codeam-cli 2.56.0 → 2.58.0

package/dist/index.js

@@ -610,10 +610,167 @@ OUTPUT JSON ONLY. NO MARKDOWN. NO COMMENTARY.
 `.trim();
 
 // src/config.ts
+var fs3 = __toESM(require("fs"));
+var os2 = __toESM(require("os"));
+var path2 = __toESM(require("path"));
+var crypto = __toESM(require("crypto"));
+
+// src/lib/quiet.ts
+var fs2 = __toESM(require("fs"));
+
+// src/services/logger.ts
 var fs = __toESM(require("fs"));
 var os = __toESM(require("os"));
 var path = __toESM(require("path"));
-var crypto = __toESM(require("crypto"));
+var LEVELS = { silent: 0, error: 1, warn: 2, info: 3, debug: 4, trace: 5 };
+var MAX_LOG_BYTES = 5 * 1024 * 1024;
+var MAX_ARCHIVES = 5;
+function currentLevel() {
+  if (process.env.CODEAM_DEBUG === "1") return LEVELS.trace;
+  const raw = (process.env.CODEAM_LOG ?? "error").toLowerCase();
+  return LEVELS[raw] ?? LEVELS.error;
+}
+var verboseFileEnabled = process.env.CODEAM_DEBUG === "1" || process.env.CODEAM_LOG === "debug" || process.env.CODEAM_LOG === "trace";
+var jsonMode = process.env.CODEAM_LOG_JSON === "1";
+function resolveLogDir() {
+  if (process.platform === "linux") {
+    const xdgState = process.env.XDG_STATE_HOME;
+    if (xdgState && xdgState.length > 0) return path.join(xdgState, "codeam");
+  }
+  if (process.platform === "win32") {
+    const local = process.env.LOCALAPPDATA;
+    if (local && local.length > 0) return path.join(local, "codeam", "Logs");
+  }
+  return path.join(os.homedir(), ".codeam");
+}
+var LOG_DIR = resolveLogDir();
+var debugFilePath = path.join(LOG_DIR, `debug-${process.pid}.log`);
+var fileInitialized = false;
+function maybeRotate() {
+  try {
+    const st3 = fs.statSync(debugFilePath);
+    if (st3.size < MAX_LOG_BYTES) return;
+  } catch {
+    return;
+  }
+  const archivePath = (n) => n === 0 ? `${debugFilePath}.old` : `${debugFilePath}.${n}`;
+  for (let i = MAX_ARCHIVES - 1; i >= 0; i--) {
+    const src = archivePath(i);
+    const dst = archivePath(i + 1);
+    try {
+      fs.renameSync(src, dst);
+    } catch {
+    }
+  }
+  try {
+    fs.unlinkSync(archivePath(MAX_ARCHIVES));
+  } catch {
+  }
+  try {
+    fs.renameSync(debugFilePath, archivePath(0));
+  } catch {
+  }
+  fileInitialized = false;
+}
+function appendToFile(line) {
+  try {
+    if (!fileInitialized) {
+      fs.mkdirSync(path.dirname(debugFilePath), { recursive: true, mode: 448 });
+      const header = jsonMode ? `${JSON.stringify({
+        ts: (/* @__PURE__ */ new Date()).toISOString(),
+        level: "info",
+        tag: "logger",
+        msg: `debug log started`,
+        ctx: {
+          pid: process.pid,
+          platform: process.platform,
+          node: process.version,
+          cwd: process.cwd(),
+          dir: LOG_DIR
+        }
+      })}
+` : `=== codeam debug log \u2014 pid ${process.pid} \u2014 ${(/* @__PURE__ */ new Date()).toISOString()} ===
+platform=${process.platform} node=${process.version} cwd=${process.cwd()} dir=${LOG_DIR}
+
+`;
+      const tmp = `${debugFilePath}.${process.pid}.tmp`;
+      fs.writeFileSync(tmp, header);
+      fs.renameSync(tmp, debugFilePath);
+      fileInitialized = true;
+    }
+    fs.appendFileSync(debugFilePath, line);
+    maybeRotate();
+  } catch {
+  }
+}
+function formatEntry(level, tag, msg, err) {
+  const detail = err instanceof Error ? `: ${err.message}` : err !== void 0 ? `: ${String(err)}` : "";
+  const text = `[codeam:${level}] ${tag} \u2014 ${msg}${detail}
+`;
+  const entry = {
+    ts: (/* @__PURE__ */ new Date()).toISOString(),
+    level,
+    tag,
+    msg
+  };
+  if (err !== void 0) {
+    entry.ctx = err instanceof Error ? { errorName: err.name, errorMessage: err.message } : { error: String(err) };
+  }
+  return { text, json: `${JSON.stringify(entry)}
+` };
+}
+function emit(level, tag, msg, err) {
+  const { text, json } = formatEntry(level, tag, msg, err);
+  if (LEVELS[level] <= LEVELS.info || verboseFileEnabled) {
+    appendToFile(jsonMode ? json : `${(/* @__PURE__ */ new Date()).toISOString()} ${text}`);
+  }
+  if (LEVELS[level] <= currentLevel()) {
+    process.stderr.write(jsonMode ? json : text);
+  }
+}
+var log = {
+  error: (tag, msg, err) => emit("error", tag, msg, err),
+  warn: (tag, msg, err) => emit("warn", tag, msg, err),
+  info: (tag, msg, err) => emit("info", tag, msg, err),
+  debug: (tag, msg, err) => emit("debug", tag, msg, err),
+  /**
+   * Verbose pipeline breadcrumb. Only fires when CODEAM_LOG=trace or
+   * CODEAM_DEBUG=1, so call sites can be liberal — they have zero
+   * cost in normal runs.
+   */
+  trace: (tag, msg, err) => emit("trace", tag, msg, err)
+};
+
+// src/lib/quiet.ts
+var TAG = "quiet";
+function quiet(fn) {
+  try {
+    fn();
+  } catch (err) {
+    log.debug(TAG, "ignored sync error", err);
+  }
+}
+function rmIfExistsQuiet(path68) {
+  try {
+    fs2.rmSync(path68, { force: true });
+  } catch (err) {
+    log.debug(TAG, `rmIfExists failed for ${path68}`, err);
+  }
+}
+function killQuiet(target, signal = "SIGTERM") {
+  if (target === void 0 || target === null) return;
+  try {
+    if (typeof target === "number") {
+      process.kill(target, signal);
+    } else {
+      target.kill(signal);
+    }
+  } catch (err) {
+    log.debug(TAG, "kill failed", err);
+  }
+}
+
+// src/config.ts
 var EMPTY_CONFIG = () => ({
   pluginId: crypto.randomUUID(),
   activeSessionId: null,
@@ -623,11 +780,11 @@ function migrateSession(s) {
   return { ...s, agent: s.agent ?? "claude" };
 }
 function makeConfig(baseDir) {
-  const dir = path.join(baseDir ?? os.homedir(), ".codeam");
-  const file = path.join(dir, "config.json");
+  const dir = path2.join(baseDir ?? os2.homedir(), ".codeam");
+  const file = path2.join(dir, "config.json");
   function load() {
     try {
-      const raw = JSON.parse(fs.readFileSync(file, "utf-8"));
+      const raw = JSON.parse(fs3.readFileSync(file, "utf-8"));
       return {
         pluginId: typeof raw.pluginId === "string" ? raw.pluginId : crypto.randomUUID(),
         activeSessionId: typeof raw.activeSessionId === "string" ? raw.activeSessionId : null,
@@ -639,19 +796,16 @@ function makeConfig(baseDir) {
     }
   }
   function save(c2) {
-    fs.mkdirSync(dir, { recursive: true, mode: 448 });
+    fs3.mkdirSync(dir, { recursive: true, mode: 448 });
     const tmp = `${file}.${process.pid}.${crypto.randomBytes(4).toString("hex")}.tmp`;
     try {
-      fs.writeFileSync(tmp, JSON.stringify(c2, null, 2), {
+      fs3.writeFileSync(tmp, JSON.stringify(c2, null, 2), {
         encoding: "utf-8",
         mode: 384
       });
-      fs.renameSync(tmp, file);
+      fs3.renameSync(tmp, file);
     } catch (err) {
-      try {
-        fs.unlinkSync(tmp);
-      } catch {
-      }
+      rmIfExistsQuiet(tmp);
       throw err;
     }
   }
@@ -709,7 +863,7 @@ function makeConfig(baseDir) {
   }
   function clearAll2() {
     try {
-      fs.unlinkSync(file);
+      fs3.unlinkSync(file);
     } catch {
     }
   }
@@ -730,9 +884,9 @@ var CODESPACE_ENV_KEYS = [
 ];
 function loadCodespaceEnv() {
   try {
-    const file = path.join(os.homedir(), ".codeam", "codespace-env.json");
-    if (!fs.existsSync(file)) return;
-    const raw = JSON.parse(fs.readFileSync(file, "utf-8"));
+    const file = path2.join(os2.homedir(), ".codeam", "codespace-env.json");
+    if (!fs3.existsSync(file)) return;
+    const raw = JSON.parse(fs3.readFileSync(file, "utf-8"));
     for (const key of CODESPACE_ENV_KEYS) {
       const value = raw[key];
       if (typeof value === "string" && value.length > 0 && process.env[key] === void 0) {
@@ -746,13 +900,13 @@ var _default = makeConfig();
 var { getConfig, ensurePluginId, addSession, removeSession, setActiveSession, getActiveSession, getActiveSessionForAgent, setDisable1mContext, clearAll, saveCliConfig, loadCliConfig } = _default;
 
 // src/commands/pair-auto.ts
-var fs50 = __toESM(require("fs"));
+var fs51 = __toESM(require("fs"));
 var os40 = __toESM(require("os"));
 var path54 = __toESM(require("path"));
 var import_crypto4 = require("crypto");
 
 // src/services/telemetry.service.ts
-var fs3 = __toESM(require("fs"));
+var fs4 = __toESM(require("fs"));
 var path3 = __toESM(require("path"));
 var os3 = __toESM(require("os"));
 var import_node_crypto = require("crypto");
@@ -5468,129 +5622,6 @@ var PostHog = class extends PostHogBackendClient {
   }
 };
 
