@tonyclaw/agent-inspector 3.1.32 → 4.0.2

package/.output/cli.js

@@ -20,7 +20,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@tonyclaw/agent-inspector",
-      version: "3.1.32",
+      version: "4.0.2",
       type: "module",
       description: "Agent observability and knowledge capture layer for AI coding tools.",
       license: "MIT",
@@ -30,14 +30,14 @@ var init_package = __esm({
       author: "TonyClaw",
       repository: {
         type: "git",
-        url: "git+https://gitcode.com/TonyClaw/agent-inspector.git"
+        url: "git+https://gitcode.com/TonyClaw/OpenInspector.git"
       },
-      homepage: "https://gitcode.com/TonyClaw/agent-inspector#readme",
+      homepage: "https://gitcode.com/TonyClaw/OpenInspector#readme",
       workspaces: [
         "packages/*"
       ],
       bugs: {
-        url: "https://gitcode.com/TonyClaw/agent-inspector/issues"
+        url: "https://gitcode.com/TonyClaw/OpenInspector/issues"
       },
       publishConfig: {
         access: "public",
@@ -60,12 +60,7 @@ var init_package = __esm({
       },
       files: [
         "bin",
-        "src",
-        "!src/**/*.test.ts",
-        "!src/**/*.stories.tsx",
-        "!src/**/__fixtures__",
-        "!src/ui/routeTree.gen.ts",
-        "!src/backend/routeTree.gen.ts",
+        "src/assets/agent-inspector.ico",
         "scripts/setup-windows-runtime.mjs",
         "scripts/setup-agent-skills.mjs",
         "scripts/generate-theme-scales.mjs",
@@ -174,9 +169,9 @@ var init_package = __esm({
         zod: "^4.4.3"
       },
       optionalDependencies: {
-        "@tonyclaw/agent-inspector-backend-darwin-arm64": "3.1.32",
-        "@tonyclaw/agent-inspector-backend-linux-x64-gnu": "3.1.32",
-        "@tonyclaw/agent-inspector-backend-win32-x64-msvc": "3.1.32",
+        "@tonyclaw/agent-inspector-backend-darwin-arm64": "4.0.2",
+        "@tonyclaw/agent-inspector-backend-linux-x64-gnu": "4.0.2",
+        "@tonyclaw/agent-inspector-backend-win32-x64-msvc": "4.0.2",
         "better-sqlite3": "^12.11.1",
         rcedit: "4.0.1"
       },
@@ -15590,9 +15585,9 @@ var init_networkHints = __esm({
 // src/cli/rustBackendPackage.ts
 import { spawnSync } from "node:child_process";
 import { createHash } from "node:crypto";
-import { existsSync, readFileSync, statSync } from "node:fs";
+import { chmodSync, copyFileSync, existsSync, mkdirSync, readFileSync, statSync } from "node:fs";
 import { createRequire } from "node:module";
-import { dirname, isAbsolute, relative, resolve } from "node:path";
+import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 function packageFailure(code, message) {
   return { kind: "error", error: { code, message } };
@@ -15704,6 +15699,80 @@ function probeBinaryIdentity(binaryPath, identityFlag) {
   const parsed = RustBackendIdentitySchema.safeParse(raw);
   return parsed.success ? { kind: "success", value: parsed.data } : { kind: "error", message: "identity command returned an unsupported contract" };
 }
+function defaultRuntimeCacheRoot() {
+  const localAppData = process.env["LOCALAPPDATA"];
+  if (localAppData !== void 0 && localAppData.trim().length > 0) {
+    return join(localAppData, "agent-inspector", "runtime", "backend");
+  }
+  return resolve(dirname(fileURLToPath(import.meta.url)), "../.agent-inspector-runtime/backend");
+}
+function fileSha256(path2) {
+  return createHash("sha256").update(readFileSync(path2)).digest("hex");
+}
+function materializeRuntimeBinary(options) {
+  if (options.os !== "win32") return { kind: "success", command: options.sourceBinaryPath };
+  const runtimeRoot = options.runtimeCacheRoot ?? defaultRuntimeCacheRoot();
+  const targetDirectory = resolve(
+    runtimeRoot,
+    options.packageVersion,
+    options.target,
+    options.sha256
+  );
+  const runtimeBinaryPath = resolve(targetDirectory, basename(options.sourceBinaryPath));
+  if (!isConfinedPath(resolve(runtimeRoot), runtimeBinaryPath)) {
+    return {
+      kind: "error",
+      error: {
+        code: "package_invalid",
+        message: "Rust backend runtime cache path escaped the user runtime directory."
+      }
+    };
+  }
+  try {
+    mkdirSync(targetDirectory, { recursive: true });
+    const needsCopy = !existsSync(runtimeBinaryPath) || fileSha256(runtimeBinaryPath) !== options.sha256;
+    if (needsCopy) copyFileSync(options.sourceBinaryPath, runtimeBinaryPath);
+    chmodSync(runtimeBinaryPath, 493);
+  } catch (error51) {
+    const message = error51 instanceof Error ? error51.message : String(error51);
+    return {
+      kind: "error",
+      error: {
+        code: "binary_invalid",
+        message: `Cannot stage Rust backend into the user runtime cache: ${message}`
+      }
+    };
+  }
+  if (fileSha256(runtimeBinaryPath) !== options.sha256) {
+    return {
+      kind: "error",
+      error: {
+        code: "hash_mismatch",
+        message: "Rust backend runtime cache integrity check failed; no binary was started."
