codeam-cli 2.27.2 → 2.27.3

package/dist/index.js

@@ -306,12 +306,12 @@ var AGENT_REGISTRY = {
     displayName: "Gemini CLI",
     binaryName: "gemini",
     enabled: true,
-    // Gemini speaks ACP natively via `gemini --acp` — pairing flows
-    // through the ACP runtime, not a PTY parser. Auth is the user's
-    // existing `gemini auth login` (OAuth) or GEMINI_API_KEY env var,
-    // both managed by the gemini binary itself.
-    supportedAuthKinds: ["api_key"],
-    preferredAuthKind: "api_key"
+    // OAuth via `gemini auth login` (captured by `codeam link gemini`
+    // from ~/.gemini/oauth_creds.json) AND GEMINI_API_KEY are both
+    // accepted by the backend's GeminiProvisioningStrategy and propagated
+    // into codespace deploys.
+    supportedAuthKinds: ["oauth_token", "api_key"],
+    preferredAuthKind: "oauth_token"
   }
 };
 function getEnabledAgents() {
@@ -498,7 +498,7 @@ var import_qrcode_terminal = __toESM(require("qrcode-terminal"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.27.2",
+  version: "2.27.3",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -1160,8 +1160,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? (0, import_pat
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path44) {
-  return path44.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path45) {
+  return path45.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 
 // ../../node_modules/@posthog/core/dist/featureFlagUtils.mjs
@@ -3641,9 +3641,9 @@ async function addSourceContext(frames) {
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-function getContextLinesFromFile(path44, ranges, output) {
+function getContextLinesFromFile(path45, ranges, output) {
   return new Promise((resolve6) => {
-    const stream = (0, import_node_fs.createReadStream)(path44);
+    const stream = (0, import_node_fs.createReadStream)(path45);
     const lineReaded = (0, import_node_readline.createInterface)({
       input: stream
     });
@@ -3658,7 +3658,7 @@ function getContextLinesFromFile(path44, ranges, output) {
     let rangeStart = range[0];
     let rangeEnd = range[1];
     function onStreamError() {
-      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path44, 1);
+      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path45, 1);
       lineReaded.close();
       lineReaded.removeAllListeners();
       destroyStreamAndResolve();
@@ -3719,8 +3719,8 @@ function clearLineContext(frame) {
   delete frame.context_line;
   delete frame.post_context;
 }
-function shouldSkipContextLinesForFile(path44) {
-  return path44.startsWith("node:") || path44.endsWith(".min.js") || path44.endsWith(".min.cjs") || path44.endsWith(".min.mjs") || path44.startsWith("data:");
+function shouldSkipContextLinesForFile(path45) {
+  return path45.startsWith("node:") || path45.endsWith(".min.js") || path45.endsWith(".min.cjs") || path45.endsWith(".min.mjs") || path45.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame) {
   if (void 0 !== frame.lineno && frame.lineno > MAX_CONTEXTLINES_LINENO) return true;
@@ -5874,7 +5874,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.27.2" : "0.0.0-dev",
+    cliVersion: true ? "2.27.3" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -7216,10 +7216,10 @@ function buildForPlatform(platform2) {
 var import_node_crypto4 = require("crypto");
 
 // src/agents/claude/resolver.ts
-function buildClaudeLaunch(extraArgs = [], os27 = createOsStrategy()) {
-  const found = os27.findInPath("claude") ?? os27.findInPath("claude-code");
+function buildClaudeLaunch(extraArgs = [], os28 = createOsStrategy()) {
+  const found = os28.findInPath("claude") ?? os28.findInPath("claude-code");
   if (!found) return null;
-  return os27.buildLaunch(found, extraArgs);
+  return os28.buildLaunch(found, extraArgs);
 }
 
 // src/agents/claude/installer.ts
@@ -9946,13 +9946,13 @@ function detectStartupBanner(lines) {
   while (artStart > 0 && BANNER_ART_RE.test(lines[artStart - 1])) artStart--;
   if (metaIdx - artStart < 2) return null;
   const pathLine = (lines[metaIdx + 1] ?? "").trim();
-  const path44 = pathLine && !BANNER_ART_RE.test(pathLine) ? pathLine : "";
+  const path45 = pathLine && !BANNER_ART_RE.test(pathLine) ? pathLine : "";
   return {
     title: "",
     subtitle: lines[metaIdx].trim(),
-    path: path44,
+    path: path45,
     startIdx: artStart,
-    endIdx: metaIdx + (path44 ? 1 : 0)
+    endIdx: metaIdx + (path45 ? 1 : 0)
   };
 }
 
@@ -9962,8 +9962,8 @@ var ClaudeRuntimeStrategy = class {
   meta = getAgent("claude");
   mode = "interactive";
   os;
-  constructor(os27) {
-    this.os = os27;
+  constructor(os28) {
+    this.os = os28;
   }
   /**
    * Claude Code's react-ink TUI enables bracketed-paste mode at
@@ -10971,8 +10971,8 @@ function codexCredentialLocator() {
 function codexLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os27 = createOsStrategy();
-      return os27.findInPath("codex") !== null;
+      const os28 = createOsStrategy();
+      return os28.findInPath("codex") !== null;
     },
     launch() {
       return (0, import_node_child_process3.spawn)("codex", ["login"], { stdio: "inherit" });
@@ -10995,8 +10995,8 @@ var CodexRuntimeStrategy = class {
   meta = getAgent("codex");
   mode = "interactive";
   os;
-  constructor(os27) {
-    this.os = os27;
+  constructor(os28) {
+    this.os = os28;
   }
   async prepareLaunch() {
     let binary = this.os.findInPath("codex");
@@ -11102,12 +11102,12 @@ var CodexRuntimeStrategy = class {
     });
   }
 };
-function resolveNpm(os27) {
-  return os27.id === "win32" ? "npm.cmd" : "npm";
+function resolveNpm(os28) {
+  return os28.id === "win32" ? "npm.cmd" : "npm";
 }
-async function installCodexViaNpm(os27) {
+async function installCodexViaNpm(os28) {
   return new Promise((resolve6, reject) => {
-    const proc = (0, import_node_child_process4.spawn)(resolveNpm(os27), ["install", "-g", "@openai/codex"], {
+    const proc = (0, import_node_child_process4.spawn)(resolveNpm(os28), ["install", "-g", "@openai/codex"], {
       stdio: "inherit"
     });
     proc.on("close", (code) => {
@@ -11124,16 +11124,16 @@ async function installCodexViaNpm(os27) {
     });
   });
 }
-function augmentNpmGlobalBin(os27) {
+function augmentNpmGlobalBin(os28) {
   try {
-    const result = (0, import_node_child_process4.spawnSync)(resolveNpm(os27), ["prefix", "-g"], {
+    const result = (0, import_node_child_process4.spawnSync)(resolveNpm(os28), ["prefix", "-g"], {
       stdio: ["ignore", "pipe", "ignore"]
     });
     if (result.status !== 0) return;
     const prefix = result.stdout.toString().trim();
     if (!prefix) return;
-    const binDir = os27.id === "win32" ? prefix : path17.join(prefix, "bin");
-    os27.augmentPath([binDir]);
+    const binDir = os28.id === "win32" ? prefix : path17.join(prefix, "bin");
+    os28.augmentPath([binDir]);
   } catch {
   }
 }
@@ -11217,9 +11217,9 @@ var import_node_child_process7 = require("child_process");
 // src/agents/coderabbit/installer.ts
 var import_node_child_process5 = require("child_process");
 var INSTALL_URL = "https://cli.coderabbit.ai/install.sh";
-async function ensureCoderabbitInstalled(os27) {
-  if (os27.findInPath("coderabbit")) return true;
-  if (os27.id === "win32") {
+async function ensureCoderabbitInstalled(os28) {
+  if (os28.findInPath("coderabbit")) return true;
+  if (os28.id === "win32") {
     console.error(
       "\n  \u2717 CodeRabbit on Windows requires WSL.\n    Install the CLI inside your WSL distribution\n    (curl -fsSL https://cli.coderabbit.ai/install.sh | sh)\n    then re-run `codeam link coderabbit` from WSL.\n"
     );
@@ -11234,8 +11234,8 @@ async function ensureCoderabbitInstalled(os27) {
     proc.on("error", () => resolve6(false));
   });
   if (!ok) return false;
-  os27.augmentPath([`${os27.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
-  return os27.findInPath("coderabbit") !== null;
+  os28.augmentPath([`${os28.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
+  return os28.findInPath("coderabbit") !== null;
 }
 
