codeam-cli 2.61.82 → 2.61.84

package/dist/index.js

@@ -2624,11 +2624,11 @@ function quiet(fn) {
     log.debug(TAG, "ignored sync error", err);
   }
 }
-function rmIfExistsQuiet(path84) {
+function rmIfExistsQuiet(path85) {
   try {
-    fs2.rmSync(path84, { force: true });
+    fs2.rmSync(path85, { force: true });
   } catch (err) {
-    log.debug(TAG, `rmIfExists failed for ${path84}`, err);
+    log.debug(TAG, `rmIfExists failed for ${path85}`, err);
   }
 }
 function killQuiet(target, signal = "SIGTERM") {
@@ -2774,9 +2774,9 @@ var _default = makeConfig();
 var { getConfig, ensurePluginId, addSession, removeSession, setActiveSession, getActiveSession, getActiveSessionForAgent, setDisable1mContext, clearAll, saveCliConfig, loadCliConfig } = _default;
 
 // src/commands/pair-auto.ts
-var fs61 = __toESM(require("fs"));
-var os49 = __toESM(require("os"));
-var path65 = __toESM(require("path"));
+var fs62 = __toESM(require("fs"));
+var os50 = __toESM(require("os"));
+var path66 = __toESM(require("path"));
 var import_crypto4 = require("crypto");
 
 // src/services/telemetry.service.ts
@@ -2812,8 +2812,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? (0, import_pat
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path84) {
-  return path84.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path85) {
+  return path85.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 
 // ../../node_modules/@posthog/core/dist/featureFlagUtils.mjs
@@ -5293,9 +5293,9 @@ async function addSourceContext(frames) {
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-function getContextLinesFromFile(path84, ranges, output) {
+function getContextLinesFromFile(path85, ranges, output) {
   return new Promise((resolve9) => {
-    const stream = (0, import_node_fs.createReadStream)(path84);
+    const stream = (0, import_node_fs.createReadStream)(path85);
     const lineReaded = (0, import_node_readline.createInterface)({
       input: stream
     });
@@ -5310,7 +5310,7 @@ function getContextLinesFromFile(path84, ranges, output) {
     let rangeStart = range[0];
     let rangeEnd = range[1];
     function onStreamError() {
-      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path84, 1);
+      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path85, 1);
       lineReaded.close();
       lineReaded.removeAllListeners();
       destroyStreamAndResolve();
@@ -5371,8 +5371,8 @@ function clearLineContext(frame) {
   delete frame.context_line;
   delete frame.post_context;
 }
-function shouldSkipContextLinesForFile(path84) {
-  return path84.startsWith("node:") || path84.endsWith(".min.js") || path84.endsWith(".min.cjs") || path84.endsWith(".min.mjs") || path84.startsWith("data:");
+function shouldSkipContextLinesForFile(path85) {
+  return path85.startsWith("node:") || path85.endsWith(".min.js") || path85.endsWith(".min.cjs") || path85.endsWith(".min.mjs") || path85.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame) {
   if (void 0 !== frame.lineno && frame.lineno > MAX_CONTEXTLINES_LINENO) return true;
@@ -7526,7 +7526,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.61.82" : "0.0.0-dev",
+    cliVersion: true ? "2.61.84" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -7707,7 +7707,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.61.82",
+  version: "2.61.84",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -8983,7 +8983,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.61.82" ? { ideVersion: "2.61.82" } : {}
+      ..."2.61.84" ? { ideVersion: "2.61.84" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -9210,10 +9210,10 @@ var WINDOWS_LEGACY_JUNCTIONS = [
   /[\\/]Start Menu([\\/]|$)/i,
   /[\\/]Templates([\\/]|$)/i
 ];
-function isUnsafeWindowsWatchRoot(dir, homedir48) {
+function isUnsafeWindowsWatchRoot(dir, homedir49) {
   const norm = (p2) => p2.replace(/\//g, "\\").replace(/\\+$/, "").toLowerCase();
   const cwd = norm(dir);
-  const home = norm(homedir48);
+  const home = norm(homedir49);
   if (cwd === home) return true;
   if (/^[a-z]:$/.test(cwd)) return true;
   const sysRoots = [
@@ -10357,9 +10357,9 @@ function closeAllTerminals() {
 }
 
 // src/commands/start/handlers.ts
-var fs60 = __toESM(require("fs"));
-var os48 = __toESM(require("os"));
-var path64 = __toESM(require("path"));
+var fs61 = __toESM(require("fs"));
+var os49 = __toESM(require("os"));
+var path65 = __toESM(require("path"));
 var import_crypto3 = require("crypto");
 var import_child_process24 = require("child_process");
 
@@ -13839,10 +13839,10 @@ function buildForPlatform(platform3) {
 var import_node_crypto4 = require("crypto");
 
 // src/agents/claude/resolver.ts
-function buildClaudeLaunch(extraArgs = [], os60 = createOsStrategy()) {
-  const found = os60.findInPath("claude") ?? os60.findInPath("claude-code");
+function buildClaudeLaunch(extraArgs = [], os61 = createOsStrategy()) {
+  const found = os61.findInPath("claude") ?? os61.findInPath("claude-code");
   if (!found) return null;
-  return os60.buildLaunch(found, extraArgs);
+  return os61.buildLaunch(found, extraArgs);
 }
 
 // src/agents/claude/installer.ts
@@ -14432,8 +14432,8 @@ var ClaudeRuntimeStrategy = class {
   meta = getAgent("claude");
   mode = "interactive";
   os;
-  constructor(os60) {
-    this.os = os60;
+  constructor(os61) {
+    this.os = os61;
   }
   /**
    * Claude Code's react-ink TUI enables bracketed-paste mode at
@@ -15213,8 +15213,8 @@ function codexCredentialLocator() {
 function codexLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os60 = createOsStrategy();
-      return os60.findInPath("codex") !== null;
+      const os61 = createOsStrategy();
+      return os61.findInPath("codex") !== null;
     },
     launch() {
       return (0, import_node_child_process4.spawn)("codex", ["login"], { stdio: "inherit" });
@@ -15237,8 +15237,8 @@ var CodexRuntimeStrategy = class {
   meta = getAgent("codex");
   mode = "interactive";
   os;
-  constructor(os60) {
-    this.os = os60;
+  constructor(os61) {
+    this.os = os61;
   }
   async prepareLaunch() {
     let binary = this.os.findInPath("codex");
@@ -15347,12 +15347,12 @@ var CodexRuntimeStrategy = class {
     });
   }
 };
-function resolveNpm(os60) {
-  return os60.id === "win32" ? "npm.cmd" : "npm";
+function resolveNpm(os61) {
+  return os61.id === "win32" ? "npm.cmd" : "npm";
 }
-async function installCodexViaNpm(os60) {
+async function installCodexViaNpm(os61) {
   return new Promise((resolve9, reject) => {
-    const proc = (0, import_node_child_process5.spawn)(resolveNpm(os60), ["install", "-g", "@openai/codex"], {
+    const proc = (0, import_node_child_process5.spawn)(resolveNpm(os61), ["install", "-g", "@openai/codex"], {
       stdio: "inherit"
     });
     proc.on("close", (code) => {
@@ -15369,16 +15369,16 @@ async function installCodexViaNpm(os60) {
     });
   });
 }
-function augmentNpmGlobalBin(os60) {
+function augmentNpmGlobalBin(os61) {
   try {
-    const result = (0, import_node_child_process5.spawnSync)(resolveNpm(os60), ["prefix", "-g"], {
+    const result = (0, import_node_child_process5.spawnSync)(resolveNpm(os61), ["prefix", "-g"], {
       stdio: ["ignore", "pipe", "ignore"]
     });
     if (result.status !== 0) return;
     const prefix = result.stdout.toString().trim();
     if (!prefix) return;
-    const binDir = os60.id === "win32" ? prefix : path25.join(prefix, "bin");
-    os60.augmentPath([binDir]);
+    const binDir = os61.id === "win32" ? prefix : path25.join(prefix, "bin");
+    os61.augmentPath([binDir]);
   } catch {
   }
 }
@@ -15462,9 +15462,9 @@ var import_node_child_process8 = require("child_process");
 // src/agents/coderabbit/installer.ts
 var import_node_child_process6 = require("child_process");
 var INSTALL_URL = "https://cli.coderabbit.ai/install.sh";
-async function ensureCoderabbitInstalled(os60) {
-  if (os60.findInPath("coderabbit")) return true;
-  if (os60.id === "win32") {
+async function ensureCoderabbitInstalled(os61) {
+  if (os61.findInPath("coderabbit")) return true;
+  if (os61.id === "win32") {
     console.error(
       "\n  \u2717 CodeRabbit on Windows requires WSL.\n    Install the CLI inside your WSL distribution\n    (curl -fsSL https://cli.coderabbit.ai/install.sh | sh)\n    then re-run `codeam link coderabbit` from WSL.\n"
     );
@@ -15497,8 +15497,8 @@ async function ensureCoderabbitInstalled(os60) {
     proc.on("error", () => finish(false));
   });
   if (!ok) return false;
-  os60.augmentPath([`${os60.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
-  return os60.findInPath("coderabbit") !== null;
+  os61.augmentPath([`${os61.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
+  return os61.findInPath("coderabbit") !== null;
 }
 
 // src/agents/coderabbit/link.ts
@@ -15533,10 +15533,10 @@ function coderabbitCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function coderabbitLoginLauncher(os60) {
+function coderabbitLoginLauncher(os61) {
   return {
     async ensureInstalled() {
-      return ensureCoderabbitInstalled(os60);
+      return ensureCoderabbitInstalled(os61);
     },
     launch() {
       return (0, import_node_child_process7.spawn)("coderabbit", ["auth", "login"], { stdio: "inherit" });
@@ -15592,8 +15592,8 @@ function pickLine(obj) {
 function toHunk(raw, groupSeverity) {
   if (!raw || typeof raw !== "object") return null;
   const o = raw;
-  const path84 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
-  if (!path84) return null;
+  const path85 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
+  if (!path85) return null;
   const message = asString(
     pick(o, [
       "comment",
@@ -15610,7 +15610,7 @@ function toHunk(raw, groupSeverity) {
   const severity = normSeverity(pick(o, ["severity", "level", "priority", "impact"])) ?? normSeverity(groupSeverity);
   const locObj = pick(o, ["location"]) ?? o;
   return {
-    path: path84.trim(),
+    path: path85.trim(),
     line: pickLine(o) ?? pickLine(locObj),
     severity,
     message: (title && message ? `${title}: ${message}` : title || message).trim() || "(no message)"
@@ -15693,10 +15693,10 @@ function parsePlain(stdout) {
   for (const line of stdout.split(/\r?\n/)) {
     const m = line.match(HUNK_LINE_RE);
     if (!m) continue;
-    const [, path84, lineNo, sevToken, message] = m;
-    if (!path84 || !lineNo || !message) continue;
+    const [, path85, lineNo, sevToken, message] = m;
+    if (!path85 || !lineNo || !message) continue;
     hunks.push({
-      path: path84.trim(),
+      path: path85.trim(),
       line: Number(lineNo),
       severity: sevToken ? SEVERITY_MAP[sevToken.toLowerCase()] : void 0,
       message: message.trim().replace(/^[*-]\s+/, "")
@@ -15756,8 +15756,8 @@ var CoderabbitRuntimeStrategy = class {
   meta = getAgent("coderabbit");
   mode = "batch";
   os;
-  constructor(os60) {
-    this.os = os60;
+  constructor(os61) {
+    this.os = os61;
   }
   getDefaultArgs() {
     return ["review", "--agent"];
@@ -16028,10 +16028,10 @@ function cursorCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function cursorLoginLauncher(os60) {
+function cursorLoginLauncher(os61) {
   return {
     async ensureInstalled() {
-      if (os60.findInPath("cursor-agent")) return true;
+      if (os61.findInPath("cursor-agent")) return true;
       console.error(
         "\n  \u2717 cursor-agent binary not on PATH.\n    Install Cursor (https://cursor.com/) and ensure the CLI\n    plugin is enabled, then re-run `codeam link cursor`.\n"
       );
@@ -16095,8 +16095,8 @@ var CursorRuntimeStrategy = class {
   meta = getAgent("cursor");
   mode = "interactive";
   os;
-  constructor(os60) {
-    this.os = os60;
+  constructor(os61) {
+    this.os = os61;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("cursor-agent");
@@ -16312,10 +16312,10 @@ function aiderCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function aiderLoginLauncher(os60) {
+function aiderLoginLauncher(os61) {
   return {
     async ensureInstalled() {
-      if (os60.findInPath("aider")) return true;
+      if (os61.findInPath("aider")) return true;
       console.error(
         "\n  \u2717 aider binary not on PATH.\n    Install Aider:\n      pip install aider-chat\n    then re-run `codeam link aider`.\n"
       );
@@ -16325,7 +16325,7 @@ function aiderLoginLauncher(os60) {
       console.error(
         "\n  Aider has no interactive login flow.\n    Set ANTHROPIC_API_KEY or OPENAI_API_KEY in your shell,\n    or re-run `codeam link aider --api-key=<your-key>`.\n"
       );
-      return (0, import_node_child_process11.spawn)(os60.id === "win32" ? "cmd.exe" : "sh", os60.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
+      return (0, import_node_child_process11.spawn)(os61.id === "win32" ? "cmd.exe" : "sh", os61.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
         stdio: "ignore"
       });
     }
@@ -16397,8 +16397,8 @@ var AiderRuntimeStrategy = class {
   meta = getAgent("aider");
   mode = "interactive";
   os;
-  constructor(os60) {
-    this.os = os60;
+  constructor(os61) {
+    this.os = os61;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("aider");
@@ -16530,8 +16530,8 @@ function geminiCredentialLocator() {
 function geminiLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os60 = createOsStrategy();
-      return os60.findInPath("gemini") !== null;
+      const os61 = createOsStrategy();
+      return os61.findInPath("gemini") !== null;
     },
     launch() {
       return (0, import_node_child_process12.spawn)("gemini", ["auth", "login"], { stdio: "inherit" });
@@ -16721,8 +16721,8 @@ var GeminiRuntimeStrategy = class {
   meta = getAgent("gemini");
   mode = "interactive";
   os;
-  constructor(os60) {
-    this.os = os60;
+  constructor(os61) {
+    this.os = os61;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("gemini");
@@ -17013,8 +17013,8 @@ var KimiRuntimeStrategy = class {
   meta = getAgent("kimi");
   mode = "interactive";
   os;
-  constructor(os60) {
-    this.os = os60;
+  constructor(os61) {
+    this.os = os61;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("kimi");
@@ -17156,8 +17156,8 @@ var OpencodeRuntimeStrategy = class {
   meta = getAgent("opencode");
   mode = "interactive";
   os;
-  constructor(os60) {
-    this.os = os60;
+  constructor(os61) {
+    this.os = os61;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("opencode");
@@ -17241,20 +17241,20 @@ var OpencodeRuntimeStrategy = class {
 