+      }
+    };
+  }
+  const probed = options.identityProbe(runtimeBinaryPath, options.identityFlag);
+  if (probed.kind === "error") {
+    return {
+      kind: "error",
+      error: {
+        code: "identity_failed",
+        message: `Cached Rust backend binary did not pass the production identity gate: ${probed.message}.`
+      }
+    };
+  }
+  if (!identitiesMatch(probed.value, options.manifestIdentity)) {
+    return {
+      kind: "error",
+      error: {
+        code: "identity_mismatch",
+        message: "Cached Rust backend binary identity differs from its package manifest."
+      }
+    };
+  }
+  return { kind: "success", command: runtimeBinaryPath };
+}
 function defaultResolvePackageJson(specifier) {
   try {
     return packageRequire.resolve(specifier);
@@ -15834,10 +15903,24 @@ function resolveRustBackendPackage(options) {
       `Rust backend binary identity differs from its signed package manifest; no binary was started.`
     );
   }
+  const runtimeBinary = materializeRuntimeBinary({
+    sourceBinaryPath: binaryPath,
+    packageVersion: options.rootVersion,
+    target: target.value.target,
+    sha256,
+    os: target.value.os,
+    runtimeCacheRoot: options.runtimeCacheRoot,
+    identityFlag: metadata.identityFlag,
+    identityProbe: options.identityProbe ?? probeBinaryIdentity,
+    manifestIdentity: manifest.data.identity
+  });
+  if (runtimeBinary.kind === "error") {
+    return { kind: "error", error: runtimeBinary.error };
+  }
   return {
     kind: "success",
     value: {
-      command: binaryPath,
+      command: runtimeBinary.command,
       args: [],
       packageName: target.value.packageName,
       packageVersion: options.rootVersion,
@@ -16086,12 +16169,12 @@ import {
   fchmodSync,
   fstatSync,
   lstatSync,
-  mkdirSync,
+  mkdirSync as mkdirSync2,
   openSync,
   readdirSync,
   realpathSync
 } from "node:fs";
-import { join, parse as parse3, resolve as resolve2, sep } from "node:path";
+import { join as join2, parse as parse3, resolve as resolve2, sep } from "node:path";
 function windowsSystemPath(executable) {
   const systemRoot = process.env["SystemRoot"] ?? "C:\\Windows";
   return `${systemRoot}\\System32\\${executable}`;
@@ -16193,7 +16276,7 @@ function snapshotPathChain(path2) {
   for (let index = 0; index < parts.length; index += 1) {
     const part = parts[index];
     if (part === void 0) return null;
-    current = join(current, part);
+    current = join2(current, part);
     const read = readPathEntry(current);
     if (read.status === "unsafe") return null;
     if (read.status === "missing") {
@@ -16277,9 +16360,9 @@ function ensurePrivateDirectorySync(path2) {
   let current = before.entries.at(-1)?.path;
   if (current === void 0) return false;
   for (const part of before.missingParts) {
-    const next = join(current, part);
+    const next = join2(current, part);
     try {
-      mkdirSync(next, { mode: PRIVATE_DIRECTORY_MODE });
+      mkdirSync2(next, { mode: PRIVATE_DIRECTORY_MODE });
     } catch {
       const raced = readPathEntry(next);
       if (raced.status !== "ok" || raced.entry.kind !== "directory") return false;
@@ -16313,7 +16396,7 @@ function collectSafeTree(root) {
     const afterRead = completeSnapshotForKind(path2, "directory");
     if (afterRead === null || chainFingerprint(afterRead) !== fingerprint) return false;
     for (const entry of entries) {
-      if (!visit(join(path2, entry))) return false;
+      if (!visit(join2(path2, entry))) return false;
     }
     return true;
   };
@@ -16366,13 +16449,13 @@ var init_privateDataPath = __esm({
 
 // src/proxy/dataDir.ts
 import { cpSync, existsSync as existsSync2, readdirSync as readdirSync2, renameSync, rmSync } from "node:fs";
-import { isAbsolute as isAbsolute2, join as join2 } from "node:path";
+import { isAbsolute as isAbsolute2, join as join3 } from "node:path";
 function getDataDir() {
   migrateLegacyDataDirs();
   return resolveDataDir(existsSync2);
 }
 function hasDataDirState(pathExists, dir) {
-  return pathExists(join2(dir, "providers.json")) || pathExists(join2(dir, "config.json")) || pathExists(join2(dir, "logs")) || pathExists(join2(dir, "chunks"));
+  return pathExists(join3(dir, "providers.json")) || pathExists(join3(dir, "config.json")) || pathExists(join3(dir, "logs")) || pathExists(join3(dir, "chunks"));
 }
 function defaultBaseDir(env = process.env, platform = process.platform) {
   return platform === "win32" ? env["USERPROFILE"] ?? env["APPDATA"] ?? "C:\\" : env["HOME"] ?? "/tmp";
@@ -16381,13 +16464,13 @@ function resolveDataDir(_pathExists, env = process.env, platform = process.platf
   const base = defaultBaseDir(env, platform);
   const dirEnv = env["AGENT_INSPECTOR_DATA_DIR"];
   if (dirEnv !== void 0 && dirEnv !== "") {
-    return isAbsolute2(dirEnv) ? dirEnv : join2(base, dirEnv);
