codeam-cli 2.50.0 → 2.51.1

package/dist/index.js

@@ -522,8 +522,8 @@ var _default = makeConfig();
 var { getConfig, ensurePluginId, addSession, removeSession, setActiveSession, getActiveSession, getActiveSessionForAgent, setDisable1mContext, clearAll, saveCliConfig, loadCliConfig } = _default;
 
 // src/commands/pair-auto.ts
-var fs42 = __toESM(require("fs"));
-var os35 = __toESM(require("os"));
+var fs43 = __toESM(require("fs"));
+var os36 = __toESM(require("os"));
 var path48 = __toESM(require("path"));
 var import_crypto4 = require("crypto");
 
@@ -5397,7 +5397,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.50.0" : "0.0.0-dev",
+    cliVersion: true ? "2.51.1" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5578,7 +5578,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.50.0",
+  version: "2.51.1",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -7728,8 +7728,8 @@ function closeAllTerminals() {
 }
 
 // src/commands/start/handlers.ts
-var fs41 = __toESM(require("fs"));
-var os34 = __toESM(require("os"));
+var fs42 = __toESM(require("fs"));
+var os35 = __toESM(require("os"));
 var path47 = __toESM(require("path"));
 var import_crypto3 = require("crypto");
 var import_child_process20 = require("child_process");
@@ -11164,10 +11164,10 @@ function buildForPlatform(platform3) {
 var import_node_crypto4 = require("crypto");
 
 // src/agents/claude/resolver.ts
-function buildClaudeLaunch(extraArgs = [], os41 = createOsStrategy()) {
-  const found = os41.findInPath("claude") ?? os41.findInPath("claude-code");
+function buildClaudeLaunch(extraArgs = [], os42 = createOsStrategy()) {
+  const found = os42.findInPath("claude") ?? os42.findInPath("claude-code");
   if (!found) return null;
-  return os41.buildLaunch(found, extraArgs);
+  return os42.buildLaunch(found, extraArgs);
 }
 
 // src/agents/claude/installer.ts
@@ -11760,8 +11760,8 @@ var ClaudeRuntimeStrategy = class {
   meta = getAgent("claude");
   mode = "interactive";
   os;
-  constructor(os41) {
-    this.os = os41;
+  constructor(os42) {
+    this.os = os42;
   }
   /**
    * Claude Code's react-ink TUI enables bracketed-paste mode at
@@ -12438,8 +12438,8 @@ function codexCredentialLocator() {
 function codexLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os41 = createOsStrategy();
-      return os41.findInPath("codex") !== null;
+      const os42 = createOsStrategy();
+      return os42.findInPath("codex") !== null;
     },
     launch() {
       return (0, import_node_child_process3.spawn)("codex", ["login"], { stdio: "inherit" });
@@ -12462,8 +12462,8 @@ var CodexRuntimeStrategy = class {
   meta = getAgent("codex");
   mode = "interactive";
   os;
-  constructor(os41) {
-    this.os = os41;
+  constructor(os42) {
+    this.os = os42;
   }
   async prepareLaunch() {
     let binary = this.os.findInPath("codex");
@@ -12562,12 +12562,12 @@ var CodexRuntimeStrategy = class {
     });
   }
 };
-function resolveNpm(os41) {
-  return os41.id === "win32" ? "npm.cmd" : "npm";
+function resolveNpm(os42) {
+  return os42.id === "win32" ? "npm.cmd" : "npm";
 }
-async function installCodexViaNpm(os41) {
+async function installCodexViaNpm(os42) {
   return new Promise((resolve7, reject) => {
-    const proc = (0, import_node_child_process4.spawn)(resolveNpm(os41), ["install", "-g", "@openai/codex"], {
+    const proc = (0, import_node_child_process4.spawn)(resolveNpm(os42), ["install", "-g", "@openai/codex"], {
       stdio: "inherit"
     });
     proc.on("close", (code) => {
@@ -12584,16 +12584,16 @@ async function installCodexViaNpm(os41) {
     });
   });
 }
-function augmentNpmGlobalBin(os41) {
+function augmentNpmGlobalBin(os42) {
   try {
-    const result = (0, import_node_child_process4.spawnSync)(resolveNpm(os41), ["prefix", "-g"], {
+    const result = (0, import_node_child_process4.spawnSync)(resolveNpm(os42), ["prefix", "-g"], {
       stdio: ["ignore", "pipe", "ignore"]
     });
     if (result.status !== 0) return;
     const prefix = result.stdout.toString().trim();
     if (!prefix) return;
-    const binDir = os41.id === "win32" ? prefix : path22.join(prefix, "bin");
-    os41.augmentPath([binDir]);
+    const binDir = os42.id === "win32" ? prefix : path22.join(prefix, "bin");
+    os42.augmentPath([binDir]);
   } catch {
   }
 }
@@ -12677,9 +12677,9 @@ var import_node_child_process7 = require("child_process");
 // src/agents/coderabbit/installer.ts
 var import_node_child_process5 = require("child_process");
 var INSTALL_URL = "https://cli.coderabbit.ai/install.sh";
-async function ensureCoderabbitInstalled(os41) {
-  if (os41.findInPath("coderabbit")) return true;
-  if (os41.id === "win32") {
+async function ensureCoderabbitInstalled(os42) {
+  if (os42.findInPath("coderabbit")) return true;
+  if (os42.id === "win32") {
     console.error(
       "\n  \u2717 CodeRabbit on Windows requires WSL.\n    Install the CLI inside your WSL distribution\n    (curl -fsSL https://cli.coderabbit.ai/install.sh | sh)\n    then re-run `codeam link coderabbit` from WSL.\n"
     );
@@ -12694,8 +12694,8 @@ async function ensureCoderabbitInstalled(os41) {
     proc.on("error", () => resolve7(false));
   });
   if (!ok) return false;
-  os41.augmentPath([`${os41.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
-  return os41.findInPath("coderabbit") !== null;
+  os42.augmentPath([`${os42.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
+  return os42.findInPath("coderabbit") !== null;
 }
 
 // src/agents/coderabbit/link.ts
@@ -12730,10 +12730,10 @@ function coderabbitCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function coderabbitLoginLauncher(os41) {
+function coderabbitLoginLauncher(os42) {
   return {
     async ensureInstalled() {
-      return ensureCoderabbitInstalled(os41);
+      return ensureCoderabbitInstalled(os42);
     },
     launch() {
       return (0, import_node_child_process6.spawn)("coderabbit", ["login"], { stdio: "inherit" });
@@ -12779,8 +12779,8 @@ var CoderabbitRuntimeStrategy = class {
   meta = getAgent("coderabbit");
   mode = "batch";
   os;
-  constructor(os41) {
-    this.os = os41;
+  constructor(os42) {
+    this.os = os42;
   }
   getDefaultArgs() {
     return ["review"];
@@ -12896,10 +12896,10 @@ function cursorCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function cursorLoginLauncher(os41) {
+function cursorLoginLauncher(os42) {
   return {
     async ensureInstalled() {
-      if (os41.findInPath("cursor-agent")) return true;
+      if (os42.findInPath("cursor-agent")) return true;
       console.error(
         "\n  \u2717 cursor-agent binary not on PATH.\n    Install Cursor (https://cursor.com/) and ensure the CLI\n    plugin is enabled, then re-run `codeam link cursor`.\n"
       );
@@ -12961,8 +12961,8 @@ var CursorRuntimeStrategy = class {
   meta = getAgent("cursor");
   mode = "interactive";
   os;
-  constructor(os41) {
-    this.os = os41;
+  constructor(os42) {
+    this.os = os42;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("cursor-agent");
@@ -13101,10 +13101,10 @@ function aiderCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function aiderLoginLauncher(os41) {
+function aiderLoginLauncher(os42) {
   return {
     async ensureInstalled() {
-      if (os41.findInPath("aider")) return true;
+      if (os42.findInPath("aider")) return true;
       console.error(
         "\n  \u2717 aider binary not on PATH.\n    Install Aider:\n      pip install aider-chat\n    then re-run `codeam link aider`.\n"
       );
@@ -13114,7 +13114,7 @@ function aiderLoginLauncher(os41) {
       console.error(
         "\n  Aider has no interactive login flow.\n    Set ANTHROPIC_API_KEY or OPENAI_API_KEY in your shell,\n    or re-run `codeam link aider --api-key=<your-key>`.\n"
       );
-      return (0, import_node_child_process9.spawn)(os41.id === "win32" ? "cmd.exe" : "sh", os41.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
+      return (0, import_node_child_process9.spawn)(os42.id === "win32" ? "cmd.exe" : "sh", os42.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
         stdio: "ignore"
       });
     }
@@ -13186,8 +13186,8 @@ var AiderRuntimeStrategy = class {
   meta = getAgent("aider");
   mode = "interactive";
   os;
-  constructor(os41) {
-    this.os = os41;
+  constructor(os42) {
+    this.os = os42;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("aider");
@@ -13316,8 +13316,8 @@ function geminiCredentialLocator() {
 function geminiLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os41 = createOsStrategy();
-      return os41.findInPath("gemini") !== null;
+      const os42 = createOsStrategy();
+      return os42.findInPath("gemini") !== null;
     },
     launch() {
       return (0, import_node_child_process10.spawn)("gemini", ["auth", "login"], { stdio: "inherit" });
@@ -13350,8 +13350,8 @@ var GeminiRuntimeStrategy = class {
   meta = getAgent("gemini");
   mode = "interactive";
   os;
-  constructor(os41) {
-    this.os = os41;
+  constructor(os42) {
+    this.os = os42;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("gemini");
@@ -13450,18 +13450,18 @@ var GeminiRuntimeStrategy = class {
 
 // src/agents/registry.ts
 var runtimeBuilders = {
-  claude: (os41) => new ClaudeRuntimeStrategy(os41),
-  codex: (os41) => new CodexRuntimeStrategy(os41),
-  coderabbit: (os41) => new CoderabbitRuntimeStrategy(os41),
-  cursor: (os41) => new CursorRuntimeStrategy(os41),
-  aider: (os41) => new AiderRuntimeStrategy(os41),
-  gemini: (os41) => new GeminiRuntimeStrategy(os41)
+  claude: (os42) => new ClaudeRuntimeStrategy(os42),
+  codex: (os42) => new CodexRuntimeStrategy(os42),
+  coderabbit: (os42) => new CoderabbitRuntimeStrategy(os42),
+  cursor: (os42) => new CursorRuntimeStrategy(os42),
+  aider: (os42) => new AiderRuntimeStrategy(os42),
+  gemini: (os42) => new GeminiRuntimeStrategy(os42)
 };
 var deployBuilders = {
   claude: () => new ClaudeDeployStrategy(),
   codex: () => new CodexDeployStrategy()
 };
-function createAgentStrategy(agent, os41 = createOsStrategy()) {
+function createAgentStrategy(agent, os42 = createOsStrategy()) {
   if (!AGENT_REGISTRY[agent]?.enabled) {
     throw new Error(
       `Agent "${agent}" is not supported in this codeam-cli version. Upgrade with 'npm i -g codeam-cli@latest'.`
@@ -13471,10 +13471,10 @@ function createAgentStrategy(agent, os41 = createOsStrategy()) {
   if (!build) {
     throw new Error(`No runtime strategy registered for agent "${agent}"`);
   }
-  return build(os41);
+  return build(os42);
 }
-function createInteractiveAgentStrategy(agent, os41 = createOsStrategy()) {
-  const s = createAgentStrategy(agent, os41);
+function createInteractiveAgentStrategy(agent, os42 = createOsStrategy()) {
+  const s = createAgentStrategy(agent, os42);
   if (s.mode !== "interactive") {
     throw new Error(
       `Agent "${agent}" is a batch agent; use createAgentStrategy + .runOneShot for one-shot reviews.`
@@ -13877,19 +13877,39 @@ async function linkDryRunPreflight(ctx) {
 }
 
