claudemesh-cli 1.34.13 → 1.34.16

package/dist/entrypoints/cli.js

@@ -104,7 +104,7 @@ __export(exports_urls, {
   VERSION: () => VERSION,
   URLS: () => URLS
 });
-var URLS, VERSION = "1.34.13", env;
+var URLS, VERSION = "1.34.16", env;
 var init_urls = __esm(() => {
   URLS = {
     BROKER: process.env.CLAUDEMESH_BROKER_URL ?? "wss://ic.claudemesh.com/ws",
@@ -178,13 +178,40 @@ var init_policy = __esm(() => {
 });
 
 // src/constants/paths.ts
+import { existsSync as existsSync2 } from "node:fs";
 import { homedir as homedir2 } from "node:os";
 import { join as join2 } from "node:path";
-var home, PATHS;
+function resolveConfigDir() {
+  if (_resolvedConfigDir !== null)
+    return _resolvedConfigDir;
+  const envDir = process.env.CLAUDEMESH_CONFIG_DIR;
+  if (!envDir) {
+    _resolvedConfigDir = DEFAULT_CONFIG_DIR;
+    return DEFAULT_CONFIG_DIR;
+  }
+  if (existsSync2(envDir)) {
+    _resolvedConfigDir = envDir;
+    return envDir;
+  }
+  if (!_warnedStaleEnv && process.stderr.isTTY) {
+    _warnedStaleEnv = true;
+    const unsetHint = process.env.SHELL?.endsWith("fish") ? "set -e CLAUDEMESH_CONFIG_DIR CLAUDEMESH_IPC_TOKEN_FILE" : "unset CLAUDEMESH_CONFIG_DIR CLAUDEMESH_IPC_TOKEN_FILE";
+    process.stderr.write(`claudemesh: ignoring stale CLAUDEMESH_CONFIG_DIR=${envDir} (no config.json there); using ${DEFAULT_CONFIG_DIR}.
+` + `  Hint: this is usually a leftover env from a previous \`claudemesh launch\`. Clean it with:
+` + `    ${unsetHint}
+`);
+  }
+  _resolvedConfigDir = DEFAULT_CONFIG_DIR;
+  return DEFAULT_CONFIG_DIR;
+}
+var home, DEFAULT_CONFIG_DIR, _resolvedConfigDir = null, _warnedStaleEnv = false, PATHS;
 var init_paths = __esm(() => {
   home = homedir2();
+  DEFAULT_CONFIG_DIR = join2(home, ".claudemesh");
   PATHS = {
-    CONFIG_DIR: process.env.CLAUDEMESH_CONFIG_DIR || join2(home, ".claudemesh"),
+    get CONFIG_DIR() {
+      return resolveConfigDir();
+    },
     get CONFIG_FILE() {
       return join2(this.CONFIG_DIR, "config.json");
     },
@@ -208,9 +235,9 @@ function emptyConfig() {
 }
 
 // src/services/config/read.ts
-import { readFileSync as readFileSync2, existsSync as existsSync2 } from "node:fs";
+import { readFileSync as readFileSync2, existsSync as existsSync3 } from "node:fs";
 function readConfig() {
-  if (!existsSync2(PATHS.CONFIG_FILE))
+  if (!existsSync3(PATHS.CONFIG_FILE))
     return emptyConfig();
   try {
     const raw = readFileSync2(PATHS.CONFIG_FILE, "utf-8");
@@ -542,7 +569,7 @@ var init_facade4 = __esm(() => {
 
 // src/services/spawn/claude.ts
 import { spawnSync } from "node:child_process";
-import { existsSync as existsSync3 } from "node:fs";
+import { existsSync as existsSync4 } from "node:fs";
 function findClaudeBinary() {
   const candidates = [
     process.env.CLAUDE_BIN,
@@ -551,7 +578,7 @@ function findClaudeBinary() {
     `${process.env.HOME}/.npm/bin/claude`
   ].filter(Boolean);
   for (const bin of candidates) {
-    if (existsSync3(bin))
+    if (existsSync4(bin))
       return bin;
   }
   const which = spawnSync("which", ["claude"], { encoding: "utf-8" });
@@ -612,9 +639,9 @@ var init_facade5 = __esm(() => {
 });
 
 // src/services/auth/token-store.ts
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, unlinkSync, existsSync as existsSync4, openSync as openSync2, closeSync as closeSync2 } from "node:fs";
+import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, unlinkSync, existsSync as existsSync5, openSync as openSync2, closeSync as closeSync2 } from "node:fs";
 function getStoredToken() {
-  if (!existsSync4(PATHS.AUTH_FILE))
+  if (!existsSync5(PATHS.AUTH_FILE))
     return null;
   try {
     const raw = readFileSync3(PATHS.AUTH_FILE, "utf-8");
@@ -3678,7 +3705,7 @@ __export(exports_token, {
   TOKEN_FILE_ENV: () => TOKEN_FILE_ENV
 });
 import { randomBytes as randomBytes5 } from "node:crypto";
-import { existsSync as existsSync5, readFileSync as readFileSync5, writeFileSync as writeFileSync5 } from "node:fs";
+import { existsSync as existsSync6, readFileSync as readFileSync5, writeFileSync as writeFileSync5 } from "node:fs";
 function mintSessionToken(dir, fileName = "session-token") {
   const token = randomBytes5(32).toString("hex");
   const filePath = `${dir}/${fileName}`;
@@ -3693,7 +3720,7 @@ function readSessionTokenFromEnv(env2 = process.env) {
   if (!path)
     return null;
   try {
-    if (!existsSync5(path))
+    if (!existsSync6(path))
       return null;
     const raw = readFileSync5(path, "utf8").trim();
     if (/^[0-9a-f]{64}$/i.test(raw))
@@ -3780,7 +3807,7 @@ __export(exports_lifecycle, {
   ensureDaemonReady: () => ensureDaemonReady,
   _resetDaemonReadyCache: () => _resetDaemonReadyCache
 });