 // src/agents/registry.ts
 var runtimeBuilders = {
-  claude: (os60) => new ClaudeRuntimeStrategy(os60),
-  codex: (os60) => new CodexRuntimeStrategy(os60),
-  coderabbit: (os60) => new CoderabbitRuntimeStrategy(os60),
-  cursor: (os60) => new CursorRuntimeStrategy(os60),
-  aider: (os60) => new AiderRuntimeStrategy(os60),
-  gemini: (os60) => new GeminiRuntimeStrategy(os60),
-  kimi: (os60) => new KimiRuntimeStrategy(os60),
-  opencode: (os60) => new OpencodeRuntimeStrategy(os60)
+  claude: (os61) => new ClaudeRuntimeStrategy(os61),
+  codex: (os61) => new CodexRuntimeStrategy(os61),
+  coderabbit: (os61) => new CoderabbitRuntimeStrategy(os61),
+  cursor: (os61) => new CursorRuntimeStrategy(os61),
+  aider: (os61) => new AiderRuntimeStrategy(os61),
+  gemini: (os61) => new GeminiRuntimeStrategy(os61),
+  kimi: (os61) => new KimiRuntimeStrategy(os61),
+  opencode: (os61) => new OpencodeRuntimeStrategy(os61)
 };
 var deployBuilders = {
   claude: () => new ClaudeDeployStrategy(),
   codex: () => new CodexDeployStrategy()
 };
-function createAgentStrategy(agent, os60 = createOsStrategy()) {
+function createAgentStrategy(agent, os61 = createOsStrategy()) {
   if (!AGENT_REGISTRY[agent]?.enabled) {
     throw new Error(
       `Agent "${agent}" is not supported in this codeam-cli version. Upgrade with 'npm i -g codeam-cli@latest'.`
@@ -17264,10 +17264,10 @@ function createAgentStrategy(agent, os60 = createOsStrategy()) {
   if (!build) {
     throw new Error(`No runtime strategy registered for agent "${agent}"`);
   }
-  return build(os60);
+  return build(os61);
 }
-function createInteractiveAgentStrategy(agent, os60 = createOsStrategy()) {
-  const s = createAgentStrategy(agent, os60);
+function createInteractiveAgentStrategy(agent, os61 = createOsStrategy()) {
+  const s = createAgentStrategy(agent, os61);
   if (s.mode !== "interactive") {
     throw new Error(
       `Agent "${agent}" is a batch agent; use createAgentStrategy + .runOneShot for one-shot reviews.`
@@ -17964,26 +17964,26 @@ function restoreCoderabbitOauthBlob(value) {
   (0, import_node_fs5.writeFileSync)(path37.join(dir, file), contents, { mode: 384 });
 }
 async function configureCoderabbit(input, deps = {}) {
-  const os60 = deps.os ?? createOsStrategy();
+  const os61 = deps.os ?? createOsStrategy();
   const ensureInstalled = deps.ensureInstalled ?? ensureCoderabbitInstalled;
   const isLoggedIn = deps.isLoggedIn ?? defaultIsLoggedIn;
   const runOAuth = deps.runOAuthLogin ?? runCoderabbitOAuthLogin;
   const snapshot = deps.snapshotDir ?? (() => snapshotCredentialDir());
   const capture2 = deps.captureCredential ?? ((b) => diffCapturedCredential(b));
   const loginWithApiKey = deps.loginWithApiKey ?? defaultLoginWithApiKey;
-  const home = os60.homeDir();
-  os60.augmentPath(
-    os60.id === "win32" ? [
+  const home = os61.homeDir();
+  os61.augmentPath(
+    os61.id === "win32" ? [
       path37.join(home, ".local", "bin"),
       path37.join(process.env.APPDATA ?? path37.join(home, "AppData", "Roaming"), "npm"),
       path37.join(home, "scoop", "shims")
     ] : [path37.join(home, ".local", "bin"), "/opt/homebrew/bin", "/usr/local/bin"]
   );
-  const installed2 = os60.findInPath("coderabbit") !== null;
+  const installed2 = os61.findInPath("coderabbit") !== null;
   const base = () => ({
     action: input.action,
     supported: true,
-    installed: os60.findInPath("coderabbit") !== null,
+    installed: os61.findInPath("coderabbit") !== null,
     loggedIn: false
   });
   if (input.action === "status") {
@@ -17997,7 +17997,7 @@ async function configureCoderabbit(input, deps = {}) {
     const key = (input.apiKey ?? "").trim();
     if (!key) return { ...res2, error: "No API key provided" };
     if (!res2.installed) {
-      const ok = await ensureInstalled(os60);
+      const ok = await ensureInstalled(os61);
       res2.installed = ok;
       if (!ok) return { ...res2, error: "CodeRabbit CLI could not be installed" };
     }
@@ -18021,7 +18021,7 @@ async function configureCoderabbit(input, deps = {}) {
     }
     if (!res2.installed) {
       deps.onEvent?.({ kind: "installing" });
-      const ok = await ensureInstalled(os60);
+      const ok = await ensureInstalled(os61);
       res2.installed = ok;
       if (!ok) return { ...res2, error: "CodeRabbit CLI could not be installed" };
     }
@@ -18051,7 +18051,7 @@ async function configureCoderabbit(input, deps = {}) {
     const res2 = base();
     if (!installed2) {
       deps.onEvent?.({ kind: "installing" });
-      const ok = await ensureInstalled(os60);
+      const ok = await ensureInstalled(os61);
       res2.installed = ok;
       if (!ok) return { ...res2, error: "CodeRabbit CLI could not be installed" };
     }
@@ -18091,7 +18091,7 @@ async function configureCoderabbit(input, deps = {}) {
   }
   const res = base();
   if (!res.installed) {
-    const ok = await ensureInstalled(os60);
+    const ok = await ensureInstalled(os61);
     res.installed = ok;
     if (!ok) return { ...res, error: "CodeRabbit CLI is not installed" };
   }
@@ -18275,9 +18275,9 @@ function defaultRunGh(args2) {
 
 // src/commands/host-agent.ts
 var import_node_child_process25 = require("child_process");
-var os38 = __toESM(require("os"));
-var fs44 = __toESM(require("fs"));
-var path47 = __toESM(require("path"));
+var os39 = __toESM(require("os"));
+var fs45 = __toESM(require("fs"));
+var path48 = __toESM(require("path"));
 
 // src/integrations/manifest.ts
 var import_node_fs7 = __toESM(require("fs"));
@@ -19936,13 +19936,72 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner,
   return true;
 }
 
+// src/commands/host/house-proxy-config.ts
+var fs42 = __toESM(require("fs"));
+var os37 = __toESM(require("os"));
+var path46 = __toESM(require("path"));
+function houseProxyConfigPath() {
+  return path46.join(os37.homedir(), ".codeam", "house-proxy.json");
+}
+function persistHouseProxyConfig(config) {
+  try {
+    const file = houseProxyConfigPath();
+    fs42.mkdirSync(path46.dirname(file), { recursive: true, mode: 448 });
+    const tmp = `${file}.tmp-${process.pid}`;
+    fs42.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
+    fs42.renameSync(tmp, file);
+    restrictToOwner(file);
+  } catch (err) {
+    log.warn(
+      "host-agent",
+      `failed to persist house-proxy config (best-effort): ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+}
+function clearHouseProxyConfig() {
+  try {
+    fs42.rmSync(houseProxyConfigPath(), { force: true });
+  } catch {
+  }
+}
+function readHouseProxyChildEnv() {
+  try {
+    const raw = fs42.readFileSync(houseProxyConfigPath(), "utf8");
+    const parsed = JSON.parse(raw);
+    if (typeof parsed !== "object" || parsed === null) return {};
+    const o = parsed;
+    if (typeof o.baseUrl !== "string" || !o.baseUrl) return {};
+    if (typeof o.token !== "string" || !o.token) return {};
+    const env = {
+      ANTHROPIC_BASE_URL: o.baseUrl,
+      ANTHROPIC_AUTH_TOKEN: o.token,
+      CLAUDE_CODE_AUTO_COMPACT_WINDOW: "512000",
+      API_TIMEOUT_MS: "3000000"
+    };
+    if (o.openRouter === true) {
+      env.ANTHROPIC_API_KEY = "";
+    } else {
+      env.ANTHROPIC_MODEL = "MiniMax-M3";
+      env.ANTHROPIC_DEFAULT_SONNET_MODEL = "MiniMax-M3";
+      env.ANTHROPIC_DEFAULT_OPUS_MODEL = "MiniMax-M3";
+      env.ANTHROPIC_DEFAULT_HAIKU_MODEL = "MiniMax-M3";
+    }
+    if (typeof o.claudeConfigDir === "string" && o.claudeConfigDir) {
+      env.CLAUDE_CONFIG_DIR = o.claudeConfigDir;
+    }
+    return env;
+  } catch {
+    return {};
+  }
+}
+
 // src/commands/host/self-update.ts
 var import_node_child_process23 = require("child_process");
 