 // src/commands/host-agent.ts
-var import_node_child_process14 = require("child_process");
-var os28 = __toESM(require("os"));
-var fs31 = __toESM(require("fs"));
+var import_node_child_process15 = require("child_process");
+var os29 = __toESM(require("os"));
+var fs32 = __toESM(require("fs"));
 var path36 = __toESM(require("path"));
 
+// src/util/restrict-to-owner.ts
+var import_node_fs5 = __toESM(require("fs"));
+var import_node_os3 = __toESM(require("os"));
+var import_node_child_process11 = require("child_process");
+function restrictToOwner(filePath) {
+  try {
+    if (process.platform === "win32") {
+      const username = import_node_os3.default.userInfo().username;
+      (0, import_node_child_process11.execFileSync)(
+        "icacls",
+        [filePath, "/inheritance:r", "/grant:r", `${username}:F`],
+        { stdio: "ignore" }
+      );
+    } else {
+      import_node_fs5.default.chmodSync(filePath, 384);
+    }
+  } catch {
+  }
+}
+
 // src/commands/host/host-client.ts
-var fs26 = __toESM(require("fs"));
-var os23 = __toESM(require("os"));
+var fs27 = __toESM(require("fs"));
+var os24 = __toESM(require("os"));
 var path31 = __toESM(require("path"));
 function sampleCpuTimes() {
   let idle = 0;
   let total = 0;
-  for (const cpu of os23.cpus()) {
+  for (const cpu of os24.cpus()) {
     const t2 = cpu.times;
     idle += t2.idle;
     total += t2.user + t2.nice + t2.sys + t2.idle + t2.irq;
@@ -13908,8 +13928,8 @@ var MetricsCollector = class {
     const prev = this.prevCpu;
     this.prevCpu = current;
     if (!prev) {
-      const cores = os23.cpus().length || 1;
-      const proxy = os23.loadavg()[0] / cores * 100;
+      const cores = os24.cpus().length || 1;
+      const proxy = os24.loadavg()[0] / cores * 100;
       return Math.min(100, Math.max(0, Math.round(proxy)));
     }
     const idleDelta = current.idle - prev.idle;
@@ -13922,8 +13942,8 @@ var MetricsCollector = class {
   collect() {
     return {
       cpuPct: this.cpuPct(),
-      ramUsedMb: Math.round((os23.totalmem() - os23.freemem()) / 1048576),
-      ramTotalMb: Math.round(os23.totalmem() / 1048576),
+      ramUsedMb: Math.round((os24.totalmem() - os24.freemem()) / 1048576),
+      ramTotalMb: Math.round(os24.totalmem() / 1048576),
       latencyMs: this.lastLatencyMs
     };
   }
@@ -13932,19 +13952,19 @@ function apiBase() {
   return process.env.CODEAM_API_URL ?? resolveApiBaseUrl();
 }
 function hostIdentityPath() {
-  return path31.join(os23.homedir(), ".codeam", "host-agent.json");
+  return path31.join(os24.homedir(), ".codeam", "host-agent.json");
 }
 function collectOsInfo() {
   return {
-    distro: os23.platform(),
-    arch: os23.arch(),
-    kernel: os23.release(),
+    distro: os24.platform(),
+    arch: os24.arch(),
+    kernel: os24.release(),
     nodeVersion: process.versions.node
   };
 }
 function loadHostIdentity() {
   try {
-    const raw = fs26.readFileSync(hostIdentityPath(), "utf8");
+    const raw = fs27.readFileSync(hostIdentityPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null && typeof parsed.hostId === "string" && typeof parsed.hostToken === "string" && typeof parsed.controlPluginId === "string") {
       const p2 = parsed;
@@ -13957,12 +13977,12 @@ function loadHostIdentity() {
 }
 function saveHostIdentity(identity) {
   const file = hostIdentityPath();
-  fs26.mkdirSync(path31.dirname(file), { recursive: true, mode: 448 });
-  fs26.writeFileSync(file, JSON.stringify(identity, null, 2), {
+  fs27.mkdirSync(path31.dirname(file), { recursive: true, mode: 448 });
+  fs27.writeFileSync(file, JSON.stringify(identity, null, 2), {
     encoding: "utf8",
     mode: 384
   });
-  fs26.chmodSync(file, 384);
+  fs27.chmodSync(file, 384);
 }
 var HostHttpError = class extends Error {
   constructor(message, status2) {
@@ -13985,7 +14005,7 @@ function isHostAuthRejection(err) {
 }
 function deleteHostIdentity() {
   try {
-    fs26.rmSync(hostIdentityPath(), { force: true });
+    fs27.rmSync(hostIdentityPath(), { force: true });
   } catch {
   }
 }
@@ -14107,17 +14127,17 @@ async function reportDeployProgress(auth, deployId, step, message, sessionId) {
 }
 
 // src/commands/host/workspace.ts
-var fs27 = __toESM(require("fs"));
-var os24 = __toESM(require("os"));
+var fs28 = __toESM(require("fs"));
+var os25 = __toESM(require("os"));
 var path32 = __toESM(require("path"));
-var import_node_child_process11 = require("child_process");
+var import_node_child_process12 = require("child_process");
 var import_node_util4 = require("util");
-var execFileP4 = (0, import_node_util4.promisify)(import_node_child_process11.execFile);
+var execFileP4 = (0, import_node_util4.promisify)(import_node_child_process12.execFile);
 function isAbsolutePathTarget(target) {
   return path32.isAbsolute(target);
 }
 function selfHostedWorkspaceRoot() {
-  return path32.join(os24.homedir(), ".codeam", "self-hosted");
+  return path32.join(os25.homedir(), ".codeam", "self-hosted");
 }
 function nonInteractiveGitEnv() {
   return {
@@ -14171,12 +14191,9 @@ async function configureGitCredentials(dest, repoRef, cloneToken) {
   const gh = githubOwnerRepo(repoRef.trim());
   if (!gh || !cloneToken) return;
   const credFile = path32.join(dest, ".git", "codeam-credentials");
-  fs27.writeFileSync(credFile, `https://x-access-token:${cloneToken}@github.com
+  fs28.writeFileSync(credFile, `https://x-access-token:${cloneToken}@github.com
 `, { mode: 384 });
-  try {
-    fs27.chmodSync(credFile, 384);
-  } catch {
-  }
+  restrictToOwner(credFile);
   const env = nonInteractiveGitEnv();
   const git2 = (args2) => execFileP4("git", ["-C", dest, ...args2], { timeout: 3e4, env });
   const credFilePosix = credFile.split(path32.sep).join("/");
@@ -14215,17 +14232,17 @@ function maskToken(text, cloneToken) {
 }
 async function prepareWorkspace(repoOrPath, deployId, cloneToken) {
   if (isAbsolutePathTarget(repoOrPath)) {
-    if (!fs27.existsSync(repoOrPath)) {
+    if (!fs28.existsSync(repoOrPath)) {
       throw new Error(`deploy target path does not exist: ${repoOrPath}`);
     }
     return repoOrPath;
   }
   const dest = path32.join(selfHostedWorkspaceRoot(), deployId);
-  if (fs27.existsSync(path32.join(dest, ".git"))) {
+  if (fs28.existsSync(path32.join(dest, ".git"))) {
     if (cloneToken) await configureGitCredentials(dest, repoOrPath, cloneToken);
     return dest;
   }
-  fs27.mkdirSync(selfHostedWorkspaceRoot(), { recursive: true, mode: 448 });
+  fs28.mkdirSync(selfHostedWorkspaceRoot(), { recursive: true, mode: 448 });
   const cloneUrl = repoCloneUrl(repoOrPath, cloneToken);
   try {
     await execFileP4("git", ["clone", "--depth", "1", cloneUrl, dest], {
@@ -14242,8 +14259,8 @@ async function prepareWorkspace(repoOrPath, deployId, cloneToken) {
 }
 
 // src/commands/host/agent-provisioning.ts
-var fs28 = __toESM(require("fs"));
-var os25 = __toESM(require("os"));
+var fs29 = __toESM(require("fs"));
+var os26 = __toESM(require("os"));
 var path33 = __toESM(require("path"));
 var PUBLIC_TO_INTERNAL_AGENT = {
   claude_code: "claude",
@@ -14259,16 +14276,16 @@ function toInternalAgentId(publicAgentId) {
   return PUBLIC_TO_INTERNAL_AGENT[publicAgentId] ?? null;
 }
 function ensureDir(dir) {
-  fs28.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs29.mkdirSync(dir, { recursive: true, mode: 448 });
 }
 function writeFile0600(filePath, contents) {
   ensureDir(path33.dirname(filePath));
-  fs28.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
-  fs28.chmodSync(filePath, 384);
+  fs29.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
+  restrictToOwner(filePath);
 }
 function rmIfExists(filePath) {
   try {
-    fs28.rmSync(filePath, { force: true });
+    fs29.rmSync(filePath, { force: true });
   } catch {
   }
 }
@@ -14287,7 +14304,7 @@ var claudeProvisioner = {
       rmIfExists(credentialsJson);
     }
     const claudeJson = path33.join(home, ".claude.json");
-    if (!fs28.existsSync(claudeJson)) {
+    if (!fs29.existsSync(claudeJson)) {
       writeFile0600(
         claudeJson,
         JSON.stringify({ hasCompletedOnboarding: true, customApiKeyResponses: { approved: [] } })
@@ -14360,7 +14377,7 @@ var UnsupportedAgentError = class extends Error {
     this.agentId = agentId;
   }
 };
-function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os25.homedir()) {
+function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os26.homedir()) {
   const internal = toInternalAgentId(publicAgentId);
   if (!internal) throw new UnsupportedAgentError(publicAgentId);
   const provisioner = PROVISIONERS[internal];
@@ -14369,12 +14386,12 @@ function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os25.homedir(
 }
 
