codeam-cli 2.39.54 → 2.39.56

package/dist/index.js

@@ -87,7 +87,7 @@ var require_src = __commonJS({
 });
 
 // src/commands/start.ts
-var import_picocolors3 = __toESM(require("picocolors"));
+var import_picocolors4 = __toESM(require("picocolors"));
 
 // ../../packages/shared/src/protocol/constants.ts
 var PROTOCOL_VERSION = "2.0.0";
@@ -513,9 +513,9 @@ var _default = makeConfig();
 var { getConfig, ensurePluginId, addSession, removeSession, setActiveSession, getActiveSession, getActiveSessionForAgent, clearAll, saveCliConfig, loadCliConfig } = _default;
 
 // src/commands/pair-auto.ts
-var fs38 = __toESM(require("fs"));
-var os32 = __toESM(require("os"));
-var path44 = __toESM(require("path"));
+var fs40 = __toESM(require("fs"));
+var os33 = __toESM(require("os"));
+var path46 = __toESM(require("path"));
 var import_crypto4 = require("crypto");
 
 // src/services/telemetry.service.ts
@@ -551,8 +551,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? (0, import_pat
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path58) {
-  return path58.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path59) {
+  return path59.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 
 // ../../node_modules/@posthog/core/dist/featureFlagUtils.mjs
@@ -3032,9 +3032,9 @@ async function addSourceContext(frames) {
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-function getContextLinesFromFile(path58, ranges, output) {
+function getContextLinesFromFile(path59, ranges, output) {
   return new Promise((resolve7) => {
-    const stream = (0, import_node_fs.createReadStream)(path58);
+    const stream = (0, import_node_fs.createReadStream)(path59);
     const lineReaded = (0, import_node_readline.createInterface)({
       input: stream
     });
@@ -3049,7 +3049,7 @@ function getContextLinesFromFile(path58, ranges, output) {
     let rangeStart = range[0];
     let rangeEnd = range[1];
     function onStreamError() {
-      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path58, 1);
+      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path59, 1);
       lineReaded.close();
       lineReaded.removeAllListeners();
       destroyStreamAndResolve();
@@ -3110,8 +3110,8 @@ function clearLineContext(frame) {
   delete frame.context_line;
   delete frame.post_context;
 }
-function shouldSkipContextLinesForFile(path58) {
-  return path58.startsWith("node:") || path58.endsWith(".min.js") || path58.endsWith(".min.cjs") || path58.endsWith(".min.mjs") || path58.startsWith("data:");
+function shouldSkipContextLinesForFile(path59) {
+  return path59.startsWith("node:") || path59.endsWith(".min.js") || path59.endsWith(".min.cjs") || path59.endsWith(".min.mjs") || path59.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame) {
   if (void 0 !== frame.lineno && frame.lineno > MAX_CONTEXTLINES_LINENO) return true;
@@ -5388,7 +5388,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.39.54" : "0.0.0-dev",
+    cliVersion: true ? "2.39.56" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5547,7 +5547,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.39.54",
+  version: "2.39.56",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -12502,11 +12502,11 @@ function parseReview(stdout) {
   for (const line of lines) {
     const m = line.match(HUNK_LINE_RE);
     if (!m) continue;
-    const [, path58, lineNo, sevToken, message] = m;
-    if (!path58 || !lineNo || !message) continue;
+    const [, path59, lineNo, sevToken, message] = m;
+    if (!path59 || !lineNo || !message) continue;
     const cleanedMessage = message.trim().replace(/^[*-]\s+/, "");
     hunks.push({
-      path: path58.trim(),
+      path: path59.trim(),
       line: Number(lineNo),
       severity: sevToken ? SEVERITY_MAP[sevToken.toLowerCase()] : void 0,
       message: cleanedMessage
@@ -16779,8 +16779,10 @@ async function startInfraOnly(agentId) {
 }
 
 // src/commands/host-agent.ts
-var import_node_child_process12 = require("child_process");
-var os31 = __toESM(require("os"));
+var import_node_child_process13 = require("child_process");
+var os32 = __toESM(require("os"));
+var fs39 = __toESM(require("fs"));
+var path45 = __toESM(require("path"));
 
 // src/commands/host/host-client.ts
 var fs35 = __toESM(require("fs"));
@@ -16917,12 +16919,13 @@ async function redeemEnrollToken(token, label) {
     controlPluginId: data.controlPluginId
   };
 }
-async function sendHostHeartbeat(identity, metrics) {
+async function sendHostHeartbeat(identity, metrics, sessions3) {
   const start2 = process.hrtime.bigint();
   await postJson("/api/self-hosted/heartbeat", {
     hostId: identity.hostId,
     hostToken: identity.hostToken,
-    ...metrics ? { metrics } : {}
+    ...metrics ? { metrics } : {},
+    ...sessions3 ? { sessions: sessions3 } : {}
   });
   const elapsedNs = process.hrtime.bigint() - start2;
   return Math.round(Number(elapsedNs) / 1e6);
@@ -17199,8 +17202,185 @@ var HeadroomStatsReporter = class {
   }
 };
 