-// src/services/logger.ts
-var fs2 = __toESM(require("fs"));
-var os2 = __toESM(require("os"));
-var path2 = __toESM(require("path"));
-var LEVELS = { silent: 0, error: 1, warn: 2, info: 3, debug: 4, trace: 5 };
-var MAX_LOG_BYTES = 5 * 1024 * 1024;
-var MAX_ARCHIVES = 5;
-function currentLevel() {
-  if (process.env.CODEAM_DEBUG === "1") return LEVELS.trace;
-  const raw = (process.env.CODEAM_LOG ?? "error").toLowerCase();
-  return LEVELS[raw] ?? LEVELS.error;
-}
-var verboseFileEnabled = process.env.CODEAM_DEBUG === "1" || process.env.CODEAM_LOG === "debug" || process.env.CODEAM_LOG === "trace";
-var jsonMode = process.env.CODEAM_LOG_JSON === "1";
-function resolveLogDir() {
-  if (process.platform === "linux") {
-    const xdgState = process.env.XDG_STATE_HOME;
-    if (xdgState && xdgState.length > 0) return path2.join(xdgState, "codeam");
-  }
-  if (process.platform === "win32") {
-    const local = process.env.LOCALAPPDATA;
-    if (local && local.length > 0) return path2.join(local, "codeam", "Logs");
-  }
-  return path2.join(os2.homedir(), ".codeam");
-}
-var LOG_DIR = resolveLogDir();
-var debugFilePath = path2.join(LOG_DIR, `debug-${process.pid}.log`);
-var fileInitialized = false;
-function maybeRotate() {
-  try {
-    const st3 = fs2.statSync(debugFilePath);
-    if (st3.size < MAX_LOG_BYTES) return;
-  } catch {
-    return;
-  }
-  const archivePath = (n) => n === 0 ? `${debugFilePath}.old` : `${debugFilePath}.${n}`;
-  for (let i = MAX_ARCHIVES - 1; i >= 0; i--) {
-    const src = archivePath(i);
-    const dst = archivePath(i + 1);
-    try {
-      fs2.renameSync(src, dst);
-    } catch {
-    }
-  }
-  try {
-    fs2.unlinkSync(archivePath(MAX_ARCHIVES));
-  } catch {
-  }
-  try {
-    fs2.renameSync(debugFilePath, archivePath(0));
-  } catch {
-  }
-  fileInitialized = false;
-}
-function appendToFile(line) {
-  try {
-    if (!fileInitialized) {
-      fs2.mkdirSync(path2.dirname(debugFilePath), { recursive: true, mode: 448 });
-      const header = jsonMode ? `${JSON.stringify({
-        ts: (/* @__PURE__ */ new Date()).toISOString(),
-        level: "info",
-        tag: "logger",
-        msg: `debug log started`,
-        ctx: {
-          pid: process.pid,
-          platform: process.platform,
-          node: process.version,
-          cwd: process.cwd(),
-          dir: LOG_DIR
-        }
-      })}
-` : `=== codeam debug log \u2014 pid ${process.pid} \u2014 ${(/* @__PURE__ */ new Date()).toISOString()} ===
-platform=${process.platform} node=${process.version} cwd=${process.cwd()} dir=${LOG_DIR}
-
-`;
-      const tmp = `${debugFilePath}.${process.pid}.tmp`;
-      fs2.writeFileSync(tmp, header);
-      fs2.renameSync(tmp, debugFilePath);
-      fileInitialized = true;
-    }
-    fs2.appendFileSync(debugFilePath, line);
-    maybeRotate();
-  } catch {
-  }
-}
-function formatEntry(level, tag, msg, err) {
-  const detail = err instanceof Error ? `: ${err.message}` : err !== void 0 ? `: ${String(err)}` : "";
-  const text = `[codeam:${level}] ${tag} \u2014 ${msg}${detail}
-`;
-  const entry = {
-    ts: (/* @__PURE__ */ new Date()).toISOString(),
-    level,
-    tag,
-    msg
-  };
-  if (err !== void 0) {
-    entry.ctx = err instanceof Error ? { errorName: err.name, errorMessage: err.message } : { error: String(err) };
-  }
-  return { text, json: `${JSON.stringify(entry)}
-` };
-}
-function emit(level, tag, msg, err) {
-  const { text, json } = formatEntry(level, tag, msg, err);
-  if (LEVELS[level] <= LEVELS.info || verboseFileEnabled) {
-    appendToFile(jsonMode ? json : `${(/* @__PURE__ */ new Date()).toISOString()} ${text}`);
-  }
-  if (LEVELS[level] <= currentLevel()) {
-    process.stderr.write(jsonMode ? json : text);
-  }
-}
-var log = {
-  error: (tag, msg, err) => emit("error", tag, msg, err),
-  warn: (tag, msg, err) => emit("warn", tag, msg, err),
-  info: (tag, msg, err) => emit("info", tag, msg, err),
-  debug: (tag, msg, err) => emit("debug", tag, msg, err),
-  /**
-   * Verbose pipeline breadcrumb. Only fires when CODEAM_LOG=trace or
-   * CODEAM_DEBUG=1, so call sites can be liberal — they have zero
-   * cost in normal runs.
-   */
-  trace: (tag, msg, err) => emit("trace", tag, msg, err)
-};
-
 // src/services/telemetry.service.ts
 var ANON_FILE = path3.join(os3.homedir(), ".codeam", "anon.json");
 var client = null;
@@ -5605,23 +5636,23 @@ function isOptedOut() {
 }
 function readAnonId() {
   try {
-    if (fs3.existsSync(ANON_FILE)) {
-      const raw = JSON.parse(fs3.readFileSync(ANON_FILE, "utf8"));
+    if (fs4.existsSync(ANON_FILE)) {
+      const raw = JSON.parse(fs4.readFileSync(ANON_FILE, "utf8"));
       if (typeof raw.id === "string" && raw.id.length > 0) return raw.id;
     }
   } catch {
   }
   const id = `anon-${(0, import_node_crypto.randomUUID)()}`;
   try {
-    fs3.mkdirSync(path3.dirname(ANON_FILE), { recursive: true, mode: 448 });
-    fs3.writeFileSync(ANON_FILE, JSON.stringify({ id }), { mode: 384 });
+    fs4.mkdirSync(path3.dirname(ANON_FILE), { recursive: true, mode: 448 });
+    fs4.writeFileSync(ANON_FILE, JSON.stringify({ id }), { mode: 384 });
   } catch {
   }
   return id;
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.56.0" : "0.0.0-dev",
+    cliVersion: true ? "2.58.0" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5724,9 +5755,9 @@ function maybePrintFirstRunBanner() {
   if (isOptedOut()) return;
   const marker = path3.join(os3.homedir(), ".codeam", ".telemetry-notice");
   try {
-    if (fs3.existsSync(marker)) return;
-    fs3.mkdirSync(path3.dirname(marker), { recursive: true, mode: 448 });
-    fs3.writeFileSync(marker, (/* @__PURE__ */ new Date()).toISOString());
+    if (fs4.existsSync(marker)) return;
+    fs4.mkdirSync(path3.dirname(marker), { recursive: true, mode: 448 });
+    fs4.writeFileSync(marker, (/* @__PURE__ */ new Date()).toISOString());
   } catch {
   }
   process.stderr.write(
@@ -5802,7 +5833,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.56.0",
+  version: "2.58.0",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6331,7 +6362,7 @@ function computePollDelay({ baseMs, failures }) {
 }
 
 // src/services/headroom/proxy-supervisor.ts
-var fs5 = __toESM(require("fs"));
+var fs6 = __toESM(require("fs"));
 var os6 = __toESM(require("os"));
 var path5 = __toESM(require("path"));
 
@@ -6348,7 +6379,7 @@ function buildBudgetProxyArgs(env) {
 
 // src/services/headroom/proxy-pid.ts
 var import_node_child_process = require("child_process");
-var fs4 = __toESM(require("fs"));
+var fs5 = __toESM(require("fs"));
 var os5 = __toESM(require("os"));
 var path4 = __toESM(require("path"));
 function headroomProxyPidfilePath() {
@@ -6358,15 +6389,15 @@ function writeHeadroomProxyPidfile(pid) {
   if (!pid) return;
   try {
     const file = headroomProxyPidfilePath();
-    fs4.mkdirSync(path4.dirname(file), { recursive: true, mode: 448 });
-    fs4.writeFileSync(file, `${pid}
+    fs5.mkdirSync(path4.dirname(file), { recursive: true, mode: 448 });
+    fs5.writeFileSync(file, `${pid}
 `, { encoding: "utf8", mode: 384 });
   } catch {
   }
 }
 function readHeadroomProxyPidfile() {
   try {
-    const pid = Number(fs4.readFileSync(headroomProxyPidfilePath(), "utf8").trim());
+    const pid = Number(fs5.readFileSync(headroomProxyPidfilePath(), "utf8").trim());
     return Number.isInteger(pid) && pid > 0 ? pid : null;
   } catch {
     return null;
@@ -6398,7 +6429,7 @@ function killHeadroomProxy() {
     try {
       process.kill(pid, "SIGTERM");
       try {
-        fs4.rmSync(headroomProxyPidfilePath(), { force: true });
+        fs5.rmSync(headroomProxyPidfilePath(), { force: true });
       } catch {
       }
       return;
@@ -6407,7 +6438,7 @@ function killHeadroomProxy() {
   }
   if (pid !== null) {
     try {
-      fs4.rmSync(headroomProxyPidfilePath(), { force: true });
+      fs5.rmSync(headroomProxyPidfilePath(), { force: true });
     } catch {
     }
   }
@@ -6458,13 +6489,13 @@ function isHeadroomConfiguredReal(homeDir2 = os6.homedir()) {
   if (process.env.HEADROOM_ENABLED === "1") return true;
   const csEnv = path5.join(homeDir2, ".codeam", "codespace-env.json");
   try {
-    const j2 = JSON.parse(fs5.readFileSync(csEnv, "utf8"));
+    const j2 = JSON.parse(fs6.readFileSync(csEnv, "utf8"));
     if (j2.HEADROOM_ENABLED === "1" || j2.HEADROOM_ENABLED === 1) return true;
   } catch {
   }
   const settings = path5.join(homeDir2, ".claude", "settings.json");
   try {
-    if (fs5.readFileSync(settings, "utf8").includes("127.0.0.1:8787")) return true;
+    if (fs6.readFileSync(settings, "utf8").includes("127.0.0.1:8787")) return true;
   } catch {
   }
   return false;
@@ -6850,7 +6881,7 @@ var CommandRelayService = class {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.56.0" ? { ideVersion: "2.56.0" } : {}
+      ..."2.58.0" ? { ideVersion: "2.58.0" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -6916,7 +6947,7 @@ var CommandRelayService = class {
 
 // src/services/file-watcher.service.ts
 var import_child_process3 = require("child_process");
-var fs6 = __toESM(require("fs"));
+var fs7 = __toESM(require("fs"));
 var os7 = __toESM(require("os"));
 var path6 = __toESM(require("path"));
 var import_ignore = __toESM(require("ignore"));
@@ -7117,7 +7148,7 @@ function _defaultFindGitRoot(startDir) {
     seen.add(dir);
     try {
       const gitPath = path6.join(dir, ".git");
-      const stat3 = fs6.statSync(gitPath, { throwIfNoEntry: false });
+      const stat3 = fs7.statSync(gitPath, { throwIfNoEntry: false });
       if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
     } catch {
     }
@@ -7566,7 +7597,7 @@ var FileWatcherService = class {
   collectGitignoreFiles(repoRoot, dir, matcher) {
     let entries;
     try {
-      entries = fs6.readdirSync(dir, { withFileTypes: true });
+      entries = fs7.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -7575,7 +7606,7 @@ var FileWatcherService = class {
     );
     if (gitignoreEntry) {
       try {
-        const body = fs6.readFileSync(path6.join(dir, ".gitignore"), "utf8");
+        const body = fs7.readFileSync(path6.join(dir, ".gitignore"), "utf8");
         const rel = path6.relative(repoRoot, dir).replace(/\\/g, "/");
         const prefixed = body.split(/\r?\n/).map((line) => {
           const trimmed = line.trim();
@@ -8224,7 +8255,7 @@ function closeAllTerminals() {
 }
 
 // src/commands/start/handlers.ts
-var fs49 = __toESM(require("fs"));
+var fs50 = __toESM(require("fs"));
 var os39 = __toESM(require("os"));
 var path53 = __toESM(require("path"));
 var import_crypto3 = require("crypto");
@@ -8378,7 +8409,7 @@ function parsePayload2(schema, raw) {
 }
 
 // src/services/file-ops.service.ts
-var fs7 = __toESM(require("fs/promises"));
+var fs8 = __toESM(require("fs/promises"));
 var path8 = __toESM(require("path"));
 var MAX_FILE_BYTES = 5 * 1024 * 1024;
 var MAX_WALK_DEPTH = 6;
@@ -8419,7 +8450,7 @@ function isUnder(parent, candidate) {
 }
 async function isExistingFile(absPath) {
   try {
-    const stat3 = await fs7.stat(absPath);
+    const stat3 = await fs8.stat(absPath);
     return stat3.isFile();
   } catch {
     return false;
@@ -8432,7 +8463,7 @@ async function walkForSuffix(dir, needleVariants, depth, ctx) {
   ctx.visited++;
   let entries = [];
   try {
-    entries = await fs7.readdir(dir, { withFileTypes: true });
+    entries = await fs8.readdir(dir, { withFileTypes: true });
   } catch {
     return;
   }
@@ -8493,11 +8524,11 @@ async function readProjectFile(rawPath) {
     if (!abs) {
       return { error: `File not found in the project tree: ${rawPath}` };
     }
-    const stat3 = await fs7.stat(abs);
+    const stat3 = await fs8.stat(abs);
     if (stat3.size > MAX_FILE_BYTES) {
       return { error: `File too large (${(stat3.size / 1024 / 1024).toFixed(1)} MB > ${MAX_FILE_BYTES / 1024 / 1024} MB).` };
     }
-    const buf = await fs7.readFile(abs);
+    const buf = await fs8.readFile(abs);
     if (looksBinary(buf)) {
       return { error: "Binary file \u2014 refusing to open in a code editor." };
     }
@@ -8516,8 +8547,8 @@ async function writeProjectFile(rawPath, content) {
     if (Buffer.byteLength(content, "utf-8") > MAX_FILE_BYTES) {
       return { error: "Content too large." };
     }
-    await fs7.mkdir(path8.dirname(abs), { recursive: true });
-    await fs7.writeFile(abs, content, "utf-8");
+    await fs8.mkdir(path8.dirname(abs), { recursive: true });
+    await fs8.writeFile(abs, content, "utf-8");
     return { ok: true };
   } catch (e) {
     const msg = e instanceof Error ? e.message : "Write failed";
@@ -8528,7 +8559,7 @@ async function writeProjectFile(rawPath, content) {
 // src/services/project-ops.service.ts
 var import_child_process5 = require("child_process");
 var import_util = require("util");
-var fs8 = __toESM(require("fs/promises"));
+var fs9 = __toESM(require("fs/promises"));
 var path9 = __toESM(require("path"));
 var execFileP = (0, import_util.promisify)(import_child_process5.execFile);
 var PROJECT_IGNORE = /* @__PURE__ */ new Set([
@@ -8577,7 +8608,7 @@ async function listProjectFiles(opts = {}) {
     }
     let entries = [];
     try {
-      entries = await fs8.readdir(dir, { withFileTypes: true });
+      entries = await fs9.readdir(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -8598,7 +8629,7 @@ async function listProjectFiles(opts = {}) {
         }
         let size = 0;
         try {
-          const st3 = await fs8.stat(full);
+          const st3 = await fs9.stat(full);
           size = st3.size;
         } catch {
         }
@@ -8701,7 +8732,7 @@ async function gitStatus(cwd) {
   try {
     const gitDir = (await git(["rev-parse", "--git-dir"], root)).stdout.trim();
     const mergeHead = path9.isAbsolute(gitDir) ? path9.join(gitDir, "MERGE_HEAD") : path9.join(root, gitDir, "MERGE_HEAD");
-    await fs8.access(mergeHead);
+    await fs9.access(mergeHead);
     hasMergeInProgress = true;
   } catch {
   }
@@ -8847,7 +8878,7 @@ async function jsSearchFiles(opts, cwd, cap) {
     }
     let content = "";
     try {
-      content = await fs8.readFile(path9.join(cwd, f.path), "utf8");
+      content = await fs9.readFile(path9.join(cwd, f.path), "utf8");
     } catch {
       continue;
     }
@@ -8924,7 +8955,7 @@ function formatRemaining(expiresAt) {
 
 // src/services/apply-file-review.service.ts
 var import_child_process6 = require("child_process");
-var fs9 = __toESM(require("fs"));
+var fs10 = __toESM(require("fs"));
 var path10 = __toESM(require("path"));
 async function applyFileReview(workingDir, filePath, action) {
   if (filePath.includes("..") || path10.isAbsolute(filePath)) {
@@ -8995,7 +9026,7 @@ function findGitRoot2(startDir) {
     if (seen.has(dir)) return null;
     seen.add(dir);
     try {
-      const stat3 = fs9.statSync(path10.join(dir, ".git"), { throwIfNoEntry: false });
+      const stat3 = fs10.statSync(path10.join(dir, ".git"), { throwIfNoEntry: false });
       if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
     } catch {
     }
@@ -9008,7 +9039,7 @@ function findGitRoot2(startDir) {
 