-import { existsSync as existsSync6, readFileSync as readFileSync6, statSync, unlinkSync as unlinkSync2, writeFileSync as writeFileSync6 } from "node:fs";
+import { existsSync as existsSync7, readFileSync as readFileSync6, statSync, unlinkSync as unlinkSync2, writeFileSync as writeFileSync6 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
 import { join as join4 } from "node:path";
 async function ensureDaemonReady(opts = {}) {
@@ -3836,15 +3863,15 @@ async function runEnsureDaemon(opts) {
 }
 function isServiceManaged() {
   if (process.platform === "darwin") {
-    return existsSync6(join4(homedir4(), "Library", "LaunchAgents", `${SERVICE_LABEL}.plist`));
+    return existsSync7(join4(homedir4(), "Library", "LaunchAgents", `${SERVICE_LABEL}.plist`));
   }
   if (process.platform === "linux") {
-    return existsSync6(join4(homedir4(), ".config", "systemd", "user", SYSTEMD_UNIT));
+    return existsSync7(join4(homedir4(), ".config", "systemd", "user", SYSTEMD_UNIT));
   }
   return false;
 }
 async function probeDaemon() {
-  if (!existsSync6(DAEMON_PATHS.SOCK_FILE))
+  if (!existsSync7(DAEMON_PATHS.SOCK_FILE))
     return "absent";
   try {
     const res = await ipc({ path: "/v1/version", timeoutMs: PROBE_TIMEOUT_MS });
@@ -3912,7 +3939,7 @@ async function spawnDaemon(opts) {
 }
 async function acquireOrShareLock(_opts) {
   const lockPath = SPAWN_LOCK_FILE();
-  if (existsSync6(lockPath)) {
+  if (existsSync7(lockPath)) {
     try {
       const pidStr = readFileSync6(lockPath, "utf8").trim();
       const pid = Number.parseInt(pidStr, 10);
@@ -3937,7 +3964,7 @@ function releaseLock() {
 async function pollForSocket(budgetMs) {
   const start = Date.now();
   while (Date.now() - start < budgetMs) {
-    if (existsSync6(DAEMON_PATHS.SOCK_FILE)) {
+    if (existsSync7(DAEMON_PATHS.SOCK_FILE)) {
       const probe = await probeDaemon();
       if (probe === "up")
         return { ok: true };
@@ -4317,7 +4344,7 @@ __export(exports_launch, {
 });
 import { spawnSync as spawnSync2 } from "node:child_process";
 import { randomUUID } from "node:crypto";
-import { mkdtempSync, writeFileSync as writeFileSync7, rmSync, readdirSync, statSync as statSync2, existsSync as existsSync7, readFileSync as readFileSync7 } from "node:fs";
+import { mkdtempSync, writeFileSync as writeFileSync7, rmSync, readdirSync, statSync as statSync2, existsSync as existsSync8, readFileSync as readFileSync7 } from "node:fs";
 import { tmpdir, hostname as hostname2, homedir as homedir5 } from "node:os";
 import { join as join5 } from "node:path";
 import { createInterface as createInterface4 } from "node:readline";
@@ -4513,7 +4540,7 @@ async function printBrokerWelcome(meshSlug) {
   let peerCount = -1;
   try {
     const { tryListPeersViaDaemon: tryListPeersViaDaemon2 } = await Promise.resolve().then(() => (init_daemon_route(), exports_daemon_route));
-    const peers = await tryListPeersViaDaemon2() ?? [];
+    const peers = await tryListPeersViaDaemon2(meshSlug) ?? [];
     peerCount = peers.filter((p) => p.channel !== "claudemesh-daemon").length;
   } catch {}
   let unread = -1;
@@ -4725,7 +4752,7 @@ async function runLaunch(flags, rawArgs) {
   await ensureDaemonRunning(mesh.slug, args.quiet);
   try {
     const claudeConfigPath = join5(homedir5(), ".claude.json");
-    if (existsSync7(claudeConfigPath)) {
+    if (existsSync8(claudeConfigPath)) {
       const claudeConfig = JSON.parse(readFileSync7(claudeConfigPath, "utf-8"));
       const mcpServers = claudeConfig.mcpServers ?? {};
       let cleaned = 0;
@@ -4901,7 +4928,7 @@ async function runLaunch(flags, rawArgs) {
       join5(homedir5(), ".claude", "bin", "claude")
     ];
     for (const c of candidates) {
-      if (existsSync7(c)) {
+      if (existsSync8(c)) {
         claudeBin = c;
         break;
       }
@@ -7849,11 +7876,17 @@ async function runKick(target, opts = {}) {
   return await withMesh({ meshSlug }, async (client) => {
     const result = await client.sendAndWait(built);
     const peers = result?.affected ?? result?.kicked ?? [];
-    if (peers.length === 0)
+    const skipped = result?.skipped_control_plane ?? [];
+    if (peers.length === 0 && skipped.length === 0) {
       render.info("No peers matched.");
-    else {
+    } else if (peers.length === 0 && skipped.length > 0) {
+      render.warn(`${skipped.length} match(es) refused: ${skipped.join(", ")} — control-plane connections (daemon / dashboard) auto-reconnect, so kick is a no-op.`, "To take a daemon offline locally, run `claudemesh daemon down` on that machine. To remove a member from the mesh, use `claudemesh ban <peer>`.");
+    } else {
       render.ok(`Kicked ${peers.length} peer(s): ${peers.join(", ")}`);