+// src/lib/updateNotifier.ts
+var fs38 = __toESM(require("fs"));
+var os31 = __toESM(require("os"));
+var path44 = __toESM(require("path"));
+var https6 = __toESM(require("https"));
+var import_node_child_process12 = require("child_process");
+var import_picocolors3 = __toESM(require("picocolors"));
+var PKG_NAME = "codeam-cli";
+var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
+var TTL_MS = 24 * 60 * 60 * 1e3;
+var REQUEST_TIMEOUT_MS = 1500;
+function cachePath() {
+  const dir = path44.join(os31.homedir(), ".codeam");
+  return path44.join(dir, "update-check.json");
+}
+function readCache() {
+  try {
+    const raw = fs38.readFileSync(cachePath(), "utf8");
+    const parsed = JSON.parse(raw);
+    if (typeof parsed.fetchedAt !== "number" || typeof parsed.latest !== "string") return null;
+    return parsed;
+  } catch {
+    return null;
+  }
+}
+function writeCache(cache) {
+  try {
+    const file = cachePath();
+    fs38.mkdirSync(path44.dirname(file), { recursive: true });
+    const tmp = `${file}.${process.pid}.tmp`;
+    fs38.writeFileSync(tmp, JSON.stringify(cache));
+    fs38.renameSync(tmp, file);
+  } catch {
+  }
+}
+function compareSemver(a, b) {
+  const stripPre = (s) => s.split("-")[0];
+  const aParts = stripPre(a).split(".").map(Number);
+  const bParts = stripPre(b).split(".").map(Number);
+  for (let i = 0; i < 3; i++) {
+    const ai = aParts[i] ?? 0;
+    const bi = bParts[i] ?? 0;
+    if (Number.isNaN(ai) || Number.isNaN(bi)) return 0;
+    if (ai > bi) return 1;
+    if (ai < bi) return -1;
+  }
+  return 0;
+}
+function fetchLatest() {
+  return new Promise((resolve7) => {
+    const req = https6.get(
+      REGISTRY_URL,
+      { headers: { Accept: "application/json" }, timeout: REQUEST_TIMEOUT_MS },
+      (res) => {
+        if (res.statusCode !== 200) {
+          res.resume();
+          resolve7(null);
+          return;
+        }
+        let buf = "";
+        res.setEncoding("utf8");
+        res.on("data", (chunk) => {
+          buf += chunk;
+        });
+        res.on("end", () => {
+          try {
+            const json = JSON.parse(buf);
+            if (typeof json.version === "string") {
+              resolve7(json.version);
+            } else {
+              resolve7(null);
+            }
+          } catch {
+            resolve7(null);
+          }
+        });
+      }
+    );
+    req.on("timeout", () => {
+      req.destroy();
+      resolve7(null);
+    });
+    req.on("error", () => resolve7(null));
+  });
+}
+function notifyIfStale(currentVersion, latest) {
+  if (compareSemver(latest, currentVersion) <= 0) return;
+  const arrow = import_picocolors3.default.dim("\u2192");
+  const cmd = import_picocolors3.default.cyan("npm install -g codeam-cli");
+  const lines = [
+    "",
+    `  ${import_picocolors3.default.yellow("\u25CF")} ${import_picocolors3.default.bold("Update available")} ${import_picocolors3.default.dim(currentVersion)} ${arrow} ${import_picocolors3.default.green(latest)}`,
+    `    Run ${cmd} to upgrade.`,
+    ""
+  ];
+  process.stderr.write(lines.join("\n"));
+}
+function isLinkedInstall() {
+  try {
+    const root = (0, import_node_child_process12.execSync)("npm root -g", {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: 2e3
+    }).trim();
+    if (!root) return false;
+    const pkgPath = path44.join(root, PKG_NAME);
+    return fs38.lstatSync(pkgPath).isSymbolicLink();
+  } catch {
+    return false;
+  }
+}
+function maybeAutoUpdate(currentVersion, latest) {
+  if (compareSemver(latest, currentVersion) <= 0) return;
+  if (process.env.CODEAM_NO_AUTO_UPDATE === "1") {
+    notifyIfStale(currentVersion, latest);
+    return;
+  }
+  if (isLinkedInstall()) {
+    notifyIfStale(currentVersion, latest);
+    return;
+  }
+  process.stderr.write(
+    `
+  ${import_picocolors3.default.yellow("\u25CF")} ${import_picocolors3.default.bold("Updating codeam-cli")} ${import_picocolors3.default.dim(currentVersion)} ${import_picocolors3.default.dim("\u2192")} ${import_picocolors3.default.green(latest)}...
+
+`
+  );
+  const install = (0, import_node_child_process12.spawnSync)("npm", ["install", "-g", `${PKG_NAME}@latest`], {
+    stdio: "inherit",
+    env: process.env
+  });
+  if (install.status !== 0) {
+    process.stderr.write(
+      `
+  ${import_picocolors3.default.red("!")} Update failed (exit ${install.status ?? "?"}). Continuing on ${currentVersion}.
+    Run ${import_picocolors3.default.cyan("npm install -g codeam-cli")} manually to retry.
+
+`
+    );
+    return;
+  }
+  try {
+    fs38.unlinkSync(cachePath());
+  } catch {
+  }
+  process.stderr.write(`  ${import_picocolors3.default.green("\u2713")} Updated. Resuming session...
+
+`);
+  const child = (0, import_node_child_process12.spawnSync)("codeam", process.argv.slice(2), {
+    stdio: "inherit",
+    env: process.env
+  });
+  process.exit(child.status ?? 0);
+}
+function checkForUpdates() {
+  if (process.env.NODE_ENV === "test") return;
+  if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
+  if (process.env.CI) return;
+  if (!process.stdout.isTTY) return;
+  const current = true ? "2.39.56" : null;
+  if (!current) return;
+  const cache = readCache();
+  const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
+  if (fresh && cache) {
+    maybeAutoUpdate(current, cache.latest);
+    return;
+  }
+  void fetchLatest().then((latest) => {
+    if (!latest) return;
+    writeCache({ fetchedAt: Date.now(), latest });
+  });
+}
+
 // src/commands/host-agent.ts
 var HEARTBEAT_INTERVAL_MS = 2e4;
+var SELF_UPDATE_PKG = "codeam-cli";
+var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
+var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
+var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function maybeStartHeadroomReporter(ctx) {
   if (process.env["HEADROOM_ENABLED"] !== "1") return null;
   try {
@@ -17275,7 +17455,7 @@ var PIP_INSTALL_TIMEOUT_MS = 12e4;
 var defaultHeadroomRunner = {
   which(cmd) {
     try {
-      (0, import_node_child_process12.execFileSync)("which", [cmd], { stdio: "ignore" });
+      (0, import_node_child_process13.execFileSync)("which", [cmd], { stdio: "ignore" });
       return true;
     } catch {
       return false;
@@ -17283,7 +17463,7 @@ var defaultHeadroomRunner = {
   },
   run(cmd, args2, opts = {}) {
     return new Promise((resolve7) => {
-      const child = (0, import_node_child_process12.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"] });
+      const child = (0, import_node_child_process13.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"] });
       let stderrBuf = "";
       let settled = false;
       const done = (code) => {
@@ -17416,6 +17596,41 @@ function agentIdToHeadroomKind(agentId) {
   if (normalized.startsWith("copilot")) return "copilot";
   return "claude";
 }
+function headroomConfigPath() {
+  return path45.join(os32.homedir(), ".codeam", "headroom-config.json");
+}
+function persistHeadroomConfig(config) {
+  try {
+    const file = headroomConfigPath();
+    fs39.mkdirSync(path45.dirname(file), { recursive: true, mode: 448 });
+    const tmp = `${file}.tmp-${process.pid}`;
+    fs39.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
+    fs39.renameSync(tmp, file);
+  } catch (err) {
+    log.warn(
+      "host-agent",
+      `failed to persist headroom config (best-effort): ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+}
+function readHeadroomChildEnv() {
+  try {
+    const raw = fs39.readFileSync(headroomConfigPath(), "utf8");
+    const parsed = JSON.parse(raw);
+    if (typeof parsed !== "object" || parsed === null) return {};
+    const o = parsed;
+    if (o.enabled === true && typeof o.agent === "string" && o.agent.length > 0 && typeof o.ingestUrl === "string" && o.ingestUrl.length > 0) {
+      return {
+        HEADROOM_ENABLED: "1",
+        HEADROOM_AGENT: o.agent,
+        HEADROOM_SAVINGS_INGEST_URL: o.ingestUrl
+      };
+    }
+    return {};
+  } catch {
+    return {};
+  }
+}
 async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner) {
   const PIP_PACKAGES = [
     "headroom-ai",
@@ -17473,7 +17688,7 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner)
   }
   const initKind = agentIdToHeadroomKind(agent);
   const initOk = await new Promise((resolve7) => {
-    (0, import_node_child_process12.execFile)("headroom", ["init", "--global", initKind], (initErr, stdout, stderr) => {
+    (0, import_node_child_process13.execFile)("headroom", ["init", "--global", initKind], (initErr, stdout, stderr) => {
       if (initErr) {
         const detail = (stderr || initErr.message).replace(/\n+$/g, "");
         log.warn("host-agent", `headroom init failed (best-effort): ${detail}`);
@@ -17489,7 +17704,7 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner)
     return false;
   }
   try {
-    const proxy = (0, import_node_child_process12.spawn)("headroom", ["proxy", "--port", "8787"], {
+    const proxy = (0, import_node_child_process13.spawn)("headroom", ["proxy", "--port", "8787"], {
       stdio: "ignore",
       detached: true
     });
@@ -17499,20 +17714,81 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner)
   }
   return true;
 }
-var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process12.spawn)(process.execPath, [process.argv[1], "pair-auto", ...args2], {
+var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process13.spawn)(process.execPath, [process.argv[1], "pair-auto", ...args2], {
   cwd,
   env: { ...process.env, ...env },
   stdio: ["ignore", "pipe", "pipe"],
   detached: false
 });
+function currentCliVersion() {
+  return true ? "2.39.56" : null;
+}
+function runCmd(cmd, args2, timeoutMs) {
+  return new Promise((resolve7) => {
+    (0, import_node_child_process13.execFile)(cmd, args2, { timeout: timeoutMs }, (err, stdout, stderr) => {
+      const code = err && typeof err.code === "number" ? err.code : err ? null : 0;
+      resolve7({ code, stdout: stdout ?? "", stderr: stderr ?? "" });
+    });
+  });
+}
+async function runSelfUpdate() {
+  try {
+    const current = currentCliVersion();
+    if (!current) {
+      log.trace("host-agent", "self-update: no __CLI_VERSION__ \u2014 skipping");
+      return { status: "skipped" };
+    }
+    const view = await runCmd("npm", ["view", SELF_UPDATE_PKG, "version"], SELF_UPDATE_VIEW_TIMEOUT_MS);
+    if (view.code !== 0) {
+      log.trace("host-agent", `self-update: npm view exited ${String(view.code)} \u2014 skipping`);
+      return { status: "skipped" };
+    }
+    const latest = view.stdout.trim();
+    if (!latest) {
+      log.trace("host-agent", "self-update: empty npm view output \u2014 skipping");
+      return { status: "skipped" };
+    }
+    if (compareSemver(latest, current) <= 0) {
+      return { status: "current" };
+    }
+    log.info("host-agent", `self-update: ${current} \u2192 ${latest} available \u2014 installing`);
+    const installArgs = ["install", "-g", `${SELF_UPDATE_PKG}@latest`];
+    let install = await runCmd("npm", installArgs, SELF_UPDATE_INSTALL_TIMEOUT_MS);
+    const isRoot = process.getuid?.() === 0;
+    if (install.code !== 0 && !isRoot && /EACCES/i.test(install.stderr)) {
+      log.info("host-agent", "self-update: install hit EACCES \u2014 retrying with sudo");
+      install = await runCmd("sudo", ["npm", ...installArgs], SELF_UPDATE_INSTALL_TIMEOUT_MS);
+    }
+    if (install.code !== 0) {
+      log.warn(
+        "host-agent",
+        `self-update: install exited ${String(install.code)} \u2014 staying on ${current}`
+      );
+      return { status: "skipped" };
+    }
+    const after = await runCmd("npm", ["view", SELF_UPDATE_PKG, "version"], SELF_UPDATE_VIEW_TIMEOUT_MS);
+    const installed = after.code === 0 ? after.stdout.trim() || latest : latest;
+    return { status: "updated", version: installed };
+  } catch (err) {
+    log.warn(
+      "host-agent",
+      `self-update: unexpected error: ${err instanceof Error ? err.message : String(err)}`
+    );
+    return { status: "skipped" };
+  }
+}
 var defaultOnIdentityRejected = () => {
   deleteHostIdentity();
   log.warn("host-agent", "host identity rejected by backend \u2014 wiped sealed identity, exiting");
   process.exit(1);
 };
+var defaultOnUpdated = (version3) => {
+  log.info("host-agent", `self-update: installed ${version3}, restarting`);
+  process.exit(0);
+};
 var defaultDisableService = () => {
   try {
-    (0, import_node_child_process12.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
+    (0, import_node_child_process13.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
   } catch {
   }
 };
@@ -17526,6 +17802,8 @@ var HostAgentSupervisor = class {
     this.metrics = deps.metricsCollector ?? new MetricsCollector();
     this.onIdentityRejected = deps.onIdentityRejected ?? defaultOnIdentityRejected;
     this.disableService = deps.disableService ?? defaultDisableService;
+    this.selfUpdate = deps.selfUpdate ?? runSelfUpdate;
+    this.onUpdated = deps.onUpdated ?? defaultOnUpdated;
   }
   identity;
   deps;
@@ -17535,6 +17813,20 @@ var HostAgentSupervisor = class {
   setupHeadroom;
   relay = null;
   heartbeatTimer = null;
+  /** Periodic self-update timer (npm check + install + restart). */
+  selfUpdateTimer = null;
+  /** Self-update check + install (injectable; defaults to runSelfUpdate). */
+  selfUpdate;
+  /** Restart action after a successful self-update (defaults to process.exit). */
+  onUpdated;
+  /** Guards against overlapping self-update ticks (a slow npm install). */
+  selfUpdating = false;
+  /**
+   * Set once a self-update installed a newer version but a child was busy,
+   * so the next idle tick restarts WITHOUT re-installing. Carries the
+   * already-installed version for the restart log.
+   */
+  pendingRestartVersion = null;
   /** Guards the one-shot 'connected' telemetry on the first heartbeat. */
   reportedConnected = false;
   /** Live-metrics collector — stateful across beats (CPU delta + latency). */
@@ -17545,6 +17837,19 @@ var HostAgentSupervisor = class {
   disableService;
   /** Guards against firing the self-heal more than once. */
   healing = false;
+  /**
+   * Resolve the self-update interval, honoring `CODEAM_HOST_SELF_UPDATE_MS`.
+   * A finite value > 0 overrides the default; 0 or negative DISABLES the
+   * periodic self-update (tests / pinned boxes); a non-numeric/absent value
+   * falls back to {@link SELF_UPDATE_INTERVAL_MS}.
+   */
+  selfUpdateIntervalMs() {
+    const raw = process.env.CODEAM_HOST_SELF_UPDATE_MS;
+    if (raw === void 0 || raw === "") return SELF_UPDATE_INTERVAL_MS;
+    const parsed = Number(raw);
+    if (!Number.isFinite(parsed)) return SELF_UPDATE_INTERVAL_MS;
+    return parsed;
+  }
   /** Open the control channel (reusing the relay) + start heartbeats. */
   start() {
     const make = this.deps.makeRelay ?? ((pluginId, onCommand, meta) => new CommandRelayService(pluginId, onCommand, meta));
@@ -17557,6 +17862,13 @@ var HostAgentSupervisor = class {
     void this.beat();
     this.heartbeatTimer = setInterval(() => void this.beat(), HEARTBEAT_INTERVAL_MS);
     this.heartbeatTimer.unref?.();
+    const updateMs = this.selfUpdateIntervalMs();
+    if (updateMs > 0) {
+      this.selfUpdateTimer = setInterval(() => void this.selfUpdateTick(), updateMs);
+      this.selfUpdateTimer.unref?.();
+    } else {
+      log.info("host-agent", "self-update disabled (CODEAM_HOST_SELF_UPDATE_MS<=0)");
+    }
     log.info("host-agent", `supervisor up host=${this.identity.hostId.slice(0, 8)}`);
   }
   /** Stop the control channel + heartbeats + kill every child. */
@@ -17565,6 +17877,10 @@ var HostAgentSupervisor = class {
       clearInterval(this.heartbeatTimer);
       this.heartbeatTimer = null;
     }
+    if (this.selfUpdateTimer) {
+      clearInterval(this.selfUpdateTimer);
+      this.selfUpdateTimer = null;
+    }
     this.relay?.stop();
     for (const child of this.children.values()) {
       try {
@@ -17582,7 +17898,8 @@ var HostAgentSupervisor = class {
       } catch (err) {
         log.trace("host-agent", "metrics collection failed", err);
       }
-      const latencyMs = await sendHostHeartbeat(this.identity, metrics);
+      const sessions3 = this.activeSessions();
+      const latencyMs = await sendHostHeartbeat(this.identity, metrics, sessions3);
       this.metrics.recordLatency(latencyMs);
       if (!this.reportedConnected) {
         this.reportedConnected = true;
@@ -17604,10 +17921,81 @@ var HostAgentSupervisor = class {
       log.trace("host-agent", "heartbeat failed", err);
     }
   }
+  /**
+   * One self-update tick. Best-effort + never crashes the supervisor: the
+   * whole body is wrapped in try/catch and the injected updater never
+   * rejects. Sequence:
+   *
+   *   1. If a restart is already PENDING (a prior tick installed a newer
+   *      version while a child was busy), skip the npm work and just try to
+   *      restart now — no re-install.
+   *   2. Otherwise run the injected `selfUpdate`. On `'updated'`, remember
+   *      the new version as pending; on anything else, do nothing.
+   *   3. SAFETY: only restart when no child turn is in flight. If a child is
+   *      mid-work, DEFER — the install already happened, so a later idle
+   *      tick just restarts. (We prefer deferring to yanking an active turn;
+   *      systemd would restart in ~5s but the mobile would drop the turn.)
+   *
+   * `selfUpdating` guards against a slow npm install overlapping the next
+   * tick (the timer keeps firing on its interval).
+   */
+  async selfUpdateTick() {
+    if (this.selfUpdating) return;
+    this.selfUpdating = true;
+    try {
+      if (this.pendingRestartVersion !== null) {
+        this.maybeRestartForUpdate(this.pendingRestartVersion);
+        return;
+      }
+      const result = await this.selfUpdate();
+      if (result.status !== "updated") return;
+      const version3 = result.version ?? "latest";
+      this.pendingRestartVersion = version3;
+      this.maybeRestartForUpdate(version3);
+    } catch (err) {
+      log.warn(
+        "host-agent",
+        `self-update tick failed: ${err instanceof Error ? err.message : String(err)}`
+      );
+    } finally {
+      this.selfUpdating = false;
+    }
+  }
+  /**
+   * Restart for an already-installed update IFF no child turn is in flight.
+   * When a child is busy we DEFER (the version stays pending for the next
+   * idle tick) rather than yank an active turn.
+   */
+  maybeRestartForUpdate(version3) {
+    if (this.children.size > 0) {
+      log.info(
+        "host-agent",
+        `self-update: ${version3} installed but ${this.children.size} child(ren) busy \u2014 deferring restart`
+      );
+      return;
+    }
+    this.onUpdated(version3);
+  }
   /** Number of live children — for tests + diagnostics. */
   childCount() {
     return this.children.size;
   }
+  /**
+   * Snapshot the supervisor's live children as heartbeat session entries.
+   *
+   * Each entry's `id` is the deployId-correlated sessionId the backend
+   * recognizes (the supervisor keys its children by it — the same id a
+   * `self_hosted_stop` arrives with, see `stopChild`). `agent` is the deploy's
+   * `agentId`; `startedAt` is the epoch-ms spawn time tracked on the child.
+   * Returns `[]` when no children are active so the backend reflects "0 active".
+   */
+  activeSessions() {
+    return [...this.children.values()].map((child) => ({
+      id: child.deployId,
+      agent: child.agent,
+      startedAt: child.startedAt
+    }));
+  }
   /**
    * Route a relay command. Only `self_hosted_deploy` / `self_hosted_stop`
    * are understood; anything else is ignored (the box accepts no
@@ -17699,7 +18087,7 @@ var HostAgentSupervisor = class {
         report("installing", "installing agent CLI");
         await this.runAgentInstall(payload.agentInstallScript);
       }
-      const home = process.env.HOME || os31.homedir();
+      const home = process.env.HOME || os32.homedir();
       childEnv.PATH = `${home}/.local/bin:${process.env.PATH ?? ""}`;
       if (payload.previewTunnelToken && payload.previewHostname) {
         childEnv.PREVIEW_TUNNEL_TOKEN = payload.previewTunnelToken;
@@ -17709,17 +18097,27 @@ var HostAgentSupervisor = class {
         report("headroom", "setting up Headroom proxy");
         const headroomOk = await this.setupHeadroom(payload.headroomAgent);
         if (headroomOk) {
-          childEnv.HEADROOM_ENABLED = "1";
-          childEnv.HEADROOM_AGENT = agentIdToHeadroomKind(payload.headroomAgent);
-          childEnv.HEADROOM_SAVINGS_INGEST_URL = payload.headroomSavingsIngestUrl;
-          log.info("host-agent", "Headroom proxy ready; HEADROOM_* env injected into child");
+          persistHeadroomConfig({
+            enabled: true,
+            agent: agentIdToHeadroomKind(payload.headroomAgent),
+            ingestUrl: payload.headroomSavingsIngestUrl
+          });
+          log.info("host-agent", "Headroom proxy ready; persisted headroom config for child spawns");
         } else {
+          persistHeadroomConfig({ enabled: false });
           log.warn("host-agent", "Headroom setup failed (best-effort) \u2014 child will run without Headroom");
         }
+      } else if (payload.headroomEnabled === false) {
+        persistHeadroomConfig({ enabled: false });
       }
       report("spawning", "starting agent");
-      const proc = this.spawnChild(childEnv, cwd, extraArgs);
-      const child = { deployId: payload.deployId, proc };
+      const proc = this.spawnSessionChild(childEnv, cwd, extraArgs);
+      const child = {
+        deployId: payload.deployId,
+        proc,
+        agent: payload.agentId,
+        startedAt: Date.now()
+      };
       this.children.set(payload.deployId, child);
       let tail = "";
       const appendTail = (buf) => {
@@ -17752,6 +18150,20 @@ var HostAgentSupervisor = class {
       report("failed", message);
     }
   }
+  /**
+   * Spawn a supervised `pair-auto` session child, merging the persisted
+   * Headroom env on top of the caller's env. This is the SINGLE spawn site for
+   * session children: the fresh-deploy path and any future resume / restart
+   * path both go through here, so the HEADROOM_* env (read from
+   * `~/.codeam/headroom-config.json`, the source of truth a prior deploy wrote)
+   * is injected on EVERY spawn — reporting survives session resumes and
+   * supervisor restarts (systemd / periodic self-update), not just fresh
+   * deploys. `readHeadroomChildEnv()` returns `{}` when Headroom is disabled or
+   * was never set up, so this is a no-op there (never-break).
+   */
+  spawnSessionChild(env, cwd, args2 = []) {
+    return this.spawnChild({ ...env, ...readHeadroomChildEnv() }, cwd, args2);
+  }
   /**
    * Run the backend-supplied per-agent CLI install script (e.g.
    * `claude.ai/install.sh`, `npm i -g @openai/codex`). Best-effort + bounded:
@@ -17763,8 +18175,8 @@ var HostAgentSupervisor = class {
    */
   runAgentInstall(script) {
     return new Promise((resolve7) => {
-      const home = process.env.HOME || os31.homedir();
-      const child = (0, import_node_child_process12.spawn)("sh", ["-c", script], {
+      const home = process.env.HOME || os32.homedir();
+      const child = (0, import_node_child_process13.spawn)("sh", ["-c", script], {
         env: { ...process.env, HOME: home },
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -17888,12 +18300,12 @@ function readTokenFromArgs(args2) {
   }
   const fileFlag = args2.find((a) => a.startsWith("--token-file="));
   if (fileFlag) {
-    const path58 = fileFlag.slice("--token-file=".length);
+    const path59 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs38.readFileSync(path58, "utf8").trim();
-      if (content.length === 0) fail(`--token-file ${path58} is empty`);
+      const content = fs40.readFileSync(path59, "utf8").trim();
+      if (content.length === 0) fail(`--token-file ${path59} is empty`);
       try {
-        fs38.unlinkSync(path58);
+        fs40.unlinkSync(path59);
       } catch {
       }
       return content;
@@ -17919,7 +18331,7 @@ async function claimOnce(token, pluginId, pluginSecretHash) {
     pluginId,
     ideName: "codeam-cli (codespace)",
     ideVersion: process.env.npm_package_version ?? "unknown",
-    hostname: os32.hostname(),
+    hostname: os33.hostname(),
     codespaceName: process.env.CODESPACE_NAME ?? "",
     // Current git branch of the codespace's working directory, so the
     // backend can populate `PairedSession.branch` for the codespace pair.
@@ -17980,7 +18392,7 @@ async function claim(token, pluginId, pluginSecretHash) {
   }
 }
 function pairAutoLockPath() {
-  return path44.join(os32.homedir(), ".codeam", "pair-auto.lock");
+  return path46.join(os33.homedir(), ".codeam", "pair-auto.lock");
 }
 function isLivePairAuto(pid) {
   if (!Number.isInteger(pid) || pid <= 0 || pid === process.pid) return false;
@@ -17990,7 +18402,7 @@ function isLivePairAuto(pid) {
     if (e.code !== "EPERM") return false;
   }
   try {
-    return fs38.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
+    return fs40.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
   } catch {
     return true;
   }
@@ -18000,24 +18412,24 @@ function isLiveCodeam(pid) {
 }
 function daemonLockPath(sessionId) {
   const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
-  return path44.join(os32.homedir(), ".codeam", `daemon-${safe}.lock`);
+  return path46.join(os33.homedir(), ".codeam", `daemon-${safe}.lock`);
 }
 function acquireDaemonLock(sessionId) {
   const lockPath = daemonLockPath(sessionId);
   try {
-    fs38.mkdirSync(path44.dirname(lockPath), { recursive: true });
+    fs40.mkdirSync(path46.dirname(lockPath), { recursive: true });
     try {
-      fs38.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs40.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs38.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs40.readFileSync(lockPath, "utf8").trim());
       if (holder && holder !== process.pid && isLiveCodeam(holder)) return false;
-      fs38.writeFileSync(lockPath, String(process.pid));
+      fs40.writeFileSync(lockPath, String(process.pid));
     }
     const release3 = () => {
       try {
-        if (fs38.existsSync(lockPath) && Number(fs38.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs38.unlinkSync(lockPath);
+        if (fs40.existsSync(lockPath) && Number(fs40.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs40.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -18039,19 +18451,19 @@ function acquireDaemonLock(sessionId) {
 function acquireSingletonLock() {
   const lockPath = pairAutoLockPath();
   try {
-    fs38.mkdirSync(path44.dirname(lockPath), { recursive: true });
+    fs40.mkdirSync(path46.dirname(lockPath), { recursive: true });
     try {
-      fs38.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs40.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs38.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs40.readFileSync(lockPath, "utf8").trim());
       if (isLivePairAuto(holder)) return false;
-      fs38.writeFileSync(lockPath, String(process.pid));
+      fs40.writeFileSync(lockPath, String(process.pid));
     }
     process.once("exit", () => {
       try {
-        if (fs38.existsSync(lockPath) && Number(fs38.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs38.unlinkSync(lockPath);
+        if (fs40.existsSync(lockPath) && Number(fs40.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs40.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -18133,7 +18545,7 @@ async function pairAuto(args2) {
 }
 
