codeam-cli 2.61.88 → 2.61.90

package/dist/index.js

@@ -2561,6 +2561,80 @@ function getSkillDefinition(id) {
   return isSkillId(id) ? SKILL_REGISTRY[id] : null;
 }
 
+// ../../packages/shared/src/skills/agent-standard.ts
+var AGENT_STANDARD_MARKER = "<!-- codeam:agent-standard -->";
+var AGENT_STANDARD_TEXT = `# Working standard
+
+You are an AI coding agent working on the user's project through CodeAgent Mobile. Follow this standard on every task.
+
+## How to work
+- **Understand before acting.** Restate the goal, read the relevant code, and be clear on what "done" looks like before changing anything.
+- **Plan first for anything non-trivial** (3+ steps or a design decision): outline the approach and the files you'll touch, and share it before implementing. Skip the ceremony for small, obvious fixes.
+- **Ground every claim in reality** \u2014 the actual code, tests, or output, never guesswork. If you are unsure, say so and verify.
+- **Ask when intent is genuinely ambiguous** \u2014 one sharp question. At a real fork, give a recommendation, not a survey of every option.
+- **Stay in scope.** Solve what was asked; no "while I'm here" refactors or speculative abstractions. Note unrelated issues instead of acting on them.
+- **Favor the simplest solution that fully solves the problem.** Fix root causes, not symptoms \u2014 no temporary patches and no defensive code for cases that can't happen.
+- **Verify your work and show the evidence** \u2014 run the project's tests, linters, and build, and read the output. "It runs" is not "it's done."
+- **Match the project's existing style, structure, and conventions.** Comment only the non-obvious WHY, briefly \u2014 don't narrate the code.
+- **Stop when stuck.** If the same fix fails twice, step back and reconsider the approach rather than repeating variations.
+
+## Safety
+- **Never expose or exfiltrate** secrets, credentials, tokens, or customer data, and never print a credential's value.
+- **Treat destructive or irreversible actions as needing explicit confirmation** \u2014 force-push, history rewrite, bulk deletes, hard resets, dropping data. Don't run them unprompted.
+- **Don't push to a shared/default branch or make outward-facing changes** unless the user asked for it.
+- **Report honestly when you finish**: what you changed, what you verified, and anything you could not.`;
+var AGENT_STANDARD_BLOCK = `${AGENT_STANDARD_MARKER}
+${AGENT_STANDARD_TEXT}
+${AGENT_STANDARD_MARKER}`;
+
+// ../../packages/shared/src/guardrails/index.ts
+var GUARDRAIL_CATEGORIES = [
+  "secretRead",
+  "destructiveShell",
+  "protectedBranch",
+  "outwardIrreversible"
+];
+var DEFAULT_GUARDRAIL_POLICY = {
+  secretRead: "confirm",
+  destructiveShell: "confirm",
+  protectedBranch: "confirm",
+  outwardIrreversible: "confirm"
+};
+var GUARDRAIL_CATEGORY_META = {
+  secretRead: {
+    id: "secretRead",
+    label: "Reading secrets",
+    description: "Reading .env, key, or credential files."
+  },
+  destructiveShell: {
+    id: "destructiveShell",
+    label: "Destructive commands",
+    description: "Bulk deletes, hard resets, and other irreversible shell actions."
+  },
+  protectedBranch: {
+    id: "protectedBranch",
+    label: "Protected branches",
+    description: "Committing or pushing to a shared branch (main, master, release)."
+  },
+  outwardIrreversible: {
+    id: "outwardIrreversible",
+    label: "Outward & irreversible",
+    description: "Force-push, publish, deploy, or send \u2014 hard to undo."
+  }
+};
+function isGuardrailDisposition(x) {
+  return x === "deny" || x === "confirm" || x === "off";
+}
+function normalizeGuardrailPolicy(raw) {
+  const src = raw && typeof raw === "object" ? raw : {};
+  const out2 = {};
+  for (const cat of GUARDRAIL_CATEGORIES) {
+    const v = src[cat];
+    out2[cat] = isGuardrailDisposition(v) ? v : DEFAULT_GUARDRAIL_POLICY[cat];
+  }
+  return out2;
+}
+
 // ../../packages/shared/src/api-url.ts
 var DEFAULT_API_BASE_URL = "https://api.codeagent-mobile.com";
 var DEV_API_BASE_URL = "https://dev-api.codeagent-mobile.com";
@@ -2898,11 +2972,11 @@ function quiet(fn) {
     log.debug(TAG, "ignored sync error", err);
   }
 }
-function rmIfExistsQuiet(path85) {
+function rmIfExistsQuiet(path87) {
   try {
-    fs2.rmSync(path85, { force: true });
+    fs2.rmSync(path87, { force: true });
   } catch (err) {
-    log.debug(TAG, `rmIfExists failed for ${path85}`, err);
+    log.debug(TAG, `rmIfExists failed for ${path87}`, err);
   }
 }
 function killQuiet(target, signal = "SIGTERM") {
@@ -3048,9 +3122,9 @@ var _default = makeConfig();
 var { getConfig, ensurePluginId, addSession, removeSession, setActiveSession, getActiveSession, getActiveSessionForAgent, setDisable1mContext, clearAll, saveCliConfig, loadCliConfig } = _default;
 
