bazilion 0.21.0-beta.1 → 0.21.0-beta.2

package/dist/cli.js

@@ -6,7 +6,7 @@ import { defineCommand as defineCommand39, runCommand, showUsage } from "citty";
 // package.json
 var package_default = {
   name: "bazilion",
-  version: "0.21.0-beta.1",
+  version: "0.21.0-beta.2",
   description: "Multi-agent runtime CLI \u2014 spawn LLM agents, manage profiles/teams/skills, and run the local daemon.",
   license: "MIT",
   repository: {
@@ -375,12 +375,29 @@ function readAuthFile(authFile) {
 }
 
 // src/paths.ts
+import { realpathSync } from "fs";
 import { homedir } from "os";
-import { join } from "path";
+import { basename, dirname, join, resolve } from "path";
 function resolveCliPaths(home) {
-  const root = home ?? process.env.BAZILION_HOME ?? join(homedir(), ".bazilion");
+  const root = canonicalHome(resolve(home ?? process.env.BAZILION_HOME ?? join(homedir(), ".bazilion")));
   return { home: root, authFile: join(root, "auth.json") };
 }
+function canonicalHome(root) {
+  let resolved = root;
+  const unresolvedTail = [];
+  while (true) {
+    try {
+      resolved = realpathSync(resolved);
+      break;
+    } catch {
+      const parent = dirname(resolved);
+      if (parent === resolved) break;
+      unresolvedTail.unshift(basename(resolved));
+      resolved = parent;
+    }
+  }
+  return join(resolved, ...unresolvedTail);
+}
 
 // src/client.ts
 function loadClientConfig() {
@@ -721,7 +738,7 @@ var questionCommand = defineCommand3({
 // src/commands/queue.ts
 import { randomUUID as randomUUID3 } from "crypto";
 import { readFileSync as readFileSync2, statSync } from "fs";
-import { basename, extname } from "path";
+import { basename as basename2, extname } from "path";
 import { defineCommand as defineCommand4 } from "citty";
 var positional4 = { type: "positional", required: true };
 var output3 = (value) => console.log(JSON.stringify(value, null, 2));
@@ -796,7 +813,7 @@ async function submit(args2, replacement) {
       ".pdf": "application/pdf"
     };
     return {
-      name: basename(path),
+      name: basename2(path),
       mimeType: mime[extname(path).toLowerCase()] ?? "application/octet-stream",
       data: readFileSync2(path).toString("base64")
     };
@@ -886,7 +903,7 @@ var queueCommand = defineCommand4({
 // src/commands/agent.ts
 import { randomUUID as randomUUID4 } from "crypto";
 import { readFileSync as readFileSync3, writeFileSync } from "fs";
-import { basename as basename2, extname as extname2 } from "path";
+import { basename as basename3, extname as extname2 } from "path";
 import { stdin, stdout } from "process";
 import { createInterface } from "readline/promises";
 import { defineCommand as defineCommand5 } from "citty";
@@ -978,7 +995,7 @@ function loadImages(paths) {
   return paths.map((p) => {
     const mimeType = IMAGE_MIME[extname2(p).toLowerCase()];
     if (!mimeType) throw new Error(`unsupported image type: ${p} (png/jpg/gif/webp only)`);
-    return { name: basename2(p), mimeType, data: readFileSync3(p).toString("base64") };
+    return { name: basename3(p), mimeType, data: readFileSync3(p).toString("base64") };
   });
 }
 var FILE_MIME = {
@@ -992,7 +1009,7 @@ var FILE_MIME = {
 };
 function loadFiles(paths) {
   return paths.map((p) => ({
-    name: basename2(p),
+    name: basename3(p),
     mimeType: FILE_MIME[extname2(p).toLowerCase()] ?? "application/octet-stream",
     data: readFileSync3(p).toString("base64")
   }));
@@ -1268,7 +1285,7 @@ function printEvent(e, state) {
         process.stdout.write("\n");
         state.inDeltaStream = false;
       }
-      const out = basename2(e.name).replace(/[^\w.-]/g, "_") || "file";
+      const out = basename3(e.name).replace(/[^\w.-]/g, "_") || "file";
       writeFileSync(out, Buffer.from(e.data, "base64"));
       console.log(`  [file received: saved to ./${out} (${e.mimeType})]`);
       break;
@@ -1558,8 +1575,8 @@ var chatCompactCmd = defineCommand5({
       process.stdout.write(
         `compact chat history for ${args2.id}? head turns become a summary; tail is preserved. [y/N] `
       );
-      const answer = await new Promise((resolve6) => {
-        process.stdin.once("data", (d) => resolve6(String(d).trim().toLowerCase()));
+      const answer = await new Promise((resolve7) => {
+        process.stdin.once("data", (d) => resolve7(String(d).trim().toLowerCase()));
       });
       if (answer !== "y" && answer !== "yes") {
         console.log("aborted");
@@ -2086,7 +2103,7 @@ function answerCliOpenAIPrompt(prompt, input = process.stdin, output4 = process.