       render.hint("Their Claude Code session ended. They can rejoin anytime by running `claudemesh`.");
+      if (skipped.length > 0) {
+        render.warn(`(also refused ${skipped.length} control-plane connection(s): ${skipped.join(", ")})`, "Daemon / dashboard connections auto-reconnect; kick is a no-op against them. Use `claudemesh ban <peer>` to remove a member entirely.");
+      }
     }
     return EXIT.SUCCESS;
   });
@@ -8014,7 +8047,7 @@ async function listPeersForMesh(slug) {
   } catch {}
   try {
     const { tryListPeersViaDaemon: tryListPeersViaDaemon2 } = await Promise.resolve().then(() => (init_daemon_route(), exports_daemon_route));
-    const dr = await tryListPeersViaDaemon2();
+    const dr = await tryListPeersViaDaemon2(slug);
     if (dr !== null) {
       return dr.map((p) => annotateSelf(p, selfMemberPubkey, selfSessionPubkey));
     }
@@ -9239,11 +9272,11 @@ var init_whoami = __esm(() => {
 });
 
 // src/daemon/lock.ts
-import { existsSync as existsSync8, mkdirSync as mkdirSync5, readFileSync as readFileSync8, unlinkSync as unlinkSync3, writeFileSync as writeFileSync9 } from "node:fs";
+import { existsSync as existsSync9, mkdirSync as mkdirSync5, readFileSync as readFileSync8, unlinkSync as unlinkSync3, writeFileSync as writeFileSync9 } from "node:fs";
 import { dirname as dirname4 } from "node:path";
 function acquireSingletonLock() {
   mkdirSync5(dirname4(DAEMON_PATHS.PID_FILE), { recursive: true, mode: 448 });
-  if (existsSync8(DAEMON_PATHS.PID_FILE)) {
+  if (existsSync9(DAEMON_PATHS.PID_FILE)) {
     const raw = readFileSync8(DAEMON_PATHS.PID_FILE, "utf8").trim();
     const oldPid = Number.parseInt(raw, 10);
     if (Number.isFinite(oldPid) && oldPid > 0 && isProcessAlive(oldPid)) {
@@ -9957,7 +9990,7 @@ var init_session_registry = __esm(() => {
 
 // src/daemon/ipc/server.ts
 import { createServer as createServer2 } from "node:http";
-import { chmodSync as chmodSync3, existsSync as existsSync9, unlinkSync as unlinkSync4 } from "node:fs";
+import { chmodSync as chmodSync3, existsSync as existsSync10, unlinkSync as unlinkSync4 } from "node:fs";
 import { timingSafeEqual } from "node:crypto";
 import { randomUUID as randomUUID3 } from "node:crypto";
 function startIpcServer(opts) {
@@ -9973,7 +10006,7 @@ function startIpcServer(opts) {
     meshConfigs: opts.meshConfigs,
     onPendingInserted: opts.onPendingInserted
   });
-  if (existsSync9(DAEMON_PATHS.SOCK_FILE)) {
+  if (existsSync10(DAEMON_PATHS.SOCK_FILE)) {
     try {
       unlinkSync4(DAEMON_PATHS.SOCK_FILE);
     } catch {}
@@ -10866,6 +10899,10 @@ function connectWsWithBackoff(opts) {
     status = s;
     opts.onStatusChange?.(s);
   };
+  const PING_INTERVAL_MS = 30000;
+  const STALE_THRESHOLD_MS = 75000;
+  let lastActivity = Date.now();
+  let watchdogTimer = null;
   const openOnce = () => {
     if (closed)
       return Promise.reject(new Error("client_closed"));
@@ -10873,6 +10910,7 @@ function connectWsWithBackoff(opts) {
     log2("info", "ws_open_attempt", { url: opts.url });
     const sock = new WebSocket2(opts.url);
     ws = sock;
+    lastActivity = Date.now();
     return new Promise((resolve, reject) => {
       sock.on("open", () => {
         log2("info", "ws_open_ok", { url: opts.url });
@@ -10895,6 +10933,7 @@ function connectWsWithBackoff(opts) {
         })();
       });
       sock.on("message", (raw) => {
+        lastActivity = Date.now();
         let msg;
         try {
           msg = JSON.parse(raw.toString());
@@ -10909,16 +10948,43 @@ function connectWsWithBackoff(opts) {
           setStatus("open");
           reconnectAttempt = 0;
           log2("info", "ws_hello_acked", { url: opts.url });
+          if (watchdogTimer)
+            clearInterval(watchdogTimer);
+          watchdogTimer = setInterval(() => {
+            if (sock.readyState !== sock.OPEN)
+              return;
+            const idle = Date.now() - lastActivity;
+            if (idle > STALE_THRESHOLD_MS) {
+              log2("warn", "ws_stale_terminate", { url: opts.url, idle_ms: idle });
+              try {
+                sock.terminate();
+              } catch {}
+              return;
+            }
+            try {
+              sock.ping();
+            } catch {}
+          }, PING_INTERVAL_MS);
           resolve();
           return;
         }
         opts.onMessage(msg);
       });
+      sock.on("ping", () => {
+        lastActivity = Date.now();
+      });
+      sock.on("pong", () => {
+        lastActivity = Date.now();
+      });
       sock.on("close", (code, reason) => {
         if (helloTimer) {
           clearTimeout(helloTimer);
           helloTimer = null;
         }
+        if (watchdogTimer) {