+    return isAbsolute2(dirEnv) ? dirEnv : join3(base, dirEnv);
   }
   const legacyDirEnv = env["AGENT_INSPECTOR_CONFIG_DIR"];
   if (legacyDirEnv !== void 0 && legacyDirEnv !== "") {
-    return isAbsolute2(legacyDirEnv) ? legacyDirEnv : join2(base, legacyDirEnv);
+    return isAbsolute2(legacyDirEnv) ? legacyDirEnv : join3(base, legacyDirEnv);
   }
-  return join2(base, CURRENT_DATA_DIR_NAME);
+  return join3(base, CURRENT_DATA_DIR_NAME);
 }
 function hasExplicitDataDir() {
   return process.env["AGENT_INSPECTOR_DATA_DIR"] !== void 0 && process.env["AGENT_INSPECTOR_DATA_DIR"] !== "" || process.env["AGENT_INSPECTOR_CONFIG_DIR"] !== void 0 && process.env["AGENT_INSPECTOR_CONFIG_DIR"] !== "";
@@ -16395,12 +16478,12 @@ function hasExplicitDataDir() {
 function migrateLegacyDataDirs() {
   if (hasExplicitDataDir()) return;
   const base = defaultBaseDir();
-  const currentDir = join2(base, CURRENT_DATA_DIR_NAME);
+  const currentDir = join3(base, CURRENT_DATA_DIR_NAME);
   if (hasDataDirState(existsSync2, currentDir)) return;
   for (const legacyName of LEGACY_DATA_DIR_NAMES) {
-    const legacyDir = join2(base, legacyName);
+    const legacyDir = join3(base, legacyName);
     if (!existsSync2(legacyDir)) continue;
-    const stagingDir = join2(
+    const stagingDir = join3(
       base,
       `${CURRENT_DATA_DIR_NAME}.migration-${String(process.pid)}-${String(Date.now())}`
     );
@@ -16412,7 +16495,7 @@ function migrateLegacyDataDirs() {
       }
       if (!ensurePrivateDirectorySync(stagingDir)) return;
       for (const entry of readdirSync2(legacyDir)) {
-        cpSync(join2(legacyDir, entry), join2(stagingDir, entry), {
+        cpSync(join3(legacyDir, entry), join3(stagingDir, entry), {
           recursive: true,
           force: false,
           errorOnExist: true
@@ -16448,7 +16531,7 @@ var init_dataDir = __esm({
 // src/proxy/platformCommands.ts
 import { statSync as statSync2 } from "node:fs";
 import { execFileSync } from "node:child_process";
-import { delimiter, isAbsolute as isAbsolute3, join as join3 } from "node:path";
+import { delimiter, isAbsolute as isAbsolute3, join as join4 } from "node:path";
 function pathEntries(envPath) {
   if (envPath === void 0 || envPath.length === 0) return [];
   return envPath.split(delimiter).filter((entry) => entry.length > 0);
@@ -16472,14 +16555,14 @@ function isExecutableCandidate(path2, platform) {
 function executableCandidates(bin, platform, env) {
   if (isAbsolute3(bin)) return [bin];
   const entries = pathEntries(env["PATH"] ?? env["Path"] ?? env["path"]);
-  if (platform !== "win32") return entries.map((entry) => join3(entry, bin));
+  if (platform !== "win32") return entries.map((entry) => join4(entry, bin));
   const hasExtension = /\.[^\\/]+$/.test(bin);
   const extensions = hasExtension ? [""] : windowsExecutableExtensions(env["PATHEXT"]);
   const candidates = [];
   for (const entry of entries) {
     for (const extension of extensions) {
-      candidates.push(join3(entry, `${bin}${extension.toLowerCase()}`));
-      candidates.push(join3(entry, `${bin}${extension.toUpperCase()}`));
+      candidates.push(join4(entry, `${bin}${extension.toLowerCase()}`));
+      candidates.push(join4(entry, `${bin}${extension.toUpperCase()}`));
     }
   }
   return candidates;
@@ -16578,13 +16661,18 @@ function killPid(pid, platform = process.platform) {
   if (!Number.isInteger(pid) || pid <= 0) return false;
   try {
     if (platform === "win32") {
-      execFileSync("taskkill.exe", ["/PID", String(pid), "/F"], {
-        encoding: "utf8",
-        timeout: 5e3,
-        windowsHide: true,
-        stdio: ["ignore", "pipe", "ignore"]
-      });
-      return true;
+      try {
+        execFileSync("taskkill.exe", ["/PID", String(pid), "/T", "/F"], {
+          encoding: "utf8",
+          timeout: 5e3,
+          windowsHide: true,
+          stdio: ["ignore", "pipe", "ignore"]
+        });
+        return true;
+      } catch {
+        process.kill(pid, "SIGKILL");
+        return true;
+      }
     }
     process.kill(pid, "SIGKILL");
     return true;
@@ -17112,7 +17200,7 @@ import { randomUUID as randomUUID2 } from "node:crypto";
 import {
   closeSync as closeSync2,
   existsSync as existsSync3,
-  mkdirSync as mkdirSync2,
+  mkdirSync as mkdirSync3,
   openSync as openSync2,
   readFileSync as readFileSync2,
   readdirSync as readdirSync3,
@@ -17124,7 +17212,7 @@ import {
 } from "node:fs";
 import { createServer } from "node:net";
 import { homedir } from "node:os";
-import { join as join4, posix, win32 } from "node:path";
+import { join as join5, posix, win32 } from "node:path";
 function getInstancesRoot(env = process.env, platform = process.platform) {
   const pathApi = platform === "win32" ? win32 : posix;
   const explicitRoot = env[AGENT_INSPECTOR_INSTANCES_DIR_ENV];
@@ -17147,13 +17235,13 @@ function getInstancesRoot(env = process.env, platform = process.platform) {