 // src/commands/link.ts
 var import_node_crypto5 = require("crypto");
-var fs27 = __toESM(require("fs"));
+var fs28 = __toESM(require("fs"));
 var path32 = __toESM(require("path"));
 var import_chokidar = __toESM(require("chokidar"));
 var import_picocolors2 = __toESM(require("picocolors"));
@@ -11064,7 +11095,7 @@ function parseFrame(frame, dispatch) {
 }
 
 // src/os/posix.ts
-var fs11 = __toESM(require("fs"));
+var fs12 = __toESM(require("fs"));
 var os9 = __toESM(require("os"));
 var path13 = __toESM(require("path"));
 var import_node_crypto2 = require("crypto");
@@ -11089,7 +11120,7 @@ function findInPathFor(name, opts) {
 
 // src/services/pty/unix.strategy.ts
 var import_child_process7 = require("child_process");
-var fs10 = __toESM(require("fs"));
+var fs11 = __toESM(require("fs"));
 var os8 = __toESM(require("os"));
 var path12 = __toESM(require("path"));
 
@@ -11174,7 +11205,7 @@ var UnixPtyStrategy = class {
     const cols = process.stdout.columns || 220;
     const rows = process.stdout.rows || 50;
     this.helperPath = path12.join(os8.tmpdir(), "codeam-pty-helper.py");
-    fs10.writeFileSync(this.helperPath, PYTHON_PTY_HELPER, { mode: 420 });
+    fs11.writeFileSync(this.helperPath, PYTHON_PTY_HELPER, { mode: 420 });
     this.proc = (0, import_child_process7.spawn)(python, [this.helperPath, cmd, ...args2], {
       stdio: ["pipe", "pipe", "inherit"],
       cwd,
@@ -11302,10 +11333,7 @@ var UnixPtyStrategy = class {
   };
   removeTempFile() {
     if (this.helperPath) {
-      try {
-        fs10.unlinkSync(this.helperPath);
-      } catch {
-      }
+      rmIfExistsQuiet(this.helperPath);
       this.helperPath = null;
     }
   }
@@ -11326,8 +11354,8 @@ var PosixOsStrategy = class {
   findInPath(name) {
     return findInPathFor(name, {
       candidates: () => [name],
-      accessFlag: fs11.constants.X_OK,
-      accessSync: fs11.accessSync
+      accessFlag: fs12.constants.X_OK,
+      accessSync: fs12.accessSync
     });
   }
   augmentPath(dirs) {
@@ -11355,7 +11383,7 @@ var LinuxOsStrategy = class extends PosixOsStrategy {
 };
 
 // src/os/win32.ts
-var fs12 = __toESM(require("fs"));
+var fs13 = __toESM(require("fs"));
 var os10 = __toESM(require("os"));
 var path15 = __toESM(require("path"));
 var import_node_crypto3 = require("crypto");
@@ -11566,8 +11594,8 @@ var Win32OsStrategy = class {
       // IS the executability check. X_OK on Windows is a no-op alias
       // for F_OK at the libuv layer anyway, but F_OK makes intent
       // explicit.
-      accessFlag: fs12.constants.F_OK,
-      accessSync: fs12.accessSync
+      accessFlag: fs13.constants.F_OK,
+      accessSync: fs13.accessSync
     });
   }
   augmentPath(dirs) {
@@ -11751,7 +11779,7 @@ var import_node_child_process3 = require("child_process");
 
 // src/agents/claude/local-token.ts
 var import_node_child_process2 = require("child_process");
-var fs13 = __toESM(require("fs"));
+var fs14 = __toESM(require("fs"));
 var os12 = __toESM(require("os"));
 var path17 = __toESM(require("path"));
 var import_node_util3 = require("util");
@@ -11772,8 +11800,8 @@ function claudeCredentialsPaths() {
 async function extractLocalClaudeToken() {
   const agentState = readClaudeAgentState();
   for (const flat of claudeCredentialsPaths()) {
-    if (!fs13.existsSync(flat)) continue;
-    const credential = fs13.readFileSync(flat, "utf8").trim();
+    if (!fs14.existsSync(flat)) continue;
+    const credential = fs14.readFileSync(flat, "utf8").trim();
     if (credential.length > 0) {
       return { method: "oauth", credential, source: "flat-file", agentState };
     }
@@ -11800,8 +11828,8 @@ function readClaudeAgentState() {
   const STATE_MAX_BYTES = 256 * 1024;
   const candidate = path17.join(os12.homedir(), ".claude.json");
   try {
-    if (!fs13.existsSync(candidate)) return void 0;
-    const buf = fs13.readFileSync(candidate);
+    if (!fs14.existsSync(candidate)) return void 0;
+    const buf = fs14.readFileSync(candidate);
     if (buf.length === 0 || buf.length > STATE_MAX_BYTES) return void 0;
     const text = buf.toString("utf8").trim();
     return text.length > 0 ? text : void 0;
@@ -11888,7 +11916,7 @@ function claudeLoginLauncher() {
 }
 
 // src/agents/claude/quota.ts
-var fs14 = __toESM(require("fs"));
+var fs15 = __toESM(require("fs"));
 var os13 = __toESM(require("os"));
 var path18 = __toESM(require("path"));
 var import_child_process10 = require("child_process");
@@ -11954,7 +11982,7 @@ async function fetchClaudeQuota() {
       return;
     }
     const helperPath = path18.join(os13.tmpdir(), "codeam-quota-helper.py");
-    fs14.writeFileSync(helperPath, HELPER_SCRIPT, { mode: 420 });
+    fs15.writeFileSync(helperPath, HELPER_SCRIPT, { mode: 420 });
     const python = findInPath("python3") ?? findInPath("python");
     if (!python) {
       resolve7(null);
@@ -11981,7 +12009,7 @@ async function fetchClaudeQuota() {
         } catch {
         }
         try {
-          fs14.unlinkSync(helperPath);
+          fs15.unlinkSync(helperPath);
         } catch {
         }
         resolve7(result);
@@ -12005,17 +12033,11 @@ var import_child_process11 = require("child_process");
 var activeChildren = /* @__PURE__ */ new Set();
 function killActiveSpawnAndCaptureChildren() {
   for (const child of activeChildren) {
-    try {
-      child.kill("SIGTERM");
-    } catch {
-    }
+    killQuiet(child);
   }
   setTimeout(() => {
     for (const child of activeChildren) {
-      try {
-        child.kill("SIGKILL");
-      } catch {
-      }
+      killQuiet(child, "SIGKILL");
     }
   }, 250).unref?.();
 }
@@ -12048,10 +12070,7 @@ async function spawnAndCapture(cmd, args2, opts = {}) {
       opts.onStderr?.(chunk.toString("utf8"));
     });
     const timer = setTimeout(() => {
-      try {
-        child.kill("SIGKILL");
-      } catch {
-      }
+      killQuiet(child, "SIGKILL");
       settle(null);
     }, timeoutMs);
     timer.unref();
@@ -12074,7 +12093,7 @@ async function spawnAndCapture(cmd, args2, opts = {}) {
 }
 
 // src/agents/claude/history.ts
-var fs15 = __toESM(require("fs"));
+var fs16 = __toESM(require("fs"));
 var path19 = __toESM(require("path"));
 var os14 = __toESM(require("os"));
 function encodeCwd(cwd) {
@@ -12083,9 +12102,9 @@ function encodeCwd(cwd) {
 function resolveHistoryDir(cwd, projectsRoot) {
   const root = projectsRoot ?? path19.join(os14.homedir(), ".claude", "projects");
   const primary = path19.join(root, encodeCwd(cwd));
-  if (fs15.existsSync(primary)) return primary;
+  if (fs16.existsSync(primary)) return primary;
   try {
-    const entries = fs15.readdirSync(root, { withFileTypes: true });
+    const entries = fs16.readdirSync(root, { withFileTypes: true });
     const wanted = encodeCwd(cwd);
     for (const e of entries) {
       if (!e.isDirectory()) continue;
@@ -12103,13 +12122,13 @@ function getCurrentUsage(historyDir, bootTimeMs = 0) {
   const cutoff = bootTimeMs > 0 ? bootTimeMs - GRACE_MS : 0;
   let entries;
   try {
-    entries = fs15.readdirSync(historyDir, { withFileTypes: true });
+    entries = fs16.readdirSync(historyDir, { withFileTypes: true });
   } catch {
     return null;
   }
   const files = entries.filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
     try {
-      const stat3 = fs15.statSync(path19.join(historyDir, e.name));
+      const stat3 = fs16.statSync(path19.join(historyDir, e.name));
       return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
     } catch {
       return { name: e.name, mtime: 0, birthtime: 0 };
@@ -12119,7 +12138,7 @@ function getCurrentUsage(historyDir, bootTimeMs = 0) {
   const filePath = path19.join(historyDir, files[0].name);
   let raw;
   try {
-    raw = fs15.readFileSync(filePath, "utf8");
+    raw = fs16.readFileSync(filePath, "utf8");
   } catch {
     return null;
   }
@@ -12164,7 +12183,7 @@ function parseHistoryFile(filePath) {
   const out2 = [];
   let raw;
   try {
-    raw = fs15.readFileSync(filePath, "utf8");
+    raw = fs16.readFileSync(filePath, "utf8");
   } catch {
     return out2;
   }
@@ -12209,7 +12228,7 @@ function listResumableSessions(cwd) {
   if (!dir) return [];
   let entries;
   try {
-    entries = fs15.readdirSync(dir, { withFileTypes: true });
+    entries = fs16.readdirSync(dir, { withFileTypes: true });
   } catch {
     return [];
   }
@@ -12220,12 +12239,12 @@ function listResumableSessions(cwd) {
     const filePath = path19.join(dir, entry.name);
     let timestamp = Date.now();
     try {
-      timestamp = fs15.statSync(filePath).mtimeMs;
+      timestamp = fs16.statSync(filePath).mtimeMs;
     } catch {
     }
     let summary = "";
     try {
-      const raw = fs15.readFileSync(filePath, "utf8");
+      const raw = fs16.readFileSync(filePath, "utf8");
       for (const line of raw.split("\n")) {
         if (!line.trim()) continue;
         try {
@@ -12388,13 +12407,13 @@ var ClaudeRuntimeStrategy = class {
 };
 
 // src/agents/claude/deploy.ts
-var fs17 = __toESM(require("fs"));
+var fs18 = __toESM(require("fs"));
 var os16 = __toESM(require("os"));
 var path21 = __toESM(require("path"));
 
 // src/agents/claude/credentials.ts
 var import_child_process12 = require("child_process");
-var fs16 = __toESM(require("fs"));
+var fs17 = __toESM(require("fs"));
 var os15 = __toESM(require("os"));
 var path20 = __toESM(require("path"));
 var import_util2 = require("util");
@@ -12402,7 +12421,7 @@ var execFileP3 = (0, import_util2.promisify)(import_child_process12.execFile);
 async function detectLocalClaudeCredentials() {
   const localClaudeDir = path20.join(os15.homedir(), ".claude");
   const flat = path20.join(localClaudeDir, ".credentials.json");
-  if (fs16.existsSync(flat)) {
+  if (fs17.existsSync(flat)) {
     return { source: "flat-file", description: "~/.claude/.credentials.json" };
   }
   if (os15.platform() === "darwin") {
@@ -12422,7 +12441,7 @@ async function detectLocalClaudeCredentials() {
 async function bridgeClaudeCredentials(provider, workspaceId) {
   const localClaudeDir = path20.join(os15.homedir(), ".claude");
   const fileBased = path20.join(localClaudeDir, ".credentials.json");
-  if (fs16.existsSync(fileBased)) {
+  if (fs17.existsSync(fileBased)) {
     return { source: "flat-file", description: "~/.claude/.credentials.json" };
   }
   if (process.platform === "darwin") {
@@ -12515,7 +12534,7 @@ var ClaudeDeployStrategy = class {
     }
     claudeStep.stop("\u2713 Claude CLI installed");
     const localClaudeDir = path21.join(os16.homedir(), ".claude");
-    const haveLocalClaude = fs17.existsSync(localClaudeDir) && fs17.statSync(localClaudeDir).isDirectory();
+    const haveLocalClaude = fs18.existsSync(localClaudeDir) && fs18.statSync(localClaudeDir).isDirectory();
     if (haveLocalClaude) {
       const copyStep = fe();
       copyStep.start("Copying local Claude config to workspace\u2026");
@@ -12570,9 +12589,9 @@ var ClaudeDeployStrategy = class {
     }
     if (opts.bridged !== "none") {
       const localClaudeJson = path21.join(os16.homedir(), ".claude.json");
-      if (fs17.existsSync(localClaudeJson)) {
+      if (fs18.existsSync(localClaudeJson)) {
         try {
-          const contents = fs17.readFileSync(localClaudeJson);
+          const contents = fs18.readFileSync(localClaudeJson);
           await provider.uploadFile(
             workspaceId,
             "/home/codespace/.claude.json",
@@ -12865,7 +12884,7 @@ function getCurrentUsage2(historyDir) {
 var import_node_child_process4 = require("child_process");
 