+          clearInterval(watchdogTimer);
+          watchdogTimer = null;
+        }
         const reasonStr = reason.toString("utf8");
         log2("warn", "ws_closed", { url: opts.url, code, reason: reasonStr, status });
         opts.onBeforeReconnect?.(code, reasonStr);
@@ -10962,6 +11028,10 @@ function connectWsWithBackoff(opts) {
           clearTimeout(helloTimer);
           helloTimer = null;
         }
+        if (watchdogTimer) {
+          clearInterval(watchdogTimer);
+          watchdogTimer = null;
+        }
         try {
           ws?.close();
         } catch {}
@@ -11965,7 +12035,7 @@ __export(exports_identity, {
   checkFingerprint: () => checkFingerprint,
   acceptCurrentHost: () => acceptCurrentHost
 });
-import { existsSync as existsSync10, readFileSync as readFileSync9, writeFileSync as writeFileSync10 } from "node:fs";
+import { existsSync as existsSync11, readFileSync as readFileSync9, writeFileSync as writeFileSync10 } from "node:fs";
 import { join as join7 } from "node:path";
 import { createHash as createHash2 } from "node:crypto";
 import { networkInterfaces } from "node:os";
@@ -11986,7 +12056,7 @@ function computeCurrentFingerprint() {
 }
 function checkFingerprint() {
   const current = computeCurrentFingerprint();
-  if (!existsSync10(path())) {
+  if (!existsSync11(path())) {
     writeFileSync10(path(), JSON.stringify(current, null, 2), { mode: 384 });
     return { result: "first_run", current };
   }
@@ -12054,14 +12124,14 @@ var init_identity = __esm(() => {
 });
 
 // src/daemon/run.ts
-import { existsSync as existsSync11, mkdirSync as mkdirSync6, readFileSync as readFileSync10 } from "node:fs";
+import { existsSync as existsSync12, mkdirSync as mkdirSync6, readFileSync as readFileSync10 } from "node:fs";
 function detectContainer() {
   if (process.env.KUBERNETES_SERVICE_HOST)
     return true;
   if (process.env.CONTAINER === "1")
     return true;
   try {
-    if (existsSync11("/.dockerenv"))
+    if (existsSync12("/.dockerenv"))
       return true;
     const cg = readFileSync10("/proc/1/cgroup", "utf8");
     if (/(docker|kubepods|containerd)/.test(cg))
@@ -12349,7 +12419,7 @@ __export(exports_service_install, {
   installService: () => installService,
   detectPlatform: () => detectPlatform
 });
-import { existsSync as existsSync12, mkdirSync as mkdirSync7, writeFileSync as writeFileSync11, unlinkSync as unlinkSync5, readFileSync as readFileSync11 } from "node:fs";
+import { existsSync as existsSync13, mkdirSync as mkdirSync7, writeFileSync as writeFileSync11, unlinkSync as unlinkSync5, readFileSync as readFileSync11 } from "node:fs";
 import { execSync as execSync2 } from "node:child_process";
 import { homedir as homedir7 } from "node:os";
 import { join as join8, dirname as dirname5 } from "node:path";
@@ -12370,7 +12440,7 @@ function installService(args) {
   if (isCi() && !args.allowCi) {
     throw new Error("Refusing to install persistent service in CI; pass --allow-ci-persistent to override.");
   }
-  if (!existsSync12(args.binaryPath)) {
+  if (!existsSync13(args.binaryPath)) {
     throw new Error(`binary not found at ${args.binaryPath}`);
   }
   mkdirSync7(DAEMON_PATHS.DAEMON_DIR, { recursive: true, mode: 448 });
@@ -12386,7 +12456,7 @@ function uninstallService() {
     try {
       execSync2(`launchctl bootout gui/$(id -u)/${SERVICE_LABEL2}`, { stdio: "ignore" });
     } catch {}
-    if (existsSync12(p)) {
+    if (existsSync13(p)) {
       unlinkSync5(p);
       removed.push(p);
     }
@@ -12395,7 +12465,7 @@ function uninstallService() {
     try {
       execSync2(`systemctl --user disable --now ${SYSTEMD_UNIT2}`, { stdio: "ignore" });
     } catch {}
-    if (existsSync12(p)) {
+    if (existsSync13(p)) {
       unlinkSync5(p);
       removed.push(p);
     }
@@ -12456,7 +12526,7 @@ function installDarwin(args) {
   } catch {}
   try {
     const pidPath = DAEMON_PATHS.PID_FILE;
-    if (existsSync12(pidPath)) {
+    if (existsSync13(pidPath)) {
       const pid = parseInt(readFileSync11(pidPath, "utf8").trim(), 10);
       if (Number.isFinite(pid) && pid > 0) {
         try {
@@ -12508,7 +12578,7 @@ WantedBy=default.target
   } catch {}
   try {
     const pidPath = DAEMON_PATHS.PID_FILE;
-    if (existsSync12(pidPath)) {
+    if (existsSync13(pidPath)) {
       const pid = parseInt(readFileSync11(pidPath, "utf8").trim(), 10);
       if (Number.isFinite(pid) && pid > 0) {
         try {
@@ -12536,7 +12606,7 @@ function readInstalledUnit() {
   if (!platform5)
     return { platform: null, path: null, content: null };
   const path2 = platform5 === "darwin" ? darwinPlistPath() : linuxUnitPath();
-  if (!existsSync12(path2))
