codeam-cli 2.51.1 → 2.51.3

package/dist/index.js

@@ -522,9 +522,9 @@ var _default = makeConfig();
 var { getConfig, ensurePluginId, addSession, removeSession, setActiveSession, getActiveSession, getActiveSessionForAgent, setDisable1mContext, clearAll, saveCliConfig, loadCliConfig } = _default;
 
 // src/commands/pair-auto.ts
-var fs43 = __toESM(require("fs"));
-var os36 = __toESM(require("os"));
-var path48 = __toESM(require("path"));
+var fs44 = __toESM(require("fs"));
+var os37 = __toESM(require("os"));
+var path49 = __toESM(require("path"));
 var import_crypto4 = require("crypto");
 
 // src/services/telemetry.service.ts
@@ -560,8 +560,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? (0, import_pat
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path61) {
-  return path61.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path62) {
+  return path62.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 
 // ../../node_modules/@posthog/core/dist/featureFlagUtils.mjs
@@ -3041,9 +3041,9 @@ async function addSourceContext(frames) {
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-function getContextLinesFromFile(path61, ranges, output) {
+function getContextLinesFromFile(path62, ranges, output) {
   return new Promise((resolve7) => {
-    const stream = (0, import_node_fs.createReadStream)(path61);
+    const stream = (0, import_node_fs.createReadStream)(path62);
     const lineReaded = (0, import_node_readline.createInterface)({
       input: stream
     });
@@ -3058,7 +3058,7 @@ function getContextLinesFromFile(path61, ranges, output) {
     let rangeStart = range[0];
     let rangeEnd = range[1];
     function onStreamError() {
-      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path61, 1);
+      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path62, 1);
       lineReaded.close();
       lineReaded.removeAllListeners();
       destroyStreamAndResolve();
@@ -3119,8 +3119,8 @@ function clearLineContext(frame) {
   delete frame.context_line;
   delete frame.post_context;
 }
-function shouldSkipContextLinesForFile(path61) {
-  return path61.startsWith("node:") || path61.endsWith(".min.js") || path61.endsWith(".min.cjs") || path61.endsWith(".min.mjs") || path61.startsWith("data:");
+function shouldSkipContextLinesForFile(path62) {
+  return path62.startsWith("node:") || path62.endsWith(".min.js") || path62.endsWith(".min.cjs") || path62.endsWith(".min.mjs") || path62.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame) {
   if (void 0 !== frame.lineno && frame.lineno > MAX_CONTEXTLINES_LINENO) return true;
@@ -5397,7 +5397,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.51.1" : "0.0.0-dev",
+    cliVersion: true ? "2.51.3" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5578,7 +5578,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.51.1",
+  version: "2.51.3",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6610,10 +6610,10 @@ var WINDOWS_LEGACY_JUNCTIONS = [
   /[\\/]Start Menu([\\/]|$)/i,
   /[\\/]Templates([\\/]|$)/i
 ];
-function isUnsafeWindowsWatchRoot(dir, homedir33) {
+function isUnsafeWindowsWatchRoot(dir, homedir34) {
   const norm = (p2) => p2.replace(/\//g, "\\").replace(/\\+$/, "").toLowerCase();
   const cwd = norm(dir);
-  const home = norm(homedir33);
+  const home = norm(homedir34);
   if (cwd === home) return true;
   if (/^[a-z]:$/.test(cwd)) return true;
   const sysRoots = [
@@ -7728,11 +7728,11 @@ function closeAllTerminals() {
 }
 
 // src/commands/start/handlers.ts
-var fs42 = __toESM(require("fs"));
-var os35 = __toESM(require("os"));
-var path47 = __toESM(require("path"));
+var fs43 = __toESM(require("fs"));
+var os36 = __toESM(require("os"));
+var path48 = __toESM(require("path"));
 var import_crypto3 = require("crypto");
-var import_child_process20 = require("child_process");
+var import_child_process21 = require("child_process");
 var import_which2 = __toESM(require("which"));
 
 // src/lib/payload.ts
@@ -11164,10 +11164,10 @@ function buildForPlatform(platform3) {
 var import_node_crypto4 = require("crypto");
 
 // src/agents/claude/resolver.ts
-function buildClaudeLaunch(extraArgs = [], os42 = createOsStrategy()) {
-  const found = os42.findInPath("claude") ?? os42.findInPath("claude-code");
+function buildClaudeLaunch(extraArgs = [], os43 = createOsStrategy()) {
+  const found = os43.findInPath("claude") ?? os43.findInPath("claude-code");
   if (!found) return null;
-  return os42.buildLaunch(found, extraArgs);
+  return os43.buildLaunch(found, extraArgs);
 }
 
 // src/agents/claude/installer.ts
@@ -11760,8 +11760,8 @@ var ClaudeRuntimeStrategy = class {
   meta = getAgent("claude");
   mode = "interactive";
   os;
-  constructor(os42) {
-    this.os = os42;
+  constructor(os43) {
+    this.os = os43;
   }
   /**
    * Claude Code's react-ink TUI enables bracketed-paste mode at
@@ -12438,8 +12438,8 @@ function codexCredentialLocator() {
 function codexLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os42 = createOsStrategy();
-      return os42.findInPath("codex") !== null;
+      const os43 = createOsStrategy();
+      return os43.findInPath("codex") !== null;
     },
     launch() {
       return (0, import_node_child_process3.spawn)("codex", ["login"], { stdio: "inherit" });
@@ -12462,8 +12462,8 @@ var CodexRuntimeStrategy = class {
   meta = getAgent("codex");
   mode = "interactive";
   os;
-  constructor(os42) {
-    this.os = os42;
+  constructor(os43) {
+    this.os = os43;
   }
   async prepareLaunch() {
     let binary = this.os.findInPath("codex");
@@ -12562,12 +12562,12 @@ var CodexRuntimeStrategy = class {
     });
   }
 };
-function resolveNpm(os42) {
-  return os42.id === "win32" ? "npm.cmd" : "npm";
+function resolveNpm(os43) {
+  return os43.id === "win32" ? "npm.cmd" : "npm";
 }
-async function installCodexViaNpm(os42) {
+async function installCodexViaNpm(os43) {
   return new Promise((resolve7, reject) => {
-    const proc = (0, import_node_child_process4.spawn)(resolveNpm(os42), ["install", "-g", "@openai/codex"], {
+    const proc = (0, import_node_child_process4.spawn)(resolveNpm(os43), ["install", "-g", "@openai/codex"], {
       stdio: "inherit"
     });
     proc.on("close", (code) => {
@@ -12584,16 +12584,16 @@ async function installCodexViaNpm(os42) {
     });
   });
 }
-function augmentNpmGlobalBin(os42) {
+function augmentNpmGlobalBin(os43) {
   try {
-    const result = (0, import_node_child_process4.spawnSync)(resolveNpm(os42), ["prefix", "-g"], {
+    const result = (0, import_node_child_process4.spawnSync)(resolveNpm(os43), ["prefix", "-g"], {
       stdio: ["ignore", "pipe", "ignore"]
     });
     if (result.status !== 0) return;
     const prefix = result.stdout.toString().trim();
     if (!prefix) return;
-    const binDir = os42.id === "win32" ? prefix : path22.join(prefix, "bin");
-    os42.augmentPath([binDir]);
+    const binDir = os43.id === "win32" ? prefix : path22.join(prefix, "bin");
+    os43.augmentPath([binDir]);
   } catch {
   }
 }
@@ -12677,9 +12677,9 @@ var import_node_child_process7 = require("child_process");
 // src/agents/coderabbit/installer.ts
 var import_node_child_process5 = require("child_process");
 var INSTALL_URL = "https://cli.coderabbit.ai/install.sh";
-async function ensureCoderabbitInstalled(os42) {
-  if (os42.findInPath("coderabbit")) return true;
-  if (os42.id === "win32") {
+async function ensureCoderabbitInstalled(os43) {
+  if (os43.findInPath("coderabbit")) return true;
+  if (os43.id === "win32") {
     console.error(
       "\n  \u2717 CodeRabbit on Windows requires WSL.\n    Install the CLI inside your WSL distribution\n    (curl -fsSL https://cli.coderabbit.ai/install.sh | sh)\n    then re-run `codeam link coderabbit` from WSL.\n"
     );
@@ -12694,8 +12694,8 @@ async function ensureCoderabbitInstalled(os42) {
     proc.on("error", () => resolve7(false));
   });
   if (!ok) return false;
-  os42.augmentPath([`${os42.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
-  return os42.findInPath("coderabbit") !== null;
+  os43.augmentPath([`${os43.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
+  return os43.findInPath("coderabbit") !== null;
 }
 
 // src/agents/coderabbit/link.ts
@@ -12730,10 +12730,10 @@ function coderabbitCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function coderabbitLoginLauncher(os42) {
+function coderabbitLoginLauncher(os43) {
   return {
     async ensureInstalled() {
-      return ensureCoderabbitInstalled(os42);
+      return ensureCoderabbitInstalled(os43);
     },
     launch() {
       return (0, import_node_child_process6.spawn)("coderabbit", ["login"], { stdio: "inherit" });
@@ -12756,11 +12756,11 @@ function parseReview(stdout) {
   for (const line of lines) {
     const m = line.match(HUNK_LINE_RE);
     if (!m) continue;
-    const [, path61, lineNo, sevToken, message] = m;
-    if (!path61 || !lineNo || !message) continue;
+    const [, path62, lineNo, sevToken, message] = m;
+    if (!path62 || !lineNo || !message) continue;
     const cleanedMessage = message.trim().replace(/^[*-]\s+/, "");
     hunks.push({
-      path: path61.trim(),
+      path: path62.trim(),
       line: Number(lineNo),
       severity: sevToken ? SEVERITY_MAP[sevToken.toLowerCase()] : void 0,
       message: cleanedMessage
@@ -12779,8 +12779,8 @@ var CoderabbitRuntimeStrategy = class {
   meta = getAgent("coderabbit");
   mode = "batch";
   os;
-  constructor(os42) {
-    this.os = os42;
+  constructor(os43) {
+    this.os = os43;
   }
   getDefaultArgs() {
     return ["review"];
@@ -12896,10 +12896,10 @@ function cursorCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function cursorLoginLauncher(os42) {
+function cursorLoginLauncher(os43) {
   return {
     async ensureInstalled() {
-      if (os42.findInPath("cursor-agent")) return true;
+      if (os43.findInPath("cursor-agent")) return true;
       console.error(
         "\n  \u2717 cursor-agent binary not on PATH.\n    Install Cursor (https://cursor.com/) and ensure the CLI\n    plugin is enabled, then re-run `codeam link cursor`.\n"
       );
@@ -12961,8 +12961,8 @@ var CursorRuntimeStrategy = class {
   meta = getAgent("cursor");
   mode = "interactive";
   os;
-  constructor(os42) {
-    this.os = os42;
+  constructor(os43) {
+    this.os = os43;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("cursor-agent");
@@ -13101,10 +13101,10 @@ function aiderCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function aiderLoginLauncher(os42) {
+function aiderLoginLauncher(os43) {
   return {
     async ensureInstalled() {
-      if (os42.findInPath("aider")) return true;
+      if (os43.findInPath("aider")) return true;
       console.error(
         "\n  \u2717 aider binary not on PATH.\n    Install Aider:\n      pip install aider-chat\n    then re-run `codeam link aider`.\n"
       );
@@ -13114,7 +13114,7 @@ function aiderLoginLauncher(os42) {
       console.error(
         "\n  Aider has no interactive login flow.\n    Set ANTHROPIC_API_KEY or OPENAI_API_KEY in your shell,\n    or re-run `codeam link aider --api-key=<your-key>`.\n"
       );
-      return (0, import_node_child_process9.spawn)(os42.id === "win32" ? "cmd.exe" : "sh", os42.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
+      return (0, import_node_child_process9.spawn)(os43.id === "win32" ? "cmd.exe" : "sh", os43.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
         stdio: "ignore"
       });
     }
@@ -13186,8 +13186,8 @@ var AiderRuntimeStrategy = class {
   meta = getAgent("aider");
   mode = "interactive";
   os;
-  constructor(os42) {
-    this.os = os42;
+  constructor(os43) {
+    this.os = os43;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("aider");
@@ -13316,8 +13316,8 @@ function geminiCredentialLocator() {
 function geminiLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os42 = createOsStrategy();
-      return os42.findInPath("gemini") !== null;
+      const os43 = createOsStrategy();
+      return os43.findInPath("gemini") !== null;
     },
     launch() {
       return (0, import_node_child_process10.spawn)("gemini", ["auth", "login"], { stdio: "inherit" });
@@ -13350,8 +13350,8 @@ var GeminiRuntimeStrategy = class {
   meta = getAgent("gemini");
   mode = "interactive";
   os;
-  constructor(os42) {
-    this.os = os42;
+  constructor(os43) {
+    this.os = os43;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("gemini");
@@ -13450,18 +13450,18 @@ var GeminiRuntimeStrategy = class {
 