     );
   }
   output4.write(`${prompt.message}: `);
-  return new Promise((resolve6, reject) => {
+  return new Promise((resolve7, reject) => {
     let settled = false;
     const signal = prompt.signal;
     let readingInput = true;
@@ -2107,7 +2124,7 @@ function answerCliOpenAIPrompt(prompt, input = process.stdin, output4 = process.
       if (settled) return;
       settled = true;
       cleanup();
-      resolve6(String(data).trim());
+      resolve7(String(data).trim());
     };
     const onAbort = () => {
       if (settled || !signal) return;
@@ -2286,12 +2303,13 @@ import {
   readdirSync as readdirSync2,
   readFileSync as readFileSync6,
   readSync,
+  realpathSync as realpathSync3,
   renameSync as renameSync2,
   rmSync as rmSync2,
   writeFileSync as writeFileSync2
 } from "fs";
 import { tmpdir } from "os";
-import { basename as basename4, dirname as dirname3, isAbsolute, parse, posix, relative, resolve as resolve3 } from "path";
+import { basename as basename5, dirname as dirname4, isAbsolute, join as join4, parse, posix, relative, resolve as resolve4 } from "path";
 import { DatabaseSync as DatabaseSync4, backup as sqliteBackup } from "node:sqlite";
 import { Readable } from "stream";
 import { pipeline } from "stream/promises";
@@ -2301,7 +2319,7 @@ import { extract, list as list5 } from "tar";
 
 // src/backup-coding-recovery.ts
 import { lstatSync } from "fs";
-import { resolve } from "path";
+import { resolve as resolve2 } from "path";
 function invalidateRestoredCodingEvidence(db, payload, targetHome) {
   const rows = db.prepare("SELECT id, receipt_json FROM coding_commands").all();
   for (const row2 of rows) {
@@ -2364,8 +2382,8 @@ function invalidateRestoredCodingEvidence(db, payload, targetHome) {
   const teams = db.prepare("SELECT id FROM teams").all();
   const rebase = db.prepare("UPDATE workspace_writers SET root_path = ? WHERE team_id = ?");
   for (const team of teams) {
-    if (lstatSync(resolve(payload, "teams", team.id)).isDirectory())
-      rebase.run(resolve(targetHome, "teams", team.id), team.id);
+    if (lstatSync(resolve2(payload, "teams", team.id)).isDirectory())
+      rebase.run(resolve2(targetHome, "teams", team.id), team.id);
   }
 }
 
@@ -2443,7 +2461,7 @@ import { createHash } from "crypto";
 
 // ../daemon/src/core/db/migrate.ts
 import { readdirSync, readFileSync as readFileSync4 } from "fs";
-import { dirname, join as join2 } from "path";
+import { dirname as dirname2, join as join2 } from "path";
 import { DatabaseSync as DatabaseSync3 } from "node:sqlite";
 import { fileURLToPath } from "url";
 
@@ -2535,7 +2553,7 @@ function openInMemoryDb() {
 }
 
 // ../daemon/src/core/db/migrate.ts
-var migrationsDir = join2(dirname(fileURLToPath(import.meta.url)), "migrations");
+var migrationsDir = join2(dirname2(fileURLToPath(import.meta.url)), "migrations");
 var schemaMigrationsSql = `
   CREATE TABLE IF NOT EXISTS schema_migrations (
     version    TEXT PRIMARY KEY,
@@ -2635,30 +2653,30 @@ import {
   mkdirSync,
   openSync,
   readFileSync as readFileSync5,
-  realpathSync,
+  realpathSync as realpathSync2,
   renameSync,
   rmSync,
   writeSync
 } from "fs";
-import { basename as basename3, dirname as dirname2, join as join3, resolve as resolve2 } from "path";
+import { basename as basename4, dirname as dirname3, join as join3, resolve as resolve3 } from "path";
 var DAEMON_LIVENESS_FILENAME = "daemon-runtime.json";
 var STALE_AFTER_MS = 6e4;
 var PROBE_TIMEOUT_MS = 750;
 function canonicalHomeIdentity(home) {
-  const absolute = resolve2(home);
+  const absolute = resolve3(home);
   try {
-    return realpathSync.native(absolute);
+    return realpathSync2.native(absolute);
   } catch (error) {
     if (errorCode(error) !== "ENOENT") throw error;
-    const parent = dirname2(absolute);
+    const parent = dirname3(absolute);
     if (parent === absolute) throw error;
-    return join3(canonicalHomeIdentity(parent), basename3(absolute));
+    return join3(canonicalHomeIdentity(parent), basename4(absolute));
   }
 }
 function daemonLivenessPath(home) {
-  const canonicalHome = canonicalHomeIdentity(home);
-  const identity = createHash2("sha256").update(canonicalHome).digest("hex").slice(0, 24);
-  return join3(dirname2(canonicalHome), `.bazilion-runtime-${identity}.json`);
+  const canonicalHome3 = canonicalHomeIdentity(home);
+  const identity = createHash2("sha256").update(canonicalHome3).digest("hex").slice(0, 24);