 // src/agents/coderabbit/link.ts
@@ -11262,10 +11262,10 @@ function coderabbitCredentialLocator() {
     extract: extractLocalCoderabbitToken
   };
 }
-function coderabbitLoginLauncher(os27) {
+function coderabbitLoginLauncher(os28) {
   return {
     async ensureInstalled() {
-      return ensureCoderabbitInstalled(os27);
+      return ensureCoderabbitInstalled(os28);
     },
     launch() {
       return (0, import_node_child_process6.spawn)("coderabbit", ["login"], { stdio: "inherit" });
@@ -11288,11 +11288,11 @@ function parseReview(stdout) {
   for (const line of lines) {
     const m = line.match(HUNK_LINE_RE);
     if (!m) continue;
-    const [, path44, lineNo, sevToken, message] = m;
-    if (!path44 || !lineNo || !message) continue;
+    const [, path45, lineNo, sevToken, message] = m;
+    if (!path45 || !lineNo || !message) continue;
     const cleanedMessage = message.trim().replace(/^[*-]\s+/, "");
     hunks.push({
-      path: path44.trim(),
+      path: path45.trim(),
       line: Number(lineNo),
       severity: sevToken ? SEVERITY_MAP[sevToken.toLowerCase()] : void 0,
       message: cleanedMessage
@@ -11311,8 +11311,8 @@ var CoderabbitRuntimeStrategy = class {
   meta = getAgent("coderabbit");
   mode = "batch";
   os;
-  constructor(os27) {
-    this.os = os27;
+  constructor(os28) {
+    this.os = os28;
   }
   getDefaultArgs() {
     return ["review"];
@@ -11427,10 +11427,10 @@ function cursorCredentialLocator() {
     extract: extractLocalCursorToken
   };
 }
-function cursorLoginLauncher(os27) {
+function cursorLoginLauncher(os28) {
   return {
     async ensureInstalled() {
-      if (os27.findInPath("cursor-agent")) return true;
+      if (os28.findInPath("cursor-agent")) return true;
       console.error(
         "\n  \u2717 cursor-agent binary not on PATH.\n    Install Cursor (https://cursor.com/) and ensure the CLI\n    plugin is enabled, then re-run `codeam link cursor`.\n"
       );
@@ -11492,8 +11492,8 @@ var CursorRuntimeStrategy = class {
   meta = getAgent("cursor");
   mode = "interactive";
   os;
-  constructor(os27) {
-    this.os = os27;
+  constructor(os28) {
+    this.os = os28;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("cursor-agent");
@@ -11613,10 +11613,10 @@ function aiderCredentialLocator() {
     extract: extractLocalAiderToken
   };
 }
-function aiderLoginLauncher(os27) {
+function aiderLoginLauncher(os28) {
   return {
     async ensureInstalled() {
-      if (os27.findInPath("aider")) return true;
+      if (os28.findInPath("aider")) return true;
       console.error(
         "\n  \u2717 aider binary not on PATH.\n    Install Aider:\n      pip install aider-chat\n    then re-run `codeam link aider`.\n"
       );
@@ -11626,7 +11626,7 @@ function aiderLoginLauncher(os27) {
       console.error(
         "\n  Aider has no interactive login flow.\n    Set ANTHROPIC_API_KEY or OPENAI_API_KEY in your shell,\n    or re-run `codeam link aider --api-key=<your-key>`.\n"
       );
-      return (0, import_node_child_process9.spawn)(os27.id === "win32" ? "cmd.exe" : "sh", os27.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
+      return (0, import_node_child_process9.spawn)(os28.id === "win32" ? "cmd.exe" : "sh", os28.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
         stdio: "ignore"
       });
     }
@@ -11698,8 +11698,8 @@ var AiderRuntimeStrategy = class {
   meta = getAgent("aider");
   mode = "interactive";
   os;
-  constructor(os27) {
-    this.os = os27;
+  constructor(os28) {
+    this.os = os28;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("aider");
@@ -11766,19 +11766,184 @@ var AiderRuntimeStrategy = class {
   }
 };
 
