npm - codeam-cli - Versions diffs - 2.52.11 → 2.53.0 - Mend

codeam-cli 2.52.11 → 2.53.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/index.js CHANGED Viewed

@@ -522,9 +522,9 @@ var _default = makeConfig();
 var { getConfig, ensurePluginId, addSession, removeSession, setActiveSession, getActiveSession, getActiveSessionForAgent, setDisable1mContext, clearAll, saveCliConfig, loadCliConfig } = _default;
 // src/commands/pair-auto.ts
-var fs44 = __toESM(require("fs"));
-var os37 = __toESM(require("os"));
-var path49 = __toESM(require("path"));
+var fs45 = __toESM(require("fs"));
+var os38 = __toESM(require("os"));
+var path50 = __toESM(require("path"));
 var import_crypto4 = require("crypto");
 // src/services/telemetry.service.ts
@@ -560,8 +560,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? (0, import_pat
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path63) {
-  return path63.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path64) {
+  return path64.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 // ../../node_modules/@posthog/core/dist/featureFlagUtils.mjs
@@ -3041,9 +3041,9 @@ async function addSourceContext(frames) {
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-function getContextLinesFromFile(path63, ranges, output) {
+function getContextLinesFromFile(path64, ranges, output) {
   return new Promise((resolve7) => {
-    const stream = (0, import_node_fs.createReadStream)(path63);
+    const stream = (0, import_node_fs.createReadStream)(path64);
     const lineReaded = (0, import_node_readline.createInterface)({
       input: stream
     });
@@ -3058,7 +3058,7 @@ function getContextLinesFromFile(path63, ranges, output) {
     let rangeStart = range[0];
     let rangeEnd = range[1];
     function onStreamError() {
-      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path63, 1);
+      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path64, 1);
       lineReaded.close();
       lineReaded.removeAllListeners();
       destroyStreamAndResolve();
@@ -3119,8 +3119,8 @@ function clearLineContext(frame) {
   delete frame.context_line;
   delete frame.post_context;
 }
-function shouldSkipContextLinesForFile(path63) {
-  return path63.startsWith("node:") || path63.endsWith(".min.js") || path63.endsWith(".min.cjs") || path63.endsWith(".min.mjs") || path63.startsWith("data:");
+function shouldSkipContextLinesForFile(path64) {
+  return path64.startsWith("node:") || path64.endsWith(".min.js") || path64.endsWith(".min.cjs") || path64.endsWith(".min.mjs") || path64.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame) {
   if (void 0 !== frame.lineno && frame.lineno > MAX_CONTEXTLINES_LINENO) return true;
@@ -5397,7 +5397,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.52.11" : "0.0.0-dev",
+    cliVersion: true ? "2.53.0" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5578,7 +5578,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.52.11",
+  version: "2.53.0",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6104,6 +6104,93 @@ function computePollDelay({ baseMs, failures }) {
   return Math.round(jitter);
 }
+// src/services/headroom/proxy-supervisor.ts
+var import_child_process2 = require("child_process");
+var fs4 = __toESM(require("fs"));
+var os5 = __toESM(require("os"));
+var path4 = __toESM(require("path"));
+// src/services/headroom/budget-args.ts
+function buildBudgetProxyArgs(env) {
+  const budget = env["HEADROOM_BUDGET"];
+  if (!budget) return [];
+  const period = env["HEADROOM_BUDGET_PERIOD"] ?? "daily";
+  return ["--budget", budget, "--budget-period", period];
+}
+// src/services/headroom/proxy-supervisor.ts
+async function ensureHeadroomProxy(deps) {
+  if (!deps.isConfigured()) return "skip";
+  let alive = false;
+  try {
+    alive = await deps.probeAlive();
+  } catch {
+    alive = false;
+  }
+  if (alive) return "alive";
+  log.warn("headroom-supervisor", "proxy :8787 is down \u2014 respawning");
+  deps.spawnProxy();
+  return "respawned";
+}
+function isHeadroomConfiguredReal(homeDir2 = os5.homedir()) {
+  if (process.env.HEADROOM_ENABLED === "1") return true;
+  const csEnv = path4.join(homeDir2, ".codeam", "codespace-env.json");
+  try {
+    const j2 = JSON.parse(fs4.readFileSync(csEnv, "utf8"));
+    if (j2.HEADROOM_ENABLED === "1" || j2.HEADROOM_ENABLED === 1) return true;
+  } catch {
+  }
+  const settings = path4.join(homeDir2, ".claude", "settings.json");
+  try {
+    if (fs4.readFileSync(settings, "utf8").includes("127.0.0.1:8787")) return true;
+  } catch {
+  }
+  return false;
+}
+async function probeProxyAliveReal() {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), 2e3);
+  try {
+    const res = await fetch("http://127.0.0.1:8787/livez", {
+      signal: controller.signal
+    });
+    return res.ok;
+  } catch {
+    return false;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function spawnProxyReal() {
+  try {
+    const proxyEnv = {
+      ...process.env,
+      HEADROOM_KOMPRESS_BACKEND: "onnx_cpu"
+    };
+    const proxy = (0, import_child_process2.spawn)(
+      "headroom",
+      ["proxy", "--port", "8787", ...buildBudgetProxyArgs(proxyEnv)],
+      { stdio: "ignore", detached: true, env: proxyEnv }
+    );
+    proxy.once("error", (e) => {
+      log.warn("headroom-supervisor", `respawn error (best-effort): ${e.message}`);
+    });
+    proxy.unref();
+  } catch (e) {
+    log.warn(
+      "headroom-supervisor",
+      `respawn failed (best-effort): ${e instanceof Error ? e.message : String(e)}`
+    );
+  }
+}
+function makeRealProxySupervisorDeps() {
+  return {
+    isConfigured: () => isHeadroomConfiguredReal(),
+    probeAlive: probeProxyAliveReal,
+    spawnProxy: spawnProxyReal
+  };
+}
 // src/services/command-relay.service.ts
 function httpStatusOf(err) {
   if (typeof err === "object" && err !== null && "statusCode" in err) {
@@ -6130,6 +6217,9 @@ var CommandRelayService = class {
   pairingInvalid = false;
   heartbeatTimer = null;
   agentsTimer = null;
+  headroomSupervisorTimer = null;
+  /** Injectable for tests; defaults to real fs/fetch/spawn wiring. */
+  headroomSupervisorDeps = makeRealProxySupervisorDeps();
   /** True once `/api/plugin/agents` has accepted at least one report. */
   agentsRegistered = false;
   /** SSE connection (null when on the polling fallback or stopped). */
@@ -6190,6 +6280,10 @@ var CommandRelayService = class {
       if (this._running && !this.agentsRegistered) this.reportAgents();
     }, 5e3);
     this.reportAgents();
+    void ensureHeadroomProxy(this.headroomSupervisorDeps).catch(() => void 0);
+    this.headroomSupervisorTimer = setInterval(() => {
+      void ensureHeadroomProxy(this.headroomSupervisorDeps).catch(() => void 0);
+    }, 3e4);
     if (process.env.NODE_ENV === "test" || process.env.CODEAM_DISABLE_SSE_PULL === "1") {
       log.info("relay", "SSE disabled \u2014 using polling fallback");
       this.startPollingFallback();
@@ -6444,7 +6538,12 @@ var CommandRelayService = class {
       pluginId: this.pluginId,
       online,
       agentId: this.agentMeta.id,
-      branch: this.cachedBranch
+      branch: this.cachedBranch,
+      // Report our own version so the backend can keep PairedSession.ideVersion
+      // fresh + clear the "CLI update available" banner after a self-update
+      // (a codespace that reinstalls @latest reconnects via heartbeat, not
+      // pair/reconnect). Older backends ignore the extra field.
+      ..."2.53.0" ? { ideVersion: "2.53.0" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -6489,6 +6588,10 @@ var CommandRelayService = class {
       clearInterval(this.agentsTimer);
       this.agentsTimer = null;
     }
+    if (this.headroomSupervisorTimer) {
+      clearInterval(this.headroomSupervisorTimer);
+      this.headroomSupervisorTimer = null;
+    }
     if (this.sseReconnectTimer) {
       clearTimeout(this.sseReconnectTimer);
       this.sseReconnectTimer = null;
@@ -6505,10 +6608,10 @@ var CommandRelayService = class {
 };
 // src/services/file-watcher.service.ts
-var import_child_process2 = require("child_process");
-var fs4 = __toESM(require("fs"));
-var os5 = __toESM(require("os"));
-var path4 = __toESM(require("path"));
+var import_child_process3 = require("child_process");
+var fs5 = __toESM(require("fs"));
+var os6 = __toESM(require("os"));
+var path5 = __toESM(require("path"));
 var import_ignore = __toESM(require("ignore"));
 // src/services/file-watcher/diff-parser.ts
@@ -6667,10 +6770,10 @@ var WINDOWS_LEGACY_JUNCTIONS = [
   /[\\/]Start Menu([\\/]|$)/i,
   /[\\/]Templates([\\/]|$)/i
 ];
-function isUnsafeWindowsWatchRoot(dir, homedir34) {
+function isUnsafeWindowsWatchRoot(dir, homedir35) {
   const norm = (p2) => p2.replace(/\//g, "\\").replace(/\\+$/, "").toLowerCase();
   const cwd = norm(dir);
-  const home = norm(homedir34);
+  const home = norm(homedir35);
   if (cwd === home) return true;
   if (/^[a-z]:$/.test(cwd)) return true;
   const sysRoots = [
@@ -6700,18 +6803,18 @@ var _findGitRootSeam = {
   resolve: _defaultFindGitRoot
 };
 function _defaultFindGitRoot(startDir) {
-  let dir = path4.resolve(startDir);
+  let dir = path5.resolve(startDir);
   const seen = /* @__PURE__ */ new Set();
   for (let i = 0; i < 256; i++) {
     if (seen.has(dir)) return null;
     seen.add(dir);
     try {
-      const gitPath = path4.join(dir, ".git");
-      const stat3 = fs4.statSync(gitPath, { throwIfNoEntry: false });
+      const gitPath = path5.join(dir, ".git");
+      const stat3 = fs5.statSync(gitPath, { throwIfNoEntry: false });
       if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
     } catch {
     }
-    const parent = path4.dirname(dir);
+    const parent = path5.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -6769,7 +6872,7 @@ var FileWatcherService = class {
       throw new Error("FileWatcherService has already been stopped \u2014 re-instantiate to restart.");
     }
     const isWin = process.platform === "win32";
-    if (isWin && isUnsafeWindowsWatchRoot(this.opts.workingDir, os5.homedir())) {
+    if (isWin && isUnsafeWindowsWatchRoot(this.opts.workingDir, os6.homedir())) {
       log.warn(
         "fileWatcher",
         `refusing to watch ${this.opts.workingDir} \u2014 looks like a Windows user-profile or system path. Run codeam from your project folder to enable file change emission.`
@@ -6956,7 +7059,7 @@ var FileWatcherService = class {
   }
   async emitForFile(absPath, changeType) {
     if (this.stopped) return;
-    const fileDir = path4.dirname(absPath);
+    const fileDir = path5.dirname(absPath);
     let gitRoot = this.gitRootByDir.get(fileDir);
     if (gitRoot === void 0) {
       gitRoot = findGitRoot(fileDir);
@@ -6969,19 +7072,19 @@ var FileWatcherService = class {
       );
       return;
     }
-    const relPathInRepo = path4.relative(gitRoot, absPath);
+    const relPathInRepo = path5.relative(gitRoot, absPath);
     if (!relPathInRepo || relPathInRepo.startsWith("..")) return;
     const matcher = this.getGitIgnoreMatcher(gitRoot);
     if (matcher && matcher.ignores(relPathInRepo)) {
       log.trace(
         "fileWatcher",
-        `${relPathInRepo} ignored by ${path4.basename(gitRoot)}/.gitignore \u2014 suppressing emit`
+        `${relPathInRepo} ignored by ${path5.basename(gitRoot)}/.gitignore \u2014 suppressing emit`
       );
       return;
     }
     this.opts.onRepoDirty?.(gitRoot);
-    const repoPath = path4.relative(this.opts.workingDir, gitRoot);
-    const repoName = path4.basename(gitRoot);
+    const repoPath = path5.relative(this.opts.workingDir, gitRoot);
+    const repoName = path5.basename(gitRoot);
     let diffText = "";
     let fileStatus = "modified";
     if (changeType === "unlink") {
@@ -7156,7 +7259,7 @@ var FileWatcherService = class {
   collectGitignoreFiles(repoRoot, dir, matcher) {
     let entries;
     try {
-      entries = fs4.readdirSync(dir, { withFileTypes: true });
+      entries = fs5.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -7165,16 +7268,16 @@ var FileWatcherService = class {
     );
     if (gitignoreEntry) {
       try {
-        const body = fs4.readFileSync(path4.join(dir, ".gitignore"), "utf8");
-        const rel = path4.relative(repoRoot, dir).replace(/\\/g, "/");
+        const body = fs5.readFileSync(path5.join(dir, ".gitignore"), "utf8");
+        const rel = path5.relative(repoRoot, dir).replace(/\\/g, "/");
         const prefixed = body.split(/\r?\n/).map((line) => {
           const trimmed = line.trim();
           if (!trimmed || trimmed.startsWith("#")) return line;
           if (!rel) return line;
           if (trimmed.startsWith("!")) {
-            return "!" + path4.posix.join(rel, trimmed.slice(1));
+            return "!" + path5.posix.join(rel, trimmed.slice(1));
           }
-          return path4.posix.join(rel, trimmed);
+          return path5.posix.join(rel, trimmed);
         }).join("\n");
         matcher.add(prefixed);
       } catch {
@@ -7183,7 +7286,7 @@ var FileWatcherService = class {
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
       if (entry.name === ".git") continue;
-      const childAbs = path4.join(dir, entry.name);
+      const childAbs = path5.join(dir, entry.name);
       if (isIgnoredFilePath(childAbs)) continue;
       this.collectGitignoreFiles(repoRoot, childAbs, matcher);
     }
@@ -7320,7 +7423,7 @@ async function _runGitImpl(cwd, args2, opts = {}) {
   return new Promise((resolve7) => {
     let proc;
     try {
-      proc = (0, import_child_process2.spawn)("git", args2, { cwd, env: process.env });
+      proc = (0, import_child_process3.spawn)("git", args2, { cwd, env: process.env });
     } catch {
       resolve7(null);
       return;
@@ -7545,7 +7648,7 @@ function _post2(url, headers, payload) {
 }
 // src/services/terminal-ops.service.ts
-var import_child_process3 = require("child_process");
+var import_child_process4 = require("child_process");
 var import_crypto2 = require("crypto");
 var import_path3 = __toESM(require("path"));
 var MAX_CONCURRENT_SESSIONS = 4;
@@ -7668,7 +7771,7 @@ function createPythonSession(id, shell, cwd, env, cols, rows) {
   log.trace("terminal", `python helper spawn python=${python} shell=${shell} cwd=${cwd}`);
   let child;
   try {
-    child = (0, import_child_process3.spawn)(python, ["-c", PYTHON_TERMINAL_HELPER, shell], {
+    child = (0, import_child_process4.spawn)(python, ["-c", PYTHON_TERMINAL_HELPER, shell], {
       cwd,
       env: { ...env, COLUMNS: String(cols), LINES: String(rows) },
       stdio: ["pipe", "pipe", "pipe"]
@@ -7814,11 +7917,11 @@ function closeAllTerminals() {
 }
 // src/commands/start/handlers.ts
-var fs43 = __toESM(require("fs"));
-var os36 = __toESM(require("os"));
-var path48 = __toESM(require("path"));
+var fs44 = __toESM(require("fs"));
+var os37 = __toESM(require("os"));
+var path49 = __toESM(require("path"));
 var import_crypto3 = require("crypto");
-var import_child_process21 = require("child_process");
+var import_child_process22 = require("child_process");
 var import_which2 = __toESM(require("which"));
 // src/lib/payload.ts
@@ -7969,8 +8072,8 @@ function parsePayload2(schema, raw) {
 }
 // src/services/file-ops.service.ts
-var fs5 = __toESM(require("fs/promises"));
-var path6 = __toESM(require("path"));
+var fs6 = __toESM(require("fs/promises"));
+var path7 = __toESM(require("path"));
 var MAX_FILE_BYTES = 5 * 1024 * 1024;
 var MAX_WALK_DEPTH = 6;
 var MAX_VISITED_DIRS = 5e3;
@@ -8005,12 +8108,12 @@ var SUBDIR_IGNORE = /* @__PURE__ */ new Set([
   "__pycache__"
 ]);
 function isUnder(parent, candidate) {
-  const rel = path6.relative(parent, candidate);
-  return rel === "" || !rel.startsWith("..") && !path6.isAbsolute(rel);
+  const rel = path7.relative(parent, candidate);
+  return rel === "" || !rel.startsWith("..") && !path7.isAbsolute(rel);
 }
 async function isExistingFile(absPath) {
   try {
-    const stat3 = await fs5.stat(absPath);
+    const stat3 = await fs6.stat(absPath);
     return stat3.isFile();
   } catch {
     return false;
@@ -8023,13 +8126,13 @@ async function walkForSuffix(dir, needleVariants, depth, ctx) {
   ctx.visited++;
   let entries = [];
   try {
-    entries = await fs5.readdir(dir, { withFileTypes: true });
+    entries = await fs6.readdir(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const e of entries) {
     if (!e.isFile()) continue;
-    const full = path6.join(dir, e.name);
+    const full = path7.join(dir, e.name);
     if (needleVariants.some((needle) => full.endsWith(needle))) {
       ctx.matches.push(full);
       if (ctx.matches.length >= ctx.cap) return;
@@ -8039,21 +8142,21 @@ async function walkForSuffix(dir, needleVariants, depth, ctx) {
     if (!e.isDirectory()) continue;
     if (SUBDIR_IGNORE.has(e.name)) continue;
     if (e.name.startsWith(".") && SUBDIR_IGNORE.has(e.name)) continue;
-    await walkForSuffix(path6.join(dir, e.name), needleVariants, depth + 1, ctx);
+    await walkForSuffix(path7.join(dir, e.name), needleVariants, depth + 1, ctx);
     if (ctx.matches.length >= ctx.cap) return;
   }
 }
 async function findFile(rawPath) {
   const cwd = process.cwd();
-  if (path6.isAbsolute(rawPath)) {
-    const abs = path6.normalize(rawPath);
+  if (path7.isAbsolute(rawPath)) {
+    const abs = path7.normalize(rawPath);
     if (isUnder(cwd, abs) && await isExistingFile(abs)) return abs;
   }
-  const direct = path6.resolve(cwd, rawPath);
+  const direct = path7.resolve(cwd, rawPath);
   if (isUnder(cwd, direct) && await isExistingFile(direct)) return direct;
-  const normalized = path6.normalize(rawPath).replace(/^[./\\]+/, "");
+  const normalized = path7.normalize(rawPath).replace(/^[./\\]+/, "");
   const needles = [
-    `${path6.sep}${normalized}`,
+    `${path7.sep}${normalized}`,
     `/${normalized}`
   ].filter((v, i, a) => a.indexOf(v) === i);
   const ctx = { visited: 0, matches: [], cap: 16 };
@@ -8067,7 +8170,7 @@ async function findWriteTarget(rawPath) {
   const found = await findFile(rawPath);
   if (found) return found;
   const cwd = process.cwd();
-  const fallback = path6.isAbsolute(rawPath) ? path6.normalize(rawPath) : path6.resolve(cwd, rawPath);
+  const fallback = path7.isAbsolute(rawPath) ? path7.normalize(rawPath) : path7.resolve(cwd, rawPath);
   if (!isUnder(cwd, fallback)) return null;
   return fallback;
 }
@@ -8084,11 +8187,11 @@ async function readProjectFile(rawPath) {
     if (!abs) {
       return { error: `File not found in the project tree: ${rawPath}` };
     }
-    const stat3 = await fs5.stat(abs);
+    const stat3 = await fs6.stat(abs);
     if (stat3.size > MAX_FILE_BYTES) {
       return { error: `File too large (${(stat3.size / 1024 / 1024).toFixed(1)} MB > ${MAX_FILE_BYTES / 1024 / 1024} MB).` };
     }
-    const buf = await fs5.readFile(abs);
+    const buf = await fs6.readFile(abs);
     if (looksBinary(buf)) {
       return { error: "Binary file \u2014 refusing to open in a code editor." };
     }
@@ -8107,8 +8210,8 @@ async function writeProjectFile(rawPath, content) {
     if (Buffer.byteLength(content, "utf-8") > MAX_FILE_BYTES) {
       return { error: "Content too large." };
     }
-    await fs5.mkdir(path6.dirname(abs), { recursive: true });
-    await fs5.writeFile(abs, content, "utf-8");
+    await fs6.mkdir(path7.dirname(abs), { recursive: true });
+    await fs6.writeFile(abs, content, "utf-8");
     return { ok: true };
   } catch (e) {
     const msg = e instanceof Error ? e.message : "Write failed";