+  return join3(dirname3(canonicalHome3), `.bazilion-runtime-${identity}.json`);
 }
 function errorCode(error) {
   return error instanceof Error && "code" in error && typeof error.code === "string" ? error.code : void 0;
@@ -2753,7 +2771,7 @@ function writeRecord(fd, record) {
 function fsyncParentDirectory(path) {
   let directoryFd = null;
   try {
-    directoryFd = openSync(dirname2(path), "r");
+    directoryFd = openSync(dirname3(path), "r");
     fsyncSync(directoryFd);
   } catch (error) {
     if (process.platform !== "win32") throw error;
@@ -2783,10 +2801,10 @@ function reclaimRecord(path, existing) {
   }
 }
 async function acquireHomeRestoreLock(home, operation = "restoring") {
-  const targetHome = resolve2(home);
-  mkdirSync(dirname2(targetHome), { recursive: true });
+  const targetHome = resolve3(home);
+  mkdirSync(dirname3(targetHome), { recursive: true });
   const path = daemonLivenessPath(targetHome);
-  mkdirSync(dirname2(path), { recursive: true });
+  mkdirSync(dirname3(path), { recursive: true });
   const instanceId = randomUUID6();
   let fd = null;
   let reclaimClaim = null;
@@ -2912,7 +2930,7 @@ async function acquireHomeRestoreLock(home, operation = "restoring") {
     markSwapping(recoveryPath, hadPrevious) {
       if (released || !stillOwnsPath()) throw new Error("restore ownership was lost");
       record.state = "swapping";
-      record.recoveryPath = resolve2(recoveryPath);
+      record.recoveryPath = resolve3(recoveryPath);
       record.hadPrevious = hadPrevious;
       writeRecord(fd, record);
       fsyncParentDirectory(path);
@@ -2927,7 +2945,7 @@ async function acquireHomeRestoreLock(home, operation = "restoring") {
     markRecoveryRequired(recoveryPath, hadPrevious) {
       if (released || !stillOwnsPath()) throw new Error("restore ownership was lost");
       record.state = "recovery-required";
-      record.recoveryPath = resolve2(recoveryPath);
+      record.recoveryPath = resolve3(recoveryPath);
       record.hadPrevious = hadPrevious;
       writeRecord(fd, record);
     },
@@ -2979,10 +2997,10 @@ var createCmd = defineCommand9({
     const cfg = loadClientConfig();
     const date = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
     const defaultSuffix = args2.recipient ? ".tar.gz.age" : ".tar.gz";
-    const outAbs = resolve3(args2.output ?? `bazilion-backup-${date}${defaultSuffix}`);
+    const outAbs = resolve4(args2.output ?? `bazilion-backup-${date}${defaultSuffix}`);
     if (existsSync2(outAbs)) throw new Error(`refusing to overwrite existing backup: ${outAbs}`);
-    const configuredHome = resolve3(resolveCliPaths().home);
-    const outputFromHome = relative(configuredHome, outAbs);
+    const configuredHome = canonicalHome2(resolveCliPaths().home);
+    const outputFromHome = relative(configuredHome, canonicalHome2(outAbs));
     if (!outputFromHome || !outputFromHome.startsWith("..") && !isAbsolute(outputFromHome)) {
       throw new Error(
         `backup output must be outside BAZILION_HOME (${configuredHome}) to avoid nesting backups`
@@ -3004,8 +3022,8 @@ var createCmd = defineCommand9({
       }
       throw new Error(`backup failed: ${err}`);
     }
-    const downloadDir = mkdtempSync(resolve3(tmpdir(), "bazilion-download-"));
-    const partial = resolve3(downloadDir, "backup.tar.gz");
+    const downloadDir = mkdtempSync(resolve4(tmpdir(), "bazilion-download-"));
+    const partial = resolve4(downloadDir, "backup.tar.gz");
     try {
       if (args2.recipient) {
         const [encryptSource, validateSource] = res.body.tee();
@@ -3030,9 +3048,9 @@ var createCmd = defineCommand9({
         renameSync2(partial, outAbs);
       } catch (error) {
         if (!(error instanceof Error) || !("code" in error) || error.code !== "EXDEV") throw error;
-        const installPartial = resolve3(
-          dirname3(outAbs),
-          `.${basename4(outAbs)}.${randomUUID7()}.installing`
+        const installPartial = resolve4(
+          dirname4(outAbs),
+          `.${basename5(outAbs)}.${randomUUID7()}.installing`
         );
         try {
           copyFileSync(partial, installPartial);
@@ -3261,6 +3279,22 @@ function validateDatabase(path, authToken) {
     db?.close();
   }
 }
+function canonicalHome2(root) {
+  let resolved = resolve4(root);
+  const unresolvedTail = [];
+  while (true) {
+    try {
+      resolved = realpathSync3(resolved);
