codeam-cli 2.61.22 → 2.61.24

package/dist/index.js

@@ -806,6 +806,91 @@ function isKnownIntegrationId(id) {
   return id in INTEGRATION_REGISTRY;
 }
 
+// ../../packages/shared/src/skills/registry.ts
+var CODE_REVIEW_BODY = `Use this skill when reviewing a pull request. It defines what a high-signal
+review looks like so your inline comments are worth the author's time.
+
+## Review priorities (in order)
+1. **Correctness** \u2014 does the change do what the PR says, and only that? Trace the
+   changed paths for logic errors, off-by-one, null/undefined, wrong branch, and
+   inverted conditions. State a concrete failure scenario (inputs \u2192 wrong output)
+   for anything you flag as a bug.
+2. **Security** \u2014 untrusted input reaching a sink (SQL, shell, path, HTML), secrets
+   in code/logs, authz gaps, credentials passed via argv instead of env.
+3. **Tests** \u2014 does the change carry tests that would fail without it? Missing
+   coverage on a bug-prone path is a finding.
+4. **Clarity / reuse** \u2014 duplicated logic, a simpler existing helper, a name that
+   misleads. Only raise these when they materially affect maintainability.
+
+## Comment discipline
+- One finding per comment, anchored to the exact line.
+- Lead with severity: **blocker**, **should-fix**, or **nit**.
+- Say WHY (the failure or risk), not just WHAT. Propose the fix when it is short.
+- Do NOT restate the diff, praise trivially, or nitpick style a formatter owns.
+- If the PR is correct and well-tested, say so plainly and approve \u2014 a clean review
+  is a valid outcome, not a failure to find something.
+
+## Scope
+Review only what the diff changes and its direct blast radius. Do not demand
+unrelated refactors.`;
+var CODE_REVIEW_INSTRUCTION = `When reviewing this PR, prioritize correctness first, then security, then test
+coverage, then clarity/reuse. One finding per inline comment, anchored to the exact
+line, each led by a severity tag (blocker/should-fix/nit) and a concrete reason
+(the failure scenario or risk), not a restatement of the diff. If the change is
+correct and well-tested, approve and say so \u2014 finding nothing is a valid outcome.
+Review only the diff and its direct blast radius; do not demand unrelated refactors.`;
+var RESOLVE_CONFLICTS_BODY = `Use this skill when resolving merge conflicts on a pull request. The goal is a
+merge that preserves BOTH sides' intent, not one that just makes the file compile.
+
+## Method
+1. Understand each conflict hunk before editing: what did HEAD change, what did the
+   base branch change, and WHY. Read the surrounding function, not just the markers.
+2. Prefer a union of intents. Drop a side only when the two changes are genuinely
+   mutually exclusive \u2014 and when you do, keep the side that matches the PR's purpose.
+3. Never leave a conflict marker (\`<<<<<<<\`, \`=======\`, \`>>>>>>>\`) behind. Grep for
+   them before committing.
+4. After resolving, the code must build and its tests must pass. Run them. A merge
+   that resolves markers but breaks the build is not done.
+5. For lockfiles/generated files, regenerate rather than hand-merge.
+
+## Commit
+One commit that explains what was reconciled and any intent you had to choose
+between. Then push the branch.`;
+var RESOLVE_CONFLICTS_INSTRUCTION = `When resolving these merge conflicts, preserve both sides' intent \u2014 read each hunk's
+surrounding code to understand what HEAD and the base branch each changed and why,
+and prefer a union of intents; drop a side only when the two are mutually exclusive,
+keeping the side that matches the PR's purpose. Leave no conflict markers behind
+(grep for them). Regenerate lockfiles rather than hand-merging them. The result must
+build and pass tests \u2014 run them \u2014 before you commit and push.`;
+var SKILL_REGISTRY = {
+  "code-review": {
+    id: "code-review",
+    name: "Code Review",
+    description: `High-signal PR review: prioritize correctness \u2192 security \u2192 tests \u2192 clarity, one anchored finding per comment.`,
+    source: "curated",
+    delivery: {
+      skillFile: { body: CODE_REVIEW_BODY },
+      instruction: { body: CODE_REVIEW_INSTRUCTION }
+    }
+  },
+  "resolve-conflicts": {
+    id: "resolve-conflicts",
+    name: "Resolve Conflicts",
+    description: `Merge-conflict resolution that preserves both sides' intent, leaves no markers, and keeps the build green.`,
+    source: "curated",
+    delivery: {
+      skillFile: { body: RESOLVE_CONFLICTS_BODY },
+      instruction: { body: RESOLVE_CONFLICTS_INSTRUCTION }
+    }
+  }
+};
+function isSkillId(id) {
+  return Object.prototype.hasOwnProperty.call(SKILL_REGISTRY, id);
+}
+function getSkillDefinition(id) {
+  return isSkillId(id) ? SKILL_REGISTRY[id] : null;
+}
+
 // ../../packages/shared/src/api-url.ts
 var DEFAULT_API_BASE_URL = "https://api.codeagent-mobile.com";
 var DEV_API_BASE_URL = "https://dev-api.codeagent-mobile.com";
@@ -1130,11 +1215,11 @@ function quiet(fn) {
     log.debug(TAG, "ignored sync error", err);
   }
 }
-function rmIfExistsQuiet(path76) {
+function rmIfExistsQuiet(path78) {
   try {
-    fs2.rmSync(path76, { force: true });
+    fs2.rmSync(path78, { force: true });
   } catch (err) {
-    log.debug(TAG, `rmIfExists failed for ${path76}`, err);
+    log.debug(TAG, `rmIfExists failed for ${path78}`, err);
   }
 }
 function killQuiet(target, signal = "SIGTERM") {
@@ -1280,9 +1365,9 @@ var _default = makeConfig();
 var { getConfig, ensurePluginId, addSession, removeSession, setActiveSession, getActiveSession, getActiveSessionForAgent, setDisable1mContext, clearAll, saveCliConfig, loadCliConfig } = _default;
 
 // src/commands/pair-auto.ts
-var fs56 = __toESM(require("fs"));
-var os45 = __toESM(require("os"));
-var path60 = __toESM(require("path"));
+var fs58 = __toESM(require("fs"));
+var os48 = __toESM(require("os"));
+var path62 = __toESM(require("path"));
 var import_crypto4 = require("crypto");
 
 // src/services/telemetry.service.ts
@@ -1318,8 +1403,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? (0, import_pat
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path76) {
-  return path76.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path78) {
+  return path78.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 
 // ../../node_modules/@posthog/core/dist/featureFlagUtils.mjs
@@ -3799,9 +3884,9 @@ async function addSourceContext(frames) {
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-function getContextLinesFromFile(path76, ranges, output) {
+function getContextLinesFromFile(path78, ranges, output) {
   return new Promise((resolve8) => {
-    const stream = (0, import_node_fs.createReadStream)(path76);
+    const stream = (0, import_node_fs.createReadStream)(path78);
     const lineReaded = (0, import_node_readline.createInterface)({
       input: stream
     });
@@ -3816,7 +3901,7 @@ function getContextLinesFromFile(path76, ranges, output) {
     let rangeStart = range[0];
     let rangeEnd = range[1];
     function onStreamError() {
-      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path76, 1);
+      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path78, 1);
       lineReaded.close();
       lineReaded.removeAllListeners();
       destroyStreamAndResolve();
@@ -3877,8 +3962,8 @@ function clearLineContext(frame) {
   delete frame.context_line;
   delete frame.post_context;
 }
-function shouldSkipContextLinesForFile(path76) {
-  return path76.startsWith("node:") || path76.endsWith(".min.js") || path76.endsWith(".min.cjs") || path76.endsWith(".min.mjs") || path76.startsWith("data:");
+function shouldSkipContextLinesForFile(path78) {
+  return path78.startsWith("node:") || path78.endsWith(".min.js") || path78.endsWith(".min.cjs") || path78.endsWith(".min.mjs") || path78.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame) {
   if (void 0 !== frame.lineno && frame.lineno > MAX_CONTEXTLINES_LINENO) return true;
@@ -6032,7 +6117,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.61.22" : "0.0.0-dev",
+    cliVersion: true ? "2.61.24" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -6213,7 +6298,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.61.22",
+  version: "2.61.24",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6290,7 +6375,7 @@ var package_default = {
     "@agentclientprotocol/sdk": "1.2.1",
     "@clack/prompts": "^1.2.0",
     chokidar: "^3.6.0",
-    ignore: "^5.3.2",
+    ignore: "^7.0.6",
     picocolors: "^1.1.0",
     "qrcode-terminal": "^0.12.0",
     which: "^6.0.0",
@@ -6309,8 +6394,9 @@ var package_default = {
     "@vitest/coverage-v8": "^4.1.7",
     "node-pty": "^1.1.0",
     tsup: "^8.0.0",
-    typescript: "^6.0.3",
-    vitest: "^4.1.5"
+    typescript: "^7.0.2",
+    vitest: "^4.1.5",
+    yaml: "^2.9.0"
   }
 };
 
@@ -7377,7 +7463,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.61.22" ? { ideVersion: "2.61.22" } : {}
+      ..."2.61.24" ? { ideVersion: "2.61.24" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -8751,9 +8837,9 @@ function closeAllTerminals() {
 }
 
 // src/commands/start/handlers.ts
-var fs55 = __toESM(require("fs"));
-var os44 = __toESM(require("os"));
-var path59 = __toESM(require("path"));
+var fs57 = __toESM(require("fs"));
+var os47 = __toESM(require("os"));
+var path61 = __toESM(require("path"));
 var import_crypto3 = require("crypto");
 var import_child_process24 = require("child_process");
 
@@ -8831,7 +8917,12 @@ var startCommandSchema = import_zod.z.object({
     // Restore the caller's already-vaulted CodeRabbit credential onto this
     // session (no re-login) — fetches from the backend + installs + writes it.
     "provision",
-    "review"
+    "review",
+    // `skills_configure` — attach/detach a curated Agent Skill on a RUNNING
+    // session (Claude hot-reloads ~/.claude/skills/), or list what's installed.
+    "add",
+    "remove",
+    "list"
   ]).optional(),
   // `headroom_configure` — savings ingest URL delivered from the session
   // when enabling Headroom on-demand. Bounded to 2048 chars.
@@ -8938,7 +9029,11 @@ var startCommandSchema = import_zod.z.object({
       key: import_zod.z.string().min(1).max(256),
       value: import_zod.z.string().max(32768)
     })
-  ).max(512).optional()
+  ).max(512).optional(),
+  // `skills_configure` — the curated `SkillId` to add/remove. `list` (and a
+  // malformed/unknown id on add/remove) sends no `skillId` or an invalid one;
+  // `configureSkill` itself validates against the shared registry.
+  skillId: import_zod.z.string().min(1).max(128).optional()
 });
 function parsePayload2(schema, raw) {
   const result = schema.safeParse(raw);
@@ -12224,10 +12319,10 @@ function buildForPlatform(platform3) {
 var import_node_crypto4 = require("crypto");
 
 // src/agents/claude/resolver.ts
-function buildClaudeLaunch(extraArgs = [], os53 = createOsStrategy()) {
-  const found = os53.findInPath("claude") ?? os53.findInPath("claude-code");
+function buildClaudeLaunch(extraArgs = [], os57 = createOsStrategy()) {
+  const found = os57.findInPath("claude") ?? os57.findInPath("claude-code");
   if (!found) return null;
-  return os53.buildLaunch(found, extraArgs);
+  return os57.buildLaunch(found, extraArgs);
 }
 
 // src/agents/claude/installer.ts
@@ -12817,8 +12912,8 @@ var ClaudeRuntimeStrategy = class {
   meta = getAgent("claude");
   mode = "interactive";
   os;
-  constructor(os53) {
-    this.os = os53;
+  constructor(os57) {
+    this.os = os57;
   }
   /**
    * Claude Code's react-ink TUI enables bracketed-paste mode at
@@ -13598,8 +13693,8 @@ function codexCredentialLocator() {
 function codexLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os53 = createOsStrategy();
-      return os53.findInPath("codex") !== null;
+      const os57 = createOsStrategy();
+      return os57.findInPath("codex") !== null;
     },
     launch() {
       return (0, import_node_child_process4.spawn)("codex", ["login"], { stdio: "inherit" });
@@ -13622,8 +13717,8 @@ var CodexRuntimeStrategy = class {
   meta = getAgent("codex");
   mode = "interactive";
   os;
-  constructor(os53) {
-    this.os = os53;
+  constructor(os57) {
+    this.os = os57;
   }
   async prepareLaunch() {
     let binary = this.os.findInPath("codex");
@@ -13732,12 +13827,12 @@ var CodexRuntimeStrategy = class {
     });
   }
 };
-function resolveNpm(os53) {
-  return os53.id === "win32" ? "npm.cmd" : "npm";
+function resolveNpm(os57) {
+  return os57.id === "win32" ? "npm.cmd" : "npm";
 }
-async function installCodexViaNpm(os53) {
+async function installCodexViaNpm(os57) {
   return new Promise((resolve8, reject) => {
-    const proc = (0, import_node_child_process5.spawn)(resolveNpm(os53), ["install", "-g", "@openai/codex"], {
+    const proc = (0, import_node_child_process5.spawn)(resolveNpm(os57), ["install", "-g", "@openai/codex"], {
       stdio: "inherit"
     });
     proc.on("close", (code) => {
@@ -13754,16 +13849,16 @@ async function installCodexViaNpm(os53) {
     });
   });
 }
-function augmentNpmGlobalBin(os53) {
+function augmentNpmGlobalBin(os57) {
   try {
-    const result = (0, import_node_child_process5.spawnSync)(resolveNpm(os53), ["prefix", "-g"], {
+    const result = (0, import_node_child_process5.spawnSync)(resolveNpm(os57), ["prefix", "-g"], {
       stdio: ["ignore", "pipe", "ignore"]
     });
     if (result.status !== 0) return;
     const prefix = result.stdout.toString().trim();
     if (!prefix) return;
-    const binDir = os53.id === "win32" ? prefix : path24.join(prefix, "bin");
-    os53.augmentPath([binDir]);
+    const binDir = os57.id === "win32" ? prefix : path24.join(prefix, "bin");
+    os57.augmentPath([binDir]);
   } catch {
   }
 }
@@ -13847,9 +13942,9 @@ var import_node_child_process8 = require("child_process");
 // src/agents/coderabbit/installer.ts
 var import_node_child_process6 = require("child_process");
 var INSTALL_URL = "https://cli.coderabbit.ai/install.sh";
-async function ensureCoderabbitInstalled(os53) {
-  if (os53.findInPath("coderabbit")) return true;
-  if (os53.id === "win32") {
+async function ensureCoderabbitInstalled(os57) {
+  if (os57.findInPath("coderabbit")) return true;
+  if (os57.id === "win32") {
     console.error(
       "\n  \u2717 CodeRabbit on Windows requires WSL.\n    Install the CLI inside your WSL distribution\n    (curl -fsSL https://cli.coderabbit.ai/install.sh | sh)\n    then re-run `codeam link coderabbit` from WSL.\n"
     );
@@ -13882,8 +13977,8 @@ async function ensureCoderabbitInstalled(os53) {
     proc.on("error", () => finish(false));
   });
   if (!ok) return false;
-  os53.augmentPath([`${os53.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
-  return os53.findInPath("coderabbit") !== null;
+  os57.augmentPath([`${os57.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
+  return os57.findInPath("coderabbit") !== null;
 }
 