 function getInstancePaths(root, rawName) {
   const name = validateInstanceName(rawName);
   if (name.kind === "error") return name;
-  const instanceDir = join4(root, name.value);
+  const instanceDir = join5(root, name.value);
   return instanceRegistrySuccess({
     root,
     instanceDir,
-    dataDir: join4(instanceDir, "data"),
-    recordPath: join4(instanceDir, INSTANCE_RECORD_FILE_NAME),
-    lockPath: join4(instanceDir, INSTANCE_LOCK_DIRECTORY_NAME)
+    dataDir: join5(instanceDir, "data"),
+    recordPath: join5(instanceDir, INSTANCE_RECORD_FILE_NAME),
+    lockPath: join5(instanceDir, INSTANCE_LOCK_DIRECTORY_NAME)
   });
 }
 function ensureInstancesRoot(root = getInstancesRoot()) {
@@ -17201,7 +17289,7 @@ function listInstanceRecords(root) {
   const names = /* @__PURE__ */ new Set();
   for (const entry of entries) {
     if (!entry.isDirectory()) continue;
-    const recordPath = join4(root, entry.name, INSTANCE_RECORD_FILE_NAME);
+    const recordPath = join5(root, entry.name, INSTANCE_RECORD_FILE_NAME);
     if (!existsSync3(recordPath)) continue;
     const record2 = readRecordFile(recordPath);
     if (record2.kind === "error") return record2;
@@ -17248,7 +17336,7 @@ function writeInstanceRecord(root, record2) {
       `Cannot create or secure the data directory for instance ${validated.data.name}.`
     );
   }
-  const temporaryPath = join4(
+  const temporaryPath = join5(
     paths.value.instanceDir,
     `.${INSTANCE_RECORD_FILE_NAME}.${String(process.pid)}.${randomUUID2()}.tmp`
   );
@@ -17298,7 +17386,7 @@ function defaultIsProcessAlive(pid) {
 }
 function readLockOwner(lockPath) {
   try {
-    const raw = JSON.parse(readFileSync2(join4(lockPath, LOCK_OWNER_FILE_NAME), "utf8"));
+    const raw = JSON.parse(readFileSync2(join5(lockPath, LOCK_OWNER_FILE_NAME), "utf8"));
     const parsed = InstanceLockOwnerSchema.safeParse(raw);
     return parsed.success ? parsed.data : null;
   } catch {
@@ -17356,7 +17444,7 @@ async function acquireDirectoryLock(lockPath, options) {
   while (now() - startedAt <= timeoutMs) {
     const token = createToken();
     try {
-      mkdirSync2(lockPath, { mode: 448 });
+      mkdirSync3(lockPath, { mode: 448 });
     } catch (error51) {
       if (nodeErrorCode(error51) !== "EEXIST") {
         return instanceRegistryError("registry_io", `Cannot acquire lifecycle lock ${lockPath}.`);
@@ -17377,7 +17465,7 @@ async function acquireDirectoryLock(lockPath, options) {
         token,
         createdAt: new Date(now()).toISOString()
       };
-      const ownerPath = join4(lockPath, LOCK_OWNER_FILE_NAME);
+      const ownerPath = join5(lockPath, LOCK_OWNER_FILE_NAME);
       writeFileSync(ownerPath, `${JSON.stringify(owner)}
 `, {
         encoding: "utf8",
@@ -17407,7 +17495,7 @@ async function acquireDirectoryLock(lockPath, options) {
 }
 async function acquireRegistryLock(root, options = {}) {
   const ensured = ensureInstancesRoot(root);
-  return ensured.kind === "error" ? ensured : acquireDirectoryLock(join4(root, ROOT_LOCK_DIRECTORY_NAME), options);
+  return ensured.kind === "error" ? ensured : acquireDirectoryLock(join5(root, ROOT_LOCK_DIRECTORY_NAME), options);
 }
 async function acquireInstanceLock(root, rawName, options = {}) {
   const paths = getInstancePaths(root, rawName);
@@ -18464,7 +18552,7 @@ var init_browserRuntimeContract = __esm({
 
 // src/cli/detect-tools.ts
 import { existsSync as existsSync5 } from "node:fs";
-import { join as join6 } from "node:path";
+import { join as join7 } from "node:path";
 import { homedir as homedir2 } from "node:os";
 function which(bin) {
   return resolveExecutableOnPath(bin);
@@ -18473,31 +18561,31 @@ function tryDir(path2) {
   return existsSync5(path2) ? path2 : null;
 }
 function detectClaudeCode() {
-  const configDir = tryDir(join6(homedir2(), ".claude"));
+  const configDir = tryDir(join7(homedir2(), ".claude"));
   const bin = which("claude");
   if (configDir === null && bin === null) return { found: false };
   return { found: true, path: configDir ?? bin ?? "" };
 }
 function detectOpenCode() {
-  const configDir = tryDir(join6(homedir2(), ".config", "opencode"));
+  const configDir = tryDir(join7(homedir2(), ".config", "opencode"));
   const bin = which("opencode");
   if (configDir === null && bin === null) return { found: false };
   return { found: true, path: configDir ?? bin ?? "" };
 }
 function detectMiMo() {
-  const configDir = tryDir(join6(homedir2(), ".config", "mimocode")) ?? tryDir(join6(homedir2(), ".mimocode"));
+  const configDir = tryDir(join7(homedir2(), ".config", "mimocode")) ?? tryDir(join7(homedir2(), ".mimocode"));
   const bin = which("mimo");
   if (configDir === null && bin === null) return { found: false };
   return { found: true, path: configDir ?? bin ?? "" };
 }
 function detectCursor() {
-  const configDir = tryDir(join6(homedir2(), ".cursor"));