@@ -8117,11 +8220,11 @@ async function writeProjectFile(rawPath, content) {
 }
 // src/services/project-ops.service.ts
-var import_child_process4 = require("child_process");
+var import_child_process5 = require("child_process");
 var import_util = require("util");
-var fs6 = __toESM(require("fs/promises"));
-var path7 = __toESM(require("path"));
-var execFileP = (0, import_util.promisify)(import_child_process4.execFile);
+var fs7 = __toESM(require("fs/promises"));
+var path8 = __toESM(require("path"));
+var execFileP = (0, import_util.promisify)(import_child_process5.execFile);
 var PROJECT_IGNORE = /* @__PURE__ */ new Set([
   "node_modules",
   ".git",
@@ -8168,7 +8271,7 @@ async function listProjectFiles(opts = {}) {
     }
     let entries = [];
     try {
-      entries = await fs6.readdir(dir, { withFileTypes: true });
+      entries = await fs7.readdir(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -8178,18 +8281,18 @@ async function listProjectFiles(opts = {}) {
         return;
       }
       if (PROJECT_IGNORE.has(e.name)) continue;
-      const full = path7.join(dir, e.name);
+      const full = path8.join(dir, e.name);
       if (e.isDirectory()) {
         if (depth >= 12) continue;
         await walk(full, depth + 1);
       } else if (e.isFile()) {
-        const rel = path7.relative(root, full);
+        const rel = path8.relative(root, full);
         if (q2 && !rel.toLowerCase().includes(q2) && !e.name.toLowerCase().includes(q2)) {
           continue;
         }
         let size = 0;
         try {
-          const st3 = await fs6.stat(full);
+          const st3 = await fs7.stat(full);
           size = st3.size;
         } catch {
         }
@@ -8291,8 +8394,8 @@ async function gitStatus(cwd) {
   let hasMergeInProgress = false;
   try {
     const gitDir = (await git(["rev-parse", "--git-dir"], root)).stdout.trim();
-    const mergeHead = path7.isAbsolute(gitDir) ? path7.join(gitDir, "MERGE_HEAD") : path7.join(root, gitDir, "MERGE_HEAD");
-    await fs6.access(mergeHead);
+    const mergeHead = path8.isAbsolute(gitDir) ? path8.join(gitDir, "MERGE_HEAD") : path8.join(root, gitDir, "MERGE_HEAD");
+    await fs7.access(mergeHead);
     hasMergeInProgress = true;
   } catch {
   }
@@ -8438,7 +8541,7 @@ async function jsSearchFiles(opts, cwd, cap) {
     }
     let content = "";
     try {
-      content = await fs6.readFile(path7.join(cwd, f.path), "utf8");
+      content = await fs7.readFile(path8.join(cwd, f.path), "utf8");
     } catch {
       continue;
     }
@@ -8514,15 +8617,15 @@ function formatRemaining(expiresAt) {
 }
 // src/services/apply-file-review.service.ts
-var import_child_process5 = require("child_process");
-var fs7 = __toESM(require("fs"));
-var path8 = __toESM(require("path"));
+var import_child_process6 = require("child_process");
+var fs8 = __toESM(require("fs"));
+var path9 = __toESM(require("path"));
 async function applyFileReview(workingDir, filePath, action) {
-  if (filePath.includes("..") || path8.isAbsolute(filePath)) {
+  if (filePath.includes("..") || path9.isAbsolute(filePath)) {
     return { ok: false, action, filePath, error: "invalid file path" };
   }
-  const absFile = path8.resolve(workingDir, filePath);
-  const repoRoot = findGitRoot2(path8.dirname(absFile));
+  const absFile = path9.resolve(workingDir, filePath);
+  const repoRoot = findGitRoot2(path9.dirname(absFile));
   if (!repoRoot) {
     return {
       ok: false,
@@ -8531,7 +8634,7 @@ async function applyFileReview(workingDir, filePath, action) {
       error: `no enclosing git repo for ${filePath}`
     };
   }
-  const relInRepo = path8.relative(repoRoot, absFile);
+  const relInRepo = path9.relative(repoRoot, absFile);
   if (!relInRepo || relInRepo.startsWith("..")) {
     return { ok: false, action, filePath, error: "path escapes repo root" };
   }
@@ -8556,7 +8659,7 @@ function runGit2(cwd, args2) {
   return new Promise((resolve7) => {
     let proc;
     try {
-      proc = (0, import_child_process5.spawn)("git", args2, { cwd, env: process.env });
+      proc = (0, import_child_process6.spawn)("git", args2, { cwd, env: process.env });
     } catch (err) {
       resolve7({ ok: false, code: -1, stdout: "", stderr: err.message });
       return;
@@ -8580,17 +8683,17 @@ function runGit2(cwd, args2) {
   });
 }
 function findGitRoot2(startDir) {
-  let dir = path8.resolve(startDir);
+  let dir = path9.resolve(startDir);
   const seen = /* @__PURE__ */ new Set();
   for (let i = 0; i < 256; i++) {
     if (seen.has(dir)) return null;
     seen.add(dir);
     try {
-      const stat3 = fs7.statSync(path8.join(dir, ".git"), { throwIfNoEntry: false });
+      const stat3 = fs8.statSync(path9.join(dir, ".git"), { throwIfNoEntry: false });
       if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
     } catch {
     }
-    const parent = path8.dirname(dir);
+    const parent = path9.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -8599,8 +8702,8 @@ function findGitRoot2(startDir) {
 // src/commands/link.ts
 var import_node_crypto5 = require("crypto");
-var fs25 = __toESM(require("fs"));
-var path30 = __toESM(require("path"));
+var fs26 = __toESM(require("fs"));
+var path31 = __toESM(require("path"));
 var import_chokidar = __toESM(require("chokidar"));
 var import_picocolors2 = __toESM(require("picocolors"));
@@ -10655,19 +10758,19 @@ function parseFrame(frame, dispatch) {
 }
 // src/os/posix.ts
-var fs9 = __toESM(require("fs"));
-var os7 = __toESM(require("os"));
-var path11 = __toESM(require("path"));
+var fs10 = __toESM(require("fs"));
+var os8 = __toESM(require("os"));
+var path12 = __toESM(require("path"));
 var import_node_crypto2 = require("crypto");
 // src/os/strategy.ts
-var path9 = __toESM(require("path"));
+var path10 = __toESM(require("path"));
 function findInPathFor(name, opts) {
-  const dirs = (process.env.PATH ?? "").split(path9.delimiter).filter(Boolean);
+  const dirs = (process.env.PATH ?? "").split(path10.delimiter).filter(Boolean);
   const candidates = opts.candidates(name);
   for (const dir of dirs) {
     for (const candidate of candidates) {
-      const full = path9.join(dir, candidate);
+      const full = path10.join(dir, candidate);
       try {
         opts.accessSync(full, opts.accessFlag);
         return full;
@@ -10679,10 +10782,10 @@ function findInPathFor(name, opts) {
 }
 // src/services/pty/unix.strategy.ts
-var import_child_process6 = require("child_process");
-var fs8 = __toESM(require("fs"));
-var os6 = __toESM(require("os"));
-var path10 = __toESM(require("path"));
+var import_child_process7 = require("child_process");
+var fs9 = __toESM(require("fs"));
+var os7 = __toESM(require("os"));
+var path11 = __toESM(require("path"));
 // src/services/pty/types.ts
 function findInPath(name) {
@@ -10764,9 +10867,9 @@ var UnixPtyStrategy = class {
     }
     const cols = process.stdout.columns || 220;
     const rows = process.stdout.rows || 50;
-    this.helperPath = path10.join(os6.tmpdir(), "codeam-pty-helper.py");
-    fs8.writeFileSync(this.helperPath, PYTHON_PTY_HELPER, { mode: 420 });
-    this.proc = (0, import_child_process6.spawn)(python, [this.helperPath, cmd, ...args2], {
+    this.helperPath = path11.join(os7.tmpdir(), "codeam-pty-helper.py");
+    fs9.writeFileSync(this.helperPath, PYTHON_PTY_HELPER, { mode: 420 });
+    this.proc = (0, import_child_process7.spawn)(python, [this.helperPath, cmd, ...args2], {
       stdio: ["pipe", "pipe", "inherit"],
       cwd,
       env: {
@@ -10831,7 +10934,7 @@ var UnixPtyStrategy = class {
    * are NOT interpreted by /bin/sh.
    */
   spawnDirect(cmd, cwd, args2 = []) {
-    this.proc = (0, import_child_process6.spawn)(cmd, args2, {
+    this.proc = (0, import_child_process7.spawn)(cmd, args2, {
       stdio: ["pipe", "inherit", "inherit"],
       cwd,
       env: process.env,
@@ -10894,7 +10997,7 @@ var UnixPtyStrategy = class {
   removeTempFile() {
     if (this.helperPath) {
       try {
-        fs8.unlinkSync(this.helperPath);
+        fs9.unlinkSync(this.helperPath);
       } catch {
       }
       this.helperPath = null;
@@ -10905,11 +11008,11 @@ var UnixPtyStrategy = class {
 // src/os/posix.ts
 var PosixOsStrategy = class {
   homeDir() {
-    return os7.homedir();
+    return os8.homedir();
   }
   scratchPath(prefix) {
     const tag = `${process.pid}-${(0, import_node_crypto2.randomBytes)(4).toString("hex")}`;
-    return path11.join(os7.tmpdir(), `${prefix}-${tag}`);
+    return path12.join(os8.tmpdir(), `${prefix}-${tag}`);
   }
   devNull() {
     return "/dev/null";
@@ -10917,8 +11020,8 @@ var PosixOsStrategy = class {
   findInPath(name) {
     return findInPathFor(name, {
       candidates: () => [name],
-      accessFlag: fs9.constants.X_OK,
-      accessSync: fs9.accessSync
+      accessFlag: fs10.constants.X_OK,
+      accessSync: fs10.accessSync
     });
   }
   augmentPath(dirs) {
@@ -10946,15 +11049,15 @@ var LinuxOsStrategy = class extends PosixOsStrategy {
 };
 // src/os/win32.ts
-var fs10 = __toESM(require("fs"));
-var os8 = __toESM(require("os"));
-var path13 = __toESM(require("path"));
+var fs11 = __toESM(require("fs"));
+var os9 = __toESM(require("os"));
+var path14 = __toESM(require("path"));
 var import_node_crypto3 = require("crypto");
 // src/services/pty/windows-conpty.strategy.ts
-var path12 = __toESM(require("path"));
+var path13 = __toESM(require("path"));
 function loadNodePty2() {
-  const vendoredPath = path12.join(__dirname, "vendor", "node-pty");
+  const vendoredPath = path13.join(__dirname, "vendor", "node-pty");
   try {
     return require(vendoredPath);
   } catch (vendorErr) {
@@ -11073,7 +11176,7 @@ var WindowsConPtyStrategy = class _WindowsConPtyStrategy {
 };
 // src/services/pty/windows.strategy.ts
-var import_child_process7 = require("child_process");
+var import_child_process8 = require("child_process");
 var WindowsPtyStrategy = class {
   constructor(opts) {
     this.opts = opts;
@@ -11081,7 +11184,7 @@ var WindowsPtyStrategy = class {
   opts;
   proc = null;
   spawn(cmd, cwd, args2 = []) {
-    this.proc = (0, import_child_process7.spawn)(cmd, args2, {
+    this.proc = (0, import_child_process8.spawn)(cmd, args2, {
       stdio: ["pipe", "pipe", "inherit"],
       cwd,
       env: {
@@ -11140,25 +11243,25 @@ var WINDOWS_EXEC_EXTS = [".exe", ".cmd", ".bat", ".ps1"];
 var Win32OsStrategy = class {
   id = "win32";
   homeDir() {
-    return os8.homedir();
+    return os9.homedir();
   }
   scratchPath(prefix) {
     const tag = `${process.pid}-${(0, import_node_crypto3.randomBytes)(4).toString("hex")}`;
-    return path13.join(os8.tmpdir(), `${prefix}-${tag}`);
+    return path14.join(os9.tmpdir(), `${prefix}-${tag}`);
   }
   devNull() {
     return "NUL";
   }
   findInPath(name) {
-    const hasExt = path13.extname(name).length > 0;
+    const hasExt = path14.extname(name).length > 0;
     return findInPathFor(name, {
       candidates: (n) => hasExt ? [n] : [...WINDOWS_EXEC_EXTS.map((ext) => `${n}${ext}`), n],
       // Windows has no Unix execute bit; presence + matching extension
       // IS the executability check. X_OK on Windows is a no-op alias
       // for F_OK at the libuv layer anyway, but F_OK makes intent
       // explicit.
-      accessFlag: fs10.constants.F_OK,
-      accessSync: fs10.accessSync
+      accessFlag: fs11.constants.F_OK,
+      accessSync: fs11.accessSync
     });
   }
   augmentPath(dirs) {
@@ -11195,7 +11298,7 @@ var Win32OsStrategy = class {
     return `"${escaped.replace(/[&|^<>()%!]/g, "^$&")}"`;
   }
   buildLaunch(binaryPath, extraArgs = []) {
-    const ext = path13.extname(binaryPath).toLowerCase();
+    const ext = path14.extname(binaryPath).toLowerCase();
     if (ext === ".cmd" || ext === ".bat") {
       return { cmd: "cmd.exe", args: ["/c", binaryPath, ...extraArgs] };
     }
@@ -11250,28 +11353,28 @@ function buildForPlatform(platform3) {
 var import_node_crypto4 = require("crypto");
 // src/agents/claude/resolver.ts
-function buildClaudeLaunch(extraArgs = [], os43 = createOsStrategy()) {
-  const found = os43.findInPath("claude") ?? os43.findInPath("claude-code");
+function buildClaudeLaunch(extraArgs = [], os44 = createOsStrategy()) {
+  const found = os44.findInPath("claude") ?? os44.findInPath("claude-code");
   if (!found) return null;
-  return os43.buildLaunch(found, extraArgs);
+  return os44.buildLaunch(found, extraArgs);
 }
 // src/agents/claude/installer.ts
-var import_child_process8 = require("child_process");
-var path14 = __toESM(require("path"));
-var os9 = __toESM(require("os"));
+var import_child_process9 = require("child_process");
+var path15 = __toESM(require("path"));
+var os10 = __toESM(require("os"));
 function probeInstallDirs() {
-  const home = os9.homedir();
+  const home = os10.homedir();
   if (process.platform === "win32") {
     return [
-      path14.join(home, ".claude", "local"),
-      path14.join(home, "AppData", "Local", "AnthropicClaude"),
-      path14.join(home, "AppData", "Local", "Programs", "AnthropicClaude")
+      path15.join(home, ".claude", "local"),
+      path15.join(home, "AppData", "Local", "AnthropicClaude"),
+      path15.join(home, "AppData", "Local", "Programs", "AnthropicClaude")
     ];
   }
   return [
-    path14.join(home, ".local", "bin"),
-    path14.join(home, ".claude", "local"),
+    path15.join(home, ".local", "bin"),
+    path15.join(home, ".claude", "local"),
     "/usr/local/bin"
   ];
 }
@@ -11280,7 +11383,7 @@ function isAvailable() {
 }
 function augmentPath() {
   const dirs = probeInstallDirs();
-  const sep7 = path14.delimiter;
+  const sep7 = path15.delimiter;
   const current = process.env.PATH ?? "";
   const existing = new Set(current.split(sep7).filter(Boolean));
   const additions = dirs.filter((d3) => !existing.has(d3));
@@ -11298,7 +11401,7 @@ function runInstaller() {
     "irm https://claude.ai/install.ps1 | iex"
   ] : ["-c", "curl -fsSL https://claude.ai/install.sh | bash"];
   return new Promise((resolve7) => {
-    const proc = (0, import_child_process8.spawn)(cmd, args2, { stdio: "inherit" });
+    const proc = (0, import_child_process9.spawn)(cmd, args2, { stdio: "inherit" });
     proc.on("error", (err) => {
       console.error(`
   \u2717 Installer failed to launch: ${err.message}`);
@@ -11342,9 +11445,9 @@ var import_node_child_process2 = require("child_process");
 // src/agents/claude/local-token.ts
 var import_node_child_process = require("child_process");
-var fs11 = __toESM(require("fs"));
-var os10 = __toESM(require("os"));
-var path15 = __toESM(require("path"));
+var fs12 = __toESM(require("fs"));
+var os11 = __toESM(require("os"));
+var path16 = __toESM(require("path"));
 var import_node_util3 = require("util");
 var execFileP2 = (0, import_node_util3.promisify)(import_node_child_process.execFile);
 var KEYCHAIN_SERVICE_NAMES = [
@@ -11354,17 +11457,17 @@ var KEYCHAIN_SERVICE_NAMES = [
   "Anthropic Claude"
 ];
 function claudeCredentialsPaths() {
-  const home = os10.homedir();
+  const home = os11.homedir();
   return [
-    path15.join(home, ".claude", ".credentials.json"),
-    path15.join(home, ".config", "claude", ".credentials.json")
+    path16.join(home, ".claude", ".credentials.json"),
+    path16.join(home, ".config", "claude", ".credentials.json")
   ];
 }
 async function extractLocalClaudeToken() {
   const agentState = readClaudeAgentState();
   for (const flat of claudeCredentialsPaths()) {
-    if (!fs11.existsSync(flat)) continue;
-    const credential = fs11.readFileSync(flat, "utf8").trim();
+    if (!fs12.existsSync(flat)) continue;
+    const credential = fs12.readFileSync(flat, "utf8").trim();
     if (credential.length > 0) {
       return { method: "oauth", credential, source: "flat-file", agentState };
     }
@@ -11389,10 +11492,10 @@ async function extractLocalClaudeToken() {
 }
 function readClaudeAgentState() {
   const STATE_MAX_BYTES = 256 * 1024;
-  const candidate = path15.join(os10.homedir(), ".claude.json");
+  const candidate = path16.join(os11.homedir(), ".claude.json");
   try {
-    if (!fs11.existsSync(candidate)) return void 0;
-    const buf = fs11.readFileSync(candidate);
+    if (!fs12.existsSync(candidate)) return void 0;
+    const buf = fs12.readFileSync(candidate);
     if (buf.length === 0 || buf.length > STATE_MAX_BYTES) return void 0;
     const text = buf.toString("utf8").trim();
     return text.length > 0 ? text : void 0;
@@ -11479,10 +11582,10 @@ function claudeLoginLauncher() {
 }
 // src/agents/claude/quota.ts
-var fs12 = __toESM(require("fs"));
-var os11 = __toESM(require("os"));
-var path16 = __toESM(require("path"));
-var import_child_process9 = require("child_process");
+var fs13 = __toESM(require("fs"));
+var os12 = __toESM(require("os"));
+var path17 = __toESM(require("path"));
+var import_child_process10 = require("child_process");
 var HELPER_SCRIPT = `import os,pty,sys,select,signal,struct,fcntl,termios,errno
 m,s=pty.openpty()
 try:
@@ -11544,14 +11647,14 @@ async function fetchClaudeQuota() {
       resolve7(null);
       return;
     }
-    const helperPath = path16.join(os11.tmpdir(), "codeam-quota-helper.py");
-    fs12.writeFileSync(helperPath, HELPER_SCRIPT, { mode: 420 });
+    const helperPath = path17.join(os12.tmpdir(), "codeam-quota-helper.py");
+    fs13.writeFileSync(helperPath, HELPER_SCRIPT, { mode: 420 });
     const python = findInPath("python3") ?? findInPath("python");
     if (!python) {
       resolve7(null);
       return;
     }
-    const proc = (0, import_child_process9.spawn)(python, [helperPath, claudeCmd, "--tools", ""], {
+    const proc = (0, import_child_process10.spawn)(python, [helperPath, claudeCmd, "--tools", ""], {
       stdio: ["pipe", "pipe", "ignore"],
       cwd: process.cwd(),
       env: { ...process.env, TERM: "dumb", COLUMNS: "120", LINES: "30" }
@@ -11572,7 +11675,7 @@ async function fetchClaudeQuota() {
         } catch {
         }
         try {
-          fs12.unlinkSync(helperPath);
+          fs13.unlinkSync(helperPath);
         } catch {
         }
         resolve7(result);
@@ -11592,7 +11695,7 @@ async function fetchClaudeQuota() {
 }
 // src/services/spawn-and-capture.ts
-var import_child_process10 = require("child_process");
+var import_child_process11 = require("child_process");
 var activeChildren = /* @__PURE__ */ new Set();
 function killActiveSpawnAndCaptureChildren() {
   for (const child of activeChildren) {
@@ -11621,7 +11724,7 @@ async function spawnAndCapture(cmd, args2, opts = {}) {
     };
     let child;
     try {
-      child = (0, import_child_process10.spawn)(cmd, [...args2], {
+      child = (0, import_child_process11.spawn)(cmd, [...args2], {
         cwd: opts.cwd,
         env: opts.env ?? process.env,
         stdio: ["ignore", "pipe", "pipe"]
@@ -11665,24 +11768,24 @@ async function spawnAndCapture(cmd, args2, opts = {}) {
 }
 // src/agents/claude/history.ts
-var fs13 = __toESM(require("fs"));
-var path17 = __toESM(require("path"));
-var os12 = __toESM(require("os"));
+var fs14 = __toESM(require("fs"));
+var path18 = __toESM(require("path"));
+var os13 = __toESM(require("os"));
 function encodeCwd(cwd) {
   return cwd.replace(/[\\/:]/g, "-");
 }
 function resolveHistoryDir(cwd, projectsRoot) {
-  const root = projectsRoot ?? path17.join(os12.homedir(), ".claude", "projects");
-  const primary = path17.join(root, encodeCwd(cwd));
-  if (fs13.existsSync(primary)) return primary;
+  const root = projectsRoot ?? path18.join(os13.homedir(), ".claude", "projects");