 // src/commands/host/git-tooling.ts
-var import_node_child_process12 = require("child_process");
-var fs29 = __toESM(require("fs"));
-var os26 = __toESM(require("os"));
+var import_node_child_process13 = require("child_process");
+var fs30 = __toESM(require("fs"));
+var os27 = __toESM(require("os"));
 var path34 = __toESM(require("path"));
 function codeamBinDir() {
-  return process.env.CODEAM_BIN_DIR ?? path34.join(os26.homedir(), ".codeam", "bin");
+  return process.env.CODEAM_BIN_DIR ?? path34.join(os27.homedir(), ".codeam", "bin");
 }
 var FALLBACK_GH_VERSION = "2.62.0";
 var RELEASE_API = "https://api.github.com/repos/cli/cli/releases/latest";
@@ -14406,7 +14423,7 @@ async function download(url, dest) {
     const res = await fetch(url, { headers: { "User-Agent": "codeam-cli" } });
     if (!res.ok || !res.body) return false;
     const buf = Buffer.from(await res.arrayBuffer());
-    fs29.writeFileSync(dest, buf);
+    fs30.writeFileSync(dest, buf);
     return true;
   } catch {
     return false;
@@ -14429,7 +14446,7 @@ async function ensureGhCli(runner, token, deps = {}) {
     const version3 = await resolveVersionFn(token);
     const asset = `gh_${version3}_${osToken}_${arch2}`;
     const url = `https://github.com/cli/cli/releases/download/v${version3}/${asset}.${ext}`;
-    const tmpRoot = fs29.mkdtempSync(path34.join(os26.tmpdir(), "codeam-gh-"));
+    const tmpRoot = fs30.mkdtempSync(path34.join(os27.tmpdir(), "codeam-gh-"));
     const archive = path34.join(tmpRoot, `${asset}.${ext}`);
     if (!await downloadFn(url, archive)) {
       log.warn("host-agent", "gh download failed \u2014 skipping (git pull/push still work via the credential helper)");
@@ -14441,15 +14458,15 @@ async function ensureGhCli(runner, token, deps = {}) {
       return null;
     }
     const extractedBin = path34.join(tmpRoot, asset, "bin", binaryName);
-    if (!fs29.existsSync(extractedBin)) {
+    if (!fs30.existsSync(extractedBin)) {
       log.warn("host-agent", "gh binary not found in the extracted archive \u2014 skipping");
       return null;
     }
     const binDir = codeamBinDir();
-    fs29.mkdirSync(binDir, { recursive: true });
+    fs30.mkdirSync(binDir, { recursive: true });
     const target = path34.join(binDir, binaryName);
-    fs29.copyFileSync(extractedBin, target);
-    fs29.chmodSync(target, 493);
+    fs30.copyFileSync(extractedBin, target);
+    fs30.chmodSync(target, 493);
     log.info("host-agent", `gh installed to ${target} (v${version3})`);
     return target;
   } catch (e) {
@@ -14483,7 +14500,7 @@ var defaultGitToolingRunner = {
   which(cmd) {
     try {
       const probe = process.platform === "win32" ? "where" : "which";
-      (0, import_node_child_process12.execFileSync)(probe, [cmd], { stdio: "ignore" });
+      (0, import_node_child_process13.execFileSync)(probe, [cmd], { stdio: "ignore" });
       return true;
     } catch {
       return false;
@@ -14491,7 +14508,7 @@ var defaultGitToolingRunner = {
   },
   run(cmd, args2, opts = {}) {
     return new Promise((resolve7) => {
-      const child = (0, import_node_child_process12.spawn)(cmd, args2, {
+      const child = (0, import_node_child_process13.spawn)(cmd, args2, {
         stdio: [opts.input !== void 0 ? "pipe" : "ignore", "ignore", "pipe"]
       });
       let stderr = "";
@@ -14578,6 +14595,14 @@ function mapStatsToSavings(stats, prev, inputPricePerMillion = DEFAULT_INPUT_PRI
   };
   return { next, delta };
 }
+function defaultGetBudgetEnv() {
+  const raw = process.env["HEADROOM_BUDGET"];
+  if (!raw) return null;
+  const budgetUsd = Number(raw);
+  if (!isFinite(budgetUsd) || budgetUsd <= 0) return null;
+  const budgetPeriod = process.env["HEADROOM_BUDGET_PERIOD"] ?? "daily";
+  return { budgetUsd, budgetPeriod };
+}
 var HeadroomStatsReporter = class {
   constructor(deps) {
     this.deps = deps;
@@ -14591,14 +14616,22 @@ var HeadroomStatsReporter = class {
   }
   async tick() {
     try {
+      const stats = await this.deps.fetchStats();
       const { next, delta } = mapStatsToSavings(
-        await this.deps.fetchStats(),
+        stats,
         this.prev,
         this.deps.inputPricePerMillionUsd ?? DEFAULT_INPUT_PRICE_PER_MILLION
       );
       this.prev = next;
       if (delta.compressionTokens > 0 || delta.compressionSavingsUsd > 0 || delta.rawTokensEst > 0 || delta.cacheReadTokens > 0 || delta.cacheSavingsUsd > 0) {
-        await this.deps.postSavings(delta);
+        const getBudgetEnv = this.deps.getBudgetEnv ?? defaultGetBudgetEnv;
+        const budgetEnv = getBudgetEnv();
+        const budget = budgetEnv ? {
+          periodSpendUsd: stats.cost?.cost_with_headroom_usd ?? 0,
+          budgetUsd: budgetEnv.budgetUsd,
+          budgetPeriod: budgetEnv.budgetPeriod
+        } : void 0;
+        await this.deps.postSavings(delta, budget);
       }
     } catch {
     }
@@ -14611,24 +14644,32 @@ var HeadroomStatsReporter = class {
   }
 };
 
+// src/services/headroom/budget-args.ts
+function buildBudgetProxyArgs(env) {
+  const budget = env["HEADROOM_BUDGET"];
+  if (!budget) return [];
+  const period = env["HEADROOM_BUDGET_PERIOD"] ?? "daily";
+  return ["--budget", budget, "--budget-period", period];
+}
+
 // src/lib/updateNotifier.ts
-var fs30 = __toESM(require("fs"));
-var os27 = __toESM(require("os"));
+var fs31 = __toESM(require("fs"));
+var os28 = __toESM(require("os"));
 var path35 = __toESM(require("path"));
 var https6 = __toESM(require("https"));
-var import_node_child_process13 = require("child_process");
+var import_node_child_process14 = require("child_process");
 var import_picocolors3 = __toESM(require("picocolors"));
 var PKG_NAME = "codeam-cli";
 var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
 var TTL_MS = 24 * 60 * 60 * 1e3;
 var REQUEST_TIMEOUT_MS = 1500;
 function cachePath() {
-  const dir = path35.join(os27.homedir(), ".codeam");
+  const dir = path35.join(os28.homedir(), ".codeam");
   return path35.join(dir, "update-check.json");
 }
 function readCache() {
   try {
-    const raw = fs30.readFileSync(cachePath(), "utf8");
+    const raw = fs31.readFileSync(cachePath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.fetchedAt !== "number" || typeof parsed.latest !== "string") return null;
     return parsed;
@@ -14639,10 +14680,10 @@ function readCache() {
 function writeCache(cache) {
   try {
     const file = cachePath();
-    fs30.mkdirSync(path35.dirname(file), { recursive: true });
+    fs31.mkdirSync(path35.dirname(file), { recursive: true });
     const tmp = `${file}.${process.pid}.tmp`;
-    fs30.writeFileSync(tmp, JSON.stringify(cache));
-    fs30.renameSync(tmp, file);
+    fs31.writeFileSync(tmp, JSON.stringify(cache));
+    fs31.renameSync(tmp, file);
   } catch {
   }
 }
@@ -14710,14 +14751,14 @@ function notifyIfStale(currentVersion, latest) {
 }
 function isLinkedInstall() {
   try {
-    const root = (0, import_node_child_process13.execSync)("npm root -g", {
+    const root = (0, import_node_child_process14.execSync)("npm root -g", {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 2e3
     }).trim();
     if (!root) return false;
     const pkgPath = path35.join(root, PKG_NAME);
-    return fs30.lstatSync(pkgPath).isSymbolicLink();
+    return fs31.lstatSync(pkgPath).isSymbolicLink();
   } catch {
     return false;
   }
@@ -14738,7 +14779,7 @@ function maybeAutoUpdate(currentVersion, latest) {
 
 `
   );
-  const install = (0, import_node_child_process13.spawnSync)("npm", ["install", "-g", `${PKG_NAME}@latest`], {
+  const install = (0, import_node_child_process14.spawnSync)("npm", ["install", "-g", `${PKG_NAME}@latest`], {
     stdio: "inherit",
     env: process.env
   });
@@ -14753,13 +14794,13 @@ function maybeAutoUpdate(currentVersion, latest) {
     return;
   }
   try {
-    fs30.unlinkSync(cachePath());
+    fs31.unlinkSync(cachePath());
   } catch {
   }
   process.stderr.write(`  ${import_picocolors3.default.green("\u2713")} Updated. Resuming session...
 
