codeam-cli 2.39.82 → 2.39.84

package/dist/index.js

@@ -515,9 +515,9 @@ var _default = makeConfig();
 var { getConfig, ensurePluginId, addSession, removeSession, setActiveSession, getActiveSession, getActiveSessionForAgent, clearAll, saveCliConfig, loadCliConfig } = _default;
 
 // src/commands/pair-auto.ts
-var fs40 = __toESM(require("fs"));
-var os33 = __toESM(require("os"));
-var path46 = __toESM(require("path"));
+var fs41 = __toESM(require("fs"));
+var os34 = __toESM(require("os"));
+var path47 = __toESM(require("path"));
 var import_crypto4 = require("crypto");
 
 // src/services/telemetry.service.ts
@@ -553,8 +553,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? (0, import_pat
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path59) {
-  return path59.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path60) {
+  return path60.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 
 // ../../node_modules/@posthog/core/dist/featureFlagUtils.mjs
@@ -3034,9 +3034,9 @@ async function addSourceContext(frames) {
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-function getContextLinesFromFile(path59, ranges, output) {
+function getContextLinesFromFile(path60, ranges, output) {
   return new Promise((resolve7) => {
-    const stream = (0, import_node_fs.createReadStream)(path59);
+    const stream = (0, import_node_fs.createReadStream)(path60);
     const lineReaded = (0, import_node_readline.createInterface)({
       input: stream
     });
@@ -3051,7 +3051,7 @@ function getContextLinesFromFile(path59, ranges, output) {
     let rangeStart = range[0];
     let rangeEnd = range[1];
     function onStreamError() {
-      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path59, 1);
+      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path60, 1);
       lineReaded.close();
       lineReaded.removeAllListeners();
       destroyStreamAndResolve();
@@ -3112,8 +3112,8 @@ function clearLineContext(frame) {
   delete frame.context_line;
   delete frame.post_context;
 }
-function shouldSkipContextLinesForFile(path59) {
-  return path59.startsWith("node:") || path59.endsWith(".min.js") || path59.endsWith(".min.cjs") || path59.endsWith(".min.mjs") || path59.startsWith("data:");
+function shouldSkipContextLinesForFile(path60) {
+  return path60.startsWith("node:") || path60.endsWith(".min.js") || path60.endsWith(".min.cjs") || path60.endsWith(".min.mjs") || path60.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame) {
   if (void 0 !== frame.lineno && frame.lineno > MAX_CONTEXTLINES_LINENO) return true;
@@ -5390,7 +5390,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.39.82" : "0.0.0-dev",
+    cliVersion: true ? "2.39.84" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5549,7 +5549,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.39.82",
+  version: "2.39.84",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6506,10 +6506,10 @@ var WINDOWS_LEGACY_JUNCTIONS = [
   /[\\/]Start Menu([\\/]|$)/i,
   /[\\/]Templates([\\/]|$)/i
 ];
-function isUnsafeWindowsWatchRoot(dir, homedir32) {
+function isUnsafeWindowsWatchRoot(dir, homedir33) {
   const norm = (p2) => p2.replace(/\//g, "\\").replace(/\\+$/, "").toLowerCase();
   const cwd = norm(dir);
-  const home = norm(homedir32);
+  const home = norm(homedir33);
   if (cwd === home) return true;
   if (/^[a-z]:$/.test(cwd)) return true;
   const sysRoots = [
@@ -11048,10 +11048,10 @@ function buildForPlatform(platform3) {
 var import_node_crypto4 = require("crypto");
 
 // src/agents/claude/resolver.ts
-function buildClaudeLaunch(extraArgs = [], os39 = createOsStrategy()) {
-  const found = os39.findInPath("claude") ?? os39.findInPath("claude-code");
+function buildClaudeLaunch(extraArgs = [], os40 = createOsStrategy()) {
+  const found = os40.findInPath("claude") ?? os40.findInPath("claude-code");
   if (!found) return null;
-  return os39.buildLaunch(found, extraArgs);
+  return os40.buildLaunch(found, extraArgs);
 }
 
 // src/agents/claude/installer.ts
@@ -11078,12 +11078,12 @@ function isAvailable() {
 }
 function augmentPath() {
   const dirs = probeInstallDirs();
-  const sep5 = path14.delimiter;
+  const sep6 = path14.delimiter;
   const current = process.env.PATH ?? "";
-  const existing = new Set(current.split(sep5).filter(Boolean));
+  const existing = new Set(current.split(sep6).filter(Boolean));
   const additions = dirs.filter((d3) => !existing.has(d3));
   if (additions.length === 0) return;
-  process.env.PATH = additions.join(sep5) + sep5 + current;
+  process.env.PATH = additions.join(sep6) + sep6 + current;
 }
 function runInstaller() {
   const isWindows = process.platform === "win32";
@@ -11200,13 +11200,34 @@ function readClaudeAgentState() {
 }
 
 // src/agents/claude/link.ts
+function validateClaudeToken(token) {
+  if (token.method !== "oauth") return { status: "unknown" };
+  let oauth;
+  try {
+    const parsed = JSON.parse(token.credential);
+    const inner = parsed.claudeAiOauth;
+    oauth = inner && typeof inner === "object" ? inner : parsed;
+  } catch {
+    return { status: "unknown" };
+  }
+  const expiresAt = typeof oauth.expiresAt === "number" ? oauth.expiresAt : null;
+  if (expiresAt === null) return { status: "unknown" };
+  if (expiresAt >= Date.now()) return { status: "valid" };
+  const hasRefresh = typeof oauth.refreshToken === "string" && oauth.refreshToken.length > 0;
+  if (hasRefresh) return { status: "unknown" };
+  return {
+    status: "expired",
+    reason: "Your local Claude session has expired with no refresh token."
+  };
+}
 function claudeCredentialLocator() {
   return {
     publicId: "claude_code",
     vendor: "Anthropic",
     hint: "~/.claude/.credentials.json or the macOS Keychain",
     watchPaths: claudeCredentialsPaths,
-    extract: extractLocalClaudeToken
+    extract: extractLocalClaudeToken,
+    validate: validateClaudeToken
   };
 }
 function claudeLoginLauncher() {
@@ -11588,8 +11609,8 @@ var ClaudeRuntimeStrategy = class {
   meta = getAgent("claude");
   mode = "interactive";
   os;
-  constructor(os39) {
-    this.os = os39;
+  constructor(os40) {
+    this.os = os40;
   }
   /**
    * Claude Code's react-ink TUI enables bracketed-paste mode at
@@ -12208,8 +12229,8 @@ function codexCredentialLocator() {
 function codexLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os39 = createOsStrategy();
-      return os39.findInPath("codex") !== null;
+      const os40 = createOsStrategy();
+      return os40.findInPath("codex") !== null;
     },
     launch() {
       return (0, import_node_child_process3.spawn)("codex", ["login"], { stdio: "inherit" });
@@ -12232,8 +12253,8 @@ var CodexRuntimeStrategy = class {
   meta = getAgent("codex");
   mode = "interactive";
   os;
-  constructor(os39) {
-    this.os = os39;
+  constructor(os40) {
+    this.os = os40;
   }
   async prepareLaunch() {
     let binary = this.os.findInPath("codex");
@@ -12329,12 +12350,12 @@ var CodexRuntimeStrategy = class {
     });
   }
 };
-function resolveNpm(os39) {
-  return os39.id === "win32" ? "npm.cmd" : "npm";
+function resolveNpm(os40) {
+  return os40.id === "win32" ? "npm.cmd" : "npm";
 }
-async function installCodexViaNpm(os39) {
+async function installCodexViaNpm(os40) {
   return new Promise((resolve7, reject) => {
-    const proc = (0, import_node_child_process4.spawn)(resolveNpm(os39), ["install", "-g", "@openai/codex"], {
+    const proc = (0, import_node_child_process4.spawn)(resolveNpm(os40), ["install", "-g", "@openai/codex"], {
       stdio: "inherit"
     });
     proc.on("close", (code) => {
@@ -12351,16 +12372,16 @@ async function installCodexViaNpm(os39) {
     });
   });
 }
-function augmentNpmGlobalBin(os39) {
+function augmentNpmGlobalBin(os40) {
   try {
-    const result = (0, import_node_child_process4.spawnSync)(resolveNpm(os39), ["prefix", "-g"], {
+    const result = (0, import_node_child_process4.spawnSync)(resolveNpm(os40), ["prefix", "-g"], {
       stdio: ["ignore", "pipe", "ignore"]
     });
     if (result.status !== 0) return;
     const prefix = result.stdout.toString().trim();
     if (!prefix) return;
-    const binDir = os39.id === "win32" ? prefix : path22.join(prefix, "bin");
-    os39.augmentPath([binDir]);
+    const binDir = os40.id === "win32" ? prefix : path22.join(prefix, "bin");
+    os40.augmentPath([binDir]);
   } catch {
   }
 }
@@ -12444,9 +12465,9 @@ var import_node_child_process7 = require("child_process");
 // src/agents/coderabbit/installer.ts
 var import_node_child_process5 = require("child_process");
 var INSTALL_URL = "https://cli.coderabbit.ai/install.sh";
-async function ensureCoderabbitInstalled(os39) {
-  if (os39.findInPath("coderabbit")) return true;
-  if (os39.id === "win32") {
+async function ensureCoderabbitInstalled(os40) {
+  if (os40.findInPath("coderabbit")) return true;
+  if (os40.id === "win32") {
     console.error(
       "\n  \u2717 CodeRabbit on Windows requires WSL.\n    Install the CLI inside your WSL distribution\n    (curl -fsSL https://cli.coderabbit.ai/install.sh | sh)\n    then re-run `codeam link coderabbit` from WSL.\n"
     );
@@ -12461,8 +12482,8 @@ async function ensureCoderabbitInstalled(os39) {
     proc.on("error", () => resolve7(false));
   });
   if (!ok) return false;
-  os39.augmentPath([`${os39.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
-  return os39.findInPath("coderabbit") !== null;
+  os40.augmentPath([`${os40.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
+  return os40.findInPath("coderabbit") !== null;
 }
 