+  if (!existsSync13(path2))
     return { platform: platform5, path: null, content: null };
   try {
     return { platform: platform5, path: path2, content: readFileSync11(path2, "utf8") };
@@ -12555,7 +12625,7 @@ __export(exports_daemon, {
   runDaemonCommand: () => runDaemonCommand
 });
 import { spawn } from "node:child_process";
-import { existsSync as existsSync13, openSync as openSync3, mkdirSync as mkdirSync8 } from "node:fs";
+import { existsSync as existsSync14, openSync as openSync3, mkdirSync as mkdirSync8 } from "node:fs";
 import { join as join9 } from "node:path";
 async function runDaemonCommand(sub, opts, rest = []) {
   switch (sub) {
@@ -12897,7 +12967,7 @@ async function spawnDetachedDaemon(opts) {
   const sockPath = DAEMON_PATHS.SOCK_FILE;
   const startedAt = Date.now();
   while (Date.now() - startedAt < 3000) {
-    if (existsSync13(sockPath)) {
+    if (existsSync14(sockPath)) {
       if (opts.json) {
         process.stdout.write(JSON.stringify({ ok: true, detached: true, pid: child.pid, log: logPath }) + `
 `);
@@ -12942,7 +13012,7 @@ __export(exports_install, {
 import {
   chmodSync as chmodSync4,
   copyFileSync,
-  existsSync as existsSync14,
+  existsSync as existsSync15,
   mkdirSync as mkdirSync9,
   readFileSync as readFileSync12,
   writeFileSync as writeFileSync12
@@ -12952,7 +13022,7 @@ import { dirname as dirname6, join as join10, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { spawnSync as spawnSync3 } from "node:child_process";
 function readClaudeConfig() {
-  if (!existsSync14(CLAUDE_CONFIG))
+  if (!existsSync15(CLAUDE_CONFIG))
     return {};
   const text = readFileSync12(CLAUDE_CONFIG, "utf-8").trim();
   if (!text)
@@ -12964,7 +13034,7 @@ function readClaudeConfig() {
   }
 }
 function backupClaudeConfig() {
-  if (!existsSync14(CLAUDE_CONFIG))
+  if (!existsSync15(CLAUDE_CONFIG))
     return;
   const backupDir = join10(dirname6(CLAUDE_CONFIG), ".claude", "backups");
   mkdirSync9(backupDir, { recursive: true });
@@ -12993,7 +13063,7 @@ function patchMcpServer(entry) {
   return action;
 }
 function removeMcpServer() {
-  if (!existsSync14(CLAUDE_CONFIG))
+  if (!existsSync15(CLAUDE_CONFIG))
     return false;
   backupClaudeConfig();
   const cfg = readClaudeConfig();
@@ -13030,7 +13100,7 @@ function resolveBundledSkillsDir() {
   const here = fileURLToPath(import.meta.url);
   const pkgRoot = resolve(dirname6(here), "..", "..");
   const skillsDir = join10(pkgRoot, "skills");
-  if (existsSync14(skillsDir))
+  if (existsSync15(skillsDir))
     return skillsDir;
   return null;
 }
@@ -13065,7 +13135,7 @@ function uninstallSkills() {
     if (!entry.isDirectory())
       continue;
     const dstDir = join10(CLAUDE_SKILLS_ROOT, entry.name);
-    if (existsSync14(dstDir)) {
+    if (existsSync15(dstDir)) {
       try {
         fs.rmSync(dstDir, { recursive: true, force: true });
         removed.push(entry.name);
@@ -13090,7 +13160,7 @@ function entriesEqual(a, b) {
   return a.command === b.command && JSON.stringify(a.args ?? []) === JSON.stringify(b.args ?? []);
 }
 function readClaudeSettings() {
-  if (!existsSync14(CLAUDE_SETTINGS))
+  if (!existsSync15(CLAUDE_SETTINGS))
     return {};
   const text = readFileSync12(CLAUDE_SETTINGS, "utf-8").trim();
   if (!text)
@@ -13117,7 +13187,7 @@ function installAllowedTools() {
   return { added: toAdd, unchanged: CLAUDEMESH_TOOLS.length - toAdd.length };
 }
 function uninstallAllowedTools() {
-  if (!existsSync14(CLAUDE_SETTINGS))
+  if (!existsSync15(CLAUDE_SETTINGS))
     return 0;
   const settings = readClaudeSettings();
   const existing = settings.allowedTools ?? [];
@@ -13152,7 +13222,7 @@ function installHooks() {
   return { added, unchanged };
 }
 function uninstallHooks() {
-  if (!existsSync14(CLAUDE_SETTINGS))
+  if (!existsSync15(CLAUDE_SETTINGS))
     return 0;
   const settings = readClaudeSettings();
   const hooks2 = settings.hooks;
@@ -13202,7 +13272,7 @@ async function runInstall(args = []) {
     render.err("`bun` is not on PATH.", "Install Bun first: https://bun.com");
     process.exit(1);
   }
-  if (!existsSync14(entry)) {
+  if (!existsSync15(entry)) {
     render.err(`MCP entry not found at ${entry}`);
     process.exit(1);
   }
@@ -13473,7 +13543,7 @@ var exports_uninstall = {};
 __export(exports_uninstall, {
   uninstall: () => uninstall
 });
-import { readFileSync as readFileSync13, writeFileSync as writeFileSync13, existsSync as existsSync15, rmSync as rmSync2, readdirSync as readdirSync2 } from "node:fs";
+import { readFileSync as readFileSync13, writeFileSync as writeFileSync13, existsSync as existsSync16, rmSync as rmSync2, readdirSync as readdirSync2 } from "node:fs";