 // src/services/headroom/wrap-launch.ts
-var import_node_child_process13 = require("child_process");
+var import_node_child_process14 = require("child_process");
 function wrapWithHeadroom(launch, opts) {
   if (!opts.enabled || !opts.headroomPresent) return launch;
   return {
@@ -18146,7 +18558,7 @@ var _present;
 function headroomPresent() {
   if (_present !== void 0) return Promise.resolve(_present);
   return new Promise((resolve7) => {
-    (0, import_node_child_process13.execFile)("headroom", ["--version"], (err) => {
+    (0, import_node_child_process14.execFile)("headroom", ["--version"], (err) => {
       _present = !err;
       resolve7(_present);
     });
@@ -18496,19 +18908,19 @@ var AgentService = class _AgentService {
 };
 
 // src/agents/acp/adapters.ts
-var path45 = __toESM(require("path"));
+var path47 = __toESM(require("path"));
 var require_ = require;
 function resolveBin(pkgName, binName) {
   try {
     const manifestPath = require_.resolve(`${pkgName}/package.json`);
     const manifest = require_(`${pkgName}/package.json`);
-    const pkgDir = path45.dirname(manifestPath);
+    const pkgDir = path47.dirname(manifestPath);
     const bin = manifest.bin;
     if (!bin) return null;
-    if (typeof bin === "string") return path45.resolve(pkgDir, bin);
+    if (typeof bin === "string") return path47.resolve(pkgDir, bin);
     const target = binName ?? Object.keys(bin)[0];
     if (!target || !bin[target]) return null;
-    return path45.resolve(pkgDir, bin[target]);
+    return path47.resolve(pkgDir, bin[target]);
   } catch {
     return null;
   }
@@ -18584,11 +18996,11 @@ function requiresAcp(agent) {
 var import_node_crypto7 = require("crypto");
 
 // src/agents/acp/client.ts
-var import_node_child_process14 = require("child_process");
-var fs39 = __toESM(require("fs/promises"));
+var import_node_child_process15 = require("child_process");
+var fs41 = __toESM(require("fs/promises"));
 var fsSync = __toESM(require("fs"));
-var os33 = __toESM(require("os"));
-var path46 = __toESM(require("path"));
+var os34 = __toESM(require("os"));
+var path48 = __toESM(require("path"));
 var import_node_stream = require("stream");
 
 // ../../node_modules/@agentclientprotocol/sdk/dist/acp.js
@@ -21125,7 +21537,7 @@ var AcpClient = class {
       "acpClient",
       `spawn cmd=${adapter.command} args=[${adapter.args.join(",")}] cwd=${cwd}`
     );
-    const child = (0, import_node_child_process14.spawn)(adapter.command, adapter.args, {
+    const child = (0, import_node_child_process15.spawn)(adapter.command, adapter.args, {
       cwd,
       env: { ...process.env, PATH: augmentedPath },
       stdio: ["pipe", "pipe", "pipe"]
@@ -21375,7 +21787,7 @@ var AcpClient = class {
       },
       readTextFile: async (params) => {
         try {
-          const content = await fs39.readFile(params.path, "utf8");
+          const content = await fs41.readFile(params.path, "utf8");
           return applyLineRange(content, params.line ?? null, params.limit ?? null);
         } catch (err) {
           const code = err.code;
@@ -21395,7 +21807,7 @@ var AcpClient = class {
       },
       writeTextFile: async (params) => {
         try {
-          await fs39.writeFile(params.path, params.content, "utf8");
+          await fs41.writeFile(params.path, params.content, "utf8");
           return {};
         } catch (err) {
           const code = err.code;
@@ -21444,25 +21856,25 @@ function applyLineRange(content, line, limit) {
   return { content: lines.slice(start2, end).join("\n") };
 }
 function knownAgentBinaryDirs() {
-  const home = os33.homedir();
+  const home = os34.homedir();
   const out2 = [];
   out2.push("/tmp/codeam-node20/bin");
   for (const root of [
     "/usr/local/share/nvm/versions/node",
-    path46.join(home, ".nvm/versions/node")
+    path48.join(home, ".nvm/versions/node")
   ]) {
     try {
       for (const child of fsSync.readdirSync(root)) {
-        out2.push(path46.join(root, child, "bin"));
+        out2.push(path48.join(root, child, "bin"));
       }
     } catch {
     }
   }
-  out2.push(path46.join(home, ".volta/bin"));
+  out2.push(path48.join(home, ".volta/bin"));
   out2.push("/usr/local/bin");
   out2.push("/usr/bin");
-  out2.push(path46.join(home, ".local/bin"));
-  out2.push(path46.join(home, "bin"));
+  out2.push(path48.join(home, ".local/bin"));
+  out2.push(path48.join(home, "bin"));
   return out2.filter((p2) => {
     try {
       return fsSync.statSync(p2).isDirectory();
@@ -21473,7 +21885,7 @@ function knownAgentBinaryDirs() {
 }
 function expandPathForAgentBinaries(existingPath) {
   const existing = new Set(
-    existingPath.split(path46.delimiter).filter((p2) => p2.length > 0)
+    existingPath.split(path48.delimiter).filter((p2) => p2.length > 0)
   );
   const additions = [];
   for (const dir of knownAgentBinaryDirs()) {
@@ -21483,12 +21895,12 @@ function expandPathForAgentBinaries(existingPath) {
     }
   }
   if (additions.length === 0) return existingPath;
-  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path46.delimiter);
+  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path48.delimiter);
 }
 
 // src/services/streaming/transport.ts
 var http6 = __toESM(require("http"));
-var https6 = __toESM(require("https"));
+var https7 = __toESM(require("https"));
 var _transport4 = {
   post: _post3,
   get: _get
@@ -21497,7 +21909,7 @@ function _post3(url, headers, payload) {
   return new Promise((resolve7, reject) => {
     let settled = false;
     const u2 = new URL(url);
-    const lib = u2.protocol === "https:" ? https6 : http6;
+    const lib = u2.protocol === "https:" ? https7 : http6;
     const req = lib.request(
       {
         hostname: u2.hostname,
@@ -21539,7 +21951,7 @@ function _get(url, headers) {
   return new Promise((resolve7, reject) => {
     let settled = false;
     const u2 = new URL(url);
-    const lib = u2.protocol === "https:" ? https6 : http6;
+    const lib = u2.protocol === "https:" ? https7 : http6;
     const req = lib.request(
       {
         hostname: u2.hostname,
@@ -21810,15 +22222,15 @@ function reconcileCumulative(existing, incoming) {
 }
 