+      break;
+    } catch {
+      const parent = dirname4(resolved);
+      if (parent === resolved) break;
+      unresolvedTail.unshift(basename5(resolved));
+      resolved = parent;
+    }
+  }
+  return join4(resolved, ...unresolvedTail);
+}
 var SLUG_ID = /^[a-z0-9][a-z0-9-]*$/;
 var AGENT_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
 function validateEntityId(id, pattern, entity) {
@@ -3270,7 +3304,7 @@ function validateEntityId(id, pattern, entity) {
   return id;
 }
 function containedChildDirectory(root, id, rowLabel) {
-  const child = resolve3(root, id);
+  const child = resolve4(root, id);
   const fromRoot = relative(root, child);
   if (!fromRoot || fromRoot.startsWith("..") || isAbsolute(fromRoot)) {
     throw new Error(`${rowLabel} directory escapes its canonical root: ${JSON.stringify(id)}`);
@@ -3295,6 +3329,8 @@ function requireExtractedTeamSlot(path, rowLabel) {
 function rebaseRestoredHomeDirectories(database, payload, targetHome) {
   let db = null;
   try {
+    const canonicalTarget = canonicalHome2(targetHome);
+    const canonicalPayload = realpathSync3(payload);
     db = new DatabaseSync4(database);
     db.exec("PRAGMA foreign_keys = ON");
     const profiles = db.prepare("SELECT id FROM profiles ORDER BY id").all();
@@ -3306,8 +3342,8 @@ function rebaseRestoredHomeDirectories(database, payload, targetHome) {
       ["agents", agents, AGENT_ID]
     ]) {
       const collection = table;
-      const stagedRoot = resolve3(payload, collection);
-      const targetRoot = resolve3(targetHome, collection);
+      const stagedRoot = resolve4(canonicalPayload, collection);
+      const targetRoot = resolve4(canonicalTarget, collection);
       for (const row2 of rows) {
         const id = validateEntityId(row2.id, idPattern, `${table} row`);
         const rowLabel = `${table} row ${JSON.stringify(id)}`;
@@ -3320,7 +3356,7 @@ function rebaseRestoredHomeDirectories(database, payload, targetHome) {
         });
       }
     }
-    const stagedTeamsRoot = resolve3(payload, "teams");
+    const stagedTeamsRoot = resolve4(canonicalPayload, "teams");
     for (const row2 of teams) {
       const id = validateEntityId(row2.id, SLUG_ID, "teams row");
       const rowLabel = `teams row ${JSON.stringify(id)}`;
@@ -3370,15 +3406,15 @@ function rebaseRestoredHomeDirectories(database, payload, targetHome) {
   }
 }
 function removeRebuildableQmdIndexes(payload) {
-  const teamsDir = resolve3(payload, "teams");
+  const teamsDir = resolve4(payload, "teams");
   if (!existsSync2(teamsDir) || !lstatSync3(teamsDir).isDirectory()) return;
   for (const team of readdirSync2(teamsDir, { withFileTypes: true })) {
     if (!team.isDirectory() || team.isSymbolicLink()) continue;
-    const memoryDir = resolve3(teamsDir, team.name, "memory");
+    const memoryDir = resolve4(teamsDir, team.name, "memory");
     if (!existsSync2(memoryDir) || !lstatSync3(memoryDir).isDirectory()) continue;
     for (const entry3 of readdirSync2(memoryDir, { withFileTypes: true })) {
       if (entry3.isFile() && entry3.name.startsWith(".qmd-index.sqlite")) {
-        rmSync2(resolve3(memoryDir, entry3.name), { force: true });
+        rmSync2(resolve4(memoryDir, entry3.name), { force: true });
       }
     }
   }
@@ -3392,9 +3428,9 @@ function revokeRestoredBrowserSessions(database) {
   }
 }
 function installValidatedPayload(payload, targetHome, staging, lifecycle, operations = { rename: renameSync2 }) {
-  const previous = resolve3(staging, "previous-home");
+  const previous = resolve4(staging, "previous-home");
   const hadPrevious = existsSync2(targetHome);
-  const targetParent = dirname3(targetHome);
+  const targetParent = dirname4(targetHome);
   const syncDirectory = operations.fsyncDirectory ?? fsyncDirectory;
   const recoveryError = (message, recoveryPath, cause) => {
     let markerError;
@@ -3505,7 +3541,7 @@ function fsyncDirectory(path) {
   }
 }
 function fsyncFile(path) {
-  const fd = openSync2(path, "r");
+  const fd = openSync2(path, "r+");
   try {
     fsyncSync2(fd);
   } finally {
@@ -3523,7 +3559,7 @@ function isAgeEncrypted(path) {
   }
 }
 function readAgeIdentity(rawPath) {
-  const path = resolve3(rawPath);
+  const path = resolve4(rawPath);
   const entry3 = lstatSync3(path);
   if (!entry3.isFile()) throw new Error(`age identity is not a regular file: ${path}`);
   if (process.platform !== "win32" && (entry3.mode & 63) !== 0) {