+  const primary = path18.join(root, encodeCwd(cwd));
+  if (fs14.existsSync(primary)) return primary;
   try {
-    const entries = fs13.readdirSync(root, { withFileTypes: true });
+    const entries = fs14.readdirSync(root, { withFileTypes: true });
     const wanted = encodeCwd(cwd);
     for (const e of entries) {
       if (!e.isDirectory()) continue;
       const candidate = e.name.replace(/-+/g, "-");
       if (candidate === wanted.replace(/-+/g, "-")) {
-        return path17.join(root, e.name);
+        return path18.join(root, e.name);
       }
     }
   } catch {
@@ -11694,23 +11797,23 @@ function getCurrentUsage(historyDir, bootTimeMs = 0) {
   const cutoff = bootTimeMs > 0 ? bootTimeMs - GRACE_MS : 0;
   let entries;
   try {
-    entries = fs13.readdirSync(historyDir, { withFileTypes: true });
+    entries = fs14.readdirSync(historyDir, { withFileTypes: true });
   } catch {
     return null;
   }
   const files = entries.filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
     try {
-      const stat3 = fs13.statSync(path17.join(historyDir, e.name));
+      const stat3 = fs14.statSync(path18.join(historyDir, e.name));
       return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
     } catch {
       return { name: e.name, mtime: 0, birthtime: 0 };
     }
   }).filter((f) => f.birthtime >= cutoff).sort((a, b) => b.mtime - a.mtime);
   if (files.length === 0) return null;
-  const filePath = path17.join(historyDir, files[0].name);
+  const filePath = path18.join(historyDir, files[0].name);
   let raw;
   try {
-    raw = fs13.readFileSync(filePath, "utf8");
+    raw = fs14.readFileSync(filePath, "utf8");
   } catch {
     return null;
   }
@@ -11755,7 +11858,7 @@ function parseHistoryFile(filePath) {
   const out2 = [];
   let raw;
   try {
-    raw = fs13.readFileSync(filePath, "utf8");
+    raw = fs14.readFileSync(filePath, "utf8");
   } catch {
     return out2;
   }
@@ -11800,7 +11903,7 @@ function listResumableSessions(cwd) {
   if (!dir) return [];
   let entries;
   try {
-    entries = fs13.readdirSync(dir, { withFileTypes: true });
+    entries = fs14.readdirSync(dir, { withFileTypes: true });
   } catch {
     return [];
   }
@@ -11808,15 +11911,15 @@ function listResumableSessions(cwd) {
   for (const entry of entries) {
     if (!entry.isFile() || !entry.name.endsWith(".jsonl")) continue;
     const id = entry.name.slice(0, -".jsonl".length);
-    const filePath = path17.join(dir, entry.name);
+    const filePath = path18.join(dir, entry.name);
     let timestamp = Date.now();
     try {
-      timestamp = fs13.statSync(filePath).mtimeMs;
+      timestamp = fs14.statSync(filePath).mtimeMs;
     } catch {
     }
     let summary = "";
     try {
-      const raw = fs13.readFileSync(filePath, "utf8");
+      const raw = fs14.readFileSync(filePath, "utf8");
       for (const line of raw.split("\n")) {
         if (!line.trim()) continue;
         try {
@@ -11846,8 +11949,8 @@ var ClaudeRuntimeStrategy = class {
   meta = getAgent("claude");
   mode = "interactive";
   os;
-  constructor(os43) {
-    this.os = os43;
+  constructor(os44) {
+    this.os = os44;
   }
   /**
    * Claude Code's react-ink TUI enables bracketed-paste mode at
@@ -11979,24 +12082,24 @@ var ClaudeRuntimeStrategy = class {
 };
 // src/agents/claude/deploy.ts
+var fs16 = __toESM(require("fs"));
+var os15 = __toESM(require("os"));
+var path20 = __toESM(require("path"));
+// src/agents/claude/credentials.ts
+var import_child_process12 = require("child_process");
 var fs15 = __toESM(require("fs"));
 var os14 = __toESM(require("os"));
 var path19 = __toESM(require("path"));
-// src/agents/claude/credentials.ts
-var import_child_process11 = require("child_process");
-var fs14 = __toESM(require("fs"));
-var os13 = __toESM(require("os"));
-var path18 = __toESM(require("path"));
 var import_util2 = require("util");
-var execFileP3 = (0, import_util2.promisify)(import_child_process11.execFile);
+var execFileP3 = (0, import_util2.promisify)(import_child_process12.execFile);
 async function detectLocalClaudeCredentials() {
-  const localClaudeDir = path18.join(os13.homedir(), ".claude");
-  const flat = path18.join(localClaudeDir, ".credentials.json");
-  if (fs14.existsSync(flat)) {
+  const localClaudeDir = path19.join(os14.homedir(), ".claude");
+  const flat = path19.join(localClaudeDir, ".credentials.json");
+  if (fs15.existsSync(flat)) {
     return { source: "flat-file", description: "~/.claude/.credentials.json" };
   }
-  if (os13.platform() === "darwin") {
+  if (os14.platform() === "darwin") {
     try {
       await execFileP3(
         "security",
@@ -12011,9 +12114,9 @@ async function detectLocalClaudeCredentials() {
   return { source: "none", description: "" };
 }
 async function bridgeClaudeCredentials(provider, workspaceId) {
-  const localClaudeDir = path18.join(os13.homedir(), ".claude");
-  const fileBased = path18.join(localClaudeDir, ".credentials.json");
-  if (fs14.existsSync(fileBased)) {
+  const localClaudeDir = path19.join(os14.homedir(), ".claude");
+  const fileBased = path19.join(localClaudeDir, ".credentials.json");
+  if (fs15.existsSync(fileBased)) {
     return { source: "flat-file", description: "~/.claude/.credentials.json" };
   }
   if (process.platform === "darwin") {
@@ -12105,8 +12208,8 @@ var ClaudeDeployStrategy = class {
       process.exit(1);
     }
     claudeStep.stop("\u2713 Claude CLI installed");
-    const localClaudeDir = path19.join(os14.homedir(), ".claude");
-    const haveLocalClaude = fs15.existsSync(localClaudeDir) && fs15.statSync(localClaudeDir).isDirectory();
+    const localClaudeDir = path20.join(os15.homedir(), ".claude");
+    const haveLocalClaude = fs16.existsSync(localClaudeDir) && fs16.statSync(localClaudeDir).isDirectory();
     if (haveLocalClaude) {
       const copyStep = fe();
       copyStep.start("Copying local Claude config to workspace\u2026");
@@ -12160,10 +12263,10 @@ var ClaudeDeployStrategy = class {
       }
     }
     if (opts.bridged !== "none") {
-      const localClaudeJson = path19.join(os14.homedir(), ".claude.json");
-      if (fs15.existsSync(localClaudeJson)) {
+      const localClaudeJson = path20.join(os15.homedir(), ".claude.json");
+      if (fs16.existsSync(localClaudeJson)) {
         try {
-          const contents = fs15.readFileSync(localClaudeJson);
+          const contents = fs16.readFileSync(localClaudeJson);
           await provider.uploadFile(
             workspaceId,
             "/home/codespace/.claude.json",
@@ -12196,7 +12299,7 @@ var ClaudeDeployStrategy = class {
 // src/agents/codex/runtime.ts
 var import_node_child_process4 = require("child_process");
-var path22 = __toESM(require("path"));
+var path23 = __toESM(require("path"));
 // src/agents/codex/history.ts
 var import_node_fs3 = __toESM(require("fs"));
@@ -12456,16 +12559,16 @@ function getCurrentUsage2(historyDir) {
 var import_node_child_process3 = require("child_process");
 // src/agents/codex/local-token.ts
-var fs17 = __toESM(require("fs"));
-var os16 = __toESM(require("os"));
-var path21 = __toESM(require("path"));
+var fs18 = __toESM(require("fs"));
+var os17 = __toESM(require("os"));
+var path22 = __toESM(require("path"));
 function codexCredentialsPath() {
-  return path21.join(os16.homedir(), ".codex", "auth.json");
+  return path22.join(os17.homedir(), ".codex", "auth.json");
 }
 async function extractLocalCodexToken() {
   const file = codexCredentialsPath();
-  if (!fs17.existsSync(file)) return null;
-  const credential = fs17.readFileSync(file, "utf8").trim();
+  if (!fs18.existsSync(file)) return null;
+  const credential = fs18.readFileSync(file, "utf8").trim();
   if (credential.length === 0) return null;
   return { method: "oauth", credential, source: "flat-file" };
 }
@@ -12524,8 +12627,8 @@ function codexCredentialLocator() {
 function codexLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os43 = createOsStrategy();
-      return os43.findInPath("codex") !== null;
+      const os44 = createOsStrategy();
+      return os44.findInPath("codex") !== null;
     },
     launch() {
       return (0, import_node_child_process3.spawn)("codex", ["login"], { stdio: "inherit" });
@@ -12548,8 +12651,8 @@ var CodexRuntimeStrategy = class {
   meta = getAgent("codex");
   mode = "interactive";
   os;
-  constructor(os43) {
-    this.os = os43;
+  constructor(os44) {
+    this.os = os44;
   }
   async prepareLaunch() {
     let binary = this.os.findInPath("codex");
@@ -12648,12 +12751,12 @@ var CodexRuntimeStrategy = class {
     });
   }
 };
-function resolveNpm(os43) {
-  return os43.id === "win32" ? "npm.cmd" : "npm";
+function resolveNpm(os44) {
+  return os44.id === "win32" ? "npm.cmd" : "npm";
 }
-async function installCodexViaNpm(os43) {
+async function installCodexViaNpm(os44) {
   return new Promise((resolve7, reject) => {
-    const proc = (0, import_node_child_process4.spawn)(resolveNpm(os43), ["install", "-g", "@openai/codex"], {
+    const proc = (0, import_node_child_process4.spawn)(resolveNpm(os44), ["install", "-g", "@openai/codex"], {
       stdio: "inherit"
     });
     proc.on("close", (code) => {
@@ -12670,16 +12773,16 @@ async function installCodexViaNpm(os43) {
     });
   });
 }
-function augmentNpmGlobalBin(os43) {
+function augmentNpmGlobalBin(os44) {
   try {
-    const result = (0, import_node_child_process4.spawnSync)(resolveNpm(os43), ["prefix", "-g"], {
+    const result = (0, import_node_child_process4.spawnSync)(resolveNpm(os44), ["prefix", "-g"], {
       stdio: ["ignore", "pipe", "ignore"]
     });
     if (result.status !== 0) return;
     const prefix = result.stdout.toString().trim();
     if (!prefix) return;
-    const binDir = os43.id === "win32" ? prefix : path22.join(prefix, "bin");
-    os43.augmentPath([binDir]);
+    const binDir = os44.id === "win32" ? prefix : path23.join(prefix, "bin");
+    os44.augmentPath([binDir]);
   } catch {
   }
 }
@@ -12763,9 +12866,9 @@ var import_node_child_process7 = require("child_process");
 // src/agents/coderabbit/installer.ts
 var import_node_child_process5 = require("child_process");
 var INSTALL_URL = "https://cli.coderabbit.ai/install.sh";
-async function ensureCoderabbitInstalled(os43) {
-  if (os43.findInPath("coderabbit")) return true;
-  if (os43.id === "win32") {
+async function ensureCoderabbitInstalled(os44) {
+  if (os44.findInPath("coderabbit")) return true;
+  if (os44.id === "win32") {
     console.error(
       "\n  \u2717 CodeRabbit on Windows requires WSL.\n    Install the CLI inside your WSL distribution\n    (curl -fsSL https://cli.coderabbit.ai/install.sh | sh)\n    then re-run `codeam link coderabbit` from WSL.\n"
     );
@@ -12780,15 +12883,15 @@ async function ensureCoderabbitInstalled(os43) {
     proc.on("error", () => resolve7(false));
   });
   if (!ok) return false;
-  os43.augmentPath([`${os43.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
-  return os43.findInPath("coderabbit") !== null;
+  os44.augmentPath([`${os44.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
+  return os44.findInPath("coderabbit") !== null;
 }
 // src/agents/coderabbit/link.ts
 var import_node_child_process6 = require("child_process");
-var fs19 = __toESM(require("fs"));
-var os18 = __toESM(require("os"));
-var path24 = __toESM(require("path"));
+var fs20 = __toESM(require("fs"));
+var os19 = __toESM(require("os"));
+var path25 = __toESM(require("path"));
 // src/agents/strategy.ts
 function validateNonEmptyCredential(token) {
@@ -12797,12 +12900,12 @@ function validateNonEmptyCredential(token) {
 // src/agents/coderabbit/link.ts
 function authPath() {
-  return path24.join(os18.homedir(), ".coderabbit", "auth.json");
+  return path25.join(os19.homedir(), ".coderabbit", "auth.json");
 }
 async function extractLocalCoderabbitToken() {
   const file = authPath();
-  if (!fs19.existsSync(file)) return null;
-  const credential = fs19.readFileSync(file, "utf8").trim();
+  if (!fs20.existsSync(file)) return null;
+  const credential = fs20.readFileSync(file, "utf8").trim();
   if (credential.length === 0) return null;
   return { method: "oauth", credential, source: "flat-file" };
 }
@@ -12816,10 +12919,10 @@ function coderabbitCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function coderabbitLoginLauncher(os43) {
+function coderabbitLoginLauncher(os44) {
   return {
     async ensureInstalled() {
-      return ensureCoderabbitInstalled(os43);
+      return ensureCoderabbitInstalled(os44);
     },
     launch() {
       return (0, import_node_child_process6.spawn)("coderabbit", ["login"], { stdio: "inherit" });
@@ -12842,11 +12945,11 @@ function parseReview(stdout) {
   for (const line of lines) {
     const m = line.match(HUNK_LINE_RE);
     if (!m) continue;
-    const [, path63, lineNo, sevToken, message] = m;
-    if (!path63 || !lineNo || !message) continue;
+    const [, path64, lineNo, sevToken, message] = m;
+    if (!path64 || !lineNo || !message) continue;
     const cleanedMessage = message.trim().replace(/^[*-]\s+/, "");
     hunks.push({
-      path: path63.trim(),
+      path: path64.trim(),
       line: Number(lineNo),
       severity: sevToken ? SEVERITY_MAP[sevToken.toLowerCase()] : void 0,
       message: cleanedMessage
@@ -12865,8 +12968,8 @@ var CoderabbitRuntimeStrategy = class {
   meta = getAgent("coderabbit");
   mode = "batch";
   os;
-  constructor(os43) {
-    this.os = os43;
+  constructor(os44) {
+    this.os = os44;
   }
   getDefaultArgs() {
     return ["review"];
@@ -12934,12 +13037,12 @@ var CoderabbitRuntimeStrategy = class {
 };
 // src/agents/cursor/history.ts
-var fs20 = __toESM(require("fs"));
-var os19 = __toESM(require("os"));
-var path25 = __toESM(require("path"));
-var HISTORY_ROOT = path25.join(os19.homedir(), ".cursor", "projects");
+var fs21 = __toESM(require("fs"));
+var os20 = __toESM(require("os"));
+var path26 = __toESM(require("path"));
+var HISTORY_ROOT = path26.join(os20.homedir(), ".cursor", "projects");
 function resolveHistoryDir3(cwd) {
-  if (!fs20.existsSync(HISTORY_ROOT)) return null;
+  if (!fs21.existsSync(HISTORY_ROOT)) return null;
   void cwd;
   return HISTORY_ROOT;
 }
@@ -12954,16 +13057,16 @@ function getCurrentUsage3(_historyDir) {
 var import_node_child_process8 = require("child_process");
 // src/agents/cursor/local-token.ts
-var fs21 = __toESM(require("fs"));
-var os20 = __toESM(require("os"));
-var path26 = __toESM(require("path"));
+var fs22 = __toESM(require("fs"));
+var os21 = __toESM(require("os"));
+var path27 = __toESM(require("path"));
 function cursorCredentialsPath() {
-  return path26.join(os20.homedir(), ".cursor", "auth.json");
+  return path27.join(os21.homedir(), ".cursor", "auth.json");
 }
 async function extractLocalCursorToken() {
   const file = cursorCredentialsPath();
-  if (!fs21.existsSync(file)) return null;
-  const credential = fs21.readFileSync(file, "utf8").trim();
+  if (!fs22.existsSync(file)) return null;
+  const credential = fs22.readFileSync(file, "utf8").trim();
   if (credential.length === 0) return null;
   return { method: "oauth", credential, source: "flat-file" };
 }
@@ -12982,10 +13085,10 @@ function cursorCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function cursorLoginLauncher(os43) {
+function cursorLoginLauncher(os44) {
   return {
     async ensureInstalled() {
-      if (os43.findInPath("cursor-agent")) return true;
+      if (os44.findInPath("cursor-agent")) return true;
       console.error(
         "\n  \u2717 cursor-agent binary not on PATH.\n    Install Cursor (https://cursor.com/) and ensure the CLI\n    plugin is enabled, then re-run `codeam link cursor`.\n"
       );
@@ -13047,8 +13150,8 @@ var CursorRuntimeStrategy = class {
   meta = getAgent("cursor");
   mode = "interactive";
   os;
-  constructor(os43) {
-    this.os = os43;
+  constructor(os44) {
+    this.os = os44;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("cursor-agent");
@@ -13127,12 +13230,12 @@ var CursorRuntimeStrategy = class {
 };
 // src/agents/aider/history.ts
-var fs22 = __toESM(require("fs"));
-var path27 = __toESM(require("path"));
+var fs23 = __toESM(require("fs"));
+var path28 = __toESM(require("path"));
 var AIDER_HISTORY_FILE = ".aider.chat.history.md";
 function resolveHistoryDir4(cwd) {
-  const candidate = path27.join(cwd, AIDER_HISTORY_FILE);
-  return fs22.existsSync(candidate) ? cwd : null;
+  const candidate = path28.join(cwd, AIDER_HISTORY_FILE);
+  return fs23.existsSync(candidate) ? cwd : null;
 }
 function parseHistoryFile4(_filePath) {
   return [];
@@ -13145,10 +13248,10 @@ function getCurrentUsage4(_historyDir) {
 var import_node_child_process9 = require("child_process");
 // src/agents/aider/local-token.ts
-var fs23 = __toESM(require("fs"));
-var os21 = __toESM(require("os"));
-var path28 = __toESM(require("path"));
-var AIDER_CONF_FILE = path28.join(os21.homedir(), ".aider.conf.yml");
+var fs24 = __toESM(require("fs"));
+var os22 = __toESM(require("os"));
+var path29 = __toESM(require("path"));
+var AIDER_CONF_FILE = path29.join(os22.homedir(), ".aider.conf.yml");
 var API_KEY_ENV_VARS = [
   "ANTHROPIC_API_KEY",
   "OPENAI_API_KEY",
@@ -13163,8 +13266,8 @@ async function extractLocalAiderToken() {
       return { method: "api_key", credential: value.trim(), source: "flat-file" };
     }
   }
-  if (fs23.existsSync(AIDER_CONF_FILE)) {
-    const conf = fs23.readFileSync(AIDER_CONF_FILE, "utf8");
+  if (fs24.existsSync(AIDER_CONF_FILE)) {
+    const conf = fs24.readFileSync(AIDER_CONF_FILE, "utf8");
     const match = conf.match(/^api-key:\s*['"]?([^'"\n]+)['"]?\s*$/m);
     if (match) {
       return { method: "api_key", credential: match[1].trim(), source: "flat-file" };
@@ -13187,10 +13290,10 @@ function aiderCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function aiderLoginLauncher(os43) {
+function aiderLoginLauncher(os44) {
   return {
     async ensureInstalled() {
-      if (os43.findInPath("aider")) return true;
+      if (os44.findInPath("aider")) return true;
       console.error(
         "\n  \u2717 aider binary not on PATH.\n    Install Aider:\n      pip install aider-chat\n    then re-run `codeam link aider`.\n"
       );
@@ -13200,7 +13303,7 @@ function aiderLoginLauncher(os43) {
       console.error(
         "\n  Aider has no interactive login flow.\n    Set ANTHROPIC_API_KEY or OPENAI_API_KEY in your shell,\n    or re-run `codeam link aider --api-key=<your-key>`.\n"
       );
-      return (0, import_node_child_process9.spawn)(os43.id === "win32" ? "cmd.exe" : "sh", os43.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
+      return (0, import_node_child_process9.spawn)(os44.id === "win32" ? "cmd.exe" : "sh", os44.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
         stdio: "ignore"
       });
     }
@@ -13272,8 +13375,8 @@ var AiderRuntimeStrategy = class {
   meta = getAgent("aider");
   mode = "interactive";
   os;
-  constructor(os43) {
-    this.os = os43;
+  constructor(os44) {
+    this.os = os44;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("aider");
@@ -13344,19 +13447,19 @@ var AiderRuntimeStrategy = class {
 var import_node_child_process10 = require("child_process");
 // src/agents/gemini/local-token.ts
-var fs24 = __toESM(require("fs"));
-var os22 = __toESM(require("os"));
-var path29 = __toESM(require("path"));
+var fs25 = __toESM(require("fs"));
+var os23 = __toESM(require("os"));
+var path30 = __toESM(require("path"));