+// src/agents/gemini/link.ts
+var import_node_child_process10 = require("child_process");
+
+// src/agents/gemini/local-token.ts
+var fs20 = __toESM(require("fs"));
+var os21 = __toESM(require("os"));
+var path24 = __toESM(require("path"));
+function geminiCredentialsPath() {
+  return path24.join(os21.homedir(), ".gemini", "oauth_creds.json");
+}
+function geminiCredentialsPaths() {
+  return [geminiCredentialsPath()];
+}
+async function extractLocalGeminiToken() {
+  const file = geminiCredentialsPath();
+  if (!fs20.existsSync(file)) return null;
+  const credential = fs20.readFileSync(file, "utf8").trim();
+  if (credential.length === 0) return null;
+  return { method: "oauth", credential, source: "flat-file" };
+}
+function validateLocalGeminiToken(credential) {
+  let parsed;
+  try {
+    parsed = JSON.parse(credential);
+  } catch {
+    return { status: "unknown" };
+  }
+  if (typeof parsed.expiry_date !== "number") return { status: "unknown" };
+  const expiresAt = parsed.expiry_date;
+  if (Date.now() >= expiresAt) {
+    return {
+      status: "expired",
+      reason: "Gemini OAuth access token expired",
+      expiresAt
+    };
+  }
+  return { status: "valid", expiresAt };
+}
+
+// src/agents/gemini/link.ts
+function geminiCredentialLocator() {
+  return {
+    publicId: "gemini",
+    vendor: "Google",
+    hint: "~/.gemini/oauth_creds.json",
+    watchPaths: geminiCredentialsPaths,
+    extract: extractLocalGeminiToken,
+    validate: (token) => {
+      const result = validateLocalGeminiToken(token.credential);
+      return { status: result.status, reason: result.reason };
+    }
+  };
+}
+function geminiLoginLauncher() {
+  return {
+    async ensureInstalled() {
+      const os28 = createOsStrategy();
+      return os28.findInPath("gemini") !== null;
+    },
+    launch() {
+      return (0, import_node_child_process10.spawn)("gemini", ["auth", "login"], { stdio: "inherit" });
+    }
+  };
+}
+
+// src/agents/gemini/runtime.ts
+var GEMINI_PRO_CONTEXT_WINDOW = 1e6;
+var GEMINI_FLASH_CONTEXT_WINDOW = 1e6;
+var GEMINI_MODELS = [
+  {
+    id: "gemini-2.5-pro",
+    label: "Gemini 2.5 Pro",
+    contextWindow: GEMINI_PRO_CONTEXT_WINDOW
+  },
+  {
+    id: "gemini-2.5-flash",
+    label: "Gemini 2.5 Flash",
+    contextWindow: GEMINI_FLASH_CONTEXT_WINDOW
+  },
+  {
+    id: "gemini-2.5-flash-lite",
+    label: "Gemini 2.5 Flash-Lite",
+    contextWindow: GEMINI_FLASH_CONTEXT_WINDOW
+  }
+];
+var GeminiRuntimeStrategy = class {
+  id = "gemini";
+  meta = getAgent("gemini");
+  mode = "interactive";
+  os;
+  constructor(os28) {
+    this.os = os28;
+  }
+  async prepareLaunch() {
+    const binary = this.os.findInPath("gemini");
+    if (!binary) {
+      throw new Error(
+        "Gemini CLI is not on PATH. Install it with:\n    npm install -g @google/gemini-cli\n    Then run `codeam pair` again.\n\n  Tip: set CODEAM_ACP_ENABLED=1 before pairing to use the\n  ACP runtime \u2014 it gives mobile typed messages instead of\n  raw PTY output for Gemini."
+      );
+    }
+    return this.os.buildLaunch(binary);
+  }
+  // Gemini's REPL has no documented "resume previous session" flag,
+  // so a relaunch starts fresh. Returning an empty array is the
+  // documented "no-op resume" path (Cursor / Aider do the same).
+  resumeLaunchArgs(_sessionId, _opts) {
+    return [];
+  }
+  resolveHistoryDir(_cwd) {
+    return null;
+  }
+  parseHistoryFile(_filePath) {
+    return [];
+  }
+  getCurrentUsage(_historyDir) {
+    return null;
+  }
+  async fetchWeeklyUsage() {
+    return null;
+  }
+  async listModels() {
+    return GEMINI_MODELS;
+  }
+  /**
+   * Gemini's `/model <id>` swaps the active model inside the REPL —
+   * same shape as Claude / Codex / Cursor.
+   */
+  changeModelInstruction(modelId) {
+    return { type: "pty", ptyInput: `/model ${modelId}\r` };
+  }
+  /**
+   * `/compress` is Gemini's context-compression slash command (the
+   * closest analogue to Claude's `/compact`). No auto-mode equivalent.
+   */
+  summarizeInstruction(_mode) {
+    return { ptyInput: "/compress\r" };
+  }
+  /**
+   * Pass-through filter. Gemini's TUI chrome isn't worth
+   * hand-detecting — users who want clean output should use ACP
+   * (`CODEAM_ACP_ENABLED=1`) instead. Returning the input verbatim
+   * satisfies the contract's idempotency assertion and keeps mobile
+   * showing whatever the REPL prints.
+   */
+  filterTuiOutput(lines) {
+    return lines;
+  }
+  /**
+   * No interactive-selector detection — Gemini's REPL uses input
+   * lines, not arrow-key menus we'd need to detect. ACP surfaces
+   * permission requests as typed messages, which is the path we want
+   * users on anyway.
+   */
+  detectInteractivePrompt(_lines) {
+    return null;
+  }
+  credentialLocator() {
+    return geminiCredentialLocator();
+  }
+  loginLauncher() {
+    return geminiLoginLauncher();
+  }
+};
+
 // src/agents/registry.ts
 var runtimeBuilders = {
-  claude: (os27) => new ClaudeRuntimeStrategy(os27),
-  codex: (os27) => new CodexRuntimeStrategy(os27),
-  coderabbit: (os27) => new CoderabbitRuntimeStrategy(os27),
-  cursor: (os27) => new CursorRuntimeStrategy(os27),
-  aider: (os27) => new AiderRuntimeStrategy(os27)
+  claude: (os28) => new ClaudeRuntimeStrategy(os28),
+  codex: (os28) => new CodexRuntimeStrategy(os28),
+  coderabbit: (os28) => new CoderabbitRuntimeStrategy(os28),
+  cursor: (os28) => new CursorRuntimeStrategy(os28),
+  aider: (os28) => new AiderRuntimeStrategy(os28),
+  gemini: (os28) => new GeminiRuntimeStrategy(os28)
 };
 var deployBuilders = {
   claude: () => new ClaudeDeployStrategy(),
   codex: () => new CodexDeployStrategy()
 };
-function createAgentStrategy(agent, os27 = createOsStrategy()) {
+function createAgentStrategy(agent, os28 = createOsStrategy()) {
   if (!AGENT_REGISTRY[agent]?.enabled) {
     throw new Error(
       `Agent "${agent}" is not supported in this codeam-cli version. Upgrade with 'npm i -g codeam-cli@latest'.`
@@ -11788,10 +11953,10 @@ function createAgentStrategy(agent, os27 = createOsStrategy()) {
   if (!build) {
     throw new Error(`No runtime strategy registered for agent "${agent}"`);
   }
-  return build(os27);
+  return build(os28);
 }
-function createInteractiveAgentStrategy(agent, os27 = createOsStrategy()) {
-  const s = createAgentStrategy(agent, os27);
+function createInteractiveAgentStrategy(agent, os28 = createOsStrategy()) {
+  const s = createAgentStrategy(agent, os28);
   if (s.mode !== "interactive") {
     throw new Error(
       `Agent "${agent}" is a batch agent; use createAgentStrategy + .runOneShot for one-shot reviews.`
@@ -11812,19 +11977,19 @@ function createDeployStrategy(agent) {
 }
 
 // src/agents/acp/adapters.ts
-var path24 = __toESM(require("path"));
+var path25 = __toESM(require("path"));
 var require_ = require;
 function resolveBin(pkgName, binName) {
   try {
     const manifestPath = require_.resolve(`${pkgName}/package.json`);
     const manifest = require_(`${pkgName}/package.json`);
-    const pkgDir = path24.dirname(manifestPath);
+    const pkgDir = path25.dirname(manifestPath);
     const bin = manifest.bin;
     if (!bin) return null;
-    if (typeof bin === "string") return path24.resolve(pkgDir, bin);
+    if (typeof bin === "string") return path25.resolve(pkgDir, bin);
     const target = binName ?? Object.keys(bin)[0];
     if (!target || !bin[target]) return null;
-    return path24.resolve(pkgDir, bin[target]);
+    return path25.resolve(pkgDir, bin[target]);
   } catch {
     return null;
   }
@@ -11876,8 +12041,8 @@ function getAcpAdapter(agent) {
 var import_node_crypto6 = require("crypto");
 
 // src/agents/acp/client.ts
-var import_node_child_process10 = require("child_process");
-var fs20 = __toESM(require("fs/promises"));
+var import_node_child_process11 = require("child_process");
+var fs21 = __toESM(require("fs/promises"));
 var import_node_stream = require("stream");
 var import_sdk = require("@agentclientprotocol/sdk");
 var PROTOCOL_VERSION2 = 1;
@@ -11902,7 +12067,7 @@ var AcpClient = class {
   async start() {
     if (this.child) throw new Error("AcpClient already started");
     const { adapter, cwd } = this.opts;
-    const child = (0, import_node_child_process10.spawn)(adapter.command, adapter.args, {
+    const child = (0, import_node_child_process11.spawn)(adapter.command, adapter.args, {
       cwd,
       env: process.env,
       stdio: ["pipe", "pipe", "pipe"]
@@ -12006,11 +12171,11 @@ var AcpClient = class {
         return this.opts.onRequestPermission(params);
       },
       readTextFile: async (params) => {
-        const content = await fs20.readFile(params.path, "utf8");
+        const content = await fs21.readFile(params.path, "utf8");
         return applyLineRange(content, params.line ?? null, params.limit ?? null);
       },
       writeTextFile: async (params) => {
-        await fs20.writeFile(params.path, params.content, "utf8");
+        await fs21.writeFile(params.path, params.content, "utf8");
         return {};
       },
       // Terminal capability is declared `false` above so adapters
@@ -13255,9 +13420,9 @@ var OutputService = class _OutputService {
 };
 