 // src/agents/codex/local-token.ts
-var fs19 = __toESM(require("fs"));
+var fs20 = __toESM(require("fs"));
 var os18 = __toESM(require("os"));
 var path23 = __toESM(require("path"));
 function codexCredentialsPath() {
@@ -12873,8 +12892,8 @@ function codexCredentialsPath() {
 }
 async function extractLocalCodexToken() {
   const file = codexCredentialsPath();
-  if (!fs19.existsSync(file)) return null;
-  const credential = fs19.readFileSync(file, "utf8").trim();
+  if (!fs20.existsSync(file)) return null;
+  const credential = fs20.readFileSync(file, "utf8").trim();
   if (credential.length === 0) return null;
   return { method: "oauth", credential, source: "flat-file" };
 }
@@ -13195,7 +13214,7 @@ async function ensureCoderabbitInstalled(os46) {
 
 // src/agents/coderabbit/link.ts
 var import_node_child_process7 = require("child_process");
-var fs21 = __toESM(require("fs"));
+var fs22 = __toESM(require("fs"));
 var os20 = __toESM(require("os"));
 var path26 = __toESM(require("path"));
 
@@ -13210,8 +13229,8 @@ function authPath() {
 }
 async function extractLocalCoderabbitToken() {
   const file = authPath();
-  if (!fs21.existsSync(file)) return null;
-  const credential = fs21.readFileSync(file, "utf8").trim();
+  if (!fs22.existsSync(file)) return null;
+  const credential = fs22.readFileSync(file, "utf8").trim();
   if (credential.length === 0) return null;
   return { method: "oauth", credential, source: "flat-file" };
 }
@@ -13343,12 +13362,12 @@ var CoderabbitRuntimeStrategy = class {
 };
 
 // src/agents/cursor/history.ts
-var fs22 = __toESM(require("fs"));
+var fs23 = __toESM(require("fs"));
 var os21 = __toESM(require("os"));
 var path27 = __toESM(require("path"));
 var HISTORY_ROOT = path27.join(os21.homedir(), ".cursor", "projects");
 function resolveHistoryDir3(cwd) {
-  if (!fs22.existsSync(HISTORY_ROOT)) return null;
+  if (!fs23.existsSync(HISTORY_ROOT)) return null;
   void cwd;
   return HISTORY_ROOT;
 }
@@ -13363,7 +13382,7 @@ function getCurrentUsage3(_historyDir) {
 var import_node_child_process9 = require("child_process");
 
 // src/agents/cursor/local-token.ts
-var fs23 = __toESM(require("fs"));
+var fs24 = __toESM(require("fs"));
 var os22 = __toESM(require("os"));
 var path28 = __toESM(require("path"));
 function cursorCredentialsPath() {
@@ -13371,8 +13390,8 @@ function cursorCredentialsPath() {
 }
 async function extractLocalCursorToken() {
   const file = cursorCredentialsPath();
-  if (!fs23.existsSync(file)) return null;
-  const credential = fs23.readFileSync(file, "utf8").trim();
+  if (!fs24.existsSync(file)) return null;
+  const credential = fs24.readFileSync(file, "utf8").trim();
   if (credential.length === 0) return null;
   return { method: "oauth", credential, source: "flat-file" };
 }
@@ -13536,12 +13555,12 @@ var CursorRuntimeStrategy = class {
 };
 
 // src/agents/aider/history.ts
-var fs24 = __toESM(require("fs"));
+var fs25 = __toESM(require("fs"));
 var path29 = __toESM(require("path"));
 var AIDER_HISTORY_FILE = ".aider.chat.history.md";
 function resolveHistoryDir4(cwd) {
   const candidate = path29.join(cwd, AIDER_HISTORY_FILE);
-  return fs24.existsSync(candidate) ? cwd : null;
+  return fs25.existsSync(candidate) ? cwd : null;
 }
 function parseHistoryFile4(_filePath) {
   return [];
@@ -13554,7 +13573,7 @@ function getCurrentUsage4(_historyDir) {
 var import_node_child_process10 = require("child_process");
 
 // src/agents/aider/local-token.ts
-var fs25 = __toESM(require("fs"));
+var fs26 = __toESM(require("fs"));
 var os23 = __toESM(require("os"));
 var path30 = __toESM(require("path"));
 var AIDER_CONF_FILE = path30.join(os23.homedir(), ".aider.conf.yml");
@@ -13572,8 +13591,8 @@ async function extractLocalAiderToken() {
       return { method: "api_key", credential: value.trim(), source: "flat-file" };
     }
   }
-  if (fs25.existsSync(AIDER_CONF_FILE)) {
-    const conf = fs25.readFileSync(AIDER_CONF_FILE, "utf8");
+  if (fs26.existsSync(AIDER_CONF_FILE)) {
+    const conf = fs26.readFileSync(AIDER_CONF_FILE, "utf8");
     const match = conf.match(/^api-key:\s*['"]?([^'"\n]+)['"]?\s*$/m);
     if (match) {
       return { method: "api_key", credential: match[1].trim(), source: "flat-file" };
@@ -13753,7 +13772,7 @@ var AiderRuntimeStrategy = class {
 var import_node_child_process11 = require("child_process");
 
 // src/agents/gemini/local-token.ts
-var fs26 = __toESM(require("fs"));
+var fs27 = __toESM(require("fs"));
 var os24 = __toESM(require("os"));
 var path31 = __toESM(require("path"));
 function geminiCredentialsPath() {
@@ -13764,8 +13783,8 @@ function geminiCredentialsPaths() {
 }
 async function extractLocalGeminiToken() {
   const file = geminiCredentialsPath();
-  if (!fs26.existsSync(file)) return null;
-  const credential = fs26.readFileSync(file, "utf8").trim();
+  if (!fs27.existsSync(file)) return null;
+  const credential = fs27.readFileSync(file, "utf8").trim();
   if (credential.length === 0) return null;
   return { method: "oauth", credential, source: "flat-file" };
 }
@@ -14025,7 +14044,7 @@ function parseLinkArgs(args2) {
   if (apiKeyFileArg) {
     const filePath = apiKeyFileArg.slice("--api-key-file=".length);
     try {
-      apiKey = fs27.readFileSync(path32.resolve(filePath), "utf8").trim();
+      apiKey = fs28.readFileSync(path32.resolve(filePath), "utf8").trim();
     } catch (err) {
       throw new Error(`Could not read --api-key-file ${filePath}: ${err.message}`);
     }
@@ -14152,7 +14171,7 @@ async function link(args2 = []) {
     return;
   }
   if (parsed.tokenFile) {
-    const credential = fs27.readFileSync(path32.resolve(parsed.tokenFile), "utf8").trim();
+    const credential = fs28.readFileSync(path32.resolve(parsed.tokenFile), "utf8").trim();
     if (!credential) {
       showError(`--token-file ${parsed.tokenFile} is empty.`);
       process.exit(1);
@@ -14252,10 +14271,7 @@ async function captureFreshCredentials(ctx) {
     void watcher.close();
     if (keychainPoll) clearInterval(keychainPoll);
     if (child && !child.killed) {
-      try {
-        child.kill("SIGTERM");
-      } catch {
-      }
+      killQuiet(child, "SIGTERM");
     }
   };
   try {
@@ -14374,15 +14390,15 @@ async function linkDryRunPreflight(ctx) {
 // src/commands/host-agent.ts
 var import_node_child_process19 = require("child_process");
 var os32 = __toESM(require("os"));
-var fs37 = __toESM(require("fs"));
+var fs38 = __toESM(require("fs"));
 var path40 = __toESM(require("path"));
 
 // src/commands/host/host-client.ts
-var fs29 = __toESM(require("fs"));
+var fs30 = __toESM(require("fs"));
 var os26 = __toESM(require("os"));
 var path33 = __toESM(require("path"));
 
-// src/util/restrict-to-owner.ts
+// src/lib/restrict-to-owner.ts
 var import_node_fs5 = __toESM(require("fs"));
 var import_node_os3 = __toESM(require("os"));
 var import_node_child_process12 = require("child_process");
@@ -14474,7 +14490,7 @@ function collectOsInfo() {
 }
 function loadHostIdentity() {
   try {
-    const raw = fs29.readFileSync(hostIdentityPath(), "utf8");
+    const raw = fs30.readFileSync(hostIdentityPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null && typeof parsed.hostId === "string" && typeof parsed.hostToken === "string" && typeof parsed.controlPluginId === "string") {
       const p2 = parsed;
@@ -14487,8 +14503,8 @@ function loadHostIdentity() {
 }
 function saveHostIdentity(identity) {
   const file = hostIdentityPath();
-  fs29.mkdirSync(path33.dirname(file), { recursive: true, mode: 448 });
-  fs29.writeFileSync(file, JSON.stringify(identity, null, 2), {
+  fs30.mkdirSync(path33.dirname(file), { recursive: true, mode: 448 });
+  fs30.writeFileSync(file, JSON.stringify(identity, null, 2), {
     encoding: "utf8",
     mode: 384
   });
@@ -14533,7 +14549,7 @@ function isTerminalEnrollError(err) {
 }
 function deleteHostIdentity() {
   try {
-    fs29.rmSync(hostIdentityPath(), { force: true });
+    fs30.rmSync(hostIdentityPath(), { force: true });
   } catch {
   }
 }
@@ -14656,7 +14672,7 @@ async function reportDeployProgress(auth, deployId, step, message, sessionId) {
 }
 
 // src/commands/host/workspace.ts
-var fs30 = __toESM(require("fs"));
+var fs31 = __toESM(require("fs"));
 var os27 = __toESM(require("os"));
 var path34 = __toESM(require("path"));
 var import_node_child_process13 = require("child_process");
@@ -14720,7 +14736,7 @@ async function configureGitCredentials(dest, repoRef, cloneToken) {
   const gh = githubOwnerRepo(repoRef.trim());
   if (!gh || !cloneToken) return;
   const credFile = path34.join(dest, ".git", "codeam-credentials");
-  fs30.writeFileSync(credFile, `https://x-access-token:${cloneToken}@github.com
+  fs31.writeFileSync(credFile, `https://x-access-token:${cloneToken}@github.com
 `, { mode: 384 });
   restrictToOwner(credFile);
   const env = nonInteractiveGitEnv();
@@ -14761,17 +14777,17 @@ function maskToken(text, cloneToken) {
 }
 async function prepareWorkspace(repoOrPath, deployId, cloneToken) {
   if (isAbsolutePathTarget(repoOrPath)) {
-    if (!fs30.existsSync(repoOrPath)) {
+    if (!fs31.existsSync(repoOrPath)) {
       throw new Error(`deploy target path does not exist: ${repoOrPath}`);
     }
     return repoOrPath;
   }
   const dest = path34.join(selfHostedWorkspaceRoot(), deployId);
-  if (fs30.existsSync(path34.join(dest, ".git"))) {
+  if (fs31.existsSync(path34.join(dest, ".git"))) {
     if (cloneToken) await configureGitCredentials(dest, repoOrPath, cloneToken);
     return dest;
   }
-  fs30.mkdirSync(selfHostedWorkspaceRoot(), { recursive: true, mode: 448 });
+  fs31.mkdirSync(selfHostedWorkspaceRoot(), { recursive: true, mode: 448 });
   const cloneUrl = repoCloneUrl(repoOrPath, cloneToken);
   try {
     await execFileP4("git", ["clone", "--depth", "1", cloneUrl, dest], {
@@ -14788,7 +14804,7 @@ async function prepareWorkspace(repoOrPath, deployId, cloneToken) {
 }
 
 // src/commands/host/agent-provisioning.ts
-var fs31 = __toESM(require("fs"));
+var fs32 = __toESM(require("fs"));
 var os28 = __toESM(require("os"));
 var path35 = __toESM(require("path"));
 var PUBLIC_TO_INTERNAL_AGENT = {
@@ -14805,16 +14821,16 @@ function toInternalAgentId(publicAgentId) {
   return PUBLIC_TO_INTERNAL_AGENT[publicAgentId] ?? null;
 }
 function ensureDir(dir) {
-  fs31.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs32.mkdirSync(dir, { recursive: true, mode: 448 });
 }
 function writeFile0600(filePath, contents) {
   ensureDir(path35.dirname(filePath));
-  fs31.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
+  fs32.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
   restrictToOwner(filePath);
 }
 function rmIfExists(filePath) {
   try {
-    fs31.rmSync(filePath, { force: true });
+    fs32.rmSync(filePath, { force: true });
   } catch {
   }
 }
@@ -14833,7 +14849,7 @@ var claudeProvisioner = {
       rmIfExists(credentialsJson);
     }
     const claudeJson = path35.join(home, ".claude.json");
-    if (!fs31.existsSync(claudeJson)) {
+    if (!fs32.existsSync(claudeJson)) {
       writeFile0600(
         claudeJson,
         JSON.stringify({ hasCompletedOnboarding: true, customApiKeyResponses: { approved: [] } })
@@ -14916,7 +14932,7 @@ function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os28.homedir(
 