 // src/agents/acp/onboarding.ts
-var fs40 = __toESM(require("fs"));
-var os34 = __toESM(require("os"));
-var path47 = __toESM(require("path"));
+var fs42 = __toESM(require("fs"));
+var os35 = __toESM(require("os"));
+var path49 = __toESM(require("path"));
 var _onboardingSeam = {
-  markerPath: (sessionId) => path47.join(os34.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
-  exists: (p2) => fs40.existsSync(p2),
+  markerPath: (sessionId) => path49.join(os35.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
+  exists: (p2) => fs42.existsSync(p2),
   write: (p2) => {
-    fs40.mkdirSync(path47.dirname(p2), { recursive: true });
-    fs40.writeFileSync(p2, "");
+    fs42.mkdirSync(path49.dirname(p2), { recursive: true });
+    fs42.writeFileSync(p2, "");
   },
   disabled: () => {
     const v = process.env.CODEAM_ONBOARDING_DISABLED;
@@ -21826,7 +22238,7 @@ var _onboardingSeam = {
   }
 };
 function buildOnboardingWelcome(cwd) {
-  const repo = path47.basename(cwd || "") || "this project";
+  const repo = path49.basename(cwd || "") || "this project";
   return [
     `Welcome to CodeAgent Mobile! \u{1F44B} You're now driving this agent from your phone \u2014 and it comes fully wired, zero setup:`,
     "",
@@ -22086,8 +22498,8 @@ var import_crypto5 = require("crypto");
 
 // src/services/turn-files/git-changeset.ts
 var import_child_process22 = require("child_process");
-var fs41 = __toESM(require("fs/promises"));
-var path48 = __toESM(require("path"));
+var fs43 = __toESM(require("fs/promises"));
+var path50 = __toESM(require("path"));
 async function collectRepoChangeset(opts) {
   const status2 = await runGit3(opts.repoRoot, ["status", "--porcelain=v1", "-z"]);
   if (status2 === null) return null;
@@ -22105,7 +22517,7 @@ async function collectRepoChangeset(opts) {
     let stats;
     if (row.fileStatus === "added" && numstatEntry === void 0) {
       const lineCount = await readUntrackedLineCount(
-        path48.join(opts.repoRoot, row.filePath)
+        path50.join(opts.repoRoot, row.filePath)
       );
       stats = { added: lineCount, removed: 0 };
     } else {
@@ -22136,7 +22548,7 @@ function readUntrackedLineCount(absPath) {
 }
 async function defaultReadUntrackedLineCount(absPath) {
   try {
-    const content = await fs41.readFile(absPath, "utf8");
+    const content = await fs43.readFile(absPath, "utf8");
     let count = 0;
     let pos = -1;
     while ((pos = content.indexOf("\n", pos + 1)) !== -1) {
@@ -22228,7 +22640,7 @@ function defaultRunGit(cwd, args2) {
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs47 = await import("fs/promises");
+  const fs48 = await import("fs/promises");
   const out2 = [];
   await walk(workingDir, 0);
   return out2;
@@ -22236,7 +22648,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (depth > maxDepth) return;
     let entries = [];
     try {
-      const dirents = await fs47.readdir(dir, { withFileTypes: true });
+      const dirents = await fs48.readdir(dir, { withFileTypes: true });
       entries = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -22247,8 +22659,8 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (hasGit) {
       out2.push({
         repoRoot: dir,
-        repoPath: path48.relative(workingDir, dir),
-        repoName: path48.basename(dir)
+        repoPath: path50.relative(workingDir, dir),
+        repoName: path50.basename(dir)
       });
       return;
     }
@@ -22256,14 +22668,14 @@ async function discoverRepos(workingDir, maxDepth = 4) {
       if (!entry.isDirectory) continue;
       if (entry.name === "node_modules") continue;
       if (entry.name === "dist" || entry.name === "build") continue;
-      await walk(path48.join(dir, entry.name), depth + 1);
+      await walk(path50.join(dir, entry.name), depth + 1);
     }
   }
 }
 
 // src/services/turn-files/files-outbox.ts
-var fs42 = __toESM(require("fs/promises"));
-var path49 = __toESM(require("path"));
+var fs44 = __toESM(require("fs/promises"));
+var path51 = __toESM(require("path"));
 var import_os7 = require("os");
 var HOME_OUTBOX_DIR = ".codeam/outbox";
 var MAX_AGE_MS = 24 * 60 * 60 * 1e3;
@@ -22296,16 +22708,16 @@ var FilesOutbox = class {
   backoffIndex = 0;
   stopped = false;
   constructor(opts) {
-    const base = opts.baseDir ?? path49.join(homeDir(), HOME_OUTBOX_DIR);
-    this.filePath = path49.join(base, `${opts.sessionId}.jsonl`);
+    const base = opts.baseDir ?? path51.join(homeDir(), HOME_OUTBOX_DIR);
+    this.filePath = path51.join(base, `${opts.sessionId}.jsonl`);
     this.post = opts.post;
     this.autoSchedule = opts.autoSchedule !== false;
   }
   /** Persist the entry to disk and trigger a flush. Returns once the
    *  line is durable on disk (not once the POST succeeds). */
   async enqueue(entry) {
-    await fs42.mkdir(path49.dirname(this.filePath), { recursive: true });
-    await fs42.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
+    await fs44.mkdir(path51.dirname(this.filePath), { recursive: true });
+    await fs44.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
     this.backoffIndex = 0;
     if (this.autoSchedule) this.scheduleFlush(0);
   }
@@ -22394,7 +22806,7 @@ var FilesOutbox = class {
   async readAll() {
     let raw = "";
     try {
-      raw = await fs42.readFile(this.filePath, "utf8");
+      raw = await fs44.readFile(this.filePath, "utf8");
     } catch {
       return [];
     }
@@ -22418,12 +22830,12 @@ var FilesOutbox = class {
   async rewrite(entries) {
     const tmpPath = `${this.filePath}.${process.pid}.tmp`;
     if (entries.length === 0) {
-      await fs42.unlink(this.filePath).catch(() => void 0);
+      await fs44.unlink(this.filePath).catch(() => void 0);
       return;
     }
     const payload = entries.map((e) => JSON.stringify(e)).join("\n") + "\n";
-    await fs42.writeFile(tmpPath, payload, "utf8");
-    await fs42.rename(tmpPath, this.filePath);
+    await fs44.writeFile(tmpPath, payload, "utf8");
+    await fs44.rename(tmpPath, this.filePath);
   }
 };
 function applyJitter(ms) {
@@ -24154,10 +24566,10 @@ var OutputService = class _OutputService {
 };
 
 // src/services/history.service.ts
-var fs43 = __toESM(require("fs"));
-var path50 = __toESM(require("path"));
-var os35 = __toESM(require("os"));
-var https7 = __toESM(require("https"));
+var fs45 = __toESM(require("fs"));
+var path52 = __toESM(require("path"));
+var os36 = __toESM(require("os"));
+var https8 = __toESM(require("https"));
 var http7 = __toESM(require("http"));
 var import_zod2 = require("zod");
 var historyRecordSchema = import_zod2.z.object({
@@ -24183,7 +24595,7 @@ function parseJsonl(filePath) {
   const messages = [];
   let raw;
   try {
-    raw = fs43.readFileSync(filePath, "utf8");
+    raw = fs45.readFileSync(filePath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       log.warn("history:parseJsonl", `read failed for ${filePath}`, err);
@@ -24223,7 +24635,7 @@ function post(endpoint, body, pluginAuthToken) {
   return new Promise((resolve7) => {
     const payload = JSON.stringify(body);
     const u2 = new URL(`${API_BASE9}${endpoint}`);
-    const transport = u2.protocol === "https:" ? https7 : http7;
+    const transport = u2.protocol === "https:" ? https8 : http7;
     const req = transport.request(
       {
         hostname: u2.hostname,
@@ -24324,7 +24736,7 @@ var HistoryService = class _HistoryService {
     return this._quotaPercent === null || Date.now() - this._quotaFetchedAt > ttlMs;
   }
   get projectDir() {
-    return this.runtime.resolveHistoryDir(this.cwd) ?? path50.join(os35.homedir(), ".claude", "projects", encodeCwd(this.cwd));
+    return this.runtime.resolveHistoryDir(this.cwd) ?? path52.join(os36.homedir(), ".claude", "projects", encodeCwd(this.cwd));
   }
   /** Set the current Claude conversation ID (extracted from /cost command or session start) */
   setCurrentConversationId(id) {
@@ -24336,7 +24748,7 @@ var HistoryService = class _HistoryService {
   /** Return the current message count in the active conversation. */
   getCurrentMessageCount() {
     if (!this.currentConversationId) return 0;
-    const filePath = path50.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+    const filePath = path52.join(this.projectDir, `${this.currentConversationId}.jsonl`);
     return parseJsonl(filePath).length;
   }
   /**
@@ -24347,7 +24759,7 @@ var HistoryService = class _HistoryService {
     const deadline = Date.now() + timeoutMs;
     while (Date.now() < deadline) {
       if (!this.currentConversationId) return null;
-      const filePath = path50.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+      const filePath = path52.join(this.projectDir, `${this.currentConversationId}.jsonl`);
       const messages = parseJsonl(filePath);
       if (messages.length > previousCount) {
         for (let i = messages.length - 1; i >= previousCount; i--) {
@@ -24373,16 +24785,16 @@ var HistoryService = class _HistoryService {
     const dir = this.projectDir;
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     try {
-      const files = fs43.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
+      const files = fs45.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
         try {
-          const stat3 = fs43.statSync(path50.join(dir, e.name));
+          const stat3 = fs45.statSync(path52.join(dir, e.name));
           return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
         } catch {
           return { name: e.name, mtime: 0, birthtime: 0 };
         }
       }).filter((f) => f.birthtime >= cutoff).sort((a, b) => b.mtime - a.mtime);
       if (files.length > 0) {
-        this.currentConversationId = path50.basename(files[0].name, ".jsonl");
+        this.currentConversationId = path52.basename(files[0].name, ".jsonl");
       }
     } catch {
     }
@@ -24416,13 +24828,13 @@ var HistoryService = class _HistoryService {
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     let entries;
     try {
-      entries = fs43.readdirSync(dir, { withFileTypes: true });
+      entries = fs45.readdirSync(dir, { withFileTypes: true });
     } catch {
       return null;
     }
     const files = entries.filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
       try {
-        const stat3 = fs43.statSync(path50.join(dir, e.name));
+        const stat3 = fs45.statSync(path52.join(dir, e.name));
         return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
       } catch {
         return { name: e.name, mtime: 0, birthtime: 0 };
@@ -24431,12 +24843,12 @@ var HistoryService = class _HistoryService {
     if (files.length === 0) return null;
     const targetFile = this.currentConversationId ? `${this.currentConversationId}.jsonl` : files[0].name;
     if (!files.some((f) => f.name === targetFile)) return null;
-    return this.extractUsageFromFile(path50.join(dir, targetFile));
+    return this.extractUsageFromFile(path52.join(dir, targetFile));
   }
   extractUsageFromFile(filePath) {
     let raw;
     try {
-      raw = fs43.readFileSync(filePath, "utf8");
+      raw = fs45.readFileSync(filePath, "utf8");
     } catch {
       return null;
     }
@@ -24481,9 +24893,9 @@ var HistoryService = class _HistoryService {
     let totalCost = 0;
     let files;
     try {
-      files = fs43.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
+      files = fs45.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
         try {
-          return fs43.statSync(path50.join(projectDir, f)).mtimeMs >= monthStartMs;
+          return fs45.statSync(path52.join(projectDir, f)).mtimeMs >= monthStartMs;
         } catch {
           return false;
         }
@@ -24494,7 +24906,7 @@ var HistoryService = class _HistoryService {
     for (const file of files) {
       let raw;
       try {
-        raw = fs43.readFileSync(path50.join(projectDir, file), "utf8");
+        raw = fs45.readFileSync(path52.join(projectDir, file), "utf8");
       } catch {
         continue;
       }
@@ -24562,7 +24974,7 @@ var HistoryService = class _HistoryService {
    * showing an empty conversation.
    */
   async loadConversation(sessionId) {
-    const filePath = path50.join(this.projectDir, `${sessionId}.jsonl`);
+    const filePath = path52.join(this.projectDir, `${sessionId}.jsonl`);
     const messages = parseJsonl(filePath);
     if (messages.length === 0) return;
     const totalBatches = Math.ceil(messages.length / CONVERSATION_BATCH_SIZE);
@@ -24616,7 +25028,7 @@ var HistoryService = class _HistoryService {
       if (!this.currentConversationId) return 0;
     }
     const sessionId = this.currentConversationId;
-    const filePath = path50.join(this.projectDir, `${sessionId}.jsonl`);
+    const filePath = path52.join(this.projectDir, `${sessionId}.jsonl`);
     const messages = parseJsonl(filePath);
     if (messages.length === 0) return 0;
     const marker = this.lastUploadedUuid.get(sessionId);
@@ -25042,15 +25454,15 @@ function fetchQuotaUsage(runtime, historySvc) {
 }
 