 // src/services/history.service.ts
-var fs21 = __toESM(require("fs"));
-var path25 = __toESM(require("path"));
-var os21 = __toESM(require("os"));
+var fs22 = __toESM(require("fs"));
+var path26 = __toESM(require("path"));
+var os22 = __toESM(require("os"));
 var https5 = __toESM(require("https"));
 var http5 = __toESM(require("http"));
 var import_zod = require("zod");
@@ -13284,7 +13449,7 @@ function parseJsonl(filePath) {
   const messages = [];
   let raw;
   try {
-    raw = fs21.readFileSync(filePath, "utf8");
+    raw = fs22.readFileSync(filePath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       log.warn("history:parseJsonl", `read failed for ${filePath}`, err);
@@ -13419,7 +13584,7 @@ var HistoryService = class _HistoryService {
     return this._quotaPercent === null || Date.now() - this._quotaFetchedAt > ttlMs;
   }
   get projectDir() {
-    return this.runtime.resolveHistoryDir(this.cwd) ?? path25.join(os21.homedir(), ".claude", "projects", encodeCwd(this.cwd));
+    return this.runtime.resolveHistoryDir(this.cwd) ?? path26.join(os22.homedir(), ".claude", "projects", encodeCwd(this.cwd));
   }
   /** Set the current Claude conversation ID (extracted from /cost command or session start) */
   setCurrentConversationId(id) {
@@ -13431,7 +13596,7 @@ var HistoryService = class _HistoryService {
   /** Return the current message count in the active conversation. */
   getCurrentMessageCount() {
     if (!this.currentConversationId) return 0;
-    const filePath = path25.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+    const filePath = path26.join(this.projectDir, `${this.currentConversationId}.jsonl`);
     return parseJsonl(filePath).length;
   }
   /**
@@ -13442,7 +13607,7 @@ var HistoryService = class _HistoryService {
     const deadline = Date.now() + timeoutMs;
     while (Date.now() < deadline) {
       if (!this.currentConversationId) return null;
-      const filePath = path25.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+      const filePath = path26.join(this.projectDir, `${this.currentConversationId}.jsonl`);
       const messages = parseJsonl(filePath);
       if (messages.length > previousCount) {
         for (let i = messages.length - 1; i >= previousCount; i--) {
@@ -13468,16 +13633,16 @@ var HistoryService = class _HistoryService {
     const dir = this.projectDir;
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     try {
-      const files = fs21.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
+      const files = fs22.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
         try {
-          const stat3 = fs21.statSync(path25.join(dir, e.name));
+          const stat3 = fs22.statSync(path26.join(dir, e.name));
           return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
         } catch {
           return { name: e.name, mtime: 0, birthtime: 0 };
         }
       }).filter((f) => f.birthtime >= cutoff).sort((a, b) => b.mtime - a.mtime);
       if (files.length > 0) {
-        this.currentConversationId = path25.basename(files[0].name, ".jsonl");
+        this.currentConversationId = path26.basename(files[0].name, ".jsonl");
       }
     } catch {
     }
@@ -13511,13 +13676,13 @@ var HistoryService = class _HistoryService {
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     let entries;
     try {
-      entries = fs21.readdirSync(dir, { withFileTypes: true });
+      entries = fs22.readdirSync(dir, { withFileTypes: true });
     } catch {
       return null;
     }
     const files = entries.filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
       try {
-        const stat3 = fs21.statSync(path25.join(dir, e.name));
+        const stat3 = fs22.statSync(path26.join(dir, e.name));
         return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
       } catch {
         return { name: e.name, mtime: 0, birthtime: 0 };
@@ -13526,12 +13691,12 @@ var HistoryService = class _HistoryService {
     if (files.length === 0) return null;
     const targetFile = this.currentConversationId ? `${this.currentConversationId}.jsonl` : files[0].name;
     if (!files.some((f) => f.name === targetFile)) return null;
-    return this.extractUsageFromFile(path25.join(dir, targetFile));
+    return this.extractUsageFromFile(path26.join(dir, targetFile));
   }
   extractUsageFromFile(filePath) {
     let raw;
     try {
-      raw = fs21.readFileSync(filePath, "utf8");
+      raw = fs22.readFileSync(filePath, "utf8");
     } catch {
       return null;
     }
@@ -13576,9 +13741,9 @@ var HistoryService = class _HistoryService {
     let totalCost = 0;
     let files;
     try {
-      files = fs21.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
+      files = fs22.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
         try {
-          return fs21.statSync(path25.join(projectDir, f)).mtimeMs >= monthStartMs;
+          return fs22.statSync(path26.join(projectDir, f)).mtimeMs >= monthStartMs;
         } catch {
           return false;
         }
@@ -13589,7 +13754,7 @@ var HistoryService = class _HistoryService {
     for (const file of files) {
       let raw;
       try {
-        raw = fs21.readFileSync(path25.join(projectDir, file), "utf8");
+        raw = fs22.readFileSync(path26.join(projectDir, file), "utf8");
       } catch {
         continue;
       }
@@ -13653,7 +13818,7 @@ var HistoryService = class _HistoryService {
    * showing an empty conversation.
    */
   async loadConversation(sessionId) {
-    const filePath = path25.join(this.projectDir, `${sessionId}.jsonl`);
+    const filePath = path26.join(this.projectDir, `${sessionId}.jsonl`);
     const messages = parseJsonl(filePath);
     if (messages.length === 0) return;
     const totalBatches = Math.ceil(messages.length / CONVERSATION_BATCH_SIZE);
@@ -13707,7 +13872,7 @@ var HistoryService = class _HistoryService {
       if (!this.currentConversationId) return 0;
     }
     const sessionId = this.currentConversationId;
-    const filePath = path25.join(this.projectDir, `${sessionId}.jsonl`);
+    const filePath = path26.join(this.projectDir, `${sessionId}.jsonl`);
     const messages = parseJsonl(filePath);
     if (messages.length === 0) return 0;
     const marker = this.lastUploadedUuid.get(sessionId);
@@ -13738,9 +13903,9 @@ var HistoryService = class _HistoryService {
 
 // src/services/file-watcher.service.ts
 var import_child_process8 = require("child_process");
-var fs22 = __toESM(require("fs"));
-var os22 = __toESM(require("os"));
-var path26 = __toESM(require("path"));
+var fs23 = __toESM(require("fs"));
+var os23 = __toESM(require("os"));
+var path27 = __toESM(require("path"));
 
