYTES = 64 * 1024;
 var MAX_FILES_PROBED = 3;
 function readRecordedCwd(dir) {
   let files;
   try {
-    files = (0, import_fs18.readdirSync)(dir).filter((f) => f.endsWith(".jsonl"));
+    files = (0, import_fs19.readdirSync)(dir).filter((f) => f.endsWith(".jsonl"));
   } catch {
     return null;
   }
   for (const file of files.slice(0, MAX_FILES_PROBED)) {
     let fd;
     try {
-      fd = (0, import_fs18.openSync)((0, import_path19.join)(dir, file), "r");
+      fd = (0, import_fs19.openSync)((0, import_path20.join)(dir, file), "r");
       const buf = Buffer.alloc(HEAD_BYTES);
-      const bytes = (0, import_fs18.readSync)(fd, buf, 0, HEAD_BYTES, 0);
+      const bytes = (0, import_fs19.readSync)(fd, buf, 0, HEAD_BYTES, 0);
       for (const line of buf.subarray(0, bytes).toString("utf8").split("\n")) {
         if (!line.includes('"cwd"')) continue;
         try {
@@ -11841,7 +11922,7 @@ function readRecordedCwd(dir) {
       }
     } catch {
     } finally {
-      if (fd !== void 0) (0, import_fs18.closeSync)(fd);
+      if (fd !== void 0) (0, import_fs19.closeSync)(fd);
     }
   }
   return null;
@@ -11852,14 +11933,14 @@ function decodeProjectPath(dirName) {
 function handleListProjects(url, res) {
   const limit = Math.max(1, parseInt(url.searchParams.get("limit") ?? "50", 10) || 50);
   const offset = Math.max(0, parseInt(url.searchParams.get("offset") ?? "0", 10) || 0);
-  const projectsDir = (0, import_path19.join)((0, import_os10.homedir)(), ".claude", "projects");
+  const projectsDir = (0, import_path20.join)((0, import_os11.homedir)(), ".claude", "projects");
   let entries;
   try {
-    entries = (0, import_fs18.readdirSync)(projectsDir).map((dirName) => {
-      const fullPath = (0, import_path19.join)(projectsDir, dirName);
+    entries = (0, import_fs19.readdirSync)(projectsDir).map((dirName) => {
+      const fullPath = (0, import_path20.join)(projectsDir, dirName);
       let mtime = 0;
       try {
-        mtime = (0, import_fs18.statSync)(fullPath).mtimeMs;
+        mtime = (0, import_fs19.statSync)(fullPath).mtimeMs;
       } catch {
       }
       return { dirName: String(dirName), mtime };
@@ -11871,7 +11952,7 @@ function handleListProjects(url, res) {
   }
   const total = entries.length;
   const page = entries.slice(offset, offset + limit).map(({ dirName }) => {
-    const path = readRecordedCwd((0, import_path19.join)(projectsDir, dirName)) ?? decodeProjectPath(String(dirName));
+    const path = readRecordedCwd((0, import_path20.join)(projectsDir, dirName)) ?? decodeProjectPath(String(dirName));
     const name = path.split(/[\\/]/).filter(Boolean).pop() ?? dirName;
     return { name, path, dirName };
   });
@@ -11893,7 +11974,7 @@ function createConversationWatcherEvents(deps) {
         const seqs = cache.extendMessageIndex(
           filePath,
           spans,
-          (0, import_fs19.statSync)(filePath),
+          (0, import_fs20.statSync)(filePath),
           readFrom,
           endOffset
         );
@@ -11940,7 +12021,7 @@ function createConversationWatcherEvents(deps) {
     },
     onConversationChanged: (filePath) => {
       try {
-        (0, import_fs19.statSync)(filePath);
+        (0, import_fs20.statSync)(filePath);
       } catch {
         deps.externalTailManager().handleJsonlDeleted(filePath);
         return;
@@ -12269,20 +12350,20 @@ function createApiDeps(deps) {
 }
 
 // src/services/cache-integrity/cacheIntegrityMonitor.ts
-var import_crypto10 = require("crypto");
-var import_fs22 = require("fs");
+var import_crypto11 = require("crypto");
+var import_fs23 = require("fs");
 
 // src/services/cache-integrity/alertStore.ts
-var import_fs20 = require("fs");
-var import_os11 = require("os");
-var import_path20 = require("path");