+  const configDir = tryDir(join7(homedir2(), ".cursor"));
   const bin = which("cursor");
   if (configDir === null && bin === null) return { found: false };
   return { found: true, path: configDir ?? bin ?? "" };
 }
 function detectCody() {
-  const configDir = tryDir(join6(homedir2(), ".config", "cody"));
+  const configDir = tryDir(join7(homedir2(), ".config", "cody"));
   const bin = which("cody");
   if (configDir === null && bin === null) return { found: false };
   return { found: true, path: configDir ?? bin ?? "" };
@@ -19553,7 +19641,7 @@ __export(onboard_exports, {
   runOnboard: () => runOnboard
 });
 import {
-  mkdirSync as mkdirSync3,
+  mkdirSync as mkdirSync4,
   writeFileSync as writeFileSync2,
   existsSync as existsSync6,
   readFileSync as readFileSync3,
@@ -19562,7 +19650,7 @@ import {
   rmdirSync
 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
-import { dirname as dirname2, join as join7 } from "node:path";
+import { dirname as dirname2, join as join8 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 function actionForStatus(label, state) {
   switch (state) {
@@ -19894,15 +19982,15 @@ Exit codes:
 `);
 }
 function resolveTargets(flags) {
-  const claudeRoot = flags.skillDir ?? join7(homedir3(), ".claude");
-  const claudeSkillDir = join7(claudeRoot, "skills", SKILL_DIR_NAME);
-  const claudeCommandsDir = join7(claudeRoot, "commands");
-  const codexRoot = process.env["CODEX_HOME"] ?? join7(homedir3(), ".codex");
-  const codexSkillsDir = flags.codexSkillDir ?? join7(codexRoot, "skills");
+  const claudeRoot = flags.skillDir ?? join8(homedir3(), ".claude");
+  const claudeSkillDir = join8(claudeRoot, "skills", SKILL_DIR_NAME);
+  const claudeCommandsDir = join8(claudeRoot, "commands");
+  const codexRoot = process.env["CODEX_HOME"] ?? join8(homedir3(), ".codex");
+  const codexSkillsDir = flags.codexSkillDir ?? join8(codexRoot, "skills");
   return {
-    claudeSkillFile: join7(claudeSkillDir, SKILL_FILE_NAME),
-    claudeCommandFile: join7(claudeCommandsDir, COMMAND_FILE_NAME),
-    codexSkillFile: join7(codexSkillsDir, SKILL_DIR_NAME, SKILL_FILE_NAME)
+    claudeSkillFile: join8(claudeSkillDir, SKILL_FILE_NAME),
+    claudeCommandFile: join8(claudeCommandsDir, COMMAND_FILE_NAME),
+    codexSkillFile: join8(codexSkillsDir, SKILL_DIR_NAME, SKILL_FILE_NAME)
   };
 }
 function isObject2(value) {
@@ -19921,32 +20009,32 @@ function resolveOpenCodeConfigPath(flags) {
   if (flags.opencodeConfig !== null) {
     return flags.opencodeConfig;
   }
-  const configDir = join7(homedir3(), ".config", "opencode");
-  const jsoncPath = join7(configDir, "opencode.jsonc");
+  const configDir = join8(homedir3(), ".config", "opencode");
+  const jsoncPath = join8(configDir, "opencode.jsonc");
   if (existsSync6(jsoncPath)) {
     return jsoncPath;
   }
-  return join7(configDir, "opencode.json");
+  return join8(configDir, "opencode.json");
 }
 function resolveMiMoConfigPath(flags) {
   if (flags.mimoConfig !== null) {
     return flags.mimoConfig;
   }
-  const configDir = join7(homedir3(), ".config", "mimocode");
-  const jsoncPath = join7(configDir, "mimocode.jsonc");
+  const configDir = join8(homedir3(), ".config", "mimocode");
+  const jsoncPath = join8(configDir, "mimocode.jsonc");
   if (existsSync6(jsoncPath)) {
     return jsoncPath;
   }
-  const jsonPath = join7(configDir, "mimocode.json");
+  const jsonPath = join8(configDir, "mimocode.json");
   if (existsSync6(jsonPath)) {
     return jsonPath;
   }
-  const legacyDir = join7(homedir3(), ".mimocode");
-  const legacyJsoncPath = join7(legacyDir, "config.jsonc");
+  const legacyDir = join8(homedir3(), ".mimocode");
+  const legacyJsoncPath = join8(legacyDir, "config.jsonc");
   if (existsSync6(legacyJsoncPath)) {
     return legacyJsoncPath;
   }
-  const legacyJsonPath = join7(legacyDir, "config.json");
+  const legacyJsonPath = join8(legacyDir, "config.json");
   if (existsSync6(legacyJsonPath)) {
     return legacyJsonPath;
   }
@@ -20351,8 +20439,8 @@ function buildDetectedSummary() {
 }
 function readPackageVersion() {
   const packageJsonPaths = [
-    join7(__dirname, "..", "package.json"),
-    join7(__dirname, "..", "..", "package.json")
+    join8(__dirname, "..", "package.json"),
+    join8(__dirname, "..", "..", "package.json")
   ];
   try {
     for (const packageJsonPath of packageJsonPaths) {
@@ -20642,7 +20730,7 @@ No files were removed.
     }
     for (const plan of agentPlans) {
       if (plan.shouldRemove && plan.body !== null) {
-        mkdirSync3(dirname2(plan.status.path), { recursive: true });
+        mkdirSync4(dirname2(plan.status.path), { recursive: true });
         writeFileSync2(plan.status.path, plan.body, "utf8");
         process.stdout.write(`Removed ${plan.status.label} entry from: ${plan.status.path}
 `);
@@ -20882,12 +20970,12 @@ No files were written.