 // src/lib/updateNotifier.ts
-var fs42 = __toESM(require("fs"));
-var os37 = __toESM(require("os"));
-var path46 = __toESM(require("path"));
+var fs43 = __toESM(require("fs"));
+var os38 = __toESM(require("os"));
+var path47 = __toESM(require("path"));
 var https6 = __toESM(require("https"));
 var import_node_child_process22 = require("child_process");
 var import_picocolors3 = __toESM(require("picocolors"));
@@ -19951,12 +20010,12 @@ var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
 var TTL_MS = 24 * 60 * 60 * 1e3;
 var REQUEST_TIMEOUT_MS = 1500;
 function cachePath() {
-  const dir = path46.join(os37.homedir(), ".codeam");
-  return path46.join(dir, "update-check.json");
+  const dir = path47.join(os38.homedir(), ".codeam");
+  return path47.join(dir, "update-check.json");
 }
 function readCache() {
   try {
-    const raw = fs42.readFileSync(cachePath(), "utf8");
+    const raw = fs43.readFileSync(cachePath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.fetchedAt !== "number" || typeof parsed.latest !== "string") return null;
     return parsed;
@@ -19967,10 +20026,10 @@ function readCache() {
 function writeCache(cache) {
   try {
     const file = cachePath();
-    fs42.mkdirSync(path46.dirname(file), { recursive: true });
+    fs43.mkdirSync(path47.dirname(file), { recursive: true });
     const tmp = `${file}.${process.pid}.tmp`;
-    fs42.writeFileSync(tmp, JSON.stringify(cache));
-    fs42.renameSync(tmp, file);
+    fs43.writeFileSync(tmp, JSON.stringify(cache));
+    fs43.renameSync(tmp, file);
   } catch {
   }
 }
@@ -20044,8 +20103,8 @@ function isLinkedInstall() {
       timeout: 2e3
     }).trim();
     if (!root) return false;
-    const pkgPath = path46.join(root, PKG_NAME);
-    return fs42.lstatSync(pkgPath).isSymbolicLink();
+    const pkgPath = path47.join(root, PKG_NAME);
+    return fs43.lstatSync(pkgPath).isSymbolicLink();
   } catch {
     return false;
   }
@@ -20081,7 +20140,7 @@ function maybeAutoUpdate(currentVersion, latest) {
     return;
   }
   try {
-    fs42.unlinkSync(cachePath());
+    fs43.unlinkSync(cachePath());
   } catch {
   }
   process.stderr.write(`  ${import_picocolors3.default.green("\u2713")} Updated. Resuming session...
@@ -20097,7 +20156,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.61.82" : null;
+  const current = true ? "2.61.84" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -20114,7 +20173,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.61.82" : null;
+  const current = true ? "2.61.84" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -20134,7 +20193,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.61.82" : null;
+  return true ? "2.61.84" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve9) => {
@@ -20201,7 +20260,7 @@ async function runSelfUpdate() {
 
 // src/commands/host/teardown.ts
 var import_node_child_process24 = require("child_process");
-var fs43 = __toESM(require("fs"));
+var fs44 = __toESM(require("fs"));
 var defaultDisableService = () => {
   try {
     (0, import_node_child_process24.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
@@ -20210,7 +20269,7 @@ var defaultDisableService = () => {
 };
 var defaultTeardownHeadroom = () => {
   try {
-    const kind = JSON.parse(fs43.readFileSync(headroomConfigPath(), "utf8")).agent;
+    const kind = JSON.parse(fs44.readFileSync(headroomConfigPath(), "utf8")).agent;
     if (kind) {
       (0, import_node_child_process24.execFileSync)("headroom", ["unwrap", kind], { stdio: "ignore", timeout: 15e3 });
     }
@@ -20278,8 +20337,8 @@ function maybeResumeLocalHeadroomReporter(ctx) {
   if (process.env["HEADROOM_ENABLED"] === "1") return null;
   try {
     const file = headroomConfigPath();
-    if (!fs44.existsSync(file)) return null;
-    const cfg = JSON.parse(fs44.readFileSync(file, "utf8"));
+    if (!fs45.existsSync(file)) return null;
+    const cfg = JSON.parse(fs45.readFileSync(file, "utf8"));
     if (!cfg?.enabled) return null;
     const agent = cfg.agent ?? "claude";
     const ingestUrl = `${resolveApiBaseUrl()}/api/sessions/${ctx.sessionId}/headroom-savings`;
@@ -20864,13 +20923,13 @@ var HostAgentSupervisor = class {
     const relay = this.relay;
     if (!relay) return;
     const raw = cmd.payload?.path;
-    const target = typeof raw === "string" && raw.trim() ? path47.resolve(raw.trim()) : os38.homedir();
+    const target = typeof raw === "string" && raw.trim() ? path48.resolve(raw.trim()) : os39.homedir();
     try {
-      const dirents = await fs44.promises.readdir(target, { withFileTypes: true });
+      const dirents = await fs45.promises.readdir(target, { withFileTypes: true });
       const entries = dirents.filter((d3) => !d3.name.startsWith(".")).map((d3) => ({ name: d3.name, isDir: d3.isDirectory() })).sort(
         (a, b) => a.isDir === b.isDir ? a.name.localeCompare(b.name) : a.isDir ? -1 : 1
       );
-      const parent = path47.dirname(target);
+      const parent = path48.dirname(target);
       await relay.sendResult(cmd.id, "completed", {
         path: target,
         // null at the filesystem root so the UI can hide the ".." affordance.
@@ -21100,18 +21159,24 @@ var HostAgentSupervisor = class {
           API_TIMEOUT_MS: "3000000",
           CODEAM_AUTO_TOKEN: payload.autoPairToken
         };
-        const houseConfigDir = path47.join(
-          os38.homedir(),
+        const houseConfigDir = path48.join(
+          os39.homedir(),
           ".codeam",
           "house-claude",
           payload.deployId
         );
         try {
-          fs44.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
+          fs45.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
         } catch {
         }
         childEnv.CLAUDE_CONFIG_DIR = houseConfigDir;
         extraArgs = [`--agent=${agentKind || "claude"}`];
+        persistHouseProxyConfig({
+          baseUrl,
+          token,
+          openRouter: !!openRouter,
+          claudeConfigDir: houseConfigDir
+        });
       } else {
         const auth = await this.resolveAgentAuth(this.identity, payload.sealedAgentAuth);
         const credEnv = provisionAgentCredentials(payload.agentId, auth, void 0);
@@ -21119,6 +21184,7 @@ var HostAgentSupervisor = class {
           ...credEnv,
           CODEAM_AUTO_TOKEN: payload.autoPairToken
         };
+        clearHouseProxyConfig();
       }
       childEnv = { ...childEnv, CODEAM_AUTO_APPROVE: "1" };
       childEnv = { ...childEnv, CODEAM_HOST_AGENT_CHILD: "1" };
@@ -21126,7 +21192,7 @@ var HostAgentSupervisor = class {
         report("installing", "installing agent CLI");
         await this.runAgentInstall(payload.agentInstallScript);
       }
-      const home = process.env.HOME || os38.homedir();
+      const home = process.env.HOME || os39.homedir();
       childEnv.PATH = `${home}/.local/bin:${process.env.PATH ?? ""}`;
       if (payload.cloneToken) {
         try {
@@ -21134,13 +21200,13 @@ var HostAgentSupervisor = class {
           if ((payload.repoProvider ?? "github") === "gitlab") {
             const glabCmd = await ensureGlabCli(defaultGitToolingRunner);
             if (glabCmd) {
-              childEnv.PATH = `${codeamBinDir()}${path47.delimiter}${childEnv.PATH}`;
+              childEnv.PATH = `${codeamBinDir()}${path48.delimiter}${childEnv.PATH}`;
               await ensureGlabAuth(defaultGitToolingRunner, glabCmd, payload.cloneToken);
             }
           } else {
             const ghCmd = await ensureGhCli(defaultGitToolingRunner, payload.cloneToken);
             if (ghCmd) {
-              childEnv.PATH = `${codeamBinDir()}${path47.delimiter}${childEnv.PATH}`;
+              childEnv.PATH = `${codeamBinDir()}${path48.delimiter}${childEnv.PATH}`;
               await ensureGhAuth(defaultGitToolingRunner, ghCmd, payload.cloneToken);
             }
           }
@@ -21160,7 +21226,7 @@ var HostAgentSupervisor = class {
       }
       if (payload.headroomEnabled && payload.headroomAgent && payload.headroomSavingsIngestUrl && isHeadroomSupportedAgent(payload.headroomAgent)) {
         report("headroom", "setting up Headroom proxy");
-        const freeBytes = await this.getFreeDisk(os38.homedir());
+        const freeBytes = await this.getFreeDisk(os39.homedir());
         const alreadyInstalled = this.isHeadroomInstalled();
         if (!alreadyInstalled && freeBytes !== null && freeBytes < HEADROOM_MIN_FREE_DISK_BYTES) {
           const freeGb = (freeBytes / 1e9).toFixed(1);
@@ -21305,8 +21371,11 @@ var HostAgentSupervisor = class {
       if (this.children.size > 0) return;
       const session = getActiveSession();
       if (!session || !session.pluginId || !session.pollSecret || !session.agent) return;
-      const cwd = session.cwd && fs44.existsSync(session.cwd) ? session.cwd : process.cwd();
-      const proc = this.resumeSpawner({ ...readHeadroomChildEnv() }, cwd);
+      const cwd = session.cwd && fs45.existsSync(session.cwd) ? session.cwd : process.cwd();
+      const proc = this.resumeSpawner(
+        { ...readHeadroomChildEnv(), ...readHouseProxyChildEnv() },
+        cwd
+      );
       const child = {
         deployId: session.id,
         proc,
@@ -21351,7 +21420,7 @@ var HostAgentSupervisor = class {
    */
   runAgentInstall(script) {
     return new Promise((resolve9) => {
-      const home = process.env.HOME || os38.homedir();
+      const home = process.env.HOME || os39.homedir();
       const child = (0, import_node_child_process25.spawn)("sh", ["-c", script], {
         env: { ...process.env, HOME: home },
         stdio: ["ignore", "pipe", "pipe"]
@@ -21439,12 +21508,12 @@ var HostAgentSupervisor = class {
       this.children.delete(deployId);
     }
     const dirs = [
-      path47.join(selfHostedWorkspaceRoot(), deployId),
-      path47.join(os38.homedir(), ".codeam", "house-claude", deployId)
+      path48.join(selfHostedWorkspaceRoot(), deployId),
+      path48.join(os39.homedir(), ".codeam", "house-claude", deployId)
     ];
     for (const dir of dirs) {
       try {
-        fs44.rmSync(dir, { recursive: true, force: true });
+        fs45.rmSync(dir, { recursive: true, force: true });
       } catch (err) {
         log.warn(
           "host-agent",
@@ -21581,9 +21650,9 @@ async function configureHeadroom(action, ctx, deps) {
 }
 
 // src/services/headroom/budget-relaunch.ts
-var fs45 = __toESM(require("fs"));
-var os39 = __toESM(require("os"));
-var path48 = __toESM(require("path"));
+var fs46 = __toESM(require("fs"));
+var os40 = __toESM(require("os"));
+var path49 = __toESM(require("path"));
 var import_child_process13 = require("child_process");
 function amendDeploymentManifestBudget(manifest, budget) {
   const rawArgs = manifest.proxy_args ?? [];
@@ -21617,7 +21686,7 @@ function amendDeploymentManifestBudget(manifest, budget) {
   return { ...manifest, proxy_args: newArgs, base_env: newEnv };
 }
 function findHeadroomDeployments(homeDir2, deps) {
-  const deployDir = path48.join(homeDir2, ".headroom", "deploy");
+  const deployDir = path49.join(homeDir2, ".headroom", "deploy");
   let profiles;
   try {
     profiles = deps.readDir(deployDir);
@@ -21626,7 +21695,7 @@ function findHeadroomDeployments(homeDir2, deps) {
   }
   const results = [];
   for (const profile of profiles) {
-    const manifestPath = path48.join(deployDir, profile, "manifest.json");
+    const manifestPath = path49.join(deployDir, profile, "manifest.json");
     let raw;
     try {
       raw = deps.readJson(manifestPath);
@@ -21658,8 +21727,8 @@ async function applyBudgetToHeadroom(budget, deps) {
 }
 function writeManifestReal(manifestPath, manifest) {
   const tmp = manifestPath + ".codeam.tmp";
-  fs45.writeFileSync(tmp, JSON.stringify(manifest, null, 2) + "\n", { mode: 384 });
-  fs45.renameSync(tmp, manifestPath);
+  fs46.writeFileSync(tmp, JSON.stringify(manifest, null, 2) + "\n", { mode: 384 });
+  fs46.renameSync(tmp, manifestPath);
 }
 function restartDeploymentReal(profile) {
   try {
@@ -21694,11 +21763,11 @@ function spawnProxyReal2(_budget) {
   );
 }
 function makeRealApplyBudgetDeps() {
-  const homeDir2 = os39.homedir();
+  const homeDir2 = os40.homedir();
   return {
     findDeployments: () => findHeadroomDeployments(homeDir2, {
-      readDir: (dir) => fs45.readdirSync(dir),
-      readJson: (filePath) => JSON.parse(fs45.readFileSync(filePath, "utf8"))
+      readDir: (dir) => fs46.readdirSync(dir),
+      readJson: (filePath) => JSON.parse(fs46.readFileSync(filePath, "utf8"))
     }),
     writeManifest: writeManifestReal,
     restartDeployment: restartDeploymentReal,
@@ -21708,16 +21777,16 @@ function makeRealApplyBudgetDeps() {
 }
 