+var import_fs21 = require("fs");
+var import_os12 = require("os");
+var import_path21 = require("path");
 function alertStatePath() {
-  const dir = process.env.THREADBASE_CONFIG_DIR ?? (0, import_path20.join)((0, import_os11.homedir)(), ".threadbase");
-  return (0, import_path20.join)(dir, "cache-alert.json");
+  const dir = process.env.THREADBASE_CONFIG_DIR ?? (0, import_path21.join)((0, import_os12.homedir)(), ".threadbase");
+  return (0, import_path21.join)(dir, "cache-alert.json");
 }
 function loadAlertState() {
   try {
-    const parsed = JSON.parse((0, import_fs20.readFileSync)(alertStatePath(), "utf-8"));
+    const parsed = JSON.parse((0, import_fs21.readFileSync)(alertStatePath(), "utf-8"));
     return parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     return {};
@@ -12290,14 +12371,14 @@ function loadAlertState() {
 }
 function saveAlertState(state) {
   const path = alertStatePath();
-  (0, import_fs20.mkdirSync)((0, import_path20.dirname)(path), { recursive: true });
-  (0, import_fs20.writeFileSync)(path, `${JSON.stringify(state, null, 2)}
+  (0, import_fs21.mkdirSync)((0, import_path21.dirname)(path), { recursive: true });
+  (0, import_fs21.writeFileSync)(path, `${JSON.stringify(state, null, 2)}
 `);
 }
 
 // src/services/cache-integrity/backup.ts
-var import_fs21 = require("fs");
-var import_path21 = require("path");
+var import_fs22 = require("fs");
+var import_path22 = require("path");
 var DEFAULT_RETAIN = 3;
 function retainCount() {
   const parsed = Number.parseInt(process.env.THREADBASE_CACHE_BACKUP_RETAIN ?? "", 10);
@@ -12308,17 +12389,17 @@ function timestamp(d) {
   return `${d.getFullYear()}${p(d.getMonth() + 1)}${p(d.getDate())}-${p(d.getHours())}${p(d.getMinutes())}${p(d.getSeconds())}`;
 }
 async function backupCacheDb(db, cacheDir) {
-  const backupsDir = (0, import_path21.join)(cacheDir, "backups");
-  (0, import_fs21.mkdirSync)(backupsDir, { recursive: true });
-  const destPath = (0, import_path21.join)(backupsDir, `cache-${timestamp(/* @__PURE__ */ new Date())}.db`);
+  const backupsDir = (0, import_path22.join)(cacheDir, "backups");
+  (0, import_fs22.mkdirSync)(backupsDir, { recursive: true });
+  const destPath = (0, import_path22.join)(backupsDir, `cache-${timestamp(/* @__PURE__ */ new Date())}.db`);
   await db.backup(destPath);
   const retain = retainCount();
-  const backups = (0, import_fs21.readdirSync)(backupsDir).filter((f) => f.startsWith("cache-") && f.endsWith(".db")).map((f) => {
-    const full = (0, import_path21.join)(backupsDir, f);
-    return { full, mtime: (0, import_fs21.statSync)(full).mtimeMs };
+  const backups = (0, import_fs22.readdirSync)(backupsDir).filter((f) => f.startsWith("cache-") && f.endsWith(".db")).map((f) => {
+    const full = (0, import_path22.join)(backupsDir, f);
+    return { full, mtime: (0, import_fs22.statSync)(full).mtimeMs };
   }).sort((a, b) => b.mtime - a.mtime);
   for (const stale of backups.slice(retain)) {
-    if ((0, import_fs21.existsSync)(stale.full)) (0, import_fs21.unlinkSync)(stale.full);
+    if ((0, import_fs22.existsSync)(stale.full)) (0, import_fs22.unlinkSync)(stale.full);
   }
   return destPath;
 }
@@ -12334,7 +12415,7 @@ function envInt(name, fallback) {
 }
 function fingerprintOf(ids) {
   const sorted = [...ids].sort();
-  return `sha256:${(0, import_crypto10.createHash)("sha256").update(sorted.join("\n")).digest("hex")}`;
+  return `sha256:${(0, import_crypto11.createHash)("sha256").update(sorted.join("\n")).digest("hex")}`;
 }
 var CacheIntegrityMonitor = class {
   constructor(cache, wsHub, log10, cacheDir, rescan, runDuringReset) {
@@ -12415,7 +12496,7 @@ var CacheIntegrityMonitor = class {
    * the pending record, back up on high severity, and broadcast the alert.