 function geminiCredentialsPath() {
-  return path29.join(os22.homedir(), ".gemini", "oauth_creds.json");
+  return path30.join(os23.homedir(), ".gemini", "oauth_creds.json");
 }
 function geminiCredentialsPaths() {
   return [geminiCredentialsPath()];
 }
 async function extractLocalGeminiToken() {
   const file = geminiCredentialsPath();
-  if (!fs24.existsSync(file)) return null;
-  const credential = fs24.readFileSync(file, "utf8").trim();
+  if (!fs25.existsSync(file)) return null;
+  const credential = fs25.readFileSync(file, "utf8").trim();
   if (credential.length === 0) return null;
   return { method: "oauth", credential, source: "flat-file" };
 }
@@ -13402,8 +13505,8 @@ function geminiCredentialLocator() {
 function geminiLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os43 = createOsStrategy();
-      return os43.findInPath("gemini") !== null;
+      const os44 = createOsStrategy();
+      return os44.findInPath("gemini") !== null;
     },
     launch() {
       return (0, import_node_child_process10.spawn)("gemini", ["auth", "login"], { stdio: "inherit" });
@@ -13436,8 +13539,8 @@ var GeminiRuntimeStrategy = class {
   meta = getAgent("gemini");
   mode = "interactive";
   os;
-  constructor(os43) {
-    this.os = os43;
+  constructor(os44) {
+    this.os = os44;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("gemini");
@@ -13536,18 +13639,18 @@ var GeminiRuntimeStrategy = class {
 // src/agents/registry.ts
 var runtimeBuilders = {
-  claude: (os43) => new ClaudeRuntimeStrategy(os43),
-  codex: (os43) => new CodexRuntimeStrategy(os43),
-  coderabbit: (os43) => new CoderabbitRuntimeStrategy(os43),
-  cursor: (os43) => new CursorRuntimeStrategy(os43),
-  aider: (os43) => new AiderRuntimeStrategy(os43),
-  gemini: (os43) => new GeminiRuntimeStrategy(os43)
+  claude: (os44) => new ClaudeRuntimeStrategy(os44),
+  codex: (os44) => new CodexRuntimeStrategy(os44),
+  coderabbit: (os44) => new CoderabbitRuntimeStrategy(os44),
+  cursor: (os44) => new CursorRuntimeStrategy(os44),
+  aider: (os44) => new AiderRuntimeStrategy(os44),
+  gemini: (os44) => new GeminiRuntimeStrategy(os44)
 };
 var deployBuilders = {
   claude: () => new ClaudeDeployStrategy(),
   codex: () => new CodexDeployStrategy()
 };
-function createAgentStrategy(agent, os43 = createOsStrategy()) {
+function createAgentStrategy(agent, os44 = createOsStrategy()) {
   if (!AGENT_REGISTRY[agent]?.enabled) {
     throw new Error(
       `Agent "${agent}" is not supported in this codeam-cli version. Upgrade with 'npm i -g codeam-cli@latest'.`
@@ -13557,10 +13660,10 @@ function createAgentStrategy(agent, os43 = createOsStrategy()) {
   if (!build) {
     throw new Error(`No runtime strategy registered for agent "${agent}"`);
   }
-  return build(os43);
+  return build(os44);
 }
-function createInteractiveAgentStrategy(agent, os43 = createOsStrategy()) {
-  const s = createAgentStrategy(agent, os43);
+function createInteractiveAgentStrategy(agent, os44 = createOsStrategy()) {
+  const s = createAgentStrategy(agent, os44);
   if (s.mode !== "interactive") {
     throw new Error(
       `Agent "${agent}" is a batch agent; use createAgentStrategy + .runOneShot for one-shot reviews.`
@@ -13616,7 +13719,7 @@ function parseLinkArgs(args2) {
   if (apiKeyFileArg) {
     const filePath = apiKeyFileArg.slice("--api-key-file=".length);
     try {
-      apiKey = fs25.readFileSync(path30.resolve(filePath), "utf8").trim();
+      apiKey = fs26.readFileSync(path31.resolve(filePath), "utf8").trim();
     } catch (err) {
       throw new Error(`Could not read --api-key-file ${filePath}: ${err.message}`);
     }
@@ -13743,7 +13846,7 @@ async function link(args2 = []) {
     return;
   }
   if (parsed.tokenFile) {
-    const credential = fs25.readFileSync(path30.resolve(parsed.tokenFile), "utf8").trim();
+    const credential = fs26.readFileSync(path31.resolve(parsed.tokenFile), "utf8").trim();
     if (!credential) {
       showError(`--token-file ${parsed.tokenFile} is empty.`);
       process.exit(1);
@@ -13964,9 +14067,9 @@ async function linkDryRunPreflight(ctx) {
 // src/commands/host-agent.ts
 var import_node_child_process15 = require("child_process");
-var os29 = __toESM(require("os"));
-var fs32 = __toESM(require("fs"));
-var path36 = __toESM(require("path"));
+var os30 = __toESM(require("os"));
+var fs33 = __toESM(require("fs"));
+var path37 = __toESM(require("path"));
 // src/util/restrict-to-owner.ts
 var import_node_fs5 = __toESM(require("fs"));
@@ -14002,13 +14105,13 @@ function restrictToOwner(filePath) {
 }
 // src/commands/host/host-client.ts
-var fs27 = __toESM(require("fs"));
-var os24 = __toESM(require("os"));
-var path31 = __toESM(require("path"));
+var fs28 = __toESM(require("fs"));
+var os25 = __toESM(require("os"));
+var path32 = __toESM(require("path"));
 function sampleCpuTimes() {
   let idle = 0;
   let total = 0;
-  for (const cpu of os24.cpus()) {
+  for (const cpu of os25.cpus()) {
     const t2 = cpu.times;
     idle += t2.idle;
     total += t2.user + t2.nice + t2.sys + t2.idle + t2.irq;
@@ -14027,8 +14130,8 @@ var MetricsCollector = class {
     const prev = this.prevCpu;
     this.prevCpu = current;
     if (!prev) {
-      const cores = os24.cpus().length || 1;
-      const proxy = os24.loadavg()[0] / cores * 100;
+      const cores = os25.cpus().length || 1;
+      const proxy = os25.loadavg()[0] / cores * 100;
       return Math.min(100, Math.max(0, Math.round(proxy)));
     }
     const idleDelta = current.idle - prev.idle;
@@ -14041,8 +14144,8 @@ var MetricsCollector = class {
   collect() {
     return {
       cpuPct: this.cpuPct(),
-      ramUsedMb: Math.round((os24.totalmem() - os24.freemem()) / 1048576),
-      ramTotalMb: Math.round(os24.totalmem() / 1048576),
+      ramUsedMb: Math.round((os25.totalmem() - os25.freemem()) / 1048576),
+      ramTotalMb: Math.round(os25.totalmem() / 1048576),
       latencyMs: this.lastLatencyMs
     };
   }
@@ -14051,19 +14154,19 @@ function apiBase() {
   return process.env.CODEAM_API_URL ?? resolveApiBaseUrl();
 }
 function hostIdentityPath() {
-  return path31.join(os24.homedir(), ".codeam", "host-agent.json");
+  return path32.join(os25.homedir(), ".codeam", "host-agent.json");
 }
 function collectOsInfo() {
   return {
-    distro: os24.platform(),
-    arch: os24.arch(),
-    kernel: os24.release(),
+    distro: os25.platform(),
+    arch: os25.arch(),
+    kernel: os25.release(),
     nodeVersion: process.versions.node
   };
 }
 function loadHostIdentity() {
   try {
-    const raw = fs27.readFileSync(hostIdentityPath(), "utf8");
+    const raw = fs28.readFileSync(hostIdentityPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null && typeof parsed.hostId === "string" && typeof parsed.hostToken === "string" && typeof parsed.controlPluginId === "string") {
       const p2 = parsed;
@@ -14076,8 +14179,8 @@ function loadHostIdentity() {
 }
 function saveHostIdentity(identity) {
   const file = hostIdentityPath();
-  fs27.mkdirSync(path31.dirname(file), { recursive: true, mode: 448 });
-  fs27.writeFileSync(file, JSON.stringify(identity, null, 2), {
+  fs28.mkdirSync(path32.dirname(file), { recursive: true, mode: 448 });
+  fs28.writeFileSync(file, JSON.stringify(identity, null, 2), {
     encoding: "utf8",
     mode: 384
   });
@@ -14122,7 +14225,7 @@ function isTerminalEnrollError(err) {
 }
 function deleteHostIdentity() {
   try {
-    fs27.rmSync(hostIdentityPath(), { force: true });
+    fs28.rmSync(hostIdentityPath(), { force: true });
   } catch {
   }
 }
@@ -14245,17 +14348,17 @@ async function reportDeployProgress(auth, deployId, step, message, sessionId) {
 }
 // src/commands/host/workspace.ts
-var fs28 = __toESM(require("fs"));
-var os25 = __toESM(require("os"));
-var path32 = __toESM(require("path"));
+var fs29 = __toESM(require("fs"));
+var os26 = __toESM(require("os"));
+var path33 = __toESM(require("path"));
 var import_node_child_process12 = require("child_process");
 var import_node_util4 = require("util");
 var execFileP4 = (0, import_node_util4.promisify)(import_node_child_process12.execFile);
 function isAbsolutePathTarget(target) {
-  return path32.isAbsolute(target);
+  return path33.isAbsolute(target);
 }
 function selfHostedWorkspaceRoot() {
-  return path32.join(os25.homedir(), ".codeam", "self-hosted");
+  return path33.join(os26.homedir(), ".codeam", "self-hosted");
 }
 function nonInteractiveGitEnv() {
   return {
@@ -14308,13 +14411,13 @@ async function fetchGithubIdentity(token) {
 async function configureGitCredentials(dest, repoRef, cloneToken) {
   const gh = githubOwnerRepo(repoRef.trim());
   if (!gh || !cloneToken) return;
-  const credFile = path32.join(dest, ".git", "codeam-credentials");
-  fs28.writeFileSync(credFile, `https://x-access-token:${cloneToken}@github.com
+  const credFile = path33.join(dest, ".git", "codeam-credentials");
+  fs29.writeFileSync(credFile, `https://x-access-token:${cloneToken}@github.com
 `, { mode: 384 });
   restrictToOwner(credFile);
   const env = nonInteractiveGitEnv();
   const git2 = (args2) => execFileP4("git", ["-C", dest, ...args2], { timeout: 3e4, env });
-  const credFilePosix = credFile.split(path32.sep).join("/");
+  const credFilePosix = credFile.split(path33.sep).join("/");
   await git2(["config", "--local", "--replace-all", "credential.helper", ""]).catch(() => {
   });
   await git2([
@@ -14350,17 +14453,17 @@ function maskToken(text, cloneToken) {
 }
 async function prepareWorkspace(repoOrPath, deployId, cloneToken) {
   if (isAbsolutePathTarget(repoOrPath)) {
-    if (!fs28.existsSync(repoOrPath)) {
+    if (!fs29.existsSync(repoOrPath)) {
       throw new Error(`deploy target path does not exist: ${repoOrPath}`);
     }
     return repoOrPath;
   }
-  const dest = path32.join(selfHostedWorkspaceRoot(), deployId);
-  if (fs28.existsSync(path32.join(dest, ".git"))) {
+  const dest = path33.join(selfHostedWorkspaceRoot(), deployId);
+  if (fs29.existsSync(path33.join(dest, ".git"))) {
     if (cloneToken) await configureGitCredentials(dest, repoOrPath, cloneToken);
     return dest;
   }
-  fs28.mkdirSync(selfHostedWorkspaceRoot(), { recursive: true, mode: 448 });
+  fs29.mkdirSync(selfHostedWorkspaceRoot(), { recursive: true, mode: 448 });
   const cloneUrl = repoCloneUrl(repoOrPath, cloneToken);
   try {
     await execFileP4("git", ["clone", "--depth", "1", cloneUrl, dest], {
@@ -14377,9 +14480,9 @@ async function prepareWorkspace(repoOrPath, deployId, cloneToken) {
 }
 // src/commands/host/agent-provisioning.ts
-var fs29 = __toESM(require("fs"));
-var os26 = __toESM(require("os"));
-var path33 = __toESM(require("path"));
+var fs30 = __toESM(require("fs"));
+var os27 = __toESM(require("os"));
+var path34 = __toESM(require("path"));
 var PUBLIC_TO_INTERNAL_AGENT = {
   claude_code: "claude",
   claude: "claude",
@@ -14394,22 +14497,22 @@ function toInternalAgentId(publicAgentId) {
   return PUBLIC_TO_INTERNAL_AGENT[publicAgentId] ?? null;
 }
 function ensureDir(dir) {
-  fs29.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs30.mkdirSync(dir, { recursive: true, mode: 448 });
 }
 function writeFile0600(filePath, contents) {
-  ensureDir(path33.dirname(filePath));
-  fs29.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
+  ensureDir(path34.dirname(filePath));
+  fs30.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
   restrictToOwner(filePath);
 }
 function rmIfExists(filePath) {
   try {
-    fs29.rmSync(filePath, { force: true });
+    fs30.rmSync(filePath, { force: true });
   } catch {
   }
 }
 var claudeProvisioner = {
   write(auth, home) {
-    const credentialsJson = path33.join(home, ".claude", ".credentials.json");
+    const credentialsJson = path34.join(home, ".claude", ".credentials.json");
     if (auth.kind === "api_key") {
       rmIfExists(credentialsJson);
       return { ANTHROPIC_API_KEY: auth.value };
@@ -14421,8 +14524,8 @@ var claudeProvisioner = {
     } else {
       rmIfExists(credentialsJson);
     }
-    const claudeJson = path33.join(home, ".claude.json");
-    if (!fs29.existsSync(claudeJson)) {
+    const claudeJson = path34.join(home, ".claude.json");
+    if (!fs30.existsSync(claudeJson)) {
       writeFile0600(
         claudeJson,
         JSON.stringify({ hasCompletedOnboarding: true, customApiKeyResponses: { approved: [] } })
@@ -14433,7 +14536,7 @@ var claudeProvisioner = {
 };
 var codexProvisioner = {
   write(auth, home) {
-    const authJson = path33.join(home, ".codex", "auth.json");
+    const authJson = path34.join(home, ".codex", "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { OPENAI_API_KEY: auth.value };
@@ -14444,8 +14547,8 @@ var codexProvisioner = {
 };
 var geminiProvisioner = {
   write(auth, home) {
-    const settingsJson = path33.join(home, ".gemini", "settings.json");
-    const oauthCreds = path33.join(home, ".gemini", "oauth_creds.json");
+    const settingsJson = path34.join(home, ".gemini", "settings.json");
+    const oauthCreds = path34.join(home, ".gemini", "oauth_creds.json");
     if (auth.kind === "api_key") {
       rmIfExists(oauthCreds);
       writeFile0600(settingsJson, '{"security":{"auth":{"selectedType":"gemini-api-key"}}}');
@@ -14458,7 +14561,7 @@ var geminiProvisioner = {
 };
 var cursorProvisioner = {
   write(auth, home) {
-    const authJson = path33.join(home, ".config", "cursor", "auth.json");
+    const authJson = path34.join(home, ".config", "cursor", "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { CURSOR_API_KEY: auth.value };
@@ -14495,7 +14598,7 @@ var UnsupportedAgentError = class extends Error {
     this.agentId = agentId;
   }
 };
-function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os26.homedir()) {
+function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os27.homedir()) {
   const internal = toInternalAgentId(publicAgentId);
   if (!internal) throw new UnsupportedAgentError(publicAgentId);
   const provisioner = PROVISIONERS[internal];
@@ -14505,11 +14608,11 @@ function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os26.homedir(
 // src/commands/host/git-tooling.ts
 var import_node_child_process13 = require("child_process");
-var fs30 = __toESM(require("fs"));
-var os27 = __toESM(require("os"));
-var path34 = __toESM(require("path"));
+var fs31 = __toESM(require("fs"));
+var os28 = __toESM(require("os"));
+var path35 = __toESM(require("path"));
 function codeamBinDir() {
-  return process.env.CODEAM_BIN_DIR ?? path34.join(os27.homedir(), ".codeam", "bin");
+  return process.env.CODEAM_BIN_DIR ?? path35.join(os28.homedir(), ".codeam", "bin");
 }
 var FALLBACK_GH_VERSION = "2.62.0";
 var RELEASE_API = "https://api.github.com/repos/cli/cli/releases/latest";
@@ -14541,7 +14644,7 @@ async function download(url, dest) {
     const res = await fetch(url, { headers: { "User-Agent": "codeam-cli" } });
     if (!res.ok || !res.body) return false;
     const buf = Buffer.from(await res.arrayBuffer());
-    fs30.writeFileSync(dest, buf);
+    fs31.writeFileSync(dest, buf);
     return true;
   } catch {
     return false;
@@ -14564,8 +14667,8 @@ async function ensureGhCli(runner, token, deps = {}) {
     const version3 = await resolveVersionFn(token);
     const asset = `gh_${version3}_${osToken}_${arch2}`;
     const url = `https://github.com/cli/cli/releases/download/v${version3}/${asset}.${ext}`;
-    const tmpRoot = fs30.mkdtempSync(path34.join(os27.tmpdir(), "codeam-gh-"));
-    const archive = path34.join(tmpRoot, `${asset}.${ext}`);
+    const tmpRoot = fs31.mkdtempSync(path35.join(os28.tmpdir(), "codeam-gh-"));
+    const archive = path35.join(tmpRoot, `${asset}.${ext}`);
     if (!await downloadFn(url, archive)) {
       log.warn("host-agent", "gh download failed \u2014 skipping (git pull/push still work via the credential helper)");
       return null;
@@ -14575,16 +14678,16 @@ async function ensureGhCli(runner, token, deps = {}) {
       log.warn("host-agent", `gh archive extraction failed (code=${String(extract.code)}) \u2014 skipping`);
       return null;
     }
-    const extractedBin = path34.join(tmpRoot, asset, "bin", binaryName);
-    if (!fs30.existsSync(extractedBin)) {
+    const extractedBin = path35.join(tmpRoot, asset, "bin", binaryName);
+    if (!fs31.existsSync(extractedBin)) {
       log.warn("host-agent", "gh binary not found in the extracted archive \u2014 skipping");
       return null;
     }
     const binDir = codeamBinDir();
-    fs30.mkdirSync(binDir, { recursive: true });
-    const target = path34.join(binDir, binaryName);
-    fs30.copyFileSync(extractedBin, target);
-    fs30.chmodSync(target, 493);
+    fs31.mkdirSync(binDir, { recursive: true });
+    const target = path35.join(binDir, binaryName);
+    fs31.copyFileSync(extractedBin, target);
+    fs31.chmodSync(target, 493);
     log.info("host-agent", `gh installed to ${target} (v${version3})`);
     return target;
   } catch (e) {
@@ -14762,18 +14865,10 @@ var HeadroomStatsReporter = class {
   }
 };
-// src/services/headroom/budget-args.ts
-function buildBudgetProxyArgs(env) {
-  const budget = env["HEADROOM_BUDGET"];
-  if (!budget) return [];
-  const period = env["HEADROOM_BUDGET_PERIOD"] ?? "daily";
-  return ["--budget", budget, "--budget-period", period];
-}
 // src/lib/updateNotifier.ts
-var fs31 = __toESM(require("fs"));
-var os28 = __toESM(require("os"));
-var path35 = __toESM(require("path"));
+var fs32 = __toESM(require("fs"));
+var os29 = __toESM(require("os"));
+var path36 = __toESM(require("path"));
 var https6 = __toESM(require("https"));
 var import_node_child_process14 = require("child_process");
 var import_picocolors3 = __toESM(require("picocolors"));
@@ -14782,12 +14877,12 @@ var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
 var TTL_MS = 24 * 60 * 60 * 1e3;
 var REQUEST_TIMEOUT_MS = 1500;
 function cachePath() {
-  const dir = path35.join(os28.homedir(), ".codeam");
-  return path35.join(dir, "update-check.json");
+  const dir = path36.join(os29.homedir(), ".codeam");
+  return path36.join(dir, "update-check.json");
 }
 function readCache() {
   try {
-    const raw = fs31.readFileSync(cachePath(), "utf8");
+    const raw = fs32.readFileSync(cachePath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.fetchedAt !== "number" || typeof parsed.latest !== "string") return null;
     return parsed;
@@ -14798,10 +14893,10 @@ function readCache() {
 function writeCache(cache) {
   try {
     const file = cachePath();
-    fs31.mkdirSync(path35.dirname(file), { recursive: true });
+    fs32.mkdirSync(path36.dirname(file), { recursive: true });
     const tmp = `${file}.${process.pid}.tmp`;
-    fs31.writeFileSync(tmp, JSON.stringify(cache));
-    fs31.renameSync(tmp, file);
+    fs32.writeFileSync(tmp, JSON.stringify(cache));
+    fs32.renameSync(tmp, file);
   } catch {
   }
 }
@@ -14875,8 +14970,8 @@ function isLinkedInstall() {
       timeout: 2e3
     }).trim();
     if (!root) return false;
-    const pkgPath = path35.join(root, PKG_NAME);
-    return fs31.lstatSync(pkgPath).isSymbolicLink();
+    const pkgPath = path36.join(root, PKG_NAME);
+    return fs32.lstatSync(pkgPath).isSymbolicLink();
   } catch {
     return false;
   }
@@ -14912,7 +15007,7 @@ function maybeAutoUpdate(currentVersion, latest) {
     return;
   }
   try {
-    fs31.unlinkSync(cachePath());
+    fs32.unlinkSync(cachePath());
   } catch {
   }
   process.stderr.write(`  ${import_picocolors3.default.green("\u2713")} Updated. Resuming session...