 // src/services/preview/port-registry.ts
-var fs46 = __toESM(require("fs"));
-var os40 = __toESM(require("os"));
-var path49 = __toESM(require("path"));
+var fs47 = __toESM(require("fs"));
+var os41 = __toESM(require("os"));
+var path50 = __toESM(require("path"));
 var import_child_process14 = require("child_process");
 function registryPath() {
-  return path49.join(os40.homedir(), ".codeam", "preview-ports.json");
+  return path50.join(os41.homedir(), ".codeam", "preview-ports.json");
 }
 function readRegistry() {
   try {
-    const raw = fs46.readFileSync(registryPath(), "utf8");
+    const raw = fs47.readFileSync(registryPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object") return parsed;
   } catch {
@@ -21727,10 +21796,10 @@ function readRegistry() {
 function writeRegistry(reg) {
   try {
     const file = registryPath();
-    fs46.mkdirSync(path49.dirname(file), { recursive: true });
+    fs47.mkdirSync(path50.dirname(file), { recursive: true });
     const tmp = `${file}.tmp`;
-    fs46.writeFileSync(tmp, JSON.stringify(reg), "utf8");
-    fs46.renameSync(tmp, file);
+    fs47.writeFileSync(tmp, JSON.stringify(reg), "utf8");
+    fs47.renameSync(tmp, file);
   } catch (err) {
     log.warn("preview", `port-registry write failed: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -21796,7 +21865,7 @@ function reclaimOwnOrphanPort(port) {
 
 // src/services/preview/host-allow.ts
 var import_fs = require("fs");
-var path50 = __toESM(require("path"));
+var path51 = __toESM(require("path"));
 var NEXT_ALLOWED_ORIGINS = [
   "*.trycloudflare.com",
   "*.preview.codeagent-mobile.com",
@@ -21816,7 +21885,7 @@ var MARKER_DIR = ".codeam";
 var MARKER_FILE = "preview-host-allow.json";
 var ORIG_INFIX = ".codeam-orig";
 function markerPath(cwd) {
-  return path50.join(cwd, MARKER_DIR, MARKER_FILE);
+  return path51.join(cwd, MARKER_DIR, MARKER_FILE);
 }
 async function fileExists(p2) {
   try {
@@ -21829,13 +21898,13 @@ async function fileExists(p2) {
 async function findConfigFile(cwd, framework) {
   const base = CONFIG_BASENAMES[framework];
   for (const ext of CONFIG_EXTS) {
-    if (await fileExists(path50.join(cwd, `${base}${ext}`))) return `${base}${ext}`;
+    if (await fileExists(path51.join(cwd, `${base}${ext}`))) return `${base}${ext}`;
   }
   return null;
 }
 async function dependsOn(cwd, pkgName) {
   try {
-    const raw = await import_fs.promises.readFile(path50.join(cwd, "package.json"), "utf8");
+    const raw = await import_fs.promises.readFile(path51.join(cwd, "package.json"), "utf8");
     const pkg = JSON.parse(raw);
     return !!(pkg.dependencies?.[pkgName] ?? pkg.devDependencies?.[pkgName]);
   } catch {
@@ -21843,11 +21912,11 @@ async function dependsOn(cwd, pkgName) {
   }
 }
 async function isEsmConfig(cwd, configFile) {
-  const ext = path50.extname(configFile);
+  const ext = path51.extname(configFile);
   if (ext === ".mjs" || ext === ".mts" || ext === ".ts") return true;
   if (ext === ".cjs") return false;
   try {
-    const raw = await import_fs.promises.readFile(path50.join(cwd, "package.json"), "utf8");
+    const raw = await import_fs.promises.readFile(path51.join(cwd, "package.json"), "utf8");
     return JSON.parse(raw).type === "module";
   } catch {
     return false;
@@ -21930,7 +21999,7 @@ function shimFor(framework, origBasename, esm) {
   return framework === "next" ? nextShim(origBasename, esm) : viteShim(origBasename, esm);
 }
 async function writeMarker(cwd, marker) {
-  await import_fs.promises.mkdir(path50.join(cwd, MARKER_DIR), { recursive: true });
+  await import_fs.promises.mkdir(path51.join(cwd, MARKER_DIR), { recursive: true });
   await import_fs.promises.writeFile(markerPath(cwd), JSON.stringify(marker, null, 2), "utf8");
 }
 async function readMarker(cwd) {
@@ -21945,9 +22014,9 @@ async function restorePreviewHostAllow(cwd) {
   const marker = await readMarker(cwd);
   if (!marker) return;
   try {
-    const configAbs = path50.join(cwd, marker.configFile);
+    const configAbs = path51.join(cwd, marker.configFile);
     if (marker.backupFile) {
-      const backupAbs = path50.join(cwd, marker.backupFile);
+      const backupAbs = path51.join(cwd, marker.backupFile);
       if (await fileExists(backupAbs)) {
         await import_fs.promises.rm(configAbs, { force: true });
         await import_fs.promises.rename(backupAbs, configAbs);
@@ -21980,16 +22049,16 @@ async function applyPreviewHostAllow(cwd) {
     }
     if (!framework) return;
     if (existing) {
-      const ext = path50.extname(existing);
+      const ext = path51.extname(existing);
       const origBasename = `${CONFIG_BASENAMES[framework]}${ORIG_INFIX}${ext}`;
       const esm = await isEsmConfig(cwd, existing);
-      await import_fs.promises.rename(path50.join(cwd, existing), path50.join(cwd, origBasename));
-      await import_fs.promises.writeFile(path50.join(cwd, existing), shimFor(framework, origBasename, esm), "utf8");
+      await import_fs.promises.rename(path51.join(cwd, existing), path51.join(cwd, origBasename));
+      await import_fs.promises.writeFile(path51.join(cwd, existing), shimFor(framework, origBasename, esm), "utf8");
       await writeMarker(cwd, { framework, configFile: existing, backupFile: origBasename });
       log.info("preview", `host-allow: wrapped ${existing} (${framework}) for tunnel access`);
     } else {
       const configFile = `${CONFIG_BASENAMES[framework]}.mjs`;
-      await import_fs.promises.writeFile(path50.join(cwd, configFile), shimFor(framework, null, true), "utf8");
+      await import_fs.promises.writeFile(path51.join(cwd, configFile), shimFor(framework, null, true), "utf8");
       await writeMarker(cwd, { framework, configFile, backupFile: null });
       log.info("preview", `host-allow: created ${configFile} (${framework}) for tunnel access`);
     }
@@ -22671,19 +22740,19 @@ function activePreviewSessionIds() {
 
 // src/services/preview/start-orchestrator.ts
 var import_child_process19 = require("child_process");
-var fs54 = __toESM(require("fs"));
-var path57 = __toESM(require("path"));
+var fs55 = __toESM(require("fs"));
+var path58 = __toESM(require("path"));
 var import_which2 = __toESM(require("which"));
 
 // src/services/project-env/index.ts
 var import_fs5 = require("fs");
-var path56 = __toESM(require("path"));
+var path57 = __toESM(require("path"));
 
 // src/beads/project-key.ts
 var import_child_process18 = require("child_process");
 var crypto2 = __toESM(require("crypto"));
-var fs52 = __toESM(require("fs"));
-var path55 = __toESM(require("path"));
+var fs53 = __toESM(require("fs"));
+var path56 = __toESM(require("path"));
 function normalizeOrigin(raw) {
   const trimmed = raw.trim();
   if (!trimmed) return null;
@@ -22709,17 +22778,17 @@ function normalizeOrigin(raw) {
   return `${host2}/${pathPart}`;
 }
 function findRepoRoot(cwd) {
-  let dir = path55.resolve(cwd);
+  let dir = path56.resolve(cwd);
   const seen = /* @__PURE__ */ new Set();
   for (let i = 0; i < 256; i++) {
     if (seen.has(dir)) return null;
     seen.add(dir);
     try {
-      const stat3 = fs52.statSync(path55.join(dir, ".git"), { throwIfNoEntry: false });
+      const stat3 = fs53.statSync(path56.join(dir, ".git"), { throwIfNoEntry: false });
       if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
     } catch {
     }
-    const parent = path55.dirname(dir);
+    const parent = path56.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -22730,7 +22799,7 @@ var _execSeam2 = {
     const out2 = (0, import_child_process18.execFileSync)(file, args2, opts);
     return typeof out2 === "string" ? out2 : out2.toString("utf8");
   },
-  realpath: (p2) => fs52.realpathSync(p2)
+  realpath: (p2) => fs53.realpathSync(p2)
 };
 function readOrigin(cwd) {
   try {
@@ -22759,7 +22828,7 @@ function deriveProjectIdentity(cwd = process.cwd()) {
   } catch {
   }
   const hash = crypto2.createHash("sha256").update(real).digest("hex");
-  return { projectKey: `path:${hash}`, projectLabel: path55.basename(real) || "project" };
+  return { projectKey: `path:${hash}`, projectLabel: path56.basename(real) || "project" };
 }
 
 // src/services/project-env/index.ts
@@ -22772,7 +22841,7 @@ async function readIfExists(p2) {
 }
 async function syncProjectEnvUp(cwd, ctx) {
   if (!ctx.pluginAuthToken) return;
-  const content = await readIfExists(path56.join(cwd, ".env"));
+  const content = await readIfExists(path57.join(cwd, ".env"));
   if (content == null) return;
   try {
     const { projectKey, projectLabel } = deriveProjectIdentity(cwd);
@@ -22794,7 +22863,7 @@ async function syncProjectEnvUp(cwd, ctx) {
 }
 async function restoreProjectEnvIfMissing(cwd, ctx) {
   if (!ctx.pluginAuthToken) return false;
-  const envPath = path56.join(cwd, ".env");
+  const envPath = path57.join(cwd, ".env");
   if (await readIfExists(envPath) != null) return false;
   try {
     const { projectKey, projectLabel } = deriveProjectIdentity(cwd);
@@ -22805,7 +22874,7 @@ async function restoreProjectEnvIfMissing(cwd, ctx) {
       projectKey
     });
     if (!stored) return false;
-    const tmp = path56.join(cwd, ".env.codeam-restore.tmp");
+    const tmp = path57.join(cwd, ".env.codeam-restore.tmp");
     await import_fs5.promises.writeFile(tmp, stored.content, { encoding: "utf8", mode: 384 });
     await import_fs5.promises.rename(tmp, envPath);
     log.info("project-env", `restored .env (${stored.keyCount} vars) for ${projectLabel}`);
@@ -22882,8 +22951,8 @@ function normalizeDetectionForSpawn(detection, cwd) {
   if (args2.length === 0) return detection;
   const binName = args2[0];
   if (binName.startsWith("-")) return detection;
-  const binPath = path57.join(cwd, "node_modules", ".bin", binName);
-  if (!fs54.existsSync(binPath)) return detection;
+  const binPath = path58.join(cwd, "node_modules", ".bin", binName);
+  if (!fs55.existsSync(binPath)) return detection;
   return {
     ...detection,
     command: binPath,
@@ -23256,9 +23325,9 @@ async function establishTunnel(ctx, dev) {
 
 // src/beads/bd-adapter.ts
 var import_child_process20 = require("child_process");
-var fs55 = __toESM(require("fs"));
-var os42 = __toESM(require("os"));
-var path58 = __toESM(require("path"));
+var fs56 = __toESM(require("fs"));
+var os43 = __toESM(require("os"));
+var path59 = __toESM(require("path"));
 var BD_PACKAGE = "@beads/bd";
 function resolveBundledBdBinary() {
   return _resolveSeam.resolveBundled();
@@ -23270,11 +23339,11 @@ function _defaultResolveBundled() {
   } catch {
     return null;
   }
-  const binDir = path58.join(path58.dirname(pkgJsonPath), "bin");
+  const binDir = path59.join(path59.dirname(pkgJsonPath), "bin");
   const binaryName = process.platform === "win32" ? "bd.exe" : "bd";
-  const binaryPath = path58.join(binDir, binaryName);
+  const binaryPath = path59.join(binDir, binaryName);
   try {
-    fs55.accessSync(binaryPath, fs55.constants.F_OK);
+    fs56.accessSync(binaryPath, fs56.constants.F_OK);
     return binaryPath;
   } catch {
     return null;
@@ -23284,13 +23353,13 @@ function resolveBdOnPath() {
   return _resolveSeam.resolveOnPath();
 }
 function _defaultResolveOnPath() {
-  const dirs = (process.env.PATH ?? "").split(path58.delimiter).filter(Boolean);
+  const dirs = (process.env.PATH ?? "").split(path59.delimiter).filter(Boolean);
   const candidates = process.platform === "win32" ? ["bd.exe", "bd.cmd", "bd"] : ["bd"];
   for (const dir of dirs) {
     for (const candidate of candidates) {
-      const full = path58.join(dir, candidate);
+      const full = path59.join(dir, candidate);
       try {
-        fs55.accessSync(full, fs55.constants.F_OK);
+        fs56.accessSync(full, fs56.constants.F_OK);
         return full;
       } catch {
       }
@@ -23375,7 +23444,7 @@ var BdAdapter = class {
     const env = { ...process.env };
     if (!env.HOME) {
       try {
-        const home = os42.homedir();
+        const home = os43.homedir();
         if (home) env.HOME = home;
       } catch {
       }
@@ -23467,9 +23536,9 @@ function coerceIssue(row, projectKey) {
 