    */
   async runDetection(detectedAt = (/* @__PURE__ */ new Date()).toISOString()) {
-    const all = this.cache.listMissingFiles(import_fs22.existsSync);
+    const all = this.cache.listMissingFiles(import_fs23.existsSync);
     const missing = all.filter((m) => !this.ignoredIds.has(m.id));
     if (missing.length === 0) {
       if (this._pending) {
@@ -12519,7 +12600,7 @@ var CacheIntegrityMonitor = class {
       case "prune_all": {
         await this.ensureBackup(pending);
         const backupPath = pending.backupPath;
-        const stillMissing = pending.missing.filter((m) => !(0, import_fs22.existsSync)(m.filePath)).map((m) => m.id);
+        const stillMissing = pending.missing.filter((m) => !(0, import_fs23.existsSync)(m.filePath)).map((m) => m.id);
         const pruned = this.cache.dropRowsById(stillMissing);
         this.applyDeferredUnlinks();
         this.clearPending();
@@ -12581,7 +12662,7 @@ var CacheIntegrityMonitor = class {
 
 // src/services/conversations/conversationWatcher.ts
 var import_chokidar = __toESM(require("chokidar"), 1);
-var import_fs23 = require("fs");
+var import_fs24 = require("fs");
 var import_promises6 = require("fs/promises");
 var ConversationWatcher = class {
   files = /* @__PURE__ */ new Map();
@@ -12607,7 +12688,7 @@ var ConversationWatcher = class {
     if (this.files.has(key)) return;
     let offset;
     try {
-      offset = (0, import_fs23.statSync)(filePath).size;
+      offset = (0, import_fs24.statSync)(filePath).size;
     } catch {
       offset = 0;
     }
@@ -12765,14 +12846,14 @@ var ConversationWatcher = class {
 };
 
 // src/services/conversations/pruneAgentConversations.ts
-var import_fs24 = require("fs");
+var import_fs25 = require("fs");
 function pruneAgentConversations(cache) {
   const db = cache.getDatabase();
   const rows = db.prepare("SELECT id, file_path FROM conversation_meta").all();
   let pruned = 0;
   let missing = 0;
   for (const row of rows) {
-    if (!(0, import_fs24.existsSync)(row.file_path)) {
+    if (!(0, import_fs25.existsSync)(row.file_path)) {
       missing += 1;
       continue;
     }
@@ -13478,7 +13559,7 @@ function shouldBroadcastQuestion(args) {
 }
 
 // src/session-registry-boot.ts
-var import_fs25 = require("fs");
+var import_fs26 = require("fs");
 
 // src/lifecycle/process-liveness.ts
 function isPidAlive(pid) {
@@ -13724,7 +13805,7 @@ var SessionRegistryBoot = class {
       const skippedBy = {};
       for (const row of candidates) {
         if (this.sessionStore.getManaged(row.session_id)) continue;
-        const skip = rehydrateSkipReason(row, { now, projectExists: import_fs25.existsSync });
+        const skip = rehydrateSkipReason(row, { now, projectExists: import_fs26.existsSync });
         if (skip) {
           skippedBy[skip] = (skippedBy[skip] ?? 0) + 1;
           this.log.info(`[rehydrate] skipped ${row.session_id}: ${skip}`, {
@@ -13766,7 +13847,7 @@ var SessionRegistryBoot = class {
   async autoResumePreviousSessions(rows) {
     if (!this.autoResumeOnBoot) return;
     const now = Date.now();
-    const baseOptions = { now, projectExists: import_fs25.existsSync, historyExists: () => true };
+    const baseOptions = { now, projectExists: import_fs26.existsSync, historyExists: () => true };
     const historyExists = /* @__PURE__ */ new Map();
     const preflights = /* @__PURE__ */ new Set();
     for (const row of rows) {
@@ -14282,9 +14363,9 @@ function discoveredToResponse(d, conversationId) {
 }
 
 // src/session-watchers.ts
-var import_fs26 = require("fs");
-var import_os12 = require("os");
-var import_path22 = require("path");
+var import_fs27 = require("fs");
+var import_os13 = require("os");
+var import_path23 = require("path");
 var SessionWatchers = class {
   constructor(deps) {
     this.deps = deps;
@@ -14350,7 +14431,7 @@ var SessionWatchers = class {
   // file isn't slurped in full.