 `);
-  const child = (0, import_node_child_process13.spawnSync)("codeam", process.argv.slice(2), {
+  const child = (0, import_node_child_process14.spawnSync)("codeam", process.argv.slice(2), {
     stdio: "inherit",
     env: process.env
   });
@@ -14769,7 +14810,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.50.0" : null;
+  const current = true ? "2.51.1" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -14786,7 +14827,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.50.0" : null;
+  const current = true ? "2.51.1" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -14823,7 +14864,7 @@ function maybeStartHeadroomReporter(ctx) {
         const res = await fetch("http://localhost:8787/stats");
         return res.json();
       },
-      postSavings: async (delta) => {
+      postSavings: async (delta, budget) => {
         await fetch(ingestUrl, {
           method: "POST",
           headers: {
@@ -14834,7 +14875,12 @@ function maybeStartHeadroomReporter(ctx) {
             sessionId: ctx.sessionId,
             pluginId: ctx.pluginId,
             agentId: process.env["HEADROOM_AGENT"] ?? "claude",
-            savings: delta
+            savings: delta,
+            ...budget ? {
+              periodSpendUsd: budget.periodSpendUsd,
+              budgetUsd: budget.budgetUsd,
+              budgetPeriod: budget.budgetPeriod
+            } : {}
           })
         });
       }
@@ -14853,8 +14899,8 @@ function maybeResumeLocalHeadroomReporter(ctx) {
   if (process.env["HEADROOM_ENABLED"] === "1") return null;
   try {
     const file = headroomConfigPath();
-    if (!fs31.existsSync(file)) return null;
-    const cfg = JSON.parse(fs31.readFileSync(file, "utf8"));
+    if (!fs32.existsSync(file)) return null;
+    const cfg = JSON.parse(fs32.readFileSync(file, "utf8"));
     if (!cfg?.enabled) return null;
     const agent = cfg.agent ?? "claude";
     const ingestUrl = `${resolveApiBaseUrl()}/api/sessions/${ctx.sessionId}/headroom-savings`;
@@ -14867,7 +14913,7 @@ function maybeResumeLocalHeadroomReporter(ctx) {
       // Body MUST match HeadroomSavingsDto + PluginAuthGuard (sessionId +
       // pluginId in the body) — same shape as the codespace reporter above and
       // the on-demand `startReporter` in handlers.ts.
-      postSavings: async (delta) => {
+      postSavings: async (delta, budget) => {
         await fetch(ingestUrl, {
           method: "POST",
           headers: {
@@ -14878,7 +14924,12 @@ function maybeResumeLocalHeadroomReporter(ctx) {
             sessionId: ctx.sessionId,
             pluginId: ctx.pluginId,
             agentId: agent,
-            savings: delta
+            savings: delta,
+            ...budget ? {
+              periodSpendUsd: budget.periodSpendUsd,
+              budgetUsd: budget.budgetUsd,
+              budgetPeriod: budget.budgetPeriod
+            } : {}
           })
         });
       }
@@ -14940,7 +14991,7 @@ var HEADROOM_MIN_FREE_DISK_BYTES = 2 * 1024 * 1024 * 1024;
 var defaultHeadroomRunner = {
   which(cmd) {
     try {
-      (0, import_node_child_process14.execFileSync)("which", [cmd], { stdio: "ignore" });
+      (0, import_node_child_process15.execFileSync)("which", [cmd], { stdio: "ignore" });
       return true;
     } catch {
       return false;
@@ -14949,7 +15000,7 @@ var defaultHeadroomRunner = {
   run(cmd, args2, opts = {}) {
     return new Promise((resolve7) => {
       const spawnEnv = opts.env ?? process.env;
-      const child = (0, import_node_child_process14.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"], env: spawnEnv });
+      const child = (0, import_node_child_process15.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"], env: spawnEnv });
       let stderrBuf = "";
       let stdoutBuf = "";
       let settled = false;
@@ -15113,15 +15164,16 @@ function isHeadroomSupportedAgent(agentId) {
   return n.startsWith("claude") || n.startsWith("codex") || n.startsWith("copilot");
 }
 function headroomConfigPath() {
-  return path36.join(os28.homedir(), ".codeam", "headroom-config.json");
+  return path36.join(os29.homedir(), ".codeam", "headroom-config.json");
 }
 function persistHeadroomConfig(config) {
   try {
     const file = headroomConfigPath();
-    fs31.mkdirSync(path36.dirname(file), { recursive: true, mode: 448 });
+    fs32.mkdirSync(path36.dirname(file), { recursive: true, mode: 448 });
     const tmp = `${file}.tmp-${process.pid}`;
-    fs31.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
-    fs31.renameSync(tmp, file);
+    fs32.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
+    fs32.renameSync(tmp, file);
+    restrictToOwner(file);
   } catch (err) {
     log.warn(
       "host-agent",
@@ -15130,7 +15182,7 @@ function persistHeadroomConfig(config) {
   }
 }
 function agentSettingsPath(kind) {
-  const home = os28.homedir();
+  const home = os29.homedir();
   if (kind === "claude") return path36.join(home, ".claude", "settings.json");
   if (kind === "codex") return path36.join(home, ".codex", "auth.json");
   if (kind === "copilot") return path36.join(home, ".config", "github-copilot", "hosts.json");
@@ -15140,11 +15192,11 @@ function backupAgentHeadroomConfig(kind) {
   const src = agentSettingsPath(kind);
   if (!src) return;
   try {
-    if (!fs31.existsSync(src)) return;
-    const dest = path36.join(os28.homedir(), ".codeam", `headroom-backup-${kind}.json`);
-    fs31.mkdirSync(path36.dirname(dest), { recursive: true, mode: 448 });
-    fs31.copyFileSync(src, dest);
-    fs31.chmodSync(dest, 384);
+    if (!fs32.existsSync(src)) return;
+    const dest = path36.join(os29.homedir(), ".codeam", `headroom-backup-${kind}.json`);
+    fs32.mkdirSync(path36.dirname(dest), { recursive: true, mode: 448 });
+    fs32.copyFileSync(src, dest);
+    fs32.chmodSync(dest, 384);
     log.info("host-agent", `headroom config backup: ${src} \u2192 ${dest}`);
   } catch (err) {
     log.warn(
@@ -15156,12 +15208,12 @@ function backupAgentHeadroomConfig(kind) {
 function restoreAgentHeadroomConfig(kind) {
   const dest = agentSettingsPath(kind);
   if (!dest) return false;
-  const src = path36.join(os28.homedir(), ".codeam", `headroom-backup-${kind}.json`);
-  if (!fs31.existsSync(src)) return false;
+  const src = path36.join(os29.homedir(), ".codeam", `headroom-backup-${kind}.json`);
+  if (!fs32.existsSync(src)) return false;
   try {
-    fs31.mkdirSync(path36.dirname(dest), { recursive: true, mode: 448 });
-    fs31.copyFileSync(src, dest);
-    fs31.chmodSync(dest, 384);
+    fs32.mkdirSync(path36.dirname(dest), { recursive: true, mode: 448 });
+    fs32.copyFileSync(src, dest);
+    fs32.chmodSync(dest, 384);
     log.info("host-agent", `headroom config restored: ${src} \u2192 ${dest}`);
     return true;
   } catch (err) {
@@ -15174,16 +15226,21 @@ function restoreAgentHeadroomConfig(kind) {
 }
 function readHeadroomChildEnv() {
   try {
-    const raw = fs31.readFileSync(headroomConfigPath(), "utf8");
+    const raw = fs32.readFileSync(headroomConfigPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed !== "object" || parsed === null) return {};
     const o = parsed;
     if (o.enabled === true && typeof o.agent === "string" && o.agent.length > 0 && typeof o.ingestUrl === "string" && o.ingestUrl.length > 0) {
-      return {
+      const env = {
         HEADROOM_ENABLED: "1",
         HEADROOM_AGENT: o.agent,
         HEADROOM_SAVINGS_INGEST_URL: o.ingestUrl
       };
+      if (o.budgetEnabled === true && typeof o.budgetUsd === "number") {
+        env["HEADROOM_BUDGET"] = String(o.budgetUsd);
+        env["HEADROOM_BUDGET_PERIOD"] = typeof o.budgetPeriod === "string" ? o.budgetPeriod : "daily";
+      }
+      return env;
     }
     return {};
   } catch {
@@ -15210,21 +15267,21 @@ function bundledClaudeBinDir() {
     const atAnthropic = path36.join(nm, "@anthropic-ai");
     let entries;
     try {
-      entries = fs31.readdirSync(atAnthropic);
+      entries = fs32.readdirSync(atAnthropic);
     } catch {
       continue;
     }
     for (const entry of entries) {
       if (!entry.startsWith("claude-agent-sdk-")) continue;
       const bin = path36.join(atAnthropic, entry, "claude");
-      if (fs31.existsSync(bin)) return path36.dirname(bin);
+      if (fs32.existsSync(bin)) return path36.dirname(bin);
     }
   }
   return null;
 }
 async function getFreeDiskBytes(dir) {
   try {
-    const s = await fs31.promises.statfs(dir);
+    const s = await fs32.promises.statfs(dir);
     return s.bsize * s.bavail;
   } catch {
     return null;
@@ -15439,11 +15496,16 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner,
   }
   onProgress("proxy");
   try {
-    const proxy = (0, import_node_child_process14.spawn)("headroom", ["proxy", "--port", "8787"], {
-      stdio: "ignore",
-      detached: true,
-      env: { ...process.env, HEADROOM_KOMPRESS_BACKEND: "onnx_cpu" }
-    });
+    const proxyEnv = { ...process.env, HEADROOM_KOMPRESS_BACKEND: "onnx_cpu" };
+    const proxy = (0, import_node_child_process15.spawn)(
+      "headroom",
+      ["proxy", "--port", "8787", ...buildBudgetProxyArgs(proxyEnv)],
+      {
+        stdio: "ignore",
+        detached: true,
+        env: proxyEnv
+      }
+    );
     proxy.once("error", (e) => {
       log.warn(
         "host-agent",
@@ -15460,18 +15522,18 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner,
   onProgress("ready");
   return true;
 }
-var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process14.spawn)(process.execPath, [process.argv[1], "pair-auto", ...args2], {
+var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process15.spawn)(process.execPath, [process.argv[1], "pair-auto", ...args2], {
   cwd,
   env: { ...process.env, ...env },
   stdio: ["ignore", "pipe", "pipe"],
   detached: false
 });
 function currentCliVersion() {
-  return true ? "2.50.0" : null;
+  return true ? "2.51.1" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve7) => {
-    (0, import_node_child_process14.execFile)(cmd, args2, { timeout: timeoutMs }, (err, stdout, stderr) => {
+    (0, import_node_child_process15.execFile)(cmd, args2, { timeout: timeoutMs }, (err, stdout, stderr) => {
       const code = err && typeof err.code === "number" ? err.code : err ? null : 0;
       resolve7({ code, stdout: stdout ?? "", stderr: stderr ?? "" });
     });
@@ -15542,20 +15604,20 @@ var defaultOnUpdated = (version3) => {
 };
 var defaultDisableService = () => {
   try {
-    (0, import_node_child_process14.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
+    (0, import_node_child_process15.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
   } catch {
   }
 };
 var defaultTeardownHeadroom = () => {
   try {
-    const kind = JSON.parse(fs31.readFileSync(headroomConfigPath(), "utf8")).agent;
+    const kind = JSON.parse(fs32.readFileSync(headroomConfigPath(), "utf8")).agent;
     if (kind) {
-      (0, import_node_child_process14.execFileSync)("headroom", ["unwrap", kind], { stdio: "ignore", timeout: 15e3 });
+      (0, import_node_child_process15.execFileSync)("headroom", ["unwrap", kind], { stdio: "ignore", timeout: 15e3 });
     }
   } catch {
   }
   try {
-    (0, import_node_child_process14.execFileSync)("pkill", ["-TERM", "-f", "headroom.*proxy"], { stdio: "ignore" });
+    (0, import_node_child_process15.execFileSync)("pkill", ["-TERM", "-f", "headroom.*proxy"], { stdio: "ignore" });
   } catch {
   }
   persistHeadroomConfig({ enabled: false });
@@ -15862,9 +15924,9 @@ var HostAgentSupervisor = class {
           API_TIMEOUT_MS: "3000000",
           CODEAM_AUTO_TOKEN: payload.autoPairToken
         };
-        const houseConfigDir = path36.join(os28.homedir(), ".codeam", "house-claude");
+        const houseConfigDir = path36.join(os29.homedir(), ".codeam", "house-claude");
         try {
-          fs31.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
+          fs32.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
         } catch {
         }
         childEnv.CLAUDE_CONFIG_DIR = houseConfigDir;
@@ -15882,7 +15944,7 @@ var HostAgentSupervisor = class {
         report("installing", "installing agent CLI");
         await this.runAgentInstall(payload.agentInstallScript);
       }
-      const home = process.env.HOME || os28.homedir();
+      const home = process.env.HOME || os29.homedir();
       childEnv.PATH = `${home}/.local/bin:${process.env.PATH ?? ""}`;
       if (payload.cloneToken) {
         try {
@@ -15905,7 +15967,7 @@ var HostAgentSupervisor = class {
       }
       if (payload.headroomEnabled && payload.headroomAgent && payload.headroomSavingsIngestUrl && isHeadroomSupportedAgent(payload.headroomAgent)) {
         report("headroom", "setting up Headroom proxy");
-        const freeBytes = await this.getFreeDisk(os28.homedir());
+        const freeBytes = await this.getFreeDisk(os29.homedir());
         const alreadyInstalled = this.isHeadroomInstalled();
         if (!alreadyInstalled && freeBytes !== null && freeBytes < HEADROOM_MIN_FREE_DISK_BYTES) {
           const freeGb = (freeBytes / 1e9).toFixed(1);
@@ -16027,8 +16089,8 @@ var HostAgentSupervisor = class {
    */
   runAgentInstall(script) {
     return new Promise((resolve7) => {
-      const home = process.env.HOME || os28.homedir();
-      const child = (0, import_node_child_process14.spawn)("sh", ["-c", script], {
+      const home = process.env.HOME || os29.homedir();
+      const child = (0, import_node_child_process15.spawn)("sh", ["-c", script], {
         env: { ...process.env, HOME: home },
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -16831,8 +16893,8 @@ function activePreviewSessionIds() {
 