 // src/beads/provisioner.ts
 var import_child_process23 = require("child_process");
-var fs57 = __toESM(require("fs"));
-var os44 = __toESM(require("os"));
-var path60 = __toESM(require("path"));
+var fs58 = __toESM(require("fs"));
+var os45 = __toESM(require("os"));
+var path61 = __toESM(require("path"));
 
 // src/beads/install-bd.ts
 var import_child_process21 = require("child_process");
@@ -23534,9 +23603,9 @@ async function installBd(platform3 = process.platform) {
 
 // src/beads/install-dolt.ts
 var import_child_process22 = require("child_process");
-var fs56 = __toESM(require("fs"));
-var os43 = __toESM(require("os"));
-var path59 = __toESM(require("path"));
+var fs57 = __toESM(require("fs"));
+var os44 = __toESM(require("os"));
+var path60 = __toESM(require("path"));
 var DOLT_INSTALL_SH_URL = "https://github.com/dolthub/dolt/releases/latest/download/install.sh";
 var DOLT_MSI_URL = "https://github.com/dolthub/dolt/releases/latest/download/dolt-windows-amd64.msi";
 function resolveDoltInstallStrategy(platform3) {
@@ -23576,11 +23645,11 @@ function resolveDoltInstallStrategy(platform3) {
 }
 var DOLT_RELEASE_BASE = "https://github.com/dolthub/dolt/releases/latest/download";
 function doltPlatformTuple(platform3, arch2) {
-  const os60 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
+  const os61 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
   const a = arch2 === "x64" ? "amd64" : arch2 === "arm64" ? "arm64" : null;
   if (!a) return null;
-  if (os60 === "windows" && a !== "amd64") return null;
-  return `${os60}-${a}`;
+  if (os61 === "windows" && a !== "amd64") return null;
+  return `${os61}-${a}`;
 }
 function resolveDoltTarballStrategy(targetDir, platform3, arch2) {
   const tuple = doltPlatformTuple(platform3, arch2);
@@ -23625,14 +23694,14 @@ async function installDoltToDir(targetDir, platform3 = process.platform, arch2 =
   return result;
 }
 var _doltPathSeam = {
-  homedir: () => os43.homedir(),
+  homedir: () => os44.homedir(),
   getPath: () => process.env.PATH ?? "",
   setPath: (p2) => {
     process.env.PATH = p2;
   },
   exists: (p2) => {
     try {
-      fs56.accessSync(p2, fs56.constants.F_OK);
+      fs57.accessSync(p2, fs57.constants.F_OK);
       return true;
     } catch {
       return false;
@@ -23643,7 +23712,7 @@ function doltBinaryNames(platform3) {
   return platform3 === "win32" ? ["dolt.exe", "dolt.cmd", "dolt"] : ["dolt"];
 }
 function knownDoltDirs(platform3) {
-  const P3 = platform3 === "win32" ? path59.win32 : path59.posix;
+  const P3 = platform3 === "win32" ? path60.win32 : path60.posix;
   const home = _doltPathSeam.homedir();
   if (platform3 === "win32") {
     return [
@@ -23659,7 +23728,7 @@ function knownDoltDirs(platform3) {
   ].filter(Boolean);
 }
 function ensureDoltResolvable(platform3 = process.platform) {
-  const P3 = platform3 === "win32" ? path59.win32 : path59.posix;
+  const P3 = platform3 === "win32" ? path60.win32 : path60.posix;
   const delim = platform3 === "win32" ? ";" : ":";
   const names = doltBinaryNames(platform3);
   const pathDirs = _doltPathSeam.getPath().split(delim).filter(Boolean);
@@ -23836,17 +23905,17 @@ var _provisionSeam = {
 };
 var _linkSeam = {
   platform: () => process.platform,
-  homedir: () => os44.homedir(),
+  homedir: () => os45.homedir(),
   isWritableDir: (dir) => {
     try {
-      fs57.accessSync(dir, fs57.constants.W_OK);
+      fs58.accessSync(dir, fs58.constants.W_OK);
       return true;
     } catch {
       return false;
     }
   },
   ensureDir: (dir) => {
-    fs57.mkdirSync(dir, { recursive: true });
+    fs58.mkdirSync(dir, { recursive: true });
   },
   /**
    * A directory to symlink `bd` into so the AGENT's shell + Claude Code's
@@ -23867,9 +23936,9 @@ var _linkSeam = {
    * which `linkBdOntoPath` creates if missing.
    */
   cliBinDir: () => {
-    const pathDirs = (process.env.PATH ?? "").split(path60.delimiter).filter(Boolean);
+    const pathDirs = (process.env.PATH ?? "").split(path61.delimiter).filter(Boolean);
     const home = _linkSeam.homedir();
-    const localBin = home ? path60.join(home, ".local", "bin") : null;
+    const localBin = home ? path61.join(home, ".local", "bin") : null;
     if (localBin) {
       try {
         _linkSeam.ensureDir(localBin);
@@ -23879,16 +23948,16 @@ var _linkSeam = {
     const candidates = [];
     if (localBin) candidates.push(localBin);
     try {
-      candidates.push(path60.dirname(process.execPath));
+      candidates.push(path61.dirname(process.execPath));
     } catch {
     }
     candidates.push("/usr/local/bin");
     const entry = process.argv[1];
     if (entry) {
       try {
-        candidates.push(path60.dirname(fs57.realpathSync(entry)));
+        candidates.push(path61.dirname(fs58.realpathSync(entry)));
       } catch {
-        candidates.push(path60.dirname(entry));
+        candidates.push(path61.dirname(entry));
       }
     }
     const onPathWritable = candidates.find(
@@ -23900,20 +23969,20 @@ var _linkSeam = {
   /** Current symlink target at `linkPath`, or null when absent / not a link. */
   readlink: (linkPath) => {
     try {
-      return fs57.readlinkSync(linkPath);
+      return fs58.readlinkSync(linkPath);
     } catch {
       return null;
     }
   },
-  unlink: (linkPath) => fs57.unlinkSync(linkPath),
-  symlink: (target, linkPath) => fs57.symlinkSync(target, linkPath)
+  unlink: (linkPath) => fs58.unlinkSync(linkPath),
+  symlink: (target, linkPath) => fs58.symlinkSync(target, linkPath)
 };
 function linkBdOntoPath(binaryPath) {
   if (_linkSeam.platform() === "win32") return;
   const binDir = _linkSeam.cliBinDir();
   if (!binDir) return;
   _linkSeam.ensureDir(binDir);
-  const linkPath = path60.join(binDir, "bd");
+  const linkPath = path61.join(binDir, "bd");
   if (linkPath === binaryPath) return;
   const current = _linkSeam.readlink(linkPath);
   if (current === binaryPath) return;
@@ -24108,7 +24177,7 @@ function dedupeRecipes(agents) {
 