 // src/agents/coderabbit/link.ts
@@ -13918,10 +14013,10 @@ function coderabbitCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function coderabbitLoginLauncher(os53) {
+function coderabbitLoginLauncher(os57) {
   return {
     async ensureInstalled() {
-      return ensureCoderabbitInstalled(os53);
+      return ensureCoderabbitInstalled(os57);
     },
     launch() {
       return (0, import_node_child_process7.spawn)("coderabbit", ["auth", "login"], { stdio: "inherit" });
@@ -13977,8 +14072,8 @@ function pickLine(obj) {
 function toHunk(raw, groupSeverity) {
   if (!raw || typeof raw !== "object") return null;
   const o = raw;
-  const path76 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
-  if (!path76) return null;
+  const path78 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
+  if (!path78) return null;
   const message = asString(
     pick(o, [
       "comment",
@@ -13995,7 +14090,7 @@ function toHunk(raw, groupSeverity) {
   const severity = normSeverity(pick(o, ["severity", "level", "priority", "impact"])) ?? normSeverity(groupSeverity);
   const locObj = pick(o, ["location"]) ?? o;
   return {
-    path: path76.trim(),
+    path: path78.trim(),
     line: pickLine(o) ?? pickLine(locObj),
     severity,
     message: (title && message ? `${title}: ${message}` : title || message).trim() || "(no message)"
@@ -14078,10 +14173,10 @@ function parsePlain(stdout) {
   for (const line of stdout.split(/\r?\n/)) {
     const m = line.match(HUNK_LINE_RE);
     if (!m) continue;
-    const [, path76, lineNo, sevToken, message] = m;
-    if (!path76 || !lineNo || !message) continue;
+    const [, path78, lineNo, sevToken, message] = m;
+    if (!path78 || !lineNo || !message) continue;
     hunks.push({
-      path: path76.trim(),
+      path: path78.trim(),
       line: Number(lineNo),
       severity: sevToken ? SEVERITY_MAP[sevToken.toLowerCase()] : void 0,
       message: message.trim().replace(/^[*-]\s+/, "")
@@ -14141,8 +14236,8 @@ var CoderabbitRuntimeStrategy = class {
   meta = getAgent("coderabbit");
   mode = "batch";
   os;
-  constructor(os53) {
-    this.os = os53;
+  constructor(os57) {
+    this.os = os57;
   }
   getDefaultArgs() {
     return ["review", "--agent"];
@@ -14413,10 +14508,10 @@ function cursorCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function cursorLoginLauncher(os53) {
+function cursorLoginLauncher(os57) {
   return {
     async ensureInstalled() {
-      if (os53.findInPath("cursor-agent")) return true;
+      if (os57.findInPath("cursor-agent")) return true;
       console.error(
         "\n  \u2717 cursor-agent binary not on PATH.\n    Install Cursor (https://cursor.com/) and ensure the CLI\n    plugin is enabled, then re-run `codeam link cursor`.\n"
       );
@@ -14480,8 +14575,8 @@ var CursorRuntimeStrategy = class {
   meta = getAgent("cursor");
   mode = "interactive";
   os;
-  constructor(os53) {
-    this.os = os53;
+  constructor(os57) {
+    this.os = os57;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("cursor-agent");
@@ -14697,10 +14792,10 @@ function aiderCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function aiderLoginLauncher(os53) {
+function aiderLoginLauncher(os57) {
   return {
     async ensureInstalled() {
-      if (os53.findInPath("aider")) return true;
+      if (os57.findInPath("aider")) return true;
       console.error(
         "\n  \u2717 aider binary not on PATH.\n    Install Aider:\n      pip install aider-chat\n    then re-run `codeam link aider`.\n"
       );
@@ -14710,7 +14805,7 @@ function aiderLoginLauncher(os53) {
       console.error(
         "\n  Aider has no interactive login flow.\n    Set ANTHROPIC_API_KEY or OPENAI_API_KEY in your shell,\n    or re-run `codeam link aider --api-key=<your-key>`.\n"
       );
-      return (0, import_node_child_process11.spawn)(os53.id === "win32" ? "cmd.exe" : "sh", os53.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
+      return (0, import_node_child_process11.spawn)(os57.id === "win32" ? "cmd.exe" : "sh", os57.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
         stdio: "ignore"
       });
     }
@@ -14782,8 +14877,8 @@ var AiderRuntimeStrategy = class {
   meta = getAgent("aider");
   mode = "interactive";
   os;
-  constructor(os53) {
-    this.os = os53;
+  constructor(os57) {
+    this.os = os57;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("aider");
@@ -14915,8 +15010,8 @@ function geminiCredentialLocator() {
 function geminiLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os53 = createOsStrategy();
-      return os53.findInPath("gemini") !== null;
+      const os57 = createOsStrategy();
+      return os57.findInPath("gemini") !== null;
     },
     launch() {
       return (0, import_node_child_process12.spawn)("gemini", ["auth", "login"], { stdio: "inherit" });
@@ -15106,8 +15201,8 @@ var GeminiRuntimeStrategy = class {
   meta = getAgent("gemini");
   mode = "interactive";
   os;
-  constructor(os53) {
-    this.os = os53;
+  constructor(os57) {
+    this.os = os57;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("gemini");
@@ -15398,8 +15493,8 @@ var KimiRuntimeStrategy = class {
   meta = getAgent("kimi");
   mode = "interactive";
   os;
-  constructor(os53) {
-    this.os = os53;
+  constructor(os57) {
+    this.os = os57;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("kimi");
@@ -15512,19 +15607,19 @@ var KimiRuntimeStrategy = class {
 
 // src/agents/registry.ts
 var runtimeBuilders = {
-  claude: (os53) => new ClaudeRuntimeStrategy(os53),
-  codex: (os53) => new CodexRuntimeStrategy(os53),
-  coderabbit: (os53) => new CoderabbitRuntimeStrategy(os53),
-  cursor: (os53) => new CursorRuntimeStrategy(os53),
-  aider: (os53) => new AiderRuntimeStrategy(os53),
-  gemini: (os53) => new GeminiRuntimeStrategy(os53),
-  kimi: (os53) => new KimiRuntimeStrategy(os53)
+  claude: (os57) => new ClaudeRuntimeStrategy(os57),
+  codex: (os57) => new CodexRuntimeStrategy(os57),
+  coderabbit: (os57) => new CoderabbitRuntimeStrategy(os57),
+  cursor: (os57) => new CursorRuntimeStrategy(os57),
+  aider: (os57) => new AiderRuntimeStrategy(os57),
+  gemini: (os57) => new GeminiRuntimeStrategy(os57),
+  kimi: (os57) => new KimiRuntimeStrategy(os57)
 };
 var deployBuilders = {
   claude: () => new ClaudeDeployStrategy(),
   codex: () => new CodexDeployStrategy()
 };
-function createAgentStrategy(agent, os53 = createOsStrategy()) {
+function createAgentStrategy(agent, os57 = createOsStrategy()) {
   if (!AGENT_REGISTRY[agent]?.enabled) {
     throw new Error(
       `Agent "${agent}" is not supported in this codeam-cli version. Upgrade with 'npm i -g codeam-cli@latest'.`
@@ -15534,10 +15629,10 @@ function createAgentStrategy(agent, os53 = createOsStrategy()) {
   if (!build) {
     throw new Error(`No runtime strategy registered for agent "${agent}"`);
   }
-  return build(os53);
+  return build(os57);
 }
-function createInteractiveAgentStrategy(agent, os53 = createOsStrategy()) {
-  const s = createAgentStrategy(agent, os53);
+function createInteractiveAgentStrategy(agent, os57 = createOsStrategy()) {
+  const s = createAgentStrategy(agent, os57);
   if (s.mode !== "interactive") {
     throw new Error(
       `Agent "${agent}" is a batch agent; use createAgentStrategy + .runOneShot for one-shot reviews.`
@@ -16234,26 +16329,26 @@ function restoreCoderabbitOauthBlob(value) {
   (0, import_node_fs5.writeFileSync)(path36.join(dir, file), contents, { mode: 384 });
 }
 async function configureCoderabbit(input, deps = {}) {
-  const os53 = deps.os ?? createOsStrategy();
+  const os57 = deps.os ?? createOsStrategy();
   const ensureInstalled = deps.ensureInstalled ?? ensureCoderabbitInstalled;
   const isLoggedIn = deps.isLoggedIn ?? defaultIsLoggedIn;
   const runOAuth = deps.runOAuthLogin ?? runCoderabbitOAuthLogin;
   const snapshot = deps.snapshotDir ?? (() => snapshotCredentialDir());
   const capture2 = deps.captureCredential ?? ((b) => diffCapturedCredential(b));
   const loginWithApiKey = deps.loginWithApiKey ?? defaultLoginWithApiKey;
-  const home = os53.homeDir();
-  os53.augmentPath(
-    os53.id === "win32" ? [
+  const home = os57.homeDir();
+  os57.augmentPath(
+    os57.id === "win32" ? [
       path36.join(home, ".local", "bin"),
       path36.join(process.env.APPDATA ?? path36.join(home, "AppData", "Roaming"), "npm"),
       path36.join(home, "scoop", "shims")
     ] : [path36.join(home, ".local", "bin"), "/opt/homebrew/bin", "/usr/local/bin"]
   );
-  const installed2 = os53.findInPath("coderabbit") !== null;
+  const installed2 = os57.findInPath("coderabbit") !== null;
   const base = () => ({
     action: input.action,
     supported: true,
-    installed: os53.findInPath("coderabbit") !== null,
+    installed: os57.findInPath("coderabbit") !== null,
     loggedIn: false
   });
   if (input.action === "status") {
@@ -16267,7 +16362,7 @@ async function configureCoderabbit(input, deps = {}) {
     const key = (input.apiKey ?? "").trim();
     if (!key) return { ...res2, error: "No API key provided" };
     if (!res2.installed) {
-      const ok = await ensureInstalled(os53);
+      const ok = await ensureInstalled(os57);
       res2.installed = ok;
       if (!ok) return { ...res2, error: "CodeRabbit CLI could not be installed" };
     }
@@ -16291,7 +16386,7 @@ async function configureCoderabbit(input, deps = {}) {
     }
     if (!res2.installed) {
       deps.onEvent?.({ kind: "installing" });
-      const ok = await ensureInstalled(os53);
+      const ok = await ensureInstalled(os57);
       res2.installed = ok;
       if (!ok) return { ...res2, error: "CodeRabbit CLI could not be installed" };
     }
@@ -16321,7 +16416,7 @@ async function configureCoderabbit(input, deps = {}) {
     const res2 = base();
     if (!installed2) {
       deps.onEvent?.({ kind: "installing" });
-      const ok = await ensureInstalled(os53);
+      const ok = await ensureInstalled(os57);
       res2.installed = ok;
       if (!ok) return { ...res2, error: "CodeRabbit CLI could not be installed" };
     }
@@ -16361,7 +16456,7 @@ async function configureCoderabbit(input, deps = {}) {
   }
   const res = base();
   if (!res.installed) {
-    const ok = await ensureInstalled(os53);
+    const ok = await ensureInstalled(os57);
     res.installed = ok;
     if (!ok) return { ...res, error: "CodeRabbit CLI is not installed" };
   }
@@ -16545,9 +16640,9 @@ function defaultRunGh(args2) {
 
 // src/commands/host-agent.ts
 var import_node_child_process24 = require("child_process");
-var os36 = __toESM(require("os"));
-var fs42 = __toESM(require("fs"));
-var path45 = __toESM(require("path"));
+var os37 = __toESM(require("os"));
+var fs43 = __toESM(require("fs"));
+var path46 = __toESM(require("path"));
 
 // src/integrations/manifest.ts
 var import_node_fs7 = __toESM(require("fs"));
@@ -16622,14 +16717,84 @@ function clearIntegrationsManifest() {
   }
 }
 
+// src/skills/manifest.ts
+var import_node_fs8 = __toESM(require("fs"));
+var import_node_os7 = __toESM(require("os"));
+var import_node_path6 = __toESM(require("path"));
+function skillsManifestPath() {
+  return import_node_path6.default.join(import_node_os7.default.homedir(), ".codeam", "skills.json");
+}
+function readSkillsManifest() {
+  try {
+    const raw = JSON.parse(import_node_fs8.default.readFileSync(skillsManifestPath(), "utf8"));
+    if (!Array.isArray(raw?.skills)) return null;
+    raw.skills = raw.skills.filter(
+      (s) => Boolean(s) && typeof s === "object" && typeof s.id === "string"
+    );
+    return raw;
+  } catch {
+    return null;
+  }
+}
+function persistSkillsManifest(m) {
+  try {
+    const file = skillsManifestPath();
+    import_node_fs8.default.mkdirSync(import_node_path6.default.dirname(file), { recursive: true, mode: 448 });
+    const tmp = `${file}.tmp-${process.pid}`;
+    import_node_fs8.default.writeFileSync(tmp, JSON.stringify(m, null, 2), { encoding: "utf8", mode: 384 });
+    import_node_fs8.default.renameSync(tmp, file);
+    restrictToOwner(file);
+  } catch (err) {
+    log.warn(
+      "skills",
+      `failed to persist skills manifest (best-effort): ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+}
+function clearSkillsManifest() {
+  try {
+    import_node_fs8.default.rmSync(skillsManifestPath(), { force: true });
+  } catch {
+  }
+}
+
+// src/skills/persist-from-payload.ts
+function persistOrClearSkillsFromPayload(skills) {
+  if (skills && skills.length > 0) persistSkillsManifest({ skills });
+  else clearSkillsManifest();
+}
+
+// src/lib/process-guards.ts
+var installed = false;
+function installRelayCrashGuards() {
+  if (installed) return;
+  installed = true;
+  process.on("unhandledRejection", (reason) => {
+    log.error("process", `unhandledRejection \u2014 relay kept alive \u2014 ${describeReason(reason)}`);
+  });
+  process.on("uncaughtException", (err) => {
+    log.error("process", `uncaughtException \u2014 relay kept alive \u2014 ${describeReason(err)}`);
+  });
+}
+function describeReason(reason) {
+  if (reason instanceof Error) {
+    return reason.stack ?? `${reason.name}: ${reason.message}`;
+  }
+  try {
+    return typeof reason === "string" ? reason : JSON.stringify(reason);
+  } catch {
+    return String(reason);
+  }
+}
+
 // src/commands/host/host-client.ts
-var fs34 = __toESM(require("fs"));
-var os30 = __toESM(require("os"));
-var path38 = __toESM(require("path"));
+var fs35 = __toESM(require("fs"));
+var os31 = __toESM(require("os"));
+var path39 = __toESM(require("path"));
 function sampleCpuTimes() {
   let idle = 0;
   let total = 0;
-  for (const cpu of os30.cpus()) {
+  for (const cpu of os31.cpus()) {
     const t2 = cpu.times;
     idle += t2.idle;
     total += t2.user + t2.nice + t2.sys + t2.idle + t2.irq;
@@ -16648,8 +16813,8 @@ var MetricsCollector = class {
     const prev = this.prevCpu;
     this.prevCpu = current;
     if (!prev) {
-      const cores = os30.cpus().length || 1;
-      const proxy = os30.loadavg()[0] / cores * 100;
+      const cores = os31.cpus().length || 1;
+      const proxy = os31.loadavg()[0] / cores * 100;
       return Math.min(100, Math.max(0, Math.round(proxy)));
     }
     const idleDelta = current.idle - prev.idle;
@@ -16662,8 +16827,8 @@ var MetricsCollector = class {
   collect() {
     return {
       cpuPct: this.cpuPct(),
-      ramUsedMb: Math.round((os30.totalmem() - os30.freemem()) / 1048576),
-      ramTotalMb: Math.round(os30.totalmem() / 1048576),
+      ramUsedMb: Math.round((os31.totalmem() - os31.freemem()) / 1048576),
+      ramTotalMb: Math.round(os31.totalmem() / 1048576),
       latencyMs: this.lastLatencyMs
     };
   }
@@ -16672,19 +16837,19 @@ function apiBase() {
   return process.env.CODEAM_API_URL ?? resolveApiBaseUrl();
 }
 function hostIdentityPath() {
-  return path38.join(os30.homedir(), ".codeam", "host-agent.json");
+  return path39.join(os31.homedir(), ".codeam", "host-agent.json");
 }
 function collectOsInfo() {
   return {
-    distro: os30.platform(),
-    arch: os30.arch(),
-    kernel: os30.release(),
+    distro: os31.platform(),
+    arch: os31.arch(),
+    kernel: os31.release(),
     nodeVersion: process.versions.node
   };
 }
 function loadHostIdentity() {
   try {
-    const raw = fs34.readFileSync(hostIdentityPath(), "utf8");
+    const raw = fs35.readFileSync(hostIdentityPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null && typeof parsed.hostId === "string" && typeof parsed.hostToken === "string" && typeof parsed.controlPluginId === "string") {
       const p2 = parsed;
@@ -16697,8 +16862,8 @@ function loadHostIdentity() {
 }
 function saveHostIdentity(identity) {
   const file = hostIdentityPath();
-  fs34.mkdirSync(path38.dirname(file), { recursive: true, mode: 448 });
-  fs34.writeFileSync(file, JSON.stringify(identity, null, 2), {
+  fs35.mkdirSync(path39.dirname(file), { recursive: true, mode: 448 });
+  fs35.writeFileSync(file, JSON.stringify(identity, null, 2), {
     encoding: "utf8",
     mode: 384
   });
@@ -16743,7 +16908,7 @@ function isTerminalEnrollError(err) {
 }
 function deleteHostIdentity() {
   try {
-    fs34.rmSync(hostIdentityPath(), { force: true });
+    fs35.rmSync(hostIdentityPath(), { force: true });
   } catch {
   }
 }
@@ -16767,7 +16932,7 @@ async function postJson(pathname, body) {
 function resolveHostLabel(label) {
   const explicit = label?.trim();
   const envLabel = process.env.CODEAM_HOST_LABEL?.trim();
-  const resolved = explicit || envLabel || os30.hostname();
+  const resolved = explicit || envLabel || os31.hostname();
   return resolved.slice(0, 80);
 }
 async function redeemEnrollToken(token, label) {
@@ -16872,17 +17037,17 @@ async function reportDeployProgress(auth, deployId, step, message, sessionId) {
 }
 