 // src/agents/registry.ts
 var runtimeBuilders = {
-  claude: (os42) => new ClaudeRuntimeStrategy(os42),
-  codex: (os42) => new CodexRuntimeStrategy(os42),
-  coderabbit: (os42) => new CoderabbitRuntimeStrategy(os42),
-  cursor: (os42) => new CursorRuntimeStrategy(os42),
-  aider: (os42) => new AiderRuntimeStrategy(os42),
-  gemini: (os42) => new GeminiRuntimeStrategy(os42)
+  claude: (os43) => new ClaudeRuntimeStrategy(os43),
+  codex: (os43) => new CodexRuntimeStrategy(os43),
+  coderabbit: (os43) => new CoderabbitRuntimeStrategy(os43),
+  cursor: (os43) => new CursorRuntimeStrategy(os43),
+  aider: (os43) => new AiderRuntimeStrategy(os43),
+  gemini: (os43) => new GeminiRuntimeStrategy(os43)
 };
 var deployBuilders = {
   claude: () => new ClaudeDeployStrategy(),
   codex: () => new CodexDeployStrategy()
 };
-function createAgentStrategy(agent, os42 = createOsStrategy()) {
+function createAgentStrategy(agent, os43 = createOsStrategy()) {
   if (!AGENT_REGISTRY[agent]?.enabled) {
     throw new Error(
       `Agent "${agent}" is not supported in this codeam-cli version. Upgrade with 'npm i -g codeam-cli@latest'.`
@@ -13471,10 +13471,10 @@ function createAgentStrategy(agent, os42 = createOsStrategy()) {
   if (!build) {
     throw new Error(`No runtime strategy registered for agent "${agent}"`);
   }
-  return build(os42);
+  return build(os43);
 }
-function createInteractiveAgentStrategy(agent, os42 = createOsStrategy()) {
-  const s = createAgentStrategy(agent, os42);
+function createInteractiveAgentStrategy(agent, os43 = createOsStrategy()) {
+  const s = createAgentStrategy(agent, os43);
   if (s.mode !== "interactive") {
     throw new Error(
       `Agent "${agent}" is a batch agent; use createAgentStrategy + .runOneShot for one-shot reviews.`
@@ -13984,13 +13984,16 @@ function saveHostIdentity(identity) {
   });
   fs27.chmodSync(file, 384);
 }
+var TERMINAL_ENROLL_CODES = /* @__PURE__ */ new Set(["ENROLL_TOKEN_EXPIRED", "ENROLL_TOKEN_INVALID"]);
 var HostHttpError = class extends Error {
-  constructor(message, status2) {
+  constructor(message, status2, code) {
     super(message);
     this.status = status2;
+    this.code = code;
     this.name = "HostHttpError";
   }
   status;
+  code;
   /**
    * True iff this is a genuine auth-rejection of the host identity:
    * 401 (token invalid), 403 (forbidden), 404 (host not found / deleted).
@@ -13999,10 +14002,25 @@ var HostHttpError = class extends Error {
   get isAuthRejection() {
     return this.status === 401 || this.status === 403 || this.status === 404;
   }
+  /**
+   * True iff the enroll token is permanently unusable: the backend returned
+   * a terminal 4xx (410 Gone for expired/replayed, 400 Bad Request for
+   * malformed/invalid) with a stable `ENROLL_TOKEN_*` error code.
+   *
+   * These failures must NOT be retried — the token will never become valid
+   * again. The host-agent must surface a clear message and exit so the user
+   * knows to generate a new token in the app.
+   */
+  get isTerminalEnrollError() {
+    return typeof this.code === "string" && TERMINAL_ENROLL_CODES.has(this.code);
+  }
 };
 function isHostAuthRejection(err) {
   return err instanceof HostHttpError && err.isAuthRejection;
 }
+function isTerminalEnrollError(err) {
+  return err instanceof HostHttpError && err.isTerminalEnrollError;
+}
 function deleteHostIdentity() {
   try {
     fs27.rmSync(hostIdentityPath(), { force: true });
@@ -14017,10 +14035,11 @@ async function postJson(pathname, body) {
   });
   const json = await res.json();
   if (!res.ok || !json.success) {
-    const err = !json.success ? json.error : void 0;
+    const errBody = !json.success ? json.error : void 0;
     throw new HostHttpError(
-      `${pathname} failed (${err?.code ?? `HTTP_${res.status}`}): ${err?.message ?? res.statusText}`,
-      res.status
+      `${pathname} failed (${errBody?.code ?? `HTTP_${res.status}`}): ${errBody?.message ?? res.statusText}`,
+      res.status,
+      errBody?.code
     );
   }
   return json.data;
@@ -14810,7 +14829,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.51.1" : null;
+  const current = true ? "2.51.3" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -14827,7 +14846,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.51.1" : null;
+  const current = true ? "2.51.3" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -15529,7 +15548,7 @@ var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process15.s
   detached: false
 });
 function currentCliVersion() {
-  return true ? "2.51.1" : null;
+  return true ? "2.51.3" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve7) => {
@@ -16193,6 +16212,12 @@ async function resolveHostIdentity(enrollToken) {
       );
       return identity;
     } catch (err) {
+      if (isTerminalEnrollError(err)) {
+        throw new Error(
+          "Enrollment token expired or invalid \u2014 generate a new one in the app (Settings \u203A Servers \u203A Add server). Tokens expire after 15 minutes and are single-use.",
+          { cause: err }
+        );
+      }
       if (existing) {
         log.trace(
           "host-agent",
@@ -16258,8 +16283,158 @@ async function configureHeadroom(action, ctx, deps) {
   return { enabled: false };
 }
 
-// src/services/preview/cloudflared.ts
+// src/services/headroom/budget-relaunch.ts
+var fs33 = __toESM(require("fs"));
+var os30 = __toESM(require("os"));
+var path37 = __toESM(require("path"));
 var import_child_process12 = require("child_process");
+function amendDeploymentManifestBudget(manifest, budget) {
+  const rawArgs = manifest.proxy_args ?? [];
+  const strippedArgs = [];
+  for (let i = 0; i < rawArgs.length; i++) {
+    if (rawArgs[i] === "--budget" || rawArgs[i] === "--budget-period") {
+      i++;
+      continue;
+    }
+    strippedArgs.push(rawArgs[i]);
+  }
+  const rawEnv = manifest.base_env ?? {};
+  const strippedEnv = { ...rawEnv };
+  delete strippedEnv["HEADROOM_BUDGET"];
+  delete strippedEnv["HEADROOM_BUDGET_PERIOD"];
+  if (!budget) {
+    return { ...manifest, proxy_args: strippedArgs, base_env: strippedEnv };
+  }
+  const newArgs = [
+    ...strippedArgs,
+    "--budget",
+    String(budget.budgetUsd),
+    "--budget-period",
+    budget.budgetPeriod
+  ];
+  const newEnv = {
+    ...strippedEnv,
+    HEADROOM_BUDGET: String(budget.budgetUsd),
+    HEADROOM_BUDGET_PERIOD: budget.budgetPeriod
+  };
+  return { ...manifest, proxy_args: newArgs, base_env: newEnv };
+}
+function findHeadroomDeployments(homeDir2, deps) {
+  const deployDir = path37.join(homeDir2, ".headroom", "deploy");
+  let profiles;
+  try {
+    profiles = deps.readDir(deployDir);
+  } catch {
+    return [];
+  }
+  const results = [];
+  for (const profile of profiles) {
+    const manifestPath = path37.join(deployDir, profile, "manifest.json");
+    let raw;
+    try {
+      raw = deps.readJson(manifestPath);
+    } catch {
+      continue;
+    }
+    if (!raw || typeof raw !== "object") continue;
+    const manifest = raw;
+    const port = typeof manifest.port === "number" ? manifest.port : 0;
+    results.push({ profile, manifestPath, port, manifest });
+  }
+  return results;
+}
+async function applyBudgetToHeadroom(budget, deps) {
+  const supervised = deps.findDeployments().filter((d3) => d3.port === 8787);
+  if (supervised.length > 0) {
+    log.info("headroom-budget", `supervised path \u2014 amending ${supervised.length} deployment(s)`);
+    for (const d3 of supervised) {
+      const amended = amendDeploymentManifestBudget(d3.manifest, budget);
+      deps.writeManifest(d3.manifestPath, amended);
+      deps.restartDeployment(d3.profile);
+    }
+    return { path: "supervised", profiles: supervised.map((d3) => d3.profile) };
+  }
+  log.info("headroom-budget", "direct path \u2014 kill + respawn proxy");
+  deps.killProxy();
+  deps.spawnProxy(budget);
+  return { path: "direct" };
+}
+function writeManifestReal(manifestPath, manifest) {
+  const tmp = manifestPath + ".codeam.tmp";
+  fs33.writeFileSync(tmp, JSON.stringify(manifest, null, 2) + "\n", { mode: 384 });
+  fs33.renameSync(tmp, manifestPath);
+}
+function restartDeploymentReal(profile) {
+  try {
+    const proc = (0, import_child_process12.spawn)("headroom", ["install", "restart", "--profile", profile], {
+      detached: true,
+      stdio: "ignore"
+    });
+    proc.once("error", (e) => {
+      log.warn("headroom-budget", `restart deployment '${profile}' error (best-effort): ${e.message}`);
+    });
+    proc.unref();
+  } catch (e) {
+    log.warn(
+      "headroom-budget",
+      `restart deployment '${profile}' failed (best-effort): ${e instanceof Error ? e.message : String(e)}`
+    );
+  }
+}
+function killProxyReal() {
+  try {
+    const killer = (0, import_child_process12.spawn)("pkill", ["-TERM", "-f", "headroom.*proxy"], {
+      detached: true,
+      stdio: "ignore"
+    });
+    killer.once("error", () => {
+    });
+    killer.unref();
+  } catch {
+  }
+}
+function spawnProxyReal(budget) {
+  try {
+    const proxyEnv = {
+      ...process.env,
+      HEADROOM_KOMPRESS_BACKEND: "onnx_cpu"
+    };
+    const proxy = (0, import_child_process12.spawn)(
+      "headroom",
+      ["proxy", "--port", "8787", ...buildBudgetProxyArgs(proxyEnv)],
+      {
+        stdio: "ignore",
+        detached: true,
+        env: proxyEnv
+      }
+    );
+    proxy.once("error", (e) => {
+      log.warn("headroom-budget", `proxy relaunch error (best-effort): ${e.message}`);
+    });
+    proxy.unref();
+  } catch (e) {
+    log.warn(
+      "headroom-budget",
+      `proxy relaunch failed (best-effort): ${e instanceof Error ? e.message : String(e)}`
+    );
+  }
+}
+function makeRealApplyBudgetDeps() {
+  const homeDir2 = os30.homedir();
+  return {
+    findDeployments: () => findHeadroomDeployments(homeDir2, {
+      readDir: (dir) => fs33.readdirSync(dir),
+      readJson: (filePath) => JSON.parse(fs33.readFileSync(filePath, "utf8"))
+    }),
+    writeManifest: writeManifestReal,
+    restartDeployment: restartDeploymentReal,
+    killProxy: killProxyReal,
+    spawnProxy: spawnProxyReal
+  };
+}
+
+// src/services/preview/cloudflared.ts
+var import_child_process13 = require("child_process");
 var import_fs = require("fs");
 var import_promises = __toESM(require("fs/promises"));
 var import_os6 = __toESM(require("os"));
@@ -16336,7 +16511,7 @@ async function isExecutableBinary(p2) {
 }
 function extractTgz(tgzPath, destDir) {
   return new Promise((resolve7, reject) => {
-    const child = (0, import_child_process12.spawn)("tar", ["-xzf", tgzPath, "-C", destDir], { stdio: "ignore" });
+    const child = (0, import_child_process13.spawn)("tar", ["-xzf", tgzPath, "-C", destDir], { stdio: "ignore" });
     child.on("error", (err) => reject(err));
     child.on(
       "exit",
@@ -16370,7 +16545,7 @@ async function spawnNamedTunnel(bin, token, port) {
   await import_promises.default.mkdir(credDir, { recursive: true });
   const credFile = import_path4.default.join(credDir, `tunnel-${creds.TunnelID}.json`);
   await import_promises.default.writeFile(credFile, JSON.stringify(creds), { mode: 384 });
-  return (0, import_child_process12.spawn)(
+  return (0, import_child_process13.spawn)(
     bin,
     [
       "tunnel",
@@ -16386,9 +16561,9 @@ async function spawnNamedTunnel(bin, token, port) {
 }
 