@@ -14928,7 +15023,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.52.11" : null;
+  const current = true ? "2.53.0" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -14945,7 +15040,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.52.11" : null;
+  const current = true ? "2.53.0" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -15017,8 +15112,8 @@ function maybeResumeLocalHeadroomReporter(ctx) {
   if (process.env["HEADROOM_ENABLED"] === "1") return null;
   try {
     const file = headroomConfigPath();
-    if (!fs32.existsSync(file)) return null;
-    const cfg = JSON.parse(fs32.readFileSync(file, "utf8"));
+    if (!fs33.existsSync(file)) return null;
+    const cfg = JSON.parse(fs33.readFileSync(file, "utf8"));
     if (!cfg?.enabled) return null;
     const agent = cfg.agent ?? "claude";
     const ingestUrl = `${resolveApiBaseUrl()}/api/sessions/${ctx.sessionId}/headroom-savings`;
@@ -15282,15 +15377,15 @@ function isHeadroomSupportedAgent(agentId) {
   return n.startsWith("claude") || n.startsWith("codex") || n.startsWith("copilot");
 }
 function headroomConfigPath() {
-  return path36.join(os29.homedir(), ".codeam", "headroom-config.json");
+  return path37.join(os30.homedir(), ".codeam", "headroom-config.json");
 }
 function persistHeadroomConfig(config) {
   try {
     const file = headroomConfigPath();
-    fs32.mkdirSync(path36.dirname(file), { recursive: true, mode: 448 });
+    fs33.mkdirSync(path37.dirname(file), { recursive: true, mode: 448 });
     const tmp = `${file}.tmp-${process.pid}`;
-    fs32.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
-    fs32.renameSync(tmp, file);
+    fs33.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
+    fs33.renameSync(tmp, file);
     restrictToOwner(file);
   } catch (err) {
     log.warn(
@@ -15300,21 +15395,21 @@ function persistHeadroomConfig(config) {
   }
 }
 function agentSettingsPath(kind) {
-  const home = os29.homedir();
-  if (kind === "claude") return path36.join(home, ".claude", "settings.json");
-  if (kind === "codex") return path36.join(home, ".codex", "auth.json");
-  if (kind === "copilot") return path36.join(home, ".config", "github-copilot", "hosts.json");
+  const home = os30.homedir();
+  if (kind === "claude") return path37.join(home, ".claude", "settings.json");
+  if (kind === "codex") return path37.join(home, ".codex", "auth.json");
+  if (kind === "copilot") return path37.join(home, ".config", "github-copilot", "hosts.json");
   return null;
 }
 function backupAgentHeadroomConfig(kind) {
   const src = agentSettingsPath(kind);
   if (!src) return;
   try {
-    if (!fs32.existsSync(src)) return;
-    const dest = path36.join(os29.homedir(), ".codeam", `headroom-backup-${kind}.json`);
-    fs32.mkdirSync(path36.dirname(dest), { recursive: true, mode: 448 });
-    fs32.copyFileSync(src, dest);
-    fs32.chmodSync(dest, 384);
+    if (!fs33.existsSync(src)) return;
+    const dest = path37.join(os30.homedir(), ".codeam", `headroom-backup-${kind}.json`);
+    fs33.mkdirSync(path37.dirname(dest), { recursive: true, mode: 448 });
+    fs33.copyFileSync(src, dest);
+    fs33.chmodSync(dest, 384);
     log.info("host-agent", `headroom config backup: ${src} \u2192 ${dest}`);
   } catch (err) {
     log.warn(
@@ -15326,12 +15421,12 @@ function backupAgentHeadroomConfig(kind) {
 function restoreAgentHeadroomConfig(kind) {
   const dest = agentSettingsPath(kind);
   if (!dest) return false;
-  const src = path36.join(os29.homedir(), ".codeam", `headroom-backup-${kind}.json`);
-  if (!fs32.existsSync(src)) return false;
+  const src = path37.join(os30.homedir(), ".codeam", `headroom-backup-${kind}.json`);
+  if (!fs33.existsSync(src)) return false;
   try {
-    fs32.mkdirSync(path36.dirname(dest), { recursive: true, mode: 448 });
-    fs32.copyFileSync(src, dest);
-    fs32.chmodSync(dest, 384);
+    fs33.mkdirSync(path37.dirname(dest), { recursive: true, mode: 448 });
+    fs33.copyFileSync(src, dest);
+    fs33.chmodSync(dest, 384);
     log.info("host-agent", `headroom config restored: ${src} \u2192 ${dest}`);
     return true;
   } catch (err) {
@@ -15344,7 +15439,7 @@ function restoreAgentHeadroomConfig(kind) {
 }
 function readHeadroomChildEnv() {
   try {
-    const raw = fs32.readFileSync(headroomConfigPath(), "utf8");
+    const raw = fs33.readFileSync(headroomConfigPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed !== "object" || parsed === null) return {};
     const o = parsed;
@@ -15369,37 +15464,37 @@ function bundledClaudeBinDir() {
   const roots = /* @__PURE__ */ new Set();
   let dir = __dirname;
   for (let i = 0; i < 6; i++) {
-    roots.add(path36.join(dir, "node_modules"));
-    const parent = path36.dirname(dir);
+    roots.add(path37.join(dir, "node_modules"));
+    const parent = path37.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
   try {
     const main2 = require.resolve("@anthropic-ai/claude-agent-sdk");
-    const marker = `${path36.sep}@anthropic-ai${path36.sep}`;
+    const marker = `${path37.sep}@anthropic-ai${path37.sep}`;
     const idx = main2.lastIndexOf(marker);
     if (idx !== -1) roots.add(main2.slice(0, idx));
   } catch {
   }
   for (const nm of roots) {
-    const atAnthropic = path36.join(nm, "@anthropic-ai");
+    const atAnthropic = path37.join(nm, "@anthropic-ai");
     let entries;
     try {
-      entries = fs32.readdirSync(atAnthropic);
+      entries = fs33.readdirSync(atAnthropic);
     } catch {
       continue;
     }
     for (const entry of entries) {
       if (!entry.startsWith("claude-agent-sdk-")) continue;
-      const bin = path36.join(atAnthropic, entry, "claude");
-      if (fs32.existsSync(bin)) return path36.dirname(bin);
+      const bin = path37.join(atAnthropic, entry, "claude");
+      if (fs33.existsSync(bin)) return path37.dirname(bin);
     }
   }
   return null;
 }
 async function getFreeDiskBytes(dir) {
   try {
-    const s = await fs32.promises.statfs(dir);
+    const s = await fs33.promises.statfs(dir);
     return s.bsize * s.bavail;
   } catch {
     return null;
@@ -15591,7 +15686,7 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner,
   if (initKind === "claude") {
     const claudeDir = bundledClaudeBinDir();
     if (claudeDir) {
-      initEnv.PATH = `${claudeDir}${path36.delimiter}${process.env["PATH"] ?? ""}`;
+      initEnv.PATH = `${claudeDir}${path37.delimiter}${process.env["PATH"] ?? ""}`;
       log.info("host-agent", `headroom init: bundled claude on PATH (${claudeDir})`);
     } else {
       log.warn("host-agent", "headroom init: bundled claude binary not found \u2014 init may fail");
@@ -15647,7 +15742,7 @@ var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process15.s
   detached: false
 });
 function currentCliVersion() {
-  return true ? "2.52.11" : null;
+  return true ? "2.53.0" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve7) => {
@@ -15728,7 +15823,7 @@ var defaultDisableService = () => {
 };
 var defaultTeardownHeadroom = () => {
   try {
-    const kind = JSON.parse(fs32.readFileSync(headroomConfigPath(), "utf8")).agent;
+    const kind = JSON.parse(fs33.readFileSync(headroomConfigPath(), "utf8")).agent;
     if (kind) {
       (0, import_node_child_process15.execFileSync)("headroom", ["unwrap", kind], { stdio: "ignore", timeout: 15e3 });
     }
@@ -16042,9 +16137,9 @@ var HostAgentSupervisor = class {
           API_TIMEOUT_MS: "3000000",
           CODEAM_AUTO_TOKEN: payload.autoPairToken
         };
-        const houseConfigDir = path36.join(os29.homedir(), ".codeam", "house-claude");
+        const houseConfigDir = path37.join(os30.homedir(), ".codeam", "house-claude");
         try {
-          fs32.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
+          fs33.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
         } catch {
         }
         childEnv.CLAUDE_CONFIG_DIR = houseConfigDir;
@@ -16062,14 +16157,14 @@ var HostAgentSupervisor = class {
         report("installing", "installing agent CLI");
         await this.runAgentInstall(payload.agentInstallScript);
       }
-      const home = process.env.HOME || os29.homedir();
+      const home = process.env.HOME || os30.homedir();
       childEnv.PATH = `${home}/.local/bin:${process.env.PATH ?? ""}`;
       if (payload.cloneToken) {
         try {
           report("preparing", "configuring git tooling");
           const ghCmd = await ensureGhCli(defaultGitToolingRunner, payload.cloneToken);
           if (ghCmd) {
-            childEnv.PATH = `${codeamBinDir()}${path36.delimiter}${childEnv.PATH}`;
+            childEnv.PATH = `${codeamBinDir()}${path37.delimiter}${childEnv.PATH}`;
             await ensureGhAuth(defaultGitToolingRunner, ghCmd, payload.cloneToken);
           }
         } catch (e) {
@@ -16085,7 +16180,7 @@ var HostAgentSupervisor = class {
       }
       if (payload.headroomEnabled && payload.headroomAgent && payload.headroomSavingsIngestUrl && isHeadroomSupportedAgent(payload.headroomAgent)) {
         report("headroom", "setting up Headroom proxy");
-        const freeBytes = await this.getFreeDisk(os29.homedir());
+        const freeBytes = await this.getFreeDisk(os30.homedir());
         const alreadyInstalled = this.isHeadroomInstalled();
         if (!alreadyInstalled && freeBytes !== null && freeBytes < HEADROOM_MIN_FREE_DISK_BYTES) {
           const freeGb = (freeBytes / 1e9).toFixed(1);
@@ -16207,7 +16302,7 @@ var HostAgentSupervisor = class {
    */
   runAgentInstall(script) {
     return new Promise((resolve7) => {
-      const home = process.env.HOME || os29.homedir();
+      const home = process.env.HOME || os30.homedir();
       const child = (0, import_node_child_process15.spawn)("sh", ["-c", script], {
         env: { ...process.env, HOME: home },
         stdio: ["ignore", "pipe", "pipe"]
@@ -16383,10 +16478,10 @@ async function configureHeadroom(action, ctx, deps) {
 }
 // src/services/headroom/budget-relaunch.ts
-var fs33 = __toESM(require("fs"));
-var os30 = __toESM(require("os"));
-var path37 = __toESM(require("path"));
-var import_child_process12 = require("child_process");
+var fs34 = __toESM(require("fs"));
+var os31 = __toESM(require("os"));
+var path38 = __toESM(require("path"));
+var import_child_process13 = require("child_process");
 function amendDeploymentManifestBudget(manifest, budget) {
   const rawArgs = manifest.proxy_args ?? [];
   const strippedArgs = [];
@@ -16419,7 +16514,7 @@ function amendDeploymentManifestBudget(manifest, budget) {
   return { ...manifest, proxy_args: newArgs, base_env: newEnv };
 }
 function findHeadroomDeployments(homeDir2, deps) {
-  const deployDir = path37.join(homeDir2, ".headroom", "deploy");
+  const deployDir = path38.join(homeDir2, ".headroom", "deploy");
   let profiles;
   try {
     profiles = deps.readDir(deployDir);
@@ -16428,7 +16523,7 @@ function findHeadroomDeployments(homeDir2, deps) {
   }
   const results = [];
   for (const profile of profiles) {
-    const manifestPath = path37.join(deployDir, profile, "manifest.json");
+    const manifestPath = path38.join(deployDir, profile, "manifest.json");
     let raw;
     try {
       raw = deps.readJson(manifestPath);
@@ -16460,12 +16555,12 @@ async function applyBudgetToHeadroom(budget, deps) {
 }
 function writeManifestReal(manifestPath, manifest) {
   const tmp = manifestPath + ".codeam.tmp";
-  fs33.writeFileSync(tmp, JSON.stringify(manifest, null, 2) + "\n", { mode: 384 });
-  fs33.renameSync(tmp, manifestPath);
+  fs34.writeFileSync(tmp, JSON.stringify(manifest, null, 2) + "\n", { mode: 384 });
+  fs34.renameSync(tmp, manifestPath);
 }
 function restartDeploymentReal(profile) {
   try {
-    const proc = (0, import_child_process12.spawn)("headroom", ["install", "restart", "--profile", profile], {
+    const proc = (0, import_child_process13.spawn)("headroom", ["install", "restart", "--profile", profile], {
       detached: true,
       stdio: "ignore"
     });
@@ -16482,7 +16577,7 @@ function restartDeploymentReal(profile) {
 }
 function killProxyReal() {
   try {
-    const killer = (0, import_child_process12.spawn)("pkill", ["-TERM", "-f", "headroom.*proxy"], {
+    const killer = (0, import_child_process13.spawn)("pkill", ["-TERM", "-f", "headroom.*proxy"], {
       detached: true,
       stdio: "ignore"
     });
@@ -16492,13 +16587,13 @@ function killProxyReal() {
   } catch {
   }
 }
-function spawnProxyReal(budget) {
+function spawnProxyReal2(budget) {
   try {
     const proxyEnv = {
       ...process.env,
       HEADROOM_KOMPRESS_BACKEND: "onnx_cpu"
     };
-    const proxy = (0, import_child_process12.spawn)(
+    const proxy = (0, import_child_process13.spawn)(
       "headroom",
       ["proxy", "--port", "8787", ...buildBudgetProxyArgs(proxyEnv)],
       {
@@ -16519,21 +16614,21 @@ function spawnProxyReal(budget) {
   }
 }
 function makeRealApplyBudgetDeps() {
-  const homeDir2 = os30.homedir();
+  const homeDir2 = os31.homedir();
   return {
     findDeployments: () => findHeadroomDeployments(homeDir2, {
-      readDir: (dir) => fs33.readdirSync(dir),
-      readJson: (filePath) => JSON.parse(fs33.readFileSync(filePath, "utf8"))
+      readDir: (dir) => fs34.readdirSync(dir),
+      readJson: (filePath) => JSON.parse(fs34.readFileSync(filePath, "utf8"))
     }),
     writeManifest: writeManifestReal,
     restartDeployment: restartDeploymentReal,
     killProxy: killProxyReal,
-    spawnProxy: spawnProxyReal
+    spawnProxy: spawnProxyReal2
   };
 }
 // src/services/preview/cloudflared.ts
-var import_child_process13 = require("child_process");
+var import_child_process14 = require("child_process");
 var import_fs = require("fs");
 var import_promises = __toESM(require("fs/promises"));
 var import_os6 = __toESM(require("os"));
@@ -16610,7 +16705,7 @@ async function isExecutableBinary(p2) {
 }
 function extractTgz(tgzPath, destDir) {
   return new Promise((resolve7, reject) => {
-    const child = (0, import_child_process13.spawn)("tar", ["-xzf", tgzPath, "-C", destDir], { stdio: "ignore" });
+    const child = (0, import_child_process14.spawn)("tar", ["-xzf", tgzPath, "-C", destDir], { stdio: "ignore" });
     child.on("error", (err) => reject(err));
     child.on(
       "exit",
@@ -16644,7 +16739,7 @@ async function spawnNamedTunnel(bin, token, port) {
   await import_promises.default.mkdir(credDir, { recursive: true });
   const credFile = import_path4.default.join(credDir, `tunnel-${creds.TunnelID}.json`);
   await import_promises.default.writeFile(credFile, JSON.stringify(creds), { mode: 384 });
-  return (0, import_child_process13.spawn)(
+  return (0, import_child_process14.spawn)(
     bin,
     [
       "tunnel",
@@ -16660,9 +16755,9 @@ async function spawnNamedTunnel(bin, token, port) {
 }
 // src/services/preview/codespace.ts
-var import_child_process14 = require("child_process");
+var import_child_process15 = require("child_process");
 var import_util3 = require("util");
-var execFileP5 = (0, import_util3.promisify)(import_child_process14.execFile);
+var execFileP5 = (0, import_util3.promisify)(import_child_process15.execFile);
 // src/services/preview/config-file.ts
 var import_promises3 = __toESM(require("fs/promises"));
@@ -16857,10 +16952,10 @@ var import_fs2 = require("fs");
 var import_path6 = __toESM(require("path"));
 // src/services/preview/run-setup.ts
-var import_child_process15 = require("child_process");
+var import_child_process16 = require("child_process");
 function runSetupCommand(cmd, args2, cwd, env, opts) {
   return new Promise((resolve7) => {
-    const child = (0, import_child_process15.spawn)(cmd, args2, {
+    const child = (0, import_child_process16.spawn)(cmd, args2, {
       cwd,
       env: { ...process.env, ...env ?? {} },
       stdio: ["ignore", "pipe", "pipe"]
@@ -17166,10 +17261,10 @@ function activePreviewSessionIds() {
 }
 // src/beads/bd-adapter.ts
-var import_child_process16 = require("child_process");
-var fs38 = __toESM(require("fs"));
-var os32 = __toESM(require("os"));
-var path42 = __toESM(require("path"));
+var import_child_process17 = require("child_process");
+var fs39 = __toESM(require("fs"));
+var os33 = __toESM(require("os"));
+var path43 = __toESM(require("path"));
 var BD_PACKAGE = "@beads/bd";
 function resolveBundledBdBinary() {
   return _resolveSeam.resolveBundled();
@@ -17181,11 +17276,11 @@ function _defaultResolveBundled() {
   } catch {
     return null;
   }
-  const binDir = path42.join(path42.dirname(pkgJsonPath), "bin");
+  const binDir = path43.join(path43.dirname(pkgJsonPath), "bin");
   const binaryName = process.platform === "win32" ? "bd.exe" : "bd";
-  const binaryPath = path42.join(binDir, binaryName);
+  const binaryPath = path43.join(binDir, binaryName);
   try {
-    fs38.accessSync(binaryPath, fs38.constants.F_OK);
+    fs39.accessSync(binaryPath, fs39.constants.F_OK);
     return binaryPath;
   } catch {
     return null;
@@ -17195,13 +17290,13 @@ function resolveBdOnPath() {
   return _resolveSeam.resolveOnPath();
 }
 function _defaultResolveOnPath() {
-  const dirs = (process.env.PATH ?? "").split(path42.delimiter).filter(Boolean);
+  const dirs = (process.env.PATH ?? "").split(path43.delimiter).filter(Boolean);
   const candidates = process.platform === "win32" ? ["bd.exe", "bd.cmd", "bd"] : ["bd"];
   for (const dir of dirs) {
     for (const candidate of candidates) {
-      const full = path42.join(dir, candidate);
+      const full = path43.join(dir, candidate);
       try {
-        fs38.accessSync(full, fs38.constants.F_OK);
+        fs39.accessSync(full, fs39.constants.F_OK);
         return full;
       } catch {
       }
@@ -17220,7 +17315,7 @@ function _defaultSpawn(binaryPath, args2, opts) {
   return new Promise((resolve7) => {
     let proc;
     try {
-      proc = (0, import_child_process16.spawn)(binaryPath, args2, { cwd: opts.cwd, env: opts.env });
+      proc = (0, import_child_process17.spawn)(binaryPath, args2, { cwd: opts.cwd, env: opts.env });
     } catch (err) {
       resolve7({ code: -1, stdout: "", stderr: err.message });
       return;
@@ -17286,7 +17381,7 @@ var BdAdapter = class {
     const env = { ...process.env };
     if (!env.HOME) {
       try {
-        const home = os32.homedir();
+        const home = os33.homedir();
         if (home) env.HOME = home;
       } catch {
       }
@@ -17374,13 +17469,13 @@ function coerceIssue(row, projectKey) {
 }
 // src/beads/provisioner.ts
-var import_child_process20 = require("child_process");
-var fs41 = __toESM(require("fs"));
-var os34 = __toESM(require("os"));
-var path45 = __toESM(require("path"));
+var import_child_process21 = require("child_process");
+var fs42 = __toESM(require("fs"));
+var os35 = __toESM(require("os"));
+var path46 = __toESM(require("path"));
 // src/beads/install-bd.ts
-var import_child_process17 = require("child_process");
+var import_child_process18 = require("child_process");
 var INSTALL_SH_URL = "https://raw.githubusercontent.com/gastownhall/beads/main/scripts/install.sh";
 var INSTALL_PS1_URL = "https://raw.githubusercontent.com/gastownhall/beads/main/install.ps1";
 function resolveInstallStrategy(platform3) {
@@ -17411,7 +17506,7 @@ function _defaultInstallSpawn(strategy) {
   return new Promise((resolve7) => {
     let proc;
     try {
-      proc = (0, import_child_process17.spawn)(strategy.command, strategy.args, { env: process.env });
+      proc = (0, import_child_process18.spawn)(strategy.command, strategy.args, { env: process.env });
     } catch (err) {
       resolve7({ ok: false, code: -1, stderr: err.message });
       return;
@@ -17441,10 +17536,10 @@ async function installBd(platform3 = process.platform) {