 import { join as join11, dirname as dirname7 } from "node:path";
 import { homedir as homedir9 } from "node:os";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
@@ -13481,11 +13551,11 @@ function bundledSkillsDir() {
   const here = fileURLToPath2(import.meta.url);
   const pkgRoot = join11(dirname7(here), "..", "..");
   const skillsDir = join11(pkgRoot, "skills");
-  return existsSync15(skillsDir) ? skillsDir : null;
+  return existsSync16(skillsDir) ? skillsDir : null;
 }
 async function uninstall() {
   let removed = 0;
-  if (existsSync15(PATHS.CLAUDE_JSON)) {
+  if (existsSync16(PATHS.CLAUDE_JSON)) {
     try {
       const raw = readFileSync13(PATHS.CLAUDE_JSON, "utf-8");
       const config = JSON.parse(raw);
@@ -13499,7 +13569,7 @@ async function uninstall() {
       }
     } catch {}
   }
-  if (existsSync15(PATHS.CLAUDE_SETTINGS)) {
+  if (existsSync16(PATHS.CLAUDE_SETTINGS)) {
     try {
       const raw = readFileSync13(PATHS.CLAUDE_SETTINGS, "utf-8");
       const config = JSON.parse(raw);
@@ -13538,7 +13608,7 @@ async function uninstall() {
         if (!entry.isDirectory())
           continue;
         const dst = join11(CLAUDE_SKILLS_ROOT2, entry.name);
-        if (existsSync15(dst)) {
+        if (existsSync16(dst)) {
           try {
             rmSync2(dst, { recursive: true, force: true });
             removedSkills.push(entry.name);
@@ -13570,7 +13640,7 @@ var exports_doctor = {};
 __export(exports_doctor, {
   runDoctor: () => runDoctor
 });
-import { existsSync as existsSync16, readFileSync as readFileSync14, statSync as statSync3 } from "node:fs";
+import { existsSync as existsSync17, readFileSync as readFileSync14, statSync as statSync3 } from "node:fs";
 import { homedir as homedir10, platform as platform6 } from "node:os";
 import { join as join12 } from "node:path";
 import { spawnSync as spawnSync4 } from "node:child_process";
@@ -13597,7 +13667,7 @@ function checkClaudeOnPath() {
 }
 function checkMcpRegistered() {
   const claudeConfig = join12(homedir10(), ".claude.json");
-  if (!existsSync16(claudeConfig)) {
+  if (!existsSync17(claudeConfig)) {
     return {
       name: "claudemesh MCP registered in ~/.claude.json",
       pass: false,
@@ -13623,7 +13693,7 @@ function checkMcpRegistered() {
 }
 function checkHooksRegistered() {
   const settings = join12(homedir10(), ".claude", "settings.json");
-  if (!existsSync16(settings)) {
+  if (!existsSync17(settings)) {
     return {
       name: "Status hooks registered in ~/.claude/settings.json",
       pass: false,
@@ -13648,7 +13718,7 @@ function checkHooksRegistered() {
 }
 function checkConfigFile() {
   const path2 = getConfigPath();
-  if (!existsSync16(path2)) {
+  if (!existsSync17(path2)) {
     return {
       name: "~/.claudemesh/config.json exists and parses",
       pass: true,
@@ -13831,7 +13901,7 @@ var exports_status = {};
 __export(exports_status, {
   runStatus: () => runStatus2
 });
-import { statSync as statSync4, existsSync as existsSync17 } from "node:fs";
+import { statSync as statSync4, existsSync as existsSync18 } from "node:fs";
 import WebSocket3 from "ws";
 async function probeBroker(url, timeoutMs = 4000) {
   return new Promise((resolve2) => {
@@ -13861,7 +13931,7 @@ async function runStatus2() {
   render.section(`status (v${VERSION})`);
   const configPath = getConfigPath();
   let configPermsNote = "missing";
-  if (existsSync17(configPath)) {
+  if (existsSync18(configPath)) {
     const mode = (statSync4(configPath).mode & 511).toString(8).padStart(4, "0");
     configPermsNote = mode === "0600" ? `${mode}` : `${mode} — expected 0600`;
   }
@@ -14007,10 +14077,10 @@ var init_check_claude_binary = __esm(() => {
 });
 
 // src/services/health/check-mcp-registered.ts
-import { existsSync as existsSync18, readFileSync as readFileSync15 } from "node:fs";
+import { existsSync as existsSync19, readFileSync as readFileSync15 } from "node:fs";
 function checkMcpRegistered2() {
   try {
-    if (!existsSync18(PATHS.CLAUDE_JSON)) {
+    if (!existsSync19(PATHS.CLAUDE_JSON)) {
       return { name: "mcp-registered", ok: false, message: "~/.claude.json not found" };
     }
     const raw = readFileSync15(PATHS.CLAUDE_JSON, "utf-8");
@@ -14028,10 +14098,10 @@ var init_check_mcp_registered = __esm(() => {
 });
 
 // src/services/health/check-hooks-registered.ts
-import { existsSync as existsSync19, readFileSync as readFileSync16 } from "node:fs";
+import { existsSync as existsSync20, readFileSync as readFileSync16 } from "node:fs";
 function checkHooksRegistered2() {
   try {
-    if (!existsSync19(PATHS.CLAUDE_SETTINGS)) {
+    if (!existsSync20(PATHS.CLAUDE_SETTINGS)) {
       return { name: "hooks-registered", ok: false, message: "~/.claude/settings.json not found" };