 // src/services/preview/codespace.ts
-var import_child_process13 = require("child_process");
+var import_child_process14 = require("child_process");
 var import_util3 = require("util");
-var execFileP5 = (0, import_util3.promisify)(import_child_process13.execFile);
+var execFileP5 = (0, import_util3.promisify)(import_child_process14.execFile);
 
 // src/services/preview/config-file.ts
 var import_promises3 = __toESM(require("fs/promises"));
@@ -16583,10 +16758,10 @@ var import_fs2 = require("fs");
 var import_path6 = __toESM(require("path"));
 
 // src/services/preview/run-setup.ts
-var import_child_process14 = require("child_process");
+var import_child_process15 = require("child_process");
 function runSetupCommand(cmd, args2, cwd, env, opts) {
   return new Promise((resolve7) => {
-    const child = (0, import_child_process14.spawn)(cmd, args2, {
+    const child = (0, import_child_process15.spawn)(cmd, args2, {
       cwd,
       env: { ...process.env, ...env ?? {} },
       stdio: ["ignore", "pipe", "pipe"]
@@ -16892,10 +17067,10 @@ function activePreviewSessionIds() {
 }
 
 // src/beads/bd-adapter.ts
-var import_child_process15 = require("child_process");
-var fs37 = __toESM(require("fs"));
-var os31 = __toESM(require("os"));
-var path41 = __toESM(require("path"));
+var import_child_process16 = require("child_process");
+var fs38 = __toESM(require("fs"));
+var os32 = __toESM(require("os"));
+var path42 = __toESM(require("path"));
 var BD_PACKAGE = "@beads/bd";
 function resolveBundledBdBinary() {
   return _resolveSeam.resolveBundled();
@@ -16907,11 +17082,11 @@ function _defaultResolveBundled() {
   } catch {
     return null;
   }
-  const binDir = path41.join(path41.dirname(pkgJsonPath), "bin");
+  const binDir = path42.join(path42.dirname(pkgJsonPath), "bin");
   const binaryName = process.platform === "win32" ? "bd.exe" : "bd";
-  const binaryPath = path41.join(binDir, binaryName);
+  const binaryPath = path42.join(binDir, binaryName);
   try {
-    fs37.accessSync(binaryPath, fs37.constants.F_OK);
+    fs38.accessSync(binaryPath, fs38.constants.F_OK);
     return binaryPath;
   } catch {
     return null;
@@ -16921,13 +17096,13 @@ function resolveBdOnPath() {
   return _resolveSeam.resolveOnPath();
 }
 function _defaultResolveOnPath() {
-  const dirs = (process.env.PATH ?? "").split(path41.delimiter).filter(Boolean);
+  const dirs = (process.env.PATH ?? "").split(path42.delimiter).filter(Boolean);
   const candidates = process.platform === "win32" ? ["bd.exe", "bd.cmd", "bd"] : ["bd"];
   for (const dir of dirs) {
     for (const candidate of candidates) {
-      const full = path41.join(dir, candidate);
+      const full = path42.join(dir, candidate);
       try {
-        fs37.accessSync(full, fs37.constants.F_OK);
+        fs38.accessSync(full, fs38.constants.F_OK);
         return full;
       } catch {
       }
@@ -16946,7 +17121,7 @@ function _defaultSpawn(binaryPath, args2, opts) {
   return new Promise((resolve7) => {
     let proc;
     try {
-      proc = (0, import_child_process15.spawn)(binaryPath, args2, { cwd: opts.cwd, env: opts.env });
+      proc = (0, import_child_process16.spawn)(binaryPath, args2, { cwd: opts.cwd, env: opts.env });
     } catch (err) {
       resolve7({ code: -1, stdout: "", stderr: err.message });
       return;
@@ -17012,7 +17187,7 @@ var BdAdapter = class {
     const env = { ...process.env };
     if (!env.HOME) {
       try {
-        const home = os31.homedir();
+        const home = os32.homedir();
         if (home) env.HOME = home;
       } catch {
       }
@@ -17100,13 +17275,13 @@ function coerceIssue(row, projectKey) {
 }
 
 // src/beads/provisioner.ts
-var import_child_process19 = require("child_process");
-var fs40 = __toESM(require("fs"));
-var os33 = __toESM(require("os"));
-var path44 = __toESM(require("path"));
+var import_child_process20 = require("child_process");
+var fs41 = __toESM(require("fs"));
+var os34 = __toESM(require("os"));
+var path45 = __toESM(require("path"));
 
 // src/beads/install-bd.ts
-var import_child_process16 = require("child_process");
+var import_child_process17 = require("child_process");
 var INSTALL_SH_URL = "https://raw.githubusercontent.com/gastownhall/beads/main/scripts/install.sh";
 var INSTALL_PS1_URL = "https://raw.githubusercontent.com/gastownhall/beads/main/install.ps1";
 function resolveInstallStrategy(platform3) {
@@ -17137,7 +17312,7 @@ function _defaultInstallSpawn(strategy) {
   return new Promise((resolve7) => {
     let proc;
     try {
-      proc = (0, import_child_process16.spawn)(strategy.command, strategy.args, { env: process.env });
+      proc = (0, import_child_process17.spawn)(strategy.command, strategy.args, { env: process.env });
     } catch (err) {
       resolve7({ ok: false, code: -1, stderr: err.message });
       return;
@@ -17167,10 +17342,10 @@ async function installBd(platform3 = process.platform) {
 }
 
 // src/beads/install-dolt.ts
-var import_child_process17 = require("child_process");
-var fs38 = __toESM(require("fs"));
-var os32 = __toESM(require("os"));
-var path42 = __toESM(require("path"));
+var import_child_process18 = require("child_process");
+var fs39 = __toESM(require("fs"));
+var os33 = __toESM(require("os"));
+var path43 = __toESM(require("path"));
 var DOLT_INSTALL_SH_URL = "https://github.com/dolthub/dolt/releases/latest/download/install.sh";
 var DOLT_MSI_URL = "https://github.com/dolthub/dolt/releases/latest/download/dolt-windows-amd64.msi";
 function resolveDoltInstallStrategy(platform3) {
@@ -17210,11 +17385,11 @@ function resolveDoltInstallStrategy(platform3) {
 }
 var DOLT_RELEASE_BASE = "https://github.com/dolthub/dolt/releases/latest/download";
 function doltPlatformTuple(platform3, arch2) {
-  const os42 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
+  const os43 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
   const a = arch2 === "x64" ? "amd64" : arch2 === "arm64" ? "arm64" : null;
   if (!a) return null;
-  if (os42 === "windows" && a !== "amd64") return null;
-  return `${os42}-${a}`;
+  if (os43 === "windows" && a !== "amd64") return null;
+  return `${os43}-${a}`;
 }
 function resolveDoltTarballStrategy(targetDir, platform3, arch2) {
   const tuple = doltPlatformTuple(platform3, arch2);
@@ -17259,14 +17434,14 @@ async function installDoltToDir(targetDir, platform3 = process.platform, arch2 =
   return result;
 }
 var _doltPathSeam = {
-  homedir: () => os32.homedir(),
+  homedir: () => os33.homedir(),
   getPath: () => process.env.PATH ?? "",
   setPath: (p2) => {
     process.env.PATH = p2;
   },
   exists: (p2) => {
     try {
-      fs38.accessSync(p2, fs38.constants.F_OK);
+      fs39.accessSync(p2, fs39.constants.F_OK);
       return true;
     } catch {
       return false;
@@ -17277,7 +17452,7 @@ function doltBinaryNames(platform3) {
   return platform3 === "win32" ? ["dolt.exe", "dolt.cmd", "dolt"] : ["dolt"];
 }
 function knownDoltDirs(platform3) {
-  const P3 = platform3 === "win32" ? path42.win32 : path42.posix;
+  const P3 = platform3 === "win32" ? path43.win32 : path43.posix;
   const home = _doltPathSeam.homedir();
   if (platform3 === "win32") {
     return [
@@ -17293,7 +17468,7 @@ function knownDoltDirs(platform3) {
   ].filter(Boolean);
 }
 function ensureDoltResolvable(platform3 = process.platform) {
-  const P3 = platform3 === "win32" ? path42.win32 : path42.posix;
+  const P3 = platform3 === "win32" ? path43.win32 : path43.posix;
   const delim = platform3 === "win32" ? ";" : ":";
   const names = doltBinaryNames(platform3);
   const pathDirs = _doltPathSeam.getPath().split(delim).filter(Boolean);
@@ -17329,7 +17504,7 @@ function _defaultDoltInstallSpawn(strategy) {
     };
     let proc;
     try {
-      proc = (0, import_child_process17.spawn)(strategy.command, strategy.args, {
+      proc = (0, import_child_process18.spawn)(strategy.command, strategy.args, {
         env: process.env,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -17427,10 +17602,10 @@ async function ensureSharedServer(adapter, options = {}) {
 }
 