 // src/services/file-watcher/diff-parser.ts
 var HUNK_HEADER_RE = /^@@ -(\d+)(?:,\d+)? \+(\d+)(?:,\d+)? @@/;
@@ -13898,10 +14063,10 @@ var WINDOWS_LEGACY_JUNCTIONS = [
   /[\\/]Start Menu([\\/]|$)/i,
   /[\\/]Templates([\\/]|$)/i
 ];
-function isUnsafeWindowsWatchRoot(dir, homedir19) {
+function isUnsafeWindowsWatchRoot(dir, homedir20) {
   const norm = (p2) => p2.replace(/\//g, "\\").replace(/\\+$/, "").toLowerCase();
   const cwd = norm(dir);
-  const home = norm(homedir19);
+  const home = norm(homedir20);
   if (cwd === home) return true;
   if (/^[a-z]:$/.test(cwd)) return true;
   const sysRoots = [
@@ -13931,18 +14096,18 @@ var _findGitRootSeam = {
   resolve: _defaultFindGitRoot
 };
 function _defaultFindGitRoot(startDir) {
-  let dir = path26.resolve(startDir);
+  let dir = path27.resolve(startDir);
   const seen = /* @__PURE__ */ new Set();
   for (let i = 0; i < 256; i++) {
     if (seen.has(dir)) return null;
     seen.add(dir);
     try {
-      const gitPath = path26.join(dir, ".git");
-      const stat3 = fs22.statSync(gitPath, { throwIfNoEntry: false });
+      const gitPath = path27.join(dir, ".git");
+      const stat3 = fs23.statSync(gitPath, { throwIfNoEntry: false });
       if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
     } catch {
     }
-    const parent = path26.dirname(dir);
+    const parent = path27.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -13989,7 +14154,7 @@ var FileWatcherService = class {
       throw new Error("FileWatcherService has already been stopped \u2014 re-instantiate to restart.");
     }
     const isWin = process.platform === "win32";
-    if (isWin && isUnsafeWindowsWatchRoot(this.opts.workingDir, os22.homedir())) {
+    if (isWin && isUnsafeWindowsWatchRoot(this.opts.workingDir, os23.homedir())) {
       log.warn(
         "fileWatcher",
         `refusing to watch ${this.opts.workingDir} \u2014 looks like a Windows user-profile or system path. Run codeam from your project folder to enable file change emission.`
@@ -14176,7 +14341,7 @@ var FileWatcherService = class {
   }
   async emitForFile(absPath, changeType) {
     if (this.stopped) return;
-    const fileDir = path26.dirname(absPath);
+    const fileDir = path27.dirname(absPath);
     let gitRoot = this.gitRootByDir.get(fileDir);
     if (gitRoot === void 0) {
       gitRoot = findGitRoot(fileDir);
@@ -14190,10 +14355,10 @@ var FileWatcherService = class {
       return;
     }
     this.opts.onRepoDirty?.(gitRoot);
-    const relPathInRepo = path26.relative(gitRoot, absPath);
+    const relPathInRepo = path27.relative(gitRoot, absPath);
     if (!relPathInRepo || relPathInRepo.startsWith("..")) return;
-    const repoPath = path26.relative(this.opts.workingDir, gitRoot);
-    const repoName = path26.basename(gitRoot);
+    const repoPath = path27.relative(this.opts.workingDir, gitRoot);
+    const repoName = path27.basename(gitRoot);
     let diffText = "";
     let fileStatus = "modified";
     if (changeType === "unlink") {
@@ -14492,7 +14657,7 @@ var import_crypto2 = require("crypto");
 
 // src/services/turn-files/git-changeset.ts
 var import_child_process9 = require("child_process");
-var path27 = __toESM(require("path"));
+var path28 = __toESM(require("path"));
 async function collectRepoChangeset(opts) {
   const status2 = await runGit2(opts.repoRoot, ["status", "--porcelain=v1", "-z"]);
   if (status2 === null) return null;
@@ -14603,7 +14768,7 @@ function defaultRunGit(cwd, args2) {
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs35 = await import("fs/promises");
+  const fs36 = await import("fs/promises");
   const out2 = [];
   await walk(workingDir, 0);
   return out2;
@@ -14611,7 +14776,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (depth > maxDepth) return;
     let entries = [];
     try {
-      const dirents = await fs35.readdir(dir, { withFileTypes: true });
+      const dirents = await fs36.readdir(dir, { withFileTypes: true });
       entries = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -14622,8 +14787,8 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (hasGit) {
       out2.push({
         repoRoot: dir,
-        repoPath: path27.relative(workingDir, dir),
-        repoName: path27.basename(dir)
+        repoPath: path28.relative(workingDir, dir),
+        repoName: path28.basename(dir)
       });
       return;
     }
@@ -14631,15 +14796,15 @@ async function discoverRepos(workingDir, maxDepth = 4) {
       if (!entry.isDirectory) continue;
       if (entry.name === "node_modules") continue;
       if (entry.name === "dist" || entry.name === "build") continue;
-      await walk(path27.join(dir, entry.name), depth + 1);
+      await walk(path28.join(dir, entry.name), depth + 1);
     }
   }
 }
 
 // src/services/turn-files/files-outbox.ts
-var fs23 = __toESM(require("fs/promises"));
-var path28 = __toESM(require("path"));
-var import_os6 = require("os");
+var fs24 = __toESM(require("fs/promises"));
+var path29 = __toESM(require("path"));
+var import_os7 = require("os");
 var HOME_OUTBOX_DIR = ".codeam/outbox";
 var MAX_AGE_MS = 24 * 60 * 60 * 1e3;
 var BACKOFF_STEPS_MS = [
@@ -14671,16 +14836,16 @@ var FilesOutbox = class {
   backoffIndex = 0;
   stopped = false;
   constructor(opts) {
-    const base = opts.baseDir ?? path28.join(homeDir(), HOME_OUTBOX_DIR);
-    this.filePath = path28.join(base, `${opts.sessionId}.jsonl`);
+    const base = opts.baseDir ?? path29.join(homeDir(), HOME_OUTBOX_DIR);
+    this.filePath = path29.join(base, `${opts.sessionId}.jsonl`);
     this.post = opts.post;
     this.autoSchedule = opts.autoSchedule !== false;
   }
   /** Persist the entry to disk and trigger a flush. Returns once the
    *  line is durable on disk (not once the POST succeeds). */
   async enqueue(entry) {
-    await fs23.mkdir(path28.dirname(this.filePath), { recursive: true });
-    await fs23.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
+    await fs24.mkdir(path29.dirname(this.filePath), { recursive: true });
+    await fs24.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
     this.backoffIndex = 0;
     if (this.autoSchedule) this.scheduleFlush(0);
   }
@@ -14769,7 +14934,7 @@ var FilesOutbox = class {
   async readAll() {
     let raw = "";
     try {
-      raw = await fs23.readFile(this.filePath, "utf8");
+      raw = await fs24.readFile(this.filePath, "utf8");
     } catch {
       return [];
     }
@@ -14793,12 +14958,12 @@ var FilesOutbox = class {
   async rewrite(entries) {
     const tmpPath = `${this.filePath}.${process.pid}.tmp`;
     if (entries.length === 0) {
-      await fs23.unlink(this.filePath).catch(() => void 0);
+      await fs24.unlink(this.filePath).catch(() => void 0);
       return;
     }
     const payload = entries.map((e) => JSON.stringify(e)).join("\n") + "\n";
-    await fs23.writeFile(tmpPath, payload, "utf8");
-    await fs23.rename(tmpPath, this.filePath);
+    await fs24.writeFile(tmpPath, payload, "utf8");
+    await fs24.rename(tmpPath, this.filePath);
   }
 };
 function applyJitter(ms) {
@@ -14806,7 +14971,7 @@ function applyJitter(ms) {
   return Math.round(ms * factor);
 }
 function homeDir() {
-  return process.env.HOME ?? process.env.USERPROFILE ?? (0, import_os6.tmpdir)();
+  return process.env.HOME ?? process.env.USERPROFILE ?? (0, import_os7.tmpdir)();
 }
 
 // src/services/turn-files/turn-file-aggregator.ts
@@ -15421,9 +15586,9 @@ function buildKeepAlive(ctx) {
 }
 
 // src/commands/start/handlers.ts
-var fs31 = __toESM(require("fs"));
-var os24 = __toESM(require("os"));
-var path37 = __toESM(require("path"));
+var fs32 = __toESM(require("fs"));
+var os25 = __toESM(require("os"));
+var path38 = __toESM(require("path"));
 var import_crypto5 = require("crypto");
 var import_child_process15 = require("child_process");
 