 // src/agents/claude/onboarding.ts
-var fs44 = __toESM(require("fs"));
-var os36 = __toESM(require("os"));
-var path51 = __toESM(require("path"));
+var fs46 = __toESM(require("fs"));
+var os37 = __toESM(require("os"));
+var path53 = __toESM(require("path"));
 function ensureClaudeOnboarded() {
   try {
-    const file = path51.join(os36.homedir(), ".claude.json");
+    const file = path53.join(os37.homedir(), ".claude.json");
     let config = {};
     try {
-      config = JSON.parse(fs44.readFileSync(file, "utf8"));
+      config = JSON.parse(fs46.readFileSync(file, "utf8"));
     } catch {
     }
     if (config.hasCompletedOnboarding === true && typeof config.theme === "string") {
@@ -25061,8 +25473,8 @@ function ensureClaudeOnboarded() {
     if (typeof config.lastOnboardingVersion !== "string") {
       config.lastOnboardingVersion = "2.1.177";
     }
-    fs44.mkdirSync(path51.dirname(file), { recursive: true });
-    fs44.writeFileSync(file, JSON.stringify(config, null, 2));
+    fs46.mkdirSync(path53.dirname(file), { recursive: true });
+    fs46.writeFileSync(file, JSON.stringify(config, null, 2));
     log.info("claude", "pre-completed Claude onboarding (skip first-run theme picker)");
   } catch (err) {
     log.warn("claude", `ensureClaudeOnboarded failed (non-fatal): ${err.message}`);
@@ -25076,27 +25488,27 @@ async function start(requestedAgent) {
   if (!session) {
     if (requestedAgent) {
       const displayName = AGENT_REGISTRY[requestedAgent]?.displayName ?? requestedAgent;
-      console.log(`  ${import_picocolors3.default.dim(`No paired ${displayName} session found.`)}`);
+      console.log(`  ${import_picocolors4.default.dim(`No paired ${displayName} session found.`)}`);
       console.log(
-        `  ${import_picocolors3.default.dim(`Run ${import_picocolors3.default.white("codeam pair")} from a ${displayName} setup to connect your mobile app.`)}
+        `  ${import_picocolors4.default.dim(`Run ${import_picocolors4.default.white("codeam pair")} from a ${displayName} setup to connect your mobile app.`)}
 `
       );
     } else {
-      console.log(`  ${import_picocolors3.default.dim("No paired session found.")}`);
-      console.log(`  ${import_picocolors3.default.dim(`Run ${import_picocolors3.default.white("codeam pair")} to connect your mobile app.`)}
+      console.log(`  ${import_picocolors4.default.dim("No paired session found.")}`);
+      console.log(`  ${import_picocolors4.default.dim(`Run ${import_picocolors4.default.white("codeam pair")} to connect your mobile app.`)}
 `);
     }
     process.exit(0);
   }
   if (!acquireDaemonLock(session.id)) {
-    console.log(`  ${import_picocolors3.default.dim("A codeam daemon for this session is already running \u2014 deferring to it.")}`);
+    console.log(`  ${import_picocolors4.default.dim("A codeam daemon for this session is already running \u2014 deferring to it.")}`);
     process.exit(0);
   }
   if (!session.agent) {
     throw new Error("Active session has no agent \u2014 re-pair with `codeam pair`.");
   }
   const pluginId = session.pluginId ?? ensurePluginId();
-  showInfo(`${session.userName}  \xB7  ${import_picocolors3.default.cyan(session.plan)}`);
+  showInfo(`${session.userName}  \xB7  ${import_picocolors4.default.cyan(session.plan)}`);
   showInfo(`Launching ${AGENT_REGISTRY[session.agent].displayName}...
 `);
   identifyUser({
@@ -25370,7 +25782,7 @@ async function start(requestedAgent) {
 
 // src/commands/pair.ts
 var import_crypto7 = require("crypto");
-var import_picocolors4 = __toESM(require("picocolors"));
+var import_picocolors5 = __toESM(require("picocolors"));
 
 // src/utils/agent-prompt.ts
 function parseAgentFlag(args2) {
@@ -25451,7 +25863,7 @@ async function pair(args2 = []) {
     process.exit(0);
   }
   showPairingCode(result.code);
-  console.log(import_picocolors4.default.dim("  Scan the QR code or enter the code in CodeAgent Mobile."));
+  console.log(import_picocolors5.default.dim("  Scan the QR code or enter the code in CodeAgent Mobile."));
   console.log("");
   const waitSpin = dist_exports.spinner();
   const waitMessage = () => `Waiting for mobile app... \xB7 expires in ${formatRemaining(result.expiresAt)}`;
@@ -25566,7 +25978,7 @@ async function autoLinkAfterPair(opts) {
 }
 
 // src/commands/sessions.ts
-var import_picocolors5 = __toESM(require("picocolors"));
+var import_picocolors6 = __toESM(require("picocolors"));
 async function sessions2(args2) {
   const [sub, id] = args2;
   if (sub === "switch") return switchSession();
@@ -25583,18 +25995,18 @@ function listSessions() {
   showIntro();
   const config = getConfig();
   if (config.sessions.length === 0) {
-    console.log(import_picocolors5.default.dim("  No paired sessions. Run codeam pair to connect.\n"));
+    console.log(import_picocolors6.default.dim("  No paired sessions. Run codeam pair to connect.\n"));
     return;
   }
-  console.log(import_picocolors5.default.bold("  Paired sessions:\n"));
+  console.log(import_picocolors6.default.bold("  Paired sessions:\n"));
   for (const s of config.sessions) {
     const isActive = s.id === config.activeSessionId;
-    const bullet = isActive ? import_picocolors5.default.green("  \u25CF") : import_picocolors5.default.dim("  \u25CB");
-    const name = isActive ? import_picocolors5.default.bold(s.userName) : s.userName;
-    const plan = import_picocolors5.default.cyan(s.plan);
-    const date = import_picocolors5.default.dim(new Date(s.pairedAt).toLocaleDateString());
+    const bullet = isActive ? import_picocolors6.default.green("  \u25CF") : import_picocolors6.default.dim("  \u25CB");
+    const name = isActive ? import_picocolors6.default.bold(s.userName) : s.userName;
+    const plan = import_picocolors6.default.cyan(s.plan);
+    const date = import_picocolors6.default.dim(new Date(s.pairedAt).toLocaleDateString());
     console.log(`${bullet}  ${name}  ${plan}  ${date}`);
-    console.log(import_picocolors5.default.dim(`       ${s.id}`));
+    console.log(import_picocolors6.default.dim(`       ${s.id}`));
   }
   console.log("");
 }
@@ -25612,7 +26024,7 @@ async function switchSession() {
   }
   setActiveSession(chosen);
   const s = config.sessions.find((x) => x.id === chosen);
-  console.log(import_picocolors5.default.green(`
+  console.log(import_picocolors6.default.green(`
   \u2713 Switched to ${s?.userName ?? chosen}
 `));
 }
@@ -25630,29 +26042,29 @@ async function deleteSession(id) {
     return;
   }
   removeSession(id);
-  console.log(import_picocolors5.default.green("\n  \u2713 Session deleted\n"));
+  console.log(import_picocolors6.default.green("\n  \u2713 Session deleted\n"));
 }
 
 // src/commands/status.ts
-var import_picocolors6 = __toESM(require("picocolors"));
+var import_picocolors7 = __toESM(require("picocolors"));
 function status() {
   showIntro();
   const config = getConfig();
   const active = config.sessions.find((s) => s.id === config.activeSessionId) ?? null;
-  console.log(import_picocolors6.default.bold("  Status\n"));
-  console.log(`  Plugin ID   ${import_picocolors6.default.dim(config.pluginId || "not generated yet")}`);
+  console.log(import_picocolors7.default.bold("  Status\n"));
+  console.log(`  Plugin ID   ${import_picocolors7.default.dim(config.pluginId || "not generated yet")}`);
   console.log(`  Sessions    ${config.sessions.length} paired`);
   if (active) {
-    console.log(`  Active      ${import_picocolors6.default.bold(active.userName)}  ${import_picocolors6.default.cyan(active.plan)}`);
-    console.log(`  Session ID  ${import_picocolors6.default.dim(active.id)}`);
+    console.log(`  Active      ${import_picocolors7.default.bold(active.userName)}  ${import_picocolors7.default.cyan(active.plan)}`);
+    console.log(`  Session ID  ${import_picocolors7.default.dim(active.id)}`);
   } else {
-    console.log(`  Active      ${import_picocolors6.default.yellow("none")}  ${import_picocolors6.default.dim("run codeam pair to connect")}`);
+    console.log(`  Active      ${import_picocolors7.default.yellow("none")}  ${import_picocolors7.default.dim("run codeam pair to connect")}`);
   }
   console.log("");
 }
 
 // src/commands/logout.ts
-var import_picocolors7 = __toESM(require("picocolors"));
+var import_picocolors8 = __toESM(require("picocolors"));
 var API_BASE11 = resolveApiBaseUrl();
 async function notifyBackendOffline() {
   const cfg = loadCliConfig();
@@ -25686,17 +26098,17 @@ async function logout() {
   }
   await notifyBackendOffline();
   clearAll();
-  console.log(import_picocolors7.default.green("\n  \u2713 Done. All sessions removed.\n"));
+  console.log(import_picocolors8.default.green("\n  \u2713 Done. All sessions removed.\n"));
 }
 
 // src/commands/deploy.ts
-var import_picocolors10 = __toESM(require("picocolors"));
+var import_picocolors11 = __toESM(require("picocolors"));
 