@@ -3557,18 +3593,18 @@ var restoreCmd = defineCommand9({
     }
   },
   async run({ args: args2 }) {
-    const file = resolve3(args2.file);
+    const file = resolve4(args2.file);
     if (!existsSync2(file)) throw new Error(`backup file not found: ${file}`);
     const paths = resolveCliPaths(args2.home);
-    const targetHome = resolve3(paths.home);
+    const targetHome = resolve4(paths.home);
     if (targetHome === parse(targetHome).root) {
       throw new Error(`refusing to restore over filesystem root: ${targetHome}`);
     }
-    const targetParent = dirname3(targetHome);
+    const targetParent = dirname4(targetHome);
     mkdirSync2(targetParent, { recursive: true });
     const restoreLock = await acquireHomeRestoreLock(targetHome);
     try {
-      const targetsConfiguredHome = targetHome === resolve3(resolveCliPaths().home);
+      const targetsConfiguredHome = targetHome === resolve4(resolveCliPaths().home);
       if (targetsConfiguredHome) {
         for (const serverUrl of configuredLoopbackUrls()) {
           if (await probeServerRunning(serverUrl)) {
@@ -3589,9 +3625,9 @@ var restoreCmd = defineCommand9({
           );
         }
       }
-      const staging = mkdtempSync(resolve3(targetParent, ".bazilion-restore-"));
-      const stagedArchive = resolve3(staging, "backup.tar.gz");
-      const payload = resolve3(staging, "payload");
+      const staging = mkdtempSync(resolve4(targetParent, ".bazilion-restore-"));
+      const stagedArchive = resolve4(staging, "backup.tar.gz");
+      const payload = resolve4(staging, "payload");
       let preserveStaging = false;
       try {
         if (isAgeEncrypted(file)) {
@@ -3637,8 +3673,8 @@ var restoreCmd = defineCommand9({
           // payload-relative path by npm-tar.
           preservePaths: true
         });
-        const database = resolve3(payload, "bazilion.db");
-        const authFile = resolve3(payload, "auth.json");
+        const database = resolve4(payload, "bazilion.db");
+        const authFile = resolve4(payload, "auth.json");
         if (!lstatSync3(database).isFile() || !lstatSync3(authFile).isFile()) {
           throw new Error("backup required files did not extract as regular files");
         }
@@ -3701,8 +3737,8 @@ function encryptSecretEnvelope(value, password) {
   });
 }
 function credentialInventory(home) {
-  const authFile = resolve3(home, "auth.json");
-  const database = resolve3(home, "bazilion.db");
+  const authFile = resolve4(home, "auth.json");
+  const database = resolve4(home, "bazilion.db");
   const token = validateAuthFile(authFile);
   validateDatabase(database, token);
   const db = new DatabaseSync4(database, { readOnly: true });
@@ -3720,7 +3756,7 @@ var inventoryCmd = defineCommand9({
   meta: { name: "inventory", description: "List credential classes captured by a backup/home" },
   args: { home: { type: "string", description: "Override BAZILION_HOME" } },
   run({ args: args2 }) {
-    const home = resolve3(resolveCliPaths(args2.home).home);
+    const home = resolve4(resolveCliPaths(args2.home).home);
     const inventory = credentialInventory(home);
     console.log("credential classes present (values are never shown):");
     console.log(`  bootstrap token: ${inventory.bootstrap ? "present" : "missing"}`);
@@ -3759,14 +3795,14 @@ var rotateBootstrapCmd = defineCommand9({
   async run({ args: args2 }) {
     if (!args2.yes) throw new Error("--yes is required");
     const paths = resolveCliPaths(args2.home);
-    const targetHome = resolve3(paths.home);
+    const targetHome = resolve4(paths.home);
     if (targetHome === parse(targetHome).root) {
       throw new Error(`refusing to rotate filesystem root: ${targetHome}`);
     }
     const lock = await acquireHomeRestoreLock(targetHome);
-    const parent = dirname3(targetHome);
-    const staging = mkdtempSync(resolve3(parent, ".bazilion-rotate-"));
-    const payload = resolve3(staging, "payload");
+    const parent = dirname4(targetHome);
+    const staging = mkdtempSync(resolve4(parent, ".bazilion-rotate-"));
+    const payload = resolve4(staging, "payload");
     let preserveStaging = false;
     try {
       for (const serverUrl of configuredLoopbackUrls()) {
@@ -3778,16 +3814,16 @@ var rotateBootstrapCmd = defineCommand9({
       if (typeof oldAuth.token !== "string" || !oldAuth.token) {
         throw new Error("auth.json is missing the bootstrap token");