 // src/beads/project-key.ts
-var import_child_process18 = require("child_process");
+var import_child_process19 = require("child_process");
 var crypto2 = __toESM(require("crypto"));
-var fs39 = __toESM(require("fs"));
-var path43 = __toESM(require("path"));
+var fs40 = __toESM(require("fs"));
+var path44 = __toESM(require("path"));
 function normalizeOrigin(raw) {
   const trimmed = raw.trim();
   if (!trimmed) return null;
@@ -17456,17 +17631,17 @@ function normalizeOrigin(raw) {
   return `${host2}/${pathPart}`;
 }
 function findRepoRoot(cwd) {
-  let dir = path43.resolve(cwd);
+  let dir = path44.resolve(cwd);
   const seen = /* @__PURE__ */ new Set();
   for (let i = 0; i < 256; i++) {
     if (seen.has(dir)) return null;
     seen.add(dir);
     try {
-      const stat3 = fs39.statSync(path43.join(dir, ".git"), { throwIfNoEntry: false });
+      const stat3 = fs40.statSync(path44.join(dir, ".git"), { throwIfNoEntry: false });
       if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
     } catch {
     }
-    const parent = path43.dirname(dir);
+    const parent = path44.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -17474,10 +17649,10 @@ function findRepoRoot(cwd) {
 }
 var _execSeam2 = {
   exec: (file, args2, opts) => {
-    const out2 = (0, import_child_process18.execFileSync)(file, args2, opts);
+    const out2 = (0, import_child_process19.execFileSync)(file, args2, opts);
     return typeof out2 === "string" ? out2 : out2.toString("utf8");
   },
-  realpath: (p2) => fs39.realpathSync(p2)
+  realpath: (p2) => fs40.realpathSync(p2)
 };
 function readOrigin(cwd) {
   try {
@@ -17506,7 +17681,7 @@ function deriveProjectIdentity(cwd = process.cwd()) {
   } catch {
   }
   const hash = crypto2.createHash("sha256").update(real).digest("hex");
-  return { projectKey: `path:${hash}`, projectLabel: path43.basename(real) || "project" };
+  return { projectKey: `path:${hash}`, projectLabel: path44.basename(real) || "project" };
 }
 
 // src/beads/project-prefix.ts
@@ -17548,17 +17723,17 @@ var _provisionSeam = {
 };
 var _linkSeam = {
   platform: () => process.platform,
-  homedir: () => os33.homedir(),
+  homedir: () => os34.homedir(),
   isWritableDir: (dir) => {
     try {
-      fs40.accessSync(dir, fs40.constants.W_OK);
+      fs41.accessSync(dir, fs41.constants.W_OK);
       return true;
     } catch {
       return false;
     }
   },
   ensureDir: (dir) => {
-    fs40.mkdirSync(dir, { recursive: true });
+    fs41.mkdirSync(dir, { recursive: true });
   },
   /**
    * A directory to symlink `bd` into so the AGENT's shell + Claude Code's
@@ -17579,9 +17754,9 @@ var _linkSeam = {
    * which `linkBdOntoPath` creates if missing.
    */
   cliBinDir: () => {
-    const pathDirs = (process.env.PATH ?? "").split(path44.delimiter).filter(Boolean);
+    const pathDirs = (process.env.PATH ?? "").split(path45.delimiter).filter(Boolean);
     const home = _linkSeam.homedir();
-    const localBin = home ? path44.join(home, ".local", "bin") : null;
+    const localBin = home ? path45.join(home, ".local", "bin") : null;
     if (localBin) {
       try {
         _linkSeam.ensureDir(localBin);
@@ -17591,16 +17766,16 @@ var _linkSeam = {
     const candidates = [];
     if (localBin) candidates.push(localBin);
     try {
-      candidates.push(path44.dirname(process.execPath));
+      candidates.push(path45.dirname(process.execPath));
     } catch {
     }
     candidates.push("/usr/local/bin");
     const entry = process.argv[1];
     if (entry) {
       try {
-        candidates.push(path44.dirname(fs40.realpathSync(entry)));
+        candidates.push(path45.dirname(fs41.realpathSync(entry)));
       } catch {
-        candidates.push(path44.dirname(entry));
+        candidates.push(path45.dirname(entry));
       }
     }
     const onPathWritable = candidates.find(
@@ -17612,20 +17787,20 @@ var _linkSeam = {
   /** Current symlink target at `linkPath`, or null when absent / not a link. */
   readlink: (linkPath) => {
     try {
-      return fs40.readlinkSync(linkPath);
+      return fs41.readlinkSync(linkPath);
     } catch {
       return null;
     }
   },
-  unlink: (linkPath) => fs40.unlinkSync(linkPath),
-  symlink: (target, linkPath) => fs40.symlinkSync(target, linkPath)
+  unlink: (linkPath) => fs41.unlinkSync(linkPath),
+  symlink: (target, linkPath) => fs41.symlinkSync(target, linkPath)
 };
 function linkBdOntoPath(binaryPath) {
   if (_linkSeam.platform() === "win32") return;
   const binDir = _linkSeam.cliBinDir();
   if (!binDir) return;
   _linkSeam.ensureDir(binDir);
-  const linkPath = path44.join(binDir, "bd");
+  const linkPath = path45.join(binDir, "bd");
   if (linkPath === binaryPath) return;
   const current = _linkSeam.readlink(linkPath);
   if (current === binaryPath) return;
@@ -17634,7 +17809,7 @@ function linkBdOntoPath(binaryPath) {
   log.info("beads", `linked bd onto PATH: ${linkPath} -> ${binaryPath}`);
 }
 function setGitBeadsRole() {
-  (0, import_child_process19.execFileSync)("git", ["config", "--global", "beads.role", "contributor"], {
+  (0, import_child_process20.execFileSync)("git", ["config", "--global", "beads.role", "contributor"], {
     stdio: "ignore"
   });
 }
@@ -17820,7 +17995,7 @@ function dedupeRecipes(agents) {
 