 // src/services/providers/github-codespaces.ts
 var import_child_process23 = require("child_process");
 var import_util4 = require("util");
-var import_picocolors8 = __toESM(require("picocolors"));
-var path52 = __toESM(require("path"));
+var import_picocolors9 = __toESM(require("picocolors"));
+var path54 = __toESM(require("path"));
 var execFileP6 = (0, import_util4.promisify)(import_child_process23.execFile);
 var MAX_BUFFER = 8 * 1024 * 1024;
 function resetStdinForChild() {
@@ -25763,7 +26175,7 @@ var GitHubCodespacesProvider = class {
       if (expectedUser) {
         noteLines.push("");
         noteLines.push(
-          `${import_picocolors8.default.yellow("\u26A0")}  Sign in as ${import_picocolors8.default.cyan(expectedUser)} in the browser.`
+          `${import_picocolors9.default.yellow("\u26A0")}  Sign in as ${import_picocolors9.default.cyan(expectedUser)} in the browser.`
         );
         noteLines.push(
           "   If a different GitHub account is already signed in, sign out"
@@ -25786,7 +26198,7 @@ var GitHubCodespacesProvider = class {
       if (refreshCode !== 0) {
         const lines = [
           "The browser approval came back for a different GitHub account",
-          `than the one gh is configured for${expectedUser ? ` (${import_picocolors8.default.cyan(expectedUser)})` : ""}.`,
+          `than the one gh is configured for${expectedUser ? ` (${import_picocolors9.default.cyan(expectedUser)})` : ""}.`,
           "",
           "To recover:",
           "  1. Open https://github.com and sign out of any non-target",
@@ -25795,7 +26207,7 @@ var GitHubCodespacesProvider = class {
           "",
           "You can also grant the scope manually first and skip this step",
           "on the next run:",
-          `  ${import_picocolors8.default.cyan("gh auth refresh -h github.com -s codespace")}`
+          `  ${import_picocolors9.default.cyan("gh auth refresh -h github.com -s codespace")}`
         ];
         throw new Error(lines.join("\n"));
       }
@@ -25862,7 +26274,7 @@ var GitHubCodespacesProvider = class {
   async tryInstallGh() {
     const platform3 = process.platform;
     wt(
-      `GitHub CLI (${import_picocolors8.default.cyan("gh")}) is required for Codespaces deploys but isn't on your PATH.`,
+      `GitHub CLI (${import_picocolors9.default.cyan("gh")}) is required for Codespaces deploys but isn't on your PATH.`,
       "Heads up"
     );
     if (platform3 === "linux") {
@@ -25918,7 +26330,7 @@ var GitHubCodespacesProvider = class {
       return;
     }
     const proceed = await ot2({
-      message: `Run ${import_picocolors8.default.cyan(installCmd.describe)} now?`,
+      message: `Run ${import_picocolors9.default.cyan(installCmd.describe)} now?`,
       initialValue: true
     });
     if (q(proceed) || !proceed) return;
@@ -26185,7 +26597,7 @@ var GitHubCodespacesProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path52.posix.dirname(remotePath);
+    const remoteDir = path54.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote(remoteDir)}`,
       `cat > ${shellQuote(remotePath)}`
@@ -26255,8 +26667,8 @@ function shellQuote(s) {
 // src/services/providers/gitpod.ts
 var import_child_process24 = require("child_process");
 var import_util5 = require("util");
-var path53 = __toESM(require("path"));
-var import_picocolors9 = __toESM(require("picocolors"));
+var path55 = __toESM(require("path"));
+var import_picocolors10 = __toESM(require("picocolors"));
 var execFileP7 = (0, import_util5.promisify)(import_child_process24.execFile);
 var MAX_BUFFER2 = 8 * 1024 * 1024;
 function resetStdinForChild2() {
@@ -26495,7 +26907,7 @@ var GitpodProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path53.posix.dirname(remotePath);
+    const remoteDir = path55.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote2(remoteDir)}`,
       `cat > ${shellQuote2(remotePath)}`
@@ -26531,7 +26943,7 @@ function shellQuote2(s) {
 // src/services/providers/gitlab-workspaces.ts
 var import_child_process25 = require("child_process");
 var import_util6 = require("util");
-var path54 = __toESM(require("path"));
+var path56 = __toESM(require("path"));
 var execFileP8 = (0, import_util6.promisify)(import_child_process25.execFile);
 var MAX_BUFFER3 = 8 * 1024 * 1024;
 var GITLAB_API_BASE = process.env.CODEAM_GITLAB_API_URL ?? "https://gitlab.com/api/v4";
@@ -26791,7 +27203,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
-    const remoteDir = path54.posix.dirname(remotePath);
+    const remoteDir = path56.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote3(remoteDir)}`, `cat > ${shellQuote3(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote3(remotePath)}`);
@@ -26859,7 +27271,7 @@ function shellQuote3(s) {
 // src/services/providers/railway.ts
 var import_child_process26 = require("child_process");
 var import_util7 = require("util");
-var path55 = __toESM(require("path"));
+var path57 = __toESM(require("path"));
 var execFileP9 = (0, import_util7.promisify)(import_child_process26.execFile);
 var MAX_BUFFER4 = 8 * 1024 * 1024;
 function resetStdinForChild4() {
@@ -27095,7 +27507,7 @@ var RailwayProvider = class {
     if (!projectId || !serviceId) {
       throw new Error("Invalid Railway workspace id (expected projectId/serviceId).");
     }
-    const remoteDir = path55.posix.dirname(remotePath);
+    const remoteDir = path57.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote4(remoteDir)}`, `cat > ${shellQuote4(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote4(remotePath)}`);
@@ -27136,7 +27548,7 @@ var PROVIDERS = [
 // src/commands/deploy.ts
 async function deploy(args2 = []) {
   console.log();
-  mt(import_picocolors10.default.bgMagenta(import_picocolors10.default.white(" codeam deploy ")));
+  mt(import_picocolors11.default.bgMagenta(import_picocolors11.default.white(" codeam deploy ")));
   const provider = await pickProvider();
   if (!provider) {
     pt("No provider selected.");
@@ -27173,7 +27585,7 @@ async function deploy(args2 = []) {
     if (provider.expandListScopes) {
       options.push({
         value: EXPAND_SCOPES,
-        label: import_picocolors10.default.cyan("+ Don't see your project? Expand scopes\u2026"),
+        label: import_picocolors11.default.cyan("+ Don't see your project? Expand scopes\u2026"),
         hint: "Re-authorize with broader scopes (org / team repos)"
       });
     }
@@ -27221,7 +27633,7 @@ async function deploy(args2 = []) {
             label: w3.displayName ?? w3.id,
             hint: [w3.state, formatLastUsed(w3.lastUsedAt)].filter(Boolean).join(" \xB7 ")
           })),
-          { value: "__new__", label: import_picocolors10.default.green("+ Create a new workspace"), hint: "fresh codespace" }
+          { value: "__new__", label: import_picocolors11.default.green("+ Create a new workspace"), hint: "fresh codespace" }
         ]
       });
       if (q(choice)) {
@@ -27322,12 +27734,12 @@ async function deploy(args2 = []) {
   cliStep.stop("\u2713 codeam-cli installed");
   wt(
     [
-      `Workspace: ${import_picocolors10.default.cyan(workspace.displayName ?? workspace.id)}`,
-      workspace.webUrl ? `Web:       ${import_picocolors10.default.cyan(workspace.webUrl)}` : "",
+      `Workspace: ${import_picocolors11.default.cyan(workspace.displayName ?? workspace.id)}`,
+      workspace.webUrl ? `Web:       ${import_picocolors11.default.cyan(workspace.webUrl)}` : "",
       "",
       `Starting \`codeam pair\` on the workspace (agent: ${AGENT_REGISTRY[agentId].displayName}).`,
       "Scan the QR code from your phone to pair.",
-      import_picocolors10.default.dim("(Once paired, this terminal disconnects automatically; the session stays alive on the codespace.)")
+      import_picocolors11.default.dim("(Once paired, this terminal disconnects automatically; the session stays alive on the codespace.)")
     ].filter(Boolean).join("\n"),
     "Almost there"
   );
@@ -27442,11 +27854,11 @@ async function deploy(args2 = []) {
   ].join("\n");
   const code = (await provider.streamCommand(workspace.id, `bash -lc ${shellQuoteSingle(wrapper)}`)).code;
   if (code === 0) {
-    gt(import_picocolors10.default.green("\u2713 Workspace deployed and paired. Drive from your phone, anywhere."));
+    gt(import_picocolors11.default.green("\u2713 Workspace deployed and paired. Drive from your phone, anywhere."));
   } else if (code === 130) {
-    gt(import_picocolors10.default.yellow("Disconnected from local terminal. Mobile session keeps running on the codespace."));
+    gt(import_picocolors11.default.yellow("Disconnected from local terminal. Mobile session keeps running on the codespace."));
   } else {
-    gt(import_picocolors10.default.yellow('Pairing did not complete. Run "codeam pair" inside the codespace if needed.'));
+    gt(import_picocolors11.default.yellow('Pairing did not complete. Run "codeam pair" inside the codespace if needed.'));
   }
 }
 function shellQuoteSingle(s) {
@@ -27480,7 +27892,7 @@ async function pickProvider() {
     message: "Where do you want to deploy?",
     options: PROVIDERS.map((prov) => ({
       value: prov.id,
-      label: prov.available ? prov.displayName : `${prov.displayName} ${import_picocolors10.default.dim("(coming soon)")}`,
+      label: prov.available ? prov.displayName : `${prov.displayName} ${import_picocolors11.default.dim("(coming soon)")}`,
       hint: prov.tagline
     }))
   });
@@ -27497,27 +27909,27 @@ async function pickProvider() {
 }
 
 // src/commands/deploy-manage.ts
-var import_picocolors11 = __toESM(require("picocolors"));
+var import_picocolors12 = __toESM(require("picocolors"));
 async function deployList() {
   console.log();
-  mt(import_picocolors11.default.bgMagenta(import_picocolors11.default.white(" codeam deploy ls ")));
+  mt(import_picocolors12.default.bgMagenta(import_picocolors12.default.white(" codeam deploy ls ")));
   const workspaces = await collectWorkspacesWithStatus();
   if (workspaces.length === 0) {
-    gt(import_picocolors11.default.dim("No deployed workspaces found."));
+    gt(import_picocolors12.default.dim("No deployed workspaces found."));
     return;
   }
   for (const w3 of workspaces) {
-    const tag = w3.codeamRunning ? import_picocolors11.default.green("\u25CF running") : w3.state === "Available" ? import_picocolors11.default.dim("\u25CB idle") : import_picocolors11.default.dim(`\u25CB ${w3.state ?? "stopped"}`);
-    console.log(`  ${tag}  ${import_picocolors11.default.cyan(w3.displayName ?? w3.id)}  ${import_picocolors11.default.dim("(" + w3.providerName + ")")}`);
+    const tag = w3.codeamRunning ? import_picocolors12.default.green("\u25CF running") : w3.state === "Available" ? import_picocolors12.default.dim("\u25CB idle") : import_picocolors12.default.dim(`\u25CB ${w3.state ?? "stopped"}`);
+    console.log(`  ${tag}  ${import_picocolors12.default.cyan(w3.displayName ?? w3.id)}  ${import_picocolors12.default.dim("(" + w3.providerName + ")")}`);
   }
-  gt(import_picocolors11.default.dim("Use `codeam deploy stop` to terminate a session."));
+  gt(import_picocolors12.default.dim("Use `codeam deploy stop` to terminate a session."));
 }
 async function deployStop() {
   console.log();
-  mt(import_picocolors11.default.bgMagenta(import_picocolors11.default.white(" codeam deploy stop ")));
+  mt(import_picocolors12.default.bgMagenta(import_picocolors12.default.white(" codeam deploy stop ")));
   const workspaces = await collectWorkspacesWithStatus();
   if (workspaces.length === 0) {
-    gt(import_picocolors11.default.dim("No deployed workspaces found."));
+    gt(import_picocolors12.default.dim("No deployed workspaces found."));
     return;
   }
   const choice = await _t({
@@ -27527,7 +27939,7 @@ async function deployStop() {
       label: w3.displayName ?? w3.id,
       hint: [
         w3.providerName,
-        w3.codeamRunning ? import_picocolors11.default.green("\u25CF codeam-pair running") : import_picocolors11.default.dim("\u25CB no codeam-pair"),
+        w3.codeamRunning ? import_picocolors12.default.green("\u25CF codeam-pair running") : import_picocolors12.default.dim("\u25CB no codeam-pair"),
         w3.state ?? ""
       ].filter(Boolean).join(" \xB7 ")
     }))
@@ -27555,7 +27967,7 @@ async function deployStop() {
     O2.info("No codeam-pair process to stop on this workspace.");
   }
   const alsoStop = await ot2({
-    message: `Also stop the workspace ${import_picocolors11.default.cyan(target.displayName ?? target.id)} to save compute hours?`,
+    message: `Also stop the workspace ${import_picocolors12.default.cyan(target.displayName ?? target.id)} to save compute hours?`,
     initialValue: true
   });
   if (!q(alsoStop) && alsoStop) {
@@ -27577,7 +27989,7 @@ async function deployStop() {
       O2.warn(err instanceof Error ? err.message : String(err));
     }
   }
-  gt(import_picocolors11.default.green("\u2713 Done."));
+  gt(import_picocolors12.default.green("\u2713 Done."));
 }
 async function collectWorkspacesWithStatus() {
   const out2 = [];
@@ -27683,9 +28095,9 @@ async function host(args2) {
 var import_node_dns = require("dns");
 var import_node_util5 = require("util");
 var import_node_crypto8 = require("crypto");
-var fs45 = __toESM(require("fs"));
-var path56 = __toESM(require("path"));
-var import_picocolors12 = __toESM(require("picocolors"));
+var fs47 = __toESM(require("fs"));
+var path58 = __toESM(require("path"));
+var import_picocolors13 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util5.promisify)(import_node_dns.resolve);
 async function checkDns(apiBase2) {
   const host2 = (() => {
@@ -27740,13 +28152,13 @@ async function checkHealth(apiBase2) {
   }
 }
 function checkConfigDir() {
-  const dir = path56.join(require("os").homedir(), ".codeam");
+  const dir = path58.join(require("os").homedir(), ".codeam");
   try {
-    fs45.mkdirSync(dir, { recursive: true, mode: 448 });
-    const probe = path56.join(dir, ".doctor-probe");
-    fs45.writeFileSync(probe, "ok", { mode: 384 });
-    const read2 = fs45.readFileSync(probe, "utf8");
-    fs45.unlinkSync(probe);
+    fs47.mkdirSync(dir, { recursive: true, mode: 448 });
+    const probe = path58.join(dir, ".doctor-probe");
+    fs47.writeFileSync(probe, "ok", { mode: 384 });
+    const read2 = fs47.readFileSync(probe, "utf8");
+    fs47.unlinkSync(probe);
     if (read2 !== "ok") throw new Error("write/read round-trip mismatch");
     return {
       id: "config-dir",
@@ -27810,7 +28222,7 @@ function checkNodePty() {
       detail: "not required on this platform"
     };
   }
-  const vendoredPath = path56.join(__dirname, "vendor", "node-pty");
+  const vendoredPath = path58.join(__dirname, "vendor", "node-pty");
   for (const target of [vendoredPath, "node-pty"]) {
     try {
       require(target);
@@ -27852,7 +28264,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.39.54" : "0.0.0-dev";
+  const cliVersion = true ? "2.39.56" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -27892,46 +28304,46 @@ async function doctor(args2 = []) {
 function printHumanReport(r) {
   const out2 = process.stderr;
   out2.write(`
-${import_picocolors12.default.bold("  codeam doctor")}
+${import_picocolors13.default.bold("  codeam doctor")}
 
 `);
-  out2.write(`  ${import_picocolors12.default.dim("cli")}      ${r.cliVersion}
+  out2.write(`  ${import_picocolors13.default.dim("cli")}      ${r.cliVersion}
 `);
-  out2.write(`  ${import_picocolors12.default.dim("node")}     ${r.node}
+  out2.write(`  ${import_picocolors13.default.dim("node")}     ${r.node}
 `);
-  out2.write(`  ${import_picocolors12.default.dim("os")}       ${r.platform} ${r.arch}
+  out2.write(`  ${import_picocolors13.default.dim("os")}       ${r.platform} ${r.arch}
 `);
-  out2.write(`  ${import_picocolors12.default.dim("api")}      ${r.apiBase}
+  out2.write(`  ${import_picocolors13.default.dim("api")}      ${r.apiBase}
 `);
   if (process.env.CODEAM_TEST_MODE === "1" || process.env.CODEAM_TEST_MODE?.toLowerCase() === "true") {
-    out2.write(`  ${import_picocolors12.default.dim("mode")}     ${import_picocolors12.default.yellow("TEST_MODE \u2014 using dev preview")}
+    out2.write(`  ${import_picocolors13.default.dim("mode")}     ${import_picocolors13.default.yellow("TEST_MODE \u2014 using dev preview")}
 `);
   } else if (process.env.CODEAM_API_URL) {
-    out2.write(`  ${import_picocolors12.default.dim("mode")}     ${import_picocolors12.default.yellow("CODEAM_API_URL override")}
+    out2.write(`  ${import_picocolors13.default.dim("mode")}     ${import_picocolors13.default.yellow("CODEAM_API_URL override")}
 `);
   }
-  out2.write(`  ${import_picocolors12.default.dim("diag id")}  ${r.diagnosticId}
+  out2.write(`  ${import_picocolors13.default.dim("diag id")}  ${r.diagnosticId}
 `);
   out2.write("\n");
   for (const c2 of r.checks) {
-    const mark = c2.ok ? import_picocolors12.default.green("\u2713") : c2.optional ? import_picocolors12.default.yellow("!") : import_picocolors12.default.red("\u2717");
-    out2.write(`  ${mark} ${c2.label}${import_picocolors12.default.dim(` \u2014 ${c2.detail}`)}
+    const mark = c2.ok ? import_picocolors13.default.green("\u2713") : c2.optional ? import_picocolors13.default.yellow("!") : import_picocolors13.default.red("\u2717");
+    out2.write(`  ${mark} ${c2.label}${import_picocolors13.default.dim(` \u2014 ${c2.detail}`)}
 `);
     if (!c2.ok && c2.hint) {
       for (const line of c2.hint.split("\n")) {
-        out2.write(`      ${import_picocolors12.default.dim(line)}
+        out2.write(`      ${import_picocolors13.default.dim(line)}
 `);
       }
     }
   }
   out2.write("\n");
   if (r.ok) {
-    out2.write(`  ${import_picocolors12.default.green("All checks passed.")}
+    out2.write(`  ${import_picocolors13.default.green("All checks passed.")}
 