 // src/commands/host/git-tooling.ts
 var import_node_child_process14 = require("child_process");
-var fs32 = __toESM(require("fs"));
+var fs33 = __toESM(require("fs"));
 var os29 = __toESM(require("os"));
 var path36 = __toESM(require("path"));
 function codeamBinDir() {
@@ -14952,7 +14968,7 @@ async function download(url, dest) {
     const res = await fetch(url, { headers: { "User-Agent": "codeam-cli" } });
     if (!res.ok || !res.body) return false;
     const buf = Buffer.from(await res.arrayBuffer());
-    fs32.writeFileSync(dest, buf);
+    fs33.writeFileSync(dest, buf);
     return true;
   } catch {
     return false;
@@ -14975,7 +14991,7 @@ async function ensureGhCli(runner, token, deps = {}) {
     const version3 = await resolveVersionFn(token);
     const asset = `gh_${version3}_${osToken}_${arch2}`;
     const url = `https://github.com/cli/cli/releases/download/v${version3}/${asset}.${ext}`;
-    const tmpRoot = fs32.mkdtempSync(path36.join(os29.tmpdir(), "codeam-gh-"));
+    const tmpRoot = fs33.mkdtempSync(path36.join(os29.tmpdir(), "codeam-gh-"));
     const archive = path36.join(tmpRoot, `${asset}.${ext}`);
     if (!await downloadFn(url, archive)) {
       log.warn("host-agent", "gh download failed \u2014 skipping (git pull/push still work via the credential helper)");
@@ -14987,15 +15003,15 @@ async function ensureGhCli(runner, token, deps = {}) {
       return null;
     }
     const extractedBin = path36.join(tmpRoot, asset, "bin", binaryName);
-    if (!fs32.existsSync(extractedBin)) {
+    if (!fs33.existsSync(extractedBin)) {
       log.warn("host-agent", "gh binary not found in the extracted archive \u2014 skipping");
       return null;
     }
     const binDir = codeamBinDir();
-    fs32.mkdirSync(binDir, { recursive: true });
+    fs33.mkdirSync(binDir, { recursive: true });
     const target = path36.join(binDir, binaryName);
-    fs32.copyFileSync(extractedBin, target);
-    fs32.chmodSync(target, 493);
+    fs33.copyFileSync(extractedBin, target);
+    fs33.chmodSync(target, 493);
     log.info("host-agent", `gh installed to ${target} (v${version3})`);
     return target;
   } catch (e) {
@@ -15056,10 +15072,7 @@ var defaultGitToolingRunner = {
       let timer;
       if (opts.timeoutMs !== void 0) {
         timer = setTimeout(() => {
-          try {
-            child.kill("SIGTERM");
-          } catch {
-          }
+          killQuiet(child);
           done(null);
         }, opts.timeoutMs);
       }
@@ -15237,10 +15250,7 @@ var defaultHeadroomRunner = {
             "host-agent",
             `headroom[${cmd}] timed out after ${timeoutMs / 1e3}s \u2014 aborting`
           );
-          try {
-            child.kill("SIGTERM");
-          } catch {
-          }
+          killQuiet(child);
           done(null);
         }, timeoutMs);
       }
@@ -15488,11 +15498,11 @@ async function ensureModernPython(runner) {
 }
 
 // src/commands/host/headroom-bootstrap.ts
-var fs34 = __toESM(require("fs"));
+var fs35 = __toESM(require("fs"));
 var path38 = __toESM(require("path"));
 
 // src/commands/host/headroom-config.ts
-var fs33 = __toESM(require("fs"));
+var fs34 = __toESM(require("fs"));
 var os30 = __toESM(require("os"));
 var path37 = __toESM(require("path"));
 function headroomConfigPath() {
@@ -15501,10 +15511,10 @@ function headroomConfigPath() {
 function persistHeadroomConfig(config) {
   try {
     const file = headroomConfigPath();
-    fs33.mkdirSync(path37.dirname(file), { recursive: true, mode: 448 });
+    fs34.mkdirSync(path37.dirname(file), { recursive: true, mode: 448 });
     const tmp = `${file}.tmp-${process.pid}`;
-    fs33.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
-    fs33.renameSync(tmp, file);
+    fs34.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
+    fs34.renameSync(tmp, file);
     restrictToOwner(file);
   } catch (err) {
     log.warn(
@@ -15524,11 +15534,11 @@ function backupAgentHeadroomConfig(kind) {
   const src = agentSettingsPath(kind);
   if (!src) return;
   try {
-    if (!fs33.existsSync(src)) return;
+    if (!fs34.existsSync(src)) return;
     const dest = path37.join(os30.homedir(), ".codeam", `headroom-backup-${kind}.json`);
-    fs33.mkdirSync(path37.dirname(dest), { recursive: true, mode: 448 });
-    fs33.copyFileSync(src, dest);
-    fs33.chmodSync(dest, 384);
+    fs34.mkdirSync(path37.dirname(dest), { recursive: true, mode: 448 });
+    fs34.copyFileSync(src, dest);
+    fs34.chmodSync(dest, 384);
     log.info("host-agent", `headroom config backup: ${src} \u2192 ${dest}`);
   } catch (err) {
     log.warn(
@@ -15541,11 +15551,11 @@ function restoreAgentHeadroomConfig(kind) {
   const dest = agentSettingsPath(kind);
   if (!dest) return false;
   const src = path37.join(os30.homedir(), ".codeam", `headroom-backup-${kind}.json`);
-  if (!fs33.existsSync(src)) return false;
+  if (!fs34.existsSync(src)) return false;
   try {
-    fs33.mkdirSync(path37.dirname(dest), { recursive: true, mode: 448 });
-    fs33.copyFileSync(src, dest);
-    fs33.chmodSync(dest, 384);
+    fs34.mkdirSync(path37.dirname(dest), { recursive: true, mode: 448 });
+    fs34.copyFileSync(src, dest);
+    fs34.chmodSync(dest, 384);
     log.info("host-agent", `headroom config restored: ${src} \u2192 ${dest}`);
     return true;
   } catch (err) {
@@ -15558,7 +15568,7 @@ function restoreAgentHeadroomConfig(kind) {
 }
 function readHeadroomChildEnv() {
   try {
-    const raw = fs33.readFileSync(headroomConfigPath(), "utf8");
+    const raw = fs34.readFileSync(headroomConfigPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed !== "object" || parsed === null) return {};
     const o = parsed;
@@ -15610,21 +15620,21 @@ function bundledClaudeBinDir() {
     const atAnthropic = path38.join(nm, "@anthropic-ai");
     let entries;
     try {
-      entries = fs34.readdirSync(atAnthropic);
+      entries = fs35.readdirSync(atAnthropic);
     } catch {
       continue;
     }
     for (const entry of entries) {
       if (!entry.startsWith("claude-agent-sdk-")) continue;
       const bin = path38.join(atAnthropic, entry, "claude");
-      if (fs34.existsSync(bin)) return path38.dirname(bin);
+      if (fs35.existsSync(bin)) return path38.dirname(bin);
     }
   }
   return null;
 }
 async function getFreeDiskBytes(dir) {
   try {
-    const s = await fs34.promises.statfs(dir);
+    const s = await fs35.promises.statfs(dir);
     return s.bsize * s.bavail;
   } catch {
     return null;
@@ -15721,7 +15731,7 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner,
 var import_node_child_process17 = require("child_process");
 
 // src/lib/updateNotifier.ts
-var fs35 = __toESM(require("fs"));
+var fs36 = __toESM(require("fs"));
 var os31 = __toESM(require("os"));
 var path39 = __toESM(require("path"));
 var https6 = __toESM(require("https"));
@@ -15737,7 +15747,7 @@ function cachePath() {
 }
 function readCache() {
   try {
-    const raw = fs35.readFileSync(cachePath(), "utf8");
+    const raw = fs36.readFileSync(cachePath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.fetchedAt !== "number" || typeof parsed.latest !== "string") return null;
     return parsed;
@@ -15748,10 +15758,10 @@ function readCache() {
 function writeCache(cache) {
   try {
     const file = cachePath();
-    fs35.mkdirSync(path39.dirname(file), { recursive: true });
+    fs36.mkdirSync(path39.dirname(file), { recursive: true });
     const tmp = `${file}.${process.pid}.tmp`;
-    fs35.writeFileSync(tmp, JSON.stringify(cache));
-    fs35.renameSync(tmp, file);
+    fs36.writeFileSync(tmp, JSON.stringify(cache));
+    fs36.renameSync(tmp, file);
   } catch {
   }
 }
@@ -15826,7 +15836,7 @@ function isLinkedInstall() {
     }).trim();
     if (!root) return false;
     const pkgPath = path39.join(root, PKG_NAME);
-    return fs35.lstatSync(pkgPath).isSymbolicLink();
+    return fs36.lstatSync(pkgPath).isSymbolicLink();
   } catch {
     return false;
   }
@@ -15862,7 +15872,7 @@ function maybeAutoUpdate(currentVersion, latest) {
     return;
   }
   try {
-    fs35.unlinkSync(cachePath());
+    fs36.unlinkSync(cachePath());
   } catch {
   }
   process.stderr.write(`  ${import_picocolors3.default.green("\u2713")} Updated. Resuming session...
@@ -15878,7 +15888,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.56.0" : null;
+  const current = true ? "2.58.0" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -15895,7 +15905,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.56.0" : null;
+  const current = true ? "2.58.0" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -15915,7 +15925,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.56.0" : null;
+  return true ? "2.58.0" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve7) => {
@@ -15982,7 +15992,7 @@ async function runSelfUpdate() {
 
 // src/commands/host/teardown.ts
 var import_node_child_process18 = require("child_process");
-var fs36 = __toESM(require("fs"));
+var fs37 = __toESM(require("fs"));
 var defaultDisableService = () => {
   try {
     (0, import_node_child_process18.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
@@ -15991,7 +16001,7 @@ var defaultDisableService = () => {
 };
 var defaultTeardownHeadroom = () => {
   try {
-    const kind = JSON.parse(fs36.readFileSync(headroomConfigPath(), "utf8")).agent;
+    const kind = JSON.parse(fs37.readFileSync(headroomConfigPath(), "utf8")).agent;
     if (kind) {
       (0, import_node_child_process18.execFileSync)("headroom", ["unwrap", kind], { stdio: "ignore", timeout: 15e3 });
     }
@@ -16059,8 +16069,8 @@ function maybeResumeLocalHeadroomReporter(ctx) {
   if (process.env["HEADROOM_ENABLED"] === "1") return null;
   try {
     const file = headroomConfigPath();
-    if (!fs37.existsSync(file)) return null;
-    const cfg = JSON.parse(fs37.readFileSync(file, "utf8"));
+    if (!fs38.existsSync(file)) return null;
+    const cfg = JSON.parse(fs38.readFileSync(file, "utf8"));
     if (!cfg?.enabled) return null;
     const agent = cfg.agent ?? "claude";
     const ingestUrl = `${resolveApiBaseUrl()}/api/sessions/${ctx.sessionId}/headroom-savings`;
@@ -16269,10 +16279,7 @@ var HostAgentSupervisor = class {
     }
     this.relay?.stop();
     for (const child of this.children.values()) {
-      try {
-        child.proc.kill("SIGTERM");
-      } catch {
-      }
+      killQuiet(child.proc);
     }
     this.children.clear();
   }
@@ -16470,7 +16477,7 @@ var HostAgentSupervisor = class {
         };
         const houseConfigDir = path40.join(os32.homedir(), ".codeam", "house-claude");
         try {
-          fs37.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
+          fs38.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
         } catch {
         }
         childEnv.CLAUDE_CONFIG_DIR = houseConfigDir;
@@ -16817,7 +16824,7 @@ async function configureHeadroom(action, ctx, deps) {
 }
 
 // src/services/headroom/budget-relaunch.ts
-var fs38 = __toESM(require("fs"));
+var fs39 = __toESM(require("fs"));
 var os33 = __toESM(require("os"));
 var path41 = __toESM(require("path"));
 var import_child_process13 = require("child_process");
@@ -16894,8 +16901,8 @@ async function applyBudgetToHeadroom(budget, deps) {
 }
 function writeManifestReal(manifestPath, manifest) {
   const tmp = manifestPath + ".codeam.tmp";
-  fs38.writeFileSync(tmp, JSON.stringify(manifest, null, 2) + "\n", { mode: 384 });
-  fs38.renameSync(tmp, manifestPath);
+  fs39.writeFileSync(tmp, JSON.stringify(manifest, null, 2) + "\n", { mode: 384 });
+  fs39.renameSync(tmp, manifestPath);
 }
 function restartDeploymentReal(profile) {
   try {
@@ -16928,8 +16935,8 @@ function makeRealApplyBudgetDeps() {
   const homeDir2 = os33.homedir();
   return {
     findDeployments: () => findHeadroomDeployments(homeDir2, {
-      readDir: (dir) => fs38.readdirSync(dir),
-      readJson: (filePath) => JSON.parse(fs38.readFileSync(filePath, "utf8"))
+      readDir: (dir) => fs39.readdirSync(dir),
+      readJson: (filePath) => JSON.parse(fs39.readFileSync(filePath, "utf8"))
     }),
     writeManifest: writeManifestReal,
     restartDeployment: restartDeploymentReal,
@@ -17284,10 +17291,7 @@ function runSetupCommand(cmd, args2, cwd, env, opts) {
       if (settled) return;
       settled = true;
       log.info("preview", `${tag}: timed out after ${opts.timeoutMs}ms \u2014 killing`);
-      try {
-        child.kill("SIGTERM");
-      } catch {
-      }
+      killQuiet(child);
       resolve7({ status: "timeout", code: null });
     }, opts.timeoutMs);
     child.once("exit", (code) => {
@@ -17612,7 +17616,7 @@ function activePreviewSessionIds() {
 
 // src/services/preview/start-orchestrator.ts
 var import_child_process17 = require("child_process");
-var fs43 = __toESM(require("fs"));
+var fs44 = __toESM(require("fs"));
 var path46 = __toESM(require("path"));
 var import_which2 = __toESM(require("which"));
 var INSTALL_TIMEOUT_MS = 5 * 6e4;
@@ -17681,7 +17685,7 @@ function normalizeDetectionForSpawn(detection, cwd) {
   const binName = args2[0];
   if (binName.startsWith("-")) return detection;
   const binPath = path46.join(cwd, "node_modules", ".bin", binName);
-  if (!fs43.existsSync(binPath)) return detection;
+  if (!fs44.existsSync(binPath)) return detection;
   return {
     ...detection,
     command: binPath,
@@ -17983,10 +17987,7 @@ async function establishTunnel(ctx, dev) {
           "preview",
           "named tunnel did not register within 45s \u2014 falling back to quick tunnel"
         );
-        try {
-          candidate.kill("SIGTERM");
-        } catch {
-        }
+        killQuiet(candidate);
       }
     } catch (e) {
       log.info(
@@ -18018,10 +18019,7 @@ async function establishTunnel(ctx, dev) {
       parsedUrl = outcome.url;
     } else {
       lastTunnelErr = outcome.sawUrl ? "cloudflared did not register a tunnel connection within 45s" : "cloudflared did not emit a URL within 45s";
-      try {
-        candidate.kill("SIGTERM");
-      } catch {
-      }
+      killQuiet(candidate);
     }
   }
   if (!parsedUrl) {
@@ -18037,7 +18035,7 @@ async function establishTunnel(ctx, dev) {
 