 // src/beads/watcher.ts
 var crypto4 = __toESM(require("crypto"));
-var path45 = __toESM(require("path"));
+var path46 = __toESM(require("path"));
 var API_BASE6 = resolveApiBaseUrl();
 var DEBOUNCE_MS2 = 400;
 var ZERO_SUMMARY = {
@@ -17844,7 +18019,7 @@ var BeadsWatcher = class {
   constructor(opts) {
     this.opts = opts;
     this.bd = opts.adapter ?? new BdAdapter({ cwd: opts.cwd, beadsDir: opts.beadsDir });
-    this.feedPath = opts.feedPath ?? path45.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
+    this.feedPath = opts.feedPath ?? path46.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
     this.apiBase = opts.apiBaseUrl ?? API_BASE6;
   }
   opts;
@@ -18254,7 +18429,7 @@ var pendingAttachmentFiles = /* @__PURE__ */ new Set();
 function cleanupAttachmentTempFiles() {
   for (const p2 of pendingAttachmentFiles) {
     try {
-      fs42.unlinkSync(p2);
+      fs43.unlinkSync(p2);
     } catch {
     }
   }
@@ -18263,8 +18438,8 @@ function cleanupAttachmentTempFiles() {
 function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
-    const tmpPath = path47.join(os35.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
-    fs42.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
+    const tmpPath = path48.join(os36.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
+    fs43.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     pendingAttachmentFiles.add(tmpPath);
     return tmpPath;
   });
@@ -18284,7 +18459,7 @@ var startTask = (ctx, _cmd, parsed) => {
     setTimeout(() => {
       for (const p2 of paths) {
         try {
-          fs42.unlinkSync(p2);
+          fs43.unlinkSync(p2);
         } catch {
         }
         pendingAttachmentFiles.delete(p2);
@@ -18409,7 +18584,7 @@ var sessionTerminated = async (ctx, cmd) => {
   } catch {
   }
   try {
-    const proc = (0, import_child_process20.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
+    const proc = (0, import_child_process21.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
       detached: true,
       stdio: "ignore"
     });
@@ -18431,7 +18606,7 @@ var shutdownSession = async (ctx, cmd) => {
   }
   if (ctx.keepAliveCtx.inCodespace && ctx.keepAliveCtx.codespaceName) {
     try {
-      const stopProc = (0, import_child_process20.spawn)(
+      const stopProc = (0, import_child_process21.spawn)(
         "bash",
         ["-lc", `sleep 1; gh codespace stop -c ${JSON.stringify(ctx.keepAliveCtx.codespaceName)} >/dev/null 2>&1 || true`],
         { detached: true, stdio: "ignore" }
@@ -18441,7 +18616,7 @@ var shutdownSession = async (ctx, cmd) => {
     }
   }
   try {
-    const proc = (0, import_child_process20.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
+    const proc = (0, import_child_process21.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
       detached: true,
       stdio: "ignore"
     });
@@ -18485,9 +18660,9 @@ var listFiles = async (ctx, cmd, parsed) => {
   await ctx.relay.sendResult(cmd.id, "completed", result);
 };
 var envReadH = async (ctx, cmd) => {
-  const envPath = path47.join(process.cwd(), ".env");
+  const envPath = path48.join(process.cwd(), ".env");
   try {
-    const raw = await fs42.promises.readFile(envPath, "utf8");
+    const raw = await fs43.promises.readFile(envPath, "utf8");
     await ctx.relay.sendResult(cmd.id, "completed", {
       exists: true,
       vars: parseDotenv(raw)
@@ -18518,14 +18693,14 @@ var envWriteH = async (ctx, cmd, parsed) => {
     }
     seen.add(v.key);
   }
-  const envPath = path47.join(process.cwd(), ".env");
-  const tmpPath = path47.join(process.cwd(), ".env.codeam.tmp");
+  const envPath = path48.join(process.cwd(), ".env");
+  const tmpPath = path48.join(process.cwd(), ".env.codeam.tmp");
   try {
-    await fs42.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
-    await fs42.promises.rename(tmpPath, envPath);
+    await fs43.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
+    await fs43.promises.rename(tmpPath, envPath);
     await ctx.relay.sendResult(cmd.id, "completed", { ok: true, count: vars.length });
   } catch (err) {
-    await fs42.promises.rm(tmpPath, { force: true }).catch(() => void 0);
+    await fs43.promises.rm(tmpPath, { force: true }).catch(() => void 0);
     await ctx.relay.sendResult(cmd.id, "failed", { error: err.message });
   }
 };
@@ -18543,7 +18718,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
   let configuredAgent = rawAgentId;
   if (!configuredAgent) {
     try {
-      const raw = JSON.parse(fs42.readFileSync(headroomConfigPath(), "utf8"));
+      const raw = JSON.parse(fs43.readFileSync(headroomConfigPath(), "utf8"));
       configuredAgent = raw.agent ?? "";
     } catch {
     }
@@ -18577,7 +18752,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
     persist: persistHeadroomConfig,
     readEnabled: () => {
       try {
-        const raw = JSON.parse(fs42.readFileSync(headroomConfigPath(), "utf8"));
+        const raw = JSON.parse(fs43.readFileSync(headroomConfigPath(), "utf8"));
         return raw.enabled === true;
       } catch {
         return false;
@@ -18629,7 +18804,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
     restoreAgentHeadroomConfig: (kind) => restoreAgentHeadroomConfig(kind),
     stopProxy: () => {
       try {
-        const p2 = (0, import_child_process20.spawn)("pkill", ["-TERM", "-f", "headroom.*proxy"], {
+        const p2 = (0, import_child_process21.spawn)("pkill", ["-TERM", "-f", "headroom.*proxy"], {
           detached: true,
           stdio: "ignore"
         });
@@ -18671,7 +18846,7 @@ var headroomBudgetH = async (ctx, cmd) => {
   }
   let headroomActive = false;
   try {
-    const raw = JSON.parse(fs42.readFileSync(headroomConfigPath(), "utf8"));
+    const raw = JSON.parse(fs43.readFileSync(headroomConfigPath(), "utf8"));
     headroomActive = raw.enabled === true;
   } catch {
   }
@@ -18681,7 +18856,7 @@ var headroomBudgetH = async (ctx, cmd) => {
   }
   let existingConfig = { enabled: true };
   try {
-    existingConfig = JSON.parse(fs42.readFileSync(headroomConfigPath(), "utf8"));
+    existingConfig = JSON.parse(fs43.readFileSync(headroomConfigPath(), "utf8"));
   } catch {
   }
   if (payload.budgetEnabled && payload.budgetUsd != null) {
@@ -18705,37 +18880,11 @@ var headroomBudgetH = async (ctx, cmd) => {
     delete process.env["HEADROOM_BUDGET"];
     delete process.env["HEADROOM_BUDGET_PERIOD"];
   }
-  try {
-    const killer = (0, import_child_process20.spawn)("pkill", ["-TERM", "-f", "headroom.*proxy"], {
-      detached: true,
-      stdio: "ignore"
-    });
-    killer.once("error", () => {
-    });
-    killer.unref();
-  } catch {
-  }
-  try {
-    const proxyEnv = { ...process.env, HEADROOM_KOMPRESS_BACKEND: "onnx_cpu" };
-    const proxy = (0, import_child_process20.spawn)(
-      "headroom",
-      ["proxy", "--port", "8787", ...buildBudgetProxyArgs(proxyEnv)],
-      {
-        stdio: "ignore",
-        detached: true,
-        env: proxyEnv
-      }
-    );
-    proxy.once("error", (e) => {
-      log.warn("headroom-budget", `proxy relaunch error (best-effort): ${e.message}`);
-    });
-    proxy.unref();
-  } catch (e) {
-    log.warn(
-      "headroom-budget",
-      `proxy relaunch failed (best-effort): ${e instanceof Error ? e.message : String(e)}`
-    );
-  }
+  const budgetSpec = payload.budgetEnabled && payload.budgetUsd != null ? {
+    budgetUsd: payload.budgetUsd,
+    budgetPeriod: payload.budgetPeriod ?? "daily"
+  } : null;
+  await applyBudgetToHeadroom(budgetSpec, makeRealApplyBudgetDeps());
   await ctx.relay.sendResult(cmd.id, "completed", { applied: true });
 };
 var _beadsEmitChain = Promise.resolve();
@@ -19233,8 +19382,8 @@ function normalizeDetectionForSpawn(detection, cwd) {
   if (args2.length === 0) return detection;
   const binName = args2[0];
   if (binName.startsWith("-")) return detection;
-  const binPath = path47.join(cwd, "node_modules", ".bin", binName);
-  if (!fs42.existsSync(binPath)) return detection;
+  const binPath = path48.join(cwd, "node_modules", ".bin", binName);
+  if (!fs43.existsSync(binPath)) return detection;
   return {
     ...detection,
     command: binPath,
@@ -19469,7 +19618,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
       "BOOT_SEQUENCE",
       `${spawnable.command} ${spawnable.args.join(" ")}`
     );
-    const devServer = (0, import_child_process20.spawn)(spawnable.command, spawnable.args, {
+    const devServer = (0, import_child_process21.spawn)(spawnable.command, spawnable.args, {
       cwd: process.cwd(),
       env: { ...process.env, ...spawnable.env ?? {} },
       stdio: ["ignore", "pipe", "pipe"],
@@ -19619,7 +19768,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
             `cloudflared quick tunnel (retry ${attempt}/${MAX_TUNNEL_ATTEMPTS})`
           );
         }
-        const candidate = (0, import_child_process20.spawn)(
+        const candidate = (0, import_child_process21.spawn)(
           bin,
           ["tunnel", "--url", `http://localhost:${detection.port}`],
           { stdio: ["ignore", "pipe", "pipe"] }
@@ -19815,13 +19964,13 @@ async function dispatchCommand(ctx, cmd) {
 }
 
 // src/commands/start/keep-alive.ts
-var import_child_process21 = require("child_process");
+var import_child_process22 = require("child_process");
 function buildKeepAlive(ctx) {
   let timer = null;
   async function setIdleTimeout(minutes) {
     if (!ctx.inCodespace || !ctx.codespaceName) return;
     await new Promise((resolve7) => {
-      const proc = (0, import_child_process21.spawn)(
+      const proc = (0, import_child_process22.spawn)(
         "gh",
         [
           "api",
@@ -20052,12 +20201,12 @@ function readTokenFromArgs(args2) {
   }
   const fileFlag = args2.find((a) => a.startsWith("--token-file="));
   if (fileFlag) {
-    const path61 = fileFlag.slice("--token-file=".length);
+    const path62 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs43.readFileSync(path61, "utf8").trim();
-      if (content.length === 0) fail(`--token-file ${path61} is empty`);
+      const content = fs44.readFileSync(path62, "utf8").trim();
+      if (content.length === 0) fail(`--token-file ${path62} is empty`);
       try {
-        fs43.unlinkSync(path61);
+        fs44.unlinkSync(path62);
       } catch {
       }
       return content;
@@ -20083,7 +20232,7 @@ async function claimOnce(token, pluginId, pluginSecretHash) {
     pluginId,
     ideName: "codeam-cli (codespace)",
     ideVersion: process.env.npm_package_version ?? "unknown",
-    hostname: os36.hostname(),
+    hostname: os37.hostname(),
     codespaceName: process.env.CODESPACE_NAME ?? "",
     // Current git branch of the codespace's working directory, so the
     // backend can populate `PairedSession.branch` for the codespace pair.
@@ -20144,7 +20293,7 @@ async function claim(token, pluginId, pluginSecretHash) {
   }
 }
 function pairAutoLockPath() {
-  return path48.join(os36.homedir(), ".codeam", "pair-auto.lock");
+  return path49.join(os37.homedir(), ".codeam", "pair-auto.lock");
 }
 function isLivePairAuto(pid) {
   if (!Number.isInteger(pid) || pid <= 0 || pid === process.pid) return false;
@@ -20154,7 +20303,7 @@ function isLivePairAuto(pid) {
     if (e.code !== "EPERM") return false;
   }
   try {
-    return fs43.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
+    return fs44.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
   } catch {
     return true;
   }
@@ -20164,24 +20313,24 @@ function isLiveCodeam(pid) {
 }
 function daemonLockPath(sessionId) {
   const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
-  return path48.join(os36.homedir(), ".codeam", `daemon-${safe}.lock`);
+  return path49.join(os37.homedir(), ".codeam", `daemon-${safe}.lock`);
 }
 function acquireDaemonLock(sessionId) {
   const lockPath = daemonLockPath(sessionId);
   try {
-    fs43.mkdirSync(path48.dirname(lockPath), { recursive: true });
+    fs44.mkdirSync(path49.dirname(lockPath), { recursive: true });
     try {
-      fs43.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs44.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs43.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs44.readFileSync(lockPath, "utf8").trim());
       if (holder && holder !== process.pid && isLiveCodeam(holder)) return false;
-      fs43.writeFileSync(lockPath, String(process.pid));
+      fs44.writeFileSync(lockPath, String(process.pid));
     }
     const release3 = () => {
       try {
-        if (fs43.existsSync(lockPath) && Number(fs43.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs43.unlinkSync(lockPath);
+        if (fs44.existsSync(lockPath) && Number(fs44.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs44.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -20203,19 +20352,19 @@ function acquireDaemonLock(sessionId) {
 function acquireSingletonLock() {
   const lockPath = pairAutoLockPath();
   try {
-    fs43.mkdirSync(path48.dirname(lockPath), { recursive: true });
+    fs44.mkdirSync(path49.dirname(lockPath), { recursive: true });
     try {
-      fs43.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs44.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs43.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs44.readFileSync(lockPath, "utf8").trim());
       if (isLivePairAuto(holder)) return false;
-      fs43.writeFileSync(lockPath, String(process.pid));
+      fs44.writeFileSync(lockPath, String(process.pid));
     }
     process.once("exit", () => {
       try {
-        if (fs43.existsSync(lockPath) && Number(fs43.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs43.unlinkSync(lockPath);
+        if (fs44.existsSync(lockPath) && Number(fs44.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs44.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -20660,19 +20809,19 @@ var AgentService = class _AgentService {
 };
 
 // src/agents/acp/adapters.ts
-var path49 = __toESM(require("path"));
+var path50 = __toESM(require("path"));
 var require_ = require;
 function resolveBin(pkgName, binName) {
   try {
     const manifestPath = require_.resolve(`${pkgName}/package.json`);
     const manifest = require_(`${pkgName}/package.json`);
-    const pkgDir = path49.dirname(manifestPath);
+    const pkgDir = path50.dirname(manifestPath);
     const bin = manifest.bin;
     if (!bin) return null;
-    if (typeof bin === "string") return path49.resolve(pkgDir, bin);
+    if (typeof bin === "string") return path50.resolve(pkgDir, bin);
     const target = binName ?? Object.keys(bin)[0];
     if (!target || !bin[target]) return null;
-    return path49.resolve(pkgDir, bin[target]);
+    return path50.resolve(pkgDir, bin[target]);
   } catch {
     return null;
   }
@@ -20742,9 +20891,9 @@ function requiresAcp(agent) {
 var import_node_crypto7 = require("crypto");
 