@@ -15547,8 +15712,8 @@ function parsePayload2(schema, raw) {
 }
 
 // src/services/file-ops.service.ts
-var fs24 = __toESM(require("fs/promises"));
-var path29 = __toESM(require("path"));
+var fs25 = __toESM(require("fs/promises"));
+var path30 = __toESM(require("path"));
 var MAX_FILE_BYTES = 5 * 1024 * 1024;
 var MAX_WALK_DEPTH = 6;
 var MAX_VISITED_DIRS = 5e3;
@@ -15583,12 +15748,12 @@ var SUBDIR_IGNORE = /* @__PURE__ */ new Set([
   "__pycache__"
 ]);
 function isUnder(parent, candidate) {
-  const rel = path29.relative(parent, candidate);
-  return rel === "" || !rel.startsWith("..") && !path29.isAbsolute(rel);
+  const rel = path30.relative(parent, candidate);
+  return rel === "" || !rel.startsWith("..") && !path30.isAbsolute(rel);
 }
 async function isExistingFile(absPath) {
   try {
-    const stat3 = await fs24.stat(absPath);
+    const stat3 = await fs25.stat(absPath);
     return stat3.isFile();
   } catch {
     return false;
@@ -15601,13 +15766,13 @@ async function walkForSuffix(dir, needleVariants, depth, ctx) {
   ctx.visited++;
   let entries = [];
   try {
-    entries = await fs24.readdir(dir, { withFileTypes: true });
+    entries = await fs25.readdir(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const e of entries) {
     if (!e.isFile()) continue;
-    const full = path29.join(dir, e.name);
+    const full = path30.join(dir, e.name);
     if (needleVariants.some((needle) => full.endsWith(needle))) {
       ctx.matches.push(full);
       if (ctx.matches.length >= ctx.cap) return;
@@ -15617,21 +15782,21 @@ async function walkForSuffix(dir, needleVariants, depth, ctx) {
     if (!e.isDirectory()) continue;
     if (SUBDIR_IGNORE.has(e.name)) continue;
     if (e.name.startsWith(".") && SUBDIR_IGNORE.has(e.name)) continue;
-    await walkForSuffix(path29.join(dir, e.name), needleVariants, depth + 1, ctx);
+    await walkForSuffix(path30.join(dir, e.name), needleVariants, depth + 1, ctx);
     if (ctx.matches.length >= ctx.cap) return;
   }
 }
 async function findFile(rawPath) {
   const cwd = process.cwd();
-  if (path29.isAbsolute(rawPath)) {
-    const abs = path29.normalize(rawPath);
+  if (path30.isAbsolute(rawPath)) {
+    const abs = path30.normalize(rawPath);
     if (isUnder(cwd, abs) && await isExistingFile(abs)) return abs;
   }
-  const direct = path29.resolve(cwd, rawPath);
+  const direct = path30.resolve(cwd, rawPath);
   if (isUnder(cwd, direct) && await isExistingFile(direct)) return direct;
-  const normalized = path29.normalize(rawPath).replace(/^[./\\]+/, "");
+  const normalized = path30.normalize(rawPath).replace(/^[./\\]+/, "");
   const needles = [
-    `${path29.sep}${normalized}`,
+    `${path30.sep}${normalized}`,
     `/${normalized}`
   ].filter((v, i, a) => a.indexOf(v) === i);
   const ctx = { visited: 0, matches: [], cap: 16 };
@@ -15645,7 +15810,7 @@ async function findWriteTarget(rawPath) {
   const found = await findFile(rawPath);
   if (found) return found;
   const cwd = process.cwd();
-  const fallback = path29.isAbsolute(rawPath) ? path29.normalize(rawPath) : path29.resolve(cwd, rawPath);
+  const fallback = path30.isAbsolute(rawPath) ? path30.normalize(rawPath) : path30.resolve(cwd, rawPath);
   if (!isUnder(cwd, fallback)) return null;
   return fallback;
 }
@@ -15662,11 +15827,11 @@ async function readProjectFile(rawPath) {
     if (!abs) {
       return { error: `File not found in the project tree: ${rawPath}` };
     }
-    const stat3 = await fs24.stat(abs);
+    const stat3 = await fs25.stat(abs);
     if (stat3.size > MAX_FILE_BYTES) {
       return { error: `File too large (${(stat3.size / 1024 / 1024).toFixed(1)} MB > ${MAX_FILE_BYTES / 1024 / 1024} MB).` };
     }
-    const buf = await fs24.readFile(abs);
+    const buf = await fs25.readFile(abs);
     if (looksBinary(buf)) {
       return { error: "Binary file \u2014 refusing to open in a code editor." };
     }
@@ -15685,8 +15850,8 @@ async function writeProjectFile(rawPath, content) {
     if (Buffer.byteLength(content, "utf-8") > MAX_FILE_BYTES) {
       return { error: "Content too large." };
     }
-    await fs24.mkdir(path29.dirname(abs), { recursive: true });
-    await fs24.writeFile(abs, content, "utf-8");
+    await fs25.mkdir(path30.dirname(abs), { recursive: true });
+    await fs25.writeFile(abs, content, "utf-8");
     return { ok: true };
   } catch (e) {
     const msg = e instanceof Error ? e.message : "Write failed";
@@ -15697,8 +15862,8 @@ async function writeProjectFile(rawPath, content) {
 // src/services/project-ops.service.ts
 var import_child_process11 = require("child_process");
 var import_util2 = require("util");
-var fs25 = __toESM(require("fs/promises"));
-var path30 = __toESM(require("path"));
+var fs26 = __toESM(require("fs/promises"));
+var path31 = __toESM(require("path"));
 var execFileP3 = (0, import_util2.promisify)(import_child_process11.execFile);
 var PROJECT_IGNORE = /* @__PURE__ */ new Set([
   "node_modules",
@@ -15746,7 +15911,7 @@ async function listProjectFiles(opts = {}) {
     }
     let entries = [];
     try {
-      entries = await fs25.readdir(dir, { withFileTypes: true });
+      entries = await fs26.readdir(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -15756,18 +15921,18 @@ async function listProjectFiles(opts = {}) {
         return;
       }
       if (PROJECT_IGNORE.has(e.name)) continue;
-      const full = path30.join(dir, e.name);
+      const full = path31.join(dir, e.name);
       if (e.isDirectory()) {
         if (depth >= 12) continue;
         await walk(full, depth + 1);
       } else if (e.isFile()) {
-        const rel = path30.relative(root, full);
+        const rel = path31.relative(root, full);
         if (q2 && !rel.toLowerCase().includes(q2) && !e.name.toLowerCase().includes(q2)) {
           continue;
         }
         let size = 0;
         try {
-          const st3 = await fs25.stat(full);
+          const st3 = await fs26.stat(full);
           size = st3.size;
         } catch {
         }
@@ -15869,8 +16034,8 @@ async function gitStatus(cwd) {
   let hasMergeInProgress = false;
   try {
     const gitDir = (await git(["rev-parse", "--git-dir"], root)).stdout.trim();
-    const mergeHead = path30.isAbsolute(gitDir) ? path30.join(gitDir, "MERGE_HEAD") : path30.join(root, gitDir, "MERGE_HEAD");
-    await fs25.access(mergeHead);
+    const mergeHead = path31.isAbsolute(gitDir) ? path31.join(gitDir, "MERGE_HEAD") : path31.join(root, gitDir, "MERGE_HEAD");
+    await fs26.access(mergeHead);
     hasMergeInProgress = true;
   } catch {
   }
@@ -16016,7 +16181,7 @@ async function jsSearchFiles(opts, cwd, cap) {
     }
     let content = "";
     try {
-      content = await fs25.readFile(path30.join(cwd, f.path), "utf8");
+      content = await fs26.readFile(path31.join(cwd, f.path), "utf8");
     } catch {
       continue;
     }
@@ -16297,14 +16462,14 @@ function closeAllTerminals() {
 