 }
 // src/beads/install-dolt.ts
-var import_child_process18 = require("child_process");
-var fs39 = __toESM(require("fs"));
-var os33 = __toESM(require("os"));
-var path43 = __toESM(require("path"));
+var import_child_process19 = require("child_process");
+var fs40 = __toESM(require("fs"));
+var os34 = __toESM(require("os"));
+var path44 = __toESM(require("path"));
 var DOLT_INSTALL_SH_URL = "https://github.com/dolthub/dolt/releases/latest/download/install.sh";
 var DOLT_MSI_URL = "https://github.com/dolthub/dolt/releases/latest/download/dolt-windows-amd64.msi";
 function resolveDoltInstallStrategy(platform3) {
@@ -17484,11 +17579,11 @@ function resolveDoltInstallStrategy(platform3) {
 }
 var DOLT_RELEASE_BASE = "https://github.com/dolthub/dolt/releases/latest/download";
 function doltPlatformTuple(platform3, arch2) {
-  const os43 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
+  const os44 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
   const a = arch2 === "x64" ? "amd64" : arch2 === "arm64" ? "arm64" : null;
   if (!a) return null;
-  if (os43 === "windows" && a !== "amd64") return null;
-  return `${os43}-${a}`;
+  if (os44 === "windows" && a !== "amd64") return null;
+  return `${os44}-${a}`;
 }
 function resolveDoltTarballStrategy(targetDir, platform3, arch2) {
   const tuple = doltPlatformTuple(platform3, arch2);
@@ -17533,14 +17628,14 @@ async function installDoltToDir(targetDir, platform3 = process.platform, arch2 =
   return result;
 }
 var _doltPathSeam = {
-  homedir: () => os33.homedir(),
+  homedir: () => os34.homedir(),
   getPath: () => process.env.PATH ?? "",
   setPath: (p2) => {
     process.env.PATH = p2;
   },
   exists: (p2) => {
     try {
-      fs39.accessSync(p2, fs39.constants.F_OK);
+      fs40.accessSync(p2, fs40.constants.F_OK);
       return true;
     } catch {
       return false;
@@ -17551,7 +17646,7 @@ function doltBinaryNames(platform3) {
   return platform3 === "win32" ? ["dolt.exe", "dolt.cmd", "dolt"] : ["dolt"];
 }
 function knownDoltDirs(platform3) {
-  const P3 = platform3 === "win32" ? path43.win32 : path43.posix;
+  const P3 = platform3 === "win32" ? path44.win32 : path44.posix;
   const home = _doltPathSeam.homedir();
   if (platform3 === "win32") {
     return [
@@ -17567,7 +17662,7 @@ function knownDoltDirs(platform3) {
   ].filter(Boolean);
 }
 function ensureDoltResolvable(platform3 = process.platform) {
-  const P3 = platform3 === "win32" ? path43.win32 : path43.posix;
+  const P3 = platform3 === "win32" ? path44.win32 : path44.posix;
   const delim = platform3 === "win32" ? ";" : ":";
   const names = doltBinaryNames(platform3);
   const pathDirs = _doltPathSeam.getPath().split(delim).filter(Boolean);
@@ -17603,7 +17698,7 @@ function _defaultDoltInstallSpawn(strategy) {
     };
     let proc;
     try {
-      proc = (0, import_child_process18.spawn)(strategy.command, strategy.args, {
+      proc = (0, import_child_process19.spawn)(strategy.command, strategy.args, {
         env: process.env,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -17701,10 +17796,10 @@ async function ensureSharedServer(adapter, options = {}) {
 }
 // src/beads/project-key.ts
-var import_child_process19 = require("child_process");
+var import_child_process20 = require("child_process");
 var crypto2 = __toESM(require("crypto"));
-var fs40 = __toESM(require("fs"));
-var path44 = __toESM(require("path"));
+var fs41 = __toESM(require("fs"));
+var path45 = __toESM(require("path"));
 function normalizeOrigin(raw) {
   const trimmed = raw.trim();
   if (!trimmed) return null;
@@ -17730,17 +17825,17 @@ function normalizeOrigin(raw) {
   return `${host2}/${pathPart}`;
 }
 function findRepoRoot(cwd) {
-  let dir = path44.resolve(cwd);
+  let dir = path45.resolve(cwd);
   const seen = /* @__PURE__ */ new Set();
   for (let i = 0; i < 256; i++) {
     if (seen.has(dir)) return null;
     seen.add(dir);
     try {
-      const stat3 = fs40.statSync(path44.join(dir, ".git"), { throwIfNoEntry: false });
+      const stat3 = fs41.statSync(path45.join(dir, ".git"), { throwIfNoEntry: false });
       if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
     } catch {
     }
-    const parent = path44.dirname(dir);
+    const parent = path45.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -17748,10 +17843,10 @@ function findRepoRoot(cwd) {
 }
 var _execSeam2 = {
   exec: (file, args2, opts) => {
-    const out2 = (0, import_child_process19.execFileSync)(file, args2, opts);
+    const out2 = (0, import_child_process20.execFileSync)(file, args2, opts);
     return typeof out2 === "string" ? out2 : out2.toString("utf8");
   },
-  realpath: (p2) => fs40.realpathSync(p2)
+  realpath: (p2) => fs41.realpathSync(p2)
 };
 function readOrigin(cwd) {
   try {
@@ -17780,7 +17875,7 @@ function deriveProjectIdentity(cwd = process.cwd()) {
   } catch {
   }
   const hash = crypto2.createHash("sha256").update(real).digest("hex");
-  return { projectKey: `path:${hash}`, projectLabel: path44.basename(real) || "project" };
+  return { projectKey: `path:${hash}`, projectLabel: path45.basename(real) || "project" };
 }
 // src/beads/project-prefix.ts
@@ -17822,17 +17917,17 @@ var _provisionSeam = {
 };
 var _linkSeam = {
   platform: () => process.platform,
-  homedir: () => os34.homedir(),
+  homedir: () => os35.homedir(),
   isWritableDir: (dir) => {
     try {
-      fs41.accessSync(dir, fs41.constants.W_OK);
+      fs42.accessSync(dir, fs42.constants.W_OK);
       return true;
     } catch {
       return false;
     }
   },
   ensureDir: (dir) => {
-    fs41.mkdirSync(dir, { recursive: true });
+    fs42.mkdirSync(dir, { recursive: true });
   },
   /**
    * A directory to symlink `bd` into so the AGENT's shell + Claude Code's
@@ -17853,9 +17948,9 @@ var _linkSeam = {
    * which `linkBdOntoPath` creates if missing.
    */
   cliBinDir: () => {
-    const pathDirs = (process.env.PATH ?? "").split(path45.delimiter).filter(Boolean);
+    const pathDirs = (process.env.PATH ?? "").split(path46.delimiter).filter(Boolean);
     const home = _linkSeam.homedir();
-    const localBin = home ? path45.join(home, ".local", "bin") : null;
+    const localBin = home ? path46.join(home, ".local", "bin") : null;
     if (localBin) {
       try {
         _linkSeam.ensureDir(localBin);
@@ -17865,16 +17960,16 @@ var _linkSeam = {
     const candidates = [];
     if (localBin) candidates.push(localBin);
     try {
-      candidates.push(path45.dirname(process.execPath));
+      candidates.push(path46.dirname(process.execPath));
     } catch {
     }
     candidates.push("/usr/local/bin");
     const entry = process.argv[1];
     if (entry) {
       try {
-        candidates.push(path45.dirname(fs41.realpathSync(entry)));
+        candidates.push(path46.dirname(fs42.realpathSync(entry)));
       } catch {
-        candidates.push(path45.dirname(entry));
+        candidates.push(path46.dirname(entry));
       }
     }
     const onPathWritable = candidates.find(
@@ -17886,20 +17981,20 @@ var _linkSeam = {
   /** Current symlink target at `linkPath`, or null when absent / not a link. */
   readlink: (linkPath) => {
     try {
-      return fs41.readlinkSync(linkPath);
+      return fs42.readlinkSync(linkPath);
     } catch {
       return null;
     }
   },
-  unlink: (linkPath) => fs41.unlinkSync(linkPath),
-  symlink: (target, linkPath) => fs41.symlinkSync(target, linkPath)
+  unlink: (linkPath) => fs42.unlinkSync(linkPath),
+  symlink: (target, linkPath) => fs42.symlinkSync(target, linkPath)
 };
 function linkBdOntoPath(binaryPath) {
   if (_linkSeam.platform() === "win32") return;
   const binDir = _linkSeam.cliBinDir();
   if (!binDir) return;
   _linkSeam.ensureDir(binDir);
-  const linkPath = path45.join(binDir, "bd");
+  const linkPath = path46.join(binDir, "bd");
   if (linkPath === binaryPath) return;
   const current = _linkSeam.readlink(linkPath);
   if (current === binaryPath) return;
@@ -17908,7 +18003,7 @@ function linkBdOntoPath(binaryPath) {
   log.info("beads", `linked bd onto PATH: ${linkPath} -> ${binaryPath}`);
 }
 function setGitBeadsRole() {
-  (0, import_child_process20.execFileSync)("git", ["config", "--global", "beads.role", "contributor"], {
+  (0, import_child_process21.execFileSync)("git", ["config", "--global", "beads.role", "contributor"], {
     stdio: "ignore"
   });
 }
@@ -18094,7 +18189,7 @@ function dedupeRecipes(agents) {
 // src/beads/watcher.ts
 var crypto4 = __toESM(require("crypto"));
-var path46 = __toESM(require("path"));
+var path47 = __toESM(require("path"));
 var API_BASE6 = resolveApiBaseUrl();
 var DEBOUNCE_MS2 = 400;
 var ZERO_SUMMARY = {
@@ -18118,7 +18213,7 @@ var BeadsWatcher = class {
   constructor(opts) {
     this.opts = opts;
     this.bd = opts.adapter ?? new BdAdapter({ cwd: opts.cwd, beadsDir: opts.beadsDir });
-    this.feedPath = opts.feedPath ?? path46.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
+    this.feedPath = opts.feedPath ?? path47.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
     this.apiBase = opts.apiBaseUrl ?? API_BASE6;
   }
   opts;
@@ -18528,7 +18623,7 @@ var pendingAttachmentFiles = /* @__PURE__ */ new Set();
 function cleanupAttachmentTempFiles() {
   for (const p2 of pendingAttachmentFiles) {
     try {
-      fs43.unlinkSync(p2);
+      fs44.unlinkSync(p2);
     } catch {
     }
   }
@@ -18537,8 +18632,8 @@ function cleanupAttachmentTempFiles() {
 function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
-    const tmpPath = path48.join(os36.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
-    fs43.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
+    const tmpPath = path49.join(os37.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
+    fs44.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     pendingAttachmentFiles.add(tmpPath);
     return tmpPath;
   });
@@ -18558,7 +18653,7 @@ var startTask = (ctx, _cmd, parsed) => {
     setTimeout(() => {
       for (const p2 of paths) {
         try {
-          fs43.unlinkSync(p2);
+          fs44.unlinkSync(p2);
         } catch {
         }
         pendingAttachmentFiles.delete(p2);
@@ -18683,7 +18778,7 @@ var sessionTerminated = async (ctx, cmd) => {
   } catch {
   }
   try {
-    const proc = (0, import_child_process21.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
+    const proc = (0, import_child_process22.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
       detached: true,
       stdio: "ignore"
     });
@@ -18705,7 +18800,7 @@ var shutdownSession = async (ctx, cmd) => {
   }
   if (ctx.keepAliveCtx.inCodespace && ctx.keepAliveCtx.codespaceName) {
     try {
-      const stopProc = (0, import_child_process21.spawn)(
+      const stopProc = (0, import_child_process22.spawn)(
         "bash",
         ["-lc", `sleep 1; gh codespace stop -c ${JSON.stringify(ctx.keepAliveCtx.codespaceName)} >/dev/null 2>&1 || true`],
         { detached: true, stdio: "ignore" }
@@ -18715,7 +18810,7 @@ var shutdownSession = async (ctx, cmd) => {
     }
   }
   try {
-    const proc = (0, import_child_process21.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
+    const proc = (0, import_child_process22.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
       detached: true,
       stdio: "ignore"
     });
@@ -18759,9 +18854,9 @@ var listFiles = async (ctx, cmd, parsed) => {
   await ctx.relay.sendResult(cmd.id, "completed", result);
 };
 var envReadH = async (ctx, cmd) => {
-  const envPath = path48.join(process.cwd(), ".env");
+  const envPath = path49.join(process.cwd(), ".env");
   try {
-    const raw = await fs43.promises.readFile(envPath, "utf8");
+    const raw = await fs44.promises.readFile(envPath, "utf8");
     await ctx.relay.sendResult(cmd.id, "completed", {
       exists: true,
       vars: parseDotenv(raw)
@@ -18792,14 +18887,14 @@ var envWriteH = async (ctx, cmd, parsed) => {
     }
     seen.add(v.key);
   }
-  const envPath = path48.join(process.cwd(), ".env");
-  const tmpPath = path48.join(process.cwd(), ".env.codeam.tmp");
+  const envPath = path49.join(process.cwd(), ".env");
+  const tmpPath = path49.join(process.cwd(), ".env.codeam.tmp");
   try {
-    await fs43.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
-    await fs43.promises.rename(tmpPath, envPath);
+    await fs44.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
+    await fs44.promises.rename(tmpPath, envPath);
     await ctx.relay.sendResult(cmd.id, "completed", { ok: true, count: vars.length });
   } catch (err) {
-    await fs43.promises.rm(tmpPath, { force: true }).catch(() => void 0);
+    await fs44.promises.rm(tmpPath, { force: true }).catch(() => void 0);
     await ctx.relay.sendResult(cmd.id, "failed", { error: err.message });
   }
 };
@@ -18817,7 +18912,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
   let configuredAgent = rawAgentId;
   if (!configuredAgent) {
     try {
-      const raw = JSON.parse(fs43.readFileSync(headroomConfigPath(), "utf8"));
+      const raw = JSON.parse(fs44.readFileSync(headroomConfigPath(), "utf8"));
       configuredAgent = raw.agent ?? "";
     } catch {
     }
@@ -18851,7 +18946,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
     persist: persistHeadroomConfig,
     readEnabled: () => {
       try {
-        const raw = JSON.parse(fs43.readFileSync(headroomConfigPath(), "utf8"));
+        const raw = JSON.parse(fs44.readFileSync(headroomConfigPath(), "utf8"));
         return raw.enabled === true;
       } catch {
         return false;
@@ -18903,7 +18998,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
     restoreAgentHeadroomConfig: (kind) => restoreAgentHeadroomConfig(kind),
     stopProxy: () => {
       try {
-        const p2 = (0, import_child_process21.spawn)("pkill", ["-TERM", "-f", "headroom.*proxy"], {
+        const p2 = (0, import_child_process22.spawn)("pkill", ["-TERM", "-f", "headroom.*proxy"], {
           detached: true,
           stdio: "ignore"
         });
@@ -18945,7 +19040,7 @@ var headroomBudgetH = async (ctx, cmd) => {
   }
   let headroomActive = false;
   try {
-    const raw = JSON.parse(fs43.readFileSync(headroomConfigPath(), "utf8"));
+    const raw = JSON.parse(fs44.readFileSync(headroomConfigPath(), "utf8"));
     headroomActive = raw.enabled === true;
   } catch {
   }
@@ -18955,7 +19050,7 @@ var headroomBudgetH = async (ctx, cmd) => {
   }
   let existingConfig = { enabled: true };
   try {
-    existingConfig = JSON.parse(fs43.readFileSync(headroomConfigPath(), "utf8"));
+    existingConfig = JSON.parse(fs44.readFileSync(headroomConfigPath(), "utf8"));
   } catch {
   }
   if (payload.budgetEnabled && payload.budgetUsd != null) {
@@ -19060,7 +19155,7 @@ var defaultCliUpdateDeps = {
   isSupervised: () => process.env["CODEAM_AUTO_APPROVE"] === "1" || process.env["CODESPACES"] === "true",
   relaunch: (args2) => {
     const entry = process.argv[1];
-    const child = (0, import_child_process21.spawn)(process.execPath, [entry, ...args2], {
+    const child = (0, import_child_process22.spawn)(process.execPath, [entry, ...args2], {
       detached: true,
       stdio: "inherit"
     });
@@ -19073,13 +19168,13 @@ var CLI_UPDATE_MAX_ATTEMPTS = 3;
 function buildNpmInstallInvocation(opts) {
   const entryScript = opts?.entryScript ?? process.argv[1] ?? "";
   const execPath = opts?.execPath ?? process.execPath;
-  const exists2 = opts?.existsSync ?? fs43.existsSync;
-  const normalized = entryScript.split(path48.sep).join("/");
+  const exists2 = opts?.existsSync ?? fs44.existsSync;
+  const normalized = entryScript.split(path49.sep).join("/");
   const marker = "/lib/node_modules/codeam-cli/";
   const markerIdx = normalized.indexOf(marker);
   const prefix = markerIdx > 0 ? entryScript.slice(0, markerIdx) : null;
-  const siblingNpm = path48.join(
-    path48.dirname(execPath),
+  const siblingNpm = path49.join(
+    path49.dirname(execPath),
     process.platform === "win32" ? "npm.cmd" : "npm"
   );
   const command2 = exists2(siblingNpm) ? siblingNpm : "npm";
@@ -19091,7 +19186,7 @@ async function runNpmInstallLatest() {
   const invocation = buildNpmInstallInvocation();
   for (let attempt = 1; attempt <= CLI_UPDATE_MAX_ATTEMPTS; attempt++) {
     const result = await new Promise((resolve7) => {
-      (0, import_child_process21.execFile)(
+      (0, import_child_process22.execFile)(
         invocation.command,
         invocation.args,
         { timeout: CLI_UPDATE_INSTALL_TIMEOUT_MS },
@@ -19586,8 +19681,8 @@ function normalizeDetectionForSpawn(detection, cwd) {
   if (args2.length === 0) return detection;
   const binName = args2[0];
   if (binName.startsWith("-")) return detection;
-  const binPath = path48.join(cwd, "node_modules", ".bin", binName);
-  if (!fs43.existsSync(binPath)) return detection;
+  const binPath = path49.join(cwd, "node_modules", ".bin", binName);
+  if (!fs44.existsSync(binPath)) return detection;
   return {
     ...detection,
     command: binPath,
@@ -19822,7 +19917,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
       "BOOT_SEQUENCE",
       `${spawnable.command} ${spawnable.args.join(" ")}`
     );
-    const devServer = (0, import_child_process21.spawn)(spawnable.command, spawnable.args, {
+    const devServer = (0, import_child_process22.spawn)(spawnable.command, spawnable.args, {
       cwd: process.cwd(),
       env: { ...process.env, ...spawnable.env ?? {} },
       stdio: ["ignore", "pipe", "pipe"],
@@ -19972,7 +20067,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
             `cloudflared quick tunnel (retry ${attempt}/${MAX_TUNNEL_ATTEMPTS})`
           );
         }
-        const candidate = (0, import_child_process21.spawn)(
+        const candidate = (0, import_child_process22.spawn)(
           bin,
           ["tunnel", "--url", `http://localhost:${detection.port}`],
           { stdio: ["ignore", "pipe", "pipe"] }
@@ -20169,13 +20264,13 @@ async function dispatchCommand(ctx, cmd) {
 }
 // src/commands/start/keep-alive.ts
-var import_child_process22 = require("child_process");
+var import_child_process23 = require("child_process");
 function buildKeepAlive(ctx) {
   let timer = null;
   async function setIdleTimeout(minutes) {
     if (!ctx.inCodespace || !ctx.codespaceName) return;
     await new Promise((resolve7) => {
-      const proc = (0, import_child_process22.spawn)(
+      const proc = (0, import_child_process23.spawn)(
         "gh",
         [
           "api",
@@ -20406,12 +20501,12 @@ function readTokenFromArgs(args2) {
   }
   const fileFlag = args2.find((a) => a.startsWith("--token-file="));
   if (fileFlag) {
-    const path63 = fileFlag.slice("--token-file=".length);
+    const path64 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs44.readFileSync(path63, "utf8").trim();
-      if (content.length === 0) fail(`--token-file ${path63} is empty`);
+      const content = fs45.readFileSync(path64, "utf8").trim();
+      if (content.length === 0) fail(`--token-file ${path64} is empty`);
       try {
-        fs44.unlinkSync(path63);
+        fs45.unlinkSync(path64);
       } catch {
       }
       return content;
@@ -20437,7 +20532,7 @@ async function claimOnce(token, pluginId, pluginSecretHash) {
     pluginId,
     ideName: "codeam-cli (codespace)",
     ideVersion: process.env.npm_package_version ?? "unknown",
-    hostname: os37.hostname(),
+    hostname: os38.hostname(),
     codespaceName: process.env.CODESPACE_NAME ?? "",
     // Current git branch of the codespace's working directory, so the
     // backend can populate `PairedSession.branch` for the codespace pair.