       }
-      validateDatabase(resolve3(targetHome, "bazilion.db"), oldAuth.token);
+      validateDatabase(resolve4(targetHome, "bazilion.db"), oldAuth.token);
       cpSync(targetHome, payload, {
         recursive: true,
         dereference: false,
         verbatimSymlinks: true,
         preserveTimestamps: true
       });
-      const stagedDb = resolve3(payload, "bazilion.db");
+      const stagedDb = resolve4(payload, "bazilion.db");
       rmSync2(stagedDb, { force: true });
-      const sourceDb = new DatabaseSync4(resolve3(targetHome, "bazilion.db"), { readOnly: true });
+      const sourceDb = new DatabaseSync4(resolve4(targetHome, "bazilion.db"), { readOnly: true });
       try {
         await sqliteBackup(sourceDb, stagedDb);
       } finally {
@@ -3834,8 +3870,8 @@ var rotateBootstrapCmd = defineCommand9({
       } finally {
         db.close();
       }
-      const stagedAuth = resolve3(payload, "auth.json");
-      const authPartial = resolve3(payload, `.auth.json.${randomUUID7()}.installing`);
+      const stagedAuth = resolve4(payload, "auth.json");
+      const authPartial = resolve4(payload, `.auth.json.${randomUUID7()}.installing`);
       writeFileSync2(authPartial, `${JSON.stringify({ ...oldAuth, token: newToken }, null, 2)}
 `, {
         mode: 384,
@@ -4093,16 +4129,16 @@ var configCommand = defineCommand11({
 import { spawn } from "child_process";
 import { existsSync as existsSync3 } from "fs";
 import { connect } from "net";
-import { join as join4 } from "path";
+import { join as join5 } from "path";
 import { defineCommand as defineCommand12 } from "citty";
-var bundledDaemonEntry = join4(import.meta.dirname, "daemon.js");
-var sourceDaemonEntry = join4(import.meta.dirname, "..", "..", "..", "daemon", "src", "index.ts");
+var bundledDaemonEntry = join5(import.meta.dirname, "daemon.js");
+var sourceDaemonEntry = join5(import.meta.dirname, "..", "..", "..", "daemon", "src", "index.ts");
 var daemonEntry = existsSync3(bundledDaemonEntry) ? bundledDaemonEntry : sourceDaemonEntry;
-var bundledWebServerEntry = join4(import.meta.dirname, "web-server.js");
-var sourceWebServerEntry = join4(import.meta.dirname, "..", "web-server.ts");
+var bundledWebServerEntry = join5(import.meta.dirname, "web-server.js");
+var sourceWebServerEntry = join5(import.meta.dirname, "..", "web-server.ts");
 var webServerEntry = existsSync3(bundledWebServerEntry) ? bundledWebServerEntry : sourceWebServerEntry;
-var bundledWebDist = join4(import.meta.dirname, "web");
-var sourceWebDist = join4(import.meta.dirname, "..", "..", "..", "web", "dist");
+var bundledWebDist = join5(import.meta.dirname, "web");
+var sourceWebDist = join5(import.meta.dirname, "..", "..", "..", "web", "dist");
 var webDist = existsSync3(bundledWebDist) ? bundledWebDist : sourceWebDist;
 function nodeArgs(entry3) {
   return entry3.endsWith(".ts") ? ["--import", "tsx/esm", entry3] : [entry3];
@@ -4121,12 +4157,12 @@ function probeHost(host) {
   return host;
 }
 function isTcpPortOpen(host, port) {
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     const socket = connect({ host: probeHost(host), port: Number(port) });
     const done = (open) => {
       socket.removeAllListeners();
       socket.destroy();
-      resolve6(open);
+      resolve7(open);
     };
     socket.setTimeout(600);
     socket.once("connect", () => done(true));
@@ -4265,7 +4301,7 @@ var dashboardCommand = defineCommand12({
             `web UI port ${webPort} is already in use. Re-run with --port <free-port>.`
           );
         }
-        if (!existsSync3(join4(webDist, "server", "server.js"))) {
+        if (!existsSync3(join5(webDist, "server", "server.js"))) {
           throw new Error(
             `bazilion web UI bundle not found at ${webDist}. Run "pnpm --filter @bazilion/web build" from the repository root of a source checkout, or reinstall the published package.`
           );
@@ -4292,13 +4328,13 @@ var dashboardCommand = defineCommand12({
     if (children.length === 0) return;
     process.on("SIGINT", terminateChildren);
     process.on("SIGTERM", terminateChildren);
-    await new Promise((resolve6) => {
+    await new Promise((resolve7) => {
       let remaining = children.length;
       for (const child of children) {
         child.on("close", (code) => {
           remaining--;
           if (!signalled && code && code !== 0) process.exitCode = code;
-          if (remaining === 0) resolve6();