 // src/commands/pair-auto.ts
-var fs62 = __toESM(require("fs"));
-var os50 = __toESM(require("os"));
-var path66 = __toESM(require("path"));
+var fs63 = __toESM(require("fs"));
+var os51 = __toESM(require("os"));
+var path67 = __toESM(require("path"));
 var import_crypto4 = require("crypto");
 
 // src/services/telemetry.service.ts
@@ -3086,8 +3160,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? (0, import_pat
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path85) {
-  return path85.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path87) {
+  return path87.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 
 // ../../node_modules/@posthog/core/dist/featureFlagUtils.mjs
@@ -5567,9 +5641,9 @@ async function addSourceContext(frames) {
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-function getContextLinesFromFile(path85, ranges, output) {
+function getContextLinesFromFile(path87, ranges, output) {
   return new Promise((resolve9) => {
-    const stream = (0, import_node_fs.createReadStream)(path85);
+    const stream = (0, import_node_fs.createReadStream)(path87);
     const lineReaded = (0, import_node_readline.createInterface)({
       input: stream
     });
@@ -5584,7 +5658,7 @@ function getContextLinesFromFile(path85, ranges, output) {
     let rangeStart = range[0];
     let rangeEnd = range[1];
     function onStreamError() {
-      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path85, 1);
+      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path87, 1);
       lineReaded.close();
       lineReaded.removeAllListeners();
       destroyStreamAndResolve();
@@ -5645,8 +5719,8 @@ function clearLineContext(frame) {
   delete frame.context_line;
   delete frame.post_context;
 }
-function shouldSkipContextLinesForFile(path85) {
-  return path85.startsWith("node:") || path85.endsWith(".min.js") || path85.endsWith(".min.cjs") || path85.endsWith(".min.mjs") || path85.startsWith("data:");
+function shouldSkipContextLinesForFile(path87) {
+  return path87.startsWith("node:") || path87.endsWith(".min.js") || path87.endsWith(".min.cjs") || path87.endsWith(".min.mjs") || path87.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame) {
   if (void 0 !== frame.lineno && frame.lineno > MAX_CONTEXTLINES_LINENO) return true;
@@ -5664,19 +5738,19 @@ function makeLineReaderRanges(lines) {
   let i = 0;
   const line = lines[0];
   if ("number" != typeof line) return [];
-  let current = makeContextRange(line);
+  let current2 = makeContextRange(line);
   const out2 = [];
   while (true) {
     if (i === lines.length - 1) {
-      out2.push(current);
+      out2.push(current2);
       break;
     }
     const next = lines[i + 1];
     if ("number" != typeof next) break;
-    if (next <= current[1]) current[1] = next + DEFAULT_LINES_OF_CONTEXT;
+    if (next <= current2[1]) current2[1] = next + DEFAULT_LINES_OF_CONTEXT;
     else {
-      out2.push(current);
-      current = makeContextRange(next);
+      out2.push(current2);
+      current2 = makeContextRange(next);
     }
     i++;
   }
@@ -7673,12 +7747,12 @@ var PostHogContext = class {
   }
   resolve(context, options) {
     if (options?.fresh === true) return context;
-    const current = this.get() || {};
+    const current2 = this.get() || {};
     return {
-      distinctId: context.distinctId ?? current.distinctId,
-      sessionId: context.sessionId ?? current.sessionId,