 // src/beads/watcher.ts
 var crypto4 = __toESM(require("crypto"));
-var path61 = __toESM(require("path"));
+var path62 = __toESM(require("path"));
 var API_BASE6 = resolveApiBaseUrl();
 var DEBOUNCE_MS2 = 400;
 var ZERO_SUMMARY = {
@@ -24132,7 +24201,7 @@ var BeadsWatcher = class {
   constructor(opts) {
     this.opts = opts;
     this.bd = opts.adapter ?? new BdAdapter({ cwd: opts.cwd, beadsDir: opts.beadsDir });
-    this.feedPath = opts.feedPath ?? path61.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
+    this.feedPath = opts.feedPath ?? path62.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
     this.apiBase = opts.apiBaseUrl ?? API_BASE6;
   }
   opts;
@@ -24631,8 +24700,8 @@ function cleanupAttachmentTempFiles() {
 function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
-    const tmpPath = path64.join(os48.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
-    fs60.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
+    const tmpPath = path65.join(os49.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
+    fs61.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     pendingAttachmentFiles.add(tmpPath);
     return tmpPath;
   });
@@ -24844,10 +24913,10 @@ var listFiles = async (ctx, cmd, parsed) => {
   await ctx.relay.sendResult(cmd.id, "completed", result);
 };
 var envReadH = async (ctx, cmd) => {
-  const envPath = path64.join(process.cwd(), ".env");
+  const envPath = path65.join(process.cwd(), ".env");
   await restoreProjectEnvIfMissing(process.cwd(), ctx);
   try {
-    const raw = await fs60.promises.readFile(envPath, "utf8");
+    const raw = await fs61.promises.readFile(envPath, "utf8");
     await ctx.relay.sendResult(cmd.id, "completed", {
       exists: true,
       vars: parseDotenv(raw)
@@ -24878,15 +24947,15 @@ var envWriteH = async (ctx, cmd, parsed) => {
     }
     seen.add(v.key);
   }
-  const envPath = path64.join(process.cwd(), ".env");
-  const tmpPath = path64.join(process.cwd(), ".env.codeam.tmp");
+  const envPath = path65.join(process.cwd(), ".env");
+  const tmpPath = path65.join(process.cwd(), ".env.codeam.tmp");
   try {
-    await fs60.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
-    await fs60.promises.rename(tmpPath, envPath);
+    await fs61.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
+    await fs61.promises.rename(tmpPath, envPath);
     await ctx.relay.sendResult(cmd.id, "completed", { ok: true, count: vars.length });
     void syncProjectEnvUp(process.cwd(), ctx);
   } catch (err) {
-    await fs60.promises.rm(tmpPath, { force: true }).catch(() => void 0);
+    await fs61.promises.rm(tmpPath, { force: true }).catch(() => void 0);
     await ctx.relay.sendResult(cmd.id, "failed", { error: err.message });
   }
 };
@@ -24935,7 +25004,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
   let configuredAgent = rawAgentId;
   if (!configuredAgent) {
     try {
-      const raw = JSON.parse(fs60.readFileSync(headroomConfigPath(), "utf8"));
+      const raw = JSON.parse(fs61.readFileSync(headroomConfigPath(), "utf8"));
       configuredAgent = raw.agent ?? "";
     } catch {
     }
@@ -24969,7 +25038,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
     persist: persistHeadroomConfig,
     readEnabled: () => {
       try {
-        const raw = JSON.parse(fs60.readFileSync(headroomConfigPath(), "utf8"));
+        const raw = JSON.parse(fs61.readFileSync(headroomConfigPath(), "utf8"));
         return raw.enabled === true;
       } catch {
         return false;
@@ -25226,7 +25295,7 @@ var vcsAgentReviewH = async (ctx, cmd, parsed) => {
   });
   const token = ctx.pluginAuthToken;
   void (async () => {
-    const os60 = createOsStrategy();
+    const os61 = createOsStrategy();
     try {
       const report = await reviewPullRequest(
         {
@@ -25235,7 +25304,7 @@ var vcsAgentReviewH = async (ctx, cmd, parsed) => {
           baseBranch: parsed.baseBranch
         },
         {
-          runReview: (input) => new CoderabbitRuntimeStrategy(os60).runOneShot(input),
+          runReview: (input) => new CoderabbitRuntimeStrategy(os61).runOneShot(input),
           runGh: (args2) => defaultRunGh(args2),
           postReport: async (r) => {
             if (!token) return;
@@ -25273,7 +25342,7 @@ var headroomBudgetH = async (ctx, cmd) => {
   }
   let headroomActive = false;
   try {
-    const raw = JSON.parse(fs60.readFileSync(headroomConfigPath(), "utf8"));
+    const raw = JSON.parse(fs61.readFileSync(headroomConfigPath(), "utf8"));
     headroomActive = raw.enabled === true;
   } catch {
   }
@@ -25283,7 +25352,7 @@ var headroomBudgetH = async (ctx, cmd) => {
   }
   let existingConfig = { enabled: true };
   try {
-    existingConfig = JSON.parse(fs60.readFileSync(headroomConfigPath(), "utf8"));
+    existingConfig = JSON.parse(fs61.readFileSync(headroomConfigPath(), "utf8"));
   } catch {
   }
   if (payload.budgetEnabled && payload.budgetUsd != null) {
@@ -25396,9 +25465,9 @@ var CLI_UPDATE_MAX_ATTEMPTS = 3;
 function buildNpmInstallInvocation(opts) {
   const entryScript = opts?.entryScript ?? process.argv[1] ?? "";
   const execPath = opts?.execPath ?? process.execPath;
-  const exists2 = opts?.existsSync ?? fs60.existsSync;
+  const exists2 = opts?.existsSync ?? fs61.existsSync;
   const platform3 = opts?.platform ?? process.platform;
-  const p2 = platform3 === "win32" ? path64.win32 : path64.posix;
+  const p2 = platform3 === "win32" ? path65.win32 : path65.posix;
   const normalized = entryScript.split(/[\\/]/).join("/");
   const marker = "/lib/node_modules/codeam-cli/";
   const markerIdx = normalized.indexOf(marker);
@@ -25420,7 +25489,7 @@ function isPermissionError(stderr) {
 function resolveGlobalNodeModulesDir(opts) {
   const entryScript = opts?.entryScript ?? process.argv[1] ?? "";
   const platform3 = opts?.platform ?? process.platform;
-  const p2 = platform3 === "win32" ? path64.win32 : path64.posix;
+  const p2 = platform3 === "win32" ? path65.win32 : path65.posix;
   const marker = "/lib/node_modules/codeam-cli/";
   const markerIdx = entryScript.split(/[\\/]/).join("/").indexOf(marker);
   if (markerIdx <= 0) return null;
@@ -25430,9 +25499,9 @@ function resolveGlobalNodeModulesDir(opts) {
 var STALE_STAGING_AGE_MS = CLI_UPDATE_INSTALL_TIMEOUT_MS;
 function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
   if (!nodeModulesDir) return 0;
-  const readdirSync12 = deps?.readdirSync ?? fs60.readdirSync;
-  const statSync17 = deps?.statSync ?? fs60.statSync;
-  const rmSync8 = deps?.rmSync ?? fs60.rmSync;
+  const readdirSync12 = deps?.readdirSync ?? fs61.readdirSync;
+  const statSync17 = deps?.statSync ?? fs61.statSync;
+  const rmSync9 = deps?.rmSync ?? fs61.rmSync;
   let removed = 0;
   let entries;
   try {
@@ -25442,11 +25511,11 @@ function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
   }
   for (const name of entries) {
     if (!/^\.codeam-cli-/.test(name)) continue;
-    const full = path64.join(nodeModulesDir, name);
+    const full = path65.join(nodeModulesDir, name);
     try {
       const st3 = statSync17(full);
       if (now - st3.mtimeMs < STALE_STAGING_AGE_MS) continue;
-      rmSync8(full, { recursive: true, force: true });
+      rmSync9(full, { recursive: true, force: true });
       removed++;
     } catch {
     }
@@ -26309,11 +26378,11 @@ function resolveTokenValue(args2) {
   }
   const fileFlag = args2.find((a) => a.startsWith("--token-file="));
   if (fileFlag) {
-    const path84 = fileFlag.slice("--token-file=".length);
+    const path85 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs61.readFileSync(path84, "utf8").trim();
-      if (content.length === 0) fail(`--token-file ${path84} is empty`);
-      rmIfExistsQuiet(path84);
+      const content = fs62.readFileSync(path85, "utf8").trim();
+      if (content.length === 0) fail(`--token-file ${path85} is empty`);
+      rmIfExistsQuiet(path85);
       return content;
     } catch (err) {
       fail(`Could not read --token-file: ${err.message}`);
@@ -26342,7 +26411,7 @@ async function claimOnce(token, pluginId, pluginSecretHash) {
     pluginId,
     ideName: "codeam-cli (codespace)",
     ideVersion: process.env.npm_package_version ?? "unknown",
-    hostname: os49.hostname(),
+    hostname: os50.hostname(),
     codespaceName: process.env.CODESPACE_NAME ?? "",
     // Current git branch of the codespace's working directory, so the
     // backend can populate `PairedSession.branch` for the codespace pair.
@@ -26403,7 +26472,7 @@ async function claim(token, pluginId, pluginSecretHash) {
   }
 }
 function pairAutoLockPath() {
-  return path65.join(os49.homedir(), ".codeam", "pair-auto.lock");
+  return path66.join(os50.homedir(), ".codeam", "pair-auto.lock");
 }
 function isLivePairAuto(pid) {
   if (!Number.isInteger(pid) || pid <= 0 || pid === process.pid) return false;
@@ -26413,7 +26482,7 @@ function isLivePairAuto(pid) {
     if (e.code !== "EPERM") return false;
   }
   try {
-    return fs61.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
+    return fs62.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
   } catch {
     return true;
   }
@@ -26423,24 +26492,24 @@ function isLiveCodeam(pid) {
 }
 function daemonLockPath(sessionId) {
   const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
-  return path65.join(os49.homedir(), ".codeam", `daemon-${safe}.lock`);
+  return path66.join(os50.homedir(), ".codeam", `daemon-${safe}.lock`);
 }
 function acquireDaemonLock(sessionId) {
   const lockPath = daemonLockPath(sessionId);
   try {
-    fs61.mkdirSync(path65.dirname(lockPath), { recursive: true });
+    fs62.mkdirSync(path66.dirname(lockPath), { recursive: true });
     try {
-      fs61.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs62.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs61.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs62.readFileSync(lockPath, "utf8").trim());
       if (holder && holder !== process.pid && isLiveCodeam(holder)) return false;
-      fs61.writeFileSync(lockPath, String(process.pid));
+      fs62.writeFileSync(lockPath, String(process.pid));
     }
     const release3 = () => {
       try {
-        if (fs61.existsSync(lockPath) && Number(fs61.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs61.unlinkSync(lockPath);
+        if (fs62.existsSync(lockPath) && Number(fs62.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs62.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -26462,19 +26531,19 @@ function acquireDaemonLock(sessionId) {
 function acquireSingletonLock() {
   const lockPath = pairAutoLockPath();
   try {
-    fs61.mkdirSync(path65.dirname(lockPath), { recursive: true });
+    fs62.mkdirSync(path66.dirname(lockPath), { recursive: true });
     try {
-      fs61.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs62.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs61.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs62.readFileSync(lockPath, "utf8").trim());
       if (isLivePairAuto(holder)) return false;
-      fs61.writeFileSync(lockPath, String(process.pid));
+      fs62.writeFileSync(lockPath, String(process.pid));
     }
     process.once("exit", () => {
       try {
-        if (fs61.existsSync(lockPath) && Number(fs61.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs61.unlinkSync(lockPath);
+        if (fs62.existsSync(lockPath) && Number(fs62.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs62.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -26926,7 +26995,7 @@ var AgentService = class _AgentService {
 };
 
 // src/agents/acp/adapters.ts
-var path67 = __toESM(require("path"));
+var path68 = __toESM(require("path"));
 
 // src/agents/acp/agent-binary.ts
 var import_fs6 = __toESM(require("fs"));
@@ -27216,13 +27285,13 @@ function resolveBin(pkgName, binName) {
   try {
     const manifestPath = require_.resolve(`${pkgName}/package.json`);
     const manifest = require_(`${pkgName}/package.json`);
-    const pkgDir = path67.dirname(manifestPath);
+    const pkgDir = path68.dirname(manifestPath);
     const bin = manifest.bin;
     if (!bin) return null;
-    if (typeof bin === "string") return path67.resolve(pkgDir, bin);
+    if (typeof bin === "string") return path68.resolve(pkgDir, bin);
     const target = binName ?? Object.keys(bin)[0];
     if (!target || !bin[target]) return null;
-    return path67.resolve(pkgDir, bin[target]);
+    return path68.resolve(pkgDir, bin[target]);
   } catch {
     return null;
   }
@@ -27372,9 +27441,9 @@ async function resolveAcpAdapterWithRetry(agent, opts = {}) {
 var import_node_crypto11 = require("crypto");
 
 // src/services/history.service.ts
-var fs63 = __toESM(require("fs"));
-var path68 = __toESM(require("path"));
-var os51 = __toESM(require("os"));
+var fs64 = __toESM(require("fs"));
+var path69 = __toESM(require("path"));
+var os52 = __toESM(require("os"));
 var https7 = __toESM(require("https"));
 var http6 = __toESM(require("http"));
 var import_zod2 = require("zod");
@@ -27401,7 +27470,7 @@ function parseJsonl(filePath) {
   const messages = [];
   let raw;
   try {
-    raw = fs63.readFileSync(filePath, "utf8");
+    raw = fs64.readFileSync(filePath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       log.warn("history:parseJsonl", `read failed for ${filePath}`, err);
@@ -27542,7 +27611,7 @@ var HistoryService = class _HistoryService {
     return this._quotaPercent === null || Date.now() - this._quotaFetchedAt > ttlMs;
   }
   get projectDir() {
-    return this.runtime.resolveHistoryDir(this.cwd) ?? path68.join(os51.homedir(), ".claude", "projects", encodeCwd(this.cwd));
+    return this.runtime.resolveHistoryDir(this.cwd) ?? path69.join(os52.homedir(), ".claude", "projects", encodeCwd(this.cwd));
   }
   /** Set the current Claude conversation ID (extracted from /cost command or session start) */
   setCurrentConversationId(id) {
@@ -27554,7 +27623,7 @@ var HistoryService = class _HistoryService {
   /** Return the current message count in the active conversation. */
   getCurrentMessageCount() {
     if (!this.currentConversationId) return 0;
-    const filePath = path68.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+    const filePath = path69.join(this.projectDir, `${this.currentConversationId}.jsonl`);
     return parseJsonl(filePath).length;
   }
   /**
@@ -27565,7 +27634,7 @@ var HistoryService = class _HistoryService {
     const deadline = Date.now() + timeoutMs;
     while (Date.now() < deadline) {
       if (!this.currentConversationId) return null;
-      const filePath = path68.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+      const filePath = path69.join(this.projectDir, `${this.currentConversationId}.jsonl`);
       const messages = parseJsonl(filePath);
       if (messages.length > previousCount) {
         for (let i = messages.length - 1; i >= previousCount; i--) {
@@ -27591,16 +27660,16 @@ var HistoryService = class _HistoryService {
     const dir = this.projectDir;
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     try {
-      const files = fs63.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
+      const files = fs64.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
         try {
-          const stat3 = fs63.statSync(path68.join(dir, e.name));
+          const stat3 = fs64.statSync(path69.join(dir, e.name));
           return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
         } catch {
           return { name: e.name, mtime: 0, birthtime: 0 };
         }
       }).filter((f) => f.birthtime >= cutoff).sort((a, b) => b.mtime - a.mtime);
       if (files.length > 0) {
-        this.currentConversationId = path68.basename(files[0].name, ".jsonl");
+        this.currentConversationId = path69.basename(files[0].name, ".jsonl");
       }
     } catch {
     }
@@ -27634,13 +27703,13 @@ var HistoryService = class _HistoryService {
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     let entries;
     try {
-      entries = fs63.readdirSync(dir, { withFileTypes: true });
+      entries = fs64.readdirSync(dir, { withFileTypes: true });
     } catch {
       return null;
     }
     const files = entries.filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
       try {
-        const stat3 = fs63.statSync(path68.join(dir, e.name));
+        const stat3 = fs64.statSync(path69.join(dir, e.name));
         return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
       } catch {
         return { name: e.name, mtime: 0, birthtime: 0 };
@@ -27649,12 +27718,12 @@ var HistoryService = class _HistoryService {
     if (files.length === 0) return null;
     const targetFile = this.currentConversationId ? `${this.currentConversationId}.jsonl` : files[0].name;
     if (!files.some((f) => f.name === targetFile)) return null;
-    return this.extractUsageFromFile(path68.join(dir, targetFile));
+    return this.extractUsageFromFile(path69.join(dir, targetFile));
   }
   extractUsageFromFile(filePath) {
     let raw;
     try {
-      raw = fs63.readFileSync(filePath, "utf8");
+      raw = fs64.readFileSync(filePath, "utf8");
     } catch {
       return null;
     }
@@ -27699,9 +27768,9 @@ var HistoryService = class _HistoryService {
     let totalCost = 0;
     let files;
     try {
-      files = fs63.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
+      files = fs64.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
         try {
-          return fs63.statSync(path68.join(projectDir, f)).mtimeMs >= monthStartMs;
+          return fs64.statSync(path69.join(projectDir, f)).mtimeMs >= monthStartMs;
         } catch {
           return false;
         }
@@ -27712,7 +27781,7 @@ var HistoryService = class _HistoryService {
     for (const file of files) {
       let raw;
       try {
-        raw = fs63.readFileSync(path68.join(projectDir, file), "utf8");
+        raw = fs64.readFileSync(path69.join(projectDir, file), "utf8");
       } catch {
         continue;
       }
@@ -27791,7 +27860,7 @@ var HistoryService = class _HistoryService {
     if (this.runtime.resolveHistoryFile) {
       return this.runtime.resolveHistoryFile(this.cwd, sessionId);
     }
-    return path68.join(this.projectDir, `${sessionId}.jsonl`);
+    return path69.join(this.projectDir, `${sessionId}.jsonl`);
   }
   /**
    * Parse a conversation's messages from disk, agent-aware. Claude uses the
@@ -27825,7 +27894,7 @@ var HistoryService = class _HistoryService {
         };
       });
     }
-    return parseJsonl(path68.join(this.projectDir, `${sessionId}.jsonl`));
+    return parseJsonl(path69.join(this.projectDir, `${sessionId}.jsonl`));
   }
   async loadConversation(sessionId) {
     const messages = this.readConversation(sessionId);
@@ -27893,7 +27962,7 @@ var HistoryService = class _HistoryService {
     if (!filePath) return false;
     let mtimeMs;
     try {
-      mtimeMs = fs63.statSync(filePath).mtimeMs;
+      mtimeMs = fs64.statSync(filePath).mtimeMs;
     } catch {
       return false;
     }
@@ -27968,10 +28037,10 @@ var HistoryService = class _HistoryService {
 