   readFirstLineSessionId(filePath) {
     try {
-      const content = (0, import_fs26.readFileSync)(filePath, "utf8");
+      const content = (0, import_fs27.readFileSync)(filePath, "utf8");
       const nl = content.indexOf("\n");
       const firstLine = nl === -1 ? content : content.slice(0, nl);
       if (!firstLine.trim()) return null;
@@ -14365,9 +14446,9 @@ var SessionWatchers = class {
   // was passed to Claude via --session-id so the filename matches from the start.
   watchForJsonl(sessionId, projectPath) {
     const encoded = projectPath.replace(/[/\\:.]/g, "-");
-    const projectsDir = (0, import_path22.join)((0, import_os12.homedir)(), ".claude", "projects", encoded);
+    const projectsDir = (0, import_path23.join)((0, import_os13.homedir)(), ".claude", "projects", encoded);
     const expectedFile = `${sessionId}.jsonl`;
-    const filePath = (0, import_path22.join)(projectsDir, expectedFile);
+    const filePath = (0, import_path23.join)(projectsDir, expectedFile);
     const deadline = Date.now() + 12e4;
     let watcher = null;
     const cleanup = () => {
@@ -14385,14 +14466,14 @@ var SessionWatchers = class {
         cleanup();
         return;
       }
-      let resolvedFilePath = (0, import_fs26.existsSync)(filePath) ? filePath : null;
-      if (!resolvedFilePath && (0, import_fs26.existsSync)(projectsDir)) {
+      let resolvedFilePath = (0, import_fs27.existsSync)(filePath) ? filePath : null;
+      if (!resolvedFilePath && (0, import_fs27.existsSync)(projectsDir)) {
         try {
           const now = Date.now();
-          const match = (0, import_fs26.readdirSync)(projectsDir).filter((f) => f.endsWith(".jsonl")).map((f) => ({ f, mtime: (0, import_fs26.statSync)((0, import_path22.join)(projectsDir, f)).mtimeMs })).filter(({ mtime }) => now - mtime < 5e3).filter(
-            ({ f }) => (0, import_path22.basename)(f, ".jsonl") === sessionId || this.readFirstLineSessionId((0, import_path22.join)(projectsDir, f)) === sessionId
+          const match = (0, import_fs27.readdirSync)(projectsDir).filter((f) => f.endsWith(".jsonl")).map((f) => ({ f, mtime: (0, import_fs27.statSync)((0, import_path23.join)(projectsDir, f)).mtimeMs })).filter(({ mtime }) => now - mtime < 5e3).filter(
+            ({ f }) => (0, import_path23.basename)(f, ".jsonl") === sessionId || this.readFirstLineSessionId((0, import_path23.join)(projectsDir, f)) === sessionId
           ).sort((a, b) => b.mtime - a.mtime)[0];
-          if (match) resolvedFilePath = (0, import_path22.join)(projectsDir, match.f);
+          if (match) resolvedFilePath = (0, import_path23.join)(projectsDir, match.f);
         } catch {
         }
       }
@@ -14400,7 +14481,7 @@ var SessionWatchers = class {
       cleanup();
       this.deps.sessionFileMap.set(sessionId, resolvedFilePath);
       try {
-        const existing = (0, import_fs26.readFileSync)(resolvedFilePath, "utf8").split("\n").filter(Boolean);
+        const existing = (0, import_fs27.readFileSync)(resolvedFilePath, "utf8").split("\n").filter(Boolean);
         if (existing.length > 0) {
           this.deps.broadcastConversationLines(sessionId, existing);
         }
@@ -14420,7 +14501,7 @@ var SessionWatchers = class {
     if (this.deps.sessionFileMap.has(sessionId)) return;
     try {
       require("fs").mkdirSync(projectsDir, { recursive: true });
-      watcher = (0, import_fs26.watch)(projectsDir, tryWire);