 `);
   } else {
     out2.write(
-      `  ${import_picocolors12.default.red("Some checks failed.")} ${import_picocolors12.default.dim("Paste the diagnostic id above when opening a bug report.")}
+      `  ${import_picocolors13.default.red("Some checks failed.")} ${import_picocolors13.default.dim("Paste the diagnostic id above when opening a bug report.")}
 
 `
     );
@@ -28049,118 +28461,118 @@ async function completion(args2) {
 }
 
 // src/commands/version.ts
-var import_picocolors13 = __toESM(require("picocolors"));
+var import_picocolors14 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.39.54" : "unknown";
-  console.log(`${import_picocolors13.default.bold("codeam-cli")} ${import_picocolors13.default.cyan(v)}`);
+  const v = true ? "2.39.56" : "unknown";
+  console.log(`${import_picocolors14.default.bold("codeam-cli")} ${import_picocolors14.default.cyan(v)}`);
 }
 
 // src/commands/help.ts
-var import_picocolors14 = __toESM(require("picocolors"));
+var import_picocolors15 = __toESM(require("picocolors"));
 function help() {
   const lines = [
     "",
-    `  ${import_picocolors14.default.bold(import_picocolors14.default.magenta("codeam-cli"))}  ${import_picocolors14.default.dim("\u2014 remote-control AI coding agents from your phone")}`,
+    `  ${import_picocolors15.default.bold(import_picocolors15.default.magenta("codeam-cli"))}  ${import_picocolors15.default.dim("\u2014 remote-control AI coding agents from your phone")}`,
     "",
-    `  ${import_picocolors14.default.bold("Usage")}`,
-    `     ${import_picocolors14.default.cyan("codeam")} ${import_picocolors14.default.dim("[command]")}`,
+    `  ${import_picocolors15.default.bold("Usage")}`,
+    `     ${import_picocolors15.default.cyan("codeam")} ${import_picocolors15.default.dim("[command]")}`,
     "",
-    `  ${import_picocolors14.default.bold("Commands")}`,
-    `     ${import_picocolors14.default.white("codeam")}                       ${import_picocolors14.default.dim("start the active agent with mobile control")}`,
-    `     ${import_picocolors14.default.white("codeam <agent>")}               ${import_picocolors14.default.dim("start a specific agent \u2014 e.g. claude, codex")}`,
-    `     ${import_picocolors14.default.white("codeam pair")}                  ${import_picocolors14.default.dim("pair a new mobile device (interactive)")}`,
-    `     ${import_picocolors14.default.white("codeam pair --agent <id>")}     ${import_picocolors14.default.dim("pair non-interactively for a specific agent")}`,
-    `     ${import_picocolors14.default.white("codeam sessions")}              ${import_picocolors14.default.dim("list paired devices")}`,
-    `     ${import_picocolors14.default.white("codeam sessions switch")}       ${import_picocolors14.default.dim("switch the active paired session")}`,
-    `     ${import_picocolors14.default.white("codeam sessions delete <id>")}  ${import_picocolors14.default.dim("remove a specific paired session")}`,
-    `     ${import_picocolors14.default.white("codeam status")}                ${import_picocolors14.default.dim("show connection info")}`,
-    `     ${import_picocolors14.default.white("codeam logout")}                ${import_picocolors14.default.dim("remove all paired sessions")}`,
-    `     ${import_picocolors14.default.white("codeam link <agent>")}          ${import_picocolors14.default.dim("link an agent (claude, codex) to your CodeAgent account")}`,
-    `     ${import_picocolors14.default.white("codeam deploy")}                ${import_picocolors14.default.dim("provision a cloud workspace (Codespaces) and pair it")}`,
-    `     ${import_picocolors14.default.white("codeam deploy ls | list")}      ${import_picocolors14.default.dim("list deployed cloud workspaces")}`,
-    `     ${import_picocolors14.default.white("codeam deploy stop | remove")}  ${import_picocolors14.default.dim("stop a deployed workspace session")}`,
-    `     ${import_picocolors14.default.white("codeam doctor")}                ${import_picocolors14.default.dim("run diagnostic checks (DNS, /health, binaries, \u2026)")}`,
-    `     ${import_picocolors14.default.white("codeam completion <shell>")}    ${import_picocolors14.default.dim("emit a bash/zsh/fish completion script")}`,
+    `  ${import_picocolors15.default.bold("Commands")}`,
+    `     ${import_picocolors15.default.white("codeam")}                       ${import_picocolors15.default.dim("start the active agent with mobile control")}`,
+    `     ${import_picocolors15.default.white("codeam <agent>")}               ${import_picocolors15.default.dim("start a specific agent \u2014 e.g. claude, codex")}`,
+    `     ${import_picocolors15.default.white("codeam pair")}                  ${import_picocolors15.default.dim("pair a new mobile device (interactive)")}`,
+    `     ${import_picocolors15.default.white("codeam pair --agent <id>")}     ${import_picocolors15.default.dim("pair non-interactively for a specific agent")}`,
+    `     ${import_picocolors15.default.white("codeam sessions")}              ${import_picocolors15.default.dim("list paired devices")}`,
+    `     ${import_picocolors15.default.white("codeam sessions switch")}       ${import_picocolors15.default.dim("switch the active paired session")}`,
+    `     ${import_picocolors15.default.white("codeam sessions delete <id>")}  ${import_picocolors15.default.dim("remove a specific paired session")}`,
+    `     ${import_picocolors15.default.white("codeam status")}                ${import_picocolors15.default.dim("show connection info")}`,
+    `     ${import_picocolors15.default.white("codeam logout")}                ${import_picocolors15.default.dim("remove all paired sessions")}`,
+    `     ${import_picocolors15.default.white("codeam link <agent>")}          ${import_picocolors15.default.dim("link an agent (claude, codex) to your CodeAgent account")}`,
+    `     ${import_picocolors15.default.white("codeam deploy")}                ${import_picocolors15.default.dim("provision a cloud workspace (Codespaces) and pair it")}`,
+    `     ${import_picocolors15.default.white("codeam deploy ls | list")}      ${import_picocolors15.default.dim("list deployed cloud workspaces")}`,
+    `     ${import_picocolors15.default.white("codeam deploy stop | remove")}  ${import_picocolors15.default.dim("stop a deployed workspace session")}`,
+    `     ${import_picocolors15.default.white("codeam doctor")}                ${import_picocolors15.default.dim("run diagnostic checks (DNS, /health, binaries, \u2026)")}`,
+    `     ${import_picocolors15.default.white("codeam completion <shell>")}    ${import_picocolors15.default.dim("emit a bash/zsh/fish completion script")}`,
     "",
-    `  ${import_picocolors14.default.bold("Flags")}`,
-    `     ${import_picocolors14.default.white("-v, --version")}                ${import_picocolors14.default.dim("print the CLI version")}`,
-    `     ${import_picocolors14.default.white("-h, --help")}                   ${import_picocolors14.default.dim("show this help")}`,
+    `  ${import_picocolors15.default.bold("Flags")}`,
+    `     ${import_picocolors15.default.white("-v, --version")}                ${import_picocolors15.default.dim("print the CLI version")}`,
+    `     ${import_picocolors15.default.white("-h, --help")}                   ${import_picocolors15.default.dim("show this help")}`,
     "",
-    `  ${import_picocolors14.default.bold("Links")}`,
-    `     ${import_picocolors14.default.dim("Docs:")}     ${import_picocolors14.default.green("https://www.codeagent-mobile.com")}`,
-    `     ${import_picocolors14.default.dim("Issues:")}   ${import_picocolors14.default.green("https://github.com/edgar-durand/codeagent-mobile-clients/issues")}`,
+    `  ${import_picocolors15.default.bold("Links")}`,
+    `     ${import_picocolors15.default.dim("Docs:")}     ${import_picocolors15.default.green("https://www.codeagent-mobile.com")}`,
+    `     ${import_picocolors15.default.dim("Issues:")}   ${import_picocolors15.default.green("https://github.com/edgar-durand/codeagent-mobile-clients/issues")}`,
     ""
   ];
   process.stdout.write(lines.join("\n") + "\n");
 }
 