+      distinctId: context.distinctId ?? current2.distinctId,
+      sessionId: context.sessionId ?? current2.sessionId,
       properties: {
-        ...current.properties || {},
+        ...current2.properties || {},
         ...context.properties || {}
       }
     };
@@ -7800,7 +7874,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.61.88" : "0.0.0-dev",
+    cliVersion: true ? "2.61.90" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -7981,7 +8055,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.61.88",
+  version: "2.61.90",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -9257,7 +9331,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.61.88" ? { ideVersion: "2.61.88" } : {}
+      ..."2.61.90" ? { ideVersion: "2.61.90" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -9342,7 +9416,7 @@ function parseUnifiedDiff(diff) {
   const rawLines = diff.split(/\r?\n/);
   const fileStatus = detectFileStatus(rawLines);
   const hunks = [];
-  let current = null;
+  let current2 = null;
   let oldLine = 0;
   let newLine = 0;
   let totalAdded = 0;
@@ -9351,10 +9425,10 @@ function parseUnifiedDiff(diff) {
     if (raw.startsWith("@@")) {
       const match = raw.match(HUNK_HEADER_RE);
       if (!match) continue;
-      if (current) hunks.push(current);
+      if (current2) hunks.push(current2);
       oldLine = parseInt(match[1], 10);
       newLine = parseInt(match[2], 10);
-      current = {
+      current2 = {
         header: raw,
         lines: [],
         linesAdded: 0,
@@ -9362,30 +9436,30 @@ function parseUnifiedDiff(diff) {
       };
       continue;
     }
-    if (current === null) continue;
+    if (current2 === null) continue;
     if (raw.startsWith("\\ No newline")) continue;
     if (raw.startsWith("+")) {
-      current.lines.push({ type: "add", lineNumber: newLine, text: raw.slice(1) });
-      current.linesAdded += 1;
+      current2.lines.push({ type: "add", lineNumber: newLine, text: raw.slice(1) });
+      current2.linesAdded += 1;
       totalAdded += 1;
       newLine += 1;
       continue;
     }
     if (raw.startsWith("-")) {
-      current.lines.push({ type: "remove", lineNumber: oldLine, text: raw.slice(1) });
-      current.linesRemoved += 1;
+      current2.lines.push({ type: "remove", lineNumber: oldLine, text: raw.slice(1) });
+      current2.linesRemoved += 1;
       totalRemoved += 1;
       oldLine += 1;
       continue;
     }
     if (raw.startsWith(" ")) {
-      current.lines.push({ type: "context", lineNumber: newLine, text: raw.slice(1) });
+      current2.lines.push({ type: "context", lineNumber: newLine, text: raw.slice(1) });
       newLine += 1;
       oldLine += 1;
       continue;
     }
   }
-  if (current) hunks.push(current);
+  if (current2) hunks.push(current2);
   return {
     fileStatus,
     hunks,
@@ -9484,10 +9558,10 @@ var WINDOWS_LEGACY_JUNCTIONS = [
   /[\\/]Start Menu([\\/]|$)/i,
   /[\\/]Templates([\\/]|$)/i
 ];
-function isUnsafeWindowsWatchRoot(dir, homedir49) {
+function isUnsafeWindowsWatchRoot(dir, homedir51) {
   const norm = (p2) => p2.replace(/\//g, "\\").replace(/\\+$/, "").toLowerCase();
   const cwd = norm(dir);
-  const home = norm(homedir49);
+  const home = norm(homedir51);
   if (cwd === home) return true;
   if (/^[a-z]:$/.test(cwd)) return true;
   const sysRoots = [
@@ -10631,9 +10705,9 @@ function closeAllTerminals() {
 }
 