@@ -20498,7 +20593,7 @@ async function claim(token, pluginId, pluginSecretHash) {
   }
 }
 function pairAutoLockPath() {
-  return path49.join(os37.homedir(), ".codeam", "pair-auto.lock");
+  return path50.join(os38.homedir(), ".codeam", "pair-auto.lock");
 }
 function isLivePairAuto(pid) {
   if (!Number.isInteger(pid) || pid <= 0 || pid === process.pid) return false;
@@ -20508,7 +20603,7 @@ function isLivePairAuto(pid) {
     if (e.code !== "EPERM") return false;
   }
   try {
-    return fs44.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
+    return fs45.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
   } catch {
     return true;
   }
@@ -20518,24 +20613,24 @@ function isLiveCodeam(pid) {
 }
 function daemonLockPath(sessionId) {
   const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
-  return path49.join(os37.homedir(), ".codeam", `daemon-${safe}.lock`);
+  return path50.join(os38.homedir(), ".codeam", `daemon-${safe}.lock`);
 }
 function acquireDaemonLock(sessionId) {
   const lockPath = daemonLockPath(sessionId);
   try {
-    fs44.mkdirSync(path49.dirname(lockPath), { recursive: true });
+    fs45.mkdirSync(path50.dirname(lockPath), { recursive: true });
     try {
-      fs44.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs45.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs44.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs45.readFileSync(lockPath, "utf8").trim());
       if (holder && holder !== process.pid && isLiveCodeam(holder)) return false;
-      fs44.writeFileSync(lockPath, String(process.pid));
+      fs45.writeFileSync(lockPath, String(process.pid));
     }
     const release3 = () => {
       try {
-        if (fs44.existsSync(lockPath) && Number(fs44.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs44.unlinkSync(lockPath);
+        if (fs45.existsSync(lockPath) && Number(fs45.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs45.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -20557,19 +20652,19 @@ function acquireDaemonLock(sessionId) {
 function acquireSingletonLock() {
   const lockPath = pairAutoLockPath();
   try {
-    fs44.mkdirSync(path49.dirname(lockPath), { recursive: true });
+    fs45.mkdirSync(path50.dirname(lockPath), { recursive: true });
     try {
-      fs44.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs45.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs44.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs45.readFileSync(lockPath, "utf8").trim());
       if (isLivePairAuto(holder)) return false;
-      fs44.writeFileSync(lockPath, String(process.pid));
+      fs45.writeFileSync(lockPath, String(process.pid));
     }
     process.once("exit", () => {
       try {
-        if (fs44.existsSync(lockPath) && Number(fs44.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs44.unlinkSync(lockPath);
+        if (fs45.existsSync(lockPath) && Number(fs45.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs45.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -21014,12 +21109,12 @@ var AgentService = class _AgentService {
 };
 // src/agents/acp/adapters.ts
-var path51 = __toESM(require("path"));
+var path52 = __toESM(require("path"));
 // src/agents/acp/agent-binary.ts
 var import_fs4 = __toESM(require("fs"));
 var import_path8 = __toESM(require("path"));
-var import_child_process23 = require("child_process");
+var import_child_process24 = require("child_process");
 function currentPlatformKey() {
   return `${process.platform}-${process.arch}`;
 }
@@ -21082,7 +21177,7 @@ function isCommandOnPath(cmd, probe = defaultWhich) {
 function defaultWhich(cmd) {
   const finder = process.platform === "win32" ? "where" : "which";
   try {
-    const res = (0, import_child_process23.spawnSync)(finder, [cmd], { stdio: "ignore" });
+    const res = (0, import_child_process24.spawnSync)(finder, [cmd], { stdio: "ignore" });
     return res.status === 0;
   } catch {
     return false;
@@ -21113,13 +21208,13 @@ function resolveBin(pkgName, binName) {
   try {
     const manifestPath = require_.resolve(`${pkgName}/package.json`);
     const manifest = require_(`${pkgName}/package.json`);
-    const pkgDir = path51.dirname(manifestPath);
+    const pkgDir = path52.dirname(manifestPath);
     const bin = manifest.bin;
     if (!bin) return null;
-    if (typeof bin === "string") return path51.resolve(pkgDir, bin);
+    if (typeof bin === "string") return path52.resolve(pkgDir, bin);
     const target = binName ?? Object.keys(bin)[0];
     if (!target || !bin[target]) return null;
-    return path51.resolve(pkgDir, bin[target]);
+    return path52.resolve(pkgDir, bin[target]);
   } catch {
     return null;
   }
@@ -21194,9 +21289,9 @@ function requiresAcp(agent) {
 var import_node_crypto7 = require("crypto");
 // src/services/history.service.ts
-var fs46 = __toESM(require("fs"));
-var path52 = __toESM(require("path"));
-var os38 = __toESM(require("os"));
+var fs47 = __toESM(require("fs"));
+var path53 = __toESM(require("path"));
+var os39 = __toESM(require("os"));
 var https7 = __toESM(require("https"));
 var http6 = __toESM(require("http"));
 var import_zod2 = require("zod");
@@ -21223,7 +21318,7 @@ function parseJsonl(filePath) {
   const messages = [];
   let raw;
   try {
-    raw = fs46.readFileSync(filePath, "utf8");
+    raw = fs47.readFileSync(filePath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       log.warn("history:parseJsonl", `read failed for ${filePath}`, err);
@@ -21364,7 +21459,7 @@ var HistoryService = class _HistoryService {
     return this._quotaPercent === null || Date.now() - this._quotaFetchedAt > ttlMs;
   }
   get projectDir() {
-    return this.runtime.resolveHistoryDir(this.cwd) ?? path52.join(os38.homedir(), ".claude", "projects", encodeCwd(this.cwd));
+    return this.runtime.resolveHistoryDir(this.cwd) ?? path53.join(os39.homedir(), ".claude", "projects", encodeCwd(this.cwd));
   }
   /** Set the current Claude conversation ID (extracted from /cost command or session start) */
   setCurrentConversationId(id) {
@@ -21376,7 +21471,7 @@ var HistoryService = class _HistoryService {
   /** Return the current message count in the active conversation. */
   getCurrentMessageCount() {
     if (!this.currentConversationId) return 0;
-    const filePath = path52.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+    const filePath = path53.join(this.projectDir, `${this.currentConversationId}.jsonl`);
     return parseJsonl(filePath).length;
   }
   /**
@@ -21387,7 +21482,7 @@ var HistoryService = class _HistoryService {
     const deadline = Date.now() + timeoutMs;
     while (Date.now() < deadline) {
       if (!this.currentConversationId) return null;
-      const filePath = path52.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+      const filePath = path53.join(this.projectDir, `${this.currentConversationId}.jsonl`);
       const messages = parseJsonl(filePath);
       if (messages.length > previousCount) {
         for (let i = messages.length - 1; i >= previousCount; i--) {
@@ -21413,16 +21508,16 @@ var HistoryService = class _HistoryService {
     const dir = this.projectDir;
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     try {
-      const files = fs46.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
+      const files = fs47.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
         try {
-          const stat3 = fs46.statSync(path52.join(dir, e.name));
+          const stat3 = fs47.statSync(path53.join(dir, e.name));
           return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
         } catch {
           return { name: e.name, mtime: 0, birthtime: 0 };
         }
       }).filter((f) => f.birthtime >= cutoff).sort((a, b) => b.mtime - a.mtime);
       if (files.length > 0) {
-        this.currentConversationId = path52.basename(files[0].name, ".jsonl");
+        this.currentConversationId = path53.basename(files[0].name, ".jsonl");
       }
     } catch {
     }
@@ -21456,13 +21551,13 @@ var HistoryService = class _HistoryService {
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     let entries;
     try {
-      entries = fs46.readdirSync(dir, { withFileTypes: true });
+      entries = fs47.readdirSync(dir, { withFileTypes: true });
     } catch {
       return null;
     }
     const files = entries.filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
       try {
-        const stat3 = fs46.statSync(path52.join(dir, e.name));
+        const stat3 = fs47.statSync(path53.join(dir, e.name));
         return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
       } catch {
         return { name: e.name, mtime: 0, birthtime: 0 };
@@ -21471,12 +21566,12 @@ var HistoryService = class _HistoryService {
     if (files.length === 0) return null;
     const targetFile = this.currentConversationId ? `${this.currentConversationId}.jsonl` : files[0].name;
     if (!files.some((f) => f.name === targetFile)) return null;
-    return this.extractUsageFromFile(path52.join(dir, targetFile));
+    return this.extractUsageFromFile(path53.join(dir, targetFile));
   }
   extractUsageFromFile(filePath) {
     let raw;
     try {
-      raw = fs46.readFileSync(filePath, "utf8");
+      raw = fs47.readFileSync(filePath, "utf8");
     } catch {
       return null;
     }
@@ -21521,9 +21616,9 @@ var HistoryService = class _HistoryService {
     let totalCost = 0;
     let files;
     try {
-      files = fs46.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
+      files = fs47.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
         try {
-          return fs46.statSync(path52.join(projectDir, f)).mtimeMs >= monthStartMs;
+          return fs47.statSync(path53.join(projectDir, f)).mtimeMs >= monthStartMs;
         } catch {
           return false;
         }
@@ -21534,7 +21629,7 @@ var HistoryService = class _HistoryService {
     for (const file of files) {
       let raw;
       try {
-        raw = fs46.readFileSync(path52.join(projectDir, file), "utf8");
+        raw = fs47.readFileSync(path53.join(projectDir, file), "utf8");
       } catch {
         continue;
       }
@@ -21613,7 +21708,7 @@ var HistoryService = class _HistoryService {
     if (this.runtime.resolveHistoryFile) {
       return this.runtime.resolveHistoryFile(this.cwd, sessionId);
     }
-    return path52.join(this.projectDir, `${sessionId}.jsonl`);
+    return path53.join(this.projectDir, `${sessionId}.jsonl`);
   }
   /**
    * Parse a conversation's messages from disk, agent-aware. Claude uses the
@@ -21647,7 +21742,7 @@ var HistoryService = class _HistoryService {
         };
       });
     }
-    return parseJsonl(path52.join(this.projectDir, `${sessionId}.jsonl`));
+    return parseJsonl(path53.join(this.projectDir, `${sessionId}.jsonl`));
   }
   async loadConversation(sessionId) {
     const messages = this.readConversation(sessionId);
@@ -21703,7 +21798,7 @@ var HistoryService = class _HistoryService {
     if (!filePath) return false;
     let mtimeMs;
     try {
-      mtimeMs = fs46.statSync(filePath).mtimeMs;
+      mtimeMs = fs47.statSync(filePath).mtimeMs;
     } catch {
       return false;
     }
@@ -21772,10 +21867,10 @@ var HistoryService = class _HistoryService {
 // src/agents/acp/client.ts
 var import_node_child_process17 = require("child_process");
-var fs47 = __toESM(require("fs/promises"));
+var fs48 = __toESM(require("fs/promises"));
 var fsSync = __toESM(require("fs"));
-var os39 = __toESM(require("os"));
-var path53 = __toESM(require("path"));
+var os40 = __toESM(require("os"));
+var path54 = __toESM(require("path"));
 var import_node_stream = require("stream");
 // ../../node_modules/@agentclientprotocol/sdk/dist/acp.js
@@ -24608,7 +24703,7 @@ var AcpClient = class {
       },
       readTextFile: async (params) => {
         try {
-          const content = await fs47.readFile(params.path, "utf8");
+          const content = await fs48.readFile(params.path, "utf8");
           return applyLineRange(content, params.line ?? null, params.limit ?? null);
         } catch (err) {
           const code = err.code;
@@ -24628,7 +24723,7 @@ var AcpClient = class {
       },
       writeTextFile: async (params) => {
         try {
-          await fs47.writeFile(params.path, params.content, "utf8");
+          await fs48.writeFile(params.path, params.content, "utf8");
           return {};
         } catch (err) {
           const code = err.code;
@@ -24677,25 +24772,25 @@ function applyLineRange(content, line, limit) {
   return { content: lines.slice(start2, end).join("\n") };
 }
 function knownAgentBinaryDirs() {
-  const home = os39.homedir();
+  const home = os40.homedir();
   const out2 = [];
   out2.push("/tmp/codeam-node20/bin");
   for (const root of [
     "/usr/local/share/nvm/versions/node",
-    path53.join(home, ".nvm/versions/node")
+    path54.join(home, ".nvm/versions/node")
   ]) {
     try {
       for (const child of fsSync.readdirSync(root)) {
-        out2.push(path53.join(root, child, "bin"));
+        out2.push(path54.join(root, child, "bin"));
       }
     } catch {
     }
   }
-  out2.push(path53.join(home, ".volta/bin"));
+  out2.push(path54.join(home, ".volta/bin"));
   out2.push("/usr/local/bin");
   out2.push("/usr/bin");
-  out2.push(path53.join(home, ".local/bin"));
-  out2.push(path53.join(home, "bin"));
+  out2.push(path54.join(home, ".local/bin"));
+  out2.push(path54.join(home, "bin"));
   return out2.filter((p2) => {
     try {
       return fsSync.statSync(p2).isDirectory();
@@ -24706,7 +24801,7 @@ function knownAgentBinaryDirs() {
 }
 function expandPathForAgentBinaries(existingPath) {
   const existing = new Set(
-    existingPath.split(path53.delimiter).filter((p2) => p2.length > 0)
+    existingPath.split(path54.delimiter).filter((p2) => p2.length > 0)
   );
   const additions = [];
   for (const dir of knownAgentBinaryDirs()) {
@@ -24716,7 +24811,7 @@ function expandPathForAgentBinaries(existingPath) {
     }
   }
   if (additions.length === 0) return existingPath;
-  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path53.delimiter);
+  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path54.delimiter);
 }
 // src/services/streaming/transport.ts
@@ -25210,6 +25305,37 @@ You have two options:
   };
 }
+// src/agents/acp/wakeCredentialProbe.ts
+async function localCredentialExpiryStatus(agent) {
+  if (!/claude/i.test(agent)) return "unknown";
+  const token = await extractLocalClaudeToken();
+  if (!token) return "unknown";
+  return validateClaudeToken(token).status;
+}
+function createWakeCredentialProbe(deps) {
+  return {
+    run: async () => {
+      let status2;
+      try {
+        status2 = await deps.getStatus();
+      } catch {
+        return false;
+      }
+      if (status2 !== "expired") return false;
+      deps.log?.("wake credential probe \u2014 local token expired, surfacing re-auth");
+      try {
+        await deps.emitReauthBubble();
+      } catch {
+      }
+      try {
+        await deps.reportCredentialInvalid();
+      } catch {
+      }
+      return true;
+    }
+  };
+}
 // src/agents/acp/reconcileDelta.ts
 function reconcileCumulative(existing, incoming) {
   if (incoming.length === 0) return existing;
@@ -25229,16 +25355,16 @@ function commonPrefixLength(a, b) {
 }
 // src/agents/acp/onboarding.ts
-var import_child_process24 = require("child_process");
-var fs48 = __toESM(require("fs"));
-var os40 = __toESM(require("os"));
-var path54 = __toESM(require("path"));
+var import_child_process25 = require("child_process");
+var fs49 = __toESM(require("fs"));
+var os41 = __toESM(require("os"));
+var path55 = __toESM(require("path"));
 var _onboardingSeam = {
-  markerPath: (sessionId) => path54.join(os40.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
-  exists: (p2) => fs48.existsSync(p2),
+  markerPath: (sessionId) => path55.join(os41.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
+  exists: (p2) => fs49.existsSync(p2),
   write: (p2) => {
-    fs48.mkdirSync(path54.dirname(p2), { recursive: true });
-    fs48.writeFileSync(p2, "");
+    fs49.mkdirSync(path55.dirname(p2), { recursive: true });
+    fs49.writeFileSync(p2, "");
   },
   disabled: () => {
     const v = process.env.CODEAM_ONBOARDING_DISABLED;
@@ -25250,7 +25376,7 @@ var _onboardingSeam = {
    */
   gitRemoteUrl: (cwd) => {
     try {
-      return (0, import_child_process24.execFileSync)("git", ["-C", cwd, "remote", "get-url", "origin"], {
+      return (0, import_child_process25.execFileSync)("git", ["-C", cwd, "remote", "get-url", "origin"], {
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"],
         timeout: 2e3
@@ -25275,7 +25401,7 @@ function resolveRepoName(cwd) {
       if (name) return name;
     }
   }
-  const base = path54.basename(cwd || "");
+  const base = path55.basename(cwd || "");
   if (base && !isUuid(base)) return base;
   return "this project";
 }
@@ -25552,9 +25678,9 @@ function extractSelectPrompt(text) {
 var import_crypto5 = require("crypto");
 // src/services/turn-files/git-changeset.ts
-var import_child_process25 = require("child_process");
-var fs49 = __toESM(require("fs/promises"));
-var path55 = __toESM(require("path"));
+var import_child_process26 = require("child_process");
+var fs50 = __toESM(require("fs/promises"));
+var path56 = __toESM(require("path"));
 async function collectRepoChangeset(opts) {
   const status2 = await runGit3(opts.repoRoot, ["status", "--porcelain=v1", "-z"]);
   if (status2 === null) return null;
@@ -25572,7 +25698,7 @@ async function collectRepoChangeset(opts) {
     let stats;
     if (row.fileStatus === "added" && numstatEntry === void 0) {
       const lineCount = await readUntrackedLineCount(
-        path55.join(opts.repoRoot, row.filePath)
+        path56.join(opts.repoRoot, row.filePath)
       );
       stats = { added: lineCount, removed: 0 };
     } else {
@@ -25603,7 +25729,7 @@ function readUntrackedLineCount(absPath) {
 }
 async function defaultReadUntrackedLineCount(absPath) {
   try {
-    const content = await fs49.readFile(absPath, "utf8");
+    const content = await fs50.readFile(absPath, "utf8");
     let count = 0;
     let pos = -1;
     while ((pos = content.indexOf("\n", pos + 1)) !== -1) {
@@ -25667,7 +25793,7 @@ function defaultRunGit(cwd, args2) {
   return new Promise((resolve7) => {
     let proc;
     try {
-      proc = (0, import_child_process25.spawn)("git", args2, { cwd, env: process.env });
+      proc = (0, import_child_process26.spawn)("git", args2, { cwd, env: process.env });
     } catch {
       resolve7(null);
       return;
@@ -25695,7 +25821,7 @@ function defaultRunGit(cwd, args2) {
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs53 = await import("fs/promises");
+  const fs54 = await import("fs/promises");
   const out2 = [];
   await walk(workingDir, 0);
   return out2;
@@ -25703,7 +25829,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (depth > maxDepth) return;
     let entries = [];
     try {
-      const dirents = await fs53.readdir(dir, { withFileTypes: true });
+      const dirents = await fs54.readdir(dir, { withFileTypes: true });
       entries = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -25714,8 +25840,8 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (hasGit) {
       out2.push({
         repoRoot: dir,
-        repoPath: path55.relative(workingDir, dir),
-        repoName: path55.basename(dir)
+        repoPath: path56.relative(workingDir, dir),
+        repoName: path56.basename(dir)
       });
       return;
     }
@@ -25723,14 +25849,14 @@ async function discoverRepos(workingDir, maxDepth = 4) {
       if (!entry.isDirectory) continue;
       if (entry.name === "node_modules") continue;
       if (entry.name === "dist" || entry.name === "build") continue;
-      await walk(path55.join(dir, entry.name), depth + 1);
+      await walk(path56.join(dir, entry.name), depth + 1);
     }
   }
 }
 // src/services/turn-files/files-outbox.ts
-var fs50 = __toESM(require("fs/promises"));
-var path56 = __toESM(require("path"));
+var fs51 = __toESM(require("fs/promises"));
+var path57 = __toESM(require("path"));
 var import_os7 = require("os");
 var HOME_OUTBOX_DIR = ".codeam/outbox";
 var MAX_AGE_MS = 24 * 60 * 60 * 1e3;
@@ -25763,16 +25889,16 @@ var FilesOutbox = class {