     }
     const raw = readFileSync16(PATHS.CLAUDE_SETTINGS, "utf-8");
@@ -14049,10 +14119,10 @@ var init_check_hooks_registered = __esm(() => {
 });
 
 // src/services/health/check-config-perms.ts
-import { existsSync as existsSync20, statSync as statSync5 } from "node:fs";
+import { existsSync as existsSync21, statSync as statSync5 } from "node:fs";
 function checkConfigPerms() {
   const configFile = PATHS.CONFIG_FILE;
-  if (!existsSync20(configFile)) {
+  if (!existsSync21(configFile)) {
     return { name: "config-perms", ok: true, message: "No config file yet (first run)" };
   }
   try {
@@ -14070,9 +14140,9 @@ var init_check_config_perms = __esm(() => {
 });
 
 // src/services/health/check-keypairs-valid.ts
-import { existsSync as existsSync21, readFileSync as readFileSync17 } from "node:fs";
+import { existsSync as existsSync22, readFileSync as readFileSync17 } from "node:fs";
 function checkKeypairsValid() {
-  if (!existsSync21(PATHS.CONFIG_FILE)) {
+  if (!existsSync22(PATHS.CONFIG_FILE)) {
     return { name: "keypairs-valid", ok: true, message: "No config (first run)" };
   }
   try {
@@ -14557,7 +14627,7 @@ __export(exports_url_handler, {
   runUrlHandler: () => runUrlHandler
 });
 import { platform as platform7, homedir as homedir11 } from "node:os";
-import { existsSync as existsSync22, mkdirSync as mkdirSync10, writeFileSync as writeFileSync14, rmSync as rmSync3, chmodSync as chmodSync5 } from "node:fs";
+import { existsSync as existsSync23, mkdirSync as mkdirSync10, writeFileSync as writeFileSync14, rmSync as rmSync3, chmodSync as chmodSync5 } from "node:fs";
 import { join as join13 } from "node:path";
 import { spawnSync as spawnSync5 } from "node:child_process";
 function resolveClaudemeshBin() {
@@ -14665,14 +14735,14 @@ function installWindows() {
 }
 function uninstallDarwin() {
   const appDir = join13(homedir11(), "Library", "Application Support", "claudemesh", "ClaudemeshHandler.app");
-  if (existsSync22(appDir))
+  if (existsSync23(appDir))
     rmSync3(appDir, { recursive: true, force: true });
   render.ok("removed claudemesh:// handler on macOS");
   return EXIT.SUCCESS;
 }
 function uninstallLinux() {
   const desktopPath = join13(homedir11(), ".local", "share", "applications", "claudemesh.desktop");
-  if (existsSync22(desktopPath))
+  if (existsSync23(desktopPath))
     rmSync3(desktopPath, { force: true });
   render.ok("removed claudemesh:// handler on Linux");
   return EXIT.SUCCESS;
@@ -14717,7 +14787,7 @@ var exports_status_line = {};
 __export(exports_status_line, {
   runStatusLine: () => runStatusLine
 });
-import { existsSync as existsSync23, readFileSync as readFileSync18 } from "node:fs";
+import { existsSync as existsSync24, readFileSync as readFileSync18 } from "node:fs";
 import { join as join14 } from "node:path";
 import { homedir as homedir12 } from "node:os";
 async function runStatusLine() {
@@ -14729,7 +14799,7 @@ async function runStatusLine() {
     }
     const cachePath = join14(homedir12(), ".claudemesh", "peer-cache.json");
     let cache = {};
-    if (existsSync23(cachePath)) {
+    if (existsSync24(cachePath)) {
       try {
         cache = JSON.parse(readFileSync18(cachePath, "utf-8"));
       } catch {}
@@ -14762,7 +14832,7 @@ __export(exports_backup, {
   runRestore: () => runRestore,
   runBackup: () => runBackup
 });
-import { readFileSync as readFileSync19, writeFileSync as writeFileSync15, existsSync as existsSync24 } from "node:fs";
+import { readFileSync as readFileSync19, writeFileSync as writeFileSync15, existsSync as existsSync25 } from "node:fs";
 import { createInterface as createInterface11 } from "node:readline";
 function readHidden(prompt5) {
   return new Promise((resolve2) => {
@@ -14804,7 +14874,7 @@ async function deriveKey(pass, salt, s) {
 }
 async function runBackup(outPath) {
   const configPath = getConfigPath();
-  if (!existsSync24(configPath)) {
+  if (!existsSync25(configPath)) {
     console.error("  No config found — nothing to back up. Join a mesh first.");
     return EXIT.NOT_FOUND;
   }
@@ -14838,7 +14908,7 @@ async function runRestore(inPath) {
     console.error("  Usage: claudemesh restore <backup-file>");
     return EXIT.INVALID_ARGS;
   }
-  if (!existsSync24(inPath)) {
+  if (!existsSync25(inPath)) {
     console.error(`  ✗ File not found: ${inPath}`);
     return EXIT.NOT_FOUND;
   }
@@ -14861,7 +14931,7 @@ async function runRestore(inPath) {
     return EXIT.INTERNAL_ERROR;
   }
   const configPath = getConfigPath();
-  if (existsSync24(configPath)) {
+  if (existsSync25(configPath)) {
     const backupOld = `${configPath}.before-restore.${Date.now()}`;