 // src/services/history.service.ts
-var fs44 = __toESM(require("fs"));
-var path50 = __toESM(require("path"));
-var os37 = __toESM(require("os"));
+var fs45 = __toESM(require("fs"));
+var path51 = __toESM(require("path"));
+var os38 = __toESM(require("os"));
 var https7 = __toESM(require("https"));
 var http6 = __toESM(require("http"));
 var import_zod2 = require("zod");
@@ -20771,7 +20920,7 @@ function parseJsonl(filePath) {
   const messages = [];
   let raw;
   try {
-    raw = fs44.readFileSync(filePath, "utf8");
+    raw = fs45.readFileSync(filePath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       log.warn("history:parseJsonl", `read failed for ${filePath}`, err);
@@ -20912,7 +21061,7 @@ var HistoryService = class _HistoryService {
     return this._quotaPercent === null || Date.now() - this._quotaFetchedAt > ttlMs;
   }
   get projectDir() {
-    return this.runtime.resolveHistoryDir(this.cwd) ?? path50.join(os37.homedir(), ".claude", "projects", encodeCwd(this.cwd));
+    return this.runtime.resolveHistoryDir(this.cwd) ?? path51.join(os38.homedir(), ".claude", "projects", encodeCwd(this.cwd));
   }
   /** Set the current Claude conversation ID (extracted from /cost command or session start) */
   setCurrentConversationId(id) {
@@ -20924,7 +21073,7 @@ var HistoryService = class _HistoryService {
   /** Return the current message count in the active conversation. */
   getCurrentMessageCount() {
     if (!this.currentConversationId) return 0;
-    const filePath = path50.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+    const filePath = path51.join(this.projectDir, `${this.currentConversationId}.jsonl`);
     return parseJsonl(filePath).length;
   }
   /**
@@ -20935,7 +21084,7 @@ var HistoryService = class _HistoryService {
     const deadline = Date.now() + timeoutMs;
     while (Date.now() < deadline) {
       if (!this.currentConversationId) return null;
-      const filePath = path50.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+      const filePath = path51.join(this.projectDir, `${this.currentConversationId}.jsonl`);
       const messages = parseJsonl(filePath);
       if (messages.length > previousCount) {
         for (let i = messages.length - 1; i >= previousCount; i--) {
@@ -20961,16 +21110,16 @@ var HistoryService = class _HistoryService {
     const dir = this.projectDir;
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     try {
-      const files = fs44.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
+      const files = fs45.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
         try {
-          const stat3 = fs44.statSync(path50.join(dir, e.name));
+          const stat3 = fs45.statSync(path51.join(dir, e.name));
           return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
         } catch {
           return { name: e.name, mtime: 0, birthtime: 0 };
         }
       }).filter((f) => f.birthtime >= cutoff).sort((a, b) => b.mtime - a.mtime);
       if (files.length > 0) {
-        this.currentConversationId = path50.basename(files[0].name, ".jsonl");
+        this.currentConversationId = path51.basename(files[0].name, ".jsonl");
       }
     } catch {
     }
@@ -21004,13 +21153,13 @@ var HistoryService = class _HistoryService {
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     let entries;
     try {
-      entries = fs44.readdirSync(dir, { withFileTypes: true });
+      entries = fs45.readdirSync(dir, { withFileTypes: true });
     } catch {
       return null;
     }
     const files = entries.filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
       try {
-        const stat3 = fs44.statSync(path50.join(dir, e.name));
+        const stat3 = fs45.statSync(path51.join(dir, e.name));
         return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
       } catch {
         return { name: e.name, mtime: 0, birthtime: 0 };
@@ -21019,12 +21168,12 @@ var HistoryService = class _HistoryService {
     if (files.length === 0) return null;
     const targetFile = this.currentConversationId ? `${this.currentConversationId}.jsonl` : files[0].name;
     if (!files.some((f) => f.name === targetFile)) return null;
-    return this.extractUsageFromFile(path50.join(dir, targetFile));
+    return this.extractUsageFromFile(path51.join(dir, targetFile));
   }
   extractUsageFromFile(filePath) {
     let raw;
     try {
-      raw = fs44.readFileSync(filePath, "utf8");
+      raw = fs45.readFileSync(filePath, "utf8");
     } catch {
       return null;
     }
@@ -21069,9 +21218,9 @@ var HistoryService = class _HistoryService {
     let totalCost = 0;
     let files;
     try {
-      files = fs44.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
+      files = fs45.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
         try {
-          return fs44.statSync(path50.join(projectDir, f)).mtimeMs >= monthStartMs;
+          return fs45.statSync(path51.join(projectDir, f)).mtimeMs >= monthStartMs;
         } catch {
           return false;
         }
@@ -21082,7 +21231,7 @@ var HistoryService = class _HistoryService {
     for (const file of files) {
       let raw;
       try {
-        raw = fs44.readFileSync(path50.join(projectDir, file), "utf8");
+        raw = fs45.readFileSync(path51.join(projectDir, file), "utf8");
       } catch {
         continue;
       }
@@ -21161,7 +21310,7 @@ var HistoryService = class _HistoryService {
     if (this.runtime.resolveHistoryFile) {
       return this.runtime.resolveHistoryFile(this.cwd, sessionId);
     }
-    return path50.join(this.projectDir, `${sessionId}.jsonl`);
+    return path51.join(this.projectDir, `${sessionId}.jsonl`);
   }
   /**
    * Parse a conversation's messages from disk, agent-aware. Claude uses the
@@ -21195,7 +21344,7 @@ var HistoryService = class _HistoryService {
         };
       });
     }
-    return parseJsonl(path50.join(this.projectDir, `${sessionId}.jsonl`));
+    return parseJsonl(path51.join(this.projectDir, `${sessionId}.jsonl`));
   }
   async loadConversation(sessionId) {
     const messages = this.readConversation(sessionId);
@@ -21251,7 +21400,7 @@ var HistoryService = class _HistoryService {
     if (!filePath) return false;
     let mtimeMs;
     try {
-      mtimeMs = fs44.statSync(filePath).mtimeMs;
+      mtimeMs = fs45.statSync(filePath).mtimeMs;
     } catch {
       return false;
     }
@@ -21320,10 +21469,10 @@ var HistoryService = class _HistoryService {
 
 // src/agents/acp/client.ts
 var import_node_child_process17 = require("child_process");
-var fs45 = __toESM(require("fs/promises"));
+var fs46 = __toESM(require("fs/promises"));
 var fsSync = __toESM(require("fs"));
-var os38 = __toESM(require("os"));
-var path51 = __toESM(require("path"));
+var os39 = __toESM(require("os"));
+var path52 = __toESM(require("path"));
 var import_node_stream = require("stream");
 
 // ../../node_modules/@agentclientprotocol/sdk/dist/acp.js
@@ -24156,7 +24305,7 @@ var AcpClient = class {
       },
       readTextFile: async (params) => {
         try {
-          const content = await fs45.readFile(params.path, "utf8");
+          const content = await fs46.readFile(params.path, "utf8");
           return applyLineRange(content, params.line ?? null, params.limit ?? null);
         } catch (err) {
           const code = err.code;
@@ -24176,7 +24325,7 @@ var AcpClient = class {
       },
       writeTextFile: async (params) => {
         try {
-          await fs45.writeFile(params.path, params.content, "utf8");
+          await fs46.writeFile(params.path, params.content, "utf8");
           return {};
         } catch (err) {
           const code = err.code;
@@ -24225,25 +24374,25 @@ function applyLineRange(content, line, limit) {
   return { content: lines.slice(start2, end).join("\n") };
 }
 function knownAgentBinaryDirs() {
-  const home = os38.homedir();
+  const home = os39.homedir();
   const out2 = [];
   out2.push("/tmp/codeam-node20/bin");
   for (const root of [
     "/usr/local/share/nvm/versions/node",
-    path51.join(home, ".nvm/versions/node")
+    path52.join(home, ".nvm/versions/node")
   ]) {
     try {
       for (const child of fsSync.readdirSync(root)) {
-        out2.push(path51.join(root, child, "bin"));
+        out2.push(path52.join(root, child, "bin"));
       }
     } catch {
     }
   }
-  out2.push(path51.join(home, ".volta/bin"));
+  out2.push(path52.join(home, ".volta/bin"));
   out2.push("/usr/local/bin");
   out2.push("/usr/bin");
-  out2.push(path51.join(home, ".local/bin"));
-  out2.push(path51.join(home, "bin"));
+  out2.push(path52.join(home, ".local/bin"));
+  out2.push(path52.join(home, "bin"));
   return out2.filter((p2) => {
     try {
       return fsSync.statSync(p2).isDirectory();
@@ -24254,7 +24403,7 @@ function knownAgentBinaryDirs() {
 }
 function expandPathForAgentBinaries(existingPath) {
   const existing = new Set(
-    existingPath.split(path51.delimiter).filter((p2) => p2.length > 0)
+    existingPath.split(path52.delimiter).filter((p2) => p2.length > 0)
   );
   const additions = [];
   for (const dir of knownAgentBinaryDirs()) {
@@ -24264,7 +24413,7 @@ function expandPathForAgentBinaries(existingPath) {
     }
   }
   if (additions.length === 0) return existingPath;
-  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path51.delimiter);
+  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path52.delimiter);
 }
 
 // src/services/streaming/transport.ts
@@ -24748,16 +24897,16 @@ function commonPrefixLength(a, b) {
 }
 
 // src/agents/acp/onboarding.ts
-var import_child_process22 = require("child_process");
-var fs46 = __toESM(require("fs"));
-var os39 = __toESM(require("os"));
-var path52 = __toESM(require("path"));
+var import_child_process23 = require("child_process");
+var fs47 = __toESM(require("fs"));
+var os40 = __toESM(require("os"));
+var path53 = __toESM(require("path"));
 var _onboardingSeam = {
-  markerPath: (sessionId) => path52.join(os39.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
-  exists: (p2) => fs46.existsSync(p2),
+  markerPath: (sessionId) => path53.join(os40.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
+  exists: (p2) => fs47.existsSync(p2),
   write: (p2) => {
-    fs46.mkdirSync(path52.dirname(p2), { recursive: true });
-    fs46.writeFileSync(p2, "");
+    fs47.mkdirSync(path53.dirname(p2), { recursive: true });
+    fs47.writeFileSync(p2, "");
   },
   disabled: () => {
     const v = process.env.CODEAM_ONBOARDING_DISABLED;
@@ -24769,7 +24918,7 @@ var _onboardingSeam = {
    */
   gitRemoteUrl: (cwd) => {
     try {
-      return (0, import_child_process22.execFileSync)("git", ["-C", cwd, "remote", "get-url", "origin"], {
+      return (0, import_child_process23.execFileSync)("git", ["-C", cwd, "remote", "get-url", "origin"], {
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"],
         timeout: 2e3
@@ -24794,7 +24943,7 @@ function resolveRepoName(cwd) {
       if (name) return name;
     }
   }
-  const base = path52.basename(cwd || "");
+  const base = path53.basename(cwd || "");
   if (base && !isUuid(base)) return base;
   return "this project";
 }
@@ -25086,9 +25235,9 @@ function deriveInputSuggestion(finalText) {
 var import_crypto5 = require("crypto");
 