   backoffIndex = 0;
   stopped = false;
   constructor(opts) {
-    const base = opts.baseDir ?? path56.join(homeDir(), HOME_OUTBOX_DIR);
-    this.filePath = path56.join(base, `${opts.sessionId}.jsonl`);
+    const base = opts.baseDir ?? path57.join(homeDir(), HOME_OUTBOX_DIR);
+    this.filePath = path57.join(base, `${opts.sessionId}.jsonl`);
     this.post = opts.post;
     this.autoSchedule = opts.autoSchedule !== false;
   }
   /** Persist the entry to disk and trigger a flush. Returns once the
    *  line is durable on disk (not once the POST succeeds). */
   async enqueue(entry) {
-    await fs50.mkdir(path56.dirname(this.filePath), { recursive: true });
-    await fs50.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
+    await fs51.mkdir(path57.dirname(this.filePath), { recursive: true });
+    await fs51.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
     this.backoffIndex = 0;
     if (this.autoSchedule) this.scheduleFlush(0);
   }
@@ -25861,7 +25987,7 @@ var FilesOutbox = class {
   async readAll() {
     let raw = "";
     try {
-      raw = await fs50.readFile(this.filePath, "utf8");
+      raw = await fs51.readFile(this.filePath, "utf8");
     } catch {
       return [];
     }
@@ -25885,12 +26011,12 @@ var FilesOutbox = class {
   async rewrite(entries) {
     const tmpPath = `${this.filePath}.${process.pid}.tmp`;
     if (entries.length === 0) {
-      await fs50.unlink(this.filePath).catch(() => void 0);
+      await fs51.unlink(this.filePath).catch(() => void 0);
       return;
     }
     const payload = entries.map((e) => JSON.stringify(e)).join("\n") + "\n";
-    await fs50.writeFile(tmpPath, payload, "utf8");
-    await fs50.rename(tmpPath, this.filePath);
+    await fs51.writeFile(tmpPath, payload, "utf8");
+    await fs51.rename(tmpPath, this.filePath);
   }
 };
 function applyJitter(ms) {
@@ -26876,9 +27002,9 @@ async function runAcpSession(opts) {
   });
   let _budgetReachedPosted = false;
   const relaunchProxyWithoutBudget = async () => {
-    const { spawn: spawn33 } = await import("child_process");
+    const { spawn: spawn34 } = await import("child_process");
     try {
-      const killer = spawn33("pkill", ["-TERM", "-f", "headroom.*proxy"], {
+      const killer = spawn34("pkill", ["-TERM", "-f", "headroom.*proxy"], {
         detached: true,
         stdio: "ignore"
       });
@@ -26890,7 +27016,7 @@ async function runAcpSession(opts) {
     await new Promise((r) => setTimeout(r, 500));
     const proxyEnv = buildRelaunchProxyEnv(process.env);
     try {
-      const proxy = spawn33(
+      const proxy = spawn34(
         "headroom",
         ["proxy", "--port", "8787"],
         { stdio: "ignore", detached: true, env: proxyEnv }
@@ -27046,6 +27172,17 @@ async function runAcpSession(opts) {
   );
   await onboardingWelcomeDone;
   relay.start();
+  void createWakeCredentialProbe({
+    getStatus: () => localCredentialExpiryStatus(opts.agent),
+    emitReauthBubble: async () => {
+      await publisher.publishOutput({ type: "new_turn", done: false });
+      await publisher.publishOutput({ type: "text", content: AUTH_FAILURE_MESSAGE, done: true });
+      history.appendAgentInitiatedReply(AUTH_FAILURE_MESSAGE);
+      await history.flush();
+    },
+    reportCredentialInvalid: () => reportCredentialInvalid(opts),
+    log: (msg) => showInfo(msg)
+  }).run();
   const prewarmTimer = setTimeout(() => prewarmPreviewDetection(runtime), 2e4);
   const shutdown = async (signal) => {
     showInfo(`Shutting down ACP session (${signal})\u2026`);
@@ -28527,15 +28664,15 @@ function fetchQuotaUsage(runtime, historySvc) {
 }
 // src/agents/claude/onboarding.ts
-var fs51 = __toESM(require("fs"));
-var os41 = __toESM(require("os"));
-var path57 = __toESM(require("path"));
+var fs52 = __toESM(require("fs"));
+var os42 = __toESM(require("os"));
+var path58 = __toESM(require("path"));
 function ensureClaudeOnboarded() {
   try {
-    const file = path57.join(os41.homedir(), ".claude.json");
+    const file = path58.join(os42.homedir(), ".claude.json");
     let config = {};
     try {
-      config = JSON.parse(fs51.readFileSync(file, "utf8"));
+      config = JSON.parse(fs52.readFileSync(file, "utf8"));
     } catch {
     }
     if (config.hasCompletedOnboarding === true && typeof config.theme === "string") {
@@ -28546,8 +28683,8 @@ function ensureClaudeOnboarded() {
     if (typeof config.lastOnboardingVersion !== "string") {
       config.lastOnboardingVersion = "2.1.177";
     }
-    fs51.mkdirSync(path57.dirname(file), { recursive: true });
-    fs51.writeFileSync(file, JSON.stringify(config, null, 2));
+    fs52.mkdirSync(path58.dirname(file), { recursive: true });
+    fs52.writeFileSync(file, JSON.stringify(config, null, 2));
     log.info("claude", "pre-completed Claude onboarding (skip first-run theme picker)");
   } catch (err) {
     log.warn("claude", `ensureClaudeOnboarded failed (non-fatal): ${err.message}`);
@@ -29195,11 +29332,11 @@ async function logout() {
 var import_picocolors11 = __toESM(require("picocolors"));
 // src/services/providers/github-codespaces.ts
-var import_child_process26 = require("child_process");
+var import_child_process27 = require("child_process");
 var import_util4 = require("util");
 var import_picocolors9 = __toESM(require("picocolors"));
-var path58 = __toESM(require("path"));
-var execFileP6 = (0, import_util4.promisify)(import_child_process26.execFile);
+var path59 = __toESM(require("path"));
+var execFileP6 = (0, import_util4.promisify)(import_child_process27.execFile);
 var MAX_BUFFER = 8 * 1024 * 1024;
 function resetStdinForChild() {
   if (process.stdin.isTTY) {
@@ -29243,7 +29380,7 @@ var GitHubCodespacesProvider = class {
     if (!isAuthed) {
       resetStdinForChild();
       await new Promise((resolve7, reject) => {
-        const proc = (0, import_child_process26.spawn)("gh", ["auth", "login", "-s", "codespace,repo,read:user"], {
+        const proc = (0, import_child_process27.spawn)("gh", ["auth", "login", "-s", "codespace,repo,read:user"], {
           stdio: "inherit"
         });
         proc.on("exit", (code) => {
@@ -29277,7 +29414,7 @@ var GitHubCodespacesProvider = class {
       wt(noteLines.join("\n"), "One more permission needed");
       resetStdinForChild();
       const refreshCode = await new Promise((resolve7, reject) => {
-        const proc = (0, import_child_process26.spawn)(
+        const proc = (0, import_child_process27.spawn)(
           "gh",
           ["auth", "refresh", "-h", "github.com", "-s", "codespace"],
           { stdio: "inherit" }
@@ -29427,7 +29564,7 @@ var GitHubCodespacesProvider = class {
     O2.step(`Installing gh via ${installCmd.describe}\u2026`);
     resetStdinForChild();
     const ok = await new Promise((resolve7) => {
-      const proc = (0, import_child_process26.spawn)(installCmd.exe, installCmd.args, { stdio: "inherit" });
+      const proc = (0, import_child_process27.spawn)(installCmd.exe, installCmd.args, { stdio: "inherit" });
       proc.on("exit", (code) => resolve7(code === 0));
       proc.on("error", () => resolve7(false));
     });
@@ -29454,7 +29591,7 @@ var GitHubCodespacesProvider = class {
     );
     resetStdinForChild();
     await new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process26.spawn)(
+      const proc = (0, import_child_process27.spawn)(
         "gh",
         ["auth", "refresh", "-h", "github.com", "-s", "repo,read:org"],
         { stdio: "inherit" }
@@ -29632,7 +29769,7 @@ var GitHubCodespacesProvider = class {
   async streamCommand(workspaceId, command2) {
     resetStdinForChild();
     return new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process26.spawn)(
+      const proc = (0, import_child_process27.spawn)(
         "gh",
         ["codespace", "ssh", "-c", workspaceId, "--", "-tt", command2],
         { stdio: "inherit" }
@@ -29659,11 +29796,11 @@ var GitHubCodespacesProvider = class {
       `mkdir -p ${shellQuote(remoteDir)} && tar -xzf - -C ${shellQuote(remoteDir)}`
     ];
     await new Promise((resolve7, reject) => {
-      const tar = (0, import_child_process26.spawn)("tar", tarArgs, {
+      const tar = (0, import_child_process27.spawn)("tar", tarArgs, {
         stdio: ["ignore", "pipe", "pipe"],
         env: tarEnv
       });
-      const ssh = (0, import_child_process26.spawn)("gh", sshArgs, {
+      const ssh = (0, import_child_process27.spawn)("gh", sshArgs, {
         stdio: [tar.stdout, "pipe", "pipe"]
       });
       let tarErr = "";
@@ -29687,7 +29824,7 @@ var GitHubCodespacesProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path58.posix.dirname(remotePath);
+    const remoteDir = path59.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote(remoteDir)}`,
       `cat > ${shellQuote(remotePath)}`
@@ -29697,7 +29834,7 @@ var GitHubCodespacesProvider = class {
     }
     const cmd = parts.join(" && ");
     await new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process26.spawn)(
+      const proc = (0, import_child_process27.spawn)(
         "gh",
         ["codespace", "ssh", "-c", workspaceId, "--", cmd],
         { stdio: ["pipe", "pipe", "pipe"] }
@@ -29755,11 +29892,11 @@ function shellQuote(s) {
 }
 // src/services/providers/gitpod.ts
-var import_child_process27 = require("child_process");
+var import_child_process28 = require("child_process");
 var import_util5 = require("util");
-var path59 = __toESM(require("path"));
+var path60 = __toESM(require("path"));
 var import_picocolors10 = __toESM(require("picocolors"));
-var execFileP7 = (0, import_util5.promisify)(import_child_process27.execFile);
+var execFileP7 = (0, import_util5.promisify)(import_child_process28.execFile);
 var MAX_BUFFER2 = 8 * 1024 * 1024;
 function resetStdinForChild2() {
   if (process.stdin.isTTY) {
@@ -29799,7 +29936,7 @@ var GitpodProvider = class {
     );
     resetStdinForChild2();
     await new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process27.spawn)("gitpod", ["login"], { stdio: "inherit" });
+      const proc = (0, import_child_process28.spawn)("gitpod", ["login"], { stdio: "inherit" });
       proc.on("exit", (code) => {
         if (code === 0) resolve7();
         else reject(new Error("gitpod login failed."));
@@ -29951,7 +30088,7 @@ var GitpodProvider = class {
   async streamCommand(workspaceId, command2) {
     resetStdinForChild2();
     return new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process27.spawn)(
+      const proc = (0, import_child_process28.spawn)(
         "gitpod",
         ["workspace", "ssh", workspaceId, "--", "-tt", command2],
         { stdio: "inherit" }
@@ -29971,11 +30108,11 @@ var GitpodProvider = class {
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote2(remoteDir)} && tar -xzf - -C ${shellQuote2(remoteDir)}`;
     await new Promise((resolve7, reject) => {
-      const tar = (0, import_child_process27.spawn)("tar", tarArgs, {
+      const tar = (0, import_child_process28.spawn)("tar", tarArgs, {
         stdio: ["ignore", "pipe", "pipe"],
         env: tarEnv
       });
-      const ssh = (0, import_child_process27.spawn)(
+      const ssh = (0, import_child_process28.spawn)(
         "gitpod",
         ["workspace", "ssh", workspaceId, "--", remoteCmd],
         { stdio: [tar.stdout, "pipe", "pipe"] }
@@ -29997,7 +30134,7 @@ var GitpodProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path59.posix.dirname(remotePath);
+    const remoteDir = path60.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote2(remoteDir)}`,
       `cat > ${shellQuote2(remotePath)}`
@@ -30007,7 +30144,7 @@ var GitpodProvider = class {
     }
     const cmd = parts.join(" && ");
     await new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process27.spawn)(
+      const proc = (0, import_child_process28.spawn)(
         "gitpod",
         ["workspace", "ssh", workspaceId, "--", cmd],
         { stdio: ["pipe", "pipe", "pipe"] }
@@ -30031,10 +30168,10 @@ function shellQuote2(s) {
 }
 // src/services/providers/gitlab-workspaces.ts
-var import_child_process28 = require("child_process");
+var import_child_process29 = require("child_process");
 var import_util6 = require("util");
-var path60 = __toESM(require("path"));
-var execFileP8 = (0, import_util6.promisify)(import_child_process28.execFile);
+var path61 = __toESM(require("path"));
+var execFileP8 = (0, import_util6.promisify)(import_child_process29.execFile);
 var MAX_BUFFER3 = 8 * 1024 * 1024;
 var GITLAB_API_BASE = process.env.CODEAM_GITLAB_API_URL ?? "https://gitlab.com/api/v4";
 function resetStdinForChild3() {
@@ -30076,7 +30213,7 @@ var GitLabWorkspacesProvider = class {
     );
     resetStdinForChild3();
     await new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process28.spawn)(
+      const proc = (0, import_child_process29.spawn)(
         "glab",
         ["auth", "login", "--scopes", "api,read_user,read_repository"],
         { stdio: "inherit" }
@@ -30248,7 +30385,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
     resetStdinForChild3();
     return new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process28.spawn)(
+      const proc = (0, import_child_process29.spawn)(
         "ssh",
         ["-tt", "-o", "StrictHostKeyChecking=accept-new", `${workspaceId}@${sshHost}`, command2],
         { stdio: "inherit" }
@@ -30269,8 +30406,8 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote3(remoteDir)} && tar -xzf - -C ${shellQuote3(remoteDir)}`;
     await new Promise((resolve7, reject) => {
-      const tar = (0, import_child_process28.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
-      const ssh = (0, import_child_process28.spawn)(
+      const tar = (0, import_child_process29.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
+      const ssh = (0, import_child_process29.spawn)(
         "ssh",
         ["-o", "StrictHostKeyChecking=accept-new", `${workspaceId}@${sshHost}`, remoteCmd],
         { stdio: [tar.stdout, "pipe", "pipe"] }
@@ -30293,14 +30430,14 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
-    const remoteDir = path60.posix.dirname(remotePath);
+    const remoteDir = path61.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote3(remoteDir)}`, `cat > ${shellQuote3(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote3(remotePath)}`);
     }
     const cmd = parts.join(" && ");
     await new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process28.spawn)(
+      const proc = (0, import_child_process29.spawn)(
         "ssh",
         ["-o", "StrictHostKeyChecking=accept-new", `${workspaceId}@${sshHost}`, cmd],
         { stdio: ["pipe", "pipe", "pipe"] }
@@ -30359,10 +30496,10 @@ function shellQuote3(s) {
 }
 // src/services/providers/railway.ts
-var import_child_process29 = require("child_process");
+var import_child_process30 = require("child_process");
 var import_util7 = require("util");
-var path61 = __toESM(require("path"));
-var execFileP9 = (0, import_util7.promisify)(import_child_process29.execFile);
+var path62 = __toESM(require("path"));
+var execFileP9 = (0, import_util7.promisify)(import_child_process30.execFile);
 var MAX_BUFFER4 = 8 * 1024 * 1024;
 function resetStdinForChild4() {
   if (process.stdin.isTTY) {
@@ -30403,7 +30540,7 @@ var RailwayProvider = class {
     );
     resetStdinForChild4();
     await new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process29.spawn)("railway", ["login"], { stdio: "inherit" });
+      const proc = (0, import_child_process30.spawn)("railway", ["login"], { stdio: "inherit" });
       proc.on("exit", (code) => {
         if (code === 0) resolve7();
         else reject(new Error("railway login failed."));
@@ -30546,7 +30683,7 @@ var RailwayProvider = class {
     }
     resetStdinForChild4();
     return new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process29.spawn)(
+      const proc = (0, import_child_process30.spawn)(
         "railway",
         ["shell", "--project", projectId, "--service", serviceId, "--command", command2],
         { stdio: "inherit" }
@@ -30570,8 +30707,8 @@ var RailwayProvider = class {
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote4(remoteDir)} && tar -xzf - -C ${shellQuote4(remoteDir)}`;
     await new Promise((resolve7, reject) => {
-      const tar = (0, import_child_process29.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
-      const sh = (0, import_child_process29.spawn)(
+      const tar = (0, import_child_process30.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
+      const sh = (0, import_child_process30.spawn)(
         "railway",
         ["shell", "--project", projectId, "--service", serviceId, "--command", remoteCmd],
         { stdio: [tar.stdout, "pipe", "pipe"] }
@@ -30597,14 +30734,14 @@ var RailwayProvider = class {
     if (!projectId || !serviceId) {
       throw new Error("Invalid Railway workspace id (expected projectId/serviceId).");
     }
-    const remoteDir = path61.posix.dirname(remotePath);
+    const remoteDir = path62.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote4(remoteDir)}`, `cat > ${shellQuote4(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote4(remotePath)}`);
     }
     const cmd = parts.join(" && ");
     await new Promise((resolve7, reject) => {
-      const proc = (0, import_child_process29.spawn)(
+      const proc = (0, import_child_process30.spawn)(
         "railway",
         ["shell", "--project", projectId, "--service", serviceId, "--command", cmd],
         { stdio: ["pipe", "pipe", "pipe"] }
@@ -31243,8 +31380,8 @@ async function invite() {
 var import_node_dns = require("dns");
 var import_node_util5 = require("util");
 var import_node_crypto8 = require("crypto");
-var fs52 = __toESM(require("fs"));
-var path62 = __toESM(require("path"));
+var fs53 = __toESM(require("fs"));
+var path63 = __toESM(require("path"));
 var import_picocolors14 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util5.promisify)(import_node_dns.resolve);
 async function checkDns(apiBase2) {
@@ -31300,13 +31437,13 @@ async function checkHealth(apiBase2) {
   }
 }
 function checkConfigDir() {
-  const dir = path62.join(require("os").homedir(), ".codeam");
+  const dir = path63.join(require("os").homedir(), ".codeam");
   try {
-    fs52.mkdirSync(dir, { recursive: true, mode: 448 });
-    const probe = path62.join(dir, ".doctor-probe");
-    fs52.writeFileSync(probe, "ok", { mode: 384 });
-    const read2 = fs52.readFileSync(probe, "utf8");
-    fs52.unlinkSync(probe);
+    fs53.mkdirSync(dir, { recursive: true, mode: 448 });
+    const probe = path63.join(dir, ".doctor-probe");
+    fs53.writeFileSync(probe, "ok", { mode: 384 });
+    const read2 = fs53.readFileSync(probe, "utf8");
+    fs53.unlinkSync(probe);
     if (read2 !== "ok") throw new Error("write/read round-trip mismatch");
     return {
       id: "config-dir",
@@ -31346,9 +31483,9 @@ function checkSessions() {
   }
 }
 function checkAgentBinaries() {
-  const os43 = createOsStrategy();
+  const os44 = createOsStrategy();
   return getEnabledAgents().map((meta) => {
-    const found = os43.findInPath(meta.binaryName);
+    const found = os44.findInPath(meta.binaryName);
     return {
       id: `agent-${meta.id}`,
       label: `Agent binary: ${meta.displayName} (${meta.binaryName})`,
@@ -31370,7 +31507,7 @@ function checkNodePty() {
       detail: "not required on this platform"
     };
   }
-  const vendoredPath = path62.join(__dirname, "vendor", "node-pty");
+  const vendoredPath = path63.join(__dirname, "vendor", "node-pty");
   for (const target of [vendoredPath, "node-pty"]) {
     try {
       require(target);
@@ -31412,7 +31549,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.52.11" : "0.0.0-dev";
+  const cliVersion = true ? "2.53.0" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -31611,7 +31748,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.52.11" : "unknown";
+  const v = true ? "2.53.0" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
@@ -31760,10 +31897,10 @@ var EXIT_CODE_NAMES = {
 };
 // src/index.ts
-var os42 = __toESM(require("os"));
+var os43 = __toESM(require("os"));
 if (!process.env.HOME) {
   try {
-    const home = os42.homedir();
+    const home = os43.homedir();
     if (home) process.env.HOME = home;
   } catch {
   }