   }
   try {
     for (const file2 of filesToWrite) {
-      mkdirSync3(dirname2(file2.path), { recursive: true });
+      mkdirSync4(dirname2(file2.path), { recursive: true });
       writeFileSync2(file2.path, file2.body, "utf8");
     }
     for (const plan of agentPlansToWrite) {
       if (plan.body !== null) {
-        mkdirSync3(dirname2(plan.status.path), { recursive: true });
+        mkdirSync4(dirname2(plan.status.path), { recursive: true });
         writeFileSync2(plan.status.path, plan.body, "utf8");
       }
     }
@@ -20979,7 +21067,7 @@ __export(doctor_exports, {
   runDoctor: () => runDoctor
 });
 import { existsSync as existsSync7, readFileSync as readFileSync4, readdirSync as readdirSync5, statSync as statSync4 } from "node:fs";
-import { isAbsolute as isAbsolute5, join as join8, resolve as resolve5 } from "node:path";
+import { isAbsolute as isAbsolute5, join as join9, resolve as resolve5 } from "node:path";
 import { createConnection } from "node:net";
 function check2(name, severity, message, hint = "") {
   return {
@@ -21099,10 +21187,10 @@ function providerConfigCandidates(options, deps) {
   }
   if (options.configDir !== null) {
     const dir = resolveMaybeRelative(deps.cwd, options.configDir);
-    return [join8(dir, "providers.json"), join8(dir, "config.json")];
+    return [join9(dir, "providers.json"), join9(dir, "config.json")];
   }
   const dataDir = resolveDefaultDataDir(deps.env, deps.platform, deps.exists);
-  return [join8(dataDir, "providers.json"), join8(dataDir, "config.json")];
+  return [join9(dataDir, "providers.json"), join9(dataDir, "config.json")];
 }
 function checkProviderConfig(options, deps) {
   const providersJson = options.providersJson ?? deps.env["AGENT_INSPECTOR_PROVIDERS_JSON"] ?? null;
@@ -21237,7 +21325,7 @@ function readinessChecks(readiness) {
 function findProjectRoot(startDir, deps) {
   let current = resolve5(startDir);
   for (let i = 0; i < 6; i++) {
-    if (deps.exists(join8(current, "package.json"))) return current;
+    if (deps.exists(join9(current, "package.json"))) return current;
     const next = resolve5(current, "..");
     if (next === current) return startDir;
     current = next;
@@ -21245,7 +21333,7 @@ function findProjectRoot(startDir, deps) {
   return startDir;
 }
 function checkPackage(rootDir, deps) {
-  const packagePath = join8(rootDir, "package.json");
+  const packagePath = join9(rootDir, "package.json");
   const text = deps.readText(packagePath);
   if (text === null) {
     return check2("Package metadata", "warn", "package.json was not found near the CLI bundle.");
@@ -21270,7 +21358,7 @@ function countFilesInDir(dir, deps) {
   if (files === null) return null;
   let count = 0;
   for (const file2 of files) {
-    const fileStat = deps.stat(join8(dir, file2));
+    const fileStat = deps.stat(join9(dir, file2));
     if (fileStat !== null && !fileStat.isDirectory) count += 1;
   }
   return count;
@@ -21290,24 +21378,24 @@ function dirSize(dir, deps, depth = 0) {
   if (files === null) return null;
   let total = 0;
   for (const file2 of files) {
-    const childSize = dirSize(join8(dir, file2), deps, depth + 1);
+    const childSize = dirSize(join9(dir, file2), deps, depth + 1);
     if (childSize !== null) total += childSize;
   }
   return total;
 }
 function verboseChecks(options, deps) {
   const dataDir = resolveDefaultDataDir(deps.env, deps.platform, deps.exists);
-  const logsDir = join8(dataDir, "logs");
-  const chunksDir = join8(dataDir, "chunks");
+  const logsDir = join9(dataDir, "logs");
+  const chunksDir = join9(dataDir, "chunks");
   const providerCandidates = providerConfigCandidates(options, deps);
   const captureMode = deps.env["AGENT_INSPECTOR_MODE"] ?? deps.env["AGENT_INSPECTOR_CAPTURE_MODE"] ?? "simple";
   const logCount = countFilesInDir(logsDir, deps);
   const logSize = dirSize(logsDir, deps);
   const chunkSize = dirSize(chunksDir, deps);
   const homeDir = deps.platform === "win32" ? deps.env["USERPROFILE"] ?? deps.env["APPDATA"] ?? null : deps.env["HOME"] ?? null;
-  const claudeSkill = homeDir === null ? null : join8(homeDir, ".claude", "skills", "agent-inspector-onboard", "SKILL.md");
-  const claudeCommand = homeDir === null ? null : join8(homeDir, ".claude", "commands", "agent-inspector-onboard.md");
-  const codexSkill = homeDir === null ? null : join8(homeDir, ".codex", "skills", "agent-inspector-onboard", "SKILL.md");
+  const claudeSkill = homeDir === null ? null : join9(homeDir, ".claude", "skills", "agent-inspector-onboard", "SKILL.md");
+  const claudeCommand = homeDir === null ? null : join9(homeDir, ".claude", "commands", "agent-inspector-onboard.md");
+  const codexSkill = homeDir === null ? null : join9(homeDir, ".codex", "skills", "agent-inspector-onboard", "SKILL.md");
   const hasClaudeOnboarding = claudeSkill !== null && claudeCommand !== null && deps.exists(claudeSkill) && deps.exists(claudeCommand);