 // src/beads/bd-adapter.ts
 var import_child_process18 = require("child_process");
-var fs44 = __toESM(require("fs"));
+var fs45 = __toESM(require("fs"));
 var os35 = __toESM(require("os"));
 var path47 = __toESM(require("path"));
 var BD_PACKAGE = "@beads/bd";
@@ -18055,7 +18053,7 @@ function _defaultResolveBundled() {
   const binaryName = process.platform === "win32" ? "bd.exe" : "bd";
   const binaryPath = path47.join(binDir, binaryName);
   try {
-    fs44.accessSync(binaryPath, fs44.constants.F_OK);
+    fs45.accessSync(binaryPath, fs45.constants.F_OK);
     return binaryPath;
   } catch {
     return null;
@@ -18071,7 +18069,7 @@ function _defaultResolveOnPath() {
     for (const candidate of candidates) {
       const full = path47.join(dir, candidate);
       try {
-        fs44.accessSync(full, fs44.constants.F_OK);
+        fs45.accessSync(full, fs45.constants.F_OK);
         return full;
       } catch {
       }
@@ -18248,7 +18246,7 @@ function coerceIssue(row, projectKey) {
 
 // src/beads/provisioner.ts
 var import_child_process22 = require("child_process");
-var fs47 = __toESM(require("fs"));
+var fs48 = __toESM(require("fs"));
 var os37 = __toESM(require("os"));
 var path50 = __toESM(require("path"));
 
@@ -18315,7 +18313,7 @@ async function installBd(platform3 = process.platform) {
 
 // src/beads/install-dolt.ts
 var import_child_process20 = require("child_process");
-var fs45 = __toESM(require("fs"));
+var fs46 = __toESM(require("fs"));
 var os36 = __toESM(require("os"));
 var path48 = __toESM(require("path"));
 var DOLT_INSTALL_SH_URL = "https://github.com/dolthub/dolt/releases/latest/download/install.sh";
@@ -18413,7 +18411,7 @@ var _doltPathSeam = {
   },
   exists: (p2) => {
     try {
-      fs45.accessSync(p2, fs45.constants.F_OK);
+      fs46.accessSync(p2, fs46.constants.F_OK);
       return true;
     } catch {
       return false;
@@ -18576,7 +18574,7 @@ async function ensureSharedServer(adapter, options = {}) {
 // src/beads/project-key.ts
 var import_child_process21 = require("child_process");
 var crypto2 = __toESM(require("crypto"));
-var fs46 = __toESM(require("fs"));
+var fs47 = __toESM(require("fs"));
 var path49 = __toESM(require("path"));
 function normalizeOrigin(raw) {
   const trimmed = raw.trim();
@@ -18609,7 +18607,7 @@ function findRepoRoot(cwd) {
     if (seen.has(dir)) return null;
     seen.add(dir);
     try {
-      const stat3 = fs46.statSync(path49.join(dir, ".git"), { throwIfNoEntry: false });
+      const stat3 = fs47.statSync(path49.join(dir, ".git"), { throwIfNoEntry: false });
       if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
     } catch {
     }
@@ -18624,7 +18622,7 @@ var _execSeam2 = {
     const out2 = (0, import_child_process21.execFileSync)(file, args2, opts);
     return typeof out2 === "string" ? out2 : out2.toString("utf8");
   },
-  realpath: (p2) => fs46.realpathSync(p2)
+  realpath: (p2) => fs47.realpathSync(p2)
 };
 function readOrigin(cwd) {
   try {
@@ -18698,14 +18696,14 @@ var _linkSeam = {
   homedir: () => os37.homedir(),
   isWritableDir: (dir) => {
     try {
-      fs47.accessSync(dir, fs47.constants.W_OK);
+      fs48.accessSync(dir, fs48.constants.W_OK);
       return true;
     } catch {
       return false;
     }
   },
   ensureDir: (dir) => {
-    fs47.mkdirSync(dir, { recursive: true });
+    fs48.mkdirSync(dir, { recursive: true });
   },
   /**
    * A directory to symlink `bd` into so the AGENT's shell + Claude Code's
@@ -18745,7 +18743,7 @@ var _linkSeam = {
     const entry = process.argv[1];
     if (entry) {
       try {
-        candidates.push(path50.dirname(fs47.realpathSync(entry)));
+        candidates.push(path50.dirname(fs48.realpathSync(entry)));
       } catch {
         candidates.push(path50.dirname(entry));
       }
@@ -18759,13 +18757,13 @@ var _linkSeam = {
   /** Current symlink target at `linkPath`, or null when absent / not a link. */
   readlink: (linkPath) => {
     try {
-      return fs47.readlinkSync(linkPath);
+      return fs48.readlinkSync(linkPath);
     } catch {
       return null;
     }
   },
-  unlink: (linkPath) => fs47.unlinkSync(linkPath),
-  symlink: (target, linkPath) => fs47.symlinkSync(target, linkPath)
+  unlink: (linkPath) => fs48.unlinkSync(linkPath),
+  symlink: (target, linkPath) => fs48.symlinkSync(target, linkPath)
 };
 function linkBdOntoPath(binaryPath) {
   if (_linkSeam.platform() === "win32") return;
@@ -19401,10 +19399,7 @@ async function configureBeads(action, ctx, deps) {
 var pendingAttachmentFiles = /* @__PURE__ */ new Set();
 function cleanupAttachmentTempFiles() {
   for (const p2 of pendingAttachmentFiles) {
-    try {
-      fs49.unlinkSync(p2);
-    } catch {
-    }
+    rmIfExistsQuiet(p2);
   }
   pendingAttachmentFiles.clear();
 }
@@ -19412,7 +19407,7 @@ function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
     const tmpPath = path53.join(os39.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
-    fs49.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
+    fs50.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     pendingAttachmentFiles.add(tmpPath);
     return tmpPath;
   });
@@ -19431,10 +19426,7 @@ var startTask = (ctx, _cmd, parsed) => {
     ctx.agent.sendCommand(`${atRefs} ${effectivePrompt}`.trim());
     setTimeout(() => {
       for (const p2 of paths) {
-        try {
-          fs49.unlinkSync(p2);
-        } catch {
-        }
+        rmIfExistsQuiet(p2);
         pendingAttachmentFiles.delete(p2);
       }
     }, 12e4);
@@ -19552,10 +19544,7 @@ var sessionTerminated = async (ctx, cmd) => {
     removeSession(ctx.sessionId);
   } catch {
   }
-  try {
-    ctx.agent.kill();
-  } catch {
-  }
+  quiet(() => ctx.agent.kill());
   try {
     const proc = (0, import_child_process23.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
       detached: true,
@@ -19573,10 +19562,7 @@ var shutdownSession = async (ctx, cmd) => {
     await ctx.relay.sendResult(cmd.id, "success", { ok: true });
   } catch {
   }
-  try {
-    ctx.agent.kill();
-  } catch {
-  }
+  quiet(() => ctx.agent.kill());
   if (ctx.keepAliveCtx.inCodespace && ctx.keepAliveCtx.codespaceName) {
     try {
       const stopProc = (0, import_child_process23.spawn)(
@@ -19635,7 +19621,7 @@ var listFiles = async (ctx, cmd, parsed) => {
 var envReadH = async (ctx, cmd) => {
   const envPath = path53.join(process.cwd(), ".env");
   try {
-    const raw = await fs49.promises.readFile(envPath, "utf8");
+    const raw = await fs50.promises.readFile(envPath, "utf8");
     await ctx.relay.sendResult(cmd.id, "completed", {
       exists: true,
       vars: parseDotenv(raw)
@@ -19669,11 +19655,11 @@ var envWriteH = async (ctx, cmd, parsed) => {
   const envPath = path53.join(process.cwd(), ".env");
   const tmpPath = path53.join(process.cwd(), ".env.codeam.tmp");
   try {
-    await fs49.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
-    await fs49.promises.rename(tmpPath, envPath);
+    await fs50.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
+    await fs50.promises.rename(tmpPath, envPath);
     await ctx.relay.sendResult(cmd.id, "completed", { ok: true, count: vars.length });
   } catch (err) {
-    await fs49.promises.rm(tmpPath, { force: true }).catch(() => void 0);
+    await fs50.promises.rm(tmpPath, { force: true }).catch(() => void 0);
     await ctx.relay.sendResult(cmd.id, "failed", { error: err.message });
   }
 };
@@ -19691,7 +19677,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
   let configuredAgent = rawAgentId;
   if (!configuredAgent) {
     try {
-      const raw = JSON.parse(fs49.readFileSync(headroomConfigPath(), "utf8"));
+      const raw = JSON.parse(fs50.readFileSync(headroomConfigPath(), "utf8"));
       configuredAgent = raw.agent ?? "";
     } catch {
     }
@@ -19725,7 +19711,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
     persist: persistHeadroomConfig,
     readEnabled: () => {
       try {
-        const raw = JSON.parse(fs49.readFileSync(headroomConfigPath(), "utf8"));
+        const raw = JSON.parse(fs50.readFileSync(headroomConfigPath(), "utf8"));
         return raw.enabled === true;
       } catch {
         return false;
@@ -19814,7 +19800,7 @@ var headroomBudgetH = async (ctx, cmd) => {
   }
   let headroomActive = false;
   try {
-    const raw = JSON.parse(fs49.readFileSync(headroomConfigPath(), "utf8"));
+    const raw = JSON.parse(fs50.readFileSync(headroomConfigPath(), "utf8"));
     headroomActive = raw.enabled === true;
   } catch {
   }
@@ -19824,7 +19810,7 @@ var headroomBudgetH = async (ctx, cmd) => {
   }
   let existingConfig = { enabled: true };
   try {
-    existingConfig = JSON.parse(fs49.readFileSync(headroomConfigPath(), "utf8"));
+    existingConfig = JSON.parse(fs50.readFileSync(headroomConfigPath(), "utf8"));
   } catch {
   }
   if (payload.budgetEnabled && payload.budgetUsd != null) {
@@ -19942,7 +19928,7 @@ var CLI_UPDATE_MAX_ATTEMPTS = 3;
 function buildNpmInstallInvocation(opts) {
   const entryScript = opts?.entryScript ?? process.argv[1] ?? "";
   const execPath = opts?.execPath ?? process.execPath;
-  const exists2 = opts?.existsSync ?? fs49.existsSync;
+  const exists2 = opts?.existsSync ?? fs50.existsSync;
   const normalized = entryScript.split(path53.sep).join("/");
   const marker = "/lib/node_modules/codeam-cli/";
   const markerIdx = normalized.indexOf(marker);
@@ -20790,12 +20776,9 @@ function readTokenFromArgs(args2) {
   if (fileFlag) {
     const path68 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs50.readFileSync(path68, "utf8").trim();
+      const content = fs51.readFileSync(path68, "utf8").trim();
       if (content.length === 0) fail(`--token-file ${path68} is empty`);
-      try {
-        fs50.unlinkSync(path68);
-      } catch {
-      }
+      rmIfExistsQuiet(path68);
       return content;
     } catch (err) {
       fail(`Could not read --token-file: ${err.message}`);
@@ -20890,7 +20873,7 @@ function isLivePairAuto(pid) {
     if (e.code !== "EPERM") return false;
   }
   try {
-    return fs50.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
+    return fs51.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
   } catch {
     return true;
   }
@@ -20905,19 +20888,19 @@ function daemonLockPath(sessionId) {
 function acquireDaemonLock(sessionId) {
   const lockPath = daemonLockPath(sessionId);
   try {
-    fs50.mkdirSync(path54.dirname(lockPath), { recursive: true });
+    fs51.mkdirSync(path54.dirname(lockPath), { recursive: true });
     try {
-      fs50.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs51.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs50.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs51.readFileSync(lockPath, "utf8").trim());
       if (holder && holder !== process.pid && isLiveCodeam(holder)) return false;
-      fs50.writeFileSync(lockPath, String(process.pid));
+      fs51.writeFileSync(lockPath, String(process.pid));
     }
     const release3 = () => {
       try {
-        if (fs50.existsSync(lockPath) && Number(fs50.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs50.unlinkSync(lockPath);
+        if (fs51.existsSync(lockPath) && Number(fs51.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs51.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -20939,19 +20922,19 @@ function acquireDaemonLock(sessionId) {
 function acquireSingletonLock() {
   const lockPath = pairAutoLockPath();
   try {
-    fs50.mkdirSync(path54.dirname(lockPath), { recursive: true });
+    fs51.mkdirSync(path54.dirname(lockPath), { recursive: true });
     try {
-      fs50.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs51.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs50.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs51.readFileSync(lockPath, "utf8").trim());
       if (isLivePairAuto(holder)) return false;
-      fs50.writeFileSync(lockPath, String(process.pid));
+      fs51.writeFileSync(lockPath, String(process.pid));
     }
     process.once("exit", () => {
       try {
-        if (fs50.existsSync(lockPath) && Number(fs50.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs50.unlinkSync(lockPath);
+        if (fs51.existsSync(lockPath) && Number(fs51.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs51.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -21630,7 +21613,7 @@ function requiresAcp(agent) {
 var import_node_crypto7 = require("crypto");
 