 // src/agents/coderabbit/link.ts
@@ -12470,6 +12491,13 @@ var import_node_child_process6 = require("child_process");
 var fs19 = __toESM(require("fs"));
 var os18 = __toESM(require("os"));
 var path24 = __toESM(require("path"));
+
+// src/agents/strategy.ts
+function validateNonEmptyCredential(token) {
+  return { status: token.credential.trim().length > 0 ? "valid" : "unknown" };
+}
+
+// src/agents/coderabbit/link.ts
 function authPath() {
   return path24.join(os18.homedir(), ".coderabbit", "auth.json");
 }
@@ -12486,13 +12514,14 @@ function coderabbitCredentialLocator() {
     vendor: "CodeRabbit",
     hint: "~/.coderabbit/auth.json",
     watchPaths: () => [authPath()],
-    extract: extractLocalCoderabbitToken
+    extract: extractLocalCoderabbitToken,
+    validate: validateNonEmptyCredential
   };
 }
-function coderabbitLoginLauncher(os39) {
+function coderabbitLoginLauncher(os40) {
   return {
     async ensureInstalled() {
-      return ensureCoderabbitInstalled(os39);
+      return ensureCoderabbitInstalled(os40);
     },
     launch() {
       return (0, import_node_child_process6.spawn)("coderabbit", ["login"], { stdio: "inherit" });
@@ -12515,11 +12544,11 @@ function parseReview(stdout) {
   for (const line of lines) {
     const m = line.match(HUNK_LINE_RE);
     if (!m) continue;
-    const [, path59, lineNo, sevToken, message] = m;
-    if (!path59 || !lineNo || !message) continue;
+    const [, path60, lineNo, sevToken, message] = m;
+    if (!path60 || !lineNo || !message) continue;
     const cleanedMessage = message.trim().replace(/^[*-]\s+/, "");
     hunks.push({
-      path: path59.trim(),
+      path: path60.trim(),
       line: Number(lineNo),
       severity: sevToken ? SEVERITY_MAP[sevToken.toLowerCase()] : void 0,
       message: cleanedMessage
@@ -12538,8 +12567,8 @@ var CoderabbitRuntimeStrategy = class {
   meta = getAgent("coderabbit");
   mode = "batch";
   os;
-  constructor(os39) {
-    this.os = os39;
+  constructor(os40) {
+    this.os = os40;
   }
   getDefaultArgs() {
     return ["review"];
@@ -12651,13 +12680,14 @@ function cursorCredentialLocator() {
     vendor: "Cursor",
     hint: "~/.cursor/auth.json",
     watchPaths: cursorCredentialsPaths,
-    extract: extractLocalCursorToken
+    extract: extractLocalCursorToken,
+    validate: validateNonEmptyCredential
   };
 }
-function cursorLoginLauncher(os39) {
+function cursorLoginLauncher(os40) {
   return {
     async ensureInstalled() {
-      if (os39.findInPath("cursor-agent")) return true;
+      if (os40.findInPath("cursor-agent")) return true;
       console.error(
         "\n  \u2717 cursor-agent binary not on PATH.\n    Install Cursor (https://cursor.com/) and ensure the CLI\n    plugin is enabled, then re-run `codeam link cursor`.\n"
       );
@@ -12719,8 +12749,8 @@ var CursorRuntimeStrategy = class {
   meta = getAgent("cursor");
   mode = "interactive";
   os;
-  constructor(os39) {
-    this.os = os39;
+  constructor(os40) {
+    this.os = os40;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("cursor-agent");
@@ -12837,13 +12867,14 @@ function aiderCredentialLocator() {
     vendor: "Aider",
     hint: "ANTHROPIC_API_KEY / OPENAI_API_KEY env var or ~/.aider.conf.yml",
     watchPaths: aiderCredentialsPaths,
-    extract: extractLocalAiderToken
+    extract: extractLocalAiderToken,
+    validate: validateNonEmptyCredential
   };
 }
-function aiderLoginLauncher(os39) {
+function aiderLoginLauncher(os40) {
   return {
     async ensureInstalled() {
-      if (os39.findInPath("aider")) return true;
+      if (os40.findInPath("aider")) return true;
       console.error(
         "\n  \u2717 aider binary not on PATH.\n    Install Aider:\n      pip install aider-chat\n    then re-run `codeam link aider`.\n"
       );
@@ -12853,7 +12884,7 @@ function aiderLoginLauncher(os39) {
       console.error(
         "\n  Aider has no interactive login flow.\n    Set ANTHROPIC_API_KEY or OPENAI_API_KEY in your shell,\n    or re-run `codeam link aider --api-key=<your-key>`.\n"
       );
-      return (0, import_node_child_process9.spawn)(os39.id === "win32" ? "cmd.exe" : "sh", os39.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
+      return (0, import_node_child_process9.spawn)(os40.id === "win32" ? "cmd.exe" : "sh", os40.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
         stdio: "ignore"
       });
     }
@@ -12925,8 +12956,8 @@ var AiderRuntimeStrategy = class {
   meta = getAgent("aider");
   mode = "interactive";
   os;
-  constructor(os39) {
-    this.os = os39;
+  constructor(os40) {
+    this.os = os40;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("aider");
@@ -13055,8 +13086,8 @@ function geminiCredentialLocator() {
 function geminiLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os39 = createOsStrategy();
-      return os39.findInPath("gemini") !== null;
+      const os40 = createOsStrategy();
+      return os40.findInPath("gemini") !== null;
     },
     launch() {
       return (0, import_node_child_process10.spawn)("gemini", ["auth", "login"], { stdio: "inherit" });
@@ -13089,8 +13120,8 @@ var GeminiRuntimeStrategy = class {
   meta = getAgent("gemini");
   mode = "interactive";
   os;
-  constructor(os39) {
-    this.os = os39;
+  constructor(os40) {
+    this.os = os40;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("gemini");
@@ -13189,18 +13220,18 @@ var GeminiRuntimeStrategy = class {
 
 // src/agents/registry.ts
 var runtimeBuilders = {
-  claude: (os39) => new ClaudeRuntimeStrategy(os39),
-  codex: (os39) => new CodexRuntimeStrategy(os39),
-  coderabbit: (os39) => new CoderabbitRuntimeStrategy(os39),
-  cursor: (os39) => new CursorRuntimeStrategy(os39),
-  aider: (os39) => new AiderRuntimeStrategy(os39),
-  gemini: (os39) => new GeminiRuntimeStrategy(os39)
+  claude: (os40) => new ClaudeRuntimeStrategy(os40),
+  codex: (os40) => new CodexRuntimeStrategy(os40),
+  coderabbit: (os40) => new CoderabbitRuntimeStrategy(os40),
+  cursor: (os40) => new CursorRuntimeStrategy(os40),
+  aider: (os40) => new AiderRuntimeStrategy(os40),
+  gemini: (os40) => new GeminiRuntimeStrategy(os40)
 };
 var deployBuilders = {
   claude: () => new ClaudeDeployStrategy(),
   codex: () => new CodexDeployStrategy()
 };
-function createAgentStrategy(agent, os39 = createOsStrategy()) {
+function createAgentStrategy(agent, os40 = createOsStrategy()) {
   if (!AGENT_REGISTRY[agent]?.enabled) {
     throw new Error(
       `Agent "${agent}" is not supported in this codeam-cli version. Upgrade with 'npm i -g codeam-cli@latest'.`
@@ -13210,10 +13241,10 @@ function createAgentStrategy(agent, os39 = createOsStrategy()) {
   if (!build) {
     throw new Error(`No runtime strategy registered for agent "${agent}"`);
   }
-  return build(os39);
+  return build(os40);
 }
-function createInteractiveAgentStrategy(agent, os39 = createOsStrategy()) {
-  const s = createAgentStrategy(agent, os39);
+function createInteractiveAgentStrategy(agent, os40 = createOsStrategy()) {
+  const s = createAgentStrategy(agent, os40);
   if (s.mode !== "interactive") {
     throw new Error(
       `Agent "${agent}" is a batch agent; use createAgentStrategy + .runOneShot for one-shot reviews.`
@@ -14516,11 +14547,11 @@ function resolveDoltInstallStrategy(platform3) {
 }
 var DOLT_RELEASE_BASE = "https://github.com/dolthub/dolt/releases/latest/download";
 function doltPlatformTuple(platform3, arch2) {
-  const os39 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
+  const os40 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
   const a = arch2 === "x64" ? "amd64" : arch2 === "arm64" ? "arm64" : null;
   if (!a) return null;
-  if (os39 === "windows" && a !== "amd64") return null;
-  return `${os39}-${a}`;
+  if (os40 === "windows" && a !== "amd64") return null;
+  return `${os40}-${a}`;
 }
 function resolveDoltTarballStrategy(targetDir, platform3, arch2) {
   const tuple = doltPlatformTuple(platform3, arch2);
@@ -16838,10 +16869,10 @@ async function startInfraOnly(agentId) {
 }
 