 // src/agents/acp/client.ts
 var import_node_child_process29 = require("child_process");
-var fs64 = __toESM(require("fs/promises"));
+var fs65 = __toESM(require("fs/promises"));
 var fsSync = __toESM(require("fs"));
-var os53 = __toESM(require("os"));
-var path70 = __toESM(require("path"));
+var os54 = __toESM(require("os"));
+var path71 = __toESM(require("path"));
 var import_node_stream = require("stream");
 
 // ../../node_modules/@agentclientprotocol/sdk/dist/schema/index.js
@@ -31997,19 +32066,22 @@ function createIdleTimeout(idleMs, makeError, activeIdleMs = idleMs) {
 }
 
 // src/agents/acp/internal-paths.ts
-var path69 = __toESM(require("path"));
-var os52 = __toESM(require("os"));
+var path70 = __toESM(require("path"));
+var os53 = __toESM(require("os"));
 var INTERNAL_TOKENS = [".codeam", "house-claude"];
+var SELF_HOSTED_WORKSPACE_RE = /\.codeam[/\\]self-hosted/gi;
 function textReferencesInternal(text) {
   if (!text) return false;
-  return INTERNAL_TOKENS.some((t2) => text.includes(t2));
+  const scrubbed = text.replace(SELF_HOSTED_WORKSPACE_RE, " ");
+  return INTERNAL_TOKENS.some((t2) => scrubbed.includes(t2));
 }
-function pathIsInternal(p2, homeDir2 = os52.homedir()) {
+function pathIsInternal(p2, homeDir2 = os53.homedir()) {
   if (!p2) return false;
-  const abs = path69.resolve(p2);
-  const home = path69.resolve(homeDir2);
-  const within = (root) => abs === root || abs.startsWith(root + path69.sep);
-  return within(path69.join(home, ".codeam")) || within(path69.join(home, ".beads")) || abs === path69.join(home, ".codeam-host.log") || abs.includes(`${path69.sep}house-claude${path69.sep}`) || abs.endsWith(`${path69.sep}house-claude`);
+  const abs = path70.resolve(p2);
+  const home = path70.resolve(homeDir2);
+  const within = (root) => abs === root || abs.startsWith(root + path70.sep);
+  if (within(path70.join(home, ".codeam", "self-hosted"))) return false;
+  return within(path70.join(home, ".codeam")) || within(path70.join(home, ".beads")) || abs === path70.join(home, ".codeam-host.log") || abs.includes(`${path70.sep}house-claude${path70.sep}`) || abs.endsWith(`${path70.sep}house-claude`);
 }
 function toolCallReferencesInternal(call) {
   if (textReferencesInternal(call.title)) return true;
@@ -32838,7 +32910,7 @@ var AcpClient = class {
           throw new RequestError(-32002, INTERNAL_BLOCK_REASON, { uri: params.path });
         }
         try {
-          const content = await fs64.readFile(params.path, "utf8");
+          const content = await fs65.readFile(params.path, "utf8");
           return applyLineRange(content, params.line ?? null, params.limit ?? null);
         } catch (err) {
           const code = err.code;
@@ -32861,7 +32933,7 @@ var AcpClient = class {
           throw new RequestError(-32002, INTERNAL_BLOCK_REASON, { uri: params.path });
         }
         try {
-          await fs64.writeFile(params.path, params.content, "utf8");
+          await fs65.writeFile(params.path, params.content, "utf8");
           return {};
         } catch (err) {
           const code = err.code;
@@ -32921,29 +32993,29 @@ function applyLineRange(content, line, limit) {
   return { content: lines.slice(start2, end).join("\n") };
 }
 function knownAgentBinaryDirs() {
-  const home = os53.homedir();
+  const home = os54.homedir();
   const out2 = [];
   out2.push("/tmp/codeam-node20/bin");
   for (const root of [
     "/usr/local/share/nvm/versions/node",
-    path70.join(home, ".nvm/versions/node")
+    path71.join(home, ".nvm/versions/node")
   ]) {
     try {
       for (const child of fsSync.readdirSync(root)) {
-        out2.push(path70.join(root, child, "bin"));
+        out2.push(path71.join(root, child, "bin"));
       }
     } catch {
     }
   }
-  out2.push(path70.join(home, ".volta/bin"));
+  out2.push(path71.join(home, ".volta/bin"));
   out2.push("/usr/local/bin");
   out2.push("/usr/bin");
-  out2.push(path70.join(home, ".local/bin"));
-  out2.push(path70.join(home, "bin"));
+  out2.push(path71.join(home, ".local/bin"));
+  out2.push(path71.join(home, "bin"));
   if (process.platform === "win32") {
     const { LOCALAPPDATA, APPDATA } = process.env;
-    if (LOCALAPPDATA) out2.push(path70.join(LOCALAPPDATA, "cursor-agent"));
-    if (APPDATA) out2.push(path70.join(APPDATA, "npm"));
+    if (LOCALAPPDATA) out2.push(path71.join(LOCALAPPDATA, "cursor-agent"));
+    if (APPDATA) out2.push(path71.join(APPDATA, "npm"));
   }
   return out2.filter((p2) => {
     try {
@@ -32955,7 +33027,7 @@ function knownAgentBinaryDirs() {
 }
 function expandPathForAgentBinaries(existingPath) {
   const existing = new Set(
-    existingPath.split(path70.delimiter).filter((p2) => p2.length > 0)
+    existingPath.split(path71.delimiter).filter((p2) => p2.length > 0)
   );
   const additions = [];
   for (const dir of knownAgentBinaryDirs()) {
@@ -32965,7 +33037,7 @@ function expandPathForAgentBinaries(existingPath) {
     }
   }
   if (additions.length === 0) return existingPath;
-  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path70.delimiter);
+  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path71.delimiter);
 }
 
 // src/agents/acp/headroom-budget-proxy.ts
@@ -33447,15 +33519,15 @@ function commonPrefixLength(a, b) {
 
 // src/agents/acp/onboarding.ts
 var import_child_process27 = require("child_process");
-var fs65 = __toESM(require("fs"));
-var os54 = __toESM(require("os"));
-var path71 = __toESM(require("path"));
+var fs66 = __toESM(require("fs"));
+var os55 = __toESM(require("os"));
+var path72 = __toESM(require("path"));
 var _onboardingSeam = {
-  markerPath: (sessionId) => path71.join(os54.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
-  exists: (p2) => fs65.existsSync(p2),
+  markerPath: (sessionId) => path72.join(os55.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
+  exists: (p2) => fs66.existsSync(p2),
   write: (p2) => {
-    fs65.mkdirSync(path71.dirname(p2), { recursive: true });
-    fs65.writeFileSync(p2, "");
+    fs66.mkdirSync(path72.dirname(p2), { recursive: true });
+    fs66.writeFileSync(p2, "");
   },
   disabled: () => {
     const v = process.env.CODEAM_ONBOARDING_DISABLED;
@@ -33492,7 +33564,7 @@ function resolveRepoName(cwd) {
       if (name) return name;
     }
   }
-  const base = path71.basename(cwd || "");
+  const base = path72.basename(cwd || "");
   if (base && !isUuid(base)) return base;
   return "this project";
 }
@@ -33750,13 +33822,13 @@ var import_crypto5 = require("crypto");
 
 // src/services/turn-files/git-changeset.ts
 var import_child_process28 = require("child_process");
-var fs67 = __toESM(require("fs/promises"));
-var path73 = __toESM(require("path"));
+var fs68 = __toESM(require("fs/promises"));
+var path74 = __toESM(require("path"));
 
 // src/services/turn-files/review-ignore.ts
 var import_ignore2 = __toESM(require("ignore"));
-var fs66 = __toESM(require("fs"));
-var path72 = __toESM(require("path"));
+var fs67 = __toESM(require("fs"));
+var path73 = __toESM(require("path"));
 var CURATED_REVIEW_IGNORE = [
   // Google Cloud SDK (the incident) — installs a huge python tree.
   "google-cloud-sdk/",
@@ -33795,7 +33867,7 @@ var CURATED_REVIEW_IGNORE = [
 function makeReviewIgnore(repoRoot) {
   const ig = (0, import_ignore2.default)().add(CURATED_REVIEW_IGNORE);
   try {
-    const custom = fs66.readFileSync(path72.join(repoRoot, ".codeam", "reviewignore"), "utf8");
+    const custom = fs67.readFileSync(path73.join(repoRoot, ".codeam", "reviewignore"), "utf8");
     ig.add(custom);
   } catch {
   }
@@ -33840,7 +33912,7 @@ async function collectRepoChangeset(opts) {
     let stats;
     if (!truncated && row.fileStatus === "added" && numstatEntry === void 0) {
       const lineCount = await readUntrackedLineCount(
-        path73.join(opts.repoRoot, row.filePath)
+        path74.join(opts.repoRoot, row.filePath)
       );
       stats = { added: lineCount, removed: 0 };
     } else {
@@ -33871,7 +33943,7 @@ function readUntrackedLineCount(absPath) {
 }
 async function defaultReadUntrackedLineCount(absPath) {
   try {
-    const content = await fs67.readFile(absPath, "utf8");
+    const content = await fs68.readFile(absPath, "utf8");
     let count = 0;
     let pos = -1;
     while ((pos = content.indexOf("\n", pos + 1)) !== -1) {
@@ -33963,7 +34035,7 @@ function defaultRunGit(cwd, args2) {
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs74 = await import("fs/promises");
+  const fs75 = await import("fs/promises");
   const out2 = [];
   await walk(workingDir, 0);
   return out2;
@@ -33971,7 +34043,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (depth > maxDepth) return;
     let entries = [];
     try {
-      const dirents = await fs74.readdir(dir, { withFileTypes: true });
+      const dirents = await fs75.readdir(dir, { withFileTypes: true });
       entries = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -33982,8 +34054,8 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (hasGit) {
       out2.push({
         repoRoot: dir,
-        repoPath: path73.relative(workingDir, dir),
-        repoName: path73.basename(dir)
+        repoPath: path74.relative(workingDir, dir),
+        repoName: path74.basename(dir)
       });
       return;
     }
@@ -33991,14 +34063,14 @@ async function discoverRepos(workingDir, maxDepth = 4) {
       if (!entry.isDirectory) continue;
       if (entry.name === "node_modules") continue;
       if (entry.name === "dist" || entry.name === "build") continue;
-      await walk(path73.join(dir, entry.name), depth + 1);
+      await walk(path74.join(dir, entry.name), depth + 1);
     }
   }
 }
 