   const hasCodexOnboarding = codexSkill !== null && deps.exists(codexSkill);
   return [
@@ -21339,8 +21427,8 @@ function verboseChecks(options, deps) {
   ];
 }
 function checkExtensionSource(rootDir, deps) {
-  const extensionDir = join8(rootDir, "extensions", "chrome");
-  const missing = EXTENSION_REQUIRED_FILES.filter((file2) => !deps.exists(join8(extensionDir, file2)));
+  const extensionDir = join9(rootDir, "extensions", "chrome");
+  const missing = EXTENSION_REQUIRED_FILES.filter((file2) => !deps.exists(join9(extensionDir, file2)));
   if (missing.length === 0) {
     return check2(
       "Chrome extension source",
@@ -21356,7 +21444,7 @@ function checkExtensionSource(rootDir, deps) {
   );
 }
 function extensionManifestVersion(rootDir, deps) {
-  const manifestText = deps.readText(join8(rootDir, "extensions", "chrome", "manifest.json"));
+  const manifestText = deps.readText(join9(rootDir, "extensions", "chrome", "manifest.json"));
   if (manifestText === null) return null;
   try {
     const manifest = JSON.parse(manifestText);
@@ -21368,7 +21456,7 @@ function extensionManifestVersion(rootDir, deps) {
   }
 }
 function checkExtensionPackage(rootDir, deps) {
-  const distDir = join8(rootDir, "dist", "chrome-extension");
+  const distDir = join9(rootDir, "dist", "chrome-extension");
   const files = deps.listDir(distDir);
   if (files === null) {
     return check2(
@@ -21990,8 +22078,8 @@ import { Buffer as Buffer5 } from "node:buffer";
 import { spawn as spawn2 } from "node:child_process";
 import { createConnection as createConnection2 } from "node:net";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
-import { dirname as dirname3, join as join9, resolve as resolvePath2 } from "node:path";
-import { appendFileSync, existsSync as existsSync8, mkdirSync as mkdirSync4 } from "node:fs";
+import { dirname as dirname3, join as join10, resolve as resolvePath2 } from "node:path";
+import { appendFileSync, existsSync as existsSync8, mkdirSync as mkdirSync5 } from "node:fs";
 
 // src/cli/startupOutput.ts
 function shouldSuppressServerOutputLine(line, context) {
@@ -22192,7 +22280,7 @@ import { createHash as createHash2, randomUUID as randomUUID3 } from "node:crypt
 import { Buffer as Buffer2 } from "node:buffer";
 import { constants as constants2, existsSync as existsSync4, lstatSync as lstatSync2 } from "node:fs";
 import { link, lstat, open, readFile, readdir, stat, unlink } from "node:fs/promises";
-import { basename, join as join5, resolve as resolve3 } from "node:path";
+import { basename as basename2, join as join6, resolve as resolve3 } from "node:path";
 
 // src/proxy/schemas.ts
 init_zod();
@@ -22809,12 +22897,12 @@ async function inspectExistingQuarantine(filePath, expected) {
   }
 }
 async function quarantineTail(context, sourceFile, tail, tailOffset) {
-  const quarantineDirectory = join5(context.root, QUARANTINE_DIRECTORY);
+  const quarantineDirectory = join6(context.root, QUARANTINE_DIRECTORY);
   if (!ensurePrivateDirectorySync(quarantineDirectory)) return null;
   const tailSha256 = hashBytes(tail);
-  const sourceFileName = basename(sourceFile);
-  const destination = join5(quarantineDirectory, `${sourceFileName}.tail-${tailSha256}.json`);
-  const temporary = join5(
+  const sourceFileName = basename2(sourceFile);
+  const destination = join6(quarantineDirectory, `${sourceFileName}.tail-${tailSha256}.json`);
+  const temporary = join6(
     quarantineDirectory,
     `.${sourceFileName}.${String(process.pid)}.${randomUUID3()}.tmp`
   );
@@ -22955,7 +23043,7 @@ async function recoverFile(context, filePath) {
   }
 }
 function applyFileResult(context, filePath, result) {
-  const file2 = basename(filePath);
+  const file2 = basename2(filePath);
   switch (result.status) {
     case "clean":
       context.safeFiles.set(filePath, result.signature);
@@ -23001,7 +23089,7 @@ async function runStartupRecovery(context) {
   }
   const files = entries.filter((entry) => entry.endsWith(".jsonl")).sort();
   for (const file2 of files) {
-    const filePath = join5(context.root, file2);
+    const filePath = join6(context.root, file2);
     const result = await recoverFile(context, filePath);
     applyFileResult(context, filePath, result);
     if (context.health.level === "unavailable") break;
@@ -24941,6 +25029,8 @@ var BRANDED_WINDOWS_RUNTIME_EXE = "agent-inspector.exe";
 var DEFAULT_CAPTURE_MODE2 = "simple";
 var DEFAULT_SHUTDOWN_DEADLINE_MS = 15e3;
 var SUPERVISOR_SHUTDOWN_GRACE_MS = 2e3;
+var FORCE_RESTART_PORT_RELEASE_TIMEOUT_MS = 1e4;
+var FORCE_RESTART_PORT_RELEASE_POLL_MS = 100;
 var TYPESCRIPT_STARTUP_READY_TIMEOUT_MS = 1e4;
 var RUST_STARTUP_READY_TIMEOUT_MS = 6e4;
 var AGENT_INSPECTOR_BACKGROUND_SUPERVISOR_ENV = "AGENT_INSPECTOR_BACKGROUND_SUPERVISOR";
@@ -25098,6 +25188,30 @@ function sleep2(ms) {
     setTimeout(resolve6, ms);
   });
 }
+async function waitForPortToRelease(port, host) {
+  const deadline = Date.now() + FORCE_RESTART_PORT_RELEASE_TIMEOUT_MS;