 // src/commands/host/workspace.ts
-var fs35 = __toESM(require("fs"));
-var os31 = __toESM(require("os"));
-var path39 = __toESM(require("path"));
+var fs36 = __toESM(require("fs"));
+var os32 = __toESM(require("os"));
+var path40 = __toESM(require("path"));
 var import_node_child_process18 = require("child_process");
 var import_node_util4 = require("util");
 var execFileP4 = (0, import_node_util4.promisify)(import_node_child_process18.execFile);
 function isAbsolutePathTarget(target) {
-  return path39.isAbsolute(target);
+  return path40.isAbsolute(target);
 }
 function selfHostedWorkspaceRoot() {
-  return path39.join(os31.homedir(), ".codeam", "self-hosted");
+  return path40.join(os32.homedir(), ".codeam", "self-hosted");
 }
 function nonInteractiveGitEnv() {
   return {
@@ -16935,13 +17100,13 @@ async function fetchGithubIdentity(token) {
 async function configureGitCredentials(dest, repoRef, cloneToken) {
   const gh = githubOwnerRepo(repoRef.trim());
   if (!gh || !cloneToken) return;
-  const credFile = path39.join(dest, ".git", "codeam-credentials");
-  fs35.writeFileSync(credFile, `https://x-access-token:${cloneToken}@github.com
+  const credFile = path40.join(dest, ".git", "codeam-credentials");
+  fs36.writeFileSync(credFile, `https://x-access-token:${cloneToken}@github.com
 `, { mode: 384 });
   restrictToOwner(credFile);
   const env = nonInteractiveGitEnv();
   const git2 = (args2) => execFileP4("git", ["-C", dest, ...args2], { timeout: 3e4, env });
-  const credFilePosix = credFile.split(path39.sep).join("/");
+  const credFilePosix = credFile.split(path40.sep).join("/");
   await git2(["config", "--local", "--replace-all", "credential.helper", ""]).catch(() => {
   });
   await git2([
@@ -16977,17 +17142,17 @@ function maskToken(text, cloneToken) {
 }
 async function prepareWorkspace(repoOrPath, deployId, cloneToken) {
   if (isAbsolutePathTarget(repoOrPath)) {
-    if (!fs35.existsSync(repoOrPath)) {
+    if (!fs36.existsSync(repoOrPath)) {
       throw new Error(`deploy target path does not exist: ${repoOrPath}`);
     }
     return repoOrPath;
   }
-  const dest = path39.join(selfHostedWorkspaceRoot(), deployId);
-  if (fs35.existsSync(path39.join(dest, ".git"))) {
+  const dest = path40.join(selfHostedWorkspaceRoot(), deployId);
+  if (fs36.existsSync(path40.join(dest, ".git"))) {
     if (cloneToken) await configureGitCredentials(dest, repoOrPath, cloneToken);
     return dest;
   }
-  fs35.mkdirSync(selfHostedWorkspaceRoot(), { recursive: true, mode: 448 });
+  fs36.mkdirSync(selfHostedWorkspaceRoot(), { recursive: true, mode: 448 });
   const cloneUrl = repoCloneUrl(repoOrPath, cloneToken);
   try {
     await execFileP4("git", ["clone", "--depth", "1", cloneUrl, dest], {
@@ -17004,9 +17169,9 @@ async function prepareWorkspace(repoOrPath, deployId, cloneToken) {
 }
 
 // src/commands/host/agent-provisioning.ts
-var fs36 = __toESM(require("fs"));
-var os32 = __toESM(require("os"));
-var path40 = __toESM(require("path"));
+var fs37 = __toESM(require("fs"));
+var os33 = __toESM(require("os"));
+var path41 = __toESM(require("path"));
 var PUBLIC_TO_INTERNAL_AGENT = {
   claude_code: "claude",
   claude: "claude",
@@ -17022,22 +17187,22 @@ function toInternalAgentId(publicAgentId) {
   return PUBLIC_TO_INTERNAL_AGENT[publicAgentId] ?? null;
 }
 function ensureDir(dir) {
-  fs36.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs37.mkdirSync(dir, { recursive: true, mode: 448 });
 }
 function writeFile0600(filePath, contents) {
-  ensureDir(path40.dirname(filePath));
-  fs36.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
+  ensureDir(path41.dirname(filePath));
+  fs37.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
   restrictToOwner(filePath);
 }
 function rmIfExists(filePath) {
   try {
-    fs36.rmSync(filePath, { force: true });
+    fs37.rmSync(filePath, { force: true });
   } catch {
   }
 }
 var claudeProvisioner = {
   write(auth, home) {
-    const credentialsJson = path40.join(home, ".claude", ".credentials.json");
+    const credentialsJson = path41.join(home, ".claude", ".credentials.json");
     if (auth.kind === "api_key") {
       rmIfExists(credentialsJson);
       return { ANTHROPIC_API_KEY: auth.value };
@@ -17049,8 +17214,8 @@ var claudeProvisioner = {
     } else {
       rmIfExists(credentialsJson);
     }
-    const claudeJson = path40.join(home, ".claude.json");
-    if (!fs36.existsSync(claudeJson)) {
+    const claudeJson = path41.join(home, ".claude.json");
+    if (!fs37.existsSync(claudeJson)) {
       writeFile0600(
         claudeJson,
         JSON.stringify({ hasCompletedOnboarding: true, customApiKeyResponses: { approved: [] } })
@@ -17061,7 +17226,7 @@ var claudeProvisioner = {
 };
 var codexProvisioner = {
   write(auth, home) {
-    const authJson = path40.join(home, ".codex", "auth.json");
+    const authJson = path41.join(home, ".codex", "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { OPENAI_API_KEY: auth.value };
@@ -17072,8 +17237,8 @@ var codexProvisioner = {
 };
 var geminiProvisioner = {
   write(auth, home) {
-    const settingsJson = path40.join(home, ".gemini", "settings.json");
-    const oauthCreds = path40.join(home, ".gemini", "oauth_creds.json");
+    const settingsJson = path41.join(home, ".gemini", "settings.json");
+    const oauthCreds = path41.join(home, ".gemini", "oauth_creds.json");
     if (auth.kind === "api_key") {
       rmIfExists(oauthCreds);
       writeFile0600(settingsJson, '{"security":{"auth":{"selectedType":"gemini-api-key"}}}');
@@ -17086,7 +17251,7 @@ var geminiProvisioner = {
 };
 var cursorProvisioner = {
   write(auth, home) {
-    const authJson = path40.join(home, ".config", "cursor", "auth.json");
+    const authJson = path41.join(home, ".config", "cursor", "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { CURSOR_API_KEY: auth.value };
@@ -17128,22 +17293,22 @@ max_context_size = 262144
 var kimiProvisioner = {
   write(auth, home) {
     const credentialsFiles = [
-      path40.join(home, ".kimi", "credentials", "kimi-code.json"),
-      path40.join(home, ".kimi-code", "credentials", "kimi-code.json")
+      path41.join(home, ".kimi", "credentials", "kimi-code.json"),
+      path41.join(home, ".kimi-code", "credentials", "kimi-code.json")
     ];
     if (auth.kind === "api_key") {
       credentialsFiles.forEach(rmIfExists);
       return { KIMI_API_KEY: auth.value };
     }
     credentialsFiles.forEach((f) => writeFile0600(f, auth.value));
-    writeFile0600(path40.join(home, ".kimi-code", "config.toml"), KIMI_MANAGED_CONFIG_TOML);
+    writeFile0600(path41.join(home, ".kimi-code", "config.toml"), KIMI_MANAGED_CONFIG_TOML);
     return {};
   }
 };
 var coderabbitProvisioner = {
   write(auth, home) {
-    const dir = path40.join(home, ".coderabbit");
-    const authJson = path40.join(dir, "auth.json");
+    const dir = path41.join(home, ".coderabbit");
+    const authJson = path41.join(dir, "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { CODERABBIT_API_KEY: auth.value };
@@ -17155,13 +17320,13 @@ var coderabbitProvisioner = {
       try {
         const parsed = JSON.parse(value);
         if (typeof parsed.file === "string" && typeof parsed.contents === "string") {
-          file = path40.basename(parsed.file);
+          file = path41.basename(parsed.file);
           contents = parsed.contents;
         }
       } catch {
       }
     }
-    writeFile0600(path40.join(dir, file), contents);
+    writeFile0600(path41.join(dir, file), contents);
     return {};
   }
 };
@@ -17181,7 +17346,7 @@ var UnsupportedAgentError = class extends Error {
     this.agentId = agentId;
   }
 };
-function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os32.homedir()) {
+function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os33.homedir()) {
   const internal = toInternalAgentId(publicAgentId);
   if (!internal) throw new UnsupportedAgentError(publicAgentId);
   const provisioner = PROVISIONERS[internal];
@@ -17191,11 +17356,11 @@ function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os32.homedir(
 
 // src/commands/host/git-tooling.ts
 var import_node_child_process19 = require("child_process");
-var fs37 = __toESM(require("fs"));
-var os33 = __toESM(require("os"));
-var path41 = __toESM(require("path"));
+var fs38 = __toESM(require("fs"));
+var os34 = __toESM(require("os"));
+var path42 = __toESM(require("path"));
 function codeamBinDir() {
-  return process.env.CODEAM_BIN_DIR ?? path41.join(os33.homedir(), ".codeam", "bin");
+  return process.env.CODEAM_BIN_DIR ?? path42.join(os34.homedir(), ".codeam", "bin");
 }
 var FALLBACK_GH_VERSION = "2.62.0";
 var RELEASE_API = "https://api.github.com/repos/cli/cli/releases/latest";
@@ -17227,7 +17392,7 @@ async function download(url2, dest) {
     const res = await fetch(url2, { headers: { "User-Agent": "codeam-cli" } });
     if (!res.ok || !res.body) return false;
     const buf = Buffer.from(await res.arrayBuffer());
-    fs37.writeFileSync(dest, buf);
+    fs38.writeFileSync(dest, buf);
     return true;
   } catch {
     return false;
@@ -17250,8 +17415,8 @@ async function ensureGhCli(runner, token, deps = {}) {
     const version3 = await resolveVersionFn(token);
     const asset = `gh_${version3}_${osToken}_${arch2}`;
     const url2 = `https://github.com/cli/cli/releases/download/v${version3}/${asset}.${ext}`;
-    const tmpRoot = fs37.mkdtempSync(path41.join(os33.tmpdir(), "codeam-gh-"));
-    const archive = path41.join(tmpRoot, `${asset}.${ext}`);
+    const tmpRoot = fs38.mkdtempSync(path42.join(os34.tmpdir(), "codeam-gh-"));
+    const archive = path42.join(tmpRoot, `${asset}.${ext}`);
     if (!await downloadFn(url2, archive)) {
       log.warn("host-agent", "gh download failed \u2014 skipping (git pull/push still work via the credential helper)");
       return null;
@@ -17261,16 +17426,16 @@ async function ensureGhCli(runner, token, deps = {}) {
       log.warn("host-agent", `gh archive extraction failed (code=${String(extract.code)}) \u2014 skipping`);
       return null;
     }
-    const extractedBin = path41.join(tmpRoot, asset, "bin", binaryName);
-    if (!fs37.existsSync(extractedBin)) {
+    const extractedBin = path42.join(tmpRoot, asset, "bin", binaryName);
+    if (!fs38.existsSync(extractedBin)) {
       log.warn("host-agent", "gh binary not found in the extracted archive \u2014 skipping");
       return null;
     }
     const binDir = codeamBinDir();
-    fs37.mkdirSync(binDir, { recursive: true });
-    const target = path41.join(binDir, binaryName);
-    fs37.copyFileSync(extractedBin, target);
-    fs37.chmodSync(target, 493);
+    fs38.mkdirSync(binDir, { recursive: true });
+    const target = path42.join(binDir, binaryName);
+    fs38.copyFileSync(extractedBin, target);
+    fs38.chmodSync(target, 493);
     log.info("host-agent", `gh installed to ${target} (v${version3})`);
     return target;
   } catch (e) {
@@ -17757,23 +17922,23 @@ async function ensureModernPython(runner) {
 }
 
 // src/commands/host/headroom-bootstrap.ts
-var fs39 = __toESM(require("fs"));
-var path43 = __toESM(require("path"));
+var fs40 = __toESM(require("fs"));
+var path44 = __toESM(require("path"));
 