 // src/commands/subcommand-help.ts
-var import_picocolors15 = __toESM(require("picocolors"));
+var import_picocolors16 = __toESM(require("picocolors"));
 var HELPS = {
   pair: () => print([
-    `  ${import_picocolors15.default.bold("codeam pair")}  ${import_picocolors15.default.dim("\u2014 pair a mobile device with this CLI")}`,
+    `  ${import_picocolors16.default.bold("codeam pair")}  ${import_picocolors16.default.dim("\u2014 pair a mobile device with this CLI")}`,
     "",
-    `     ${import_picocolors15.default.cyan("codeam pair")}                  ${import_picocolors15.default.dim("interactive pairing (prompts for the agent)")}`,
-    `     ${import_picocolors15.default.cyan("codeam pair --agent <id>")}     ${import_picocolors15.default.dim("pair non-interactively (agent: claude | codex)")}`,
-    `     ${import_picocolors15.default.cyan("codeam pair --dry-run")}        ${import_picocolors15.default.dim("request a pairing code, validate the response, exit")}`
+    `     ${import_picocolors16.default.cyan("codeam pair")}                  ${import_picocolors16.default.dim("interactive pairing (prompts for the agent)")}`,
+    `     ${import_picocolors16.default.cyan("codeam pair --agent <id>")}     ${import_picocolors16.default.dim("pair non-interactively (agent: claude | codex)")}`,
+    `     ${import_picocolors16.default.cyan("codeam pair --dry-run")}        ${import_picocolors16.default.dim("request a pairing code, validate the response, exit")}`
   ]),
   "pair-auto": () => print([
-    `  ${import_picocolors15.default.bold("codeam pair-auto")}  ${import_picocolors15.default.dim("\u2014 non-interactive variant of pair for scripted setups")}`,
+    `  ${import_picocolors16.default.bold("codeam pair-auto")}  ${import_picocolors16.default.dim("\u2014 non-interactive variant of pair for scripted setups")}`,
     "",
-    `     ${import_picocolors15.default.cyan("codeam pair-auto --agent <id>")}  ${import_picocolors15.default.dim("pair using the supplied agent id; exit on success or timeout")}`
+    `     ${import_picocolors16.default.cyan("codeam pair-auto --agent <id>")}  ${import_picocolors16.default.dim("pair using the supplied agent id; exit on success or timeout")}`
   ]),
   link: () => print([
-    `  ${import_picocolors15.default.bold("codeam link <agent>")}  ${import_picocolors15.default.dim("\u2014 upload a local agent token (Claude or Codex) to your vault")}`,
+    `  ${import_picocolors16.default.bold("codeam link <agent>")}  ${import_picocolors16.default.dim("\u2014 upload a local agent token (Claude or Codex) to your vault")}`,
     "",
-    `     ${import_picocolors15.default.cyan("codeam link claude")}`,
-    `     ${import_picocolors15.default.cyan("codeam link codex")}`,
+    `     ${import_picocolors16.default.cyan("codeam link claude")}`,
+    `     ${import_picocolors16.default.cyan("codeam link codex")}`,
     "",
-    `     ${import_picocolors15.default.white("--api-key=<key>")}      ${import_picocolors15.default.dim("paste an API key directly (visible in `ps -ef`)")}`,
-    `     ${import_picocolors15.default.white("--api-key-file=<path>")} ${import_picocolors15.default.dim("read API key from a file (recommended for CI / scripts)")}`,
-    `     ${import_picocolors15.default.white("--reuse-existing")}     ${import_picocolors15.default.dim("upload existing creds without re-launching the agent login")}`,
-    `     ${import_picocolors15.default.white("--token-file=<path>")}  ${import_picocolors15.default.dim("manual credential blob path for unusual vendor locations")}`,
-    `     ${import_picocolors15.default.white("--dry-run")}            ${import_picocolors15.default.dim("probe the /api/plugin/agents/<agent>/link endpoint and exit")}`
+    `     ${import_picocolors16.default.white("--api-key=<key>")}      ${import_picocolors16.default.dim("paste an API key directly (visible in `ps -ef`)")}`,
+    `     ${import_picocolors16.default.white("--api-key-file=<path>")} ${import_picocolors16.default.dim("read API key from a file (recommended for CI / scripts)")}`,
+    `     ${import_picocolors16.default.white("--reuse-existing")}     ${import_picocolors16.default.dim("upload existing creds without re-launching the agent login")}`,
+    `     ${import_picocolors16.default.white("--token-file=<path>")}  ${import_picocolors16.default.dim("manual credential blob path for unusual vendor locations")}`,
+    `     ${import_picocolors16.default.white("--dry-run")}            ${import_picocolors16.default.dim("probe the /api/plugin/agents/<agent>/link endpoint and exit")}`
   ]),
   sessions: () => print([
-    `  ${import_picocolors15.default.bold("codeam sessions")}  ${import_picocolors15.default.dim("\u2014 list, switch, or delete paired mobile sessions")}`,
+    `  ${import_picocolors16.default.bold("codeam sessions")}  ${import_picocolors16.default.dim("\u2014 list, switch, or delete paired mobile sessions")}`,
     "",
-    `     ${import_picocolors15.default.cyan("codeam sessions")}              ${import_picocolors15.default.dim("list all paired sessions on this machine")}`,
-    `     ${import_picocolors15.default.cyan("codeam sessions switch")}       ${import_picocolors15.default.dim("interactively switch the active session")}`,
-    `     ${import_picocolors15.default.cyan("codeam sessions delete <id>")}  ${import_picocolors15.default.dim("remove a specific paired session")}`
+    `     ${import_picocolors16.default.cyan("codeam sessions")}              ${import_picocolors16.default.dim("list all paired sessions on this machine")}`,
+    `     ${import_picocolors16.default.cyan("codeam sessions switch")}       ${import_picocolors16.default.dim("interactively switch the active session")}`,
+    `     ${import_picocolors16.default.cyan("codeam sessions delete <id>")}  ${import_picocolors16.default.dim("remove a specific paired session")}`
   ]),
   deploy: () => print([
-    `  ${import_picocolors15.default.bold("codeam deploy")}  ${import_picocolors15.default.dim("\u2014 provision a cloud workspace (GitHub Codespaces) and pair it")}`,
+    `  ${import_picocolors16.default.bold("codeam deploy")}  ${import_picocolors16.default.dim("\u2014 provision a cloud workspace (GitHub Codespaces) and pair it")}`,
     "",
-    `     ${import_picocolors15.default.cyan("codeam deploy")}                ${import_picocolors15.default.dim("start a new deploy (prompts for repo + agent)")}`,
-    `     ${import_picocolors15.default.cyan("codeam deploy ls | list")}      ${import_picocolors15.default.dim("list deployed cloud workspaces")}`,
-    `     ${import_picocolors15.default.cyan("codeam deploy stop | remove")}  ${import_picocolors15.default.dim("pick a workspace and stop its codeam-pair session")}`
+    `     ${import_picocolors16.default.cyan("codeam deploy")}                ${import_picocolors16.default.dim("start a new deploy (prompts for repo + agent)")}`,
+    `     ${import_picocolors16.default.cyan("codeam deploy ls | list")}      ${import_picocolors16.default.dim("list deployed cloud workspaces")}`,
+    `     ${import_picocolors16.default.cyan("codeam deploy stop | remove")}  ${import_picocolors16.default.dim("pick a workspace and stop its codeam-pair session")}`
   ]),
   status: () => print([
-    `  ${import_picocolors15.default.bold("codeam status")}  ${import_picocolors15.default.dim("\u2014 show the active session, agent, and connection info")}`
+    `  ${import_picocolors16.default.bold("codeam status")}  ${import_picocolors16.default.dim("\u2014 show the active session, agent, and connection info")}`
   ]),
   logout: () => print([
-    `  ${import_picocolors15.default.bold("codeam logout")}  ${import_picocolors15.default.dim("\u2014 remove every paired session from this machine")}`
+    `  ${import_picocolors16.default.bold("codeam logout")}  ${import_picocolors16.default.dim("\u2014 remove every paired session from this machine")}`
   ]),
   doctor: () => print([
-    `  ${import_picocolors15.default.bold("codeam doctor")}  ${import_picocolors15.default.dim("\u2014 run diagnostic checks for support triage")}`,
+    `  ${import_picocolors16.default.bold("codeam doctor")}  ${import_picocolors16.default.dim("\u2014 run diagnostic checks for support triage")}`,
     "",
-    `     ${import_picocolors15.default.cyan("codeam doctor")}          ${import_picocolors15.default.dim("human-readable report")}`,
-    `     ${import_picocolors15.default.cyan("codeam doctor --json")}   ${import_picocolors15.default.dim("machine-parseable report (single JSON document on stdout)")}`,
+    `     ${import_picocolors16.default.cyan("codeam doctor")}          ${import_picocolors16.default.dim("human-readable report")}`,
+    `     ${import_picocolors16.default.cyan("codeam doctor --json")}   ${import_picocolors16.default.dim("machine-parseable report (single JSON document on stdout)")}`,
     "",
-    `     ${import_picocolors15.default.dim("Output never includes tokens or credentials. Paste the diagnostic id")}`,
-    `     ${import_picocolors15.default.dim("into a bug report so support can grep the server-side logs.")}`
+    `     ${import_picocolors16.default.dim("Output never includes tokens or credentials. Paste the diagnostic id")}`,
+    `     ${import_picocolors16.default.dim("into a bug report so support can grep the server-side logs.")}`
   ]),
   completion: () => print([
-    `  ${import_picocolors15.default.bold("codeam completion <shell>")}  ${import_picocolors15.default.dim("\u2014 emit a shell-completion script for sourcing")}`,
+    `  ${import_picocolors16.default.bold("codeam completion <shell>")}  ${import_picocolors16.default.dim("\u2014 emit a shell-completion script for sourcing")}`,
     "",
-    `     ${import_picocolors15.default.cyan("codeam completion bash")}  ${import_picocolors15.default.dim("print a bash completion function")}`,
-    `     ${import_picocolors15.default.cyan("codeam completion zsh")}   ${import_picocolors15.default.dim("print a zsh completion function")}`,
-    `     ${import_picocolors15.default.cyan("codeam completion fish")}  ${import_picocolors15.default.dim("print a fish completion file")}`,
+    `     ${import_picocolors16.default.cyan("codeam completion bash")}  ${import_picocolors16.default.dim("print a bash completion function")}`,
+    `     ${import_picocolors16.default.cyan("codeam completion zsh")}   ${import_picocolors16.default.dim("print a zsh completion function")}`,
+    `     ${import_picocolors16.default.cyan("codeam completion fish")}  ${import_picocolors16.default.dim("print a fish completion file")}`,
     "",
-    `     ${import_picocolors15.default.dim("Examples:")}`,
-    `     ${import_picocolors15.default.dim("  bash:  codeam completion bash >> ~/.bashrc")}`,
-    `     ${import_picocolors15.default.dim("  zsh:   codeam completion zsh >> ~/.zshrc")}`,
-    `     ${import_picocolors15.default.dim("  fish:  codeam completion fish > ~/.config/fish/completions/codeam.fish")}`
+    `     ${import_picocolors16.default.dim("Examples:")}`,
+    `     ${import_picocolors16.default.dim("  bash:  codeam completion bash >> ~/.bashrc")}`,
+    `     ${import_picocolors16.default.dim("  zsh:   codeam completion zsh >> ~/.zshrc")}`,
+    `     ${import_picocolors16.default.dim("  fish:  codeam completion fish > ~/.config/fish/completions/codeam.fish")}`
   ])
 };
 function print(lines) {
@@ -28178,179 +28590,6 @@ function tryShowSubcommandHelp(cmd, args2) {
 }
 var _subcommandHelpKeys = Object.keys(HELPS);
 
-// src/lib/updateNotifier.ts
-var fs46 = __toESM(require("fs"));
-var os37 = __toESM(require("os"));
-var path57 = __toESM(require("path"));
-var https8 = __toESM(require("https"));
-var import_node_child_process15 = require("child_process");
-var import_picocolors16 = __toESM(require("picocolors"));
-var PKG_NAME = "codeam-cli";
-var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
-var TTL_MS = 24 * 60 * 60 * 1e3;
-var REQUEST_TIMEOUT_MS = 1500;
-function cachePath() {
-  const dir = path57.join(os37.homedir(), ".codeam");
-  return path57.join(dir, "update-check.json");
-}
-function readCache() {
-  try {
-    const raw = fs46.readFileSync(cachePath(), "utf8");
-    const parsed = JSON.parse(raw);
-    if (typeof parsed.fetchedAt !== "number" || typeof parsed.latest !== "string") return null;
-    return parsed;
-  } catch {
-    return null;
-  }
-}
-function writeCache(cache) {
-  try {
-    const file = cachePath();
-    fs46.mkdirSync(path57.dirname(file), { recursive: true });
-    const tmp = `${file}.${process.pid}.tmp`;
-    fs46.writeFileSync(tmp, JSON.stringify(cache));
-    fs46.renameSync(tmp, file);
-  } catch {
-  }
-}
-function compareSemver(a, b) {
-  const stripPre = (s) => s.split("-")[0];
-  const aParts = stripPre(a).split(".").map(Number);
-  const bParts = stripPre(b).split(".").map(Number);
-  for (let i = 0; i < 3; i++) {
-    const ai = aParts[i] ?? 0;
-    const bi = bParts[i] ?? 0;
-    if (Number.isNaN(ai) || Number.isNaN(bi)) return 0;
-    if (ai > bi) return 1;
-    if (ai < bi) return -1;
-  }
-  return 0;
-}
-function fetchLatest() {
-  return new Promise((resolve7) => {
-    const req = https8.get(
-      REGISTRY_URL,
-      { headers: { Accept: "application/json" }, timeout: REQUEST_TIMEOUT_MS },
-      (res) => {
-        if (res.statusCode !== 200) {
-          res.resume();
-          resolve7(null);
-          return;
-        }
-        let buf = "";
-        res.setEncoding("utf8");
-        res.on("data", (chunk) => {
-          buf += chunk;
-        });
-        res.on("end", () => {
-          try {
-            const json = JSON.parse(buf);
-            if (typeof json.version === "string") {
-              resolve7(json.version);
-            } else {
-              resolve7(null);
-            }
-          } catch {
-            resolve7(null);
-          }
-        });
-      }
-    );
-    req.on("timeout", () => {
-      req.destroy();
-      resolve7(null);
-    });
-    req.on("error", () => resolve7(null));
-  });
-}
-function notifyIfStale(currentVersion, latest) {
-  if (compareSemver(latest, currentVersion) <= 0) return;
-  const arrow = import_picocolors16.default.dim("\u2192");
-  const cmd = import_picocolors16.default.cyan("npm install -g codeam-cli");
-  const lines = [
-    "",
-    `  ${import_picocolors16.default.yellow("\u25CF")} ${import_picocolors16.default.bold("Update available")} ${import_picocolors16.default.dim(currentVersion)} ${arrow} ${import_picocolors16.default.green(latest)}`,
-    `    Run ${cmd} to upgrade.`,
-    ""
-  ];
-  process.stderr.write(lines.join("\n"));
-}
-function isLinkedInstall() {
-  try {
-    const root = (0, import_node_child_process15.execSync)("npm root -g", {
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"],
-      timeout: 2e3
-    }).trim();
-    if (!root) return false;
-    const pkgPath = path57.join(root, PKG_NAME);
-    return fs46.lstatSync(pkgPath).isSymbolicLink();
-  } catch {
-    return false;
-  }
-}
-function maybeAutoUpdate(currentVersion, latest) {
-  if (compareSemver(latest, currentVersion) <= 0) return;
-  if (process.env.CODEAM_NO_AUTO_UPDATE === "1") {
-    notifyIfStale(currentVersion, latest);
-    return;
-  }
-  if (isLinkedInstall()) {
-    notifyIfStale(currentVersion, latest);
-    return;
-  }
-  process.stderr.write(
-    `
-  ${import_picocolors16.default.yellow("\u25CF")} ${import_picocolors16.default.bold("Updating codeam-cli")} ${import_picocolors16.default.dim(currentVersion)} ${import_picocolors16.default.dim("\u2192")} ${import_picocolors16.default.green(latest)}...
-
-`
-  );
-  const install = (0, import_node_child_process15.spawnSync)("npm", ["install", "-g", `${PKG_NAME}@latest`], {
-    stdio: "inherit",
-    env: process.env
-  });
-  if (install.status !== 0) {
-    process.stderr.write(
-      `
-  ${import_picocolors16.default.red("!")} Update failed (exit ${install.status ?? "?"}). Continuing on ${currentVersion}.
-    Run ${import_picocolors16.default.cyan("npm install -g codeam-cli")} manually to retry.
-
-`
-    );
-    return;
-  }
-  try {
-    fs46.unlinkSync(cachePath());
-  } catch {
-  }
-  process.stderr.write(`  ${import_picocolors16.default.green("\u2713")} Updated. Resuming session...
-
-`);
-  const child = (0, import_node_child_process15.spawnSync)("codeam", process.argv.slice(2), {
-    stdio: "inherit",
-    env: process.env
-  });
-  process.exit(child.status ?? 0);
-}
-function checkForUpdates() {
-  if (process.env.NODE_ENV === "test") return;
-  if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
-  if (process.env.CI) return;
-  if (!process.stdout.isTTY) return;
-  const current = true ? "2.39.54" : null;
-  if (!current) return;
-  const cache = readCache();
-  const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
-  if (fresh && cache) {
-    maybeAutoUpdate(current, cache.latest);
-    return;
-  }
-  void fetchLatest().then((latest) => {
-    if (!latest) return;
-    writeCache({ fetchedAt: Date.now(), latest });
-  });
-}
-
 // src/exit-codes.ts
 var EXIT_OK = 0;
 var EXIT_FAILURE = 1;