+      watcher = (0, import_fs27.watch)(projectsDir, tryWire);
       watcher.on("error", cleanup);
     } catch {
     }
@@ -14436,7 +14517,7 @@ var SessionWatchers = class {
   watchForCodexRollout(sessionId, projectPath) {
     const deadline = Date.now() + 12e4;
     const now = /* @__PURE__ */ new Date();
-    const dateDir = (0, import_path22.join)(
+    const dateDir = (0, import_path23.join)(
       String(now.getFullYear()),
       String(now.getMonth() + 1).padStart(2, "0"),
       String(now.getDate()).padStart(2, "0")
@@ -14449,7 +14530,7 @@ var SessionWatchers = class {
     };
     const matchesProjectPath = (candidatePath) => {
       try {
-        const firstLine = (0, import_fs26.readFileSync)(candidatePath, "utf8").split("\n", 1)[0];
+        const firstLine = (0, import_fs27.readFileSync)(candidatePath, "utf8").split("\n", 1)[0];
         if (!firstLine) return null;
         const parsed = JSON.parse(firstLine);
         if (parsed?.type !== "session_meta") return null;
@@ -14477,18 +14558,18 @@ var SessionWatchers = class {
         this.deps.sessionStore.listManaged().filter((s) => s.id !== sessionId && s.boundConversationId != null).map((s) => s.boundConversationId)
       );
       for (const root of this.deps.codexRoots) {
-        const sessionsDir = (0, import_path22.join)(root, dateDir);
-        if (!(0, import_fs26.existsSync)(sessionsDir)) continue;
+        const sessionsDir = (0, import_path23.join)(root, dateDir);
+        if (!(0, import_fs27.existsSync)(sessionsDir)) continue;
         let candidateFiles;
         try {
-          candidateFiles = (0, import_fs26.readdirSync)(sessionsDir).filter((f) => f.endsWith(".jsonl"));
+          candidateFiles = (0, import_fs27.readdirSync)(sessionsDir).filter((f) => f.endsWith(".jsonl"));
         } catch {
           continue;
         }
         const nowMs = Date.now();
-        const recentCandidates = candidateFiles.map((f) => ({ f, mtime: (0, import_fs26.statSync)((0, import_path22.join)(sessionsDir, f)).mtimeMs })).filter(({ mtime }) => nowMs - mtime < 1e4).sort((a, b) => b.mtime - a.mtime);
+        const recentCandidates = candidateFiles.map((f) => ({ f, mtime: (0, import_fs27.statSync)((0, import_path23.join)(sessionsDir, f)).mtimeMs })).filter(({ mtime }) => nowMs - mtime < 1e4).sort((a, b) => b.mtime - a.mtime);
         for (const { f } of recentCandidates) {
-          const candidatePath = (0, import_path22.join)(sessionsDir, f);
+          const candidatePath = (0, import_path23.join)(sessionsDir, f);
           const match = matchesProjectPath(candidatePath);
           if (!match) continue;
           if (boundElsewhere.has(match.id)) continue;
@@ -14509,7 +14590,7 @@ var SessionWatchers = class {
           this.deps.sessionFileMap.set(sessionId, candidatePath);
           this.deps.fileWatcher.watch(candidatePath);
           try {
-            const existing = (0, import_fs26.readFileSync)(candidatePath, "utf8").split("\n").filter(Boolean);
+            const existing = (0, import_fs27.readFileSync)(candidatePath, "utf8").split("\n").filter(Boolean);
             if (existing.length > 0) {
               this.deps.broadcastConversationLines(sessionId, existing);
             }
@@ -14840,7 +14921,7 @@ var StreamerServer = class {
   runtimeStore = null;
   // Identifies this streamer run. A registry row carrying a different id is a
   // session that outlived the process that started it.