 // src/services/apply-file-review.service.ts
 var import_child_process13 = require("child_process");
-var fs26 = __toESM(require("fs"));
-var path32 = __toESM(require("path"));
+var fs27 = __toESM(require("fs"));
+var path33 = __toESM(require("path"));
 async function applyFileReview(workingDir, filePath, action) {
-  if (filePath.includes("..") || path32.isAbsolute(filePath)) {
+  if (filePath.includes("..") || path33.isAbsolute(filePath)) {
     return { ok: false, action, filePath, error: "invalid file path" };
   }
-  const absFile = path32.resolve(workingDir, filePath);
-  const repoRoot = findGitRoot2(path32.dirname(absFile));
+  const absFile = path33.resolve(workingDir, filePath);
+  const repoRoot = findGitRoot2(path33.dirname(absFile));
   if (!repoRoot) {
     return {
       ok: false,
@@ -16313,7 +16478,7 @@ async function applyFileReview(workingDir, filePath, action) {
       error: `no enclosing git repo for ${filePath}`
     };
   }
-  const relInRepo = path32.relative(repoRoot, absFile);
+  const relInRepo = path33.relative(repoRoot, absFile);
   if (!relInRepo || relInRepo.startsWith("..")) {
     return { ok: false, action, filePath, error: "path escapes repo root" };
   }
@@ -16362,17 +16527,17 @@ function runGit3(cwd, args2) {
   });
 }
 function findGitRoot2(startDir) {
-  let dir = path32.resolve(startDir);
+  let dir = path33.resolve(startDir);
   const seen = /* @__PURE__ */ new Set();
   for (let i = 0; i < 256; i++) {
     if (seen.has(dir)) return null;
     seen.add(dir);
     try {
-      const stat3 = fs26.statSync(path32.join(dir, ".git"), { throwIfNoEntry: false });
+      const stat3 = fs27.statSync(path33.join(dir, ".git"), { throwIfNoEntry: false });
       if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
     } catch {
     }
-    const parent = path32.dirname(dir);
+    const parent = path33.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -16381,8 +16546,8 @@ function findGitRoot2(startDir) {
 
 // src/commands/link.ts
 var import_node_crypto7 = require("crypto");
-var fs27 = __toESM(require("fs"));
-var path33 = __toESM(require("path"));
+var fs28 = __toESM(require("fs"));
+var path34 = __toESM(require("path"));
 var import_chokidar = __toESM(require("chokidar"));
 var import_picocolors2 = __toESM(require("picocolors"));
 
@@ -16442,7 +16607,7 @@ function parseLinkArgs(args2) {
   if (apiKeyFileArg) {
     const filePath = apiKeyFileArg.slice("--api-key-file=".length);
     try {
-      apiKey = fs27.readFileSync(path33.resolve(filePath), "utf8").trim();
+      apiKey = fs28.readFileSync(path34.resolve(filePath), "utf8").trim();
     } catch (err) {
       throw new Error(`Could not read --api-key-file ${filePath}: ${err.message}`);
     }
@@ -16536,7 +16701,7 @@ async function link(args2 = []) {
     return;
   }
   if (parsed.tokenFile) {
-    const credential = fs27.readFileSync(path33.resolve(parsed.tokenFile), "utf8").trim();
+    const credential = fs28.readFileSync(path34.resolve(parsed.tokenFile), "utf8").trim();
     if (!credential) {
       showError(`--token-file ${parsed.tokenFile} is empty.`);
       process.exit(1);
@@ -16755,11 +16920,11 @@ async function linkDryRunPreflight(ctx) {
 var import_promises = require("dns/promises");
 var import_fs = require("fs");
 var import_promises2 = __toESM(require("fs/promises"));
-var import_os7 = __toESM(require("os"));
+var import_os8 = __toESM(require("os"));
 var import_path4 = __toESM(require("path"));
 var import_promises3 = require("stream/promises");
 var import_which = __toESM(require("which"));
-var CACHED_BINARY = import_path4.default.join(import_os7.default.homedir(), ".codeam", "bin", "cloudflared");
+var CACHED_BINARY = import_path4.default.join(import_os8.default.homedir(), ".codeam", "bin", "cloudflared");
 async function waitForCloudflaredReady(url, timeoutMs = 6e4) {
   const hostname3 = new URL(url).hostname;
   const resolver = new import_promises.Resolver();
@@ -17046,7 +17211,7 @@ var pendingAttachmentFiles = /* @__PURE__ */ new Set();
 function cleanupAttachmentTempFiles() {
   for (const p2 of pendingAttachmentFiles) {
     try {
-      fs31.unlinkSync(p2);
+      fs32.unlinkSync(p2);
     } catch {
     }
   }
@@ -17055,8 +17220,8 @@ function cleanupAttachmentTempFiles() {
 function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
-    const tmpPath = path37.join(os24.tmpdir(), `codeam-${(0, import_crypto5.randomUUID)()}-${safeName}`);
-    fs31.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
+    const tmpPath = path38.join(os25.tmpdir(), `codeam-${(0, import_crypto5.randomUUID)()}-${safeName}`);
+    fs32.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     pendingAttachmentFiles.add(tmpPath);
     return tmpPath;
   });
@@ -17076,7 +17241,7 @@ var startTask = (ctx, _cmd, parsed) => {
     setTimeout(() => {
       for (const p2 of paths) {
         try {
-          fs31.unlinkSync(p2);
+          fs32.unlinkSync(p2);
         } catch {
         }
         pendingAttachmentFiles.delete(p2);
@@ -18404,8 +18569,8 @@ async function autoLinkAfterPair(opts) {
 }
 
 // src/commands/pair-auto.ts
-var fs32 = __toESM(require("fs"));
-var os25 = __toESM(require("os"));
+var fs33 = __toESM(require("fs"));
+var os26 = __toESM(require("os"));
 var import_crypto7 = require("crypto");
 