     writeFileSync15(backupOld, readFileSync19(configPath), { mode: 384 });
     console.log(`  ↻ Existing config saved to ${backupOld}`);
@@ -14886,7 +14956,7 @@ __export(exports_upgrade, {
   runUpgrade: () => runUpgrade
 });
 import { spawnSync as spawnSync6 } from "node:child_process";
-import { existsSync as existsSync25 } from "node:fs";
+import { existsSync as existsSync26 } from "node:fs";
 import { dirname as dirname8, join as join15, resolve as resolve2 } from "node:path";
 async function latestVersion() {
   try {
@@ -14901,14 +14971,14 @@ async function latestVersion() {
 }
 function findNpm() {
   const portable = join15(process.env.HOME ?? "", ".claudemesh", "node", "bin", "npm");
-  if (existsSync25(portable)) {
+  if (existsSync26(portable)) {
     return { npm: portable, prefix: join15(process.env.HOME ?? "", ".claudemesh") };
   }
   let cur = resolve2(process.argv[1] ?? ".");
   for (let i = 0;i < 6; i++) {
     cur = dirname8(cur);
     const candidate = join15(cur, "bin", "npm");
-    if (existsSync25(candidate))
+    if (existsSync26(candidate))
       return { npm: candidate };
   }
   return { npm: "npm" };
@@ -14970,7 +15040,7 @@ __export(exports_grants, {
   runBlock: () => runBlock,
   isAllowed: () => isAllowed
 });
-import { existsSync as existsSync26, mkdirSync as mkdirSync11, readFileSync as readFileSync20, writeFileSync as writeFileSync16 } from "node:fs";
+import { existsSync as existsSync27, mkdirSync as mkdirSync11, readFileSync as readFileSync20, writeFileSync as writeFileSync16 } from "node:fs";
 import { homedir as homedir13 } from "node:os";
 import { join as join16 } from "node:path";
 async function syncToBroker(meshSlug, grants) {
@@ -14990,7 +15060,7 @@ async function syncToBroker(meshSlug, grants) {
   }
 }
 function readGrants() {
-  if (!existsSync26(GRANT_FILE))
+  if (!existsSync27(GRANT_FILE))
     return {};
   try {
     return JSON.parse(readFileSync20(GRANT_FILE, "utf-8"));
@@ -15000,7 +15070,7 @@ function readGrants() {
 }
 function writeGrants(g) {
   const dir = join16(homedir13(), ".claudemesh");
-  if (!existsSync26(dir))
+  if (!existsSync27(dir))
     mkdirSync11(dir, { recursive: true });
   writeFileSync16(GRANT_FILE, JSON.stringify(g, null, 2), { mode: 384 });
 }
@@ -16879,7 +16949,7 @@ __export(exports_file, {
 });
 import { hostname as osHostname2 } from "node:os";
 import { resolve as resolvePath, basename, dirname as dirname9 } from "node:path";
-import { statSync as statSync7, existsSync as existsSync27, writeFileSync as writeFileSync17, mkdirSync as mkdirSync12 } from "node:fs";
+import { statSync as statSync7, existsSync as existsSync28, writeFileSync as writeFileSync17, mkdirSync as mkdirSync12 } from "node:fs";
 function emitJson2(data) {
   console.log(JSON.stringify(data, null, 2));
 }
@@ -16896,7 +16966,7 @@ async function runFileShare(filePath, opts) {
     return EXIT.INVALID_ARGS;
   }
   const absPath = resolvePath(filePath);
-  if (!existsSync27(absPath)) {
+  if (!existsSync28(absPath)) {
     render.err(`File not found: ${absPath}`);
     return EXIT.INVALID_ARGS;
   }
@@ -17586,7 +17656,7 @@ __export(exports_bridge, {
   runBridge: () => runBridge,
   bridgeConfigTemplate: () => bridgeConfigTemplate
 });
-import { readFileSync as readFileSync21, existsSync as existsSync28 } from "node:fs";
+import { readFileSync as readFileSync21, existsSync as existsSync29 } from "node:fs";
 function parseConfig(text) {
   const trimmed = text.trim();
   if (trimmed.startsWith("{"))
@@ -17630,7 +17700,7 @@ async function runBridge(configPath) {
     render.err("Usage: claudemesh bridge run <config.yaml>");
     return EXIT.INVALID_ARGS;
   }
-  if (!existsSync28(configPath)) {
+  if (!existsSync29(configPath)) {
     render.err(`config file not found: ${configPath}`);
     return EXIT.NOT_FOUND;
   }
@@ -18610,12 +18680,12 @@ import {
   ListResourcesRequestSchema,
   ReadResourceRequestSchema
 } from "@modelcontextprotocol/sdk/types.js";
-import { existsSync as existsSync29, appendFileSync as appendFileSync2 } from "node:fs";
+import { existsSync as existsSync30, appendFileSync as appendFileSync2 } from "node:fs";
 import { request as httpRequest2 } from "node:http";
 import { join as join17 } from "node:path";
 async function daemonReady() {
   for (let i = 0;i < DAEMON_BOOT_RETRIES; i++) {
-    if (existsSync29(DAEMON_PATHS.SOCK_FILE))
+    if (existsSync30(DAEMON_PATHS.SOCK_FILE))
       return true;
     await new Promise((r) => setTimeout(r, DAEMON_BOOT_RETRY_MS));
   }
@@ -21216,4 +21286,4 @@ main().catch((err) => {
   process.exit(EXIT.INTERNAL_ERROR);
 });
 
-//# debugId=CB6FEE3C98D7D19864756E2164756E21
+//# debugId=8D95F82FF933574E64756E2164756E21