 // src/commands/host/headroom-config.ts
-var fs38 = __toESM(require("fs"));
-var os34 = __toESM(require("os"));
-var path42 = __toESM(require("path"));
+var fs39 = __toESM(require("fs"));
+var os35 = __toESM(require("os"));
+var path43 = __toESM(require("path"));
 function headroomConfigPath() {
-  return path42.join(os34.homedir(), ".codeam", "headroom-config.json");
+  return path43.join(os35.homedir(), ".codeam", "headroom-config.json");
 }
 function persistHeadroomConfig(config) {
   try {
     const file = headroomConfigPath();
-    fs38.mkdirSync(path42.dirname(file), { recursive: true, mode: 448 });
+    fs39.mkdirSync(path43.dirname(file), { recursive: true, mode: 448 });
     const tmp = `${file}.tmp-${process.pid}`;
-    fs38.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
-    fs38.renameSync(tmp, file);
+    fs39.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
+    fs39.renameSync(tmp, file);
     restrictToOwner(file);
   } catch (err) {
     log.warn(
@@ -17783,21 +17948,21 @@ function persistHeadroomConfig(config) {
   }
 }
 function agentSettingsPath(kind) {
-  const home = os34.homedir();
-  if (kind === "claude") return path42.join(home, ".claude", "settings.json");
-  if (kind === "codex") return path42.join(home, ".codex", "auth.json");
-  if (kind === "copilot") return path42.join(home, ".config", "github-copilot", "hosts.json");
+  const home = os35.homedir();
+  if (kind === "claude") return path43.join(home, ".claude", "settings.json");
+  if (kind === "codex") return path43.join(home, ".codex", "auth.json");
+  if (kind === "copilot") return path43.join(home, ".config", "github-copilot", "hosts.json");
   return null;
 }
 function backupAgentHeadroomConfig(kind) {
   const src = agentSettingsPath(kind);
   if (!src) return;
   try {
-    if (!fs38.existsSync(src)) return;
-    const dest = path42.join(os34.homedir(), ".codeam", `headroom-backup-${kind}.json`);
-    fs38.mkdirSync(path42.dirname(dest), { recursive: true, mode: 448 });
-    fs38.copyFileSync(src, dest);
-    fs38.chmodSync(dest, 384);
+    if (!fs39.existsSync(src)) return;
+    const dest = path43.join(os35.homedir(), ".codeam", `headroom-backup-${kind}.json`);
+    fs39.mkdirSync(path43.dirname(dest), { recursive: true, mode: 448 });
+    fs39.copyFileSync(src, dest);
+    fs39.chmodSync(dest, 384);
     log.info("host-agent", `headroom config backup: ${src} \u2192 ${dest}`);
   } catch (err) {
     log.warn(
@@ -17809,12 +17974,12 @@ function backupAgentHeadroomConfig(kind) {
 function restoreAgentHeadroomConfig(kind) {
   const dest = agentSettingsPath(kind);
   if (!dest) return false;
-  const src = path42.join(os34.homedir(), ".codeam", `headroom-backup-${kind}.json`);
-  if (!fs38.existsSync(src)) return false;
+  const src = path43.join(os35.homedir(), ".codeam", `headroom-backup-${kind}.json`);
+  if (!fs39.existsSync(src)) return false;
   try {
-    fs38.mkdirSync(path42.dirname(dest), { recursive: true, mode: 448 });
-    fs38.copyFileSync(src, dest);
-    fs38.chmodSync(dest, 384);
+    fs39.mkdirSync(path43.dirname(dest), { recursive: true, mode: 448 });
+    fs39.copyFileSync(src, dest);
+    fs39.chmodSync(dest, 384);
     log.info("host-agent", `headroom config restored: ${src} \u2192 ${dest}`);
     return true;
   } catch (err) {
@@ -17827,7 +17992,7 @@ function restoreAgentHeadroomConfig(kind) {
 }
 function readHeadroomChildEnv() {
   try {
-    const raw = fs38.readFileSync(headroomConfigPath(), "utf8");
+    const raw = fs39.readFileSync(headroomConfigPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed !== "object" || parsed === null) return {};
     const o = parsed;
@@ -17863,37 +18028,37 @@ function bundledClaudeBinDir() {
   const roots = /* @__PURE__ */ new Set();
   let dir = __dirname;
   for (let i = 0; i < 6; i++) {
-    roots.add(path43.join(dir, "node_modules"));
-    const parent = path43.dirname(dir);
+    roots.add(path44.join(dir, "node_modules"));
+    const parent = path44.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
   try {
     const main2 = require.resolve("@anthropic-ai/claude-agent-sdk");
-    const marker = `${path43.sep}@anthropic-ai${path43.sep}`;
+    const marker = `${path44.sep}@anthropic-ai${path44.sep}`;
     const idx = main2.lastIndexOf(marker);
     if (idx !== -1) roots.add(main2.slice(0, idx));
   } catch {
   }
   for (const nm of roots) {
-    const atAnthropic = path43.join(nm, "@anthropic-ai");
+    const atAnthropic = path44.join(nm, "@anthropic-ai");
     let entries;
     try {
-      entries = fs39.readdirSync(atAnthropic);
+      entries = fs40.readdirSync(atAnthropic);
     } catch {
       continue;
     }
     for (const entry of entries) {
       if (!entry.startsWith("claude-agent-sdk-")) continue;
-      const bin = path43.join(atAnthropic, entry, "claude");
-      if (fs39.existsSync(bin)) return path43.dirname(bin);
+      const bin = path44.join(atAnthropic, entry, "claude");
+      if (fs40.existsSync(bin)) return path44.dirname(bin);
     }
   }
   return null;
 }
 async function getFreeDiskBytes(dir) {
   try {
-    const s = await fs39.promises.statfs(dir);
+    const s = await fs40.promises.statfs(dir);
     return s.bsize * s.bavail;
   } catch {
     return null;
@@ -17955,7 +18120,7 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner,
   if (initKind === "claude") {
     const claudeDir = bundledClaudeBinDir();
     if (claudeDir) {
-      initEnv.PATH = `${claudeDir}${path43.delimiter}${process.env["PATH"] ?? ""}`;
+      initEnv.PATH = `${claudeDir}${path44.delimiter}${process.env["PATH"] ?? ""}`;
       log.info("host-agent", `headroom init: bundled claude on PATH (${claudeDir})`);
     } else {
       log.warn("host-agent", "headroom init: bundled claude binary not found \u2014 init may fail");
@@ -17990,9 +18155,9 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner,
 var import_node_child_process22 = require("child_process");
 
 // src/lib/updateNotifier.ts
-var fs40 = __toESM(require("fs"));
-var os35 = __toESM(require("os"));
-var path44 = __toESM(require("path"));
+var fs41 = __toESM(require("fs"));
+var os36 = __toESM(require("os"));
+var path45 = __toESM(require("path"));
 var https6 = __toESM(require("https"));
 var import_node_child_process21 = require("child_process");
 var import_picocolors3 = __toESM(require("picocolors"));
@@ -18001,12 +18166,12 @@ var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
 var TTL_MS = 24 * 60 * 60 * 1e3;
 var REQUEST_TIMEOUT_MS = 1500;
 function cachePath() {
-  const dir = path44.join(os35.homedir(), ".codeam");
-  return path44.join(dir, "update-check.json");
+  const dir = path45.join(os36.homedir(), ".codeam");
+  return path45.join(dir, "update-check.json");
 }
 function readCache() {
   try {
-    const raw = fs40.readFileSync(cachePath(), "utf8");
+    const raw = fs41.readFileSync(cachePath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.fetchedAt !== "number" || typeof parsed.latest !== "string") return null;
     return parsed;
@@ -18017,10 +18182,10 @@ function readCache() {
 function writeCache(cache) {
   try {
     const file = cachePath();
-    fs40.mkdirSync(path44.dirname(file), { recursive: true });
+    fs41.mkdirSync(path45.dirname(file), { recursive: true });
     const tmp = `${file}.${process.pid}.tmp`;
-    fs40.writeFileSync(tmp, JSON.stringify(cache));
-    fs40.renameSync(tmp, file);
+    fs41.writeFileSync(tmp, JSON.stringify(cache));
+    fs41.renameSync(tmp, file);
   } catch {
   }
 }
@@ -18094,8 +18259,8 @@ function isLinkedInstall() {
       timeout: 2e3
     }).trim();
     if (!root) return false;
-    const pkgPath = path44.join(root, PKG_NAME);
-    return fs40.lstatSync(pkgPath).isSymbolicLink();
+    const pkgPath = path45.join(root, PKG_NAME);
+    return fs41.lstatSync(pkgPath).isSymbolicLink();
   } catch {
     return false;
   }
@@ -18131,7 +18296,7 @@ function maybeAutoUpdate(currentVersion, latest) {
     return;
   }
   try {
-    fs40.unlinkSync(cachePath());
+    fs41.unlinkSync(cachePath());
   } catch {
   }
   process.stderr.write(`  ${import_picocolors3.default.green("\u2713")} Updated. Resuming session...
@@ -18147,7 +18312,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.61.22" : null;
+  const current = true ? "2.61.24" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -18164,7 +18329,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.61.22" : null;
+  const current = true ? "2.61.24" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -18184,7 +18349,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.61.22" : null;
+  return true ? "2.61.24" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve8) => {
@@ -18251,7 +18416,7 @@ async function runSelfUpdate() {
 
 // src/commands/host/teardown.ts
 var import_node_child_process23 = require("child_process");
-var fs41 = __toESM(require("fs"));
+var fs42 = __toESM(require("fs"));
 var defaultDisableService = () => {
   try {
     (0, import_node_child_process23.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
@@ -18260,7 +18425,7 @@ var defaultDisableService = () => {
 };
 var defaultTeardownHeadroom = () => {
   try {
-    const kind = JSON.parse(fs41.readFileSync(headroomConfigPath(), "utf8")).agent;
+    const kind = JSON.parse(fs42.readFileSync(headroomConfigPath(), "utf8")).agent;
     if (kind) {
       (0, import_node_child_process23.execFileSync)("headroom", ["unwrap", kind], { stdio: "ignore", timeout: 15e3 });
     }
@@ -18328,8 +18493,8 @@ function maybeResumeLocalHeadroomReporter(ctx) {
   if (process.env["HEADROOM_ENABLED"] === "1") return null;
   try {
     const file = headroomConfigPath();
-    if (!fs42.existsSync(file)) return null;
-    const cfg = JSON.parse(fs42.readFileSync(file, "utf8"));
+    if (!fs43.existsSync(file)) return null;
+    const cfg = JSON.parse(fs43.readFileSync(file, "utf8"));
     if (!cfg?.enabled) return null;
     const agent = cfg.agent ?? "claude";
     const ingestUrl = `${resolveApiBaseUrl()}/api/sessions/${ctx.sessionId}/headroom-savings`;
@@ -18511,8 +18676,12 @@ var defaultResumeSpawner = (env, cwd) => (0, import_node_child_process24.spawn)(
   detached: false
 });
 var defaultOnIdentityRejected = () => {
+  defaultDisableService();
   deleteHostIdentity();
-  log.warn("host-agent", "host identity rejected by backend \u2014 wiped sealed identity, exiting");
+  log.warn(
+    "host-agent",
+    "host identity rejected by backend \u2014 disabled service + wiped sealed identity, exiting"
+  );
   process.exit(1);
 };
 var defaultOnUpdated = (version3) => {
@@ -18830,13 +18999,13 @@ var HostAgentSupervisor = class {
     const relay = this.relay;
     if (!relay) return;
     const raw = cmd.payload?.path;
-    const target = typeof raw === "string" && raw.trim() ? path45.resolve(raw.trim()) : os36.homedir();
+    const target = typeof raw === "string" && raw.trim() ? path46.resolve(raw.trim()) : os37.homedir();
     try {
-      const dirents = await fs42.promises.readdir(target, { withFileTypes: true });
+      const dirents = await fs43.promises.readdir(target, { withFileTypes: true });
       const entries = dirents.filter((d3) => !d3.name.startsWith(".")).map((d3) => ({ name: d3.name, isDir: d3.isDirectory() })).sort(
         (a, b) => a.isDir === b.isDir ? a.name.localeCompare(b.name) : a.isDir ? -1 : 1
       );
-      const parent = path45.dirname(target);
+      const parent = path46.dirname(target);
       await relay.sendResult(cmd.id, "completed", {
         path: target,
         // null at the filesystem root so the UI can hide the ".." affordance.
@@ -18931,10 +19100,13 @@ var HostAgentSupervisor = class {
       "CODEAM_HOST_LABEL=CodeAgent Box",
       // The enroll token above is a SINGLE-USE bootstrap, but it lives in the
       // container's fixed env — it can't be stripped after first boot like the
-      // self-hosted systemd unit does. This flag tells `resolveHostIdentity`
-      // that on a restart (docker restart / reboot / fleet_start_box wake) an
-      // expired-token redeem is EXPECTED: resume from the sealed identity
-      // instead of dying with "token expired". Not a secret → plain KEY=value.
+      // self-hosted systemd unit does, so on every restart (docker restart /
+      // reboot / fleet_start_box wake) the redeem terminally expires.
+      // `resolveHostIdentity` now resumes from a sealed identity on ANY
+      // terminal enroll-token rejection (not just ephemeral boxes — see its
+      // doc comment), so this flag is no longer load-bearing for that
+      // decision; kept set for observability/back-compat with older CLI
+      // builds that still gate on it. Not a secret → plain KEY=value.
       "-e",
       "CODEAM_ENROLL_EPHEMERAL=1",
       image
@@ -19049,9 +19221,9 @@ var HostAgentSupervisor = class {
           API_TIMEOUT_MS: "3000000",
           CODEAM_AUTO_TOKEN: payload.autoPairToken
         };
-        const houseConfigDir = path45.join(os36.homedir(), ".codeam", "house-claude");
+        const houseConfigDir = path46.join(os37.homedir(), ".codeam", "house-claude");
         try {
-          fs42.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
+          fs43.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
         } catch {
         }
         childEnv.CLAUDE_CONFIG_DIR = houseConfigDir;
@@ -19069,14 +19241,14 @@ var HostAgentSupervisor = class {
         report("installing", "installing agent CLI");
         await this.runAgentInstall(payload.agentInstallScript);
       }
-      const home = process.env.HOME || os36.homedir();
+      const home = process.env.HOME || os37.homedir();
       childEnv.PATH = `${home}/.local/bin:${process.env.PATH ?? ""}`;
       if (payload.cloneToken) {
         try {
           report("preparing", "configuring git tooling");
           const ghCmd = await ensureGhCli(defaultGitToolingRunner, payload.cloneToken);
           if (ghCmd) {
-            childEnv.PATH = `${codeamBinDir()}${path45.delimiter}${childEnv.PATH}`;
+            childEnv.PATH = `${codeamBinDir()}${path46.delimiter}${childEnv.PATH}`;
             await ensureGhAuth(defaultGitToolingRunner, ghCmd, payload.cloneToken);
           }
         } catch (e) {
@@ -19092,7 +19264,7 @@ var HostAgentSupervisor = class {
       }
       if (payload.headroomEnabled && payload.headroomAgent && payload.headroomSavingsIngestUrl && isHeadroomSupportedAgent(payload.headroomAgent)) {
         report("headroom", "setting up Headroom proxy");
-        const freeBytes = await this.getFreeDisk(os36.homedir());
+        const freeBytes = await this.getFreeDisk(os37.homedir());
         const alreadyInstalled = this.isHeadroomInstalled();
         if (!alreadyInstalled && freeBytes !== null && freeBytes < HEADROOM_MIN_FREE_DISK_BYTES) {
           const freeGb = (freeBytes / 1e9).toFixed(1);
@@ -19146,6 +19318,9 @@ var HostAgentSupervisor = class {
       } else {
         clearIntegrationsManifest();
       }
+      persistOrClearSkillsFromPayload(
+        payload.skills
+      );
       report("spawning", "starting agent");
       const proc = this.spawnSessionChild(childEnv, cwd, extraArgs);
       const child = {
@@ -19273,7 +19448,7 @@ var HostAgentSupervisor = class {
    */
   runAgentInstall(script) {
     return new Promise((resolve8) => {
-      const home = process.env.HOME || os36.homedir();
+      const home = process.env.HOME || os37.homedir();
       const child = (0, import_node_child_process24.spawn)("sh", ["-c", script], {
         env: { ...process.env, HOME: home },
         stdio: ["ignore", "pipe", "pipe"]
@@ -19378,10 +19553,10 @@ async function resolveHostIdentity(enrollToken) {
       return identity;
     } catch (err) {
       if (isTerminalEnrollError(err)) {
-        if (existing && process.env.CODEAM_ENROLL_EPHEMERAL === "1") {
+        if (existing) {
           log.info(
             "host-agent",
-            "ephemeral enroll token expired on restart; resuming from sealed identity"
+            "enroll token terminally rejected (expired/replayed) but a sealed identity is present; resuming from it \u2014 likely a restart, not a re-enroll"
           );
           return existing;
         }
@@ -19405,6 +19580,7 @@ async function resolveHostIdentity(enrollToken) {
   return null;
 }
 async function hostAgent(args2 = []) {
+  installRelayCrashGuards();
   const tokenArg = args2.find((a) => a.startsWith("--token="));
   const enrollToken = (tokenArg ? tokenArg.slice("--token=".length).trim() : "") || process.env.CODEAM_ENROLL_TOKEN || void 0;
   const identity = await resolveHostIdentity(enrollToken);
@@ -19464,9 +19640,9 @@ async function configureHeadroom(action, ctx, deps) {
 }
 