-  streamerInstanceId = (0, import_crypto11.randomUUID)();
+  streamerInstanceId = (0, import_crypto12.randomUUID)();
   cacheMetadataRepo = null;
   // Push registration + delivery state (C7). Null when the cache DB failed to
   // open — registration then degrades to a no-op rather than 500ing.
@@ -14892,7 +14973,7 @@ var StreamerServer = class {
     this.skipStartupWarmup = config.skipStartupWarmup ?? false;
     this.autoResumeOnBoot = config.autoResumeOnBoot ?? false;
     this.scanProfiles = config.scanProfiles;
-    this.codexRoots = config.codexRoots ?? [(0, import_path23.join)((0, import_os13.homedir)(), ".codex", "sessions")];
+    this.codexRoots = config.codexRoots ?? [(0, import_path24.join)((0, import_os14.homedir)(), ".codex", "sessions")];
     this.ptyGracePeriodMs = config.ptyGracePeriodMs ?? DEFAULT_PTY_GRACE_PERIOD_MS;
     this.defaultSystemPrompt = config.defaultSystemPrompt ?? DEFAULT_SYSTEM_PROMPT;
     const flagResolution = resolveFeatureFlags({
@@ -14909,7 +14990,7 @@ var StreamerServer = class {
     this.claudeFlagsPersistable = config.claudeFlags === void 0;
     this.claudeFlags = config.claudeFlags ?? loadClaudeFlags();
     this.claudeExtraArgs = config.claudeExtraArgs ?? loadClaudeExtraArgs();
-    this.cacheDir = config.cacheDir ?? loadCacheDir() ?? (0, import_path23.join)((0, import_os13.homedir)(), ".threadbase", "cache");
+    this.cacheDir = config.cacheDir ?? loadCacheDir() ?? (0, import_path24.join)((0, import_os14.homedir)(), ".threadbase", "cache");
     this.runtimeDbPath = resolveRuntimeDbPath(config.runtimeDbPath);
     this.tailSize = config.tailSize ?? loadTailSize() ?? 10;
     this.directoryDebounceMs = parseDirScanDebounceEnv(process.env.THREADBASE_DIR_SCAN_DEBOUNCE_MS) ?? config.directoryScanDebounceMs ?? 1e3;
@@ -15086,7 +15167,7 @@ var StreamerServer = class {
         temporalClient,
         taskQueue: agentConfig.temporal.taskQueue
       });
-      const conversationsBaseDir = agentConfig.conversationsDir || (0, import_path23.join)((0, import_path23.dirname)(this.cacheDir), "conversations");
+      const conversationsBaseDir = agentConfig.conversationsDir || (0, import_path24.join)((0, import_path24.dirname)(this.cacheDir), "conversations");
       conversationWriter = createConversationWriter({
         baseDir: conversationsBaseDir
       });
@@ -15338,14 +15419,14 @@ var StreamerServer = class {
     }
     this.apnsClient = new ApnsClient(creds);
     const sender = new LiveActivitySender(this.apnsClient, pushRepo);
-    const serverId = process.env.THREADBASE_INSTANCE_ID ?? (0, import_os13.hostname)();
-    this.liveActivityNotifier = new LiveActivityNotifier(sender, serverId, (0, import_os13.hostname)());
+    const serverId = process.env.THREADBASE_INSTANCE_ID ?? (0, import_os14.hostname)();
+    this.liveActivityNotifier = new LiveActivityNotifier(sender, serverId, (0, import_os14.hostname)());
     this.liveActivityRenewal = new LiveActivityRenewalScheduler({
       repo: pushRepo,
       sender,
       sessionStore: this.sessionStore,
       serverId,