+  while (Date.now() < deadline) {
+    if (!await isPortAcceptingConnections(port, host)) return true;
+    await sleep2(FORCE_RESTART_PORT_RELEASE_POLL_MS);
+  }
+  return !await isPortAcceptingConnections(port, host);
+}
+async function waitForPortsToRelease(ports, host) {
+  let released = true;
+  for (const port of ports) {
+    if (!await waitForPortToRelease(port, host)) {
+      const remaining = findPidsByPort(port);
+      const suffix = remaining.length === 0 ? "" : ` Remaining listener PID(s): ${remaining.join(", ")}.`;
+      console.error(
+        `Port ${String(port)} did not release after ${String(
+          FORCE_RESTART_PORT_RELEASE_TIMEOUT_MS
+        )}ms.${suffix}`
+      );
+      released = false;
+    }
+  }
+  return released;
+}
 function startupReadyTimeoutMs(backend) {
   const configured = Number(process.env["AGENT_INSPECTOR_STARTUP_READY_TIMEOUT_MS"] ?? "");
   if (Number.isInteger(configured) && configured > 0) return configured;
@@ -25139,10 +25253,10 @@ function pipeServerOutput(child, context) {
 }
 function createBackgroundSupervisorLogs(env) {
   try {
-    const logsDir = join9(resolveDataDir(existsSync8, env), "logs");
-    mkdirSync4(logsDir, { recursive: true });
-    const stdoutPath = join9(logsDir, "backend.stdout.log");
-    const stderrPath = join9(logsDir, "backend.stderr.log");
+    const logsDir = join10(resolveDataDir(existsSync8, env), "logs");
+    mkdirSync5(logsDir, { recursive: true });
+    const stdoutPath = join10(logsDir, "backend.stdout.log");
+    const stderrPath = join10(logsDir, "backend.stderr.log");
     const header = `
 [${(/* @__PURE__ */ new Date()).toISOString()}] Agent Inspector backend process started
 `;
@@ -25217,7 +25331,7 @@ function resolveServerCommand(outputDir, serverPath, backend) {
       command: { command: resolved.value.command, args: [...resolved.value.args] }
     };
   }
-  const brandedRuntime = join9(outputDir, BRANDED_WINDOWS_RUNTIME_EXE);
+  const brandedRuntime = join10(outputDir, BRANDED_WINDOWS_RUNTIME_EXE);
   return {
     kind: "success",
     command: process.platform === "win32" && existsSync8(brandedRuntime) ? { command: brandedRuntime, args: [serverPath] } : { command: process.execPath, args: [serverPath] }
@@ -25615,8 +25729,8 @@ async function runStart(args) {
     process.exitCode = 1;
     return;
   }
-  const uiDirectoryCandidate = join9(__dirname2, "../.output/ui");
-  const uiIndexPath = join9(uiDirectoryCandidate, "index.html");
+  const uiDirectoryCandidate = join10(__dirname2, "../.output/ui");
+  const uiIndexPath = join10(uiDirectoryCandidate, "index.html");
   const uiDirectory = serveUi && existsSync8(uiIndexPath) ? uiDirectoryCandidate : void 0;
   if (serveUi && uiDirectory === void 0) {
     console.error(
@@ -25626,7 +25740,7 @@ async function runStart(args) {
     return;
   }
   const outputDir = __dirname2;
-  const serverPath = join9(outputDir, "../.output/server/index.mjs");
+  const serverPath = join10(outputDir, "../.output/server/index.mjs");
   const serverCommandResolution = resolveServerCommand(outputDir, serverPath, backend);
   if (serverCommandResolution.kind === "error") {
     console.error(serverCommandResolution.message);
@@ -25638,7 +25752,9 @@ async function runStart(args) {
     const pids = findPidsByPort(targetPort);
     for (const pid of pids) {
       console.log(`Killing process ${pid} on port ${targetPort}...`);
-      killPid(pid);
+      if (!killPid(pid)) {
+        console.error(`Failed to kill process ${pid} on port ${targetPort}.`);
+      }
     }
   }
   const legacyAliasPort = enableIdentityProxy && legacyAliasEnabled && port === DEFAULT_PORT4 ? LEGACY_ALIAS_PORT : null;
@@ -25711,6 +25827,11 @@ async function runStart(args) {
     for (const targetPort of restartPorts) {
       killProcessOnPort(targetPort);
     }
+    if (!await waitForPortsToRelease(restartPorts, host)) {
+      console.error("Agent Inspector could not restart because one or more ports are still busy.");
+      process.exitCode = 1;
+      return;
+    }
   }
   if (background && enableIdentityProxy) {
     const cliEntry = process.argv[1];
@@ -25773,7 +25894,7 @@ async function runStart(args) {
     serverEnv[AGENT_INSPECTOR_CLI_ENTRY_ENV] = currentCliEntry;
   }
   if (configDir !== void 0) {
-    let resolvedPath = join9(configDir);
+    let resolvedPath = join10(configDir);
     const msysMatch = /^\\([a-z])\\(.*)$/i.exec(resolvedPath);
     if (msysMatch !== null) {
       const drive = (msysMatch[1] ?? "").toUpperCase();
@@ -25799,7 +25920,7 @@ async function runStart(args) {
   serverEnv["AGENT_INSPECTOR_CAPTURE_MODE"] = captureMode;
   serverEnv[AGENT_INSPECTOR_BACKEND_ENV] = backend;
   serverEnv["AGENT_INSPECTOR_BACKEND_ONLY"] = serveUi ? "0" : "1";
-  const workerDir = join9(__dirname2, "workers");
+  const workerDir = join10(__dirname2, "workers");
   if (existsSync8(workerDir)) {
     serverEnv["AGENT_INSPECTOR_WORKER_DIR"] = workerDir;
   }