+          if (remaining === 0) resolve7();
         });
       }
     });
@@ -4965,7 +5001,7 @@ import { spawn as spawn2 } from "child_process";
 import { randomBytes as randomBytes2 } from "crypto";
 import { readFileSync as readFileSync8, rmSync as rmSync3, writeFileSync as writeFileSync4 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 
 // ../../packages/api-types/src/git-review.ts
 var REVIEW_LIMITS = {
@@ -5117,14 +5153,14 @@ var editCmd2 = defineCommand19({
     const { content } = await client.get(
       `/api/profiles/${args2.id}/files/${file}`
     );
-    const tmpPath = join5(tmpdir2(), `bazilion-${args2.id}-${file}-${randomBytes2(4).toString("hex")}`);
+    const tmpPath = join6(tmpdir2(), `bazilion-${args2.id}-${file}-${randomBytes2(4).toString("hex")}`);
     writeFileSync4(tmpPath, content);
     try {
       const editor = process.env.EDITOR ?? process.env.VISUAL ?? "vi";
-      const code = await new Promise((resolve6, reject) => {
+      const code = await new Promise((resolve7, reject) => {
         const child = spawn2(editor, [tmpPath], { stdio: "inherit" });
         child.on("error", reject);
-        child.on("close", (c) => resolve6(c ?? 0));
+        child.on("close", (c) => resolve7(c ?? 0));
       });
       if (code !== 0) throw new Error(`editor exited with code ${code}`);
       const updated = readFileSync8(tmpPath, "utf8");
@@ -5473,10 +5509,10 @@ var sendCommand = defineCommand22({
 // src/commands/serve.ts
 import { spawn as spawn3 } from "child_process";
 import { existsSync as existsSync5 } from "fs";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 import { defineCommand as defineCommand23 } from "citty";
-var bundledDaemonEntry2 = join6(import.meta.dirname, "daemon.js");
-var sourceDaemonEntry2 = join6(import.meta.dirname, "..", "..", "..", "daemon", "src", "index.ts");
+var bundledDaemonEntry2 = join7(import.meta.dirname, "daemon.js");
+var sourceDaemonEntry2 = join7(import.meta.dirname, "..", "..", "..", "daemon", "src", "index.ts");
 var daemonEntry2 = existsSync5(bundledDaemonEntry2) ? bundledDaemonEntry2 : sourceDaemonEntry2;
 var serveCommand = defineCommand23({
   meta: {
@@ -5527,17 +5563,17 @@ var serveCommand = defineCommand23({
       signalled = true;
     });
     process.on("SIGTERM", onSigterm);
-    await new Promise((resolve6, reject) => {
+    await new Promise((resolve7, reject) => {
       proc.on("error", (err) => reject(err));
       proc.on("close", (code) => {
         if (signalled) {
           process.exitCode = 0;
-          resolve6();
+          resolve7();
         } else if (code === 0 || code === null) {
-          resolve6();
+          resolve7();
         } else {
           process.exitCode = code;
-          resolve6();
+          resolve7();
         }
       });
     });
@@ -5583,7 +5619,7 @@ var sessionCommand = defineCommand24({
 
 // src/commands/skill.ts
 import { existsSync as existsSync6, readFileSync as readFileSync9, statSync as statSync2 } from "fs";
-import { basename as basename5, resolve as resolve4 } from "path";
+import { basename as basename6, resolve as resolve5 } from "path";
 import { defineCommand as defineCommand25 } from "citty";
 function printFindings(findings, prefix = "  ") {
   for (const f of findings) {
@@ -5647,13 +5683,13 @@ var importCmd = defineCommand25({
   },
   async run({ args: args2 }) {
     const client = createClient2();
-    const absFrom = resolve4(args2.from);
+    const absFrom = resolve5(args2.from);
     const isLocalZip = args2.from.toLowerCase().endsWith(".zip") && existsSync6(absFrom) && statSync2(absFrom).isFile();
     let result;
     try {
       if (isLocalZip) {
         const bytes = readFileSync9(absFrom);
-        const file = new File([bytes], basename5(absFrom), { type: "application/zip" });
+        const file = new File([bytes], basename6(absFrom), { type: "application/zip" });
         const fd = new FormData();
         fd.set("file", file);
         if (args2.force) fd.set("force", "true");
@@ -8299,9 +8335,9 @@ var triggerCommand = defineCommand37({
 });
 
 // src/commands/uninstall.ts
-import { existsSync as existsSync7, lstatSync as lstatSync4, readdirSync as readdirSync3, realpathSync as realpathSync2, rmSync as rmSync4 } from "fs";
+import { existsSync as existsSync7, lstatSync as lstatSync4, readdirSync as readdirSync3, realpathSync as realpathSync4, rmSync as rmSync4 } from "fs";