 // src/commands/start-infra-only.ts
@@ -18573,12 +18738,12 @@ function readTokenFromArgs(args2) {
   }
   const fileFlag = args2.find((a) => a.startsWith("--token-file="));
   if (fileFlag) {
-    const path44 = fileFlag.slice("--token-file=".length);
+    const path45 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs32.readFileSync(path44, "utf8").trim();
-      if (content.length === 0) fail(`--token-file ${path44} is empty`);
+      const content = fs33.readFileSync(path45, "utf8").trim();
+      if (content.length === 0) fail(`--token-file ${path45} is empty`);
       try {
-        fs32.unlinkSync(path44);
+        fs33.unlinkSync(path45);
       } catch {
       }
       return content;
@@ -18604,7 +18769,7 @@ async function claimOnce(token, pluginId) {
     pluginId,
     ideName: "codeam-cli (codespace)",
     ideVersion: process.env.npm_package_version ?? "unknown",
-    hostname: os25.hostname(),
+    hostname: os26.hostname(),
     codespaceName: process.env.CODESPACE_NAME ?? "",
     // Current git branch of the codespace's working directory, so the
     // backend can populate `PairedSession.branch` for the codespace pair.
@@ -18844,7 +19009,7 @@ var import_picocolors10 = __toESM(require("picocolors"));
 var import_child_process16 = require("child_process");
 var import_util4 = require("util");
 var import_picocolors8 = __toESM(require("picocolors"));
-var path38 = __toESM(require("path"));
+var path39 = __toESM(require("path"));
 var execFileP5 = (0, import_util4.promisify)(import_child_process16.execFile);
 var MAX_BUFFER = 8 * 1024 * 1024;
 function resetStdinForChild() {
@@ -19333,7 +19498,7 @@ var GitHubCodespacesProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path38.posix.dirname(remotePath);
+    const remoteDir = path39.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote(remoteDir)}`,
       `cat > ${shellQuote(remotePath)}`
@@ -19403,7 +19568,7 @@ function shellQuote(s) {
 // src/services/providers/gitpod.ts
 var import_child_process17 = require("child_process");
 var import_util5 = require("util");
-var path39 = __toESM(require("path"));
+var path40 = __toESM(require("path"));
 var import_picocolors9 = __toESM(require("picocolors"));
 var execFileP6 = (0, import_util5.promisify)(import_child_process17.execFile);
 var MAX_BUFFER2 = 8 * 1024 * 1024;
@@ -19643,7 +19808,7 @@ var GitpodProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path39.posix.dirname(remotePath);
+    const remoteDir = path40.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote2(remoteDir)}`,
       `cat > ${shellQuote2(remotePath)}`
@@ -19679,7 +19844,7 @@ function shellQuote2(s) {
 // src/services/providers/gitlab-workspaces.ts
 var import_child_process18 = require("child_process");
 var import_util6 = require("util");
-var path40 = __toESM(require("path"));
+var path41 = __toESM(require("path"));
 var execFileP7 = (0, import_util6.promisify)(import_child_process18.execFile);
 var MAX_BUFFER3 = 8 * 1024 * 1024;
 var GITLAB_API_BASE = process.env.CODEAM_GITLAB_API_URL ?? "https://gitlab.com/api/v4";
@@ -19939,7 +20104,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
-    const remoteDir = path40.posix.dirname(remotePath);
+    const remoteDir = path41.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote3(remoteDir)}`, `cat > ${shellQuote3(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote3(remotePath)}`);
@@ -20007,7 +20172,7 @@ function shellQuote3(s) {
 // src/services/providers/railway.ts
 var import_child_process19 = require("child_process");
 var import_util7 = require("util");
-var path41 = __toESM(require("path"));
+var path42 = __toESM(require("path"));
 var execFileP8 = (0, import_util7.promisify)(import_child_process19.execFile);
 var MAX_BUFFER4 = 8 * 1024 * 1024;
 function resetStdinForChild4() {
@@ -20243,7 +20408,7 @@ var RailwayProvider = class {
     if (!projectId || !serviceId) {
       throw new Error("Invalid Railway workspace id (expected projectId/serviceId).");
     }
-    const remoteDir = path41.posix.dirname(remotePath);
+    const remoteDir = path42.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote4(remoteDir)}`, `cat > ${shellQuote4(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote4(remotePath)}`);
@@ -20786,8 +20951,8 @@ async function stopWorkspaceFromLocal(target) {
 var import_node_dns = require("dns");
 var import_node_util4 = require("util");
 var import_node_crypto8 = require("crypto");
-var fs33 = __toESM(require("fs"));
-var path42 = __toESM(require("path"));
+var fs34 = __toESM(require("fs"));
+var path43 = __toESM(require("path"));
 var import_picocolors12 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util4.promisify)(import_node_dns.resolve);
 async function checkDns(apiBase) {
@@ -20843,13 +21008,13 @@ async function checkHealth(apiBase) {
   }
 }
 function checkConfigDir() {
-  const dir = path42.join(require("os").homedir(), ".codeam");
+  const dir = path43.join(require("os").homedir(), ".codeam");
   try {
-    fs33.mkdirSync(dir, { recursive: true, mode: 448 });
-    const probe = path42.join(dir, ".doctor-probe");
-    fs33.writeFileSync(probe, "ok", { mode: 384 });
-    const read = fs33.readFileSync(probe, "utf8");
-    fs33.unlinkSync(probe);
+    fs34.mkdirSync(dir, { recursive: true, mode: 448 });
+    const probe = path43.join(dir, ".doctor-probe");
+    fs34.writeFileSync(probe, "ok", { mode: 384 });
+    const read = fs34.readFileSync(probe, "utf8");
+    fs34.unlinkSync(probe);
     if (read !== "ok") throw new Error("write/read round-trip mismatch");
     return {
       id: "config-dir",
@@ -20889,9 +21054,9 @@ function checkSessions() {
   }
 }
 function checkAgentBinaries() {
-  const os27 = createOsStrategy();
+  const os28 = createOsStrategy();
   return getEnabledAgents().map((meta) => {
-    const found = os27.findInPath(meta.binaryName);
+    const found = os28.findInPath(meta.binaryName);
     return {
       id: `agent-${meta.id}`,
       label: `Agent binary: ${meta.displayName} (${meta.binaryName})`,
@@ -20913,7 +21078,7 @@ function checkNodePty() {
       detail: "not required on this platform"
     };
   }
-  const vendoredPath = path42.join(__dirname, "vendor", "node-pty");
+  const vendoredPath = path43.join(__dirname, "vendor", "node-pty");
   for (const target of [vendoredPath, "node-pty"]) {
     try {
       require(target);
@@ -20955,7 +21120,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.27.2" : "0.0.0-dev";
+  const cliVersion = true ? "2.27.3" : "0.0.0-dev";
   const apiBase = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -21154,7 +21319,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors13 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.27.2" : "unknown";
+  const v = true ? "2.27.3" : "unknown";
   console.log(`${import_picocolors13.default.bold("codeam-cli")} ${import_picocolors13.default.cyan(v)}`);
 }
 
@@ -21282,9 +21447,9 @@ function tryShowSubcommandHelp(cmd, args2) {
 var _subcommandHelpKeys = Object.keys(HELPS);
 
 // src/lib/updateNotifier.ts
-var fs34 = __toESM(require("fs"));
-var os26 = __toESM(require("os"));
-var path43 = __toESM(require("path"));
+var fs35 = __toESM(require("fs"));
+var os27 = __toESM(require("os"));
+var path44 = __toESM(require("path"));
 var https7 = __toESM(require("https"));
 var import_picocolors16 = __toESM(require("picocolors"));
 var PKG_NAME = "codeam-cli";
@@ -21292,12 +21457,12 @@ var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
 var TTL_MS = 24 * 60 * 60 * 1e3;
 var REQUEST_TIMEOUT_MS = 1500;
 function cachePath() {
-  const dir = path43.join(os26.homedir(), ".codeam");
-  return path43.join(dir, "update-check.json");
+  const dir = path44.join(os27.homedir(), ".codeam");
+  return path44.join(dir, "update-check.json");
 }
 function readCache() {
   try {
-    const raw = fs34.readFileSync(cachePath(), "utf8");
+    const raw = fs35.readFileSync(cachePath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.fetchedAt !== "number" || typeof parsed.latest !== "string") return null;
     return parsed;
@@ -21308,10 +21473,10 @@ function readCache() {
 function writeCache(cache) {
   try {
     const file = cachePath();
-    fs34.mkdirSync(path43.dirname(file), { recursive: true });
+    fs35.mkdirSync(path44.dirname(file), { recursive: true });
     const tmp = `${file}.${process.pid}.tmp`;
-    fs34.writeFileSync(tmp, JSON.stringify(cache));
-    fs34.renameSync(tmp, file);
+    fs35.writeFileSync(tmp, JSON.stringify(cache));
+    fs35.renameSync(tmp, file);
   } catch {
   }
 }
@@ -21382,7 +21547,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.27.2" : null;
+  const current = true ? "2.27.3" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;