 // src/services/turn-files/git-changeset.ts
-var import_child_process23 = require("child_process");
-var fs47 = __toESM(require("fs/promises"));
-var path53 = __toESM(require("path"));
+var import_child_process24 = require("child_process");
+var fs48 = __toESM(require("fs/promises"));
+var path54 = __toESM(require("path"));
 async function collectRepoChangeset(opts) {
   const status2 = await runGit3(opts.repoRoot, ["status", "--porcelain=v1", "-z"]);
   if (status2 === null) return null;
@@ -25106,7 +25255,7 @@ async function collectRepoChangeset(opts) {
     let stats;
     if (row.fileStatus === "added" && numstatEntry === void 0) {
       const lineCount = await readUntrackedLineCount(
-        path53.join(opts.repoRoot, row.filePath)
+        path54.join(opts.repoRoot, row.filePath)
       );
       stats = { added: lineCount, removed: 0 };
     } else {
@@ -25137,7 +25286,7 @@ function readUntrackedLineCount(absPath) {
 }
 async function defaultReadUntrackedLineCount(absPath) {
   try {
-    const content = await fs47.readFile(absPath, "utf8");
+    const content = await fs48.readFile(absPath, "utf8");
     let count = 0;
     let pos = -1;
     while ((pos = content.indexOf("\n", pos + 1)) !== -1) {
@@ -25201,7 +25350,7 @@ function defaultRunGit(cwd, args2) {
   return new Promise((resolve7) => {
     let proc;
     try {
-      proc = (0, import_child_process23.spawn)("git", args2, { cwd, env: process.env });
+      proc = (0, import_child_process24.spawn)("git", args2, { cwd, env: process.env });
     } catch {
       resolve7(null);
       return;
@@ -25229,7 +25378,7 @@ function defaultRunGit(cwd, args2) {
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs51 = await import("fs/promises");
+  const fs52 = await import("fs/promises");
   const out2 = [];
   await walk(workingDir, 0);
   return out2;
@@ -25237,7 +25386,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (depth > maxDepth) return;
     let entries = [];
     try {
-      const dirents = await fs51.readdir(dir, { withFileTypes: true });
+      const dirents = await fs52.readdir(dir, { withFileTypes: true });
       entries = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -25248,8 +25397,8 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (hasGit) {
       out2.push({
         repoRoot: dir,
-        repoPath: path53.relative(workingDir, dir),
-        repoName: path53.basename(dir)
+        repoPath: path54.relative(workingDir, dir),
+        repoName: path54.basename(dir)
       });
       return;
     }
@@ -25257,14 +25406,14 @@ async function discoverRepos(workingDir, maxDepth = 4) {
       if (!entry.isDirectory) continue;
       if (entry.name === "node_modules") continue;
       if (entry.name === "dist" || entry.name === "build") continue;
-      await walk(path53.join(dir, entry.name), depth + 1);
+      await walk(path54.join(dir, entry.name), depth + 1);
     }
   }
 }
 
 // src/services/turn-files/files-outbox.ts
-var fs48 = __toESM(require("fs/promises"));
-var path54 = __toESM(require("path"));
+var fs49 = __toESM(require("fs/promises"));
+var path55 = __toESM(require("path"));
 var import_os7 = require("os");
 var HOME_OUTBOX_DIR = ".codeam/outbox";
 var MAX_AGE_MS = 24 * 60 * 60 * 1e3;
@@ -25297,16 +25446,16 @@ var FilesOutbox = class {
   backoffIndex = 0;
   stopped = false;
   constructor(opts) {
-    const base = opts.baseDir ?? path54.join(homeDir(), HOME_OUTBOX_DIR);
-    this.filePath = path54.join(base, `${opts.sessionId}.jsonl`);
+    const base = opts.baseDir ?? path55.join(homeDir(), HOME_OUTBOX_DIR);
+    this.filePath = path55.join(base, `${opts.sessionId}.jsonl`);
     this.post = opts.post;
     this.autoSchedule = opts.autoSchedule !== false;
   }
   /** Persist the entry to disk and trigger a flush. Returns once the
    *  line is durable on disk (not once the POST succeeds). */
   async enqueue(entry) {
-    await fs48.mkdir(path54.dirname(this.filePath), { recursive: true });
-    await fs48.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
+    await fs49.mkdir(path55.dirname(this.filePath), { recursive: true });
+    await fs49.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
     this.backoffIndex = 0;
     if (this.autoSchedule) this.scheduleFlush(0);
   }
@@ -25395,7 +25544,7 @@ var FilesOutbox = class {
   async readAll() {
     let raw = "";
     try {
-      raw = await fs48.readFile(this.filePath, "utf8");
+      raw = await fs49.readFile(this.filePath, "utf8");
     } catch {
       return [];
     }
@@ -25419,12 +25568,12 @@ var FilesOutbox = class {
   async rewrite(entries) {
     const tmpPath = `${this.filePath}.${process.pid}.tmp`;
     if (entries.length === 0) {
-      await fs48.unlink(this.filePath).catch(() => void 0);
+      await fs49.unlink(this.filePath).catch(() => void 0);
       return;
     }
     const payload = entries.map((e) => JSON.stringify(e)).join("\n") + "\n";
-    await fs48.writeFile(tmpPath, payload, "utf8");
-    await fs48.rename(tmpPath, this.filePath);
+    await fs49.writeFile(tmpPath, payload, "utf8");
+    await fs49.rename(tmpPath, this.filePath);
   }
 };
 function applyJitter(ms) {
@@ -26401,9 +26550,9 @@ async function runAcpSession(opts) {
   });
   let _budgetReachedPosted = false;
   const relaunchProxyWithoutBudget = async () => {
-    const { spawn: spawn32 } = await import("child_process");
+    const { spawn: spawn33 } = await import("child_process");
     try {
-      const killer = spawn32("pkill", ["-TERM", "-f", "headroom.*proxy"], {
+      const killer = spawn33("pkill", ["-TERM", "-f", "headroom.*proxy"], {
         detached: true,
         stdio: "ignore"
       });
@@ -26415,7 +26564,7 @@ async function runAcpSession(opts) {
     await new Promise((r) => setTimeout(r, 500));
     const proxyEnv = buildRelaunchProxyEnv(process.env);
     try {
-      const proxy = spawn32(
+      const proxy = spawn33(
         "headroom",
         ["proxy", "--port", "8787"],
         { stdio: "ignore", detached: true, env: proxyEnv }
@@ -28053,15 +28202,15 @@ function fetchQuotaUsage(runtime, historySvc) {
 }
 
 // src/agents/claude/onboarding.ts
-var fs49 = __toESM(require("fs"));
-var os40 = __toESM(require("os"));
-var path55 = __toESM(require("path"));
+var fs50 = __toESM(require("fs"));
+var os41 = __toESM(require("os"));
+var path56 = __toESM(require("path"));
 function ensureClaudeOnboarded() {
   try {
-    const file = path55.join(os40.homedir(), ".claude.json");
+    const file = path56.join(os41.homedir(), ".claude.json");
     let config = {};
     try {
-      config = JSON.parse(fs49.readFileSync(file, "utf8"));
+      config = JSON.parse(fs50.readFileSync(file, "utf8"));
     } catch {
     }
     if (config.hasCompletedOnboarding === true && typeof config.theme === "string") {
@@ -28072,8 +28221,8 @@ function ensureClaudeOnboarded() {
     if (typeof config.lastOnboardingVersion !== "string") {
       config.lastOnboardingVersion = "2.1.177";
     }
-    fs49.mkdirSync(path55.dirname(file), { recursive: true });
-    fs49.writeFileSync(file, JSON.stringify(config, null, 2));
+    fs50.mkdirSync(path56.dirname(file), { recursive: true });
+    fs50.writeFileSync(file, JSON.stringify(config, null, 2));
     log.info("claude", "pre-completed Claude onboarding (skip first-run theme picker)");
   } catch (err) {
     log.warn("claude", `ensureClaudeOnboarded failed (non-fatal): ${err.message}`);
@@ -28720,11 +28869,11 @@ async function logout() {
 var import_picocolors11 = __toESM(require("picocolors"));
 
 // src/services/providers/github-codespaces.ts
-var import_child_process24 = require("child_process");
+var import_child_process25 = require("child_process");
 var import_util4 = require("util");
 var import_picocolors9 = __toESM(require("picocolors"));
-var path56 = __toESM(require("path"));
-var execFileP6 = (0, import_util4.promisify)(import_child_process24.execFile);
+var path57 = __toESM(require("path"));
+var execFileP6 = (0, import_util4.promisify)(import_child_process25.execFile);
 var MAX_BUFFER = 8 * 1024 * 1024;
 function resetStdinForChild() {
   if (process.stdin.isTTY) {
@@ -28768,7 +28917,7 @@ var GitHubCodespacesProvider = class {
     if (!isAuthed) {
       resetStdinForChild();
       await new Promise((resolve7, reject) => {
-        const proc = (0, import_child_process24.spawn)("gh", ["auth", "login", "-s", "codespace,repo,read:user"], {
+        const proc = (0, import_child_process25.spawn)("gh", ["auth", "login", "-s", "codespace,repo,read:user"], {
           stdio: "inherit"
         });
         proc.on("exit", (code) => {
@@ -28802,7 +28951,7 @@ var GitHubCodespacesProvider = class {
       wt(noteLines.join("\n"), "One more permission needed");
       resetStdinForChild();
       const refreshCode = await new Promise((resolve7, reject) => {
-        const proc = (0, import_child_process24.spawn)(
+        const proc = (0, import_child_process25.spawn)(
           "gh",
           ["auth", "refresh", "-h", "github.com", "-s", "codespace"],
           { stdio: "inherit" }
@@ -28952,7 +29101,7 @@ var GitHubCodespacesProvider = class {
     O2.step(`Installing gh via ${installCmd.describe}\u2026`);
     resetStdinForChild();
     const ok = await new Promise((resolve7) => {
-      const proc = (0, import_child_process24.spawn)(installCmd.exe, installCmd.args, { stdio: "inherit" });
+      const proc = (0, import_child_process25.spawn)(installCmd.exe, installCmd.args, { stdio: "inherit" });
       proc.on("exit", (code) => resolve7(code === 0));
       proc.on("error", () => resolve7(false));
     });
@@ -28979,7 +29128,7 @@ var GitHubCodespacesProvider = class {
     );
     resetStdinForChild();
     await new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process24.spawn)(
+      const proc = (0, import_child_process25.spawn)(
         "gh",
         ["auth", "refresh", "-h", "github.com", "-s", "repo,read:org"],
         { stdio: "inherit" }
@@ -29157,7 +29306,7 @@ var GitHubCodespacesProvider = class {
   async streamCommand(workspaceId, command2) {
     resetStdinForChild();
     return new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process24.spawn)(
+      const proc = (0, import_child_process25.spawn)(
         "gh",
         ["codespace", "ssh", "-c", workspaceId, "--", "-tt", command2],
         { stdio: "inherit" }
@@ -29184,11 +29333,11 @@ var GitHubCodespacesProvider = class {
       `mkdir -p ${shellQuote(remoteDir)} && tar -xzf - -C ${shellQuote(remoteDir)}`
     ];
     await new Promise((resolve7, reject) => {
-      const tar = (0, import_child_process24.spawn)("tar", tarArgs, {
+      const tar = (0, import_child_process25.spawn)("tar", tarArgs, {
         stdio: ["ignore", "pipe", "pipe"],
         env: tarEnv
       });
-      const ssh = (0, import_child_process24.spawn)("gh", sshArgs, {
+      const ssh = (0, import_child_process25.spawn)("gh", sshArgs, {
         stdio: [tar.stdout, "pipe", "pipe"]
       });
       let tarErr = "";
@@ -29212,7 +29361,7 @@ var GitHubCodespacesProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path56.posix.dirname(remotePath);
+    const remoteDir = path57.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote(remoteDir)}`,
       `cat > ${shellQuote(remotePath)}`
@@ -29222,7 +29371,7 @@ var GitHubCodespacesProvider = class {
     }
     const cmd = parts.join(" && ");
     await new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process24.spawn)(
+      const proc = (0, import_child_process25.spawn)(
         "gh",
         ["codespace", "ssh", "-c", workspaceId, "--", cmd],
         { stdio: ["pipe", "pipe", "pipe"] }
@@ -29280,11 +29429,11 @@ function shellQuote(s) {
 }
 