 import { homedir as homedir2 } from "os";
-import { isAbsolute as isAbsolute2, join as join7, parse as parse2, relative as relative2, resolve as resolve5, sep } from "path";
+import { isAbsolute as isAbsolute2, join as join8, parse as parse2, relative as relative2, resolve as resolve6, sep } from "path";
 import { defineCommand as defineCommand38 } from "citty";
 function makeLineReader() {
   let buffer = "";
@@ -8312,8 +8348,8 @@ function makeLineReader() {
       const nlIdx = buffer.indexOf("\n");
       if (nlIdx === -1) {
         if (ended) {
-          const resolve6 = queue.shift();
-          resolve6?.(buffer);
+          const resolve7 = queue.shift();
+          resolve7?.(buffer);
           buffer = "";
         } else {
           return;
@@ -8321,8 +8357,8 @@ function makeLineReader() {
       } else {
         const line = buffer.slice(0, nlIdx);
         buffer = buffer.slice(nlIdx + 1);
-        const resolve6 = queue.shift();
-        resolve6?.(line);
+        const resolve7 = queue.shift();
+        resolve7?.(line);
       }
     }
   };
@@ -8335,8 +8371,8 @@ function makeLineReader() {
     ended = true;
     tryDeliver();
   });
-  return () => new Promise((resolve6) => {
-    queue.push(resolve6);
+  return () => new Promise((resolve7) => {
+    queue.push(resolve7);
     tryDeliver();
   });
 }
@@ -8357,10 +8393,10 @@ function removePath(p) {
 }
 function canonicalExistingPath(path) {
   try {
-    return realpathSync2.native(path);
+    return realpathSync4.native(path);
   } catch (error) {
     if (!(error instanceof Error && "code" in error && error.code === "ENOENT")) throw error;
-    return resolve5(path);
+    return resolve6(path);
   }
 }
 function containsPath(container, candidate) {
@@ -8368,7 +8404,7 @@ function containsPath(container, candidate) {
   return nested === "" || nested !== ".." && !nested.startsWith(`..${sep}`) && !isAbsolute2(nested);
 }
 function assertSafeUninstallHome(home) {
-  const target = resolve5(home);
+  const target = resolve6(home);
   const canonical = canonicalExistingPath(target);
   const userHome = canonicalExistingPath(homedir2());
   const workingDirectory = canonicalExistingPath(process.cwd());
@@ -8408,15 +8444,22 @@ var uninstallCommand = defineCommand38({
   async run({ args: args2 }) {
     const paths = resolveCliPaths(args2.home);
     const targetHome = assertSafeUninstallHome(paths.home);
-    const dbFile = join7(targetHome, "bazilion.db");
-    const profilesDir = join7(targetHome, "profiles");
-    const agentsDir = join7(targetHome, "agents");
-    const teamsDir = join7(targetHome, "teams");
-    const legacyGroupsDir = join7(targetHome, "groups");
-    const skillsDir = join7(targetHome, "skills");
-    const logsDir = join7(targetHome, "logs");
-    const legacyConfigFile = join7(targetHome, "config.json");
-    const legacySecretsFile = join7(targetHome, "secrets.enc");
+    const requestedHome = resolve6(args2.home ?? process.env.BAZILION_HOME ?? join8(homedir2(), ".bazilion"));
+    let requestedIsSymlink = false;
+    try {
+      requestedIsSymlink = lstatSync4(requestedHome).isSymbolicLink();
+    } catch {
+    }
+    const homeIsSymlink = requestedIsSymlink;
+    const dbFile = join8(targetHome, "bazilion.db");
+    const profilesDir = join8(targetHome, "profiles");
+    const agentsDir = join8(targetHome, "agents");
+    const teamsDir = join8(targetHome, "teams");
+    const legacyGroupsDir = join8(targetHome, "groups");
+    const skillsDir = join8(targetHome, "skills");
+    const logsDir = join8(targetHome, "logs");
+    const legacyConfigFile = join8(targetHome, "config.json");
+    const legacySecretsFile = join8(targetHome, "secrets.enc");
     if (!existsSync7(targetHome)) {
       const uninstallLock2 = await acquireHomeRestoreLock(targetHome, "uninstalling");
       try {
@@ -8427,7 +8470,6 @@ var uninstallCommand = defineCommand38({
       }
       return;
     }
-    const homeIsSymlink = lstatSync4(targetHome).isSymbolicLink();
     console.log(`about to uninstall bazilion at ${targetHome}`);
     console.log("");
     const resetTargets = [
@@ -8435,7 +8477,7 @@ var uninstallCommand = defineCommand38({
       `${dbFile}-wal`,
       `${dbFile}-shm`,
       `${dbFile}-journal`,
-      join7(targetHome, "auth.json"),
+      join8(targetHome, "auth.json"),
       legacyConfigFile,
       legacySecretsFile,
       profilesDir,