 // src/services/history.service.ts
-var fs52 = __toESM(require("fs"));
+var fs53 = __toESM(require("fs"));
 var path57 = __toESM(require("path"));
 var os41 = __toESM(require("os"));
 var https7 = __toESM(require("https"));
@@ -21659,7 +21642,7 @@ function parseJsonl(filePath) {
   const messages = [];
   let raw;
   try {
-    raw = fs52.readFileSync(filePath, "utf8");
+    raw = fs53.readFileSync(filePath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       log.warn("history:parseJsonl", `read failed for ${filePath}`, err);
@@ -21849,9 +21832,9 @@ var HistoryService = class _HistoryService {
     const dir = this.projectDir;
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     try {
-      const files = fs52.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
+      const files = fs53.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
         try {
-          const stat3 = fs52.statSync(path57.join(dir, e.name));
+          const stat3 = fs53.statSync(path57.join(dir, e.name));
           return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
         } catch {
           return { name: e.name, mtime: 0, birthtime: 0 };
@@ -21892,13 +21875,13 @@ var HistoryService = class _HistoryService {
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     let entries;
     try {
-      entries = fs52.readdirSync(dir, { withFileTypes: true });
+      entries = fs53.readdirSync(dir, { withFileTypes: true });
     } catch {
       return null;
     }
     const files = entries.filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
       try {
-        const stat3 = fs52.statSync(path57.join(dir, e.name));
+        const stat3 = fs53.statSync(path57.join(dir, e.name));
         return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
       } catch {
         return { name: e.name, mtime: 0, birthtime: 0 };
@@ -21912,7 +21895,7 @@ var HistoryService = class _HistoryService {
   extractUsageFromFile(filePath) {
     let raw;
     try {
-      raw = fs52.readFileSync(filePath, "utf8");
+      raw = fs53.readFileSync(filePath, "utf8");
     } catch {
       return null;
     }
@@ -21957,9 +21940,9 @@ var HistoryService = class _HistoryService {
     let totalCost = 0;
     let files;
     try {
-      files = fs52.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
+      files = fs53.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
         try {
-          return fs52.statSync(path57.join(projectDir, f)).mtimeMs >= monthStartMs;
+          return fs53.statSync(path57.join(projectDir, f)).mtimeMs >= monthStartMs;
         } catch {
           return false;
         }
@@ -21970,7 +21953,7 @@ var HistoryService = class _HistoryService {
     for (const file of files) {
       let raw;
       try {
-        raw = fs52.readFileSync(path57.join(projectDir, file), "utf8");
+        raw = fs53.readFileSync(path57.join(projectDir, file), "utf8");
       } catch {
         continue;
       }
@@ -22139,7 +22122,7 @@ var HistoryService = class _HistoryService {
     if (!filePath) return false;
     let mtimeMs;
     try {
-      mtimeMs = fs52.statSync(filePath).mtimeMs;
+      mtimeMs = fs53.statSync(filePath).mtimeMs;
     } catch {
       return false;
     }
@@ -22208,7 +22191,7 @@ var HistoryService = class _HistoryService {
 
 // src/agents/acp/client.ts
 var import_node_child_process21 = require("child_process");
-var fs53 = __toESM(require("fs/promises"));
+var fs54 = __toESM(require("fs/promises"));
 var fsSync = __toESM(require("fs"));
 var os42 = __toESM(require("os"));
 var path58 = __toESM(require("path"));
@@ -24987,10 +24970,7 @@ var AcpClient = class {
       child.kill("SIGTERM");
       const grace = new Promise((resolve7) => {
         const t2 = setTimeout(() => {
-          try {
-            child.kill("SIGKILL");
-          } catch {
-          }
+          killQuiet(child, "SIGKILL");
           resolve7();
         }, 2e3);
         child.once("exit", () => {
@@ -25044,7 +25024,7 @@ var AcpClient = class {
       },
       readTextFile: async (params) => {
         try {
-          const content = await fs53.readFile(params.path, "utf8");
+          const content = await fs54.readFile(params.path, "utf8");
           return applyLineRange(content, params.line ?? null, params.limit ?? null);
         } catch (err) {
           const code = err.code;
@@ -25064,7 +25044,7 @@ var AcpClient = class {
       },
       writeTextFile: async (params) => {
         try {
-          await fs53.writeFile(params.path, params.content, "utf8");
+          await fs54.writeFile(params.path, params.content, "utf8");
           return {};
         } catch (err) {
           const code = err.code;
@@ -25478,67 +25458,6 @@ var AcpPublisher = class {
   }
 };
 
-// src/agents/acp/oneMContextRecovery.ts
-var ONE_M_CONTEXT_CREDITS_RE = /usage credits required for 1m context/i;
-function looksLike1mContextCreditsError(text) {
-  return ONE_M_CONTEXT_CREDITS_RE.test(text);
-}
-var ONE_M_DISABLE_OPTION = "Disable 1M context and continue";
-function shouldOfferOneMRecovery(opts) {
-  return looksLike1mContextCreditsError(opts.detail) || looksLike1mContextCreditsError(opts.recentStderr) || looksLike1mContextCreditsError(opts.finalText);
-}
-function oneMRecoverySelectPrompt() {
-  return {
-    question: "\u26A0\uFE0F This agent's Anthropic account needs usage credits for 1M context. You can disable 1M context (uses standard 200K context) and continue.",
-    options: [ONE_M_DISABLE_OPTION]
-  };
-}
-function createOneMRecovery(deps) {
-  let pending = null;
-  const sp = oneMRecoverySelectPrompt();
-  return {
-    offer: async (commandId, blocks) => {
-      pending = { blocks };
-      await deps.publishText(sp.question);
-      await deps.publishSelectPrompt(sp.question, sp.options);
-      await deps.publishAwaitingAnswer(sp.question, sp.options);
-      deps.appendAgentReply(sp.question);
-      deps.flushHistory();
-      deps.log?.(`1M-context credits gate \u2014 recovery offered id=${commandId.slice(0, 8)}`);
-      await deps.sendResult(commandId, "failed", {
-        error: "1M context requires usage credits \u2014 recovery offered"
-      });
-    },
-    tryRecover: async (commandId) => {
-      if (!pending) return false;
-      const blocks = pending.blocks;
-      pending = null;
-      deps.log?.("1M-context recovery \u2192 disable + reconnect + rerun");
-      await deps.reconnectWith1mDisabled();
-      await deps.beginTurn();
-      try {
-        const reply = await deps.promptAgent(blocks);
-        const finalText = deps.getCurrentText();
-        await deps.closeTurn();
-        deps.appendAgentReply(finalText);
-        deps.flushHistory();
-        await deps.sendResult(commandId, "completed", { stopReason: reply.stopReason });
-      } catch (err) {
-        await deps.recoverFromFailedTurn();
-        const d3 = deps.describeError(err);
-        const b = deps.failureBubbleFor(d3);
-        if (b) {
-          await deps.publishText(b);
-          deps.appendAgentReply(b);
-          deps.flushHistory();
-        }
-        await deps.sendResult(commandId, "failed", { error: d3 });
-      }
-      return true;
-    }
-  };
-}
-
 // src/agents/acp/budgetRecovery.ts
 var BUDGET_EXCEEDED_RE = /budget exceeded for (\w+) period/i;
 function looksLikeBudgetExceeded(text) {
@@ -25663,15 +25582,15 @@ function commonPrefixLength(a, b) {
 
 // src/agents/acp/onboarding.ts
 var import_child_process26 = require("child_process");
-var fs54 = __toESM(require("fs"));
+var fs55 = __toESM(require("fs"));
 var os43 = __toESM(require("os"));
 var path59 = __toESM(require("path"));
 var _onboardingSeam = {
   markerPath: (sessionId) => path59.join(os43.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
-  exists: (p2) => fs54.existsSync(p2),
+  exists: (p2) => fs55.existsSync(p2),
   write: (p2) => {
-    fs54.mkdirSync(path59.dirname(p2), { recursive: true });
-    fs54.writeFileSync(p2, "");
+    fs55.mkdirSync(path59.dirname(p2), { recursive: true });
+    fs55.writeFileSync(p2, "");
   },
   disabled: () => {
     const v = process.env.CODEAM_ONBOARDING_DISABLED;
@@ -25960,7 +25879,7 @@ var import_crypto5 = require("crypto");
 
 // src/services/turn-files/git-changeset.ts
 var import_child_process27 = require("child_process");
-var fs55 = __toESM(require("fs/promises"));
+var fs56 = __toESM(require("fs/promises"));
 var path60 = __toESM(require("path"));
 async function collectRepoChangeset(opts) {
   const status2 = await runGit3(opts.repoRoot, ["status", "--porcelain=v1", "-z"]);
@@ -26010,7 +25929,7 @@ function readUntrackedLineCount(absPath) {
 }
 async function defaultReadUntrackedLineCount(absPath) {
   try {
-    const content = await fs55.readFile(absPath, "utf8");
+    const content = await fs56.readFile(absPath, "utf8");
     let count = 0;
     let pos = -1;
     while ((pos = content.indexOf("\n", pos + 1)) !== -1) {
@@ -26102,7 +26021,7 @@ function defaultRunGit(cwd, args2) {
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs59 = await import("fs/promises");
+  const fs60 = await import("fs/promises");
   const out2 = [];
   await walk(workingDir, 0);
   return out2;
@@ -26110,7 +26029,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (depth > maxDepth) return;
     let entries = [];
     try {
-      const dirents = await fs59.readdir(dir, { withFileTypes: true });
+      const dirents = await fs60.readdir(dir, { withFileTypes: true });
       entries = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -26136,7 +26055,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
 }
 
 // src/services/turn-files/files-outbox.ts
-var fs56 = __toESM(require("fs/promises"));
+var fs57 = __toESM(require("fs/promises"));
 var path61 = __toESM(require("path"));
 var import_os7 = require("os");
 var HOME_OUTBOX_DIR = ".codeam/outbox";
@@ -26178,8 +26097,8 @@ var FilesOutbox = class {
   /** Persist the entry to disk and trigger a flush. Returns once the
    *  line is durable on disk (not once the POST succeeds). */
   async enqueue(entry) {
-    await fs56.mkdir(path61.dirname(this.filePath), { recursive: true });
-    await fs56.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
+    await fs57.mkdir(path61.dirname(this.filePath), { recursive: true });
+    await fs57.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
     this.backoffIndex = 0;
     if (this.autoSchedule) this.scheduleFlush(0);
   }
@@ -26268,7 +26187,7 @@ var FilesOutbox = class {
   async readAll() {
     let raw = "";
     try {
-      raw = await fs56.readFile(this.filePath, "utf8");
+      raw = await fs57.readFile(this.filePath, "utf8");
     } catch {
       return [];
     }
@@ -26292,12 +26211,12 @@ var FilesOutbox = class {
   async rewrite(entries) {
     const tmpPath = `${this.filePath}.${process.pid}.tmp`;
     if (entries.length === 0) {
-      await fs56.unlink(this.filePath).catch(() => void 0);
+      await fs57.unlink(this.filePath).catch(() => void 0);
       return;
     }
     const payload = entries.map((e) => JSON.stringify(e)).join("\n") + "\n";
-    await fs56.writeFile(tmpPath, payload, "utf8");
-    await fs56.rename(tmpPath, this.filePath);
+    await fs57.writeFile(tmpPath, payload, "utf8");
+    await fs57.rename(tmpPath, this.filePath);
   }
 };
 function applyJitter(ms) {
@@ -26506,6 +26425,50 @@ function withTimeout(p2, ms) {
   });
 }
 