 // src/services/turn-files/files-outbox.ts
-var fs68 = __toESM(require("fs/promises"));
-var path74 = __toESM(require("path"));
+var fs69 = __toESM(require("fs/promises"));
+var path75 = __toESM(require("path"));
 var import_os12 = require("os");
 var HOME_OUTBOX_DIR = ".codeam/outbox";
 var MAX_AGE_MS = 24 * 60 * 60 * 1e3;
@@ -34031,16 +34103,16 @@ var FilesOutbox = class {
   backoffIndex = 0;
   stopped = false;
   constructor(opts) {
-    const base = opts.baseDir ?? path74.join(homeDir(), HOME_OUTBOX_DIR);
-    this.filePath = path74.join(base, `${opts.sessionId}.jsonl`);
+    const base = opts.baseDir ?? path75.join(homeDir(), HOME_OUTBOX_DIR);
+    this.filePath = path75.join(base, `${opts.sessionId}.jsonl`);
     this.post = opts.post;
     this.autoSchedule = opts.autoSchedule !== false;
   }
   /** Persist the entry to disk and trigger a flush. Returns once the
    *  line is durable on disk (not once the POST succeeds). */
   async enqueue(entry) {
-    await fs68.mkdir(path74.dirname(this.filePath), { recursive: true });
-    await fs68.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
+    await fs69.mkdir(path75.dirname(this.filePath), { recursive: true });
+    await fs69.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
     this.backoffIndex = 0;
     if (this.autoSchedule) this.scheduleFlush(0);
   }
@@ -34131,7 +34203,7 @@ var FilesOutbox = class {
   async readAll() {
     let raw = "";
     try {
-      raw = await fs68.readFile(this.filePath, "utf8");
+      raw = await fs69.readFile(this.filePath, "utf8");
     } catch {
       return [];
     }
@@ -34155,12 +34227,12 @@ var FilesOutbox = class {
   async rewrite(entries) {
     const tmpPath = `${this.filePath}.${process.pid}.tmp`;
     if (entries.length === 0) {
-      await fs68.unlink(this.filePath).catch(() => void 0);
+      await fs69.unlink(this.filePath).catch(() => void 0);
       return;
     }
     const payload = entries.map((e) => JSON.stringify(e)).join("\n") + "\n";
-    await fs68.writeFile(tmpPath, payload, "utf8");
-    await fs68.rename(tmpPath, this.filePath);
+    await fs69.writeFile(tmpPath, payload, "utf8");
+    await fs69.rename(tmpPath, this.filePath);
   }
 };
 function applyJitter(ms) {
@@ -37418,9 +37490,9 @@ function startClaudeCredentialSync(opts) {
 }
 
 // src/beads/workflow-hint.ts
-var fs70 = __toESM(require("fs"));
-var path76 = __toESM(require("path"));
-var os55 = __toESM(require("os"));
+var fs71 = __toESM(require("fs"));
+var path77 = __toESM(require("path"));
+var os56 = __toESM(require("os"));
 var BEADS_HINT_MARKER = "<!-- codeam:beads-workflow -->";
 var BEADS_HINT = `${BEADS_HINT_MARKER}
 # Beads (bd) \u2014 task tracking + persistent memory (ALWAYS use it)
@@ -37434,22 +37506,22 @@ This environment uses **bd (beads)** for issue/task tracking and persistent memo
 - \`bd ready\` (available work) \xB7 \`bd show <id>\` \xB7 \`bd update <id> --claim\` \xB7 \`bd close <id>\`.
 - Use \`bd remember "..."\` for persistent knowledge \u2014 do NOT use MEMORY.md files.
 ${BEADS_HINT_MARKER}`;
-function ensureBeadsWorkflowHint(homeDir2 = os55.homedir()) {
+function ensureBeadsWorkflowHint(homeDir2 = os56.homedir()) {
   try {
-    const file = path76.join(homeDir2, ".claude", "CLAUDE.md");
+    const file = path77.join(homeDir2, ".claude", "CLAUDE.md");
     let existing = "";
     try {
-      existing = fs70.readFileSync(file, "utf8");
+      existing = fs71.readFileSync(file, "utf8");
     } catch {
     }
     if (existing.includes(BEADS_HINT_MARKER)) return;
-    fs70.mkdirSync(path76.dirname(file), { recursive: true });
+    fs71.mkdirSync(path77.dirname(file), { recursive: true });
     const next = existing.trim() ? `${existing.trimEnd()}
 
 ${BEADS_HINT}
 ` : `${BEADS_HINT}
 `;
-    fs70.writeFileSync(file, next);
+    fs71.writeFileSync(file, next);
   } catch {
   }
 }
@@ -37821,7 +37893,7 @@ var AcpDriver = class {
 };
 
 // src/baton/transcript-mirror.ts
-var fs71 = __toESM(require("fs"));
+var fs72 = __toESM(require("fs"));
 var TranscriptMirror = class {
   constructor(deps) {
     this.deps = deps;
@@ -37888,7 +37960,7 @@ var TranscriptMirror = class {
   }
 };
 function defaultWatch(file, onChange) {
-  const w3 = fs71.watch(file, { persistent: false }, () => onChange());
+  const w3 = fs72.watch(file, { persistent: false }, () => onChange());
   return () => w3.close();
 }
 
@@ -38150,16 +38222,16 @@ function toEpochMs(ts) {
 }
 
 // src/agents/claude/onboarding.ts
-var fs72 = __toESM(require("fs"));
-var os57 = __toESM(require("os"));
-var path77 = __toESM(require("path"));
+var fs73 = __toESM(require("fs"));
+var os58 = __toESM(require("os"));
+var path78 = __toESM(require("path"));
 var ONBOARDING_VERSION_SENTINEL = "9999.0.0";
 function ensureClaudeOnboarded(cwd) {
   try {
-    const file = path77.join(os57.homedir(), ".claude.json");
+    const file = path78.join(os58.homedir(), ".claude.json");
     let config = {};
     try {
-      config = JSON.parse(fs72.readFileSync(file, "utf8"));
+      config = JSON.parse(fs73.readFileSync(file, "utf8"));
     } catch {
     }
     let changed = false;
@@ -38184,8 +38256,8 @@ function ensureClaudeOnboarded(cwd) {
       }
     }
     if (!changed) return;
-    fs72.mkdirSync(path77.dirname(file), { recursive: true });
-    fs72.writeFileSync(file, JSON.stringify(config, null, 2));
+    fs73.mkdirSync(path78.dirname(file), { recursive: true });
+    fs73.writeFileSync(file, JSON.stringify(config, null, 2));
     log.info(
       "claude",
       `pre-completed Claude onboarding${cwd ? ` + trusted workspace ${cwd}` : ""}`
@@ -38912,7 +38984,7 @@ var import_picocolors11 = __toESM(require("picocolors"));
 var import_child_process29 = require("child_process");
 var import_util4 = require("util");
 var import_picocolors9 = __toESM(require("picocolors"));
-var path78 = __toESM(require("path"));
+var path79 = __toESM(require("path"));
 var execFileP6 = (0, import_util4.promisify)(import_child_process29.execFile);
 var MAX_BUFFER = 8 * 1024 * 1024;
 function resetStdinForChild() {
@@ -39401,7 +39473,7 @@ var GitHubCodespacesProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path78.posix.dirname(remotePath);
+    const remoteDir = path79.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote(remoteDir)}`,
       `cat > ${shellQuote(remotePath)}`
@@ -39471,7 +39543,7 @@ function shellQuote(s) {
 // src/services/providers/gitpod.ts
 var import_child_process30 = require("child_process");
 var import_util5 = require("util");
-var path79 = __toESM(require("path"));
+var path80 = __toESM(require("path"));
 var import_picocolors10 = __toESM(require("picocolors"));
 var execFileP7 = (0, import_util5.promisify)(import_child_process30.execFile);
 var MAX_BUFFER2 = 8 * 1024 * 1024;
@@ -39711,7 +39783,7 @@ var GitpodProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path79.posix.dirname(remotePath);
+    const remoteDir = path80.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote2(remoteDir)}`,
       `cat > ${shellQuote2(remotePath)}`
@@ -39747,7 +39819,7 @@ function shellQuote2(s) {
 // src/services/providers/gitlab-workspaces.ts
 var import_child_process31 = require("child_process");
 var import_util6 = require("util");
-var path80 = __toESM(require("path"));
+var path81 = __toESM(require("path"));
 var execFileP8 = (0, import_util6.promisify)(import_child_process31.execFile);
 var MAX_BUFFER3 = 8 * 1024 * 1024;
 var GITLAB_API_BASE = process.env.CODEAM_GITLAB_API_URL ?? "https://gitlab.com/api/v4";
@@ -40007,7 +40079,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
-    const remoteDir = path80.posix.dirname(remotePath);
+    const remoteDir = path81.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote3(remoteDir)}`, `cat > ${shellQuote3(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote3(remotePath)}`);
@@ -40075,7 +40147,7 @@ function shellQuote3(s) {
 // src/services/providers/railway.ts
 var import_child_process32 = require("child_process");
 var import_util7 = require("util");
-var path81 = __toESM(require("path"));
+var path82 = __toESM(require("path"));
 var execFileP9 = (0, import_util7.promisify)(import_child_process32.execFile);
 var MAX_BUFFER4 = 8 * 1024 * 1024;
 function resetStdinForChild4() {
@@ -40311,7 +40383,7 @@ var RailwayProvider = class {
     if (!projectId || !serviceId) {
       throw new Error("Invalid Railway workspace id (expected projectId/serviceId).");
     }
-    const remoteDir = path81.posix.dirname(remotePath);
+    const remoteDir = path82.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote4(remoteDir)}`, `cat > ${shellQuote4(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote4(remotePath)}`);
@@ -40957,8 +41029,8 @@ async function invite() {
 var import_node_dns = require("dns");
 var import_node_util5 = require("util");
 var import_node_crypto13 = require("crypto");
-var fs73 = __toESM(require("fs"));
-var path82 = __toESM(require("path"));
+var fs74 = __toESM(require("fs"));
+var path83 = __toESM(require("path"));
 var import_picocolors14 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util5.promisify)(import_node_dns.resolve);
 async function checkDns(apiBase2) {
@@ -41014,13 +41086,13 @@ async function checkHealth(apiBase2) {
   }
 }
 function checkConfigDir() {
-  const dir = path82.join(require("os").homedir(), ".codeam");
+  const dir = path83.join(require("os").homedir(), ".codeam");
   try {
-    fs73.mkdirSync(dir, { recursive: true, mode: 448 });
-    const probe = path82.join(dir, ".doctor-probe");
-    fs73.writeFileSync(probe, "ok", { mode: 384 });
-    const read2 = fs73.readFileSync(probe, "utf8");
-    fs73.unlinkSync(probe);
+    fs74.mkdirSync(dir, { recursive: true, mode: 448 });
+    const probe = path83.join(dir, ".doctor-probe");
+    fs74.writeFileSync(probe, "ok", { mode: 384 });
+    const read2 = fs74.readFileSync(probe, "utf8");
+    fs74.unlinkSync(probe);
     if (read2 !== "ok") throw new Error("write/read round-trip mismatch");
     return {
       id: "config-dir",
@@ -41060,9 +41132,9 @@ function checkSessions() {
   }
 }
 function checkAgentBinaries() {
-  const os60 = createOsStrategy();
+  const os61 = createOsStrategy();
   return getEnabledAgents().map((meta) => {
-    const found = os60.findInPath(meta.binaryName);
+    const found = os61.findInPath(meta.binaryName);
     return {
       id: `agent-${meta.id}`,
       label: `Agent binary: ${meta.displayName} (${meta.binaryName})`,
@@ -41084,7 +41156,7 @@ function checkNodePty() {
       detail: "not required on this platform"
     };
   }
-  const vendoredPath = path82.join(__dirname, "vendor", "node-pty");
+  const vendoredPath = path83.join(__dirname, "vendor", "node-pty");
   for (const target of [vendoredPath, "node-pty"]) {
     try {
       require(target);
@@ -41126,7 +41198,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.61.82" : "0.0.0-dev";
+  const cliVersion = true ? "2.61.84" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -41716,7 +41788,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.61.82" : "unknown";
+  const v = true ? "2.61.84" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 
@@ -41865,10 +41937,10 @@ var EXIT_CODE_NAMES = {
 };
 
 // src/index.ts
-var os59 = __toESM(require("os"));
+var os60 = __toESM(require("os"));
 if (!process.env.HOME) {
   try {
-    const home = os59.homedir();
+    const home = os60.homedir();
     if (home) process.env.HOME = home;
   } catch {
   }