-      serverLabel: (0, import_os13.hostname)()
+      serverLabel: (0, import_os14.hostname)()
     });
     this.liveActivityRenewal.start();
     this.log.info("Live Activity push enabled", {
@@ -15365,7 +15446,7 @@ var StreamerServer = class {
    */
   initWaitingInputPush(pushRepo) {
     const sender = new ExpoPushSender(pushRepo, process.env.THREADBASE_EXPO_ACCESS_TOKEN);
-    const serverId = process.env.THREADBASE_INSTANCE_ID ?? (0, import_os13.hostname)();
+    const serverId = process.env.THREADBASE_INSTANCE_ID ?? (0, import_os14.hostname)();
     this.waitingInputNotifier = new WaitingInputNotifier(
       sender,
       serverId,
@@ -15502,7 +15583,7 @@ var StreamerServer = class {
         let sessions = null;
         for (let attempt = 0; attempt < 2; attempt += 1) {
           const transport = await connectOrSpawnHost({
-            instanceId: process.env.THREADBASE_INSTANCE_ID ?? (0, import_os13.hostname)()
+            instanceId: process.env.THREADBASE_INSTANCE_ID ?? (0, import_os14.hostname)()
           });
           try {
             sessions = await this.ptyManager.useRemoteRunner(transport);
@@ -15579,7 +15660,7 @@ var StreamerServer = class {
         }
         try {
           this.cache = ConversationCache.open(
-            (0, import_path23.join)(this.cacheDir, "cache.db"),
+            (0, import_path24.join)(this.cacheDir, "cache.db"),
             this.tailSize,
             void 0,
             {
@@ -15663,7 +15744,7 @@ var StreamerServer = class {
             this.fileWatcher.watchDirectory(dir);
           }
           for (const dir of this.codexRoots) {
-            if (!(0, import_fs27.existsSync)(dir)) continue;
+            if (!(0, import_fs28.existsSync)(dir)) continue;
             this.fileWatcher.watchDirectory(dir);
           }
         } catch (err) {
@@ -15967,7 +16048,7 @@ var StreamerServer = class {
       nonce: sealed.nonce,
       ephemeralPublicKey: sealed.ephemeralPublicKey,
       publicUrl: this.publicUrl,
-      machineName: (0, import_os13.hostname)(),
+      machineName: (0, import_os14.hostname)(),
       ...device && {
         deviceId: device.deviceId,
         deviceToken: device.deviceToken,
@@ -16176,7 +16257,7 @@ var StreamerServer = class {
     }
     const cachedConvMeta = this.cache?.getMetaById(historyId);
     const cachedPath = cachedConvMeta?.filePath ? toNativeFilePath(cachedConvMeta.filePath) : null;
-    const cachedCodexPath = (registryProvider === CODEX_CLI_PROVIDER || cachedConvMeta?.provider === CODEX_CLI_PROVIDER) && cachedPath != null && (0, import_fs27.existsSync)(cachedPath) ? cachedPath : null;
+    const cachedCodexPath = (registryProvider === CODEX_CLI_PROVIDER || cachedConvMeta?.provider === CODEX_CLI_PROVIDER) && cachedPath != null && (0, import_fs28.existsSync)(cachedPath) ? cachedPath : null;
     const jsonlCwd = jsonlPath ? await this.conversationHandlers.readCwdFromJsonl(jsonlPath) : null;
     const projectPath = jsonlCwd ?? conv?.projectPath ?? (cachedCodexPath ? cachedConvMeta?.projectPath : null);
     if (!projectPath) {