 // src/services/providers/gitpod.ts
-var import_child_process25 = require("child_process");
+var import_child_process26 = require("child_process");
 var import_util5 = require("util");
-var path57 = __toESM(require("path"));
+var path58 = __toESM(require("path"));
 var import_picocolors10 = __toESM(require("picocolors"));
-var execFileP7 = (0, import_util5.promisify)(import_child_process25.execFile);
+var execFileP7 = (0, import_util5.promisify)(import_child_process26.execFile);
 var MAX_BUFFER2 = 8 * 1024 * 1024;
 function resetStdinForChild2() {
   if (process.stdin.isTTY) {
@@ -29324,7 +29473,7 @@ var GitpodProvider = class {
     );
     resetStdinForChild2();
     await new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process25.spawn)("gitpod", ["login"], { stdio: "inherit" });
+      const proc = (0, import_child_process26.spawn)("gitpod", ["login"], { stdio: "inherit" });
       proc.on("exit", (code) => {
         if (code === 0) resolve7();
         else reject(new Error("gitpod login failed."));
@@ -29476,7 +29625,7 @@ var GitpodProvider = class {
   async streamCommand(workspaceId, command2) {
     resetStdinForChild2();
     return new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process25.spawn)(
+      const proc = (0, import_child_process26.spawn)(
         "gitpod",
         ["workspace", "ssh", workspaceId, "--", "-tt", command2],
         { stdio: "inherit" }
@@ -29496,11 +29645,11 @@ var GitpodProvider = class {
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote2(remoteDir)} && tar -xzf - -C ${shellQuote2(remoteDir)}`;
     await new Promise((resolve7, reject) => {
-      const tar = (0, import_child_process25.spawn)("tar", tarArgs, {
+      const tar = (0, import_child_process26.spawn)("tar", tarArgs, {
         stdio: ["ignore", "pipe", "pipe"],
         env: tarEnv
       });
-      const ssh = (0, import_child_process25.spawn)(
+      const ssh = (0, import_child_process26.spawn)(
         "gitpod",
         ["workspace", "ssh", workspaceId, "--", remoteCmd],
         { stdio: [tar.stdout, "pipe", "pipe"] }
@@ -29522,7 +29671,7 @@ var GitpodProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path57.posix.dirname(remotePath);
+    const remoteDir = path58.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote2(remoteDir)}`,
       `cat > ${shellQuote2(remotePath)}`
@@ -29532,7 +29681,7 @@ var GitpodProvider = class {
     }
     const cmd = parts.join(" && ");
     await new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process25.spawn)(
+      const proc = (0, import_child_process26.spawn)(
         "gitpod",
         ["workspace", "ssh", workspaceId, "--", cmd],
         { stdio: ["pipe", "pipe", "pipe"] }
@@ -29556,10 +29705,10 @@ function shellQuote2(s) {
 }
 
 // src/services/providers/gitlab-workspaces.ts
-var import_child_process26 = require("child_process");
+var import_child_process27 = require("child_process");
 var import_util6 = require("util");
-var path58 = __toESM(require("path"));
-var execFileP8 = (0, import_util6.promisify)(import_child_process26.execFile);
+var path59 = __toESM(require("path"));
+var execFileP8 = (0, import_util6.promisify)(import_child_process27.execFile);
 var MAX_BUFFER3 = 8 * 1024 * 1024;
 var GITLAB_API_BASE = process.env.CODEAM_GITLAB_API_URL ?? "https://gitlab.com/api/v4";
 function resetStdinForChild3() {
@@ -29601,7 +29750,7 @@ var GitLabWorkspacesProvider = class {
     );
     resetStdinForChild3();
     await new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process26.spawn)(
+      const proc = (0, import_child_process27.spawn)(
         "glab",
         ["auth", "login", "--scopes", "api,read_user,read_repository"],
         { stdio: "inherit" }
@@ -29773,7 +29922,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
     resetStdinForChild3();
     return new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process26.spawn)(
+      const proc = (0, import_child_process27.spawn)(
         "ssh",
         ["-tt", "-o", "StrictHostKeyChecking=accept-new", `${workspaceId}@${sshHost}`, command2],
         { stdio: "inherit" }
@@ -29794,8 +29943,8 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote3(remoteDir)} && tar -xzf - -C ${shellQuote3(remoteDir)}`;
     await new Promise((resolve7, reject) => {
-      const tar = (0, import_child_process26.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
-      const ssh = (0, import_child_process26.spawn)(
+      const tar = (0, import_child_process27.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
+      const ssh = (0, import_child_process27.spawn)(
         "ssh",
         ["-o", "StrictHostKeyChecking=accept-new", `${workspaceId}@${sshHost}`, remoteCmd],
         { stdio: [tar.stdout, "pipe", "pipe"] }
@@ -29818,14 +29967,14 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
-    const remoteDir = path58.posix.dirname(remotePath);
+    const remoteDir = path59.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote3(remoteDir)}`, `cat > ${shellQuote3(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote3(remotePath)}`);
     }
     const cmd = parts.join(" && ");
     await new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process26.spawn)(
+      const proc = (0, import_child_process27.spawn)(
         "ssh",
         ["-o", "StrictHostKeyChecking=accept-new", `${workspaceId}@${sshHost}`, cmd],
         { stdio: ["pipe", "pipe", "pipe"] }
@@ -29884,10 +30033,10 @@ function shellQuote3(s) {
 }
 
 // src/services/providers/railway.ts
-var import_child_process27 = require("child_process");
+var import_child_process28 = require("child_process");
 var import_util7 = require("util");
-var path59 = __toESM(require("path"));
-var execFileP9 = (0, import_util7.promisify)(import_child_process27.execFile);
+var path60 = __toESM(require("path"));
+var execFileP9 = (0, import_util7.promisify)(import_child_process28.execFile);
 var MAX_BUFFER4 = 8 * 1024 * 1024;
 function resetStdinForChild4() {
   if (process.stdin.isTTY) {
@@ -29928,7 +30077,7 @@ var RailwayProvider = class {
     );
     resetStdinForChild4();
     await new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process27.spawn)("railway", ["login"], { stdio: "inherit" });
+      const proc = (0, import_child_process28.spawn)("railway", ["login"], { stdio: "inherit" });
       proc.on("exit", (code) => {
         if (code === 0) resolve7();
         else reject(new Error("railway login failed."));
@@ -30071,7 +30220,7 @@ var RailwayProvider = class {
     }
     resetStdinForChild4();
     return new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process27.spawn)(
+      const proc = (0, import_child_process28.spawn)(
         "railway",
         ["shell", "--project", projectId, "--service", serviceId, "--command", command2],
         { stdio: "inherit" }
@@ -30095,8 +30244,8 @@ var RailwayProvider = class {
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote4(remoteDir)} && tar -xzf - -C ${shellQuote4(remoteDir)}`;
     await new Promise((resolve7, reject) => {
-      const tar = (0, import_child_process27.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
-      const sh = (0, import_child_process27.spawn)(
+      const tar = (0, import_child_process28.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
+      const sh = (0, import_child_process28.spawn)(
         "railway",
         ["shell", "--project", projectId, "--service", serviceId, "--command", remoteCmd],
         { stdio: [tar.stdout, "pipe", "pipe"] }
@@ -30122,14 +30271,14 @@ var RailwayProvider = class {
     if (!projectId || !serviceId) {
       throw new Error("Invalid Railway workspace id (expected projectId/serviceId).");
     }
-    const remoteDir = path59.posix.dirname(remotePath);
+    const remoteDir = path60.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote4(remoteDir)}`, `cat > ${shellQuote4(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote4(remotePath)}`);
     }
     const cmd = parts.join(" && ");
     await new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process27.spawn)(
+      const proc = (0, import_child_process28.spawn)(
         "railway",
         ["shell", "--project", projectId, "--service", serviceId, "--command", cmd],
         { stdio: ["pipe", "pipe", "pipe"] }
@@ -30768,8 +30917,8 @@ async function invite() {
 var import_node_dns = require("dns");
 var import_node_util5 = require("util");
 var import_node_crypto8 = require("crypto");
-var fs50 = __toESM(require("fs"));
-var path60 = __toESM(require("path"));
+var fs51 = __toESM(require("fs"));
+var path61 = __toESM(require("path"));
 var import_picocolors14 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util5.promisify)(import_node_dns.resolve);
 async function checkDns(apiBase2) {
@@ -30825,13 +30974,13 @@ async function checkHealth(apiBase2) {
   }
 }
 function checkConfigDir() {
-  const dir = path60.join(require("os").homedir(), ".codeam");
+  const dir = path61.join(require("os").homedir(), ".codeam");
   try {
-    fs50.mkdirSync(dir, { recursive: true, mode: 448 });
-    const probe = path60.join(dir, ".doctor-probe");
-    fs50.writeFileSync(probe, "ok", { mode: 384 });
-    const read2 = fs50.readFileSync(probe, "utf8");
-    fs50.unlinkSync(probe);
+    fs51.mkdirSync(dir, { recursive: true, mode: 448 });
+    const probe = path61.join(dir, ".doctor-probe");
+    fs51.writeFileSync(probe, "ok", { mode: 384 });
+    const read2 = fs51.readFileSync(probe, "utf8");
+    fs51.unlinkSync(probe);
     if (read2 !== "ok") throw new Error("write/read round-trip mismatch");
     return {
       id: "config-dir",
@@ -30871,9 +31020,9 @@ function checkSessions() {
   }
 }
 function checkAgentBinaries() {
-  const os42 = createOsStrategy();
+  const os43 = createOsStrategy();
   return getEnabledAgents().map((meta) => {
-    const found = os42.findInPath(meta.binaryName);
+    const found = os43.findInPath(meta.binaryName);
     return {
       id: `agent-${meta.id}`,
       label: `Agent binary: ${meta.displayName} (${meta.binaryName})`,
@@ -30895,7 +31044,7 @@ function checkNodePty() {
       detail: "not required on this platform"
     };
   }
-  const vendoredPath = path60.join(__dirname, "vendor", "node-pty");
+  const vendoredPath = path61.join(__dirname, "vendor", "node-pty");
   for (const target of [vendoredPath, "node-pty"]) {
     try {
       require(target);
@@ -30937,7 +31086,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.51.1" : "0.0.0-dev";
+  const cliVersion = true ? "2.51.3" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -31136,7 +31285,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.51.1" : "unknown";
+  const v = true ? "2.51.3" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 
@@ -31285,10 +31434,10 @@ var EXIT_CODE_NAMES = {
 };
 
 // src/index.ts
-var os41 = __toESM(require("os"));
+var os42 = __toESM(require("os"));
 if (!process.env.HOME) {
   try {
-    const home = os41.homedir();
+    const home = os42.homedir();
     if (home) process.env.HOME = home;
   } catch {
   }