+// src/agents/acp/oneMContextRecovery.ts
+var ONE_M_CONTEXT_CREDITS_RE = /usage credits required for 1m context/i;
+function looksLike1mContextCreditsError(text) {
+  return ONE_M_CONTEXT_CREDITS_RE.test(text);
+}
+function shouldOfferOneMRecovery(opts) {
+  return looksLike1mContextCreditsError(opts.detail) || looksLike1mContextCreditsError(opts.recentStderr) || looksLike1mContextCreditsError(opts.finalText);
+}
+
+// src/agents/acp/agent-hooks.ts
+function replyIsCursorUpgradeRequired(finalText) {
+  const t2 = finalText.trim().toLowerCase();
+  if (t2.length === 0 || t2.length > 200) return false;
+  return t2.includes("upgrade your plan to continue") || t2.includes("upgrade your plan") && t2.includes("continue");
+}
+function isGeminiIneligibleTier(haystack) {
+  return /IneligibleTierError|UNSUPPORTED_CLIENT|no longer supported for Gemini Code Assist|not eligible for Gemini Code Assist/i.test(
+    haystack
+  );
+}
+var ACP_AGENT_HOOKS = {
+  claude: {
+    statusPage: { vendor: "Anthropic", url: "https://status.anthropic.com" }
+  },
+  codex: {
+    statusPage: { vendor: "OpenAI", url: "https://status.openai.com" },
+    startupExtraEnv: ({ autoApprovePermissions }) => autoApprovePermissions ? { INITIAL_AGENT_MODE: "agent-full-access" } : {}
+  },
+  gemini: {
+    statusPage: { vendor: "Google", url: "https://status.cloud.google.com" },
+    classifyStartupFailure: (haystack) => isGeminiIneligibleTier(haystack) ? "ineligible_tier" : null
+  },
+  copilot: {
+    statusPage: { vendor: "GitHub", url: "https://www.githubstatus.com" }
+  },
+  cursor: {
+    statusPage: { vendor: "Cursor", url: "https://status.cursor.com" },
+    classifyCompletedReply: (finalText) => replyIsCursorUpgradeRequired(finalText) ? "upgrade_required" : null
+  }
+};
+function agentHooks(agent) {
+  return ACP_AGENT_HOOKS[agent];
+}
+
 // src/agents/acp/failure-messages.ts
 function describeError(err) {
   if (err instanceof Error) return err.message;
@@ -26520,11 +26483,6 @@ function replyIsAuthFailure(finalText) {
   return t2.length > 0 && t2.length <= 200 && looksLikeAuthFailure(t2);
 }
 var AUTH_FAILURE_MESSAGE = "\u{1F512} **Authentication failed \u2014 your agent credentials are invalid or expired (API 401).**\n\nTap [Re-authenticate this agent](codeam://reauth) to renew your credentials in Profile \u203A Agents, then send your message again.";
-function replyIsCursorUpgradeRequired(finalText) {
-  const t2 = finalText.trim().toLowerCase();
-  if (t2.length === 0 || t2.length > 200) return false;
-  return t2.includes("upgrade your plan to continue") || t2.includes("upgrade your plan") && t2.includes("continue");
-}
 var CURSOR_UPGRADE_MESSAGE = "\u26A1 **Cursor needs a paid plan to run the agent.**\n\nThe headless Cursor Agent requires Cursor **Pro** \u2014 your Free plan\u2019s included usage does NOT cover Agent runs, even with quota left. This is your Cursor account (not CodeAgent). Upgrade, then send your message again:\n\n[Upgrade to Cursor Pro \u2192](https://cursor.com/dashboard)";
 var ONE_M_CREDITS_MESSAGE = "\u{1F504} **Reconnect your Claude subscription to continue.**\n\nClaude requested 1M-context but your account doesn\u2019t have the usage credits for it on this credential. Reconnecting refreshes your subscription so the agent can keep going \u2014 disabling 1M context won\u2019t fix a credits gate.\n\nTap [Reconnect this agent](codeam://reauth) to reconnect your Claude subscription in Profile \u203A Agents, then send your message again.";
 var TURN_FAILURE_MESSAGE = "\u26A0\uFE0F **The agent hit an error and couldn\u2019t finish this turn.** Please send your message again.";
@@ -26534,17 +26492,8 @@ function looksLikeProviderOutage(text) {
 }
 function agentStatusPage(agent) {
   const a = (agent ?? "").toLowerCase();
-  if (a.includes("claude") || a.includes("anthropic"))
-    return { vendor: "Anthropic", url: "https://status.anthropic.com" };
-  if (a.includes("codex") || a.includes("openai"))
-    return { vendor: "OpenAI", url: "https://status.openai.com" };
-  if (a.includes("gemini") || a.includes("google"))
-    return { vendor: "Google", url: "https://status.cloud.google.com" };
-  if (a.includes("copilot"))
-    return { vendor: "GitHub", url: "https://www.githubstatus.com" };
-  if (a.includes("cursor"))
-    return { vendor: "Cursor", url: "https://status.cursor.com" };
-  return null;
+  const id = a.includes("claude") || a.includes("anthropic") ? "claude" : a.includes("codex") || a.includes("openai") ? "codex" : a.includes("gemini") || a.includes("google") ? "gemini" : a.includes("copilot") ? "copilot" : a.includes("cursor") ? "cursor" : null;
+  return id ? agentHooks(id)?.statusPage ?? null : null;
 }
 function providerOutageMessage(agent) {
   const info = agentStatusPage(agent);
@@ -26555,15 +26504,10 @@ The agent provider returned an overload/outage error, so this turn couldn\u2019t
 
 Follow the status here: [${info.url}](${info.url})` : "");
 }
-function isGeminiIneligibleTier(haystack) {
-  return /IneligibleTierError|UNSUPPORTED_CLIENT|no longer supported for Gemini Code Assist|not eligible for Gemini Code Assist/i.test(
-    haystack
-  );
-}
 function startupFailureMessage(agent, detail, recentStderr) {
   const haystack = `${detail}
 ${recentStderr}`;
-  if (agent === "gemini" && isGeminiIneligibleTier(haystack)) {
+  if (agentHooks(agent)?.classifyStartupFailure?.(haystack) === "ineligible_tier") {
     return [
       "\u26A0\uFE0F **Gemini couldn't start \u2014 your Google account isn't eligible.**",
       "",
@@ -26750,19 +26694,13 @@ async function handleGetConversation(args2) {
 }
 function buildLegacyContextForACP(opts, relay, runtime) {
   return {
-    outputSvc: null,
-    agent: null,
-    historySvc: null,
     runtime,
     relay,
-    setKeepAlive: null,
-    keepAliveCtx: null,
     pluginId: opts.pluginId,
     sessionId: opts.sessionId,
     // The running ACP agent (claude/codex/gemini/cursor). REQUIRED: headroom_configure
     // resolves the agent from ctx.agentId; without it the enable gate sees '' and
-    // returns {supported:false} for a real Claude session (the `as unknown` cast
-    // below previously hid this missing field from the type checker).
+    // returns {supported:false} for a real Claude session.
     agentId: opts.agent,
     pluginAuthToken: opts.pluginAuthToken
   };
@@ -26820,7 +26758,7 @@ async function startTaskH(ctx) {
   try {
     const reply = await client2.prompt(blocks);
     const finalText = streaming.getCurrentText();
-    if (opts.agent === "cursor" && replyIsCursorUpgradeRequired(finalText)) {
+    if (agentHooks(opts.agent)?.classifyCompletedReply?.(finalText) === "upgrade_required") {
       await streaming.closeWithBubble(CURSOR_UPGRADE_MESSAGE);
       history.appendAgentReply(CURSOR_UPGRADE_MESSAGE);
       void history.flush();
@@ -26989,8 +26927,7 @@ async function ackEmptyH(ctx) {
   return;
 }
 async function selectOptionH(ctx) {
-  const { cmd, client: client2, relay, streaming, history, oneMRecovery, budgetRecovery } = ctx;
-  if (await oneMRecovery.tryRecover(cmd.id)) return;
+  const { cmd, client: client2, relay, streaming, history, budgetRecovery } = ctx;
   const payload = cmd.payload;
   const index = typeof payload?.index === "number" ? payload.index : 0;
   const offset = typeof payload?.from === "number" ? payload.from : 0;
@@ -27710,9 +27647,12 @@ function buildRelaunchProxyEnv(baseEnv) {
 function computeAdapterExtraEnv(params) {
   const env = {};
   if (params.disable1mContext) env.CLAUDE_CODE_DISABLE_1M_CONTEXT = "1";
-  if (params.agent === "codex" && params.autoApprovePermissions) {
-    env.INITIAL_AGENT_MODE = "agent-full-access";
-  }
+  Object.assign(
+    env,
+    agentHooks(params.agent)?.startupExtraEnv?.({
+      autoApprovePermissions: params.autoApprovePermissions
+    }) ?? {}
+  );
   return env;
 }
 async function runAcpSession(opts) {
@@ -27818,48 +27758,7 @@ async function runAcpSession(opts) {
       })();
     }
   };
-  let client2 = new AcpClient(clientOptions);
-  const reconnectWith1mDisabled = async () => {
-    setDisable1mContext(opts.pluginId, true);
-    try {
-      await client2.stop();
-    } catch {
-    }
-    client2 = new AcpClient({
-      ...clientOptions,
-      extraEnv: { ...extraEnv, CLAUDE_CODE_DISABLE_1M_CONTEXT: "1" }
-    });
-    await client2.start();
-  };
-  const oneMRecovery = createOneMRecovery({
-    publishText: (text) => publisher.publishOutput({ type: "text", content: text, done: true }),
-    publishSelectPrompt: (question, options) => publisher.publishOutput({
-      type: "select_prompt",
-      content: question,
-      options,
-      optionDescriptions: options.map(() => ""),
-      currentIndex: 0,
-      done: true
-    }),
-    // The button driver — mobile renders the tappable option from this
-    // awaiting-answer event; the user's tap returns as a `select_option`
-    // command, caught at the top of the select_option case by tryRecover.
-    publishAwaitingAnswer: (prompt, options) => publisher.publishAwaitingAnswer({ questionId: (0, import_node_crypto7.randomUUID)(), prompt, options }),
-    sendResult: (commandId, status2, result) => relay.sendResult(commandId, status2, result),
-    appendAgentReply: (text) => history.appendAgentReply(text),
-    flushHistory: () => void history.flush(),
-    beginTurn: () => streaming.beginTurn(),
-    getCurrentText: () => streaming.getCurrentText(),
-    closeTurn: async () => {
-      await streaming.closeTurnWithInteractiveDetection();
-    },
-    recoverFromFailedTurn: () => recoverFromFailedTurn(client2, streaming),
-    reconnectWith1mDisabled,
-    promptAgent: (blocks) => client2.prompt(blocks),
-    failureBubbleFor: (detail) => failureBubble({ detail, recentStderr: recentStderr.join("\n"), hadText: false, agent: opts.agent }),
-    describeError,
-    log: (msg) => log.info("acpRunner", msg)
-  });
+  const client2 = new AcpClient(clientOptions);
   let _budgetReachedPosted = false;
   const relaunchProxyWithoutBudget = async () => {
     const { spawn: spawn38 } = await import("child_process");
@@ -28013,7 +27912,6 @@ async function runAcpSession(opts) {
         getBeads,
         publisher,
         recentStderr,
-        oneMRecovery,
         budgetRecovery,
         { get: () => _budgetReachedPosted, set: (v) => {
           _budgetReachedPosted = v;
@@ -28052,7 +27950,7 @@ async function runAcpSession(opts) {
   await new Promise(() => {
   });
 }
-async function handleCommand(cmd, client2, relay, acpSessionId, models, streaming, opts, history, jsonlHistory, agentCaps, turnFiles, getBeads, publisher, recentStderr, oneMRecovery, budgetRecovery, budgetReachedFlag) {
+async function handleCommand(cmd, client2, relay, acpSessionId, models, streaming, opts, history, jsonlHistory, agentCaps, turnFiles, getBeads, publisher, recentStderr, budgetRecovery, budgetReachedFlag) {
   await dispatchAcpCommand({
     cmd,
     client: client2,
@@ -28068,7 +27966,6 @@ async function handleCommand(cmd, client2, relay, acpSessionId, models, streamin
     getBeads,
     publisher,
     recentStderr,
-    oneMRecovery,
     budgetRecovery,
     budgetReachedFlag
   });
@@ -29079,7 +28976,7 @@ function fetchQuotaUsage(runtime, historySvc) {
 }
 
 // src/agents/claude/onboarding.ts
-var fs57 = __toESM(require("fs"));
+var fs58 = __toESM(require("fs"));
 var os44 = __toESM(require("os"));
 var path62 = __toESM(require("path"));
 function ensureClaudeOnboarded() {
@@ -29087,7 +28984,7 @@ function ensureClaudeOnboarded() {
     const file = path62.join(os44.homedir(), ".claude.json");
     let config = {};
     try {
-      config = JSON.parse(fs57.readFileSync(file, "utf8"));
+      config = JSON.parse(fs58.readFileSync(file, "utf8"));
     } catch {
     }
     if (config.hasCompletedOnboarding === true && typeof config.theme === "string") {
@@ -29098,8 +28995,8 @@ function ensureClaudeOnboarded() {
     if (typeof config.lastOnboardingVersion !== "string") {
       config.lastOnboardingVersion = "2.1.177";
     }
-    fs57.mkdirSync(path62.dirname(file), { recursive: true });
-    fs57.writeFileSync(file, JSON.stringify(config, null, 2));
+    fs58.mkdirSync(path62.dirname(file), { recursive: true });
+    fs58.writeFileSync(file, JSON.stringify(config, null, 2));
     log.info("claude", "pre-completed Claude onboarding (skip first-run theme picker)");
   } catch (err) {
     log.warn("claude", `ensureClaudeOnboarded failed (non-fatal): ${err.message}`);
@@ -29429,7 +29326,7 @@ async function start(requestedAgent) {
 var import_crypto7 = require("crypto");
 var import_picocolors5 = __toESM(require("picocolors"));
 
-// src/utils/agent-prompt.ts
+// src/lib/agent-prompt.ts
 function parseAgentFlag(args2) {
   const flag = args2.find((a) => a.startsWith("--agent="));
   if (!flag) return null;
@@ -31801,7 +31698,7 @@ async function invite() {
 var import_node_dns = require("dns");
 var import_node_util5 = require("util");
 var import_node_crypto8 = require("crypto");
-var fs58 = __toESM(require("fs"));
+var fs59 = __toESM(require("fs"));
 var path67 = __toESM(require("path"));
 var import_picocolors14 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util5.promisify)(import_node_dns.resolve);
@@ -31860,11 +31757,11 @@ async function checkHealth(apiBase2) {
 function checkConfigDir() {
   const dir = path67.join(require("os").homedir(), ".codeam");
   try {
-    fs58.mkdirSync(dir, { recursive: true, mode: 448 });
+    fs59.mkdirSync(dir, { recursive: true, mode: 448 });
     const probe = path67.join(dir, ".doctor-probe");
-    fs58.writeFileSync(probe, "ok", { mode: 384 });
-    const read2 = fs58.readFileSync(probe, "utf8");
-    fs58.unlinkSync(probe);
+    fs59.writeFileSync(probe, "ok", { mode: 384 });
+    const read2 = fs59.readFileSync(probe, "utf8");
+    fs59.unlinkSync(probe);
     if (read2 !== "ok") throw new Error("write/read round-trip mismatch");
     return {
       id: "config-dir",
@@ -31970,7 +31867,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.56.0" : "0.0.0-dev";
+  const cliVersion = true ? "2.58.0" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -32169,7 +32066,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.56.0" : "unknown";
+  const v = true ? "2.58.0" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }