codeam-cli 2.60.22 → 2.60.24

package/dist/index.js

@@ -778,11 +778,11 @@ function quiet(fn) {
     log.debug(TAG, "ignored sync error", err);
   }
 }
-function rmIfExistsQuiet(path70) {
+function rmIfExistsQuiet(path71) {
   try {
-    fs2.rmSync(path70, { force: true });
+    fs2.rmSync(path71, { force: true });
   } catch (err) {
-    log.debug(TAG, `rmIfExists failed for ${path70}`, err);
+    log.debug(TAG, `rmIfExists failed for ${path71}`, err);
   }
 }
 function killQuiet(target, signal = "SIGTERM") {
@@ -928,9 +928,9 @@ var _default = makeConfig();
 var { getConfig, ensurePluginId, addSession, removeSession, setActiveSession, getActiveSession, getActiveSessionForAgent, setDisable1mContext, clearAll, saveCliConfig, loadCliConfig } = _default;
 
 // src/commands/pair-auto.ts
-var fs53 = __toESM(require("fs"));
-var os42 = __toESM(require("os"));
-var path56 = __toESM(require("path"));
+var fs54 = __toESM(require("fs"));
+var os43 = __toESM(require("os"));
+var path57 = __toESM(require("path"));
 var import_crypto4 = require("crypto");
 
 // src/services/telemetry.service.ts
@@ -966,8 +966,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? (0, import_pat
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path70) {
-  return path70.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path71) {
+  return path71.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 
 // ../../node_modules/@posthog/core/dist/featureFlagUtils.mjs
@@ -3447,9 +3447,9 @@ async function addSourceContext(frames) {
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-function getContextLinesFromFile(path70, ranges, output) {
+function getContextLinesFromFile(path71, ranges, output) {
   return new Promise((resolve7) => {
-    const stream = (0, import_node_fs.createReadStream)(path70);
+    const stream = (0, import_node_fs.createReadStream)(path71);
     const lineReaded = (0, import_node_readline.createInterface)({
       input: stream
     });
@@ -3464,7 +3464,7 @@ function getContextLinesFromFile(path70, ranges, output) {
     let rangeStart = range[0];
     let rangeEnd = range[1];
     function onStreamError() {
-      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path70, 1);
+      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path71, 1);
       lineReaded.close();
       lineReaded.removeAllListeners();
       destroyStreamAndResolve();
@@ -3525,8 +3525,8 @@ function clearLineContext(frame) {
   delete frame.context_line;
   delete frame.post_context;
 }
-function shouldSkipContextLinesForFile(path70) {
-  return path70.startsWith("node:") || path70.endsWith(".min.js") || path70.endsWith(".min.cjs") || path70.endsWith(".min.mjs") || path70.startsWith("data:");
+function shouldSkipContextLinesForFile(path71) {
+  return path71.startsWith("node:") || path71.endsWith(".min.js") || path71.endsWith(".min.cjs") || path71.endsWith(".min.mjs") || path71.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame) {
   if (void 0 !== frame.lineno && frame.lineno > MAX_CONTEXTLINES_LINENO) return true;
@@ -5680,7 +5680,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.60.22" : "0.0.0-dev",
+    cliVersion: true ? "2.60.24" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5861,7 +5861,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.60.22",
+  version: "2.60.24",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6187,6 +6187,28 @@ async function postHeadroomEvent(input) {
     };
   }
 }
+async function postCoderabbitEvent(input) {
+  try {
+    await _transport.postJsonAuthed(
+      `${API_BASE}/api/coderabbit/events`,
+      {
+        sessionId: input.sessionId,
+        pluginId: input.pluginId,
+        type: input.type,
+        payload: input.payload ?? {}
+      },
+      input.pluginAuthToken
+    );
+    return { ok: true };
+  } catch (err) {
+    const e = err;
+    return {
+      ok: false,
+      status: typeof e.statusCode === "number" ? e.statusCode : 0,
+      message: e.message || "unknown"
+    };
+  }
+}
 async function postBeadsEvent(input) {
   try {
     await _transport.postJsonAuthed(
@@ -6932,7 +6954,7 @@ var CommandRelayService = class {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.60.22" ? { ideVersion: "2.60.22" } : {}
+      ..."2.60.24" ? { ideVersion: "2.60.24" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -7159,10 +7181,10 @@ var WINDOWS_LEGACY_JUNCTIONS = [
   /[\\/]Start Menu([\\/]|$)/i,
   /[\\/]Templates([\\/]|$)/i
 ];
-function isUnsafeWindowsWatchRoot(dir, homedir41) {
+function isUnsafeWindowsWatchRoot(dir, homedir42) {
   const norm = (p2) => p2.replace(/\//g, "\\").replace(/\\+$/, "").toLowerCase();
   const cwd = norm(dir);
-  const home = norm(homedir41);
+  const home = norm(homedir42);
   if (cwd === home) return true;
   if (/^[a-z]:$/.test(cwd)) return true;
   const sysRoots = [
@@ -8306,9 +8328,9 @@ function closeAllTerminals() {
 }
 
 // src/commands/start/handlers.ts
-var fs52 = __toESM(require("fs"));
-var os41 = __toESM(require("os"));
-var path55 = __toESM(require("path"));
+var fs53 = __toESM(require("fs"));
+var os42 = __toESM(require("os"));
+var path56 = __toESM(require("path"));
 var import_crypto3 = require("crypto");
 var import_child_process23 = require("child_process");
 
@@ -8371,10 +8393,27 @@ var startCommandSchema = import_zod.z.object({
   // `git restore` from there. `action='approved'` stages the edit,
   // `action='rejected'` discards every worktree change on the file.
   filePath: import_zod.z.string().min(1).max(4096).optional(),
-  action: import_zod.z.enum(["approved", "rejected", "enable", "disable", "status"]).optional(),
+  action: import_zod.z.enum([
+    "approved",
+    "rejected",
+    "enable",
+    "disable",
+    "status",
+    // `coderabbit_configure` — link the reviewer (OAuth or API key) + run a review.
+    "link_oauth",
+    "link_apikey",
+    "review"
+  ]).optional(),
   // `headroom_configure` — savings ingest URL delivered from the session
   // when enabling Headroom on-demand. Bounded to 2048 chars.
   savingsIngestUrl: import_zod.z.string().url().max(2048).optional(),
+  // `coderabbit_configure` (action='link_apikey') — the CodeRabbit API key.
+  apiKey: import_zod.z.string().min(1).max(512).optional(),
+  // `coderabbit_configure` (action='review') — review scope, mirroring the
+  // CLI's `--type` / `--base` / `--dir`.
+  changeSet: import_zod.z.enum(["all", "committed", "uncommitted"]).optional(),
+  base: import_zod.z.string().max(255).optional(),
+  reviewDir: import_zod.z.string().max(1024).optional(),
   // `request_link_credentials` — backend fires this from the
   // heartbeat handler when it notices the user is running an agent
   // they haven't vaulted yet. Also reused by `get_context` /
@@ -11738,10 +11777,10 @@ function buildForPlatform(platform3) {
 var import_node_crypto4 = require("crypto");
 
 // src/agents/claude/resolver.ts
-function buildClaudeLaunch(extraArgs = [], os49 = createOsStrategy()) {
-  const found = os49.findInPath("claude") ?? os49.findInPath("claude-code");
+function buildClaudeLaunch(extraArgs = [], os50 = createOsStrategy()) {
+  const found = os50.findInPath("claude") ?? os50.findInPath("claude-code");
   if (!found) return null;
-  return os49.buildLaunch(found, extraArgs);
+  return os50.buildLaunch(found, extraArgs);
 }
 
 // src/agents/claude/installer.ts
@@ -12331,8 +12370,8 @@ var ClaudeRuntimeStrategy = class {
   meta = getAgent("claude");
   mode = "interactive";
   os;
-  constructor(os49) {
-    this.os = os49;
+  constructor(os50) {
+    this.os = os50;
   }
   /**
    * Claude Code's react-ink TUI enables bracketed-paste mode at
@@ -13112,8 +13151,8 @@ function codexCredentialLocator() {
 function codexLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os49 = createOsStrategy();
-      return os49.findInPath("codex") !== null;
+      const os50 = createOsStrategy();
+      return os50.findInPath("codex") !== null;
     },
     launch() {
       return (0, import_node_child_process4.spawn)("codex", ["login"], { stdio: "inherit" });
@@ -13136,8 +13175,8 @@ var CodexRuntimeStrategy = class {
   meta = getAgent("codex");
   mode = "interactive";
   os;
-  constructor(os49) {
-    this.os = os49;
+  constructor(os50) {
+    this.os = os50;
   }
   async prepareLaunch() {
     let binary = this.os.findInPath("codex");
@@ -13246,12 +13285,12 @@ var CodexRuntimeStrategy = class {
     });
   }
 };
-function resolveNpm(os49) {
-  return os49.id === "win32" ? "npm.cmd" : "npm";
+function resolveNpm(os50) {
+  return os50.id === "win32" ? "npm.cmd" : "npm";
 }
-async function installCodexViaNpm(os49) {
+async function installCodexViaNpm(os50) {
   return new Promise((resolve7, reject) => {
-    const proc = (0, import_node_child_process5.spawn)(resolveNpm(os49), ["install", "-g", "@openai/codex"], {
+    const proc = (0, import_node_child_process5.spawn)(resolveNpm(os50), ["install", "-g", "@openai/codex"], {
       stdio: "inherit"
     });
     proc.on("close", (code) => {
@@ -13268,16 +13307,16 @@ async function installCodexViaNpm(os49) {
     });
   });
 }
-function augmentNpmGlobalBin(os49) {
+function augmentNpmGlobalBin(os50) {
   try {
-    const result = (0, import_node_child_process5.spawnSync)(resolveNpm(os49), ["prefix", "-g"], {
+    const result = (0, import_node_child_process5.spawnSync)(resolveNpm(os50), ["prefix", "-g"], {
       stdio: ["ignore", "pipe", "ignore"]
     });
     if (result.status !== 0) return;
     const prefix = result.stdout.toString().trim();
     if (!prefix) return;
-    const binDir = os49.id === "win32" ? prefix : path24.join(prefix, "bin");
-    os49.augmentPath([binDir]);
+    const binDir = os50.id === "win32" ? prefix : path24.join(prefix, "bin");
+    os50.augmentPath([binDir]);
   } catch {
   }
 }
@@ -13361,9 +13400,9 @@ var import_node_child_process8 = require("child_process");
 // src/agents/coderabbit/installer.ts
 var import_node_child_process6 = require("child_process");
 var INSTALL_URL = "https://cli.coderabbit.ai/install.sh";
-async function ensureCoderabbitInstalled(os49) {
-  if (os49.findInPath("coderabbit")) return true;
-  if (os49.id === "win32") {
+async function ensureCoderabbitInstalled(os50) {
+  if (os50.findInPath("coderabbit")) return true;
+  if (os50.id === "win32") {
     console.error(
       "\n  \u2717 CodeRabbit on Windows requires WSL.\n    Install the CLI inside your WSL distribution\n    (curl -fsSL https://cli.coderabbit.ai/install.sh | sh)\n    then re-run `codeam link coderabbit` from WSL.\n"
     );
@@ -13378,8 +13417,8 @@ async function ensureCoderabbitInstalled(os49) {
     proc.on("error", () => resolve7(false));
   });
   if (!ok) return false;
-  os49.augmentPath([`${os49.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
-  return os49.findInPath("coderabbit") !== null;
+  os50.augmentPath([`${os50.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
+  return os50.findInPath("coderabbit") !== null;
 }
 
 // src/agents/coderabbit/link.ts
@@ -13414,13 +13453,13 @@ function coderabbitCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function coderabbitLoginLauncher(os49) {
+function coderabbitLoginLauncher(os50) {
   return {
     async ensureInstalled() {
-      return ensureCoderabbitInstalled(os49);
+      return ensureCoderabbitInstalled(os50);
     },
     launch() {
-      return (0, import_node_child_process7.spawn)("coderabbit", ["login"], { stdio: "inherit" });
+      return (0, import_node_child_process7.spawn)("coderabbit", ["auth", "login"], { stdio: "inherit" });
     }
   };
 }
@@ -13429,31 +13468,166 @@ function coderabbitLoginLauncher(os49) {
 var HUNK_LINE_RE = /^([^\s:][^:]*?):(\d+)[\s:—-]+(?:\[?(info|warn|warning|error|critical)\]?[:\s—-]+)?(.+)$/i;
 var SEVERITY_MAP = {
   info: "info",
+  note: "info",
+  low: "info",
+  minor: "info",
   warn: "warn",
   warning: "warn",
+  medium: "warn",
+  major: "warn",
   error: "error",
-  critical: "error"
+  critical: "error",
+  high: "error",
+  blocker: "error"
 };
-function parseReview(stdout) {
+function normSeverity(v) {
+  if (typeof v !== "string") return void 0;
+  return SEVERITY_MAP[v.trim().toLowerCase()];
+}
+function pick(obj, keys) {
+  for (const k2 of keys) {
+    if (obj[k2] !== void 0 && obj[k2] !== null) return obj[k2];
+  }
+  return void 0;
+}
+function asString(v) {
+  return typeof v === "string" && v.trim().length > 0 ? v : void 0;
+}
+function pickLine(obj) {
+  const direct = pick(obj, ["line", "start_line", "startLine", "line_number", "lineNumber"]);
+  if (typeof direct === "number") return direct;
+  if (typeof direct === "string" && /^\d+$/.test(direct)) return Number(direct);
+  const range = pick(obj, ["line_range", "lineRange", "range", "lines"]);
+  if (Array.isArray(range) && typeof range[0] === "number") return range[0];
+  if (range && typeof range === "object") {
+    const start2 = pick(range, ["start", "begin", "from"]);
+    if (typeof start2 === "number") return start2;
+    if (start2 && typeof start2 === "object") {
+      const l = start2.line;
+      if (typeof l === "number") return l;
+    }
+  }
+  return void 0;
+}
+function toHunk(raw, groupSeverity) {
+  if (!raw || typeof raw !== "object") return null;
+  const o = raw;
+  const path71 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename"])) ?? asString(pick(o, ["location"])?.path);
+  if (!path71) return null;
+  const message = asString(pick(o, ["comment", "message", "body", "description", "summary", "markdown", "text"])) ?? "";
+  const title = asString(pick(o, ["title", "rule", "category", "check"]));
+  const severity = normSeverity(pick(o, ["severity", "level", "priority", "impact"])) ?? normSeverity(groupSeverity);
+  const locObj = pick(o, ["location"]) ?? o;
+  return {
+    path: path71.trim(),
+    line: pickLine(o) ?? pickLine(locObj),
+    severity,
+    message: (title && message ? `${title}: ${message}` : title || message).trim() || "(no message)"
+  };
+}
+function findingsFrom(value) {
+  const out2 = [];
+  if (!value || typeof value !== "object") return out2;
+  const root = value;
+  const flat = pick(root, ["findings", "comments", "issues", "results", "review_comments", "reviewComments"]);
+  if (Array.isArray(flat)) {
+    for (const f of flat) {
+      const h = toHunk(f);
+      if (h) out2.push(h);
+    }
+  }
+  const grouped = flat && !Array.isArray(flat) ? flat : root;
+  for (const sev of ["critical", "warning", "warn", "error", "info", "note"]) {
+    const bucket = grouped[sev];
+    if (Array.isArray(bucket)) {
+      for (const f of bucket) {
+        const h = toHunk(f, sev);
+        if (h) out2.push(h);
+      }
+    }
+  }
+  return out2;
+}
+function errorFrom(obj) {
+  if (obj.type !== "error") return void 0;
+  return asString(pick(obj, ["message", "error"]));
+}
+function isControlEvent(obj) {
+  return obj.type === "review_context" || obj.type === "status" || obj.type === "progress" || obj.type === "error";
+}
+function parseStructured(stdout) {
+  const trimmed = stdout.trim();
+  if (!trimmed || trimmed[0] !== "{" && trimmed[0] !== "[") return null;
+  try {
+    const doc = JSON.parse(trimmed);
+    const hunks2 = findingsFrom(Array.isArray(doc) ? { findings: doc } : doc);
+    const summary2 = asString(
+      pick(Array.isArray(doc) ? {} : doc, ["summary", "markdown", "report", "overview"])
+    );
+    if (hunks2.length > 0 || summary2) return { hunks: hunks2, summary: summary2 };
+  } catch {
+  }
   const hunks = [];
-  const lines = stdout.split(/\r?\n/);
-  for (const line of lines) {
+  let summary;
+  let error;
+  let sawJson = false;
+  for (const line of trimmed.split(/\r?\n/)) {
+    const l = line.trim();
+    if (!l || l[0] !== "{" && l[0] !== "[") continue;
+    try {
+      const obj = JSON.parse(l);
+      sawJson = true;
+      const rec = Array.isArray(obj) ? {} : obj;
+      error ??= errorFrom(rec);
+      if (isControlEvent(rec)) continue;
+      const found = findingsFrom(Array.isArray(obj) ? { findings: obj } : obj);
+      if (found.length > 0) hunks.push(...found);
+      else {
+        const single = toHunk(obj);
+        if (single) hunks.push(single);
+      }
+      summary ??= asString(pick(rec, ["summary", "markdown", "report"]));
+    } catch {
+    }
+  }
+  return sawJson ? { hunks, summary, error } : null;
+}
+function parsePlain(stdout) {
+  const hunks = [];
+  for (const line of stdout.split(/\r?\n/)) {
     const m = line.match(HUNK_LINE_RE);
     if (!m) continue;
-    const [, path70, lineNo, sevToken, message] = m;
-    if (!path70 || !lineNo || !message) continue;
-    const cleanedMessage = message.trim().replace(/^[*-]\s+/, "");
+    const [, path71, lineNo, sevToken, message] = m;
+    if (!path71 || !lineNo || !message) continue;
     hunks.push({
-      path: path70.trim(),
+      path: path71.trim(),
       line: Number(lineNo),
       severity: sevToken ? SEVERITY_MAP[sevToken.toLowerCase()] : void 0,
-      message: cleanedMessage
+      message: message.trim().replace(/^[*-]\s+/, "")
     });
   }
+  return hunks;
+}
+function severityCounts(hunks) {
+  const c2 = { error: 0, warn: 0, info: 0 };
+  for (const h of hunks) if (h.severity) c2[h.severity] += 1;
+  return c2;
+}
+function parseReview(stdout) {
+  const structured = parseStructured(stdout);
+  const hunks = structured && structured.hunks.length > 0 ? structured.hunks : parsePlain(stdout);
+  const counts = severityCounts(hunks);
+  const markdown = (structured?.summary ?? (hunks.length === 0 && structured?.error ? structured.error : stdout)).trim();
   return {
-    markdown: stdout.trim(),
+    markdown,
     hunks,
-    stats: { linesReviewed: lines.length, hunkCount: hunks.length }
+    stats: {
+      findingCount: hunks.length,
+      critical: counts.error,
+      warning: counts.warn,
+      info: counts.info,
+      ...structured?.error ? { error: structured.error } : {}
+    }
   };
 }
 
@@ -13463,11 +13637,11 @@ var CoderabbitRuntimeStrategy = class {
   meta = getAgent("coderabbit");
   mode = "batch";
   os;
-  constructor(os49) {
-    this.os = os49;
+  constructor(os50) {
+    this.os = os50;
   }
   getDefaultArgs() {
-    return ["review"];
+    return ["review", "--agent"];
   }
   async prepareInvocation(input) {
     const binary = this.os.findInPath(this.meta.binaryName);
@@ -13476,14 +13650,12 @@ var CoderabbitRuntimeStrategy = class {
         `CodeRabbit binary "${this.meta.binaryName}" not on PATH. Run \`codeam link coderabbit\` to install it first.`
       );
     }
-    const args2 = this.getDefaultArgs();
-    if (input.prRef) args2.push("--pr", input.prRef);
-    if (input.files && input.files.length > 0) {
-      args2.push(...input.files);
-    }
-    if (input.prompt) {
-      args2.push("--message", input.prompt);
-    }
+    const args2 = input.structured === false ? ["review", "--plain"] : this.getDefaultArgs();
+    if (input.changeSet) args2.push("--type", input.changeSet);
+    if (input.base) args2.push("--base", input.base);
+    if (input.baseCommit) args2.push("--base-commit", input.baseCommit);
+    if (input.dir) args2.push("--dir", input.dir);
+    if (input.apiKey) args2.push("--api-key", input.apiKey);
     if (input.extraArgs && input.extraArgs.length > 0) {
       args2.push(...input.extraArgs);
     }
@@ -13701,10 +13873,10 @@ function cursorCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function cursorLoginLauncher(os49) {
+function cursorLoginLauncher(os50) {
   return {
     async ensureInstalled() {
-      if (os49.findInPath("cursor-agent")) return true;
+      if (os50.findInPath("cursor-agent")) return true;
       console.error(
         "\n  \u2717 cursor-agent binary not on PATH.\n    Install Cursor (https://cursor.com/) and ensure the CLI\n    plugin is enabled, then re-run `codeam link cursor`.\n"
       );
@@ -13768,15 +13940,14 @@ var CursorRuntimeStrategy = class {
   meta = getAgent("cursor");
   mode = "interactive";
   os;
-  constructor(os49) {
-    this.os = os49;
+  constructor(os50) {
+    this.os = os50;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("cursor-agent");
     if (!binary) {
-      throw new Error(
-        'Cursor Agent CLI ("cursor-agent") is not on PATH.\n    Install Cursor (https://cursor.com/), enable its CLI plugin,\n    then run `codeam pair` again.'
-      );
+      const install = this.os.id === "win32" ? "Cursor Agent CLI (\"cursor-agent\") is not on PATH.\n    Install it with:  irm 'https://cursor.com/install?win32=true' | iex\n    then run `codeam pair` again." : 'Cursor Agent CLI ("cursor-agent") is not on PATH.\n    Install Cursor (https://cursor.com/), enable its CLI plugin,\n    then run `codeam pair` again.';
+      throw new Error(install);
     }
     const sessionId = this.mintChatId(binary);
     if (sessionId) {
@@ -13791,10 +13962,20 @@ var CursorRuntimeStrategy = class {
    * failure. `cursor-agent create-chat` prints a bare UUID and exits 0 (verified
    * on cursor-agent 2026.06.24). Synchronous + bounded so prepareLaunch stays a
    * single deterministic step; a timeout/parse failure just disables pre-mint.
+   *
+   * ⚠️ Windows: `findInPath` resolves `cursor-agent.cmd` (or `.ps1`) via PATHEXT,
+   * and Windows CANNOT spawn a `.cmd`/`.bat`/`.ps1` directly — it needs
+   * `cmd.exe /c` / `powershell -File`. Spawning `binary` raw (as this used to)
+   * failed with EINVAL on Windows → null id → no pre-mint → the baton threw
+   * "agent did not expose a session id after spawn" (Windows-only). Route the
+   * spawn through `os.buildLaunch`, exactly like the TUI launch above, so the
+   * command is wrapped correctly per-platform. On macOS/Linux buildLaunch returns
+   * the bare `{cmd: binary, args: ['create-chat']}` → behaviour unchanged.
    */
   mintChatId(binary) {
     try {
-      const r = (0, import_node_child_process10.spawnSync)(binary, ["create-chat"], {
+      const launch = this.os.buildLaunch(binary, ["create-chat"]);
+      const r = (0, import_node_child_process10.spawnSync)(launch.cmd, launch.args, {
         encoding: "utf8",
         timeout: 2e4,
         stdio: ["ignore", "pipe", "pipe"]
@@ -13976,10 +14157,10 @@ function aiderCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function aiderLoginLauncher(os49) {
+function aiderLoginLauncher(os50) {
   return {
     async ensureInstalled() {
-      if (os49.findInPath("aider")) return true;
+      if (os50.findInPath("aider")) return true;
       console.error(
         "\n  \u2717 aider binary not on PATH.\n    Install Aider:\n      pip install aider-chat\n    then re-run `codeam link aider`.\n"
       );
@@ -13989,7 +14170,7 @@ function aiderLoginLauncher(os49) {
       console.error(
         "\n  Aider has no interactive login flow.\n    Set ANTHROPIC_API_KEY or OPENAI_API_KEY in your shell,\n    or re-run `codeam link aider --api-key=<your-key>`.\n"
       );
-      return (0, import_node_child_process11.spawn)(os49.id === "win32" ? "cmd.exe" : "sh", os49.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
+      return (0, import_node_child_process11.spawn)(os50.id === "win32" ? "cmd.exe" : "sh", os50.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
         stdio: "ignore"
       });
     }
@@ -14061,8 +14242,8 @@ var AiderRuntimeStrategy = class {
   meta = getAgent("aider");
   mode = "interactive";
   os;
-  constructor(os49) {
-    this.os = os49;
+  constructor(os50) {
+    this.os = os50;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("aider");
@@ -14194,8 +14375,8 @@ function geminiCredentialLocator() {
 function geminiLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os49 = createOsStrategy();
-      return os49.findInPath("gemini") !== null;
+      const os50 = createOsStrategy();
+      return os50.findInPath("gemini") !== null;
     },
     launch() {
       return (0, import_node_child_process12.spawn)("gemini", ["auth", "login"], { stdio: "inherit" });
@@ -14385,8 +14566,8 @@ var GeminiRuntimeStrategy = class {
   meta = getAgent("gemini");
   mode = "interactive";
   os;
-  constructor(os49) {
-    this.os = os49;
+  constructor(os50) {
+    this.os = os50;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("gemini");
@@ -14677,15 +14858,14 @@ var KimiRuntimeStrategy = class {
   meta = getAgent("kimi");
   mode = "interactive";
   os;
-  constructor(os49) {
-    this.os = os49;
+  constructor(os50) {
+    this.os = os50;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("kimi");
     if (!binary) {
-      throw new Error(
-        "Kimi Code CLI is not on PATH. Install it with:\n    curl -fsSL https://code.kimi.com/kimi-code/install.sh | bash\n    Then run `codeam pair` again."
-      );
+      const install = this.os.id === "win32" ? "Kimi Code CLI on Windows requires WSL. Install it inside WSL with:\n    curl -fsSL https://code.kimi.com/kimi-code/install.sh | bash\n    then re-run `codeam pair` from WSL." : "Kimi Code CLI is not on PATH. Install it with:\n    curl -fsSL https://code.kimi.com/kimi-code/install.sh | bash\n    Then run `codeam pair` again.";
+      throw new Error(install);
     }
     const launch = this.os.buildLaunch(binary, []);
     return { cmd: launch.cmd, args: launch.args };
@@ -14792,19 +14972,19 @@ var KimiRuntimeStrategy = class {
 
 // src/agents/registry.ts
 var runtimeBuilders = {
-  claude: (os49) => new ClaudeRuntimeStrategy(os49),
-  codex: (os49) => new CodexRuntimeStrategy(os49),
-  coderabbit: (os49) => new CoderabbitRuntimeStrategy(os49),
-  cursor: (os49) => new CursorRuntimeStrategy(os49),
-  aider: (os49) => new AiderRuntimeStrategy(os49),
-  gemini: (os49) => new GeminiRuntimeStrategy(os49),
-  kimi: (os49) => new KimiRuntimeStrategy(os49)
+  claude: (os50) => new ClaudeRuntimeStrategy(os50),
+  codex: (os50) => new CodexRuntimeStrategy(os50),
+  coderabbit: (os50) => new CoderabbitRuntimeStrategy(os50),
+  cursor: (os50) => new CursorRuntimeStrategy(os50),
+  aider: (os50) => new AiderRuntimeStrategy(os50),
+  gemini: (os50) => new GeminiRuntimeStrategy(os50),
+  kimi: (os50) => new KimiRuntimeStrategy(os50)
 };
 var deployBuilders = {
   claude: () => new ClaudeDeployStrategy(),
   codex: () => new CodexDeployStrategy()
 };
-function createAgentStrategy(agent, os49 = createOsStrategy()) {
+function createAgentStrategy(agent, os50 = createOsStrategy()) {
   if (!AGENT_REGISTRY[agent]?.enabled) {
     throw new Error(
       `Agent "${agent}" is not supported in this codeam-cli version. Upgrade with 'npm i -g codeam-cli@latest'.`
@@ -14814,10 +14994,10 @@ function createAgentStrategy(agent, os49 = createOsStrategy()) {
   if (!build) {
     throw new Error(`No runtime strategy registered for agent "${agent}"`);
   }
-  return build(os49);
+  return build(os50);
 }
-function createInteractiveAgentStrategy(agent, os49 = createOsStrategy()) {
-  const s = createAgentStrategy(agent, os49);
+function createInteractiveAgentStrategy(agent, os50 = createOsStrategy()) {
+  const s = createAgentStrategy(agent, os50);
   if (s.mode !== "interactive") {
     throw new Error(
       `Agent "${agent}" is a batch agent; use createAgentStrategy + .runOneShot for one-shot reviews.`
@@ -15216,21 +15396,261 @@ async function linkDryRunPreflight(ctx) {
   process.exit(1);
 }
 
+// src/agents/coderabbit/configure.ts
+var import_node_child_process14 = require("child_process");
+
+// src/agents/coderabbit/oauth.ts
+var fs31 = __toESM(require("fs"));
+var os27 = __toESM(require("os"));
+var path35 = __toESM(require("path"));
+function parseCoderabbitAuthEvent(line) {
+  const l = line.trim();
+  if (!l || l[0] !== "{") return null;
+  let rec;
+  try {
+    rec = JSON.parse(l);
+  } catch {
+    return null;
+  }
+  if (rec.type === "error" || rec.status === "authentication_failed" || rec.status === "automatic_login_failed") {
+    return { kind: "failed", message: rec.message ?? "CodeRabbit authentication failed" };
+  }
+  switch (rec.status) {
+    case "starting_login":
+      return { kind: "starting" };
+    case "awaiting_browser_auth":
+      return rec.authUrl ? { kind: "awaiting_browser", authUrl: rec.authUrl, fallbackAuthUrl: rec.fallbackAuthUrl } : { kind: "other", status: rec.status };
+    case "processing_callback":
+      return { kind: "processing_callback" };
+    case "fetching_user":
+      return { kind: "fetching_user" };
+    case "authenticated":
+      return {
+        kind: "authenticated",
+        user: rec.user ? { name: rec.user.name, email: rec.user.email, username: rec.user.username ?? rec.user.user_name } : void 0,
+        authType: rec.authType,
+        provider: rec.provider,
+        org: rec.currentOrg?.name
+      };
+    case "not_authenticated":
+      return { kind: "unauthenticated" };
+    default:
+      return rec.status ? { kind: "other", status: rec.status } : null;
+  }
+}
+function runCoderabbitOAuthLogin(deps) {
+  const timeoutMs = deps.timeoutMs ?? 18e4;
+  return new Promise((resolve7) => {
+    let settled = false;
+    let stdout = "";
+    let last = null;
+    const finish = (r) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      try {
+        child.kill("SIGKILL");
+      } catch {
+      }
+      resolve7(r);
+    };
+    let child;
+    try {
+      child = deps.spawn("coderabbit", ["auth", "login", "--agent"]);
+    } catch (err) {
+      resolve7({ ok: false, error: err instanceof Error ? err.message : "spawn failed" });
+      return;
+    }
+    const timer = setTimeout(
+      () => finish({ ok: false, error: "CodeRabbit login timed out" }),
+      timeoutMs
+    );
+    const onLine = (line) => {
+      const e = parseCoderabbitAuthEvent(line);
+      if (!e) return;
+      deps.onEvent?.(e);
+      if (e.kind === "authenticated") {
+        last = e;
+        finish({ ok: true, user: e.user, authType: e.authType, provider: e.provider, org: e.org });
+      } else if (e.kind === "failed") {
+        finish({ ok: false, error: e.message });
+      }
+    };
+    child.stdout?.on("data", (b) => {
+      stdout += b.toString();
+      let nl;
+      while ((nl = stdout.indexOf("\n")) >= 0) {
+        onLine(stdout.slice(0, nl));
+        stdout = stdout.slice(nl + 1);
+      }
+    });
+    child.on("error", (err) => finish({ ok: false, error: err.message }));
+    child.on("exit", () => {
+      if (stdout.trim()) onLine(stdout);
+      finish(
+        last ? { ok: true, user: last.user, authType: last.authType, provider: last.provider, org: last.org } : { ok: false, error: "CodeRabbit login exited before authenticating" }
+      );
+    });
+  });
+}
+function coderabbitDir(home) {
+  return path35.join(home ?? os27.homedir(), ".coderabbit");
+}
+var NON_CREDENTIAL = /* @__PURE__ */ new Set(["doctor.json", "machine-id"]);
+function snapshotCredentialDir(home) {
+  const dir = coderabbitDir(home);
+  const snap = {};
+  let entries;
+  try {
+    entries = fs31.readdirSync(dir, { withFileTypes: true });
+  } catch {
+    return snap;
+  }
+  for (const e of entries) {
+    if (!e.isFile() || NON_CREDENTIAL.has(e.name)) continue;
+    try {
+      const st3 = fs31.statSync(path35.join(dir, e.name));
+      snap[e.name] = `${st3.mtimeMs}:${st3.size}`;
+    } catch {
+    }
+  }
+  return snap;
+}
+function diffCapturedCredential(before, home) {
+  const dir = coderabbitDir(home);
+  const after = snapshotCredentialDir(home);
+  let best = null;
+  for (const [file, fp] of Object.entries(after)) {
+    if (before[file] === fp) continue;
+    const mtime = Number(fp.split(":")[0]);
+    if (!best || mtime > best.mtime) best = { file, mtime };
+  }
+  if (!best) return null;
+  try {
+    return { file: best.file, contents: fs31.readFileSync(path35.join(dir, best.file), "utf8") };
+  } catch {
+    return null;
+  }
+}
+
+// src/agents/coderabbit/configure.ts
+function defaultIsLoggedIn() {
+  const r = (0, import_node_child_process14.spawnSync)("coderabbit", ["auth", "status", "--agent"], {
+    encoding: "utf8",
+    timeout: 15e3
+  });
+  if (r.error || typeof r.stdout !== "string") return false;
+  for (const line of r.stdout.split("\n")) {
+    const l = line.trim();
+    if (!l.startsWith("{")) continue;
+    try {
+      const rec = JSON.parse(l);
+      if (rec.authenticated === true || rec.status === "authenticated") return true;
+      if (rec.authenticated === false || rec.status === "not_authenticated") return false;
+    } catch {
+    }
+  }
+  return false;
+}
+async function configureCoderabbit(input, deps = {}) {
+  const os50 = deps.os ?? createOsStrategy();
+  const ensureInstalled = deps.ensureInstalled ?? ensureCoderabbitInstalled;
+  const isLoggedIn = deps.isLoggedIn ?? defaultIsLoggedIn;
+  const runOAuth = deps.runOAuthLogin ?? runCoderabbitOAuthLogin;
+  const snapshot = deps.snapshotDir ?? (() => snapshotCredentialDir());
+  const capture2 = deps.captureCredential ?? ((b) => diffCapturedCredential(b));
+  const installed = os50.findInPath("coderabbit") !== null;
+  const base = () => ({
+    action: input.action,
+    supported: true,
+    installed: os50.findInPath("coderabbit") !== null,
+    loggedIn: false
+  });
+  if (input.action === "status") {
+    const res2 = base();
+    res2.loggedIn = res2.installed ? isLoggedIn() : false;
+    res2.linked = res2.loggedIn;
+    return res2;
+  }
+  if (input.action === "link_apikey") {
+    const res2 = base();
+    const key = (input.apiKey ?? "").trim();
+    if (!key) return { ...res2, error: "No API key provided" };
+    const stored = deps.uploadCredential ? await deps.uploadCredential("api_key", key) : false;
+    return { ...res2, linked: stored, error: stored ? void 0 : "Failed to store API key" };
+  }
+  if (input.action === "link_oauth") {
+    const res2 = base();
+    if (!installed) {
+      const ok = await ensureInstalled(os50);
+      res2.installed = ok;
+      if (!ok) return { ...res2, error: "CodeRabbit CLI could not be installed" };
+    }
+    const before = snapshot();
+    const login = await runOAuth({
+      spawn: (cmd, args2) => (0, import_node_child_process14.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"] }),
+      onEvent: deps.onEvent
+    });
+    if (!login.ok) {
+      return { ...res2, loggedIn: false, linked: false, error: login.error ?? "CodeRabbit login failed" };
+    }
+    const cred = capture2(before);
+    if (!cred) {
+      return {
+        ...res2,
+        installed: true,
+        loggedIn: true,
+        linked: false,
+        user: login.user,
+        provider: login.provider,
+        org: login.org,
+        error: "Signed in, but the credential could not be captured for reuse"
+      };
+    }
+    const blob = JSON.stringify({ file: cred.file, contents: cred.contents });
+    const stored = deps.uploadCredential ? await deps.uploadCredential("oauth", blob) : false;
+    return {
+      ...res2,
+      installed: true,
+      loggedIn: true,
+      linked: stored,
+      user: login.user,
+      provider: login.provider,
+      org: login.org,
+      ...stored ? {} : { error: "Signed in, but storing the credential failed" }
+    };
+  }
+  const res = base();
+  if (!res.installed) {
+    const ok = await ensureInstalled(os50);
+    res.installed = ok;
+    if (!ok) return { ...res, error: "CodeRabbit CLI is not installed" };
+  }
+  if (!deps.runReview) return { ...res, error: "No reviewer available" };
+  const out2 = await deps.runReview(input.review ?? {});
+  return {
+    ...res,
+    loggedIn: true,
+    review: { markdown: out2.markdown, hunks: out2.hunks, stats: out2.stats },
+    ...out2.stats && typeof out2.stats.error === "string" ? { error: String(out2.stats.error) } : {}
+  };
+}
+
 // src/commands/host-agent.ts
-var import_node_child_process21 = require("child_process");
-var os34 = __toESM(require("os"));
-var fs40 = __toESM(require("fs"));
-var path42 = __toESM(require("path"));
+var import_node_child_process22 = require("child_process");
+var os35 = __toESM(require("os"));
+var fs41 = __toESM(require("fs"));
+var path43 = __toESM(require("path"));
 
 // src/commands/host/host-client.ts
-var fs32 = __toESM(require("fs"));
-var os28 = __toESM(require("os"));
-var path35 = __toESM(require("path"));
+var fs33 = __toESM(require("fs"));
+var os29 = __toESM(require("os"));
+var path36 = __toESM(require("path"));
 
 // src/lib/restrict-to-owner.ts
 var import_node_fs5 = __toESM(require("fs"));
 var import_node_os4 = __toESM(require("os"));
-var import_node_child_process14 = require("child_process");
+var import_node_child_process15 = require("child_process");
 var BROAD_WINDOWS_SIDS = [
   "*S-1-1-0",
   "*S-1-5-11",
@@ -15242,7 +15662,7 @@ function restrictToOwner(filePath) {
   try {
     if (process.platform === "win32") {
       const username = import_node_os4.default.userInfo().username;
-      (0, import_node_child_process14.execFileSync)(
+      (0, import_node_child_process15.execFileSync)(
         "icacls",
         [
           filePath,
@@ -15264,7 +15684,7 @@ function restrictToOwner(filePath) {
 function sampleCpuTimes() {
   let idle = 0;
   let total = 0;
-  for (const cpu of os28.cpus()) {
+  for (const cpu of os29.cpus()) {
     const t2 = cpu.times;
     idle += t2.idle;
     total += t2.user + t2.nice + t2.sys + t2.idle + t2.irq;
@@ -15283,8 +15703,8 @@ var MetricsCollector = class {
     const prev = this.prevCpu;
     this.prevCpu = current;
     if (!prev) {
-      const cores = os28.cpus().length || 1;
-      const proxy = os28.loadavg()[0] / cores * 100;
+      const cores = os29.cpus().length || 1;
+      const proxy = os29.loadavg()[0] / cores * 100;
       return Math.min(100, Math.max(0, Math.round(proxy)));
     }
     const idleDelta = current.idle - prev.idle;
@@ -15297,8 +15717,8 @@ var MetricsCollector = class {
   collect() {
     return {
       cpuPct: this.cpuPct(),
-      ramUsedMb: Math.round((os28.totalmem() - os28.freemem()) / 1048576),
-      ramTotalMb: Math.round(os28.totalmem() / 1048576),
+      ramUsedMb: Math.round((os29.totalmem() - os29.freemem()) / 1048576),
+      ramTotalMb: Math.round(os29.totalmem() / 1048576),
       latencyMs: this.lastLatencyMs
     };
   }
@@ -15307,19 +15727,19 @@ function apiBase() {
   return process.env.CODEAM_API_URL ?? resolveApiBaseUrl();
 }
 function hostIdentityPath() {
-  return path35.join(os28.homedir(), ".codeam", "host-agent.json");
+  return path36.join(os29.homedir(), ".codeam", "host-agent.json");
 }
 function collectOsInfo() {
   return {
-    distro: os28.platform(),
-    arch: os28.arch(),
-    kernel: os28.release(),
+    distro: os29.platform(),
+    arch: os29.arch(),
+    kernel: os29.release(),
     nodeVersion: process.versions.node
   };
 }
 function loadHostIdentity() {
   try {
-    const raw = fs32.readFileSync(hostIdentityPath(), "utf8");
+    const raw = fs33.readFileSync(hostIdentityPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null && typeof parsed.hostId === "string" && typeof parsed.hostToken === "string" && typeof parsed.controlPluginId === "string") {
       const p2 = parsed;
@@ -15332,8 +15752,8 @@ function loadHostIdentity() {
 }
 function saveHostIdentity(identity) {
   const file = hostIdentityPath();
-  fs32.mkdirSync(path35.dirname(file), { recursive: true, mode: 448 });
-  fs32.writeFileSync(file, JSON.stringify(identity, null, 2), {
+  fs33.mkdirSync(path36.dirname(file), { recursive: true, mode: 448 });
+  fs33.writeFileSync(file, JSON.stringify(identity, null, 2), {
     encoding: "utf8",
     mode: 384
   });
@@ -15378,7 +15798,7 @@ function isTerminalEnrollError(err) {
 }
 function deleteHostIdentity() {
   try {
-    fs32.rmSync(hostIdentityPath(), { force: true });
+    fs33.rmSync(hostIdentityPath(), { force: true });
   } catch {
   }
 }
@@ -15501,17 +15921,17 @@ async function reportDeployProgress(auth, deployId, step, message, sessionId) {
 }
 
 // src/commands/host/workspace.ts
-var fs33 = __toESM(require("fs"));
-var os29 = __toESM(require("os"));
-var path36 = __toESM(require("path"));
-var import_node_child_process15 = require("child_process");
+var fs34 = __toESM(require("fs"));
+var os30 = __toESM(require("os"));
+var path37 = __toESM(require("path"));
+var import_node_child_process16 = require("child_process");
 var import_node_util4 = require("util");
-var execFileP4 = (0, import_node_util4.promisify)(import_node_child_process15.execFile);
+var execFileP4 = (0, import_node_util4.promisify)(import_node_child_process16.execFile);
 function isAbsolutePathTarget(target) {
-  return path36.isAbsolute(target);
+  return path37.isAbsolute(target);
 }
 function selfHostedWorkspaceRoot() {
-  return path36.join(os29.homedir(), ".codeam", "self-hosted");
+  return path37.join(os30.homedir(), ".codeam", "self-hosted");
 }
 function nonInteractiveGitEnv() {
   return {
@@ -15564,13 +15984,13 @@ async function fetchGithubIdentity(token) {
 async function configureGitCredentials(dest, repoRef, cloneToken) {
   const gh = githubOwnerRepo(repoRef.trim());
   if (!gh || !cloneToken) return;
-  const credFile = path36.join(dest, ".git", "codeam-credentials");
-  fs33.writeFileSync(credFile, `https://x-access-token:${cloneToken}@github.com
+  const credFile = path37.join(dest, ".git", "codeam-credentials");
+  fs34.writeFileSync(credFile, `https://x-access-token:${cloneToken}@github.com
 `, { mode: 384 });
   restrictToOwner(credFile);
   const env = nonInteractiveGitEnv();
   const git2 = (args2) => execFileP4("git", ["-C", dest, ...args2], { timeout: 3e4, env });
-  const credFilePosix = credFile.split(path36.sep).join("/");
+  const credFilePosix = credFile.split(path37.sep).join("/");
   await git2(["config", "--local", "--replace-all", "credential.helper", ""]).catch(() => {
   });
   await git2([
@@ -15606,17 +16026,17 @@ function maskToken(text, cloneToken) {
 }
 async function prepareWorkspace(repoOrPath, deployId, cloneToken) {
   if (isAbsolutePathTarget(repoOrPath)) {
-    if (!fs33.existsSync(repoOrPath)) {
+    if (!fs34.existsSync(repoOrPath)) {
       throw new Error(`deploy target path does not exist: ${repoOrPath}`);
     }
     return repoOrPath;
   }
-  const dest = path36.join(selfHostedWorkspaceRoot(), deployId);
-  if (fs33.existsSync(path36.join(dest, ".git"))) {
+  const dest = path37.join(selfHostedWorkspaceRoot(), deployId);
+  if (fs34.existsSync(path37.join(dest, ".git"))) {
     if (cloneToken) await configureGitCredentials(dest, repoOrPath, cloneToken);
     return dest;
   }
-  fs33.mkdirSync(selfHostedWorkspaceRoot(), { recursive: true, mode: 448 });
+  fs34.mkdirSync(selfHostedWorkspaceRoot(), { recursive: true, mode: 448 });
   const cloneUrl = repoCloneUrl(repoOrPath, cloneToken);
   try {
     await execFileP4("git", ["clone", "--depth", "1", cloneUrl, dest], {
@@ -15633,9 +16053,9 @@ async function prepareWorkspace(repoOrPath, deployId, cloneToken) {
 }
 
 // src/commands/host/agent-provisioning.ts
-var fs34 = __toESM(require("fs"));
-var os30 = __toESM(require("os"));
-var path37 = __toESM(require("path"));
+var fs35 = __toESM(require("fs"));
+var os31 = __toESM(require("os"));
+var path38 = __toESM(require("path"));
 var PUBLIC_TO_INTERNAL_AGENT = {
   claude_code: "claude",
   claude: "claude",
@@ -15651,22 +16071,22 @@ function toInternalAgentId(publicAgentId) {
   return PUBLIC_TO_INTERNAL_AGENT[publicAgentId] ?? null;
 }
 function ensureDir(dir) {
-  fs34.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs35.mkdirSync(dir, { recursive: true, mode: 448 });
 }
 function writeFile0600(filePath, contents) {
-  ensureDir(path37.dirname(filePath));
-  fs34.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
+  ensureDir(path38.dirname(filePath));
+  fs35.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
   restrictToOwner(filePath);
 }
 function rmIfExists(filePath) {
   try {
-    fs34.rmSync(filePath, { force: true });
+    fs35.rmSync(filePath, { force: true });
   } catch {
   }
 }
 var claudeProvisioner = {
   write(auth, home) {
-    const credentialsJson = path37.join(home, ".claude", ".credentials.json");
+    const credentialsJson = path38.join(home, ".claude", ".credentials.json");
     if (auth.kind === "api_key") {
       rmIfExists(credentialsJson);
       return { ANTHROPIC_API_KEY: auth.value };
@@ -15678,8 +16098,8 @@ var claudeProvisioner = {
     } else {
       rmIfExists(credentialsJson);
     }
-    const claudeJson = path37.join(home, ".claude.json");
-    if (!fs34.existsSync(claudeJson)) {
+    const claudeJson = path38.join(home, ".claude.json");
+    if (!fs35.existsSync(claudeJson)) {
       writeFile0600(
         claudeJson,
         JSON.stringify({ hasCompletedOnboarding: true, customApiKeyResponses: { approved: [] } })
@@ -15690,7 +16110,7 @@ var claudeProvisioner = {
 };
 var codexProvisioner = {
   write(auth, home) {
-    const authJson = path37.join(home, ".codex", "auth.json");
+    const authJson = path38.join(home, ".codex", "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { OPENAI_API_KEY: auth.value };
@@ -15701,8 +16121,8 @@ var codexProvisioner = {
 };
 var geminiProvisioner = {
   write(auth, home) {
-    const settingsJson = path37.join(home, ".gemini", "settings.json");
-    const oauthCreds = path37.join(home, ".gemini", "oauth_creds.json");
+    const settingsJson = path38.join(home, ".gemini", "settings.json");
+    const oauthCreds = path38.join(home, ".gemini", "oauth_creds.json");
     if (auth.kind === "api_key") {
       rmIfExists(oauthCreds);
       writeFile0600(settingsJson, '{"security":{"auth":{"selectedType":"gemini-api-key"}}}');
@@ -15715,7 +16135,7 @@ var geminiProvisioner = {
 };
 var cursorProvisioner = {
   write(auth, home) {
-    const authJson = path37.join(home, ".config", "cursor", "auth.json");
+    const authJson = path38.join(home, ".config", "cursor", "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { CURSOR_API_KEY: auth.value };
@@ -15741,8 +16161,8 @@ var cursorProvisioner = {
 var kimiProvisioner = {
   write(auth, home) {
     const credentialsFiles = [
-      path37.join(home, ".kimi", "credentials", "kimi-code.json"),
-      path37.join(home, ".kimi-code", "credentials", "kimi-code.json")
+      path38.join(home, ".kimi", "credentials", "kimi-code.json"),
+      path38.join(home, ".kimi-code", "credentials", "kimi-code.json")
     ];
     if (auth.kind === "api_key") {
       credentialsFiles.forEach(rmIfExists);
@@ -15752,12 +16172,38 @@ var kimiProvisioner = {
     return {};
   }
 };
+var coderabbitProvisioner = {
+  write(auth, home) {
+    const dir = path38.join(home, ".coderabbit");
+    const authJson = path38.join(dir, "auth.json");
+    if (auth.kind === "api_key") {
+      rmIfExists(authJson);
+      return { CODERABBIT_API_KEY: auth.value };
+    }
+    const value = auth.value.trim();
+    let file = "auth.json";
+    let contents = value;
+    if (value.startsWith("{")) {
+      try {
+        const parsed = JSON.parse(value);
+        if (typeof parsed.file === "string" && typeof parsed.contents === "string") {
+          file = path38.basename(parsed.file);
+          contents = parsed.contents;
+        }
+      } catch {
+      }
+    }
+    writeFile0600(path38.join(dir, file), contents);
+    return {};
+  }
+};
 var PROVISIONERS = {
   claude: claudeProvisioner,
   kimi: kimiProvisioner,
   codex: codexProvisioner,
   gemini: geminiProvisioner,
-  cursor: cursorProvisioner
+  cursor: cursorProvisioner,
+  coderabbit: coderabbitProvisioner
 };
 var UnsupportedAgentError = class extends Error {
   agentId;
@@ -15767,7 +16213,7 @@ var UnsupportedAgentError = class extends Error {
     this.agentId = agentId;
   }
 };
-function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os30.homedir()) {
+function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os31.homedir()) {
   const internal = toInternalAgentId(publicAgentId);
   if (!internal) throw new UnsupportedAgentError(publicAgentId);
   const provisioner = PROVISIONERS[internal];
@@ -15776,12 +16222,12 @@ function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os30.homedir(
 }
 
 // src/commands/host/git-tooling.ts
-var import_node_child_process16 = require("child_process");
-var fs35 = __toESM(require("fs"));
-var os31 = __toESM(require("os"));
-var path38 = __toESM(require("path"));
+var import_node_child_process17 = require("child_process");
+var fs36 = __toESM(require("fs"));
+var os32 = __toESM(require("os"));
+var path39 = __toESM(require("path"));
 function codeamBinDir() {
-  return process.env.CODEAM_BIN_DIR ?? path38.join(os31.homedir(), ".codeam", "bin");
+  return process.env.CODEAM_BIN_DIR ?? path39.join(os32.homedir(), ".codeam", "bin");
 }
 var FALLBACK_GH_VERSION = "2.62.0";
 var RELEASE_API = "https://api.github.com/repos/cli/cli/releases/latest";
@@ -15813,7 +16259,7 @@ async function download(url, dest) {
     const res = await fetch(url, { headers: { "User-Agent": "codeam-cli" } });
     if (!res.ok || !res.body) return false;
     const buf = Buffer.from(await res.arrayBuffer());
-    fs35.writeFileSync(dest, buf);
+    fs36.writeFileSync(dest, buf);
     return true;
   } catch {
     return false;
@@ -15836,8 +16282,8 @@ async function ensureGhCli(runner, token, deps = {}) {
     const version3 = await resolveVersionFn(token);
     const asset = `gh_${version3}_${osToken}_${arch2}`;
     const url = `https://github.com/cli/cli/releases/download/v${version3}/${asset}.${ext}`;
-    const tmpRoot = fs35.mkdtempSync(path38.join(os31.tmpdir(), "codeam-gh-"));
-    const archive = path38.join(tmpRoot, `${asset}.${ext}`);
+    const tmpRoot = fs36.mkdtempSync(path39.join(os32.tmpdir(), "codeam-gh-"));
+    const archive = path39.join(tmpRoot, `${asset}.${ext}`);
     if (!await downloadFn(url, archive)) {
       log.warn("host-agent", "gh download failed \u2014 skipping (git pull/push still work via the credential helper)");
       return null;
@@ -15847,16 +16293,16 @@ async function ensureGhCli(runner, token, deps = {}) {
       log.warn("host-agent", `gh archive extraction failed (code=${String(extract.code)}) \u2014 skipping`);
       return null;
     }
-    const extractedBin = path38.join(tmpRoot, asset, "bin", binaryName);
-    if (!fs35.existsSync(extractedBin)) {
+    const extractedBin = path39.join(tmpRoot, asset, "bin", binaryName);
+    if (!fs36.existsSync(extractedBin)) {
       log.warn("host-agent", "gh binary not found in the extracted archive \u2014 skipping");
       return null;
     }
     const binDir = codeamBinDir();
-    fs35.mkdirSync(binDir, { recursive: true });
-    const target = path38.join(binDir, binaryName);
-    fs35.copyFileSync(extractedBin, target);
-    fs35.chmodSync(target, 493);
+    fs36.mkdirSync(binDir, { recursive: true });
+    const target = path39.join(binDir, binaryName);
+    fs36.copyFileSync(extractedBin, target);
+    fs36.chmodSync(target, 493);
     log.info("host-agent", `gh installed to ${target} (v${version3})`);
     return target;
   } catch (e) {
@@ -15890,7 +16336,7 @@ var defaultGitToolingRunner = {
   which(cmd) {
     try {
       const probe = process.platform === "win32" ? "where" : "which";
-      (0, import_node_child_process16.execFileSync)(probe, [cmd], { stdio: "ignore" });
+      (0, import_node_child_process17.execFileSync)(probe, [cmd], { stdio: "ignore" });
       return true;
     } catch {
       return false;
@@ -15898,7 +16344,7 @@ var defaultGitToolingRunner = {
   },
   run(cmd, args2, opts = {}) {
     return new Promise((resolve7) => {
-      const child = (0, import_node_child_process16.spawn)(cmd, args2, {
+      const child = (0, import_node_child_process17.spawn)(cmd, args2, {
         stdio: [opts.input !== void 0 ? "pipe" : "ignore", "ignore", "pipe"]
       });
       let stderr = "";
@@ -16052,12 +16498,12 @@ var HeadroomStatsReporter = class {
 };
 
 // src/commands/host/os-packages.ts
-var import_node_child_process17 = require("child_process");
+var import_node_child_process18 = require("child_process");
 var PM_INSTALL_TIMEOUT_MS = 18e4;
 var defaultHeadroomRunner = {
   which(cmd) {
     try {
-      (0, import_node_child_process17.execFileSync)("which", [cmd], { stdio: "ignore" });
+      (0, import_node_child_process18.execFileSync)("which", [cmd], { stdio: "ignore" });
       return true;
     } catch {
       return false;
@@ -16066,7 +16512,7 @@ var defaultHeadroomRunner = {
   run(cmd, args2, opts = {}) {
     return new Promise((resolve7) => {
       const spawnEnv = opts.env ?? process.env;
-      const child = (0, import_node_child_process17.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"], env: spawnEnv });
+      const child = (0, import_node_child_process18.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"], env: spawnEnv });
       let stderrBuf = "";
       let stdoutBuf = "";
       let settled = false;
@@ -16343,23 +16789,23 @@ async function ensureModernPython(runner) {
 }
 
 // src/commands/host/headroom-bootstrap.ts
-var fs37 = __toESM(require("fs"));
-var path40 = __toESM(require("path"));
+var fs38 = __toESM(require("fs"));
+var path41 = __toESM(require("path"));
 
 // src/commands/host/headroom-config.ts
-var fs36 = __toESM(require("fs"));
-var os32 = __toESM(require("os"));
-var path39 = __toESM(require("path"));
+var fs37 = __toESM(require("fs"));
+var os33 = __toESM(require("os"));
+var path40 = __toESM(require("path"));
 function headroomConfigPath() {
-  return path39.join(os32.homedir(), ".codeam", "headroom-config.json");
+  return path40.join(os33.homedir(), ".codeam", "headroom-config.json");
 }
 function persistHeadroomConfig(config) {
   try {
     const file = headroomConfigPath();
-    fs36.mkdirSync(path39.dirname(file), { recursive: true, mode: 448 });
+    fs37.mkdirSync(path40.dirname(file), { recursive: true, mode: 448 });
     const tmp = `${file}.tmp-${process.pid}`;
-    fs36.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
-    fs36.renameSync(tmp, file);
+    fs37.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
+    fs37.renameSync(tmp, file);
     restrictToOwner(file);
   } catch (err) {
     log.warn(
@@ -16369,21 +16815,21 @@ function persistHeadroomConfig(config) {
   }
 }
 function agentSettingsPath(kind) {
-  const home = os32.homedir();
-  if (kind === "claude") return path39.join(home, ".claude", "settings.json");
-  if (kind === "codex") return path39.join(home, ".codex", "auth.json");
-  if (kind === "copilot") return path39.join(home, ".config", "github-copilot", "hosts.json");
+  const home = os33.homedir();
+  if (kind === "claude") return path40.join(home, ".claude", "settings.json");
+  if (kind === "codex") return path40.join(home, ".codex", "auth.json");
+  if (kind === "copilot") return path40.join(home, ".config", "github-copilot", "hosts.json");
   return null;
 }
 function backupAgentHeadroomConfig(kind) {
   const src = agentSettingsPath(kind);
   if (!src) return;
   try {
-    if (!fs36.existsSync(src)) return;
-    const dest = path39.join(os32.homedir(), ".codeam", `headroom-backup-${kind}.json`);
-    fs36.mkdirSync(path39.dirname(dest), { recursive: true, mode: 448 });
-    fs36.copyFileSync(src, dest);
-    fs36.chmodSync(dest, 384);
+    if (!fs37.existsSync(src)) return;
+    const dest = path40.join(os33.homedir(), ".codeam", `headroom-backup-${kind}.json`);
+    fs37.mkdirSync(path40.dirname(dest), { recursive: true, mode: 448 });
+    fs37.copyFileSync(src, dest);
+    fs37.chmodSync(dest, 384);
     log.info("host-agent", `headroom config backup: ${src} \u2192 ${dest}`);
   } catch (err) {
     log.warn(
@@ -16395,12 +16841,12 @@ function backupAgentHeadroomConfig(kind) {
 function restoreAgentHeadroomConfig(kind) {
   const dest = agentSettingsPath(kind);
   if (!dest) return false;
-  const src = path39.join(os32.homedir(), ".codeam", `headroom-backup-${kind}.json`);
-  if (!fs36.existsSync(src)) return false;
+  const src = path40.join(os33.homedir(), ".codeam", `headroom-backup-${kind}.json`);
+  if (!fs37.existsSync(src)) return false;
   try {
-    fs36.mkdirSync(path39.dirname(dest), { recursive: true, mode: 448 });
-    fs36.copyFileSync(src, dest);
-    fs36.chmodSync(dest, 384);
+    fs37.mkdirSync(path40.dirname(dest), { recursive: true, mode: 448 });
+    fs37.copyFileSync(src, dest);
+    fs37.chmodSync(dest, 384);
     log.info("host-agent", `headroom config restored: ${src} \u2192 ${dest}`);
     return true;
   } catch (err) {
@@ -16413,7 +16859,7 @@ function restoreAgentHeadroomConfig(kind) {
 }
 function readHeadroomChildEnv() {
   try {
-    const raw = fs36.readFileSync(headroomConfigPath(), "utf8");
+    const raw = fs37.readFileSync(headroomConfigPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed !== "object" || parsed === null) return {};
     const o = parsed;
@@ -16449,37 +16895,37 @@ function bundledClaudeBinDir() {
   const roots = /* @__PURE__ */ new Set();
   let dir = __dirname;
   for (let i = 0; i < 6; i++) {
-    roots.add(path40.join(dir, "node_modules"));
-    const parent = path40.dirname(dir);
+    roots.add(path41.join(dir, "node_modules"));
+    const parent = path41.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
   try {
     const main2 = require.resolve("@anthropic-ai/claude-agent-sdk");
-    const marker = `${path40.sep}@anthropic-ai${path40.sep}`;
+    const marker = `${path41.sep}@anthropic-ai${path41.sep}`;
     const idx = main2.lastIndexOf(marker);
     if (idx !== -1) roots.add(main2.slice(0, idx));
   } catch {
   }
   for (const nm of roots) {
-    const atAnthropic = path40.join(nm, "@anthropic-ai");
+    const atAnthropic = path41.join(nm, "@anthropic-ai");
     let entries;
     try {
-      entries = fs37.readdirSync(atAnthropic);
+      entries = fs38.readdirSync(atAnthropic);
     } catch {
       continue;
     }
     for (const entry of entries) {
       if (!entry.startsWith("claude-agent-sdk-")) continue;
-      const bin = path40.join(atAnthropic, entry, "claude");
-      if (fs37.existsSync(bin)) return path40.dirname(bin);
+      const bin = path41.join(atAnthropic, entry, "claude");
+      if (fs38.existsSync(bin)) return path41.dirname(bin);
     }
   }
   return null;
 }
 async function getFreeDiskBytes(dir) {
   try {
-    const s = await fs37.promises.statfs(dir);
+    const s = await fs38.promises.statfs(dir);
     return s.bsize * s.bavail;
   } catch {
     return null;
@@ -16541,7 +16987,7 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner,
   if (initKind === "claude") {
     const claudeDir = bundledClaudeBinDir();
     if (claudeDir) {
-      initEnv.PATH = `${claudeDir}${path40.delimiter}${process.env["PATH"] ?? ""}`;
+      initEnv.PATH = `${claudeDir}${path41.delimiter}${process.env["PATH"] ?? ""}`;
       log.info("host-agent", `headroom init: bundled claude on PATH (${claudeDir})`);
     } else {
       log.warn("host-agent", "headroom init: bundled claude binary not found \u2014 init may fail");
@@ -16573,26 +17019,26 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner,
 }
 
 // src/commands/host/self-update.ts
-var import_node_child_process19 = require("child_process");
+var import_node_child_process20 = require("child_process");
 
 // src/lib/updateNotifier.ts
-var fs38 = __toESM(require("fs"));
-var os33 = __toESM(require("os"));
-var path41 = __toESM(require("path"));
+var fs39 = __toESM(require("fs"));
+var os34 = __toESM(require("os"));
+var path42 = __toESM(require("path"));
 var https6 = __toESM(require("https"));
-var import_node_child_process18 = require("child_process");
+var import_node_child_process19 = require("child_process");
 var import_picocolors3 = __toESM(require("picocolors"));
 var PKG_NAME = "codeam-cli";
 var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
 var TTL_MS = 24 * 60 * 60 * 1e3;
 var REQUEST_TIMEOUT_MS = 1500;
 function cachePath() {
-  const dir = path41.join(os33.homedir(), ".codeam");
-  return path41.join(dir, "update-check.json");
+  const dir = path42.join(os34.homedir(), ".codeam");
+  return path42.join(dir, "update-check.json");
 }
 function readCache() {
   try {
-    const raw = fs38.readFileSync(cachePath(), "utf8");
+    const raw = fs39.readFileSync(cachePath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.fetchedAt !== "number" || typeof parsed.latest !== "string") return null;
     return parsed;
@@ -16603,10 +17049,10 @@ function readCache() {
 function writeCache(cache) {
   try {
     const file = cachePath();
-    fs38.mkdirSync(path41.dirname(file), { recursive: true });
+    fs39.mkdirSync(path42.dirname(file), { recursive: true });
     const tmp = `${file}.${process.pid}.tmp`;
-    fs38.writeFileSync(tmp, JSON.stringify(cache));
-    fs38.renameSync(tmp, file);
+    fs39.writeFileSync(tmp, JSON.stringify(cache));
+    fs39.renameSync(tmp, file);
   } catch {
   }
 }
@@ -16674,14 +17120,14 @@ function notifyIfStale(currentVersion, latest) {
 }
 function isLinkedInstall() {
   try {
-    const root = (0, import_node_child_process18.execSync)("npm root -g", {
+    const root = (0, import_node_child_process19.execSync)("npm root -g", {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 2e3
     }).trim();
     if (!root) return false;
-    const pkgPath = path41.join(root, PKG_NAME);
-    return fs38.lstatSync(pkgPath).isSymbolicLink();
+    const pkgPath = path42.join(root, PKG_NAME);
+    return fs39.lstatSync(pkgPath).isSymbolicLink();
   } catch {
     return false;
   }
@@ -16702,7 +17148,7 @@ function maybeAutoUpdate(currentVersion, latest) {
 
 `
   );
-  const install = (0, import_node_child_process18.spawnSync)("npm", ["install", "-g", `${PKG_NAME}@latest`], {
+  const install = (0, import_node_child_process19.spawnSync)("npm", ["install", "-g", `${PKG_NAME}@latest`], {
     stdio: "inherit",
     env: process.env
   });
@@ -16717,13 +17163,13 @@ function maybeAutoUpdate(currentVersion, latest) {
     return;
   }
   try {
-    fs38.unlinkSync(cachePath());
+    fs39.unlinkSync(cachePath());
   } catch {
   }
   process.stderr.write(`  ${import_picocolors3.default.green("\u2713")} Updated. Resuming session...
 
 `);
-  const child = (0, import_node_child_process18.spawnSync)("codeam", process.argv.slice(2), {
+  const child = (0, import_node_child_process19.spawnSync)("codeam", process.argv.slice(2), {
     stdio: "inherit",
     env: process.env
   });
@@ -16733,7 +17179,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.60.22" : null;
+  const current = true ? "2.60.24" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -16750,7 +17196,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.60.22" : null;
+  const current = true ? "2.60.24" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -16770,11 +17216,11 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.60.22" : null;
+  return true ? "2.60.24" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve7) => {
-    (0, import_node_child_process19.execFile)(cmd, args2, { timeout: timeoutMs }, (err, stdout, stderr) => {
+    (0, import_node_child_process20.execFile)(cmd, args2, { timeout: timeoutMs }, (err, stdout, stderr) => {
       const code = err && typeof err.code === "number" ? err.code : err ? null : 0;
       resolve7({ code, stdout: stdout ?? "", stderr: stderr ?? "" });
     });
@@ -16836,19 +17282,19 @@ async function runSelfUpdate() {
 }
 
 // src/commands/host/teardown.ts
-var import_node_child_process20 = require("child_process");
-var fs39 = __toESM(require("fs"));
+var import_node_child_process21 = require("child_process");
+var fs40 = __toESM(require("fs"));
 var defaultDisableService = () => {
   try {
-    (0, import_node_child_process20.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
+    (0, import_node_child_process21.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
   } catch {
   }
 };
 var defaultTeardownHeadroom = () => {
   try {
-    const kind = JSON.parse(fs39.readFileSync(headroomConfigPath(), "utf8")).agent;
+    const kind = JSON.parse(fs40.readFileSync(headroomConfigPath(), "utf8")).agent;
     if (kind) {
-      (0, import_node_child_process20.execFileSync)("headroom", ["unwrap", kind], { stdio: "ignore", timeout: 15e3 });
+      (0, import_node_child_process21.execFileSync)("headroom", ["unwrap", kind], { stdio: "ignore", timeout: 15e3 });
     }
   } catch {
   }
@@ -16914,8 +17360,8 @@ function maybeResumeLocalHeadroomReporter(ctx) {
   if (process.env["HEADROOM_ENABLED"] === "1") return null;
   try {
     const file = headroomConfigPath();
-    if (!fs40.existsSync(file)) return null;
-    const cfg = JSON.parse(fs40.readFileSync(file, "utf8"));
+    if (!fs41.existsSync(file)) return null;
+    const cfg = JSON.parse(fs41.readFileSync(file, "utf8"));
     if (!cfg?.enabled) return null;
     const agent = cfg.agent ?? "claude";
     const ingestUrl = `${resolveApiBaseUrl()}/api/sessions/${ctx.sessionId}/headroom-savings`;
@@ -17006,7 +17452,7 @@ var CONTROL_AGENT_META = {
   headroomWrappable: false,
   acp: false
 };
-var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process21.spawn)(process.execPath, [process.argv[1], "pair-auto", ...args2], {
+var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process22.spawn)(process.execPath, [process.argv[1], "pair-auto", ...args2], {
   cwd,
   env: { ...process.env, ...env },
   stdio: ["ignore", "pipe", "pipe"],
@@ -17320,9 +17766,9 @@ var HostAgentSupervisor = class {
           API_TIMEOUT_MS: "3000000",
           CODEAM_AUTO_TOKEN: payload.autoPairToken
         };
-        const houseConfigDir = path42.join(os34.homedir(), ".codeam", "house-claude");
+        const houseConfigDir = path43.join(os35.homedir(), ".codeam", "house-claude");
         try {
-          fs40.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
+          fs41.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
         } catch {
         }
         childEnv.CLAUDE_CONFIG_DIR = houseConfigDir;
@@ -17340,14 +17786,14 @@ var HostAgentSupervisor = class {
         report("installing", "installing agent CLI");
         await this.runAgentInstall(payload.agentInstallScript);
       }
-      const home = process.env.HOME || os34.homedir();
+      const home = process.env.HOME || os35.homedir();
       childEnv.PATH = `${home}/.local/bin:${process.env.PATH ?? ""}`;
       if (payload.cloneToken) {
         try {
           report("preparing", "configuring git tooling");
           const ghCmd = await ensureGhCli(defaultGitToolingRunner, payload.cloneToken);
           if (ghCmd) {
-            childEnv.PATH = `${codeamBinDir()}${path42.delimiter}${childEnv.PATH}`;
+            childEnv.PATH = `${codeamBinDir()}${path43.delimiter}${childEnv.PATH}`;
             await ensureGhAuth(defaultGitToolingRunner, ghCmd, payload.cloneToken);
           }
         } catch (e) {
@@ -17363,7 +17809,7 @@ var HostAgentSupervisor = class {
       }
       if (payload.headroomEnabled && payload.headroomAgent && payload.headroomSavingsIngestUrl && isHeadroomSupportedAgent(payload.headroomAgent)) {
         report("headroom", "setting up Headroom proxy");
-        const freeBytes = await this.getFreeDisk(os34.homedir());
+        const freeBytes = await this.getFreeDisk(os35.homedir());
         const alreadyInstalled = this.isHeadroomInstalled();
         if (!alreadyInstalled && freeBytes !== null && freeBytes < HEADROOM_MIN_FREE_DISK_BYTES) {
           const freeGb = (freeBytes / 1e9).toFixed(1);
@@ -17485,8 +17931,8 @@ var HostAgentSupervisor = class {
    */
   runAgentInstall(script) {
     return new Promise((resolve7) => {
-      const home = process.env.HOME || os34.homedir();
-      const child = (0, import_node_child_process21.spawn)("sh", ["-c", script], {
+      const home = process.env.HOME || os35.homedir();
+      const child = (0, import_node_child_process22.spawn)("sh", ["-c", script], {
         env: { ...process.env, HOME: home },
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -17669,9 +18115,9 @@ async function configureHeadroom(action, ctx, deps) {
 }
 
 // src/services/headroom/budget-relaunch.ts
-var fs41 = __toESM(require("fs"));
-var os35 = __toESM(require("os"));
-var path43 = __toESM(require("path"));
+var fs42 = __toESM(require("fs"));
+var os36 = __toESM(require("os"));
+var path44 = __toESM(require("path"));
 var import_child_process13 = require("child_process");
 function amendDeploymentManifestBudget(manifest, budget) {
   const rawArgs = manifest.proxy_args ?? [];
@@ -17705,7 +18151,7 @@ function amendDeploymentManifestBudget(manifest, budget) {
   return { ...manifest, proxy_args: newArgs, base_env: newEnv };
 }
 function findHeadroomDeployments(homeDir2, deps) {
-  const deployDir = path43.join(homeDir2, ".headroom", "deploy");
+  const deployDir = path44.join(homeDir2, ".headroom", "deploy");
   let profiles;
   try {
     profiles = deps.readDir(deployDir);
@@ -17714,7 +18160,7 @@ function findHeadroomDeployments(homeDir2, deps) {
   }
   const results = [];
   for (const profile of profiles) {
-    const manifestPath = path43.join(deployDir, profile, "manifest.json");
+    const manifestPath = path44.join(deployDir, profile, "manifest.json");
     let raw;
     try {
       raw = deps.readJson(manifestPath);
@@ -17746,8 +18192,8 @@ async function applyBudgetToHeadroom(budget, deps) {
 }
 function writeManifestReal(manifestPath, manifest) {
   const tmp = manifestPath + ".codeam.tmp";
-  fs41.writeFileSync(tmp, JSON.stringify(manifest, null, 2) + "\n", { mode: 384 });
-  fs41.renameSync(tmp, manifestPath);
+  fs42.writeFileSync(tmp, JSON.stringify(manifest, null, 2) + "\n", { mode: 384 });
+  fs42.renameSync(tmp, manifestPath);
 }
 function restartDeploymentReal(profile) {
   try {
@@ -17777,11 +18223,11 @@ function spawnProxyReal2(_budget) {
   });
 }
 function makeRealApplyBudgetDeps() {
-  const homeDir2 = os35.homedir();
+  const homeDir2 = os36.homedir();
   return {
     findDeployments: () => findHeadroomDeployments(homeDir2, {
-      readDir: (dir) => fs41.readdirSync(dir),
-      readJson: (filePath) => JSON.parse(fs41.readFileSync(filePath, "utf8"))
+      readDir: (dir) => fs42.readdirSync(dir),
+      readJson: (filePath) => JSON.parse(fs42.readFileSync(filePath, "utf8"))
     }),
     writeManifest: writeManifestReal,
     restartDeployment: restartDeploymentReal,
@@ -17794,11 +18240,11 @@ function makeRealApplyBudgetDeps() {
 var import_child_process14 = require("child_process");
 var import_fs = require("fs");
 var import_promises = __toESM(require("fs/promises"));
-var import_os7 = __toESM(require("os"));
+var import_os8 = __toESM(require("os"));
 var import_path4 = __toESM(require("path"));
 var import_promises2 = require("stream/promises");
 var import_which = __toESM(require("which"));
-var CACHED_BINARY = import_path4.default.join(import_os7.default.homedir(), ".codeam", "bin", "cloudflared");
+var CACHED_BINARY = import_path4.default.join(import_os8.default.homedir(), ".codeam", "bin", "cloudflared");
 async function resolveCloudflared(opts = {}) {
   try {
     return await (0, import_which.default)("cloudflared");
@@ -17898,7 +18344,7 @@ function decodeTunnelToken(token) {
 }
 async function spawnNamedTunnel(bin, token, port) {
   const creds = decodeTunnelToken(token);
-  const credDir = import_path4.default.join(import_os7.default.homedir(), ".codeam");
+  const credDir = import_path4.default.join(import_os8.default.homedir(), ".codeam");
   await import_promises.default.mkdir(credDir, { recursive: true });
   const credFile = import_path4.default.join(credDir, `tunnel-${creds.TunnelID}.json`);
   await import_promises.default.writeFile(credFile, JSON.stringify(creds), { mode: 384 });
@@ -18461,8 +18907,8 @@ function activePreviewSessionIds() {
 
 // src/services/preview/start-orchestrator.ts
 var import_child_process17 = require("child_process");
-var fs46 = __toESM(require("fs"));
-var path48 = __toESM(require("path"));
+var fs47 = __toESM(require("fs"));
+var path49 = __toESM(require("path"));
 var import_which2 = __toESM(require("which"));
 var INSTALL_TIMEOUT_MS = 5 * 6e4;
 var SETUP_TIMEOUT_MS = 2 * 6e4;
@@ -18529,8 +18975,8 @@ function normalizeDetectionForSpawn(detection, cwd) {
   if (args2.length === 0) return detection;
   const binName = args2[0];
   if (binName.startsWith("-")) return detection;
-  const binPath = path48.join(cwd, "node_modules", ".bin", binName);
-  if (!fs46.existsSync(binPath)) return detection;
+  const binPath = path49.join(cwd, "node_modules", ".bin", binName);
+  if (!fs47.existsSync(binPath)) return detection;
   return {
     ...detection,
     command: binPath,
@@ -18880,9 +19326,9 @@ async function establishTunnel(ctx, dev) {
 
 // src/beads/bd-adapter.ts
 var import_child_process18 = require("child_process");
-var fs47 = __toESM(require("fs"));
-var os37 = __toESM(require("os"));
-var path49 = __toESM(require("path"));
+var fs48 = __toESM(require("fs"));
+var os38 = __toESM(require("os"));
+var path50 = __toESM(require("path"));
 var BD_PACKAGE = "@beads/bd";
 function resolveBundledBdBinary() {
   return _resolveSeam.resolveBundled();
@@ -18894,11 +19340,11 @@ function _defaultResolveBundled() {
   } catch {
     return null;
   }
-  const binDir = path49.join(path49.dirname(pkgJsonPath), "bin");
+  const binDir = path50.join(path50.dirname(pkgJsonPath), "bin");
   const binaryName = process.platform === "win32" ? "bd.exe" : "bd";
-  const binaryPath = path49.join(binDir, binaryName);
+  const binaryPath = path50.join(binDir, binaryName);
   try {
-    fs47.accessSync(binaryPath, fs47.constants.F_OK);
+    fs48.accessSync(binaryPath, fs48.constants.F_OK);
     return binaryPath;
   } catch {
     return null;
@@ -18908,13 +19354,13 @@ function resolveBdOnPath() {
   return _resolveSeam.resolveOnPath();
 }
 function _defaultResolveOnPath() {
-  const dirs = (process.env.PATH ?? "").split(path49.delimiter).filter(Boolean);
+  const dirs = (process.env.PATH ?? "").split(path50.delimiter).filter(Boolean);
   const candidates = process.platform === "win32" ? ["bd.exe", "bd.cmd", "bd"] : ["bd"];
   for (const dir of dirs) {
     for (const candidate of candidates) {
-      const full = path49.join(dir, candidate);
+      const full = path50.join(dir, candidate);
       try {
-        fs47.accessSync(full, fs47.constants.F_OK);
+        fs48.accessSync(full, fs48.constants.F_OK);
         return full;
       } catch {
       }
@@ -18999,7 +19445,7 @@ var BdAdapter = class {
     const env = { ...process.env };
     if (!env.HOME) {
       try {
-        const home = os37.homedir();
+        const home = os38.homedir();
         if (home) env.HOME = home;
       } catch {
       }
@@ -19091,9 +19537,9 @@ function coerceIssue(row, projectKey) {
 
 // src/beads/provisioner.ts
 var import_child_process22 = require("child_process");
-var fs50 = __toESM(require("fs"));
-var os39 = __toESM(require("os"));
-var path52 = __toESM(require("path"));
+var fs51 = __toESM(require("fs"));
+var os40 = __toESM(require("os"));
+var path53 = __toESM(require("path"));
 
 // src/beads/install-bd.ts
 var import_child_process19 = require("child_process");
@@ -19158,9 +19604,9 @@ async function installBd(platform3 = process.platform) {
 
 // src/beads/install-dolt.ts
 var import_child_process20 = require("child_process");
-var fs48 = __toESM(require("fs"));
-var os38 = __toESM(require("os"));
-var path50 = __toESM(require("path"));
+var fs49 = __toESM(require("fs"));
+var os39 = __toESM(require("os"));
+var path51 = __toESM(require("path"));
 var DOLT_INSTALL_SH_URL = "https://github.com/dolthub/dolt/releases/latest/download/install.sh";
 var DOLT_MSI_URL = "https://github.com/dolthub/dolt/releases/latest/download/dolt-windows-amd64.msi";
 function resolveDoltInstallStrategy(platform3) {
@@ -19200,11 +19646,11 @@ function resolveDoltInstallStrategy(platform3) {
 }
 var DOLT_RELEASE_BASE = "https://github.com/dolthub/dolt/releases/latest/download";
 function doltPlatformTuple(platform3, arch2) {
-  const os49 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
+  const os50 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
   const a = arch2 === "x64" ? "amd64" : arch2 === "arm64" ? "arm64" : null;
   if (!a) return null;
-  if (os49 === "windows" && a !== "amd64") return null;
-  return `${os49}-${a}`;
+  if (os50 === "windows" && a !== "amd64") return null;
+  return `${os50}-${a}`;
 }
 function resolveDoltTarballStrategy(targetDir, platform3, arch2) {
   const tuple = doltPlatformTuple(platform3, arch2);
@@ -19249,14 +19695,14 @@ async function installDoltToDir(targetDir, platform3 = process.platform, arch2 =
   return result;
 }
 var _doltPathSeam = {
-  homedir: () => os38.homedir(),
+  homedir: () => os39.homedir(),
   getPath: () => process.env.PATH ?? "",
   setPath: (p2) => {
     process.env.PATH = p2;
   },
   exists: (p2) => {
     try {
-      fs48.accessSync(p2, fs48.constants.F_OK);
+      fs49.accessSync(p2, fs49.constants.F_OK);
       return true;
     } catch {
       return false;
@@ -19267,7 +19713,7 @@ function doltBinaryNames(platform3) {
   return platform3 === "win32" ? ["dolt.exe", "dolt.cmd", "dolt"] : ["dolt"];
 }
 function knownDoltDirs(platform3) {
-  const P3 = platform3 === "win32" ? path50.win32 : path50.posix;
+  const P3 = platform3 === "win32" ? path51.win32 : path51.posix;
   const home = _doltPathSeam.homedir();
   if (platform3 === "win32") {
     return [
@@ -19283,7 +19729,7 @@ function knownDoltDirs(platform3) {
   ].filter(Boolean);
 }
 function ensureDoltResolvable(platform3 = process.platform) {
-  const P3 = platform3 === "win32" ? path50.win32 : path50.posix;
+  const P3 = platform3 === "win32" ? path51.win32 : path51.posix;
   const delim = platform3 === "win32" ? ";" : ":";
   const names = doltBinaryNames(platform3);
   const pathDirs = _doltPathSeam.getPath().split(delim).filter(Boolean);
@@ -19419,8 +19865,8 @@ async function ensureSharedServer(adapter, options = {}) {
 // src/beads/project-key.ts
 var import_child_process21 = require("child_process");
 var crypto2 = __toESM(require("crypto"));
-var fs49 = __toESM(require("fs"));
-var path51 = __toESM(require("path"));
+var fs50 = __toESM(require("fs"));
+var path52 = __toESM(require("path"));
 function normalizeOrigin(raw) {
   const trimmed = raw.trim();
   if (!trimmed) return null;
@@ -19446,17 +19892,17 @@ function normalizeOrigin(raw) {
   return `${host2}/${pathPart}`;
 }
 function findRepoRoot(cwd) {
-  let dir = path51.resolve(cwd);
+  let dir = path52.resolve(cwd);
   const seen = /* @__PURE__ */ new Set();
   for (let i = 0; i < 256; i++) {
     if (seen.has(dir)) return null;
     seen.add(dir);
     try {
-      const stat3 = fs49.statSync(path51.join(dir, ".git"), { throwIfNoEntry: false });
+      const stat3 = fs50.statSync(path52.join(dir, ".git"), { throwIfNoEntry: false });
       if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
     } catch {
     }
-    const parent = path51.dirname(dir);
+    const parent = path52.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -19467,7 +19913,7 @@ var _execSeam2 = {
     const out2 = (0, import_child_process21.execFileSync)(file, args2, opts);
     return typeof out2 === "string" ? out2 : out2.toString("utf8");
   },
-  realpath: (p2) => fs49.realpathSync(p2)
+  realpath: (p2) => fs50.realpathSync(p2)
 };
 function readOrigin(cwd) {
   try {
@@ -19496,7 +19942,7 @@ function deriveProjectIdentity(cwd = process.cwd()) {
   } catch {
   }
   const hash = crypto2.createHash("sha256").update(real).digest("hex");
-  return { projectKey: `path:${hash}`, projectLabel: path51.basename(real) || "project" };
+  return { projectKey: `path:${hash}`, projectLabel: path52.basename(real) || "project" };
 }
 
 // src/beads/project-prefix.ts
@@ -19541,17 +19987,17 @@ var _provisionSeam = {
 };
 var _linkSeam = {
   platform: () => process.platform,
-  homedir: () => os39.homedir(),
+  homedir: () => os40.homedir(),
   isWritableDir: (dir) => {
     try {
-      fs50.accessSync(dir, fs50.constants.W_OK);
+      fs51.accessSync(dir, fs51.constants.W_OK);
       return true;
     } catch {
       return false;
     }
   },
   ensureDir: (dir) => {
-    fs50.mkdirSync(dir, { recursive: true });
+    fs51.mkdirSync(dir, { recursive: true });
   },
   /**
    * A directory to symlink `bd` into so the AGENT's shell + Claude Code's
@@ -19572,9 +20018,9 @@ var _linkSeam = {
    * which `linkBdOntoPath` creates if missing.
    */
   cliBinDir: () => {
-    const pathDirs = (process.env.PATH ?? "").split(path52.delimiter).filter(Boolean);
+    const pathDirs = (process.env.PATH ?? "").split(path53.delimiter).filter(Boolean);
     const home = _linkSeam.homedir();
-    const localBin = home ? path52.join(home, ".local", "bin") : null;
+    const localBin = home ? path53.join(home, ".local", "bin") : null;
     if (localBin) {
       try {
         _linkSeam.ensureDir(localBin);
@@ -19584,16 +20030,16 @@ var _linkSeam = {
     const candidates = [];
     if (localBin) candidates.push(localBin);
     try {
-      candidates.push(path52.dirname(process.execPath));
+      candidates.push(path53.dirname(process.execPath));
     } catch {
     }
     candidates.push("/usr/local/bin");
     const entry = process.argv[1];
     if (entry) {
       try {
-        candidates.push(path52.dirname(fs50.realpathSync(entry)));
+        candidates.push(path53.dirname(fs51.realpathSync(entry)));
       } catch {
-        candidates.push(path52.dirname(entry));
+        candidates.push(path53.dirname(entry));
       }
     }
     const onPathWritable = candidates.find(
@@ -19605,20 +20051,20 @@ var _linkSeam = {
   /** Current symlink target at `linkPath`, or null when absent / not a link. */
   readlink: (linkPath) => {
     try {
-      return fs50.readlinkSync(linkPath);
+      return fs51.readlinkSync(linkPath);
     } catch {
       return null;
     }
   },
-  unlink: (linkPath) => fs50.unlinkSync(linkPath),
-  symlink: (target, linkPath) => fs50.symlinkSync(target, linkPath)
+  unlink: (linkPath) => fs51.unlinkSync(linkPath),
+  symlink: (target, linkPath) => fs51.symlinkSync(target, linkPath)
 };
 function linkBdOntoPath(binaryPath) {
   if (_linkSeam.platform() === "win32") return;
   const binDir = _linkSeam.cliBinDir();
   if (!binDir) return;
   _linkSeam.ensureDir(binDir);
-  const linkPath = path52.join(binDir, "bd");
+  const linkPath = path53.join(binDir, "bd");
   if (linkPath === binaryPath) return;
   const current = _linkSeam.readlink(linkPath);
   if (current === binaryPath) return;
@@ -19813,7 +20259,7 @@ function dedupeRecipes(agents) {
 
 // src/beads/watcher.ts
 var crypto4 = __toESM(require("crypto"));
-var path53 = __toESM(require("path"));
+var path54 = __toESM(require("path"));
 var API_BASE6 = resolveApiBaseUrl();
 var DEBOUNCE_MS2 = 400;
 var ZERO_SUMMARY = {
@@ -19837,7 +20283,7 @@ var BeadsWatcher = class {
   constructor(opts) {
     this.opts = opts;
     this.bd = opts.adapter ?? new BdAdapter({ cwd: opts.cwd, beadsDir: opts.beadsDir });
-    this.feedPath = opts.feedPath ?? path53.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
+    this.feedPath = opts.feedPath ?? path54.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
     this.apiBase = opts.apiBaseUrl ?? API_BASE6;
   }
   opts;
@@ -20254,8 +20700,8 @@ function cleanupAttachmentTempFiles() {
 function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
-    const tmpPath = path55.join(os41.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
-    fs52.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
+    const tmpPath = path56.join(os42.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
+    fs53.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     pendingAttachmentFiles.add(tmpPath);
     return tmpPath;
   });
@@ -20467,9 +20913,9 @@ var listFiles = async (ctx, cmd, parsed) => {
   await ctx.relay.sendResult(cmd.id, "completed", result);
 };
 var envReadH = async (ctx, cmd) => {
-  const envPath = path55.join(process.cwd(), ".env");
+  const envPath = path56.join(process.cwd(), ".env");
   try {
-    const raw = await fs52.promises.readFile(envPath, "utf8");
+    const raw = await fs53.promises.readFile(envPath, "utf8");
     await ctx.relay.sendResult(cmd.id, "completed", {
       exists: true,
       vars: parseDotenv(raw)
@@ -20500,14 +20946,14 @@ var envWriteH = async (ctx, cmd, parsed) => {
     }
     seen.add(v.key);
   }
-  const envPath = path55.join(process.cwd(), ".env");
-  const tmpPath = path55.join(process.cwd(), ".env.codeam.tmp");
+  const envPath = path56.join(process.cwd(), ".env");
+  const tmpPath = path56.join(process.cwd(), ".env.codeam.tmp");
   try {
-    await fs52.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
-    await fs52.promises.rename(tmpPath, envPath);
+    await fs53.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
+    await fs53.promises.rename(tmpPath, envPath);
     await ctx.relay.sendResult(cmd.id, "completed", { ok: true, count: vars.length });
   } catch (err) {
-    await fs52.promises.rm(tmpPath, { force: true }).catch(() => void 0);
+    await fs53.promises.rm(tmpPath, { force: true }).catch(() => void 0);
     await ctx.relay.sendResult(cmd.id, "failed", { error: err.message });
   }
 };
@@ -20551,7 +20997,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
   let configuredAgent = rawAgentId;
   if (!configuredAgent) {
     try {
-      const raw = JSON.parse(fs52.readFileSync(headroomConfigPath(), "utf8"));
+      const raw = JSON.parse(fs53.readFileSync(headroomConfigPath(), "utf8"));
       configuredAgent = raw.agent ?? "";
     } catch {
     }
@@ -20585,7 +21031,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
     persist: persistHeadroomConfig,
     readEnabled: () => {
       try {
-        const raw = JSON.parse(fs52.readFileSync(headroomConfigPath(), "utf8"));
+        const raw = JSON.parse(fs53.readFileSync(headroomConfigPath(), "utf8"));
         return raw.enabled === true;
       } catch {
         return false;
@@ -20658,6 +21104,63 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
   });
   await ctx.relay.sendResult(cmd.id, "completed", result);
 };
+var coderabbitConfigureH = async (ctx, cmd, parsed) => {
+  const action = parsed.action ?? "status";
+  const token = ctx.pluginAuthToken;
+  let emitChain = Promise.resolve();
+  const emit2 = (type, payload) => {
+    if (!token) return;
+    emitChain = emitChain.then(
+      () => postCoderabbitEvent({
+        sessionId: ctx.sessionId,
+        pluginId: ctx.pluginId,
+        pluginAuthToken: token,
+        type,
+        payload
+      })
+    );
+  };
+  const result = await configureCoderabbit(
+    {
+      action,
+      apiKey: parsed.apiKey,
+      review: { changeSet: parsed.changeSet, base: parsed.base, dir: parsed.reviewDir }
+    },
+    {
+      onEvent: (e) => {
+        if (e.kind === "awaiting_browser") {
+          emit2("coderabbit_progress", {
+            phase: "awaiting_browser",
+            authUrl: e.authUrl,
+            fallbackAuthUrl: e.fallbackAuthUrl
+          });
+        } else {
+          emit2("coderabbit_progress", { phase: e.kind });
+        }
+      },
+      uploadCredential: token ? async (method, credential) => {
+        const r = await postLinkCredential({
+          agentId: "coderabbit",
+          sessionId: ctx.sessionId,
+          pluginId: ctx.pluginId,
+          pluginAuthToken: token,
+          method,
+          credential
+        });
+        return r.ok === true;
+      } : void 0,
+      runReview: (input) => new CoderabbitRuntimeStrategy(createOsStrategy()).runOneShot(input)
+    }
+  );
+  emit2("coderabbit_status", {
+    installed: result.installed,
+    loggedIn: result.loggedIn,
+    linked: result.linked ?? false,
+    ...result.error ? { error: result.error } : {}
+  });
+  await emitChain;
+  await ctx.relay.sendResult(cmd.id, result.error && action !== "review" ? "failed" : "completed", result);
+};
 var headroomBudgetH = async (ctx, cmd) => {
   const payload = cmd.payload;
   let rawAgentId = ctx.agentId || (typeof payload.agentId === "string" ? payload.agentId : "");
@@ -20674,7 +21177,7 @@ var headroomBudgetH = async (ctx, cmd) => {
   }
   let headroomActive = false;
   try {
-    const raw = JSON.parse(fs52.readFileSync(headroomConfigPath(), "utf8"));
+    const raw = JSON.parse(fs53.readFileSync(headroomConfigPath(), "utf8"));
     headroomActive = raw.enabled === true;
   } catch {
   }
@@ -20684,7 +21187,7 @@ var headroomBudgetH = async (ctx, cmd) => {
   }
   let existingConfig = { enabled: true };
   try {
-    existingConfig = JSON.parse(fs52.readFileSync(headroomConfigPath(), "utf8"));
+    existingConfig = JSON.parse(fs53.readFileSync(headroomConfigPath(), "utf8"));
   } catch {
   }
   if (payload.budgetEnabled && payload.budgetUsd != null) {
@@ -20797,13 +21300,13 @@ var CLI_UPDATE_MAX_ATTEMPTS = 3;
 function buildNpmInstallInvocation(opts) {
   const entryScript = opts?.entryScript ?? process.argv[1] ?? "";
   const execPath = opts?.execPath ?? process.execPath;
-  const exists2 = opts?.existsSync ?? fs52.existsSync;
-  const normalized = entryScript.split(path55.sep).join("/");
+  const exists2 = opts?.existsSync ?? fs53.existsSync;
+  const normalized = entryScript.split(path56.sep).join("/");
   const marker = "/lib/node_modules/codeam-cli/";
   const markerIdx = normalized.indexOf(marker);
   const prefix = markerIdx > 0 ? entryScript.slice(0, markerIdx) : null;
-  const siblingNpm = path55.join(
-    path55.dirname(execPath),
+  const siblingNpm = path56.join(
+    path56.dirname(execPath),
     process.platform === "win32" ? "npm.cmd" : "npm"
   );
   const command2 = exists2(siblingNpm) ? siblingNpm : "npm";
@@ -21375,6 +21878,7 @@ var handlers = {
   take_control: takeControlH,
   handback: handbackH,
   headroom_configure: headroomConfigureH,
+  coderabbit_configure: coderabbitConfigureH,
   headroom_budget: headroomBudgetH,
   beads_configure: beadsConfigureH,
   cli_self_update: cliSelfUpdateH()
@@ -21645,11 +22149,11 @@ function resolveTokenValue(args2) {
   }
   const fileFlag = args2.find((a) => a.startsWith("--token-file="));
   if (fileFlag) {
-    const path70 = fileFlag.slice("--token-file=".length);
+    const path71 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs53.readFileSync(path70, "utf8").trim();
-      if (content.length === 0) fail(`--token-file ${path70} is empty`);
-      rmIfExistsQuiet(path70);
+      const content = fs54.readFileSync(path71, "utf8").trim();
+      if (content.length === 0) fail(`--token-file ${path71} is empty`);
+      rmIfExistsQuiet(path71);
       return content;
     } catch (err) {
       fail(`Could not read --token-file: ${err.message}`);
@@ -21678,7 +22182,7 @@ async function claimOnce(token, pluginId, pluginSecretHash) {
     pluginId,
     ideName: "codeam-cli (codespace)",
     ideVersion: process.env.npm_package_version ?? "unknown",
-    hostname: os42.hostname(),
+    hostname: os43.hostname(),
     codespaceName: process.env.CODESPACE_NAME ?? "",
     // Current git branch of the codespace's working directory, so the
     // backend can populate `PairedSession.branch` for the codespace pair.
@@ -21739,7 +22243,7 @@ async function claim(token, pluginId, pluginSecretHash) {
   }
 }
 function pairAutoLockPath() {
-  return path56.join(os42.homedir(), ".codeam", "pair-auto.lock");
+  return path57.join(os43.homedir(), ".codeam", "pair-auto.lock");
 }
 function isLivePairAuto(pid) {
   if (!Number.isInteger(pid) || pid <= 0 || pid === process.pid) return false;
@@ -21749,7 +22253,7 @@ function isLivePairAuto(pid) {
     if (e.code !== "EPERM") return false;
   }
   try {
-    return fs53.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
+    return fs54.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
   } catch {
     return true;
   }
@@ -21759,24 +22263,24 @@ function isLiveCodeam(pid) {
 }
 function daemonLockPath(sessionId) {
   const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
-  return path56.join(os42.homedir(), ".codeam", `daemon-${safe}.lock`);
+  return path57.join(os43.homedir(), ".codeam", `daemon-${safe}.lock`);
 }
 function acquireDaemonLock(sessionId) {
   const lockPath = daemonLockPath(sessionId);
   try {
-    fs53.mkdirSync(path56.dirname(lockPath), { recursive: true });
+    fs54.mkdirSync(path57.dirname(lockPath), { recursive: true });
     try {
-      fs53.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs54.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs53.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs54.readFileSync(lockPath, "utf8").trim());
       if (holder && holder !== process.pid && isLiveCodeam(holder)) return false;
-      fs53.writeFileSync(lockPath, String(process.pid));
+      fs54.writeFileSync(lockPath, String(process.pid));
     }
     const release3 = () => {
       try {
-        if (fs53.existsSync(lockPath) && Number(fs53.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs53.unlinkSync(lockPath);
+        if (fs54.existsSync(lockPath) && Number(fs54.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs54.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -21798,19 +22302,19 @@ function acquireDaemonLock(sessionId) {
 function acquireSingletonLock() {
   const lockPath = pairAutoLockPath();
   try {
-    fs53.mkdirSync(path56.dirname(lockPath), { recursive: true });
+    fs54.mkdirSync(path57.dirname(lockPath), { recursive: true });
     try {
-      fs53.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs54.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs53.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs54.readFileSync(lockPath, "utf8").trim());
       if (isLivePairAuto(holder)) return false;
-      fs53.writeFileSync(lockPath, String(process.pid));
+      fs54.writeFileSync(lockPath, String(process.pid));
     }
     process.once("exit", () => {
       try {
-        if (fs53.existsSync(lockPath) && Number(fs53.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs53.unlinkSync(lockPath);
+        if (fs54.existsSync(lockPath) && Number(fs54.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs54.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -21892,7 +22396,7 @@ async function pairAuto(args2) {
 }
 
 // src/services/headroom/wrap-launch.ts
-var import_node_child_process22 = require("child_process");
+var import_node_child_process23 = require("child_process");
 function wrapWithHeadroom(launch, opts) {
   if (!opts.enabled || !opts.headroomPresent) return launch;
   return {
@@ -21905,7 +22409,7 @@ var _present;
 function headroomPresent() {
   if (_present !== void 0) return Promise.resolve(_present);
   return new Promise((resolve7) => {
-    (0, import_node_child_process22.execFile)("headroom", ["--version"], (err) => {
+    (0, import_node_child_process23.execFile)("headroom", ["--version"], (err) => {
       _present = !err;
       resolve7(_present);
     });
@@ -22255,11 +22759,11 @@ var AgentService = class _AgentService {
 };
 
 // src/agents/acp/adapters.ts
-var path58 = __toESM(require("path"));
+var path59 = __toESM(require("path"));
 
 // src/agents/acp/agent-binary.ts
 var import_fs4 = __toESM(require("fs"));
-var import_os8 = __toESM(require("os"));
+var import_os10 = __toESM(require("os"));
 var import_path8 = __toESM(require("path"));
 var import_child_process25 = require("child_process");
 function currentPlatformKey() {
@@ -22355,7 +22859,7 @@ function resolveCursorAgentBinary(deps = {}) {
     const exe = import_path8.default.win32.join(localAppData, "cursor-agent", "cursor-agent.exe");
     return existsSync26(exe) ? exe : null;
   }
-  const home = deps.homedir ?? import_os8.default.homedir();
+  const home = deps.homedir ?? import_os10.default.homedir();
   const unix = import_path8.default.posix.join(home, ".local", "bin", "cursor-agent");
   return existsSync26(unix) ? unix : null;
 }
@@ -22429,7 +22933,7 @@ async function waitForAdapterModuleGraph(command2, args2, opts = {}) {
 }
 
 // src/agents/kimi/installer.ts
-var import_node_child_process23 = require("child_process");
+var import_node_child_process24 = require("child_process");
 var import_node_os6 = require("os");
 var import_node_path6 = require("path");
 var INSTALL_URL2 = "https://code.kimi.com/kimi-code/install.sh";
@@ -22437,7 +22941,7 @@ function kimiBinDir() {
   return (0, import_node_path6.join)(process.env.KIMI_CODE_HOME || (0, import_node_path6.join)((0, import_node_os6.homedir)(), ".kimi-code"), "bin");
 }
 function kimiRuns() {
-  const r = (0, import_node_child_process23.spawnSync)("kimi", ["--version"], { stdio: "ignore", timeout: 15e3 });
+  const r = (0, import_node_child_process24.spawnSync)("kimi", ["--version"], { stdio: "ignore", timeout: 15e3 });
   return !r.error && r.status === 0;
 }
 function augmentPath2() {
@@ -22447,7 +22951,7 @@ function augmentPath2() {
 }
 async function runInstaller2() {
   return new Promise((resolve7) => {
-    const proc = (0, import_node_child_process23.spawn)("sh", ["-c", `curl -fsSL ${INSTALL_URL2} | bash`], { stdio: "inherit" });
+    const proc = (0, import_node_child_process24.spawn)("sh", ["-c", `curl -fsSL ${INSTALL_URL2} | bash`], { stdio: "inherit" });
     proc.on("close", (code) => resolve7(code === 0));
     proc.on("error", () => resolve7(false));
   });
@@ -22497,13 +23001,13 @@ function resolveBin(pkgName, binName) {
   try {
     const manifestPath = require_.resolve(`${pkgName}/package.json`);
     const manifest = require_(`${pkgName}/package.json`);
-    const pkgDir = path58.dirname(manifestPath);
+    const pkgDir = path59.dirname(manifestPath);
     const bin = manifest.bin;
     if (!bin) return null;
-    if (typeof bin === "string") return path58.resolve(pkgDir, bin);
+    if (typeof bin === "string") return path59.resolve(pkgDir, bin);
     const target = binName ?? Object.keys(bin)[0];
     if (!target || !bin[target]) return null;
-    return path58.resolve(pkgDir, bin[target]);
+    return path59.resolve(pkgDir, bin[target]);
   } catch {
     return null;
   }
@@ -22607,9 +23111,9 @@ function requiresAcp(agent) {
 var import_node_crypto10 = require("crypto");
 
 // src/services/history.service.ts
-var fs55 = __toESM(require("fs"));
-var path59 = __toESM(require("path"));
-var os44 = __toESM(require("os"));
+var fs56 = __toESM(require("fs"));
+var path60 = __toESM(require("path"));
+var os45 = __toESM(require("os"));
 var https7 = __toESM(require("https"));
 var http6 = __toESM(require("http"));
 var import_zod2 = require("zod");
@@ -22636,7 +23140,7 @@ function parseJsonl(filePath) {
   const messages = [];
   let raw;
   try {
-    raw = fs55.readFileSync(filePath, "utf8");
+    raw = fs56.readFileSync(filePath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       log.warn("history:parseJsonl", `read failed for ${filePath}`, err);
@@ -22777,7 +23281,7 @@ var HistoryService = class _HistoryService {
     return this._quotaPercent === null || Date.now() - this._quotaFetchedAt > ttlMs;
   }
   get projectDir() {
-    return this.runtime.resolveHistoryDir(this.cwd) ?? path59.join(os44.homedir(), ".claude", "projects", encodeCwd(this.cwd));
+    return this.runtime.resolveHistoryDir(this.cwd) ?? path60.join(os45.homedir(), ".claude", "projects", encodeCwd(this.cwd));
   }
   /** Set the current Claude conversation ID (extracted from /cost command or session start) */
   setCurrentConversationId(id) {
@@ -22789,7 +23293,7 @@ var HistoryService = class _HistoryService {
   /** Return the current message count in the active conversation. */
   getCurrentMessageCount() {
     if (!this.currentConversationId) return 0;
-    const filePath = path59.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+    const filePath = path60.join(this.projectDir, `${this.currentConversationId}.jsonl`);
     return parseJsonl(filePath).length;
   }
   /**
@@ -22800,7 +23304,7 @@ var HistoryService = class _HistoryService {
     const deadline = Date.now() + timeoutMs;
     while (Date.now() < deadline) {
       if (!this.currentConversationId) return null;
-      const filePath = path59.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+      const filePath = path60.join(this.projectDir, `${this.currentConversationId}.jsonl`);
       const messages = parseJsonl(filePath);
       if (messages.length > previousCount) {
         for (let i = messages.length - 1; i >= previousCount; i--) {
@@ -22826,16 +23330,16 @@ var HistoryService = class _HistoryService {
     const dir = this.projectDir;
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     try {
-      const files = fs55.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
+      const files = fs56.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
         try {
-          const stat3 = fs55.statSync(path59.join(dir, e.name));
+          const stat3 = fs56.statSync(path60.join(dir, e.name));
           return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
         } catch {
           return { name: e.name, mtime: 0, birthtime: 0 };
         }
       }).filter((f) => f.birthtime >= cutoff).sort((a, b) => b.mtime - a.mtime);
       if (files.length > 0) {
-        this.currentConversationId = path59.basename(files[0].name, ".jsonl");
+        this.currentConversationId = path60.basename(files[0].name, ".jsonl");
       }
     } catch {
     }
@@ -22869,13 +23373,13 @@ var HistoryService = class _HistoryService {
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     let entries;
     try {
-      entries = fs55.readdirSync(dir, { withFileTypes: true });
+      entries = fs56.readdirSync(dir, { withFileTypes: true });
     } catch {
       return null;
     }
     const files = entries.filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
       try {
-        const stat3 = fs55.statSync(path59.join(dir, e.name));
+        const stat3 = fs56.statSync(path60.join(dir, e.name));
         return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
       } catch {
         return { name: e.name, mtime: 0, birthtime: 0 };
@@ -22884,12 +23388,12 @@ var HistoryService = class _HistoryService {
     if (files.length === 0) return null;
     const targetFile = this.currentConversationId ? `${this.currentConversationId}.jsonl` : files[0].name;
     if (!files.some((f) => f.name === targetFile)) return null;
-    return this.extractUsageFromFile(path59.join(dir, targetFile));
+    return this.extractUsageFromFile(path60.join(dir, targetFile));
   }
   extractUsageFromFile(filePath) {
     let raw;
     try {
-      raw = fs55.readFileSync(filePath, "utf8");
+      raw = fs56.readFileSync(filePath, "utf8");
     } catch {
       return null;
     }
@@ -22934,9 +23438,9 @@ var HistoryService = class _HistoryService {
     let totalCost = 0;
     let files;
     try {
-      files = fs55.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
+      files = fs56.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
         try {
-          return fs55.statSync(path59.join(projectDir, f)).mtimeMs >= monthStartMs;
+          return fs56.statSync(path60.join(projectDir, f)).mtimeMs >= monthStartMs;
         } catch {
           return false;
         }
@@ -22947,7 +23451,7 @@ var HistoryService = class _HistoryService {
     for (const file of files) {
       let raw;
       try {
-        raw = fs55.readFileSync(path59.join(projectDir, file), "utf8");
+        raw = fs56.readFileSync(path60.join(projectDir, file), "utf8");
       } catch {
         continue;
       }
@@ -23026,7 +23530,7 @@ var HistoryService = class _HistoryService {
     if (this.runtime.resolveHistoryFile) {
       return this.runtime.resolveHistoryFile(this.cwd, sessionId);
     }
-    return path59.join(this.projectDir, `${sessionId}.jsonl`);
+    return path60.join(this.projectDir, `${sessionId}.jsonl`);
   }
   /**
    * Parse a conversation's messages from disk, agent-aware. Claude uses the
@@ -23060,7 +23564,7 @@ var HistoryService = class _HistoryService {
         };
       });
     }
-    return parseJsonl(path59.join(this.projectDir, `${sessionId}.jsonl`));
+    return parseJsonl(path60.join(this.projectDir, `${sessionId}.jsonl`));
   }
   async loadConversation(sessionId) {
     const messages = this.readConversation(sessionId);
@@ -23116,7 +23620,7 @@ var HistoryService = class _HistoryService {
     if (!filePath) return false;
     let mtimeMs;
     try {
-      mtimeMs = fs55.statSync(filePath).mtimeMs;
+      mtimeMs = fs56.statSync(filePath).mtimeMs;
     } catch {
       return false;
     }
@@ -23184,11 +23688,11 @@ var HistoryService = class _HistoryService {
 };
 
 // src/agents/acp/client.ts
-var import_node_child_process24 = require("child_process");
-var fs56 = __toESM(require("fs/promises"));
+var import_node_child_process25 = require("child_process");
+var fs57 = __toESM(require("fs/promises"));
 var fsSync = __toESM(require("fs"));
-var os45 = __toESM(require("os"));
-var path60 = __toESM(require("path"));
+var os46 = __toESM(require("os"));
+var path61 = __toESM(require("path"));
 var import_node_stream = require("stream");
 
 // ../../node_modules/@agentclientprotocol/sdk/dist/acp.js
@@ -25788,7 +26292,7 @@ var AcpClient = class {
       "acpClient",
       `spawn cmd=${adapter.command} args=[${adapter.args.join(",")}] cwd=${cwd}`
     );
-    const child = (0, import_node_child_process24.spawn)(adapter.command, adapter.args, {
+    const child = (0, import_node_child_process25.spawn)(adapter.command, adapter.args, {
       cwd,
       // extraEnv (e.g. CLAUDE_CODE_DISABLE_1M_CONTEXT=1 on an on-demand
       // re-spawn) layers over process.env; PATH stays last so the augmented
@@ -26102,7 +26606,7 @@ var AcpClient = class {
       },
       readTextFile: async (params) => {
         try {
-          const content = await fs56.readFile(params.path, "utf8");
+          const content = await fs57.readFile(params.path, "utf8");
           return applyLineRange(content, params.line ?? null, params.limit ?? null);
         } catch (err) {
           const code = err.code;
@@ -26122,7 +26626,7 @@ var AcpClient = class {
       },
       writeTextFile: async (params) => {
         try {
-          await fs56.writeFile(params.path, params.content, "utf8");
+          await fs57.writeFile(params.path, params.content, "utf8");
           return {};
         } catch (err) {
           const code = err.code;
@@ -26171,29 +26675,29 @@ function applyLineRange(content, line, limit) {
   return { content: lines.slice(start2, end).join("\n") };
 }
 function knownAgentBinaryDirs() {
-  const home = os45.homedir();
+  const home = os46.homedir();
   const out2 = [];
   out2.push("/tmp/codeam-node20/bin");
   for (const root of [
     "/usr/local/share/nvm/versions/node",
-    path60.join(home, ".nvm/versions/node")
+    path61.join(home, ".nvm/versions/node")
   ]) {
     try {
       for (const child of fsSync.readdirSync(root)) {
-        out2.push(path60.join(root, child, "bin"));
+        out2.push(path61.join(root, child, "bin"));
       }
     } catch {
     }
   }
-  out2.push(path60.join(home, ".volta/bin"));
+  out2.push(path61.join(home, ".volta/bin"));
   out2.push("/usr/local/bin");
   out2.push("/usr/bin");
-  out2.push(path60.join(home, ".local/bin"));
-  out2.push(path60.join(home, "bin"));
+  out2.push(path61.join(home, ".local/bin"));
+  out2.push(path61.join(home, "bin"));
   if (process.platform === "win32") {
     const { LOCALAPPDATA, APPDATA } = process.env;
-    if (LOCALAPPDATA) out2.push(path60.join(LOCALAPPDATA, "cursor-agent"));
-    if (APPDATA) out2.push(path60.join(APPDATA, "npm"));
+    if (LOCALAPPDATA) out2.push(path61.join(LOCALAPPDATA, "cursor-agent"));
+    if (APPDATA) out2.push(path61.join(APPDATA, "npm"));
   }
   return out2.filter((p2) => {
     try {
@@ -26205,7 +26709,7 @@ function knownAgentBinaryDirs() {
 }
 function expandPathForAgentBinaries(existingPath) {
   const existing = new Set(
-    existingPath.split(path60.delimiter).filter((p2) => p2.length > 0)
+    existingPath.split(path61.delimiter).filter((p2) => p2.length > 0)
   );
   const additions = [];
   for (const dir of knownAgentBinaryDirs()) {
@@ -26215,7 +26719,7 @@ function expandPathForAgentBinaries(existingPath) {
     }
   }
   if (additions.length === 0) return existingPath;
-  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path60.delimiter);
+  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path61.delimiter);
 }
 
 // src/agents/acp/headroom-budget-proxy.ts
@@ -26226,12 +26730,12 @@ function buildRelaunchProxyEnv(baseEnv) {
   return env;
 }
 var relaunchProxyWithoutBudget = async () => {
-  const { spawn: spawn40 } = await import("child_process");
+  const { spawn: spawn41 } = await import("child_process");
   killHeadroomProxy();
   await new Promise((r) => setTimeout(r, 500));
   const proxyEnv = buildRelaunchProxyEnv(process.env);
   try {
-    const proxy = spawn40(
+    const proxy = spawn41(
       "headroom",
       ["proxy", "--port", "8787"],
       { stdio: "ignore", detached: true, env: proxyEnv }
@@ -26697,15 +27201,15 @@ function commonPrefixLength(a, b) {
 
 // src/agents/acp/onboarding.ts
 var import_child_process26 = require("child_process");
-var fs57 = __toESM(require("fs"));
-var os46 = __toESM(require("os"));
-var path61 = __toESM(require("path"));
+var fs58 = __toESM(require("fs"));
+var os47 = __toESM(require("os"));
+var path62 = __toESM(require("path"));
 var _onboardingSeam = {
-  markerPath: (sessionId) => path61.join(os46.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
-  exists: (p2) => fs57.existsSync(p2),
+  markerPath: (sessionId) => path62.join(os47.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
+  exists: (p2) => fs58.existsSync(p2),
   write: (p2) => {
-    fs57.mkdirSync(path61.dirname(p2), { recursive: true });
-    fs57.writeFileSync(p2, "");
+    fs58.mkdirSync(path62.dirname(p2), { recursive: true });
+    fs58.writeFileSync(p2, "");
   },
   disabled: () => {
     const v = process.env.CODEAM_ONBOARDING_DISABLED;
@@ -26742,7 +27246,7 @@ function resolveRepoName(cwd) {
       if (name) return name;
     }
   }
-  const base = path61.basename(cwd || "");
+  const base = path62.basename(cwd || "");
   if (base && !isUuid(base)) return base;
   return "this project";
 }
@@ -26994,8 +27498,8 @@ var import_crypto5 = require("crypto");
 
 // src/services/turn-files/git-changeset.ts
 var import_child_process27 = require("child_process");
-var fs58 = __toESM(require("fs/promises"));
-var path62 = __toESM(require("path"));
+var fs59 = __toESM(require("fs/promises"));
+var path63 = __toESM(require("path"));
 async function collectRepoChangeset(opts) {
   const status2 = await runGit3(opts.repoRoot, ["status", "--porcelain=v1", "-z"]);
   if (status2 === null) return null;
@@ -27013,7 +27517,7 @@ async function collectRepoChangeset(opts) {
     let stats;
     if (row.fileStatus === "added" && numstatEntry === void 0) {
       const lineCount = await readUntrackedLineCount(
-        path62.join(opts.repoRoot, row.filePath)
+        path63.join(opts.repoRoot, row.filePath)
       );
       stats = { added: lineCount, removed: 0 };
     } else {
@@ -27044,7 +27548,7 @@ function readUntrackedLineCount(absPath) {
 }
 async function defaultReadUntrackedLineCount(absPath) {
   try {
-    const content = await fs58.readFile(absPath, "utf8");
+    const content = await fs59.readFile(absPath, "utf8");
     let count = 0;
     let pos = -1;
     while ((pos = content.indexOf("\n", pos + 1)) !== -1) {
@@ -27136,7 +27640,7 @@ function defaultRunGit(cwd, args2) {
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs63 = await import("fs/promises");
+  const fs64 = await import("fs/promises");
   const out2 = [];
   await walk(workingDir, 0);
   return out2;
@@ -27144,7 +27648,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (depth > maxDepth) return;
     let entries = [];
     try {
-      const dirents = await fs63.readdir(dir, { withFileTypes: true });
+      const dirents = await fs64.readdir(dir, { withFileTypes: true });
       entries = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -27155,8 +27659,8 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (hasGit) {
       out2.push({
         repoRoot: dir,
-        repoPath: path62.relative(workingDir, dir),
-        repoName: path62.basename(dir)
+        repoPath: path63.relative(workingDir, dir),
+        repoName: path63.basename(dir)
       });
       return;
     }
@@ -27164,15 +27668,15 @@ async function discoverRepos(workingDir, maxDepth = 4) {
       if (!entry.isDirectory) continue;
       if (entry.name === "node_modules") continue;
       if (entry.name === "dist" || entry.name === "build") continue;
-      await walk(path62.join(dir, entry.name), depth + 1);
+      await walk(path63.join(dir, entry.name), depth + 1);
     }
   }
 }
 
 // src/services/turn-files/files-outbox.ts
-var fs59 = __toESM(require("fs/promises"));
-var path63 = __toESM(require("path"));
-var import_os9 = require("os");
+var fs60 = __toESM(require("fs/promises"));
+var path64 = __toESM(require("path"));
+var import_os11 = require("os");
 var HOME_OUTBOX_DIR = ".codeam/outbox";
 var MAX_AGE_MS = 24 * 60 * 60 * 1e3;
 var BACKOFF_STEPS_MS = [
@@ -27204,16 +27708,16 @@ var FilesOutbox = class {
   backoffIndex = 0;
   stopped = false;
   constructor(opts) {
-    const base = opts.baseDir ?? path63.join(homeDir(), HOME_OUTBOX_DIR);
-    this.filePath = path63.join(base, `${opts.sessionId}.jsonl`);
+    const base = opts.baseDir ?? path64.join(homeDir(), HOME_OUTBOX_DIR);
+    this.filePath = path64.join(base, `${opts.sessionId}.jsonl`);
     this.post = opts.post;
     this.autoSchedule = opts.autoSchedule !== false;
   }
   /** Persist the entry to disk and trigger a flush. Returns once the
    *  line is durable on disk (not once the POST succeeds). */
   async enqueue(entry) {
-    await fs59.mkdir(path63.dirname(this.filePath), { recursive: true });
-    await fs59.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
+    await fs60.mkdir(path64.dirname(this.filePath), { recursive: true });
+    await fs60.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
     this.backoffIndex = 0;
     if (this.autoSchedule) this.scheduleFlush(0);
   }
@@ -27302,7 +27806,7 @@ var FilesOutbox = class {
   async readAll() {
     let raw = "";
     try {
-      raw = await fs59.readFile(this.filePath, "utf8");
+      raw = await fs60.readFile(this.filePath, "utf8");
     } catch {
       return [];
     }
@@ -27326,12 +27830,12 @@ var FilesOutbox = class {
   async rewrite(entries) {
     const tmpPath = `${this.filePath}.${process.pid}.tmp`;
     if (entries.length === 0) {
-      await fs59.unlink(this.filePath).catch(() => void 0);
+      await fs60.unlink(this.filePath).catch(() => void 0);
       return;
     }
     const payload = entries.map((e) => JSON.stringify(e)).join("\n") + "\n";
-    await fs59.writeFile(tmpPath, payload, "utf8");
-    await fs59.rename(tmpPath, this.filePath);
+    await fs60.writeFile(tmpPath, payload, "utf8");
+    await fs60.rename(tmpPath, this.filePath);
   }
 };
 function applyJitter(ms) {
@@ -27339,7 +27843,7 @@ function applyJitter(ms) {
   return Math.round(ms * factor);
 }
 function homeDir() {
-  return process.env.HOME ?? process.env.USERPROFILE ?? (0, import_os9.tmpdir)();
+  return process.env.HOME ?? process.env.USERPROFILE ?? (0, import_os11.tmpdir)();
 }
 
 // src/services/turn-files/turn-file-aggregator.ts
@@ -30436,7 +30940,7 @@ var AcpDriver = class {
 };
 
 // src/baton/transcript-mirror.ts
-var fs60 = __toESM(require("fs"));
+var fs61 = __toESM(require("fs"));
 var TranscriptMirror = class {
   constructor(deps) {
     this.deps = deps;
@@ -30503,7 +31007,7 @@ var TranscriptMirror = class {
   }
 };
 function defaultWatch(file, onChange) {
-  const w3 = fs60.watch(file, { persistent: false }, () => onChange());
+  const w3 = fs61.watch(file, { persistent: false }, () => onChange());
   return () => w3.close();
 }
 
@@ -30755,15 +31259,15 @@ function toEpochMs(ts) {
 }
 
 // src/agents/claude/onboarding.ts
-var fs61 = __toESM(require("fs"));
-var os47 = __toESM(require("os"));
-var path64 = __toESM(require("path"));
+var fs62 = __toESM(require("fs"));
+var os48 = __toESM(require("os"));
+var path65 = __toESM(require("path"));
 function ensureClaudeOnboarded() {
   try {
-    const file = path64.join(os47.homedir(), ".claude.json");
+    const file = path65.join(os48.homedir(), ".claude.json");
     let config = {};
     try {
-      config = JSON.parse(fs61.readFileSync(file, "utf8"));
+      config = JSON.parse(fs62.readFileSync(file, "utf8"));
     } catch {
     }
     if (config.hasCompletedOnboarding === true && typeof config.theme === "string") {
@@ -30774,8 +31278,8 @@ function ensureClaudeOnboarded() {
     if (typeof config.lastOnboardingVersion !== "string") {
       config.lastOnboardingVersion = "2.1.177";
     }
-    fs61.mkdirSync(path64.dirname(file), { recursive: true });
-    fs61.writeFileSync(file, JSON.stringify(config, null, 2));
+    fs62.mkdirSync(path65.dirname(file), { recursive: true });
+    fs62.writeFileSync(file, JSON.stringify(config, null, 2));
     log.info("claude", "pre-completed Claude onboarding (skip first-run theme picker)");
   } catch (err) {
     log.warn("claude", `ensureClaudeOnboarded failed (non-fatal): ${err.message}`);
@@ -31449,7 +31953,7 @@ var import_picocolors11 = __toESM(require("picocolors"));
 var import_child_process28 = require("child_process");
 var import_util4 = require("util");
 var import_picocolors9 = __toESM(require("picocolors"));
-var path65 = __toESM(require("path"));
+var path66 = __toESM(require("path"));
 var execFileP6 = (0, import_util4.promisify)(import_child_process28.execFile);
 var MAX_BUFFER = 8 * 1024 * 1024;
 function resetStdinForChild() {
@@ -31938,7 +32442,7 @@ var GitHubCodespacesProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path65.posix.dirname(remotePath);
+    const remoteDir = path66.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote(remoteDir)}`,
       `cat > ${shellQuote(remotePath)}`
@@ -32008,7 +32512,7 @@ function shellQuote(s) {
 // src/services/providers/gitpod.ts
 var import_child_process29 = require("child_process");
 var import_util5 = require("util");
-var path66 = __toESM(require("path"));
+var path67 = __toESM(require("path"));
 var import_picocolors10 = __toESM(require("picocolors"));
 var execFileP7 = (0, import_util5.promisify)(import_child_process29.execFile);
 var MAX_BUFFER2 = 8 * 1024 * 1024;
@@ -32248,7 +32752,7 @@ var GitpodProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path66.posix.dirname(remotePath);
+    const remoteDir = path67.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote2(remoteDir)}`,
       `cat > ${shellQuote2(remotePath)}`
@@ -32284,7 +32788,7 @@ function shellQuote2(s) {
 // src/services/providers/gitlab-workspaces.ts
 var import_child_process30 = require("child_process");
 var import_util6 = require("util");
-var path67 = __toESM(require("path"));
+var path68 = __toESM(require("path"));
 var execFileP8 = (0, import_util6.promisify)(import_child_process30.execFile);
 var MAX_BUFFER3 = 8 * 1024 * 1024;
 var GITLAB_API_BASE = process.env.CODEAM_GITLAB_API_URL ?? "https://gitlab.com/api/v4";
@@ -32544,7 +33048,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
-    const remoteDir = path67.posix.dirname(remotePath);
+    const remoteDir = path68.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote3(remoteDir)}`, `cat > ${shellQuote3(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote3(remotePath)}`);
@@ -32612,7 +33116,7 @@ function shellQuote3(s) {
 // src/services/providers/railway.ts
 var import_child_process31 = require("child_process");
 var import_util7 = require("util");
-var path68 = __toESM(require("path"));
+var path69 = __toESM(require("path"));
 var execFileP9 = (0, import_util7.promisify)(import_child_process31.execFile);
 var MAX_BUFFER4 = 8 * 1024 * 1024;
 function resetStdinForChild4() {
@@ -32848,7 +33352,7 @@ var RailwayProvider = class {
     if (!projectId || !serviceId) {
       throw new Error("Invalid Railway workspace id (expected projectId/serviceId).");
     }
-    const remoteDir = path68.posix.dirname(remotePath);
+    const remoteDir = path69.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote4(remoteDir)}`, `cat > ${shellQuote4(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote4(remotePath)}`);
@@ -33494,8 +33998,8 @@ async function invite() {
 var import_node_dns = require("dns");
 var import_node_util5 = require("util");
 var import_node_crypto12 = require("crypto");
-var fs62 = __toESM(require("fs"));
-var path69 = __toESM(require("path"));
+var fs63 = __toESM(require("fs"));
+var path70 = __toESM(require("path"));
 var import_picocolors14 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util5.promisify)(import_node_dns.resolve);
 async function checkDns(apiBase2) {
@@ -33551,13 +34055,13 @@ async function checkHealth(apiBase2) {
   }
 }
 function checkConfigDir() {
-  const dir = path69.join(require("os").homedir(), ".codeam");
+  const dir = path70.join(require("os").homedir(), ".codeam");
   try {
-    fs62.mkdirSync(dir, { recursive: true, mode: 448 });
-    const probe = path69.join(dir, ".doctor-probe");
-    fs62.writeFileSync(probe, "ok", { mode: 384 });
-    const read2 = fs62.readFileSync(probe, "utf8");
-    fs62.unlinkSync(probe);
+    fs63.mkdirSync(dir, { recursive: true, mode: 448 });
+    const probe = path70.join(dir, ".doctor-probe");
+    fs63.writeFileSync(probe, "ok", { mode: 384 });
+    const read2 = fs63.readFileSync(probe, "utf8");
+    fs63.unlinkSync(probe);
     if (read2 !== "ok") throw new Error("write/read round-trip mismatch");
     return {
       id: "config-dir",
@@ -33597,9 +34101,9 @@ function checkSessions() {
   }
 }
 function checkAgentBinaries() {
-  const os49 = createOsStrategy();
+  const os50 = createOsStrategy();
   return getEnabledAgents().map((meta) => {
-    const found = os49.findInPath(meta.binaryName);
+    const found = os50.findInPath(meta.binaryName);
     return {
       id: `agent-${meta.id}`,
       label: `Agent binary: ${meta.displayName} (${meta.binaryName})`,
@@ -33621,7 +34125,7 @@ function checkNodePty() {
       detail: "not required on this platform"
     };
   }
-  const vendoredPath = path69.join(__dirname, "vendor", "node-pty");
+  const vendoredPath = path70.join(__dirname, "vendor", "node-pty");
   for (const target of [vendoredPath, "node-pty"]) {
     try {
       require(target);
@@ -33663,7 +34167,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.60.22" : "0.0.0-dev";
+  const cliVersion = true ? "2.60.24" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto12.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -33862,7 +34366,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.60.22" : "unknown";
+  const v = true ? "2.60.24" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 
@@ -34011,10 +34515,10 @@ var EXIT_CODE_NAMES = {
 };
 
 // src/index.ts
-var os48 = __toESM(require("os"));
+var os49 = __toESM(require("os"));
 if (!process.env.HOME) {
   try {
-    const home = os48.homedir();
+    const home = os49.homedir();
     if (home) process.env.HOME = home;
   } catch {
   }