 // src/commands/host-agent.ts
-var import_node_child_process13 = require("child_process");
-var os32 = __toESM(require("os"));
-var fs39 = __toESM(require("fs"));
-var path45 = __toESM(require("path"));
+var import_node_child_process14 = require("child_process");
+var os33 = __toESM(require("os"));
+var fs40 = __toESM(require("fs"));
+var path46 = __toESM(require("path"));
 
 // src/commands/host/host-client.ts
 var fs35 = __toESM(require("fs"));
@@ -17112,6 +17143,61 @@ function repoCloneUrl(repoRef, cloneToken) {
 function maskCloneUrl(url) {
   return url.replace(/(https?:\/\/)[^@/]+@/, "$1***@");
 }
+async function fetchGithubIdentity(token) {
+  try {
+    const res = await fetch("https://api.github.com/user", {
+      headers: {
+        Authorization: `Bearer ${token}`,
+        "User-Agent": "codeam-cli",
+        Accept: "application/vnd.github+json"
+      }
+    });
+    if (!res.ok) return null;
+    const body = await res.json();
+    return { login: body.login, email: body.email ?? void 0 };
+  } catch {
+    return null;
+  }
+}
+async function configureGitCredentials(dest, repoRef, cloneToken) {
+  const gh = githubOwnerRepo(repoRef.trim());
+  if (!gh || !cloneToken) return;
+  const credFile = path42.join(dest, ".git", "codeam-credentials");
+  fs36.writeFileSync(credFile, `https://x-access-token:${cloneToken}@github.com
+`, { mode: 384 });
+  try {
+    fs36.chmodSync(credFile, 384);
+  } catch {
+  }
+  const env = nonInteractiveGitEnv();
+  const git2 = (args2) => execFileP5("git", ["-C", dest, ...args2], { timeout: 3e4, env });
+  const credFilePosix = credFile.split(path42.sep).join("/");
+  await git2(["config", "--local", "--replace-all", "credential.helper", ""]).catch(() => {
+  });
+  await git2([
+    "config",
+    "--local",
+    "--add",
+    "credential.helper",
+    `store --file=${credFilePosix}`
+  ]).catch(() => {
+  });
+  await git2(["remote", "set-url", "origin", repoCloneUrl(repoRef)]).catch(() => {
+  });
+  const hasIdentity = await git2(["config", "user.email"]).then(() => true).catch(() => false);
+  if (!hasIdentity) {
+    const who = await fetchGithubIdentity(cloneToken);
+    if (who?.login) {
+      await git2(["config", "--local", "user.name", who.login]).catch(() => {
+      });
+    }
+    const email = who?.email ?? (who?.login ? `${who.login}@users.noreply.github.com` : void 0);
+    if (email) {
+      await git2(["config", "--local", "user.email", email]).catch(() => {
+      });
+    }
+  }
+}
 function maskToken(text, cloneToken) {
   const masked = maskCloneUrl(text);
   if (cloneToken && cloneToken.length > 0) {
@@ -17128,6 +17214,7 @@ async function prepareWorkspace(repoOrPath, deployId, cloneToken) {
   }
   const dest = path42.join(selfHostedWorkspaceRoot(), deployId);
   if (fs36.existsSync(path42.join(dest, ".git"))) {
+    if (cloneToken) await configureGitCredentials(dest, repoOrPath, cloneToken);
     return dest;
   }
   fs36.mkdirSync(selfHostedWorkspaceRoot(), { recursive: true, mode: 448 });
@@ -17142,6 +17229,7 @@ async function prepareWorkspace(repoOrPath, deployId, cloneToken) {
     const reason = err instanceof Error ? err.message : String(err);
     throw new Error(`git clone failed for ${maskCloneUrl(cloneUrl)}: ${maskToken(reason, cloneToken)}`);
   }
+  if (cloneToken) await configureGitCredentials(dest, repoOrPath, cloneToken);
   return dest;
 }
 
@@ -17215,6 +17303,167 @@ function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os30.homedir(
   return provisioner.write(auth, homeDir2);
 }
 
+// src/commands/host/git-tooling.ts
+var import_node_child_process12 = require("child_process");
+var fs38 = __toESM(require("fs"));
+var os31 = __toESM(require("os"));
+var path44 = __toESM(require("path"));
+function codeamBinDir() {
+  return process.env.CODEAM_BIN_DIR ?? path44.join(os31.homedir(), ".codeam", "bin");
+}
+var FALLBACK_GH_VERSION = "2.62.0";
+var RELEASE_API = "https://api.github.com/repos/cli/cli/releases/latest";
+function ghArch() {
+  if (process.arch === "x64") return "amd64";
+  if (process.arch === "arm64") return "arm64";
+  return null;
+}
+async function resolveLatestGhVersion(token) {
+  try {
+    const headers = {
+      Accept: "application/vnd.github+json",
+      "User-Agent": "codeam-cli"
+    };
+    if (token) headers.Authorization = `Bearer ${token}`;
+    const res = await fetch(RELEASE_API, { headers });
+    if (!res.ok) return FALLBACK_GH_VERSION;
+    const body = await res.json();
+    if (typeof body.tag_name === "string" && body.tag_name) {
+      return body.tag_name.replace(/^v/, "");
+    }
+    return FALLBACK_GH_VERSION;
+  } catch {
+    return FALLBACK_GH_VERSION;
+  }
+}
+async function download(url, dest) {
+  try {
+    const res = await fetch(url, { headers: { "User-Agent": "codeam-cli" } });
+    if (!res.ok || !res.body) return false;
+    const buf = Buffer.from(await res.arrayBuffer());
+    fs38.writeFileSync(dest, buf);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function ensureGhCli(runner, token, deps = {}) {
+  if (runner.which("gh")) return "gh";
+  const arch2 = ghArch();
+  const platform3 = process.platform;
+  if (arch2 === null || platform3 !== "linux" && platform3 !== "darwin" && platform3 !== "win32") {
+    log.warn("host-agent", `gh auto-install unsupported on ${platform3}/${process.arch} \u2014 skipping`);
+    return null;
+  }
+  const osToken = platform3 === "darwin" ? "macOS" : platform3 === "win32" ? "windows" : "linux";
+  const ext = platform3 === "linux" ? "tar.gz" : "zip";
+  const binaryName = platform3 === "win32" ? "gh.exe" : "gh";
+  const downloadFn = deps.downloadFn ?? download;
+  const resolveVersionFn = deps.resolveVersionFn ?? resolveLatestGhVersion;
+  try {
+    const version3 = await resolveVersionFn(token);
+    const asset = `gh_${version3}_${osToken}_${arch2}`;
+    const url = `https://github.com/cli/cli/releases/download/v${version3}/${asset}.${ext}`;
+    const tmpRoot = fs38.mkdtempSync(path44.join(os31.tmpdir(), "codeam-gh-"));
+    const archive = path44.join(tmpRoot, `${asset}.${ext}`);
+    if (!await downloadFn(url, archive)) {
+      log.warn("host-agent", "gh download failed \u2014 skipping (git pull/push still work via the credential helper)");
+      return null;
+    }
+    const extract = await runner.run("tar", ["-xf", archive, "-C", tmpRoot], { timeoutMs: 6e4 });
+    if (extract.code !== 0) {
+      log.warn("host-agent", `gh archive extraction failed (code=${String(extract.code)}) \u2014 skipping`);
+      return null;
+    }
+    const extractedBin = path44.join(tmpRoot, asset, "bin", binaryName);
+    if (!fs38.existsSync(extractedBin)) {
+      log.warn("host-agent", "gh binary not found in the extracted archive \u2014 skipping");
+      return null;
+    }
+    const binDir = codeamBinDir();
+    fs38.mkdirSync(binDir, { recursive: true });
+    const target = path44.join(binDir, binaryName);
+    fs38.copyFileSync(extractedBin, target);
+    fs38.chmodSync(target, 493);
+    log.info("host-agent", `gh installed to ${target} (v${version3})`);
+    return target;
+  } catch (e) {
+    log.warn("host-agent", `gh auto-install errored: ${e instanceof Error ? e.message : String(e)} \u2014 skipping`);
+    return null;
+  }
+}
+async function ensureGhAuth(runner, ghCmd, token) {
+  if (!token) return;
+  try {
+    const status2 = await runner.run(ghCmd, ["auth", "status"], { timeoutMs: 15e3 });
+    if (status2.code === 0) {
+      log.info("host-agent", "gh already authenticated \u2014 leaving the existing login untouched");
+      return;
+    }
+    const login = await runner.run(ghCmd, ["auth", "login", "--with-token"], {
+      timeoutMs: 2e4,
+      input: `${token}
+`
+    });
+    if (login.code === 0) {
+      log.info("host-agent", "gh authenticated with the linked GitHub token");
+    } else {
+      log.warn("host-agent", `gh auth login failed (code=${String(login.code)}) \u2014 gh unauthenticated`);
+    }
+  } catch (e) {
+    log.warn("host-agent", `gh auth errored: ${e instanceof Error ? e.message : String(e)}`);
+  }
+}
+var defaultGitToolingRunner = {
+  which(cmd) {
+    try {
+      const probe = process.platform === "win32" ? "where" : "which";
+      (0, import_node_child_process12.execFileSync)(probe, [cmd], { stdio: "ignore" });
+      return true;
+    } catch {
+      return false;
+    }
+  },
+  run(cmd, args2, opts = {}) {
+    return new Promise((resolve7) => {
+      const child = (0, import_node_child_process12.spawn)(cmd, args2, {
+        stdio: [opts.input !== void 0 ? "pipe" : "ignore", "ignore", "pipe"]
+      });
+      let stderr = "";
+      let settled = false;
+      const done = (code) => {
+        if (settled) return;
+        settled = true;
+        resolve7({ code, stderr });
+      };
+      child.stderr?.on("data", (b) => {
+        stderr += b.toString();
+      });
+      if (opts.input !== void 0) {
+        child.stdin?.end(opts.input);
+      }
+      let timer;
+      if (opts.timeoutMs !== void 0) {
+        timer = setTimeout(() => {
+          try {
+            child.kill("SIGTERM");
+          } catch {
+          }
+          done(null);
+        }, opts.timeoutMs);
+      }
+      child.once("exit", (code) => {
+        if (timer) clearTimeout(timer);
+        done(code);
+      });
+      child.once("error", () => {
+        if (timer) clearTimeout(timer);
+        done(null);
+      });
+    });
+  }
+};
+
 // src/services/headroom/stats-reporter.ts
 var DEFAULT_INPUT_PRICE_PER_MILLION = 3;
 var ZERO = {
@@ -17298,23 +17547,23 @@ var HeadroomStatsReporter = class {
 };
 
 // src/lib/updateNotifier.ts
-var fs38 = __toESM(require("fs"));
-var os31 = __toESM(require("os"));
-var path44 = __toESM(require("path"));
+var fs39 = __toESM(require("fs"));
+var os32 = __toESM(require("os"));
+var path45 = __toESM(require("path"));
 var https6 = __toESM(require("https"));
-var import_node_child_process12 = require("child_process");
+var import_node_child_process13 = require("child_process");
 var import_picocolors3 = __toESM(require("picocolors"));
 var PKG_NAME = "codeam-cli";
 var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
 var TTL_MS = 24 * 60 * 60 * 1e3;
 var REQUEST_TIMEOUT_MS = 1500;
 function cachePath() {
-  const dir = path44.join(os31.homedir(), ".codeam");
-  return path44.join(dir, "update-check.json");
+  const dir = path45.join(os32.homedir(), ".codeam");
+  return path45.join(dir, "update-check.json");
 }
 function readCache() {
   try {
-    const raw = fs38.readFileSync(cachePath(), "utf8");
+    const raw = fs39.readFileSync(cachePath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.fetchedAt !== "number" || typeof parsed.latest !== "string") return null;
     return parsed;
@@ -17325,10 +17574,10 @@ function readCache() {
 function writeCache(cache) {
   try {
     const file = cachePath();
-    fs38.mkdirSync(path44.dirname(file), { recursive: true });
+    fs39.mkdirSync(path45.dirname(file), { recursive: true });
     const tmp = `${file}.${process.pid}.tmp`;
-    fs38.writeFileSync(tmp, JSON.stringify(cache));
-    fs38.renameSync(tmp, file);
+    fs39.writeFileSync(tmp, JSON.stringify(cache));
+    fs39.renameSync(tmp, file);
   } catch {
   }
 }
@@ -17396,14 +17645,14 @@ function notifyIfStale(currentVersion, latest) {
 }
 function isLinkedInstall() {
   try {
-    const root = (0, import_node_child_process12.execSync)("npm root -g", {
+    const root = (0, import_node_child_process13.execSync)("npm root -g", {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 2e3
     }).trim();
     if (!root) return false;
-    const pkgPath = path44.join(root, PKG_NAME);
-    return fs38.lstatSync(pkgPath).isSymbolicLink();
+    const pkgPath = path45.join(root, PKG_NAME);
+    return fs39.lstatSync(pkgPath).isSymbolicLink();
   } catch {
     return false;
   }
@@ -17424,7 +17673,7 @@ function maybeAutoUpdate(currentVersion, latest) {
 
 `
   );
-  const install = (0, import_node_child_process12.spawnSync)("npm", ["install", "-g", `${PKG_NAME}@latest`], {
+  const install = (0, import_node_child_process13.spawnSync)("npm", ["install", "-g", `${PKG_NAME}@latest`], {
     stdio: "inherit",
     env: process.env
   });
@@ -17439,24 +17688,40 @@ function maybeAutoUpdate(currentVersion, latest) {
     return;
   }
   try {
-    fs38.unlinkSync(cachePath());
+    fs39.unlinkSync(cachePath());
   } catch {
   }
   process.stderr.write(`  ${import_picocolors3.default.green("\u2713")} Updated. Resuming session...
 
 `);
-  const child = (0, import_node_child_process12.spawnSync)("codeam", process.argv.slice(2), {
+  const child = (0, import_node_child_process13.spawnSync)("codeam", process.argv.slice(2), {
     stdio: "inherit",
     env: process.env
   });
   process.exit(child.status ?? 0);
 }
+async function autoUpgradeBeforeCriticalCommand() {
+  if (process.env.NODE_ENV === "test") return;
+  if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
+  if (process.env.CI) return;
+  const current = true ? "2.39.84" : null;
+  if (!current) return;
+  const cache = readCache();
+  const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
+  let latest = fresh && cache ? cache.latest : null;
+  if (!latest) {
+    latest = await fetchLatest();
+    if (latest) writeCache({ fetchedAt: Date.now(), latest });
+  }
+  if (!latest) return;
+  maybeAutoUpdate(current, latest);
+}
 function checkForUpdates() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.39.82" : null;
+  const current = true ? "2.39.84" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17565,7 +17830,7 @@ var HEADROOM_MIN_FREE_DISK_BYTES = 2 * 1024 * 1024 * 1024;
 var defaultHeadroomRunner = {
   which(cmd) {
     try {
-      (0, import_node_child_process13.execFileSync)("which", [cmd], { stdio: "ignore" });
+      (0, import_node_child_process14.execFileSync)("which", [cmd], { stdio: "ignore" });
       return true;
     } catch {
       return false;
@@ -17573,7 +17838,7 @@ var defaultHeadroomRunner = {
   },
   run(cmd, args2, opts = {}) {
     return new Promise((resolve7) => {
-      const child = (0, import_node_child_process13.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"] });
+      const child = (0, import_node_child_process14.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"] });
       let stderrBuf = "";
       let settled = false;
       const done = (code) => {
@@ -17727,15 +17992,15 @@ function agentIdToHeadroomKind(agentId) {
   return "claude";
 }
 function headroomConfigPath() {
-  return path45.join(os32.homedir(), ".codeam", "headroom-config.json");
+  return path46.join(os33.homedir(), ".codeam", "headroom-config.json");
 }
 function persistHeadroomConfig(config) {
   try {
     const file = headroomConfigPath();
-    fs39.mkdirSync(path45.dirname(file), { recursive: true, mode: 448 });
+    fs40.mkdirSync(path46.dirname(file), { recursive: true, mode: 448 });
     const tmp = `${file}.tmp-${process.pid}`;
-    fs39.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
-    fs39.renameSync(tmp, file);
+    fs40.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
+    fs40.renameSync(tmp, file);
   } catch (err) {
     log.warn(
       "host-agent",
@@ -17745,7 +18010,7 @@ function persistHeadroomConfig(config) {
 }
 function readHeadroomChildEnv() {
   try {
-    const raw = fs39.readFileSync(headroomConfigPath(), "utf8");
+    const raw = fs40.readFileSync(headroomConfigPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed !== "object" || parsed === null) return {};
     const o = parsed;
@@ -17765,37 +18030,37 @@ function bundledClaudeBinDir() {
   const roots = /* @__PURE__ */ new Set();
   let dir = __dirname;
   for (let i = 0; i < 6; i++) {
-    roots.add(path45.join(dir, "node_modules"));
-    const parent = path45.dirname(dir);
+    roots.add(path46.join(dir, "node_modules"));
+    const parent = path46.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
   try {
     const main2 = require.resolve("@anthropic-ai/claude-agent-sdk");
-    const marker = `${path45.sep}@anthropic-ai${path45.sep}`;
+    const marker = `${path46.sep}@anthropic-ai${path46.sep}`;
     const idx = main2.lastIndexOf(marker);
     if (idx !== -1) roots.add(main2.slice(0, idx));
   } catch {
   }
   for (const nm of roots) {
-    const atAnthropic = path45.join(nm, "@anthropic-ai");
+    const atAnthropic = path46.join(nm, "@anthropic-ai");
     let entries;
     try {
-      entries = fs39.readdirSync(atAnthropic);
+      entries = fs40.readdirSync(atAnthropic);
     } catch {
       continue;
     }
     for (const entry of entries) {
       if (!entry.startsWith("claude-agent-sdk-")) continue;
-      const bin = path45.join(atAnthropic, entry, "claude");
-      if (fs39.existsSync(bin)) return path45.dirname(bin);
+      const bin = path46.join(atAnthropic, entry, "claude");
+      if (fs40.existsSync(bin)) return path46.dirname(bin);
     }
   }
   return null;
 }
 async function getFreeDiskBytes(dir) {
   try {
-    const s = await fs39.promises.statfs(dir);
+    const s = await fs40.promises.statfs(dir);
     return s.bsize * s.bavail;
   } catch {
     return null;
@@ -17845,14 +18110,14 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner)
   if (initKind === "claude") {
     const claudeDir = bundledClaudeBinDir();
     if (claudeDir) {
-      initEnv.PATH = `${claudeDir}${path45.delimiter}${process.env["PATH"] ?? ""}`;
+      initEnv.PATH = `${claudeDir}${path46.delimiter}${process.env["PATH"] ?? ""}`;
       log.info("host-agent", `headroom init: bundled claude on PATH (${claudeDir})`);
     } else {
       log.warn("host-agent", "headroom init: bundled claude binary not found \u2014 init may fail");
     }
   }
   const initOk = await new Promise((resolve7) => {
-    (0, import_node_child_process13.execFile)(
+    (0, import_node_child_process14.execFile)(
       "headroom",
       ["init", "--global", initKind],
       { env: initEnv },
@@ -17873,7 +18138,7 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner)
     return false;
   }
   try {
-    const proxy = (0, import_node_child_process13.spawn)("headroom", ["proxy", "--port", "8787"], {
+    const proxy = (0, import_node_child_process14.spawn)("headroom", ["proxy", "--port", "8787"], {
       stdio: "ignore",
       detached: true,
       env: { ...process.env, HEADROOM_KOMPRESS_BACKEND: "onnx_cpu" }
@@ -17887,18 +18152,18 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner)
   }
   return true;
 }
-var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process13.spawn)(process.execPath, [process.argv[1], "pair-auto", ...args2], {
+var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process14.spawn)(process.execPath, [process.argv[1], "pair-auto", ...args2], {
   cwd,
   env: { ...process.env, ...env },
   stdio: ["ignore", "pipe", "pipe"],
   detached: false
 });
 function currentCliVersion() {
-  return true ? "2.39.82" : null;
+  return true ? "2.39.84" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve7) => {
-    (0, import_node_child_process13.execFile)(cmd, args2, { timeout: timeoutMs }, (err, stdout, stderr) => {
+    (0, import_node_child_process14.execFile)(cmd, args2, { timeout: timeoutMs }, (err, stdout, stderr) => {
       const code = err && typeof err.code === "number" ? err.code : err ? null : 0;
       resolve7({ code, stdout: stdout ?? "", stderr: stderr ?? "" });
     });
@@ -17969,20 +18234,20 @@ var defaultOnUpdated = (version3) => {
 };
 var defaultDisableService = () => {
   try {
-    (0, import_node_child_process13.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
+    (0, import_node_child_process14.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
   } catch {
   }
 };
 var defaultTeardownHeadroom = () => {
   try {
-    const kind = JSON.parse(fs39.readFileSync(headroomConfigPath(), "utf8")).agent;
+    const kind = JSON.parse(fs40.readFileSync(headroomConfigPath(), "utf8")).agent;
     if (kind) {
-      (0, import_node_child_process13.execFileSync)("headroom", ["unwrap", kind], { stdio: "ignore", timeout: 15e3 });
+      (0, import_node_child_process14.execFileSync)("headroom", ["unwrap", kind], { stdio: "ignore", timeout: 15e3 });
     }
   } catch {
   }
   try {
-    (0, import_node_child_process13.execFileSync)("pkill", ["-TERM", "-f", "headroom.*proxy"], { stdio: "ignore" });
+    (0, import_node_child_process14.execFileSync)("pkill", ["-TERM", "-f", "headroom.*proxy"], { stdio: "ignore" });
   } catch {
   }
   persistHeadroomConfig({ enabled: false });
@@ -18303,15 +18568,30 @@ var HostAgentSupervisor = class {
         report("installing", "installing agent CLI");
         await this.runAgentInstall(payload.agentInstallScript);
       }
-      const home = process.env.HOME || os32.homedir();
+      const home = process.env.HOME || os33.homedir();
       childEnv.PATH = `${home}/.local/bin:${process.env.PATH ?? ""}`;
+      if (payload.cloneToken) {
+        try {
+          report("preparing", "configuring git tooling");
+          const ghCmd = await ensureGhCli(defaultGitToolingRunner, payload.cloneToken);
+          if (ghCmd) {
+            childEnv.PATH = `${codeamBinDir()}${path46.delimiter}${childEnv.PATH}`;
+            await ensureGhAuth(defaultGitToolingRunner, ghCmd, payload.cloneToken);
+          }
+        } catch (e) {
+          log.warn(
+            "host-agent",
+            `gh tooling setup skipped: ${e instanceof Error ? e.message : String(e)}`
+          );
+        }
+      }
       if (payload.previewTunnelToken && payload.previewHostname) {
         childEnv.PREVIEW_TUNNEL_TOKEN = payload.previewTunnelToken;
         childEnv.PREVIEW_TUNNEL_HOSTNAME = payload.previewHostname;
       }
       if (payload.headroomEnabled && payload.headroomAgent && payload.headroomSavingsIngestUrl) {
         report("headroom", "setting up Headroom proxy");
-        const freeBytes = await this.getFreeDisk(os32.homedir());
+        const freeBytes = await this.getFreeDisk(os33.homedir());
         const alreadyInstalled = this.isHeadroomInstalled();
         if (!alreadyInstalled && freeBytes !== null && freeBytes < HEADROOM_MIN_FREE_DISK_BYTES) {
           const freeGb = (freeBytes / 1e9).toFixed(1);
@@ -18427,8 +18707,8 @@ var HostAgentSupervisor = class {
    */
   runAgentInstall(script) {
     return new Promise((resolve7) => {
-      const home = process.env.HOME || os32.homedir();
-      const child = (0, import_node_child_process13.spawn)("sh", ["-c", script], {
+      const home = process.env.HOME || os33.homedir();
+      const child = (0, import_node_child_process14.spawn)("sh", ["-c", script], {
         env: { ...process.env, HOME: home },
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -18582,12 +18862,12 @@ function readTokenFromArgs(args2) {
   }
   const fileFlag = args2.find((a) => a.startsWith("--token-file="));
   if (fileFlag) {
-    const path59 = fileFlag.slice("--token-file=".length);
+    const path60 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs40.readFileSync(path59, "utf8").trim();
-      if (content.length === 0) fail(`--token-file ${path59} is empty`);
+      const content = fs41.readFileSync(path60, "utf8").trim();
+      if (content.length === 0) fail(`--token-file ${path60} is empty`);
       try {
-        fs40.unlinkSync(path59);
+        fs41.unlinkSync(path60);
       } catch {
       }
       return content;
@@ -18613,7 +18893,7 @@ async function claimOnce(token, pluginId, pluginSecretHash) {
     pluginId,
     ideName: "codeam-cli (codespace)",
     ideVersion: process.env.npm_package_version ?? "unknown",
-    hostname: os33.hostname(),
+    hostname: os34.hostname(),
     codespaceName: process.env.CODESPACE_NAME ?? "",
     // Current git branch of the codespace's working directory, so the
     // backend can populate `PairedSession.branch` for the codespace pair.
@@ -18674,7 +18954,7 @@ async function claim(token, pluginId, pluginSecretHash) {
   }
 }
 function pairAutoLockPath() {
-  return path46.join(os33.homedir(), ".codeam", "pair-auto.lock");
+  return path47.join(os34.homedir(), ".codeam", "pair-auto.lock");
 }
 function isLivePairAuto(pid) {
   if (!Number.isInteger(pid) || pid <= 0 || pid === process.pid) return false;
@@ -18684,7 +18964,7 @@ function isLivePairAuto(pid) {
     if (e.code !== "EPERM") return false;
   }
   try {
-    return fs40.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
+    return fs41.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
   } catch {
     return true;
   }
@@ -18694,24 +18974,24 @@ function isLiveCodeam(pid) {
 }
 function daemonLockPath(sessionId) {
   const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
-  return path46.join(os33.homedir(), ".codeam", `daemon-${safe}.lock`);
+  return path47.join(os34.homedir(), ".codeam", `daemon-${safe}.lock`);
 }
 function acquireDaemonLock(sessionId) {
   const lockPath = daemonLockPath(sessionId);
   try {
-    fs40.mkdirSync(path46.dirname(lockPath), { recursive: true });
+    fs41.mkdirSync(path47.dirname(lockPath), { recursive: true });
     try {
-      fs40.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs41.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs40.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs41.readFileSync(lockPath, "utf8").trim());
       if (holder && holder !== process.pid && isLiveCodeam(holder)) return false;
-      fs40.writeFileSync(lockPath, String(process.pid));
+      fs41.writeFileSync(lockPath, String(process.pid));
     }
     const release3 = () => {
       try {
-        if (fs40.existsSync(lockPath) && Number(fs40.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs40.unlinkSync(lockPath);
+        if (fs41.existsSync(lockPath) && Number(fs41.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs41.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -18733,19 +19013,19 @@ function acquireDaemonLock(sessionId) {
 function acquireSingletonLock() {
   const lockPath = pairAutoLockPath();
   try {
-    fs40.mkdirSync(path46.dirname(lockPath), { recursive: true });
+    fs41.mkdirSync(path47.dirname(lockPath), { recursive: true });
     try {
-      fs40.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs41.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs40.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs41.readFileSync(lockPath, "utf8").trim());
       if (isLivePairAuto(holder)) return false;
-      fs40.writeFileSync(lockPath, String(process.pid));
+      fs41.writeFileSync(lockPath, String(process.pid));
     }
     process.once("exit", () => {
       try {
-        if (fs40.existsSync(lockPath) && Number(fs40.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs40.unlinkSync(lockPath);
+        if (fs41.existsSync(lockPath) && Number(fs41.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs41.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -18827,7 +19107,7 @@ async function pairAuto(args2) {
 }
 
 // src/services/headroom/wrap-launch.ts
-var import_node_child_process14 = require("child_process");
+var import_node_child_process15 = require("child_process");
 function wrapWithHeadroom(launch, opts) {
   if (!opts.enabled || !opts.headroomPresent) return launch;
   return {
@@ -18840,7 +19120,7 @@ var _present;
 function headroomPresent() {
   if (_present !== void 0) return Promise.resolve(_present);
   return new Promise((resolve7) => {
-    (0, import_node_child_process14.execFile)("headroom", ["--version"], (err) => {
+    (0, import_node_child_process15.execFile)("headroom", ["--version"], (err) => {
       _present = !err;
       resolve7(_present);
     });
@@ -19190,19 +19470,19 @@ var AgentService = class _AgentService {
 };
 
 // src/agents/acp/adapters.ts
-var path47 = __toESM(require("path"));
+var path48 = __toESM(require("path"));
 var require_ = require;
 function resolveBin(pkgName, binName) {
   try {
     const manifestPath = require_.resolve(`${pkgName}/package.json`);
     const manifest = require_(`${pkgName}/package.json`);
-    const pkgDir = path47.dirname(manifestPath);
+    const pkgDir = path48.dirname(manifestPath);
     const bin = manifest.bin;
     if (!bin) return null;
-    if (typeof bin === "string") return path47.resolve(pkgDir, bin);
+    if (typeof bin === "string") return path48.resolve(pkgDir, bin);
     const target = binName ?? Object.keys(bin)[0];
     if (!target || !bin[target]) return null;
-    return path47.resolve(pkgDir, bin[target]);
+    return path48.resolve(pkgDir, bin[target]);
   } catch {
     return null;
   }
@@ -19278,9 +19558,9 @@ function requiresAcp(agent) {
 var import_node_crypto7 = require("crypto");
 
 // src/services/history.service.ts
-var fs41 = __toESM(require("fs"));
-var path48 = __toESM(require("path"));
-var os34 = __toESM(require("os"));
+var fs42 = __toESM(require("fs"));
+var path49 = __toESM(require("path"));
+var os35 = __toESM(require("os"));
 var https7 = __toESM(require("https"));
 var http6 = __toESM(require("http"));
 var import_zod2 = require("zod");
@@ -19307,7 +19587,7 @@ function parseJsonl(filePath) {
   const messages = [];
   let raw;
   try {
-    raw = fs41.readFileSync(filePath, "utf8");
+    raw = fs42.readFileSync(filePath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       log.warn("history:parseJsonl", `read failed for ${filePath}`, err);
@@ -19448,7 +19728,7 @@ var HistoryService = class _HistoryService {
     return this._quotaPercent === null || Date.now() - this._quotaFetchedAt > ttlMs;
   }
   get projectDir() {
-    return this.runtime.resolveHistoryDir(this.cwd) ?? path48.join(os34.homedir(), ".claude", "projects", encodeCwd(this.cwd));
+    return this.runtime.resolveHistoryDir(this.cwd) ?? path49.join(os35.homedir(), ".claude", "projects", encodeCwd(this.cwd));
   }
   /** Set the current Claude conversation ID (extracted from /cost command or session start) */
   setCurrentConversationId(id) {
@@ -19460,7 +19740,7 @@ var HistoryService = class _HistoryService {
   /** Return the current message count in the active conversation. */
   getCurrentMessageCount() {
     if (!this.currentConversationId) return 0;
-    const filePath = path48.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+    const filePath = path49.join(this.projectDir, `${this.currentConversationId}.jsonl`);
     return parseJsonl(filePath).length;
   }
   /**
@@ -19471,7 +19751,7 @@ var HistoryService = class _HistoryService {
     const deadline = Date.now() + timeoutMs;
     while (Date.now() < deadline) {
       if (!this.currentConversationId) return null;
-      const filePath = path48.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+      const filePath = path49.join(this.projectDir, `${this.currentConversationId}.jsonl`);
       const messages = parseJsonl(filePath);
       if (messages.length > previousCount) {
         for (let i = messages.length - 1; i >= previousCount; i--) {
@@ -19497,16 +19777,16 @@ var HistoryService = class _HistoryService {
     const dir = this.projectDir;
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     try {
-      const files = fs41.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
+      const files = fs42.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
         try {
-          const stat3 = fs41.statSync(path48.join(dir, e.name));
+          const stat3 = fs42.statSync(path49.join(dir, e.name));
           return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
         } catch {
           return { name: e.name, mtime: 0, birthtime: 0 };
         }
       }).filter((f) => f.birthtime >= cutoff).sort((a, b) => b.mtime - a.mtime);
       if (files.length > 0) {
-        this.currentConversationId = path48.basename(files[0].name, ".jsonl");
+        this.currentConversationId = path49.basename(files[0].name, ".jsonl");
       }
     } catch {
     }
@@ -19540,13 +19820,13 @@ var HistoryService = class _HistoryService {
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     let entries;
     try {
-      entries = fs41.readdirSync(dir, { withFileTypes: true });
+      entries = fs42.readdirSync(dir, { withFileTypes: true });
     } catch {
       return null;
     }
     const files = entries.filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
       try {
-        const stat3 = fs41.statSync(path48.join(dir, e.name));
+        const stat3 = fs42.statSync(path49.join(dir, e.name));
         return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
       } catch {
         return { name: e.name, mtime: 0, birthtime: 0 };
@@ -19555,12 +19835,12 @@ var HistoryService = class _HistoryService {
     if (files.length === 0) return null;
     const targetFile = this.currentConversationId ? `${this.currentConversationId}.jsonl` : files[0].name;
     if (!files.some((f) => f.name === targetFile)) return null;
-    return this.extractUsageFromFile(path48.join(dir, targetFile));
+    return this.extractUsageFromFile(path49.join(dir, targetFile));
   }
   extractUsageFromFile(filePath) {
     let raw;
     try {
-      raw = fs41.readFileSync(filePath, "utf8");
+      raw = fs42.readFileSync(filePath, "utf8");
     } catch {
       return null;
     }
@@ -19605,9 +19885,9 @@ var HistoryService = class _HistoryService {
     let totalCost = 0;
     let files;
     try {
-      files = fs41.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
+      files = fs42.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
         try {
-          return fs41.statSync(path48.join(projectDir, f)).mtimeMs >= monthStartMs;
+          return fs42.statSync(path49.join(projectDir, f)).mtimeMs >= monthStartMs;
         } catch {
           return false;
         }
@@ -19618,7 +19898,7 @@ var HistoryService = class _HistoryService {
     for (const file of files) {
       let raw;
       try {
-        raw = fs41.readFileSync(path48.join(projectDir, file), "utf8");
+        raw = fs42.readFileSync(path49.join(projectDir, file), "utf8");
       } catch {
         continue;
       }
@@ -19686,7 +19966,7 @@ var HistoryService = class _HistoryService {
    * showing an empty conversation.
    */
   async loadConversation(sessionId) {
-    const filePath = path48.join(this.projectDir, `${sessionId}.jsonl`);
+    const filePath = path49.join(this.projectDir, `${sessionId}.jsonl`);
     const messages = parseJsonl(filePath);
     if (messages.length === 0) return;
     const totalBatches = Math.ceil(messages.length / CONVERSATION_BATCH_SIZE);
@@ -19736,10 +20016,10 @@ var HistoryService = class _HistoryService {
    * or no transcript exists yet (not an error).
    */
   async uploadConversationIfChanged(sessionId) {
-    const filePath = path48.join(this.projectDir, `${sessionId}.jsonl`);
+    const filePath = path49.join(this.projectDir, `${sessionId}.jsonl`);
     let mtimeMs;
     try {
-      mtimeMs = fs41.statSync(filePath).mtimeMs;
+      mtimeMs = fs42.statSync(filePath).mtimeMs;
     } catch {
       return false;
     }
@@ -19778,7 +20058,7 @@ var HistoryService = class _HistoryService {
       sessionId = this.currentConversationId;
       if (!sessionId) return 0;
     }
-    const filePath = path48.join(this.projectDir, `${sessionId}.jsonl`);
+    const filePath = path49.join(this.projectDir, `${sessionId}.jsonl`);
     const messages = parseJsonl(filePath);
     if (messages.length === 0) return 0;
     const marker = this.lastUploadedUuid.get(sessionId);
@@ -19808,11 +20088,11 @@ var HistoryService = class _HistoryService {
 };
 
 // src/agents/acp/client.ts
-var import_node_child_process15 = require("child_process");
-var fs42 = __toESM(require("fs/promises"));
+var import_node_child_process16 = require("child_process");
+var fs43 = __toESM(require("fs/promises"));
 var fsSync = __toESM(require("fs"));
-var os35 = __toESM(require("os"));
-var path49 = __toESM(require("path"));
+var os36 = __toESM(require("os"));
+var path50 = __toESM(require("path"));
 var import_node_stream = require("stream");
 
 // ../../node_modules/@agentclientprotocol/sdk/dist/acp.js
@@ -22349,7 +22629,7 @@ var AcpClient = class {
       "acpClient",
       `spawn cmd=${adapter.command} args=[${adapter.args.join(",")}] cwd=${cwd}`
     );
-    const child = (0, import_node_child_process15.spawn)(adapter.command, adapter.args, {
+    const child = (0, import_node_child_process16.spawn)(adapter.command, adapter.args, {
       cwd,
       env: { ...process.env, PATH: augmentedPath },
       stdio: ["pipe", "pipe", "pipe"]
@@ -22606,7 +22886,7 @@ var AcpClient = class {
       },
       readTextFile: async (params) => {
         try {
-          const content = await fs42.readFile(params.path, "utf8");
+          const content = await fs43.readFile(params.path, "utf8");
           return applyLineRange(content, params.line ?? null, params.limit ?? null);
         } catch (err) {
           const code = err.code;
@@ -22626,7 +22906,7 @@ var AcpClient = class {
       },
       writeTextFile: async (params) => {
         try {
-          await fs42.writeFile(params.path, params.content, "utf8");
+          await fs43.writeFile(params.path, params.content, "utf8");
           return {};
         } catch (err) {
           const code = err.code;
@@ -22675,25 +22955,25 @@ function applyLineRange(content, line, limit) {
   return { content: lines.slice(start2, end).join("\n") };
 }
 function knownAgentBinaryDirs() {
-  const home = os35.homedir();
+  const home = os36.homedir();
   const out2 = [];
   out2.push("/tmp/codeam-node20/bin");
   for (const root of [
     "/usr/local/share/nvm/versions/node",
-    path49.join(home, ".nvm/versions/node")
+    path50.join(home, ".nvm/versions/node")
   ]) {
     try {
       for (const child of fsSync.readdirSync(root)) {
-        out2.push(path49.join(root, child, "bin"));
+        out2.push(path50.join(root, child, "bin"));
       }
     } catch {
     }
   }
-  out2.push(path49.join(home, ".volta/bin"));
+  out2.push(path50.join(home, ".volta/bin"));
   out2.push("/usr/local/bin");
   out2.push("/usr/bin");
-  out2.push(path49.join(home, ".local/bin"));
-  out2.push(path49.join(home, "bin"));
+  out2.push(path50.join(home, ".local/bin"));
+  out2.push(path50.join(home, "bin"));
   return out2.filter((p2) => {
     try {
       return fsSync.statSync(p2).isDirectory();
@@ -22704,7 +22984,7 @@ function knownAgentBinaryDirs() {
 }
 function expandPathForAgentBinaries(existingPath) {
   const existing = new Set(
-    existingPath.split(path49.delimiter).filter((p2) => p2.length > 0)
+    existingPath.split(path50.delimiter).filter((p2) => p2.length > 0)
   );
   const additions = [];
   for (const dir of knownAgentBinaryDirs()) {
@@ -22714,7 +22994,7 @@ function expandPathForAgentBinaries(existingPath) {
     }
   }
   if (additions.length === 0) return existingPath;
-  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path49.delimiter);
+  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path50.delimiter);
 }
 
 // src/services/streaming/transport.ts
@@ -23041,15 +23321,15 @@ function reconcileCumulative(existing, incoming) {
 }
 
 // src/agents/acp/onboarding.ts
-var fs43 = __toESM(require("fs"));
-var os36 = __toESM(require("os"));
-var path50 = __toESM(require("path"));
+var fs44 = __toESM(require("fs"));
+var os37 = __toESM(require("os"));
+var path51 = __toESM(require("path"));
 var _onboardingSeam = {
-  markerPath: (sessionId) => path50.join(os36.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
-  exists: (p2) => fs43.existsSync(p2),
+  markerPath: (sessionId) => path51.join(os37.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
+  exists: (p2) => fs44.existsSync(p2),
   write: (p2) => {
-    fs43.mkdirSync(path50.dirname(p2), { recursive: true });
-    fs43.writeFileSync(p2, "");
+    fs44.mkdirSync(path51.dirname(p2), { recursive: true });
+    fs44.writeFileSync(p2, "");
   },
   disabled: () => {
     const v = process.env.CODEAM_ONBOARDING_DISABLED;
@@ -23057,7 +23337,7 @@ var _onboardingSeam = {
   }
 };
 function buildOnboardingWelcome(cwd) {
-  const repo = path50.basename(cwd || "") || "this project";
+  const repo = path51.basename(cwd || "") || "this project";
   return [
     `Welcome to CodeAgent Mobile! \u{1F44B} You're now driving this agent from your phone \u2014 and it comes fully wired, zero setup:`,
     "",
@@ -23323,8 +23603,8 @@ var import_crypto5 = require("crypto");
 
 // src/services/turn-files/git-changeset.ts
 var import_child_process22 = require("child_process");
-var fs44 = __toESM(require("fs/promises"));
-var path51 = __toESM(require("path"));
+var fs45 = __toESM(require("fs/promises"));
+var path52 = __toESM(require("path"));
 async function collectRepoChangeset(opts) {
   const status2 = await runGit3(opts.repoRoot, ["status", "--porcelain=v1", "-z"]);
   if (status2 === null) return null;
@@ -23342,7 +23622,7 @@ async function collectRepoChangeset(opts) {
     let stats;
     if (row.fileStatus === "added" && numstatEntry === void 0) {
       const lineCount = await readUntrackedLineCount(
-        path51.join(opts.repoRoot, row.filePath)
+        path52.join(opts.repoRoot, row.filePath)
       );
       stats = { added: lineCount, removed: 0 };
     } else {
@@ -23373,7 +23653,7 @@ function readUntrackedLineCount(absPath) {
 }
 async function defaultReadUntrackedLineCount(absPath) {
   try {
-    const content = await fs44.readFile(absPath, "utf8");
+    const content = await fs45.readFile(absPath, "utf8");
     let count = 0;
     let pos = -1;
     while ((pos = content.indexOf("\n", pos + 1)) !== -1) {
@@ -23465,7 +23745,7 @@ function defaultRunGit(cwd, args2) {
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs48 = await import("fs/promises");
+  const fs49 = await import("fs/promises");
   const out2 = [];
   await walk(workingDir, 0);
   return out2;
@@ -23473,7 +23753,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (depth > maxDepth) return;
     let entries = [];
     try {
-      const dirents = await fs48.readdir(dir, { withFileTypes: true });
+      const dirents = await fs49.readdir(dir, { withFileTypes: true });
       entries = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -23484,8 +23764,8 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (hasGit) {
       out2.push({
         repoRoot: dir,
-        repoPath: path51.relative(workingDir, dir),
-        repoName: path51.basename(dir)
+        repoPath: path52.relative(workingDir, dir),
+        repoName: path52.basename(dir)
       });
       return;
     }
@@ -23493,14 +23773,14 @@ async function discoverRepos(workingDir, maxDepth = 4) {
       if (!entry.isDirectory) continue;
       if (entry.name === "node_modules") continue;
       if (entry.name === "dist" || entry.name === "build") continue;
-      await walk(path51.join(dir, entry.name), depth + 1);
+      await walk(path52.join(dir, entry.name), depth + 1);
     }
   }
 }
 
 // src/services/turn-files/files-outbox.ts
-var fs45 = __toESM(require("fs/promises"));
-var path52 = __toESM(require("path"));
+var fs46 = __toESM(require("fs/promises"));
+var path53 = __toESM(require("path"));
 var import_os7 = require("os");
 var HOME_OUTBOX_DIR = ".codeam/outbox";
 var MAX_AGE_MS = 24 * 60 * 60 * 1e3;
@@ -23533,16 +23813,16 @@ var FilesOutbox = class {
   backoffIndex = 0;
   stopped = false;
   constructor(opts) {
-    const base = opts.baseDir ?? path52.join(homeDir(), HOME_OUTBOX_DIR);
-    this.filePath = path52.join(base, `${opts.sessionId}.jsonl`);
+    const base = opts.baseDir ?? path53.join(homeDir(), HOME_OUTBOX_DIR);
+    this.filePath = path53.join(base, `${opts.sessionId}.jsonl`);
     this.post = opts.post;
     this.autoSchedule = opts.autoSchedule !== false;
   }
   /** Persist the entry to disk and trigger a flush. Returns once the
    *  line is durable on disk (not once the POST succeeds). */
   async enqueue(entry) {
-    await fs45.mkdir(path52.dirname(this.filePath), { recursive: true });
-    await fs45.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
+    await fs46.mkdir(path53.dirname(this.filePath), { recursive: true });
+    await fs46.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
     this.backoffIndex = 0;
     if (this.autoSchedule) this.scheduleFlush(0);
   }
@@ -23631,7 +23911,7 @@ var FilesOutbox = class {
   async readAll() {
     let raw = "";
     try {
-      raw = await fs45.readFile(this.filePath, "utf8");
+      raw = await fs46.readFile(this.filePath, "utf8");
     } catch {
       return [];
     }
@@ -23655,12 +23935,12 @@ var FilesOutbox = class {
   async rewrite(entries) {
     const tmpPath = `${this.filePath}.${process.pid}.tmp`;
     if (entries.length === 0) {
-      await fs45.unlink(this.filePath).catch(() => void 0);
+      await fs46.unlink(this.filePath).catch(() => void 0);
       return;
     }
     const payload = entries.map((e) => JSON.stringify(e)).join("\n") + "\n";
-    await fs45.writeFile(tmpPath, payload, "utf8");
-    await fs45.rename(tmpPath, this.filePath);
+    await fs46.writeFile(tmpPath, payload, "utf8");
+    await fs46.rename(tmpPath, this.filePath);
   }
 };
 function applyJitter(ms) {
@@ -25868,15 +26148,15 @@ function fetchQuotaUsage(runtime, historySvc) {
 }
 
 // src/agents/claude/onboarding.ts
-var fs46 = __toESM(require("fs"));
-var os37 = __toESM(require("os"));
-var path53 = __toESM(require("path"));
+var fs47 = __toESM(require("fs"));
+var os38 = __toESM(require("os"));
+var path54 = __toESM(require("path"));
 function ensureClaudeOnboarded() {
   try {
-    const file = path53.join(os37.homedir(), ".claude.json");
+    const file = path54.join(os38.homedir(), ".claude.json");
     let config = {};
     try {
-      config = JSON.parse(fs46.readFileSync(file, "utf8"));
+      config = JSON.parse(fs47.readFileSync(file, "utf8"));
     } catch {
     }
     if (config.hasCompletedOnboarding === true && typeof config.theme === "string") {
@@ -25887,8 +26167,8 @@ function ensureClaudeOnboarded() {
     if (typeof config.lastOnboardingVersion !== "string") {
       config.lastOnboardingVersion = "2.1.177";
     }
-    fs46.mkdirSync(path53.dirname(file), { recursive: true });
-    fs46.writeFileSync(file, JSON.stringify(config, null, 2));
+    fs47.mkdirSync(path54.dirname(file), { recursive: true });
+    fs47.writeFileSync(file, JSON.stringify(config, null, 2));
     log.info("claude", "pre-completed Claude onboarding (skip first-run theme picker)");
   } catch (err) {
     log.warn("claude", `ensureClaudeOnboarded failed (non-fatal): ${err.message}`);
@@ -26528,7 +26808,7 @@ var import_picocolors11 = __toESM(require("picocolors"));
 var import_child_process23 = require("child_process");
 var import_util4 = require("util");
 var import_picocolors9 = __toESM(require("picocolors"));
-var path54 = __toESM(require("path"));
+var path55 = __toESM(require("path"));
 var execFileP6 = (0, import_util4.promisify)(import_child_process23.execFile);
 var MAX_BUFFER = 8 * 1024 * 1024;
 function resetStdinForChild() {
@@ -27017,7 +27297,7 @@ var GitHubCodespacesProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path54.posix.dirname(remotePath);
+    const remoteDir = path55.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote(remoteDir)}`,
       `cat > ${shellQuote(remotePath)}`
@@ -27087,7 +27367,7 @@ function shellQuote(s) {
 // src/services/providers/gitpod.ts
 var import_child_process24 = require("child_process");
 var import_util5 = require("util");
-var path55 = __toESM(require("path"));
+var path56 = __toESM(require("path"));
 var import_picocolors10 = __toESM(require("picocolors"));
 var execFileP7 = (0, import_util5.promisify)(import_child_process24.execFile);
 var MAX_BUFFER2 = 8 * 1024 * 1024;
@@ -27327,7 +27607,7 @@ var GitpodProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path55.posix.dirname(remotePath);
+    const remoteDir = path56.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote2(remoteDir)}`,
       `cat > ${shellQuote2(remotePath)}`
@@ -27363,7 +27643,7 @@ function shellQuote2(s) {
 // src/services/providers/gitlab-workspaces.ts
 var import_child_process25 = require("child_process");
 var import_util6 = require("util");
-var path56 = __toESM(require("path"));
+var path57 = __toESM(require("path"));
 var execFileP8 = (0, import_util6.promisify)(import_child_process25.execFile);
 var MAX_BUFFER3 = 8 * 1024 * 1024;
 var GITLAB_API_BASE = process.env.CODEAM_GITLAB_API_URL ?? "https://gitlab.com/api/v4";
@@ -27623,7 +27903,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
-    const remoteDir = path56.posix.dirname(remotePath);
+    const remoteDir = path57.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote3(remoteDir)}`, `cat > ${shellQuote3(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote3(remotePath)}`);
@@ -27691,7 +27971,7 @@ function shellQuote3(s) {
 // src/services/providers/railway.ts
 var import_child_process26 = require("child_process");
 var import_util7 = require("util");
-var path57 = __toESM(require("path"));
+var path58 = __toESM(require("path"));
 var execFileP9 = (0, import_util7.promisify)(import_child_process26.execFile);
 var MAX_BUFFER4 = 8 * 1024 * 1024;
 function resetStdinForChild4() {
@@ -27927,7 +28207,7 @@ var RailwayProvider = class {
     if (!projectId || !serviceId) {
       throw new Error("Invalid Railway workspace id (expected projectId/serviceId).");
     }
-    const remoteDir = path57.posix.dirname(remotePath);
+    const remoteDir = path58.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote4(remoteDir)}`, `cat > ${shellQuote4(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote4(remotePath)}`);
@@ -28515,8 +28795,8 @@ async function host(args2) {
 var import_node_dns = require("dns");
 var import_node_util5 = require("util");
 var import_node_crypto8 = require("crypto");
-var fs47 = __toESM(require("fs"));
-var path58 = __toESM(require("path"));
+var fs48 = __toESM(require("fs"));
+var path59 = __toESM(require("path"));
 var import_picocolors13 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util5.promisify)(import_node_dns.resolve);
 async function checkDns(apiBase2) {
@@ -28572,13 +28852,13 @@ async function checkHealth(apiBase2) {
   }
 }
 function checkConfigDir() {
-  const dir = path58.join(require("os").homedir(), ".codeam");
+  const dir = path59.join(require("os").homedir(), ".codeam");
   try {
-    fs47.mkdirSync(dir, { recursive: true, mode: 448 });
-    const probe = path58.join(dir, ".doctor-probe");
-    fs47.writeFileSync(probe, "ok", { mode: 384 });
-    const read2 = fs47.readFileSync(probe, "utf8");
-    fs47.unlinkSync(probe);
+    fs48.mkdirSync(dir, { recursive: true, mode: 448 });
+    const probe = path59.join(dir, ".doctor-probe");
+    fs48.writeFileSync(probe, "ok", { mode: 384 });
+    const read2 = fs48.readFileSync(probe, "utf8");
+    fs48.unlinkSync(probe);
     if (read2 !== "ok") throw new Error("write/read round-trip mismatch");
     return {
       id: "config-dir",
@@ -28618,9 +28898,9 @@ function checkSessions() {
   }
 }
 function checkAgentBinaries() {
-  const os39 = createOsStrategy();
+  const os40 = createOsStrategy();
   return getEnabledAgents().map((meta) => {
-    const found = os39.findInPath(meta.binaryName);
+    const found = os40.findInPath(meta.binaryName);
     return {
       id: `agent-${meta.id}`,
       label: `Agent binary: ${meta.displayName} (${meta.binaryName})`,
@@ -28642,7 +28922,7 @@ function checkNodePty() {
       detail: "not required on this platform"
     };
   }
-  const vendoredPath = path58.join(__dirname, "vendor", "node-pty");
+  const vendoredPath = path59.join(__dirname, "vendor", "node-pty");
   for (const target of [vendoredPath, "node-pty"]) {
     try {
       require(target);
@@ -28684,7 +28964,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.39.82" : "0.0.0-dev";
+  const cliVersion = true ? "2.39.84" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -28883,7 +29163,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors14 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.39.82" : "unknown";
+  const v = true ? "2.39.84" : "unknown";
   console.log(`${import_picocolors14.default.bold("codeam-cli")} ${import_picocolors14.default.cyan(v)}`);
 }
 
@@ -29027,10 +29307,10 @@ var EXIT_CODE_NAMES = {
 };
 
 // src/index.ts
-var os38 = __toESM(require("os"));
+var os39 = __toESM(require("os"));
 if (!process.env.HOME) {
   try {
-    const home = os38.homedir();
+    const home = os39.homedir();
     if (home) process.env.HOME = home;
   } catch {
   }
@@ -29039,7 +29319,13 @@ loadCodespaceEnv();
 var [, , command, ...args] = process.argv;
 async function main() {
   const isMetaCommand = command === "--version" || command === "-v" || command === "version" || command === "--help" || command === "-h" || command === "help";
-  if (!isMetaCommand) checkForUpdates();
+  if (!isMetaCommand) {
+    if (command === "link" || command === "pair") {
+      await autoUpgradeBeforeCriticalCommand();
+    } else {
+      checkForUpdates();
+    }
+  }
   if (initTelemetry()) {
     maybePrintFirstRunBanner();
     capture("cli_boot", { command: command ?? "(default)" });