 // src/services/headroom/budget-relaunch.ts
-var fs43 = __toESM(require("fs"));
-var os37 = __toESM(require("os"));
-var path46 = __toESM(require("path"));
+var fs44 = __toESM(require("fs"));
+var os38 = __toESM(require("os"));
+var path47 = __toESM(require("path"));
 var import_child_process13 = require("child_process");
 function amendDeploymentManifestBudget(manifest, budget) {
   const rawArgs = manifest.proxy_args ?? [];
@@ -19500,7 +19676,7 @@ function amendDeploymentManifestBudget(manifest, budget) {
   return { ...manifest, proxy_args: newArgs, base_env: newEnv };
 }
 function findHeadroomDeployments(homeDir2, deps) {
-  const deployDir = path46.join(homeDir2, ".headroom", "deploy");
+  const deployDir = path47.join(homeDir2, ".headroom", "deploy");
   let profiles;
   try {
     profiles = deps.readDir(deployDir);
@@ -19509,7 +19685,7 @@ function findHeadroomDeployments(homeDir2, deps) {
   }
   const results = [];
   for (const profile of profiles) {
-    const manifestPath = path46.join(deployDir, profile, "manifest.json");
+    const manifestPath = path47.join(deployDir, profile, "manifest.json");
     let raw;
     try {
       raw = deps.readJson(manifestPath);
@@ -19541,8 +19717,8 @@ async function applyBudgetToHeadroom(budget, deps) {
 }
 function writeManifestReal(manifestPath, manifest) {
   const tmp = manifestPath + ".codeam.tmp";
-  fs43.writeFileSync(tmp, JSON.stringify(manifest, null, 2) + "\n", { mode: 384 });
-  fs43.renameSync(tmp, manifestPath);
+  fs44.writeFileSync(tmp, JSON.stringify(manifest, null, 2) + "\n", { mode: 384 });
+  fs44.renameSync(tmp, manifestPath);
 }
 function restartDeploymentReal(profile) {
   try {
@@ -19572,11 +19748,11 @@ function spawnProxyReal2(_budget) {
   });
 }
 function makeRealApplyBudgetDeps() {
-  const homeDir2 = os37.homedir();
+  const homeDir2 = os38.homedir();
   return {
     findDeployments: () => findHeadroomDeployments(homeDir2, {
-      readDir: (dir) => fs43.readdirSync(dir),
-      readJson: (filePath) => JSON.parse(fs43.readFileSync(filePath, "utf8"))
+      readDir: (dir) => fs44.readdirSync(dir),
+      readJson: (filePath) => JSON.parse(fs44.readFileSync(filePath, "utf8"))
     }),
     writeManifest: writeManifestReal,
     restartDeployment: restartDeploymentReal,
@@ -19586,16 +19762,16 @@ function makeRealApplyBudgetDeps() {
 }
 
 // src/services/preview/port-registry.ts
-var fs44 = __toESM(require("fs"));
-var os38 = __toESM(require("os"));
-var path47 = __toESM(require("path"));
+var fs45 = __toESM(require("fs"));
+var os39 = __toESM(require("os"));
+var path48 = __toESM(require("path"));
 var import_child_process14 = require("child_process");
 function registryPath() {
-  return path47.join(os38.homedir(), ".codeam", "preview-ports.json");
+  return path48.join(os39.homedir(), ".codeam", "preview-ports.json");
 }
 function readRegistry() {
   try {
-    const raw = fs44.readFileSync(registryPath(), "utf8");
+    const raw = fs45.readFileSync(registryPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object") return parsed;
   } catch {
@@ -19605,10 +19781,10 @@ function readRegistry() {
 function writeRegistry(reg) {
   try {
     const file = registryPath();
-    fs44.mkdirSync(path47.dirname(file), { recursive: true });
+    fs45.mkdirSync(path48.dirname(file), { recursive: true });
     const tmp = `${file}.tmp`;
-    fs44.writeFileSync(tmp, JSON.stringify(reg), "utf8");
-    fs44.renameSync(tmp, file);
+    fs45.writeFileSync(tmp, JSON.stringify(reg), "utf8");
+    fs45.renameSync(tmp, file);
   } catch (err) {
     log.warn("preview", `port-registry write failed: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -20344,8 +20520,8 @@ function activePreviewSessionIds() {
 
 // src/services/preview/start-orchestrator.ts
 var import_child_process18 = require("child_process");
-var fs49 = __toESM(require("fs"));
-var path52 = __toESM(require("path"));
+var fs50 = __toESM(require("fs"));
+var path53 = __toESM(require("path"));
 var import_which2 = __toESM(require("which"));
 var INSTALL_TIMEOUT_MS = 5 * 6e4;
 var SETUP_TIMEOUT_MS = 2 * 6e4;
@@ -20412,8 +20588,8 @@ function normalizeDetectionForSpawn(detection, cwd) {
   if (args2.length === 0) return detection;
   const binName = args2[0];
   if (binName.startsWith("-")) return detection;
-  const binPath = path52.join(cwd, "node_modules", ".bin", binName);
-  if (!fs49.existsSync(binPath)) return detection;
+  const binPath = path53.join(cwd, "node_modules", ".bin", binName);
+  if (!fs50.existsSync(binPath)) return detection;
   return {
     ...detection,
     command: binPath,
@@ -20777,9 +20953,9 @@ async function establishTunnel(ctx, dev) {
 
 // src/beads/bd-adapter.ts
 var import_child_process19 = require("child_process");
-var fs50 = __toESM(require("fs"));
-var os40 = __toESM(require("os"));
-var path53 = __toESM(require("path"));
+var fs51 = __toESM(require("fs"));
+var os41 = __toESM(require("os"));
+var path54 = __toESM(require("path"));
 var BD_PACKAGE = "@beads/bd";
 function resolveBundledBdBinary() {
   return _resolveSeam.resolveBundled();
@@ -20791,11 +20967,11 @@ function _defaultResolveBundled() {
   } catch {
     return null;
   }
-  const binDir = path53.join(path53.dirname(pkgJsonPath), "bin");
+  const binDir = path54.join(path54.dirname(pkgJsonPath), "bin");
   const binaryName = process.platform === "win32" ? "bd.exe" : "bd";
-  const binaryPath = path53.join(binDir, binaryName);
+  const binaryPath = path54.join(binDir, binaryName);
   try {
-    fs50.accessSync(binaryPath, fs50.constants.F_OK);
+    fs51.accessSync(binaryPath, fs51.constants.F_OK);
     return binaryPath;
   } catch {
     return null;
@@ -20805,13 +20981,13 @@ function resolveBdOnPath() {
   return _resolveSeam.resolveOnPath();
 }
 function _defaultResolveOnPath() {
-  const dirs = (process.env.PATH ?? "").split(path53.delimiter).filter(Boolean);
+  const dirs = (process.env.PATH ?? "").split(path54.delimiter).filter(Boolean);
   const candidates = process.platform === "win32" ? ["bd.exe", "bd.cmd", "bd"] : ["bd"];
   for (const dir of dirs) {
     for (const candidate of candidates) {
-      const full = path53.join(dir, candidate);
+      const full = path54.join(dir, candidate);
       try {
-        fs50.accessSync(full, fs50.constants.F_OK);
+        fs51.accessSync(full, fs51.constants.F_OK);
         return full;
       } catch {
       }
@@ -20896,7 +21072,7 @@ var BdAdapter = class {
     const env = { ...process.env };
     if (!env.HOME) {
       try {
-        const home = os40.homedir();
+        const home = os41.homedir();
         if (home) env.HOME = home;
       } catch {
       }
@@ -20988,9 +21164,9 @@ function coerceIssue(row, projectKey) {
 
 // src/beads/provisioner.ts
 var import_child_process23 = require("child_process");
-var fs53 = __toESM(require("fs"));
-var os42 = __toESM(require("os"));
-var path56 = __toESM(require("path"));
+var fs54 = __toESM(require("fs"));
+var os43 = __toESM(require("os"));
+var path57 = __toESM(require("path"));
 
 // src/beads/install-bd.ts
 var import_child_process20 = require("child_process");
@@ -21055,9 +21231,9 @@ async function installBd(platform3 = process.platform) {
 
 // src/beads/install-dolt.ts
 var import_child_process21 = require("child_process");
-var fs51 = __toESM(require("fs"));
-var os41 = __toESM(require("os"));
-var path54 = __toESM(require("path"));
+var fs52 = __toESM(require("fs"));
+var os42 = __toESM(require("os"));
+var path55 = __toESM(require("path"));
 var DOLT_INSTALL_SH_URL = "https://github.com/dolthub/dolt/releases/latest/download/install.sh";
 var DOLT_MSI_URL = "https://github.com/dolthub/dolt/releases/latest/download/dolt-windows-amd64.msi";
 function resolveDoltInstallStrategy(platform3) {
@@ -21097,11 +21273,11 @@ function resolveDoltInstallStrategy(platform3) {
 }
 var DOLT_RELEASE_BASE = "https://github.com/dolthub/dolt/releases/latest/download";
 function doltPlatformTuple(platform3, arch2) {
-  const os53 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
+  const os57 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
   const a = arch2 === "x64" ? "amd64" : arch2 === "arm64" ? "arm64" : null;
   if (!a) return null;
-  if (os53 === "windows" && a !== "amd64") return null;
-  return `${os53}-${a}`;
+  if (os57 === "windows" && a !== "amd64") return null;
+  return `${os57}-${a}`;
 }
 function resolveDoltTarballStrategy(targetDir, platform3, arch2) {
   const tuple = doltPlatformTuple(platform3, arch2);
@@ -21146,14 +21322,14 @@ async function installDoltToDir(targetDir, platform3 = process.platform, arch2 =
   return result;
 }
 var _doltPathSeam = {
-  homedir: () => os41.homedir(),
+  homedir: () => os42.homedir(),
   getPath: () => process.env.PATH ?? "",
   setPath: (p2) => {
     process.env.PATH = p2;
   },
   exists: (p2) => {
     try {
-      fs51.accessSync(p2, fs51.constants.F_OK);
+      fs52.accessSync(p2, fs52.constants.F_OK);
       return true;
     } catch {
       return false;
@@ -21164,7 +21340,7 @@ function doltBinaryNames(platform3) {
   return platform3 === "win32" ? ["dolt.exe", "dolt.cmd", "dolt"] : ["dolt"];
 }
 function knownDoltDirs(platform3) {
-  const P3 = platform3 === "win32" ? path54.win32 : path54.posix;
+  const P3 = platform3 === "win32" ? path55.win32 : path55.posix;
   const home = _doltPathSeam.homedir();
   if (platform3 === "win32") {
     return [
@@ -21180,7 +21356,7 @@ function knownDoltDirs(platform3) {
   ].filter(Boolean);
 }
 function ensureDoltResolvable(platform3 = process.platform) {
-  const P3 = platform3 === "win32" ? path54.win32 : path54.posix;
+  const P3 = platform3 === "win32" ? path55.win32 : path55.posix;
   const delim = platform3 === "win32" ? ";" : ":";
   const names = doltBinaryNames(platform3);
   const pathDirs = _doltPathSeam.getPath().split(delim).filter(Boolean);
@@ -21316,8 +21492,8 @@ async function ensureSharedServer(adapter, options = {}) {
 // src/beads/project-key.ts
 var import_child_process22 = require("child_process");
 var crypto2 = __toESM(require("crypto"));
-var fs52 = __toESM(require("fs"));
-var path55 = __toESM(require("path"));
+var fs53 = __toESM(require("fs"));
+var path56 = __toESM(require("path"));
 function normalizeOrigin(raw) {
   const trimmed = raw.trim();
   if (!trimmed) return null;
@@ -21343,17 +21519,17 @@ function normalizeOrigin(raw) {
   return `${host2}/${pathPart}`;
 }
 function findRepoRoot(cwd) {
-  let dir = path55.resolve(cwd);
+  let dir = path56.resolve(cwd);
   const seen = /* @__PURE__ */ new Set();
   for (let i = 0; i < 256; i++) {
     if (seen.has(dir)) return null;
     seen.add(dir);
     try {
-      const stat3 = fs52.statSync(path55.join(dir, ".git"), { throwIfNoEntry: false });
+      const stat3 = fs53.statSync(path56.join(dir, ".git"), { throwIfNoEntry: false });
       if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
     } catch {
     }
-    const parent = path55.dirname(dir);
+    const parent = path56.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -21364,7 +21540,7 @@ var _execSeam2 = {
     const out2 = (0, import_child_process22.execFileSync)(file, args2, opts);
     return typeof out2 === "string" ? out2 : out2.toString("utf8");
   },
-  realpath: (p2) => fs52.realpathSync(p2)
+  realpath: (p2) => fs53.realpathSync(p2)
 };
 function readOrigin(cwd) {
   try {
@@ -21393,7 +21569,7 @@ function deriveProjectIdentity(cwd = process.cwd()) {
   } catch {
   }
   const hash = crypto2.createHash("sha256").update(real).digest("hex");
-  return { projectKey: `path:${hash}`, projectLabel: path55.basename(real) || "project" };
+  return { projectKey: `path:${hash}`, projectLabel: path56.basename(real) || "project" };
 }
 
 // src/beads/project-prefix.ts
@@ -21438,17 +21614,17 @@ var _provisionSeam = {
 };
 var _linkSeam = {
   platform: () => process.platform,
-  homedir: () => os42.homedir(),
+  homedir: () => os43.homedir(),
   isWritableDir: (dir) => {
     try {
-      fs53.accessSync(dir, fs53.constants.W_OK);
+      fs54.accessSync(dir, fs54.constants.W_OK);
       return true;
     } catch {
       return false;
     }
   },
   ensureDir: (dir) => {
-    fs53.mkdirSync(dir, { recursive: true });
+    fs54.mkdirSync(dir, { recursive: true });
   },
   /**
    * A directory to symlink `bd` into so the AGENT's shell + Claude Code's
@@ -21469,9 +21645,9 @@ var _linkSeam = {
    * which `linkBdOntoPath` creates if missing.
    */
   cliBinDir: () => {
-    const pathDirs = (process.env.PATH ?? "").split(path56.delimiter).filter(Boolean);
+    const pathDirs = (process.env.PATH ?? "").split(path57.delimiter).filter(Boolean);
     const home = _linkSeam.homedir();
-    const localBin = home ? path56.join(home, ".local", "bin") : null;
+    const localBin = home ? path57.join(home, ".local", "bin") : null;
     if (localBin) {
       try {
         _linkSeam.ensureDir(localBin);
@@ -21481,16 +21657,16 @@ var _linkSeam = {
     const candidates = [];
     if (localBin) candidates.push(localBin);
     try {
-      candidates.push(path56.dirname(process.execPath));
+      candidates.push(path57.dirname(process.execPath));
     } catch {
     }
     candidates.push("/usr/local/bin");
     const entry = process.argv[1];
     if (entry) {
       try {
-        candidates.push(path56.dirname(fs53.realpathSync(entry)));
+        candidates.push(path57.dirname(fs54.realpathSync(entry)));
       } catch {
-        candidates.push(path56.dirname(entry));
+        candidates.push(path57.dirname(entry));
       }
     }
     const onPathWritable = candidates.find(
@@ -21502,20 +21678,20 @@ var _linkSeam = {
   /** Current symlink target at `linkPath`, or null when absent / not a link. */
   readlink: (linkPath) => {
     try {
-      return fs53.readlinkSync(linkPath);
+      return fs54.readlinkSync(linkPath);
     } catch {
       return null;
     }
   },
-  unlink: (linkPath) => fs53.unlinkSync(linkPath),
-  symlink: (target, linkPath) => fs53.symlinkSync(target, linkPath)
+  unlink: (linkPath) => fs54.unlinkSync(linkPath),
+  symlink: (target, linkPath) => fs54.symlinkSync(target, linkPath)
 };
 function linkBdOntoPath(binaryPath) {
   if (_linkSeam.platform() === "win32") return;
   const binDir = _linkSeam.cliBinDir();
   if (!binDir) return;
   _linkSeam.ensureDir(binDir);
-  const linkPath = path56.join(binDir, "bd");
+  const linkPath = path57.join(binDir, "bd");
   if (linkPath === binaryPath) return;
   const current = _linkSeam.readlink(linkPath);
   if (current === binaryPath) return;
@@ -21710,7 +21886,7 @@ function dedupeRecipes(agents) {
 
 // src/beads/watcher.ts
 var crypto4 = __toESM(require("crypto"));
-var path57 = __toESM(require("path"));
+var path58 = __toESM(require("path"));
 var API_BASE6 = resolveApiBaseUrl();
 var DEBOUNCE_MS2 = 400;
 var ZERO_SUMMARY = {
@@ -21734,7 +21910,7 @@ var BeadsWatcher = class {
   constructor(opts) {
     this.opts = opts;
     this.bd = opts.adapter ?? new BdAdapter({ cwd: opts.cwd, beadsDir: opts.beadsDir });
-    this.feedPath = opts.feedPath ?? path57.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
+    this.feedPath = opts.feedPath ?? path58.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
     this.apiBase = opts.apiBaseUrl ?? API_BASE6;
   }
   opts;
@@ -21985,15 +22161,15 @@ async function handleBeadsActionCommand(action, started) {
 }
 
 // src/beads/config-store.ts
-var import_node_fs8 = __toESM(require("fs"));
-var import_node_os7 = __toESM(require("os"));
-var import_node_path6 = __toESM(require("path"));
+var import_node_fs9 = __toESM(require("fs"));
+var import_node_os8 = __toESM(require("os"));
+var import_node_path7 = __toESM(require("path"));
 function beadsConfigPath() {
-  return import_node_path6.default.join(import_node_os7.default.homedir(), ".codeam", "beads-config.json");
+  return import_node_path7.default.join(import_node_os8.default.homedir(), ".codeam", "beads-config.json");
 }
 function readBeadsEnabled() {
   try {
-    const raw = import_node_fs8.default.readFileSync(beadsConfigPath(), "utf8");
+    const raw = import_node_fs9.default.readFileSync(beadsConfigPath(), "utf8");
     const cfg = JSON.parse(raw);
     return cfg.enabled !== false;
   } catch {
@@ -22002,10 +22178,10 @@ function readBeadsEnabled() {
 }
 function persistBeadsConfig(cfg) {
   const file = beadsConfigPath();
-  import_node_fs8.default.mkdirSync(import_node_path6.default.dirname(file), { recursive: true });
+  import_node_fs9.default.mkdirSync(import_node_path7.default.dirname(file), { recursive: true });
   const tmp = `${file}.tmp`;
-  import_node_fs8.default.writeFileSync(tmp, JSON.stringify(cfg), { mode: 384 });
-  import_node_fs8.default.renameSync(tmp, file);
+  import_node_fs9.default.writeFileSync(tmp, JSON.stringify(cfg), { mode: 384 });
+  import_node_fs9.default.renameSync(tmp, file);
   restrictToOwner(file);
 }
 
@@ -22140,6 +22316,88 @@ async function configureBeads(action, ctx, deps) {
   return { enabled: true, running, ...p2 };
 }
 
+// src/skills/configure.ts
+var import_node_os10 = __toESM(require("os"));
+
+// src/skills/materialize.ts
+var import_node_fs10 = __toESM(require("fs"));
+var import_node_os9 = __toESM(require("os"));
+var import_node_path8 = __toESM(require("path"));
+var NS = "codeam-";
+function skillDirFor(id, home = import_node_os9.default.homedir()) {
+  return import_node_path8.default.join(home, ".claude", "skills", `${NS}${id}`);
+}
+function renderSkillMd(id, description, body) {
+  const desc = description.replace(/\s*\n\s*/g, " ").trim();
+  return `---
+name: ${NS}${id}
+description: ${JSON.stringify(desc)}
+---
+
+${body.trim()}
+`;
+}
+function materializeSkill(id, home = import_node_os9.default.homedir()) {
+  const def = getSkillDefinition(id);
+  if (!def?.delivery.skillFile) return false;
+  try {
+    const dir = skillDirFor(id, home);
+    import_node_fs10.default.mkdirSync(dir, { recursive: true, mode: 448 });
+    import_node_fs10.default.writeFileSync(
+      import_node_path8.default.join(dir, "SKILL.md"),
+      renderSkillMd(id, def.description, def.delivery.skillFile.body),
+      { encoding: "utf8", mode: 384 }
+    );
+    const baseDir = import_node_path8.default.resolve(dir);
+    const baseDirWithSep = baseDir + import_node_path8.default.sep;
+    for (const [rel, contents] of Object.entries(def.delivery.skillFile.files ?? {})) {
+      const target = import_node_path8.default.join(dir, rel);
+      if (!import_node_path8.default.resolve(target).startsWith(baseDirWithSep) && import_node_path8.default.resolve(target) !== baseDir) {
+        continue;
+      }
+      import_node_fs10.default.mkdirSync(import_node_path8.default.dirname(target), { recursive: true, mode: 448 });
+      import_node_fs10.default.writeFileSync(target, contents, { encoding: "utf8", mode: 384 });
+    }
+    return true;
+  } catch (err) {
+    log.warn("skills", `failed to materialize ${id} (best-effort): ${err instanceof Error ? err.message : String(err)}`);
+    return false;
+  }
+}
+function removeSkill(id, home = import_node_os9.default.homedir()) {
+  try {
+    import_node_fs10.default.rmSync(skillDirFor(id, home), { recursive: true, force: true });
+  } catch {
+  }
+}
+
+// src/skills/configure.ts
+function currentInstalled() {
+  const m = readSkillsManifest();
+  return (m?.skills ?? []).map((s) => s.id).filter(isSkillId);
+}
+function configureSkill(action, skillId, home = import_node_os10.default.homedir()) {
+  if (action === "list") return { ok: true, installed: currentInstalled() };
+  if (!skillId || !isSkillId(skillId)) {
+    return { ok: false, installed: currentInstalled(), error: `unknown skill: ${skillId ?? "(none)"}` };
+  }
+  const set = new Set(currentInstalled());
+  if (action === "add") {
+    if (!materializeSkill(skillId, home)) {
+      return { ok: false, installed: [...set], error: `skill ${skillId} has no skillFile rail` };
+    }
+    set.add(skillId);
+  } else if (action === "remove") {
+    removeSkill(skillId, home);
+    set.delete(skillId);
+  } else {
+    return { ok: false, installed: currentInstalled(), error: `unknown action: ${action}` };
+  }
+  const installed2 = [...set];
+  persistSkillsManifest({ skills: installed2.map((id) => ({ id })) });
+  return { ok: true, installed: installed2 };
+}
+
 // src/commands/start/handlers.ts
 var pendingAttachmentFiles = /* @__PURE__ */ new Set();
 function cleanupAttachmentTempFiles() {
@@ -22151,8 +22409,8 @@ function cleanupAttachmentTempFiles() {
 function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
-    const tmpPath = path59.join(os44.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
-    fs55.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
+    const tmpPath = path61.join(os47.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
+    fs57.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     pendingAttachmentFiles.add(tmpPath);
     return tmpPath;
   });
@@ -22364,9 +22622,9 @@ var listFiles = async (ctx, cmd, parsed) => {
   await ctx.relay.sendResult(cmd.id, "completed", result);
 };
 var envReadH = async (ctx, cmd) => {
-  const envPath = path59.join(process.cwd(), ".env");
+  const envPath = path61.join(process.cwd(), ".env");
   try {
-    const raw = await fs55.promises.readFile(envPath, "utf8");
+    const raw = await fs57.promises.readFile(envPath, "utf8");
     await ctx.relay.sendResult(cmd.id, "completed", {
       exists: true,
       vars: parseDotenv(raw)
@@ -22397,17 +22655,22 @@ var envWriteH = async (ctx, cmd, parsed) => {
     }
     seen.add(v.key);
   }
-  const envPath = path59.join(process.cwd(), ".env");
-  const tmpPath = path59.join(process.cwd(), ".env.codeam.tmp");
+  const envPath = path61.join(process.cwd(), ".env");
+  const tmpPath = path61.join(process.cwd(), ".env.codeam.tmp");
   try {
-    await fs55.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
-    await fs55.promises.rename(tmpPath, envPath);
+    await fs57.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
+    await fs57.promises.rename(tmpPath, envPath);
     await ctx.relay.sendResult(cmd.id, "completed", { ok: true, count: vars.length });
   } catch (err) {
-    await fs55.promises.rm(tmpPath, { force: true }).catch(() => void 0);
+    await fs57.promises.rm(tmpPath, { force: true }).catch(() => void 0);
     await ctx.relay.sendResult(cmd.id, "failed", { error: err.message });
   }
 };
+var skillsConfigureH = async (ctx, cmd, parsed) => {
+  const action = parsed.action;
+  const res = configureSkill(action ?? "list", parsed.skillId);
+  await ctx.relay.sendResult(cmd.id, res.ok ? "completed" : "failed", res);
+};
 var takeControlH = async (ctx, cmd) => {
   if (!ctx.baton) {
     await ctx.relay.sendResult(cmd.id, "failed", { code: "NO_BATON" });
@@ -22448,7 +22711,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
   let configuredAgent = rawAgentId;
   if (!configuredAgent) {
     try {
-      const raw = JSON.parse(fs55.readFileSync(headroomConfigPath(), "utf8"));
+      const raw = JSON.parse(fs57.readFileSync(headroomConfigPath(), "utf8"));
       configuredAgent = raw.agent ?? "";
     } catch {
     }
@@ -22482,7 +22745,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
     persist: persistHeadroomConfig,
     readEnabled: () => {
       try {
-        const raw = JSON.parse(fs55.readFileSync(headroomConfigPath(), "utf8"));
+        const raw = JSON.parse(fs57.readFileSync(headroomConfigPath(), "utf8"));
         return raw.enabled === true;
       } catch {
         return false;
@@ -22739,7 +23002,7 @@ var vcsAgentReviewH = async (ctx, cmd, parsed) => {
   });
   const token = ctx.pluginAuthToken;
   void (async () => {
-    const os53 = createOsStrategy();
+    const os57 = createOsStrategy();
     try {
       const report = await reviewPullRequest(
         {
@@ -22748,7 +23011,7 @@ var vcsAgentReviewH = async (ctx, cmd, parsed) => {
           baseBranch: parsed.baseBranch
         },
         {
-          runReview: (input) => new CoderabbitRuntimeStrategy(os53).runOneShot(input),
+          runReview: (input) => new CoderabbitRuntimeStrategy(os57).runOneShot(input),
           runGh: (args2) => defaultRunGh(args2),
           postReport: async (r) => {
             if (!token) return;
@@ -22786,7 +23049,7 @@ var headroomBudgetH = async (ctx, cmd) => {
   }
   let headroomActive = false;
   try {
-    const raw = JSON.parse(fs55.readFileSync(headroomConfigPath(), "utf8"));
+    const raw = JSON.parse(fs57.readFileSync(headroomConfigPath(), "utf8"));
     headroomActive = raw.enabled === true;
   } catch {
   }
@@ -22796,7 +23059,7 @@ var headroomBudgetH = async (ctx, cmd) => {
   }
   let existingConfig = { enabled: true };
   try {
-    existingConfig = JSON.parse(fs55.readFileSync(headroomConfigPath(), "utf8"));
+    existingConfig = JSON.parse(fs57.readFileSync(headroomConfigPath(), "utf8"));
   } catch {
   }
   if (payload.budgetEnabled && payload.budgetUsd != null) {
@@ -22909,9 +23172,9 @@ var CLI_UPDATE_MAX_ATTEMPTS = 3;
 function buildNpmInstallInvocation(opts) {
   const entryScript = opts?.entryScript ?? process.argv[1] ?? "";
   const execPath = opts?.execPath ?? process.execPath;
-  const exists2 = opts?.existsSync ?? fs55.existsSync;
+  const exists2 = opts?.existsSync ?? fs57.existsSync;
   const platform3 = opts?.platform ?? process.platform;
-  const p2 = platform3 === "win32" ? path59.win32 : path59.posix;
+  const p2 = platform3 === "win32" ? path61.win32 : path61.posix;
   const normalized = entryScript.split(/[\\/]/).join("/");
   const marker = "/lib/node_modules/codeam-cli/";
   const markerIdx = normalized.indexOf(marker);
@@ -23497,6 +23760,7 @@ var handlers = {
   save_preview_config: savePreviewConfigH,
   env_read: envReadH,
   env_write: envWriteH,
+  skills_configure: skillsConfigureH,
   take_control: takeControlH,
   handback: handbackH,
   headroom_configure: headroomConfigureH,
@@ -23577,29 +23841,6 @@ function buildKeepAlive(ctx) {
   };
 }
 
-// src/lib/process-guards.ts
-var installed = false;
-function installRelayCrashGuards() {
-  if (installed) return;
-  installed = true;
-  process.on("unhandledRejection", (reason) => {
-    log.error("process", `unhandledRejection \u2014 relay kept alive \u2014 ${describeReason(reason)}`);
-  });
-  process.on("uncaughtException", (err) => {
-    log.error("process", `uncaughtException \u2014 relay kept alive \u2014 ${describeReason(err)}`);
-  });
-}
-function describeReason(reason) {
-  if (reason instanceof Error) {
-    return reason.stack ?? `${reason.name}: ${reason.message}`;
-  }
-  try {
-    return typeof reason === "string" ? reason : JSON.stringify(reason);
-  } catch {
-    return String(reason);
-  }
-}
-
 // src/commands/start-infra-only.ts
 var INFRA_ONLY_COMMAND_TYPES = /* @__PURE__ */ new Set([
   // File ops (drive the dashboard's Files panel + open-file).
@@ -23796,11 +24037,11 @@ function resolveTokenValue(args2) {
   }
   const fileFlag = args2.find((a) => a.startsWith("--token-file="));
   if (fileFlag) {
-    const path76 = fileFlag.slice("--token-file=".length);
+    const path78 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs56.readFileSync(path76, "utf8").trim();
-      if (content.length === 0) fail(`--token-file ${path76} is empty`);
-      rmIfExistsQuiet(path76);
+      const content = fs58.readFileSync(path78, "utf8").trim();
+      if (content.length === 0) fail(`--token-file ${path78} is empty`);
+      rmIfExistsQuiet(path78);
       return content;
     } catch (err) {
       fail(`Could not read --token-file: ${err.message}`);
@@ -23829,7 +24070,7 @@ async function claimOnce(token, pluginId, pluginSecretHash) {
     pluginId,
     ideName: "codeam-cli (codespace)",
     ideVersion: process.env.npm_package_version ?? "unknown",
-    hostname: os45.hostname(),
+    hostname: os48.hostname(),
     codespaceName: process.env.CODESPACE_NAME ?? "",
     // Current git branch of the codespace's working directory, so the
     // backend can populate `PairedSession.branch` for the codespace pair.
@@ -23890,7 +24131,7 @@ async function claim(token, pluginId, pluginSecretHash) {
   }
 }
 function pairAutoLockPath() {
-  return path60.join(os45.homedir(), ".codeam", "pair-auto.lock");
+  return path62.join(os48.homedir(), ".codeam", "pair-auto.lock");
 }
 function isLivePairAuto(pid) {
   if (!Number.isInteger(pid) || pid <= 0 || pid === process.pid) return false;
@@ -23900,7 +24141,7 @@ function isLivePairAuto(pid) {
     if (e.code !== "EPERM") return false;
   }
   try {
-    return fs56.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
+    return fs58.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
   } catch {
     return true;
   }
@@ -23910,24 +24151,24 @@ function isLiveCodeam(pid) {
 }
 function daemonLockPath(sessionId) {
   const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
-  return path60.join(os45.homedir(), ".codeam", `daemon-${safe}.lock`);
+  return path62.join(os48.homedir(), ".codeam", `daemon-${safe}.lock`);
 }
 function acquireDaemonLock(sessionId) {
   const lockPath = daemonLockPath(sessionId);
   try {
-    fs56.mkdirSync(path60.dirname(lockPath), { recursive: true });
+    fs58.mkdirSync(path62.dirname(lockPath), { recursive: true });
     try {
-      fs56.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs58.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs56.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs58.readFileSync(lockPath, "utf8").trim());
       if (holder && holder !== process.pid && isLiveCodeam(holder)) return false;
-      fs56.writeFileSync(lockPath, String(process.pid));
+      fs58.writeFileSync(lockPath, String(process.pid));
     }
     const release3 = () => {
       try {
-        if (fs56.existsSync(lockPath) && Number(fs56.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs56.unlinkSync(lockPath);
+        if (fs58.existsSync(lockPath) && Number(fs58.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs58.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -23949,19 +24190,19 @@ function acquireDaemonLock(sessionId) {
 function acquireSingletonLock() {
   const lockPath = pairAutoLockPath();
   try {
-    fs56.mkdirSync(path60.dirname(lockPath), { recursive: true });
+    fs58.mkdirSync(path62.dirname(lockPath), { recursive: true });
     try {
-      fs56.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs58.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs56.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs58.readFileSync(lockPath, "utf8").trim());
       if (isLivePairAuto(holder)) return false;
-      fs56.writeFileSync(lockPath, String(process.pid));
+      fs58.writeFileSync(lockPath, String(process.pid));
     }
     process.once("exit", () => {
       try {
-        if (fs56.existsSync(lockPath) && Number(fs56.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs56.unlinkSync(lockPath);
+        if (fs58.existsSync(lockPath) && Number(fs58.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs58.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -24407,7 +24648,7 @@ var AgentService = class _AgentService {
 };
 
 // src/agents/acp/adapters.ts
-var path62 = __toESM(require("path"));
+var path64 = __toESM(require("path"));
 
 // src/agents/acp/agent-binary.ts
 var import_fs4 = __toESM(require("fs"));
@@ -24583,11 +24824,11 @@ async function waitForAdapterModuleGraph(command2, args2, opts = {}) {
 
 // src/agents/kimi/installer.ts
 var import_node_child_process26 = require("child_process");
-var import_node_os8 = require("os");
-var import_node_path7 = require("path");
+var import_node_os11 = require("os");
+var import_node_path9 = require("path");
 var INSTALL_URL2 = "https://code.kimi.com/kimi-code/install.sh";
 function kimiBinDir() {
-  return (0, import_node_path7.join)(process.env.KIMI_CODE_HOME || (0, import_node_path7.join)((0, import_node_os8.homedir)(), ".kimi-code"), "bin");
+  return (0, import_node_path9.join)(process.env.KIMI_CODE_HOME || (0, import_node_path9.join)((0, import_node_os11.homedir)(), ".kimi-code"), "bin");
 }
 function kimiRuns() {
   const r = (0, import_node_child_process26.spawnSync)("kimi", ["--version"], { stdio: "ignore", timeout: 15e3 });
@@ -24650,13 +24891,13 @@ function resolveBin(pkgName, binName) {
   try {
     const manifestPath = require_.resolve(`${pkgName}/package.json`);
     const manifest = require_(`${pkgName}/package.json`);
-    const pkgDir = path62.dirname(manifestPath);
+    const pkgDir = path64.dirname(manifestPath);
     const bin = manifest.bin;
     if (!bin) return null;
-    if (typeof bin === "string") return path62.resolve(pkgDir, bin);
+    if (typeof bin === "string") return path64.resolve(pkgDir, bin);
     const target = binName ?? Object.keys(bin)[0];
     if (!target || !bin[target]) return null;
-    return path62.resolve(pkgDir, bin[target]);
+    return path64.resolve(pkgDir, bin[target]);
   } catch {
     return null;
   }
@@ -24791,9 +25032,9 @@ async function resolveAcpAdapterWithRetry(agent, opts = {}) {
 var import_node_crypto10 = require("crypto");
 
 // src/services/history.service.ts
-var fs58 = __toESM(require("fs"));
-var path63 = __toESM(require("path"));
-var os47 = __toESM(require("os"));
+var fs60 = __toESM(require("fs"));
+var path65 = __toESM(require("path"));
+var os50 = __toESM(require("os"));
 var https7 = __toESM(require("https"));
 var http6 = __toESM(require("http"));
 var import_zod2 = require("zod");
@@ -24820,7 +25061,7 @@ function parseJsonl(filePath) {
   const messages = [];
   let raw;
   try {
-    raw = fs58.readFileSync(filePath, "utf8");
+    raw = fs60.readFileSync(filePath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       log.warn("history:parseJsonl", `read failed for ${filePath}`, err);
@@ -24961,7 +25202,7 @@ var HistoryService = class _HistoryService {
     return this._quotaPercent === null || Date.now() - this._quotaFetchedAt > ttlMs;
   }
   get projectDir() {
-    return this.runtime.resolveHistoryDir(this.cwd) ?? path63.join(os47.homedir(), ".claude", "projects", encodeCwd(this.cwd));
+    return this.runtime.resolveHistoryDir(this.cwd) ?? path65.join(os50.homedir(), ".claude", "projects", encodeCwd(this.cwd));
   }
   /** Set the current Claude conversation ID (extracted from /cost command or session start) */
   setCurrentConversationId(id) {
@@ -24973,7 +25214,7 @@ var HistoryService = class _HistoryService {
   /** Return the current message count in the active conversation. */
   getCurrentMessageCount() {
     if (!this.currentConversationId) return 0;
-    const filePath = path63.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+    const filePath = path65.join(this.projectDir, `${this.currentConversationId}.jsonl`);
     return parseJsonl(filePath).length;
   }
   /**
@@ -24984,7 +25225,7 @@ var HistoryService = class _HistoryService {
     const deadline = Date.now() + timeoutMs;
     while (Date.now() < deadline) {
       if (!this.currentConversationId) return null;
-      const filePath = path63.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+      const filePath = path65.join(this.projectDir, `${this.currentConversationId}.jsonl`);
       const messages = parseJsonl(filePath);
       if (messages.length > previousCount) {
         for (let i = messages.length - 1; i >= previousCount; i--) {
@@ -25010,16 +25251,16 @@ var HistoryService = class _HistoryService {
     const dir = this.projectDir;
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     try {
-      const files = fs58.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
+      const files = fs60.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
         try {
-          const stat3 = fs58.statSync(path63.join(dir, e.name));
+          const stat3 = fs60.statSync(path65.join(dir, e.name));
           return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
         } catch {
           return { name: e.name, mtime: 0, birthtime: 0 };
         }
       }).filter((f) => f.birthtime >= cutoff).sort((a, b) => b.mtime - a.mtime);
       if (files.length > 0) {
-        this.currentConversationId = path63.basename(files[0].name, ".jsonl");
+        this.currentConversationId = path65.basename(files[0].name, ".jsonl");
       }
     } catch {
     }
@@ -25053,13 +25294,13 @@ var HistoryService = class _HistoryService {
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     let entries;
     try {
-      entries = fs58.readdirSync(dir, { withFileTypes: true });
+      entries = fs60.readdirSync(dir, { withFileTypes: true });
     } catch {
       return null;
     }
     const files = entries.filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
       try {
-        const stat3 = fs58.statSync(path63.join(dir, e.name));
+        const stat3 = fs60.statSync(path65.join(dir, e.name));
         return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
       } catch {
         return { name: e.name, mtime: 0, birthtime: 0 };
@@ -25068,12 +25309,12 @@ var HistoryService = class _HistoryService {
     if (files.length === 0) return null;
     const targetFile = this.currentConversationId ? `${this.currentConversationId}.jsonl` : files[0].name;
     if (!files.some((f) => f.name === targetFile)) return null;
-    return this.extractUsageFromFile(path63.join(dir, targetFile));
+    return this.extractUsageFromFile(path65.join(dir, targetFile));
   }
   extractUsageFromFile(filePath) {
     let raw;
     try {
-      raw = fs58.readFileSync(filePath, "utf8");
+      raw = fs60.readFileSync(filePath, "utf8");
     } catch {
       return null;
     }
@@ -25118,9 +25359,9 @@ var HistoryService = class _HistoryService {
     let totalCost = 0;
     let files;
     try {
-      files = fs58.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
+      files = fs60.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
         try {
-          return fs58.statSync(path63.join(projectDir, f)).mtimeMs >= monthStartMs;
+          return fs60.statSync(path65.join(projectDir, f)).mtimeMs >= monthStartMs;
         } catch {
           return false;
         }
@@ -25131,7 +25372,7 @@ var HistoryService = class _HistoryService {
     for (const file of files) {
       let raw;
       try {
-        raw = fs58.readFileSync(path63.join(projectDir, file), "utf8");
+        raw = fs60.readFileSync(path65.join(projectDir, file), "utf8");
       } catch {
         continue;
       }
@@ -25210,7 +25451,7 @@ var HistoryService = class _HistoryService {
     if (this.runtime.resolveHistoryFile) {
       return this.runtime.resolveHistoryFile(this.cwd, sessionId);
     }
-    return path63.join(this.projectDir, `${sessionId}.jsonl`);
+    return path65.join(this.projectDir, `${sessionId}.jsonl`);
   }
   /**
    * Parse a conversation's messages from disk, agent-aware. Claude uses the
@@ -25244,7 +25485,7 @@ var HistoryService = class _HistoryService {
         };
       });
     }
-    return parseJsonl(path63.join(this.projectDir, `${sessionId}.jsonl`));
+    return parseJsonl(path65.join(this.projectDir, `${sessionId}.jsonl`));
   }
   async loadConversation(sessionId) {
     const messages = this.readConversation(sessionId);
@@ -25312,7 +25553,7 @@ var HistoryService = class _HistoryService {
     if (!filePath) return false;
     let mtimeMs;
     try {
-      mtimeMs = fs58.statSync(filePath).mtimeMs;
+      mtimeMs = fs60.statSync(filePath).mtimeMs;
     } catch {
       return false;
     }
@@ -25387,10 +25628,10 @@ var HistoryService = class _HistoryService {
 
 // src/agents/acp/client.ts
 var import_node_child_process27 = require("child_process");
-var fs59 = __toESM(require("fs/promises"));
+var fs61 = __toESM(require("fs/promises"));
 var fsSync = __toESM(require("fs"));
-var os48 = __toESM(require("os"));
-var path64 = __toESM(require("path"));
+var os51 = __toESM(require("os"));
+var path66 = __toESM(require("path"));
 var import_node_stream = require("stream");
 
 // ../../node_modules/@agentclientprotocol/sdk/dist/schema/index.js
@@ -30175,7 +30416,7 @@ var AcpClient = class {
       },
       readTextFile: async (params) => {
         try {
-          const content = await fs59.readFile(params.path, "utf8");
+          const content = await fs61.readFile(params.path, "utf8");
           return applyLineRange(content, params.line ?? null, params.limit ?? null);
         } catch (err) {
           const code = err.code;
@@ -30195,7 +30436,7 @@ var AcpClient = class {
       },
       writeTextFile: async (params) => {
         try {
-          await fs59.writeFile(params.path, params.content, "utf8");
+          await fs61.writeFile(params.path, params.content, "utf8");
           return {};
         } catch (err) {
           const code = err.code;
@@ -30255,29 +30496,29 @@ function applyLineRange(content, line, limit) {
   return { content: lines.slice(start2, end).join("\n") };
 }
 function knownAgentBinaryDirs() {
-  const home = os48.homedir();
+  const home = os51.homedir();
   const out2 = [];
   out2.push("/tmp/codeam-node20/bin");
   for (const root of [
     "/usr/local/share/nvm/versions/node",
-    path64.join(home, ".nvm/versions/node")
+    path66.join(home, ".nvm/versions/node")
   ]) {
     try {
       for (const child of fsSync.readdirSync(root)) {
-        out2.push(path64.join(root, child, "bin"));
+        out2.push(path66.join(root, child, "bin"));
       }
     } catch {
     }
   }
-  out2.push(path64.join(home, ".volta/bin"));
+  out2.push(path66.join(home, ".volta/bin"));
   out2.push("/usr/local/bin");
   out2.push("/usr/bin");
-  out2.push(path64.join(home, ".local/bin"));
-  out2.push(path64.join(home, "bin"));
+  out2.push(path66.join(home, ".local/bin"));
+  out2.push(path66.join(home, "bin"));
   if (process.platform === "win32") {
     const { LOCALAPPDATA, APPDATA } = process.env;
-    if (LOCALAPPDATA) out2.push(path64.join(LOCALAPPDATA, "cursor-agent"));
-    if (APPDATA) out2.push(path64.join(APPDATA, "npm"));
+    if (LOCALAPPDATA) out2.push(path66.join(LOCALAPPDATA, "cursor-agent"));
+    if (APPDATA) out2.push(path66.join(APPDATA, "npm"));
   }
   return out2.filter((p2) => {
     try {
@@ -30289,7 +30530,7 @@ function knownAgentBinaryDirs() {
 }
 function expandPathForAgentBinaries(existingPath) {
   const existing = new Set(
-    existingPath.split(path64.delimiter).filter((p2) => p2.length > 0)
+    existingPath.split(path66.delimiter).filter((p2) => p2.length > 0)
   );
   const additions = [];
   for (const dir of knownAgentBinaryDirs()) {
@@ -30299,7 +30540,7 @@ function expandPathForAgentBinaries(existingPath) {
     }
   }
   if (additions.length === 0) return existingPath;
-  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path64.delimiter);
+  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path66.delimiter);
 }
 
 // src/agents/acp/headroom-budget-proxy.ts
@@ -30781,15 +31022,15 @@ function commonPrefixLength(a, b) {
 
 // src/agents/acp/onboarding.ts
 var import_child_process27 = require("child_process");
-var fs60 = __toESM(require("fs"));
-var os49 = __toESM(require("os"));
-var path65 = __toESM(require("path"));
+var fs62 = __toESM(require("fs"));
+var os52 = __toESM(require("os"));
+var path67 = __toESM(require("path"));
 var _onboardingSeam = {
-  markerPath: (sessionId) => path65.join(os49.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
-  exists: (p2) => fs60.existsSync(p2),
+  markerPath: (sessionId) => path67.join(os52.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
+  exists: (p2) => fs62.existsSync(p2),
   write: (p2) => {
-    fs60.mkdirSync(path65.dirname(p2), { recursive: true });
-    fs60.writeFileSync(p2, "");
+    fs62.mkdirSync(path67.dirname(p2), { recursive: true });
+    fs62.writeFileSync(p2, "");
   },
   disabled: () => {
     const v = process.env.CODEAM_ONBOARDING_DISABLED;
@@ -30826,7 +31067,7 @@ function resolveRepoName(cwd) {
       if (name) return name;
     }
   }
-  const base = path65.basename(cwd || "");
+  const base = path67.basename(cwd || "");
   if (base && !isUuid(base)) return base;
   return "this project";
 }
@@ -31078,13 +31319,13 @@ var import_crypto5 = require("crypto");
 
 // src/services/turn-files/git-changeset.ts
 var import_child_process28 = require("child_process");
-var fs62 = __toESM(require("fs/promises"));
-var path67 = __toESM(require("path"));
+var fs64 = __toESM(require("fs/promises"));
+var path69 = __toESM(require("path"));
 
 // src/services/turn-files/review-ignore.ts
 var import_ignore2 = __toESM(require("ignore"));
-var fs61 = __toESM(require("fs"));
-var path66 = __toESM(require("path"));
+var fs63 = __toESM(require("fs"));
+var path68 = __toESM(require("path"));
 var CURATED_REVIEW_IGNORE = [
   // Google Cloud SDK (the incident) — installs a huge python tree.
   "google-cloud-sdk/",
@@ -31123,7 +31364,7 @@ var CURATED_REVIEW_IGNORE = [
 function makeReviewIgnore(repoRoot) {
   const ig = (0, import_ignore2.default)().add(CURATED_REVIEW_IGNORE);
   try {
-    const custom = fs61.readFileSync(path66.join(repoRoot, ".codeam", "reviewignore"), "utf8");
+    const custom = fs63.readFileSync(path68.join(repoRoot, ".codeam", "reviewignore"), "utf8");
     ig.add(custom);
   } catch {
   }
@@ -31168,7 +31409,7 @@ async function collectRepoChangeset(opts) {
     let stats;
     if (!truncated && row.fileStatus === "added" && numstatEntry === void 0) {
       const lineCount = await readUntrackedLineCount(
-        path67.join(opts.repoRoot, row.filePath)
+        path69.join(opts.repoRoot, row.filePath)
       );
       stats = { added: lineCount, removed: 0 };
     } else {
@@ -31199,7 +31440,7 @@ function readUntrackedLineCount(absPath) {
 }
 async function defaultReadUntrackedLineCount(absPath) {
   try {
-    const content = await fs62.readFile(absPath, "utf8");
+    const content = await fs64.readFile(absPath, "utf8");
     let count = 0;
     let pos = -1;
     while ((pos = content.indexOf("\n", pos + 1)) !== -1) {
@@ -31291,7 +31532,7 @@ function defaultRunGit(cwd, args2) {
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs67 = await import("fs/promises");
+  const fs69 = await import("fs/promises");
   const out2 = [];
   await walk(workingDir, 0);
   return out2;
@@ -31299,7 +31540,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (depth > maxDepth) return;
     let entries = [];
     try {
-      const dirents = await fs67.readdir(dir, { withFileTypes: true });
+      const dirents = await fs69.readdir(dir, { withFileTypes: true });
       entries = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -31310,8 +31551,8 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (hasGit) {
       out2.push({
         repoRoot: dir,
-        repoPath: path67.relative(workingDir, dir),
-        repoName: path67.basename(dir)
+        repoPath: path69.relative(workingDir, dir),
+        repoName: path69.basename(dir)
       });
       return;
     }
@@ -31319,14 +31560,14 @@ async function discoverRepos(workingDir, maxDepth = 4) {
       if (!entry.isDirectory) continue;
       if (entry.name === "node_modules") continue;
       if (entry.name === "dist" || entry.name === "build") continue;
-      await walk(path67.join(dir, entry.name), depth + 1);
+      await walk(path69.join(dir, entry.name), depth + 1);
     }
   }
 }
 
 // src/services/turn-files/files-outbox.ts
-var fs63 = __toESM(require("fs/promises"));
-var path68 = __toESM(require("path"));
+var fs65 = __toESM(require("fs/promises"));
+var path70 = __toESM(require("path"));
 var import_os11 = require("os");
 var HOME_OUTBOX_DIR = ".codeam/outbox";
 var MAX_AGE_MS = 24 * 60 * 60 * 1e3;
@@ -31359,16 +31600,16 @@ var FilesOutbox = class {
   backoffIndex = 0;
   stopped = false;
   constructor(opts) {
-    const base = opts.baseDir ?? path68.join(homeDir(), HOME_OUTBOX_DIR);
-    this.filePath = path68.join(base, `${opts.sessionId}.jsonl`);
+    const base = opts.baseDir ?? path70.join(homeDir(), HOME_OUTBOX_DIR);
+    this.filePath = path70.join(base, `${opts.sessionId}.jsonl`);
     this.post = opts.post;
     this.autoSchedule = opts.autoSchedule !== false;
   }
   /** Persist the entry to disk and trigger a flush. Returns once the
    *  line is durable on disk (not once the POST succeeds). */
   async enqueue(entry) {
-    await fs63.mkdir(path68.dirname(this.filePath), { recursive: true });
-    await fs63.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
+    await fs65.mkdir(path70.dirname(this.filePath), { recursive: true });
+    await fs65.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
     this.backoffIndex = 0;
     if (this.autoSchedule) this.scheduleFlush(0);
   }
@@ -31459,7 +31700,7 @@ var FilesOutbox = class {
   async readAll() {
     let raw = "";
     try {
-      raw = await fs63.readFile(this.filePath, "utf8");
+      raw = await fs65.readFile(this.filePath, "utf8");
     } catch {
       return [];
     }
@@ -31483,12 +31724,12 @@ var FilesOutbox = class {
   async rewrite(entries) {
     const tmpPath = `${this.filePath}.${process.pid}.tmp`;
     if (entries.length === 0) {
-      await fs63.unlink(this.filePath).catch(() => void 0);
+      await fs65.unlink(this.filePath).catch(() => void 0);
       return;
     }
     const payload = entries.map((e) => JSON.stringify(e)).join("\n") + "\n";
-    await fs63.writeFile(tmpPath, payload, "utf8");
-    await fs63.rename(tmpPath, this.filePath);
+    await fs65.writeFile(tmpPath, payload, "utf8");
+    await fs65.rename(tmpPath, this.filePath);
   }
 };
 function applyJitter(ms) {
@@ -32237,6 +32478,13 @@ async function setModeH(ctx) {
   }
   return;
 }
+async function skillsConfigureH2(ctx) {
+  const { cmd, relay } = ctx;
+  const payload = cmd.payload;
+  const res = configureSkill(payload?.action ?? "list", payload?.skillId);
+  await relay.sendResult(cmd.id, res.ok ? "completed" : "failed", res);
+  return;
+}
 async function ackEmptyH(ctx) {
   const { cmd, relay } = ctx;
   await relay.sendResult(cmd.id, "completed", {});
@@ -32504,7 +32752,8 @@ var ACP_COMMAND_HANDLERS = {
   request_preview_detect: previewH,
   preview_start: previewH,
   preview_stop: previewH,
-  save_preview_config: previewH
+  save_preview_config: previewH,
+  skills_configure: skillsConfigureH2
 };
 async function dispatchAcpCommand(ctx) {
   const handler = ACP_COMMAND_HANDLERS[ctx.cmd.type];
@@ -34430,6 +34679,26 @@ function buildMcpServersForStart(ctx) {
   return servers;
 }
 
+// src/skills/provision.ts
+var import_node_os12 = __toESM(require("os"));
+function provisionSkillsForStart(home = import_node_os12.default.homedir()) {
+  const materialized = [];
+  try {
+    const manifest = readSkillsManifest();
+    if (!manifest || manifest.skills.length === 0) return { materialized };
+    for (const entry of manifest.skills) {
+      if (!isSkillId(entry.id)) continue;
+      if (materializeSkill(entry.id, home)) materialized.push(entry.id);
+    }
+    if (materialized.length) {
+      log.info("skills", `materialized ${materialized.length} skill(s): ${materialized.join(", ")}`);
+    }
+  } catch (err) {
+    log.warn("skills", `provisionSkillsForStart failed (best-effort): ${err instanceof Error ? err.message : String(err)}`);
+  }
+  return { materialized };
+}
+
 // src/baton/baton-controller.ts
 var BatonController = class {
   constructor(deps) {
@@ -34777,7 +35046,7 @@ var AcpDriver = class {
 };
 
 // src/baton/transcript-mirror.ts
-var fs64 = __toESM(require("fs"));
+var fs66 = __toESM(require("fs"));
 var TranscriptMirror = class {
   constructor(deps) {
     this.deps = deps;
@@ -34844,7 +35113,7 @@ var TranscriptMirror = class {
   }
 };
 function defaultWatch(file, onChange) {
-  const w3 = fs64.watch(file, { persistent: false }, () => onChange());
+  const w3 = fs66.watch(file, { persistent: false }, () => onChange());
   return () => w3.close();
 }
 
@@ -35106,16 +35375,16 @@ function toEpochMs(ts) {
 }
 
 // src/agents/claude/onboarding.ts
-var fs65 = __toESM(require("fs"));
-var os50 = __toESM(require("os"));
-var path69 = __toESM(require("path"));
+var fs67 = __toESM(require("fs"));
+var os54 = __toESM(require("os"));
+var path71 = __toESM(require("path"));
 var ONBOARDING_VERSION_SENTINEL = "9999.0.0";
 function ensureClaudeOnboarded(cwd) {
   try {
-    const file = path69.join(os50.homedir(), ".claude.json");
+    const file = path71.join(os54.homedir(), ".claude.json");
     let config = {};
     try {
-      config = JSON.parse(fs65.readFileSync(file, "utf8"));
+      config = JSON.parse(fs67.readFileSync(file, "utf8"));
     } catch {
     }
     let changed = false;
@@ -35140,8 +35409,8 @@ function ensureClaudeOnboarded(cwd) {
       }
     }
     if (!changed) return;
-    fs65.mkdirSync(path69.dirname(file), { recursive: true });
-    fs65.writeFileSync(file, JSON.stringify(config, null, 2));
+    fs67.mkdirSync(path71.dirname(file), { recursive: true });
+    fs67.writeFileSync(file, JSON.stringify(config, null, 2));
     log.info(
       "claude",
       `pre-completed Claude onboarding${cwd ? ` + trusted workspace ${cwd}` : ""}`
@@ -35252,6 +35521,7 @@ async function start(requestedAgent) {
     pluginAuthToken: session.pluginAuthToken ?? void 0,
     pollSecret: session.pollSecret
   });
+  provisionSkillsForStart();
   const depsReady = process.env.CODESPACES === "true" ? provisionProjectDependencies(cwd).catch(() => void 0) : Promise.resolve();
   if (process.env.CODESPACES === "true") {
     const GATE_TIMEOUT_MS = 24e4;
@@ -35857,7 +36127,7 @@ var import_picocolors11 = __toESM(require("picocolors"));
 var import_child_process29 = require("child_process");
 var import_util4 = require("util");
 var import_picocolors9 = __toESM(require("picocolors"));
-var path70 = __toESM(require("path"));
+var path72 = __toESM(require("path"));
 var execFileP6 = (0, import_util4.promisify)(import_child_process29.execFile);
 var MAX_BUFFER = 8 * 1024 * 1024;
 function resetStdinForChild() {
@@ -36346,7 +36616,7 @@ var GitHubCodespacesProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path70.posix.dirname(remotePath);
+    const remoteDir = path72.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote(remoteDir)}`,
       `cat > ${shellQuote(remotePath)}`
@@ -36416,7 +36686,7 @@ function shellQuote(s) {
 // src/services/providers/gitpod.ts
 var import_child_process30 = require("child_process");
 var import_util5 = require("util");
-var path71 = __toESM(require("path"));
+var path73 = __toESM(require("path"));
 var import_picocolors10 = __toESM(require("picocolors"));
 var execFileP7 = (0, import_util5.promisify)(import_child_process30.execFile);
 var MAX_BUFFER2 = 8 * 1024 * 1024;
@@ -36656,7 +36926,7 @@ var GitpodProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path71.posix.dirname(remotePath);
+    const remoteDir = path73.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote2(remoteDir)}`,
       `cat > ${shellQuote2(remotePath)}`
@@ -36692,7 +36962,7 @@ function shellQuote2(s) {
 // src/services/providers/gitlab-workspaces.ts
 var import_child_process31 = require("child_process");
 var import_util6 = require("util");
-var path72 = __toESM(require("path"));
+var path74 = __toESM(require("path"));
 var execFileP8 = (0, import_util6.promisify)(import_child_process31.execFile);
 var MAX_BUFFER3 = 8 * 1024 * 1024;
 var GITLAB_API_BASE = process.env.CODEAM_GITLAB_API_URL ?? "https://gitlab.com/api/v4";
@@ -36952,7 +37222,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
-    const remoteDir = path72.posix.dirname(remotePath);
+    const remoteDir = path74.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote3(remoteDir)}`, `cat > ${shellQuote3(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote3(remotePath)}`);
@@ -37020,7 +37290,7 @@ function shellQuote3(s) {
 // src/services/providers/railway.ts
 var import_child_process32 = require("child_process");
 var import_util7 = require("util");
-var path73 = __toESM(require("path"));
+var path75 = __toESM(require("path"));
 var execFileP9 = (0, import_util7.promisify)(import_child_process32.execFile);
 var MAX_BUFFER4 = 8 * 1024 * 1024;
 function resetStdinForChild4() {
@@ -37256,7 +37526,7 @@ var RailwayProvider = class {
     if (!projectId || !serviceId) {
       throw new Error("Invalid Railway workspace id (expected projectId/serviceId).");
     }
-    const remoteDir = path73.posix.dirname(remotePath);
+    const remoteDir = path75.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote4(remoteDir)}`, `cat > ${shellQuote4(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote4(remotePath)}`);
@@ -37902,8 +38172,8 @@ async function invite() {
 var import_node_dns = require("dns");
 var import_node_util5 = require("util");
 var import_node_crypto12 = require("crypto");
-var fs66 = __toESM(require("fs"));
-var path74 = __toESM(require("path"));
+var fs68 = __toESM(require("fs"));
+var path76 = __toESM(require("path"));
 var import_picocolors14 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util5.promisify)(import_node_dns.resolve);
 async function checkDns(apiBase2) {
@@ -37959,13 +38229,13 @@ async function checkHealth(apiBase2) {
   }
 }
 function checkConfigDir() {
-  const dir = path74.join(require("os").homedir(), ".codeam");
+  const dir = path76.join(require("os").homedir(), ".codeam");
   try {
-    fs66.mkdirSync(dir, { recursive: true, mode: 448 });
-    const probe = path74.join(dir, ".doctor-probe");
-    fs66.writeFileSync(probe, "ok", { mode: 384 });
-    const read2 = fs66.readFileSync(probe, "utf8");
-    fs66.unlinkSync(probe);
+    fs68.mkdirSync(dir, { recursive: true, mode: 448 });
+    const probe = path76.join(dir, ".doctor-probe");
+    fs68.writeFileSync(probe, "ok", { mode: 384 });
+    const read2 = fs68.readFileSync(probe, "utf8");
+    fs68.unlinkSync(probe);
     if (read2 !== "ok") throw new Error("write/read round-trip mismatch");
     return {
       id: "config-dir",
@@ -38005,9 +38275,9 @@ function checkSessions() {
   }
 }
 function checkAgentBinaries() {
-  const os53 = createOsStrategy();
+  const os57 = createOsStrategy();
   return getEnabledAgents().map((meta) => {
-    const found = os53.findInPath(meta.binaryName);
+    const found = os57.findInPath(meta.binaryName);
     return {
       id: `agent-${meta.id}`,
       label: `Agent binary: ${meta.displayName} (${meta.binaryName})`,
@@ -38029,7 +38299,7 @@ function checkNodePty() {
       detail: "not required on this platform"
     };
   }
-  const vendoredPath = path74.join(__dirname, "vendor", "node-pty");
+  const vendoredPath = path76.join(__dirname, "vendor", "node-pty");
   for (const target of [vendoredPath, "node-pty"]) {
     try {
       require(target);
@@ -38071,7 +38341,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.61.22" : "0.0.0-dev";
+  const cliVersion = true ? "2.61.24" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto12.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -38269,9 +38539,9 @@ async function completion(args2) {
 
 // src/integrations/mcp-run.ts
 var import_node_child_process29 = require("child_process");
-var import_node_fs9 = require("fs");
-var import_node_os9 = __toESM(require("os"));
-var import_node_path8 = __toESM(require("path"));
+var import_node_fs11 = require("fs");
+var import_node_os13 = __toESM(require("os"));
+var import_node_path10 = __toESM(require("path"));
 
 // src/integrations/token-client.ts
 var REFRESH_AHEAD_MS = 5 * 60 * 1e3;
@@ -38493,13 +38763,13 @@ function commandExists(command2) {
 }
 function localBinCandidates(command2) {
   return [
-    import_node_path8.default.join(import_node_os9.default.homedir(), ".local", "bin", command2),
-    import_node_path8.default.join(import_node_os9.default.homedir(), ".cargo", "bin", command2)
+    import_node_path10.default.join(import_node_os13.default.homedir(), ".local", "bin", command2),
+    import_node_path10.default.join(import_node_os13.default.homedir(), ".cargo", "bin", command2)
   ];
 }
 function resolveLauncherPath(command2, deps = {
   commandExists,
-  existsSync: import_node_fs9.existsSync
+  existsSync: import_node_fs11.existsSync
 }) {
   if (deps.commandExists(command2)) return command2;
   for (const candidate of localBinCandidates(command2)) {
@@ -38582,7 +38852,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.61.22" : "unknown";
+  const v = true ? "2.61.24" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 
@@ -38731,10 +39001,10 @@ var EXIT_CODE_NAMES = {
 };
 
 // src/index.ts
-var os52 = __toESM(require("os"));
+var os56 = __toESM(require("os"));
 if (!process.env.HOME) {
   try {
-    const home = os52.homedir();
+    const home = os56.homedir();
     if (home) process.env.HOME = home;
   } catch {
   }