 // src/beads/bd-adapter.ts
 var import_child_process15 = require("child_process");
-var fs36 = __toESM(require("fs"));
-var os30 = __toESM(require("os"));
+var fs37 = __toESM(require("fs"));
+var os31 = __toESM(require("os"));
 var path41 = __toESM(require("path"));
 var BD_PACKAGE = "@beads/bd";
 function resolveBundledBdBinary() {
@@ -16849,7 +16911,7 @@ function _defaultResolveBundled() {
   const binaryName = process.platform === "win32" ? "bd.exe" : "bd";
   const binaryPath = path41.join(binDir, binaryName);
   try {
-    fs36.accessSync(binaryPath, fs36.constants.F_OK);
+    fs37.accessSync(binaryPath, fs37.constants.F_OK);
     return binaryPath;
   } catch {
     return null;
@@ -16865,7 +16927,7 @@ function _defaultResolveOnPath() {
     for (const candidate of candidates) {
       const full = path41.join(dir, candidate);
       try {
-        fs36.accessSync(full, fs36.constants.F_OK);
+        fs37.accessSync(full, fs37.constants.F_OK);
         return full;
       } catch {
       }
@@ -16950,7 +17012,7 @@ var BdAdapter = class {
     const env = { ...process.env };
     if (!env.HOME) {
       try {
-        const home = os30.homedir();
+        const home = os31.homedir();
         if (home) env.HOME = home;
       } catch {
       }
@@ -17039,8 +17101,8 @@ function coerceIssue(row, projectKey) {
 
 // src/beads/provisioner.ts
 var import_child_process19 = require("child_process");
-var fs39 = __toESM(require("fs"));
-var os32 = __toESM(require("os"));
+var fs40 = __toESM(require("fs"));
+var os33 = __toESM(require("os"));
 var path44 = __toESM(require("path"));
 
 // src/beads/install-bd.ts
@@ -17106,8 +17168,8 @@ async function installBd(platform3 = process.platform) {
 
 // src/beads/install-dolt.ts
 var import_child_process17 = require("child_process");
-var fs37 = __toESM(require("fs"));
-var os31 = __toESM(require("os"));
+var fs38 = __toESM(require("fs"));
+var os32 = __toESM(require("os"));
 var path42 = __toESM(require("path"));
 var DOLT_INSTALL_SH_URL = "https://github.com/dolthub/dolt/releases/latest/download/install.sh";
 var DOLT_MSI_URL = "https://github.com/dolthub/dolt/releases/latest/download/dolt-windows-amd64.msi";
@@ -17148,11 +17210,11 @@ function resolveDoltInstallStrategy(platform3) {
 }
 var DOLT_RELEASE_BASE = "https://github.com/dolthub/dolt/releases/latest/download";
 function doltPlatformTuple(platform3, arch2) {
-  const os41 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
+  const os42 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
   const a = arch2 === "x64" ? "amd64" : arch2 === "arm64" ? "arm64" : null;
   if (!a) return null;
-  if (os41 === "windows" && a !== "amd64") return null;
-  return `${os41}-${a}`;
+  if (os42 === "windows" && a !== "amd64") return null;
+  return `${os42}-${a}`;
 }
 function resolveDoltTarballStrategy(targetDir, platform3, arch2) {
   const tuple = doltPlatformTuple(platform3, arch2);
@@ -17197,14 +17259,14 @@ async function installDoltToDir(targetDir, platform3 = process.platform, arch2 =
   return result;
 }
 var _doltPathSeam = {
-  homedir: () => os31.homedir(),
+  homedir: () => os32.homedir(),
   getPath: () => process.env.PATH ?? "",
   setPath: (p2) => {
     process.env.PATH = p2;
   },
   exists: (p2) => {
     try {
-      fs37.accessSync(p2, fs37.constants.F_OK);
+      fs38.accessSync(p2, fs38.constants.F_OK);
       return true;
     } catch {
       return false;
@@ -17367,7 +17429,7 @@ async function ensureSharedServer(adapter, options = {}) {
 // src/beads/project-key.ts
 var import_child_process18 = require("child_process");
 var crypto2 = __toESM(require("crypto"));
-var fs38 = __toESM(require("fs"));
+var fs39 = __toESM(require("fs"));
 var path43 = __toESM(require("path"));
 function normalizeOrigin(raw) {
   const trimmed = raw.trim();
@@ -17400,7 +17462,7 @@ function findRepoRoot(cwd) {
     if (seen.has(dir)) return null;
     seen.add(dir);
     try {
-      const stat3 = fs38.statSync(path43.join(dir, ".git"), { throwIfNoEntry: false });
+      const stat3 = fs39.statSync(path43.join(dir, ".git"), { throwIfNoEntry: false });
       if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
     } catch {
     }
@@ -17415,7 +17477,7 @@ var _execSeam2 = {
     const out2 = (0, import_child_process18.execFileSync)(file, args2, opts);
     return typeof out2 === "string" ? out2 : out2.toString("utf8");
   },
-  realpath: (p2) => fs38.realpathSync(p2)
+  realpath: (p2) => fs39.realpathSync(p2)
 };
 function readOrigin(cwd) {
   try {
@@ -17486,17 +17548,17 @@ var _provisionSeam = {
 };
 var _linkSeam = {
   platform: () => process.platform,
-  homedir: () => os32.homedir(),
+  homedir: () => os33.homedir(),
   isWritableDir: (dir) => {
     try {
-      fs39.accessSync(dir, fs39.constants.W_OK);
+      fs40.accessSync(dir, fs40.constants.W_OK);
       return true;
     } catch {
       return false;
     }
   },
   ensureDir: (dir) => {
-    fs39.mkdirSync(dir, { recursive: true });
+    fs40.mkdirSync(dir, { recursive: true });
   },
   /**
    * A directory to symlink `bd` into so the AGENT's shell + Claude Code's
@@ -17536,7 +17598,7 @@ var _linkSeam = {
     const entry = process.argv[1];
     if (entry) {
       try {
-        candidates.push(path44.dirname(fs39.realpathSync(entry)));
+        candidates.push(path44.dirname(fs40.realpathSync(entry)));
       } catch {
         candidates.push(path44.dirname(entry));
       }
@@ -17550,13 +17612,13 @@ var _linkSeam = {
   /** Current symlink target at `linkPath`, or null when absent / not a link. */
   readlink: (linkPath) => {
     try {
-      return fs39.readlinkSync(linkPath);
+      return fs40.readlinkSync(linkPath);
     } catch {
       return null;
     }
   },
-  unlink: (linkPath) => fs39.unlinkSync(linkPath),
-  symlink: (target, linkPath) => fs39.symlinkSync(target, linkPath)
+  unlink: (linkPath) => fs40.unlinkSync(linkPath),
+  symlink: (target, linkPath) => fs40.symlinkSync(target, linkPath)
 };
 function linkBdOntoPath(binaryPath) {
   if (_linkSeam.platform() === "win32") return;
@@ -18032,15 +18094,15 @@ async function handleBeadsActionCommand(action, started) {
 }
 
 // src/beads/config-store.ts
-var import_node_fs5 = __toESM(require("fs"));
-var import_node_os3 = __toESM(require("os"));
+var import_node_fs6 = __toESM(require("fs"));
+var import_node_os4 = __toESM(require("os"));
 var import_node_path4 = __toESM(require("path"));
 function beadsConfigPath() {
-  return import_node_path4.default.join(import_node_os3.default.homedir(), ".codeam", "beads-config.json");
+  return import_node_path4.default.join(import_node_os4.default.homedir(), ".codeam", "beads-config.json");
 }
 function readBeadsEnabled() {
   try {
-    const raw = import_node_fs5.default.readFileSync(beadsConfigPath(), "utf8");
+    const raw = import_node_fs6.default.readFileSync(beadsConfigPath(), "utf8");
     const cfg = JSON.parse(raw);
     return cfg.enabled !== false;
   } catch {
@@ -18049,10 +18111,11 @@ function readBeadsEnabled() {
 }
 function persistBeadsConfig(cfg) {
   const file = beadsConfigPath();
-  import_node_fs5.default.mkdirSync(import_node_path4.default.dirname(file), { recursive: true });
+  import_node_fs6.default.mkdirSync(import_node_path4.default.dirname(file), { recursive: true });
   const tmp = `${file}.tmp`;
-  import_node_fs5.default.writeFileSync(tmp, JSON.stringify(cfg), { mode: 384 });
-  import_node_fs5.default.renameSync(tmp, file);
+  import_node_fs6.default.writeFileSync(tmp, JSON.stringify(cfg), { mode: 384 });
+  import_node_fs6.default.renameSync(tmp, file);
+  restrictToOwner(file);
 }
 
 // src/beads/wiring.ts
@@ -18191,7 +18254,7 @@ var pendingAttachmentFiles = /* @__PURE__ */ new Set();
 function cleanupAttachmentTempFiles() {
   for (const p2 of pendingAttachmentFiles) {
     try {
-      fs41.unlinkSync(p2);
+      fs42.unlinkSync(p2);
     } catch {
     }
   }
@@ -18200,8 +18263,8 @@ function cleanupAttachmentTempFiles() {
 function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
-    const tmpPath = path47.join(os34.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
-    fs41.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
+    const tmpPath = path47.join(os35.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
+    fs42.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     pendingAttachmentFiles.add(tmpPath);
     return tmpPath;
   });
@@ -18221,7 +18284,7 @@ var startTask = (ctx, _cmd, parsed) => {
     setTimeout(() => {
       for (const p2 of paths) {
         try {
-          fs41.unlinkSync(p2);
+          fs42.unlinkSync(p2);
         } catch {
         }
         pendingAttachmentFiles.delete(p2);
@@ -18424,7 +18487,7 @@ var listFiles = async (ctx, cmd, parsed) => {
 var envReadH = async (ctx, cmd) => {
   const envPath = path47.join(process.cwd(), ".env");
   try {
-    const raw = await fs41.promises.readFile(envPath, "utf8");
+    const raw = await fs42.promises.readFile(envPath, "utf8");
     await ctx.relay.sendResult(cmd.id, "completed", {
       exists: true,
       vars: parseDotenv(raw)
@@ -18458,11 +18521,11 @@ var envWriteH = async (ctx, cmd, parsed) => {
   const envPath = path47.join(process.cwd(), ".env");
   const tmpPath = path47.join(process.cwd(), ".env.codeam.tmp");
   try {
-    await fs41.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
-    await fs41.promises.rename(tmpPath, envPath);
+    await fs42.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
+    await fs42.promises.rename(tmpPath, envPath);
     await ctx.relay.sendResult(cmd.id, "completed", { ok: true, count: vars.length });
   } catch (err) {
-    await fs41.promises.rm(tmpPath, { force: true }).catch(() => void 0);
+    await fs42.promises.rm(tmpPath, { force: true }).catch(() => void 0);
     await ctx.relay.sendResult(cmd.id, "failed", { error: err.message });
   }
 };
@@ -18480,7 +18543,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
   let configuredAgent = rawAgentId;
   if (!configuredAgent) {
     try {
-      const raw = JSON.parse(fs41.readFileSync(headroomConfigPath(), "utf8"));
+      const raw = JSON.parse(fs42.readFileSync(headroomConfigPath(), "utf8"));
       configuredAgent = raw.agent ?? "";
     } catch {
     }
@@ -18514,7 +18577,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
     persist: persistHeadroomConfig,
     readEnabled: () => {
       try {
-        const raw = JSON.parse(fs41.readFileSync(headroomConfigPath(), "utf8"));
+        const raw = JSON.parse(fs42.readFileSync(headroomConfigPath(), "utf8"));
         return raw.enabled === true;
       } catch {
         return false;
@@ -18527,7 +18590,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
           const res = await fetch("http://localhost:8787/stats");
           return res.json();
         },
-        postSavings: async (delta) => {
+        postSavings: async (delta, budget) => {
           if (!opts.ingestUrl) return;
           await fetch(opts.ingestUrl, {
             method: "POST",
@@ -18546,7 +18609,12 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
               sessionId: ctx.sessionId,
               pluginId: ctx.pluginId,
               agentId: opts.agent,
-              savings: delta
+              savings: delta,
+              ...budget ? {
+                periodSpendUsd: budget.periodSpendUsd,
+                budgetUsd: budget.budgetUsd,
+                budgetPeriod: budget.budgetPeriod
+              } : {}
             })
           });
         }
@@ -18587,6 +18655,89 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
   });
   await ctx.relay.sendResult(cmd.id, "completed", result);
 };
+var headroomBudgetH = async (ctx, cmd) => {
+  const payload = cmd.payload;
+  let rawAgentId = ctx.agentId || (typeof payload.agentId === "string" ? payload.agentId : "");
+  if (rawAgentId === "claude_code") rawAgentId = "claude";
+  let payloadAgentId = typeof payload.agentId === "string" ? payload.agentId : "";
+  if (payloadAgentId === "claude_code") payloadAgentId = "claude";
+  if (!rawAgentId || !isHeadroomSupportedAgent(rawAgentId)) {
+    await ctx.relay.sendResult(cmd.id, "completed", { applied: false });
+    return;
+  }
+  if (!payloadAgentId || payloadAgentId !== rawAgentId) {
+    await ctx.relay.sendResult(cmd.id, "completed", { applied: false });
+    return;
+  }
+  let headroomActive = false;
+  try {
+    const raw = JSON.parse(fs42.readFileSync(headroomConfigPath(), "utf8"));
+    headroomActive = raw.enabled === true;
+  } catch {
+  }
+  if (!headroomActive) {
+    await ctx.relay.sendResult(cmd.id, "completed", { applied: false });
+    return;
+  }
+  let existingConfig = { enabled: true };
+  try {
+    existingConfig = JSON.parse(fs42.readFileSync(headroomConfigPath(), "utf8"));
+  } catch {
+  }
+  if (payload.budgetEnabled && payload.budgetUsd != null) {
+    persistHeadroomConfig({
+      ...existingConfig,
+      enabled: existingConfig.enabled ?? true,
+      budgetEnabled: true,
+      budgetUsd: payload.budgetUsd,
+      budgetPeriod: payload.budgetPeriod ?? "daily"
+    });
+    process.env["HEADROOM_BUDGET"] = String(payload.budgetUsd);
+    process.env["HEADROOM_BUDGET_PERIOD"] = payload.budgetPeriod ?? "daily";
+  } else {
+    persistHeadroomConfig({
+      ...existingConfig,
+      enabled: existingConfig.enabled ?? true,
+      budgetEnabled: false,
+      budgetUsd: void 0,
+      budgetPeriod: void 0
+    });
+    delete process.env["HEADROOM_BUDGET"];
+    delete process.env["HEADROOM_BUDGET_PERIOD"];
+  }
+  try {
+    const killer = (0, import_child_process20.spawn)("pkill", ["-TERM", "-f", "headroom.*proxy"], {
+      detached: true,
+      stdio: "ignore"
+    });
+    killer.once("error", () => {
+    });
+    killer.unref();
+  } catch {
+  }
+  try {
+    const proxyEnv = { ...process.env, HEADROOM_KOMPRESS_BACKEND: "onnx_cpu" };
+    const proxy = (0, import_child_process20.spawn)(
+      "headroom",
+      ["proxy", "--port", "8787", ...buildBudgetProxyArgs(proxyEnv)],
+      {
+        stdio: "ignore",
+        detached: true,
+        env: proxyEnv
+      }
+    );
+    proxy.once("error", (e) => {
+      log.warn("headroom-budget", `proxy relaunch error (best-effort): ${e.message}`);
+    });
+    proxy.unref();
+  } catch (e) {
+    log.warn(
+      "headroom-budget",
+      `proxy relaunch failed (best-effort): ${e instanceof Error ? e.message : String(e)}`
+    );
+  }
+  await ctx.relay.sendResult(cmd.id, "completed", { applied: true });
+};
 var _beadsEmitChain = Promise.resolve();
 var beadsConfigureH = async (ctx, cmd, parsed) => {
   const action = parsed.action;
@@ -19083,7 +19234,7 @@ function normalizeDetectionForSpawn(detection, cwd) {
   const binName = args2[0];
   if (binName.startsWith("-")) return detection;
   const binPath = path47.join(cwd, "node_modules", ".bin", binName);
-  if (!fs41.existsSync(binPath)) return detection;
+  if (!fs42.existsSync(binPath)) return detection;
   return {
     ...detection,
     command: binPath,
@@ -19632,6 +19783,7 @@ var handlers = {
   env_read: envReadH,
   env_write: envWriteH,
   headroom_configure: headroomConfigureH,
+  headroom_budget: headroomBudgetH,
   beads_configure: beadsConfigureH
 };
 async function dispatchCommand(ctx, cmd) {
@@ -19902,10 +20054,10 @@ function readTokenFromArgs(args2) {
   if (fileFlag) {
     const path61 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs42.readFileSync(path61, "utf8").trim();
+      const content = fs43.readFileSync(path61, "utf8").trim();
       if (content.length === 0) fail(`--token-file ${path61} is empty`);
       try {
-        fs42.unlinkSync(path61);
+        fs43.unlinkSync(path61);
       } catch {
       }
       return content;
@@ -19931,7 +20083,7 @@ async function claimOnce(token, pluginId, pluginSecretHash) {
     pluginId,
     ideName: "codeam-cli (codespace)",
     ideVersion: process.env.npm_package_version ?? "unknown",
-    hostname: os35.hostname(),
+    hostname: os36.hostname(),
     codespaceName: process.env.CODESPACE_NAME ?? "",
     // Current git branch of the codespace's working directory, so the
     // backend can populate `PairedSession.branch` for the codespace pair.
@@ -19992,7 +20144,7 @@ async function claim(token, pluginId, pluginSecretHash) {
   }
 }
 function pairAutoLockPath() {
-  return path48.join(os35.homedir(), ".codeam", "pair-auto.lock");
+  return path48.join(os36.homedir(), ".codeam", "pair-auto.lock");
 }
 function isLivePairAuto(pid) {
   if (!Number.isInteger(pid) || pid <= 0 || pid === process.pid) return false;
@@ -20002,7 +20154,7 @@ function isLivePairAuto(pid) {
     if (e.code !== "EPERM") return false;
   }
   try {
-    return fs42.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
+    return fs43.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
   } catch {
     return true;
   }
@@ -20012,24 +20164,24 @@ function isLiveCodeam(pid) {
 }
 function daemonLockPath(sessionId) {
   const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
-  return path48.join(os35.homedir(), ".codeam", `daemon-${safe}.lock`);
+  return path48.join(os36.homedir(), ".codeam", `daemon-${safe}.lock`);
 }
 function acquireDaemonLock(sessionId) {
   const lockPath = daemonLockPath(sessionId);
   try {
-    fs42.mkdirSync(path48.dirname(lockPath), { recursive: true });
+    fs43.mkdirSync(path48.dirname(lockPath), { recursive: true });
     try {
-      fs42.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs43.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs42.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs43.readFileSync(lockPath, "utf8").trim());
       if (holder && holder !== process.pid && isLiveCodeam(holder)) return false;
-      fs42.writeFileSync(lockPath, String(process.pid));
+      fs43.writeFileSync(lockPath, String(process.pid));
     }
     const release3 = () => {
       try {
-        if (fs42.existsSync(lockPath) && Number(fs42.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs42.unlinkSync(lockPath);
+        if (fs43.existsSync(lockPath) && Number(fs43.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs43.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -20051,19 +20203,19 @@ function acquireDaemonLock(sessionId) {
 function acquireSingletonLock() {
   const lockPath = pairAutoLockPath();
   try {
-    fs42.mkdirSync(path48.dirname(lockPath), { recursive: true });
+    fs43.mkdirSync(path48.dirname(lockPath), { recursive: true });
     try {
-      fs42.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs43.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs42.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs43.readFileSync(lockPath, "utf8").trim());
       if (isLivePairAuto(holder)) return false;
-      fs42.writeFileSync(lockPath, String(process.pid));
+      fs43.writeFileSync(lockPath, String(process.pid));
     }
     process.once("exit", () => {
       try {
-        if (fs42.existsSync(lockPath) && Number(fs42.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs42.unlinkSync(lockPath);
+        if (fs43.existsSync(lockPath) && Number(fs43.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs43.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -20145,7 +20297,7 @@ async function pairAuto(args2) {
 }
 
 // src/services/headroom/wrap-launch.ts
-var import_node_child_process15 = require("child_process");
+var import_node_child_process16 = require("child_process");
 function wrapWithHeadroom(launch, opts) {
   if (!opts.enabled || !opts.headroomPresent) return launch;
   return {
@@ -20158,7 +20310,7 @@ var _present;
 function headroomPresent() {
   if (_present !== void 0) return Promise.resolve(_present);
   return new Promise((resolve7) => {
-    (0, import_node_child_process15.execFile)("headroom", ["--version"], (err) => {
+    (0, import_node_child_process16.execFile)("headroom", ["--version"], (err) => {
       _present = !err;
       resolve7(_present);
     });
@@ -20590,9 +20742,9 @@ function requiresAcp(agent) {
 var import_node_crypto7 = require("crypto");
 
 // src/services/history.service.ts
-var fs43 = __toESM(require("fs"));
+var fs44 = __toESM(require("fs"));
 var path50 = __toESM(require("path"));
-var os36 = __toESM(require("os"));
+var os37 = __toESM(require("os"));
 var https7 = __toESM(require("https"));
 var http6 = __toESM(require("http"));
 var import_zod2 = require("zod");
@@ -20619,7 +20771,7 @@ function parseJsonl(filePath) {
   const messages = [];
   let raw;
   try {
-    raw = fs43.readFileSync(filePath, "utf8");
+    raw = fs44.readFileSync(filePath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       log.warn("history:parseJsonl", `read failed for ${filePath}`, err);
@@ -20760,7 +20912,7 @@ var HistoryService = class _HistoryService {
     return this._quotaPercent === null || Date.now() - this._quotaFetchedAt > ttlMs;
   }
   get projectDir() {
-    return this.runtime.resolveHistoryDir(this.cwd) ?? path50.join(os36.homedir(), ".claude", "projects", encodeCwd(this.cwd));
+    return this.runtime.resolveHistoryDir(this.cwd) ?? path50.join(os37.homedir(), ".claude", "projects", encodeCwd(this.cwd));
   }
   /** Set the current Claude conversation ID (extracted from /cost command or session start) */
   setCurrentConversationId(id) {
@@ -20809,9 +20961,9 @@ var HistoryService = class _HistoryService {
     const dir = this.projectDir;
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     try {
-      const files = fs43.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
+      const files = fs44.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
         try {
-          const stat3 = fs43.statSync(path50.join(dir, e.name));
+          const stat3 = fs44.statSync(path50.join(dir, e.name));
           return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
         } catch {
           return { name: e.name, mtime: 0, birthtime: 0 };
@@ -20852,13 +21004,13 @@ var HistoryService = class _HistoryService {
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     let entries;
     try {
-      entries = fs43.readdirSync(dir, { withFileTypes: true });
+      entries = fs44.readdirSync(dir, { withFileTypes: true });
     } catch {
       return null;
     }
     const files = entries.filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
       try {
-        const stat3 = fs43.statSync(path50.join(dir, e.name));
+        const stat3 = fs44.statSync(path50.join(dir, e.name));
         return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
       } catch {
         return { name: e.name, mtime: 0, birthtime: 0 };
@@ -20872,7 +21024,7 @@ var HistoryService = class _HistoryService {
   extractUsageFromFile(filePath) {
     let raw;
     try {
-      raw = fs43.readFileSync(filePath, "utf8");
+      raw = fs44.readFileSync(filePath, "utf8");
     } catch {
       return null;
     }
@@ -20917,9 +21069,9 @@ var HistoryService = class _HistoryService {
     let totalCost = 0;
     let files;
     try {
-      files = fs43.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
+      files = fs44.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
         try {
-          return fs43.statSync(path50.join(projectDir, f)).mtimeMs >= monthStartMs;
+          return fs44.statSync(path50.join(projectDir, f)).mtimeMs >= monthStartMs;
         } catch {
           return false;
         }
@@ -20930,7 +21082,7 @@ var HistoryService = class _HistoryService {
     for (const file of files) {
       let raw;
       try {
-        raw = fs43.readFileSync(path50.join(projectDir, file), "utf8");
+        raw = fs44.readFileSync(path50.join(projectDir, file), "utf8");
       } catch {
         continue;
       }
@@ -21099,7 +21251,7 @@ var HistoryService = class _HistoryService {
     if (!filePath) return false;
     let mtimeMs;
     try {
-      mtimeMs = fs43.statSync(filePath).mtimeMs;
+      mtimeMs = fs44.statSync(filePath).mtimeMs;
     } catch {
       return false;
     }
@@ -21167,10 +21319,10 @@ var HistoryService = class _HistoryService {
 };
 
 // src/agents/acp/client.ts
-var import_node_child_process16 = require("child_process");
-var fs44 = __toESM(require("fs/promises"));
+var import_node_child_process17 = require("child_process");
+var fs45 = __toESM(require("fs/promises"));
 var fsSync = __toESM(require("fs"));
-var os37 = __toESM(require("os"));
+var os38 = __toESM(require("os"));
 var path51 = __toESM(require("path"));
 var import_node_stream = require("stream");
 
@@ -23718,7 +23870,7 @@ var AcpClient = class {
       "acpClient",
       `spawn cmd=${adapter.command} args=[${adapter.args.join(",")}] cwd=${cwd}`
     );
-    const child = (0, import_node_child_process16.spawn)(adapter.command, adapter.args, {
+    const child = (0, import_node_child_process17.spawn)(adapter.command, adapter.args, {
       cwd,
       // extraEnv (e.g. CLAUDE_CODE_DISABLE_1M_CONTEXT=1 on an on-demand
       // re-spawn) layers over process.env; PATH stays last so the augmented
@@ -24004,7 +24156,7 @@ var AcpClient = class {
       },
       readTextFile: async (params) => {
         try {
-          const content = await fs44.readFile(params.path, "utf8");
+          const content = await fs45.readFile(params.path, "utf8");
           return applyLineRange(content, params.line ?? null, params.limit ?? null);
         } catch (err) {
           const code = err.code;
@@ -24024,7 +24176,7 @@ var AcpClient = class {
       },
       writeTextFile: async (params) => {
         try {
-          await fs44.writeFile(params.path, params.content, "utf8");
+          await fs45.writeFile(params.path, params.content, "utf8");
           return {};
         } catch (err) {
           const code = err.code;
@@ -24073,7 +24225,7 @@ function applyLineRange(content, line, limit) {
   return { content: lines.slice(start2, end).join("\n") };
 }
 function knownAgentBinaryDirs() {
-  const home = os37.homedir();
+  const home = os38.homedir();
   const out2 = [];
   out2.push("/tmp/codeam-node20/bin");
   for (const root of [
@@ -24504,6 +24656,79 @@ function createOneMRecovery(deps) {
   };
 }
 
+// src/agents/acp/budgetRecovery.ts
+var BUDGET_EXCEEDED_RE = /budget exceeded for (\w+) period/i;
+function looksLikeBudgetExceeded(text) {
+  return BUDGET_EXCEEDED_RE.test(text);
+}
+function extractBudgetPeriod(text) {
+  const m = BUDGET_EXCEEDED_RE.exec(text);
+  return m ? m[1] ?? "current" : "current";
+}
+var BUDGET_PAUSE_OPTION = "Pause budget this session";
+var BUDGET_RAISE_OPTION = "Raise budget";
+function createBudgetRecovery(deps) {
+  let pending = null;
+  const buildQuestion = (period) => `\u{1F4B8} **Headroom budget reached for the ${period} period.**
+
+You have two options:
+\u2022 **Pause budget this session** \u2014 removes the spending cap for this session only (the proxy restarts without a budget limit).
+\u2022 **Raise budget** \u2014 open your agent budget settings to increase the cap.`;
+  return {
+    offer: async (commandId, blocks, detail) => {
+      const period = extractBudgetPeriod(detail);
+      pending = { blocks, period };
+      const question = buildQuestion(period);
+      const options = [BUDGET_PAUSE_OPTION, BUDGET_RAISE_OPTION];
+      await deps.publishText(question);
+      await deps.publishSelectPrompt(question, options);
+      await deps.publishAwaitingAnswer(question, options);
+      deps.appendAgentReply(question);
+      deps.flushHistory();
+      deps.log?.(`budget-exceeded recovery offered period=${period} id=${commandId.slice(0, 8)}`);
+      await deps.sendResult(commandId, "failed", {
+        error: `Headroom budget exceeded (${period}) \u2014 recovery offered`
+      });
+    },
+    tryRecover: async (commandId, optionIndex) => {
+      if (!pending) return false;
+      const { blocks, period } = pending;
+      pending = null;
+      if (optionIndex === 0) {
+        deps.log?.("budget recovery \u2192 pause: relaunching proxy without budget");
+        try {
+          await deps.relaunchProxyWithoutBudget();
+        } catch (err) {
+          deps.log?.(`budget recovery \u2192 relaunch failed (best-effort): ${String(err)}`);
+        }
+        await deps.sendResult(commandId, "completed", {
+          action: "pause",
+          period,
+          note: "Headroom proxy relaunched without budget limit for this session. Send your message again."
+        });
+        const note = "\u2705 **Budget paused for this session.** The proxy is running without a spending cap \u2014 send your message again.";
+        await deps.publishText(note);
+        deps.appendAgentReply(note);
+        deps.flushHistory();
+        deps.log?.(`budget recovery \u2192 pause complete id=${commandId.slice(0, 8)}`);
+      } else {
+        deps.log?.(`budget recovery \u2192 raise: emitting deep-link for agent=${deps.agentId}`);
+        await deps.publishRawChunk({
+          type: "open_agent_budget_settings",
+          agentId: deps.agentId,
+          done: true
+        });
+        await deps.sendResult(commandId, "completed", {
+          action: "raise",
+          agentId: deps.agentId
+        });
+        deps.log?.(`budget recovery \u2192 raise emitted id=${commandId.slice(0, 8)}`);
+      }
+      return true;
+    }
+  };
+}
+
 // src/agents/acp/reconcileDelta.ts
 function reconcileCumulative(existing, incoming) {
   if (incoming.length === 0) return existing;
@@ -24524,15 +24749,15 @@ function commonPrefixLength(a, b) {
 
 // src/agents/acp/onboarding.ts
 var import_child_process22 = require("child_process");
-var fs45 = __toESM(require("fs"));
-var os38 = __toESM(require("os"));
+var fs46 = __toESM(require("fs"));
+var os39 = __toESM(require("os"));
 var path52 = __toESM(require("path"));
 var _onboardingSeam = {
-  markerPath: (sessionId) => path52.join(os38.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
-  exists: (p2) => fs45.existsSync(p2),
+  markerPath: (sessionId) => path52.join(os39.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
+  exists: (p2) => fs46.existsSync(p2),
   write: (p2) => {
-    fs45.mkdirSync(path52.dirname(p2), { recursive: true });
-    fs45.writeFileSync(p2, "");
+    fs46.mkdirSync(path52.dirname(p2), { recursive: true });
+    fs46.writeFileSync(p2, "");
   },
   disabled: () => {
     const v = process.env.CODEAM_ONBOARDING_DISABLED;
@@ -24862,7 +25087,7 @@ var import_crypto5 = require("crypto");
 
 // src/services/turn-files/git-changeset.ts
 var import_child_process23 = require("child_process");
-var fs46 = __toESM(require("fs/promises"));
+var fs47 = __toESM(require("fs/promises"));
 var path53 = __toESM(require("path"));
 async function collectRepoChangeset(opts) {
   const status2 = await runGit3(opts.repoRoot, ["status", "--porcelain=v1", "-z"]);
@@ -24912,7 +25137,7 @@ function readUntrackedLineCount(absPath) {
 }
 async function defaultReadUntrackedLineCount(absPath) {
   try {
-    const content = await fs46.readFile(absPath, "utf8");
+    const content = await fs47.readFile(absPath, "utf8");
     let count = 0;
     let pos = -1;
     while ((pos = content.indexOf("\n", pos + 1)) !== -1) {
@@ -25004,7 +25229,7 @@ function defaultRunGit(cwd, args2) {
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs50 = await import("fs/promises");
+  const fs51 = await import("fs/promises");
   const out2 = [];
   await walk(workingDir, 0);
   return out2;
@@ -25012,7 +25237,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (depth > maxDepth) return;
     let entries = [];
     try {
-      const dirents = await fs50.readdir(dir, { withFileTypes: true });
+      const dirents = await fs51.readdir(dir, { withFileTypes: true });
       entries = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -25038,7 +25263,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
 }
 
 // src/services/turn-files/files-outbox.ts
-var fs47 = __toESM(require("fs/promises"));
+var fs48 = __toESM(require("fs/promises"));
 var path54 = __toESM(require("path"));
 var import_os7 = require("os");
 var HOME_OUTBOX_DIR = ".codeam/outbox";
@@ -25080,8 +25305,8 @@ var FilesOutbox = class {
   /** Persist the entry to disk and trigger a flush. Returns once the
    *  line is durable on disk (not once the POST succeeds). */
   async enqueue(entry) {
-    await fs47.mkdir(path54.dirname(this.filePath), { recursive: true });
-    await fs47.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
+    await fs48.mkdir(path54.dirname(this.filePath), { recursive: true });
+    await fs48.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
     this.backoffIndex = 0;
     if (this.autoSchedule) this.scheduleFlush(0);
   }
@@ -25170,7 +25395,7 @@ var FilesOutbox = class {
   async readAll() {
     let raw = "";
     try {
-      raw = await fs47.readFile(this.filePath, "utf8");
+      raw = await fs48.readFile(this.filePath, "utf8");
     } catch {
       return [];
     }
@@ -25194,12 +25419,12 @@ var FilesOutbox = class {
   async rewrite(entries) {
     const tmpPath = `${this.filePath}.${process.pid}.tmp`;
     if (entries.length === 0) {
-      await fs47.unlink(this.filePath).catch(() => void 0);
+      await fs48.unlink(this.filePath).catch(() => void 0);
       return;
     }
     const payload = entries.map((e) => JSON.stringify(e)).join("\n") + "\n";
-    await fs47.writeFile(tmpPath, payload, "utf8");
-    await fs47.rename(tmpPath, this.filePath);
+    await fs48.writeFile(tmpPath, payload, "utf8");
+    await fs48.rename(tmpPath, this.filePath);
   }
 };
 function applyJitter(ms) {
@@ -25938,10 +26163,26 @@ async function surfaceStartupFailure(opts) {
   );
   errRelay.start();
 }
+function budgetBubbleMessage(agent, period) {
+  return `\u{1F4B8} **Headroom budget reached for the ${period} period.**
+
+The local Headroom proxy rejected the ${agent} request because the configured spending cap was hit. Choose an option below to continue.`;
+}
+function buildRelaunchProxyEnv(baseEnv) {
+  const env = { ...baseEnv, HEADROOM_KOMPRESS_BACKEND: "onnx_cpu" };
+  delete env["HEADROOM_BUDGET"];
+  delete env["HEADROOM_BUDGET_PERIOD"];
+  return env;
+}
 function failureBubble(opts) {
   if (looksLikeAuthFailure(opts.detail) || looksLikeAuthFailure(opts.recentStderr)) {
     return AUTH_FAILURE_MESSAGE;
   }
+  const budgetHaystack = `${opts.detail}
+${opts.recentStderr}`;
+  if (looksLikeBudgetExceeded(budgetHaystack)) {
+    return budgetBubbleMessage(opts.agent, extractBudgetPeriod(budgetHaystack));
+  }
   if (looksLikeProviderOutage(opts.detail) || looksLikeProviderOutage(opts.recentStderr)) {
     return providerOutageMessage(opts.agent);
   }
@@ -25974,6 +26215,25 @@ async function reportCredentialInvalid(opts, fetchImpl = fetch) {
   } catch {
   }
 }
+async function postBudgetReached(opts, fetchImpl = fetch) {
+  const url = `${resolveApiBaseUrl()}/api/sessions/${encodeURIComponent(opts.sessionId)}/headroom-budget-reached`;
+  try {
+    await fetchImpl(url, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        "X-Plugin-Auth-Token": opts.pluginAuthToken
+      },
+      body: JSON.stringify({
+        sessionId: opts.sessionId,
+        pluginId: opts.pluginId,
+        agent: opts.agent,
+        period: opts.period
+      })
+    });
+  } catch {
+  }
+}
 async function handleGetConversation(args2) {
   const { relay, commandId, jsonlHistory, acpSessionId } = args2;
   try {
@@ -26139,6 +26399,58 @@ async function runAcpSession(opts) {
     describeError,
     log: (msg) => log.info("acpRunner", msg)
   });
+  let _budgetReachedPosted = false;
+  const relaunchProxyWithoutBudget = async () => {
+    const { spawn: spawn32 } = await import("child_process");
+    try {
+      const killer = spawn32("pkill", ["-TERM", "-f", "headroom.*proxy"], {
+        detached: true,
+        stdio: "ignore"
+      });
+      killer.once("error", () => {
+      });
+      killer.unref();
+    } catch {
+    }
+    await new Promise((r) => setTimeout(r, 500));
+    const proxyEnv = buildRelaunchProxyEnv(process.env);
+    try {
+      const proxy = spawn32(
+        "headroom",
+        ["proxy", "--port", "8787"],
+        { stdio: "ignore", detached: true, env: proxyEnv }
+      );
+      proxy.once("error", (e) => {
+        log.warn("acpRunner", `budget recovery proxy relaunch error (best-effort): ${e.message}`);
+      });
+      proxy.unref();
+    } catch (e) {
+      log.warn(
+        "acpRunner",
+        `budget recovery proxy relaunch failed (best-effort): ${e instanceof Error ? e.message : String(e)}`
+      );
+    }
+    await new Promise((r) => setTimeout(r, 3e3));
+  };
+  const budgetRecovery = createBudgetRecovery({
+    publishText: (text) => publisher.publishOutput({ type: "text", content: text, done: true }),
+    publishSelectPrompt: (question, options) => publisher.publishOutput({
+      type: "select_prompt",
+      content: question,
+      options,
+      optionDescriptions: options.map(() => ""),
+      currentIndex: 0,
+      done: true
+    }),
+    publishAwaitingAnswer: (prompt, options) => publisher.publishAwaitingAnswer({ questionId: (0, import_node_crypto7.randomUUID)(), prompt, options }),
+    publishRawChunk: (chunk) => publisher.publishOutput(chunk),
+    sendResult: (commandId, status2, result) => relay.sendResult(commandId, status2, result),
+    appendAgentReply: (text) => history.appendAgentReply(text),
+    flushHistory: () => void history.flush(),
+    relaunchProxyWithoutBudget,
+    agentId: opts.agent,
+    log: (msg) => log.info("acpRunner", msg)
+  });
   showInfo(`Starting ${opts.agent} via ACP adapter (${opts.adapter.requiresAgentBinary})\u2026`);
   let handshake;
   try {
@@ -26248,7 +26560,11 @@ async function runAcpSession(opts) {
         getBeads,
         publisher,
         recentStderr,
-        oneMRecovery
+        oneMRecovery,
+        budgetRecovery,
+        { get: () => _budgetReachedPosted, set: (v) => {
+          _budgetReachedPosted = v;
+        } }
       );
     },
     { id: opts.agent, name: opts.agent, displayName: opts.agent }
@@ -26272,7 +26588,7 @@ async function runAcpSession(opts) {
   await new Promise(() => {
   });
 }
-async function handleCommand(cmd, client2, relay, acpSessionId, models, streaming, opts, history, jsonlHistory, agentCaps, turnFiles, getBeads, publisher, recentStderr, oneMRecovery) {
+async function handleCommand(cmd, client2, relay, acpSessionId, models, streaming, opts, history, jsonlHistory, agentCaps, turnFiles, getBeads, publisher, recentStderr, oneMRecovery, budgetRecovery, budgetReachedFlag) {
   switch (cmd.type) {
     case "beads_action": {
       const beads = getBeads();
@@ -26356,6 +26672,24 @@ async function handleCommand(cmd, client2, relay, acpSessionId, models, streamin
         const detail = describeError(err);
         log.warn("acpRunner", `prompt failed: ${detail}`);
         await cancelStuckTurn(client2);
+        if (looksLikeBudgetExceeded(`${detail}
+${recentStderr.join("\n")}`)) {
+          await streaming.closeAll();
+          if (!budgetReachedFlag.get()) {
+            budgetReachedFlag.set(true);
+            void postBudgetReached({
+              sessionId: opts.sessionId,
+              pluginId: opts.pluginId,
+              pluginAuthToken: opts.pluginAuthToken,
+              agent: opts.agent,
+              period: extractBudgetPeriod(`${detail}
+${recentStderr.join("\n")}`)
+            });
+          }
+          await budgetRecovery.offer(cmd.id, blocks, `${detail}
+${recentStderr.join("\n")}`);
+          return;
+        }
         if (shouldOfferOneMRecovery({ detail, recentStderr: recentStderr.join("\n"), finalText: "" })) {
           await streaming.closeAll();
           await oneMRecovery.offer(cmd.id, blocks);
@@ -26462,6 +26796,7 @@ async function handleCommand(cmd, client2, relay, acpSessionId, models, streamin
       const index = typeof payload?.index === "number" ? payload.index : 0;
       const offset = typeof payload?.from === "number" ? payload.from : 0;
       const absoluteIndex = index + offset;
+      if (await budgetRecovery.tryRecover(cmd.id, absoluteIndex)) return;
       const result = streaming.resolveSelection(absoluteIndex);
       switch (result.kind) {
         case "resolved":
@@ -27718,15 +28053,15 @@ function fetchQuotaUsage(runtime, historySvc) {
 }
 
 // src/agents/claude/onboarding.ts
-var fs48 = __toESM(require("fs"));
-var os39 = __toESM(require("os"));
+var fs49 = __toESM(require("fs"));
+var os40 = __toESM(require("os"));
 var path55 = __toESM(require("path"));
 function ensureClaudeOnboarded() {
   try {
-    const file = path55.join(os39.homedir(), ".claude.json");
+    const file = path55.join(os40.homedir(), ".claude.json");
     let config = {};
     try {
-      config = JSON.parse(fs48.readFileSync(file, "utf8"));
+      config = JSON.parse(fs49.readFileSync(file, "utf8"));
     } catch {
     }
     if (config.hasCompletedOnboarding === true && typeof config.theme === "string") {
@@ -27737,8 +28072,8 @@ function ensureClaudeOnboarded() {
     if (typeof config.lastOnboardingVersion !== "string") {
       config.lastOnboardingVersion = "2.1.177";
     }
-    fs48.mkdirSync(path55.dirname(file), { recursive: true });
-    fs48.writeFileSync(file, JSON.stringify(config, null, 2));
+    fs49.mkdirSync(path55.dirname(file), { recursive: true });
+    fs49.writeFileSync(file, JSON.stringify(config, null, 2));
     log.info("claude", "pre-completed Claude onboarding (skip first-run theme picker)");
   } catch (err) {
     log.warn("claude", `ensureClaudeOnboarded failed (non-fatal): ${err.message}`);
@@ -30433,7 +30768,7 @@ async function invite() {
 var import_node_dns = require("dns");
 var import_node_util5 = require("util");
 var import_node_crypto8 = require("crypto");
-var fs49 = __toESM(require("fs"));
+var fs50 = __toESM(require("fs"));
 var path60 = __toESM(require("path"));
 var import_picocolors14 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util5.promisify)(import_node_dns.resolve);
@@ -30492,11 +30827,11 @@ async function checkHealth(apiBase2) {
 function checkConfigDir() {
   const dir = path60.join(require("os").homedir(), ".codeam");
   try {
-    fs49.mkdirSync(dir, { recursive: true, mode: 448 });
+    fs50.mkdirSync(dir, { recursive: true, mode: 448 });
     const probe = path60.join(dir, ".doctor-probe");
-    fs49.writeFileSync(probe, "ok", { mode: 384 });
-    const read2 = fs49.readFileSync(probe, "utf8");
-    fs49.unlinkSync(probe);
+    fs50.writeFileSync(probe, "ok", { mode: 384 });
+    const read2 = fs50.readFileSync(probe, "utf8");
+    fs50.unlinkSync(probe);
     if (read2 !== "ok") throw new Error("write/read round-trip mismatch");
     return {
       id: "config-dir",
@@ -30536,9 +30871,9 @@ function checkSessions() {
   }
 }
 function checkAgentBinaries() {
-  const os41 = createOsStrategy();
+  const os42 = createOsStrategy();
   return getEnabledAgents().map((meta) => {
-    const found = os41.findInPath(meta.binaryName);
+    const found = os42.findInPath(meta.binaryName);
     return {
       id: `agent-${meta.id}`,
       label: `Agent binary: ${meta.displayName} (${meta.binaryName})`,
@@ -30602,7 +30937,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.50.0" : "0.0.0-dev";
+  const cliVersion = true ? "2.51.1" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -30801,7 +31136,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.50.0" : "unknown";
+  const v = true ? "2.51.1" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 
@@ -30950,10 +31285,10 @@ var EXIT_CODE_NAMES = {
 };
 
 // src/index.ts
-var os40 = __toESM(require("os"));
+var os41 = __toESM(require("os"));
 if (!process.env.HOME) {
   try {
-    const home = os40.homedir();
+    const home = os41.homedir();
     if (home) process.env.HOME = home;
   } catch {
   }