 // src/commands/start/handlers.ts
-var fs61 = __toESM(require("fs"));
-var os49 = __toESM(require("os"));
-var path65 = __toESM(require("path"));
+var fs62 = __toESM(require("fs"));
+var os50 = __toESM(require("os"));
+var path66 = __toESM(require("path"));
 var import_crypto3 = require("crypto");
 var import_child_process24 = require("child_process");
 
@@ -14113,10 +14187,10 @@ function buildForPlatform(platform3) {
 var import_node_crypto4 = require("crypto");
 
 // src/agents/claude/resolver.ts
-function buildClaudeLaunch(extraArgs = [], os61 = createOsStrategy()) {
-  const found = os61.findInPath("claude") ?? os61.findInPath("claude-code");
+function buildClaudeLaunch(extraArgs = [], os63 = createOsStrategy()) {
+  const found = os63.findInPath("claude") ?? os63.findInPath("claude-code");
   if (!found) return null;
-  return os61.buildLaunch(found, extraArgs);
+  return os63.buildLaunch(found, extraArgs);
 }
 
 // src/agents/claude/installer.ts
@@ -14144,11 +14218,11 @@ function isAvailable() {
 function augmentPath() {
   const dirs = probeInstallDirs();
   const sep7 = path17.delimiter;
-  const current = process.env.PATH ?? "";
-  const existing = new Set(current.split(sep7).filter(Boolean));
+  const current2 = process.env.PATH ?? "";
+  const existing = new Set(current2.split(sep7).filter(Boolean));
   const additions = dirs.filter((d3) => !existing.has(d3));
   if (additions.length === 0) return;
-  process.env.PATH = additions.join(sep7) + sep7 + current;
+  process.env.PATH = additions.join(sep7) + sep7 + current2;
 }
 function runInstaller() {
   const isWindows = process.platform === "win32";
@@ -14706,8 +14780,8 @@ var ClaudeRuntimeStrategy = class {
   meta = getAgent("claude");
   mode = "interactive";
   os;
-  constructor(os61) {
-    this.os = os61;
+  constructor(os63) {
+    this.os = os63;
   }
   /**
    * Claude Code's react-ink TUI enables bracketed-paste mode at
@@ -15487,8 +15561,8 @@ function codexCredentialLocator() {
 function codexLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os61 = createOsStrategy();
-      return os61.findInPath("codex") !== null;
+      const os63 = createOsStrategy();
+      return os63.findInPath("codex") !== null;
     },
     launch() {
       return (0, import_node_child_process4.spawn)("codex", ["login"], { stdio: "inherit" });
@@ -15511,8 +15585,8 @@ var CodexRuntimeStrategy = class {
   meta = getAgent("codex");
   mode = "interactive";
   os;
-  constructor(os61) {
-    this.os = os61;
+  constructor(os63) {
+    this.os = os63;
   }
   async prepareLaunch() {
     let binary = this.os.findInPath("codex");
@@ -15621,12 +15695,12 @@ var CodexRuntimeStrategy = class {
     });
   }
 };
-function resolveNpm(os61) {
-  return os61.id === "win32" ? "npm.cmd" : "npm";
+function resolveNpm(os63) {
+  return os63.id === "win32" ? "npm.cmd" : "npm";
 }
-async function installCodexViaNpm(os61) {
+async function installCodexViaNpm(os63) {
   return new Promise((resolve9, reject) => {
-    const proc = (0, import_node_child_process5.spawn)(resolveNpm(os61), ["install", "-g", "@openai/codex"], {
+    const proc = (0, import_node_child_process5.spawn)(resolveNpm(os63), ["install", "-g", "@openai/codex"], {
       stdio: "inherit"
     });
     proc.on("close", (code) => {
@@ -15643,16 +15717,16 @@ async function installCodexViaNpm(os61) {
     });
   });
 }
-function augmentNpmGlobalBin(os61) {
+function augmentNpmGlobalBin(os63) {
   try {
-    const result = (0, import_node_child_process5.spawnSync)(resolveNpm(os61), ["prefix", "-g"], {
+    const result = (0, import_node_child_process5.spawnSync)(resolveNpm(os63), ["prefix", "-g"], {
       stdio: ["ignore", "pipe", "ignore"]
     });
     if (result.status !== 0) return;
     const prefix = result.stdout.toString().trim();
     if (!prefix) return;
-    const binDir = os61.id === "win32" ? prefix : path25.join(prefix, "bin");
-    os61.augmentPath([binDir]);
+    const binDir = os63.id === "win32" ? prefix : path25.join(prefix, "bin");
+    os63.augmentPath([binDir]);
   } catch {
   }
 }
@@ -15736,9 +15810,9 @@ var import_node_child_process8 = require("child_process");
 // src/agents/coderabbit/installer.ts
 var import_node_child_process6 = require("child_process");
 var INSTALL_URL = "https://cli.coderabbit.ai/install.sh";
-async function ensureCoderabbitInstalled(os61) {
-  if (os61.findInPath("coderabbit")) return true;
-  if (os61.id === "win32") {
+async function ensureCoderabbitInstalled(os63) {
+  if (os63.findInPath("coderabbit")) return true;
+  if (os63.id === "win32") {
     console.error(
       "\n  \u2717 CodeRabbit on Windows requires WSL.\n    Install the CLI inside your WSL distribution\n    (curl -fsSL https://cli.coderabbit.ai/install.sh | sh)\n    then re-run `codeam link coderabbit` from WSL.\n"
     );
@@ -15771,8 +15845,8 @@ async function ensureCoderabbitInstalled(os61) {
     proc.on("error", () => finish(false));
   });
   if (!ok) return false;
-  os61.augmentPath([`${os61.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
-  return os61.findInPath("coderabbit") !== null;
+  os63.augmentPath([`${os63.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
+  return os63.findInPath("coderabbit") !== null;
 }
 
 // src/agents/coderabbit/link.ts
@@ -15807,10 +15881,10 @@ function coderabbitCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function coderabbitLoginLauncher(os61) {
+function coderabbitLoginLauncher(os63) {
   return {
     async ensureInstalled() {
-      return ensureCoderabbitInstalled(os61);
+      return ensureCoderabbitInstalled(os63);
     },
     launch() {
       return (0, import_node_child_process7.spawn)("coderabbit", ["auth", "login"], { stdio: "inherit" });
@@ -15866,8 +15940,8 @@ function pickLine(obj) {
 function toHunk(raw, groupSeverity) {
   if (!raw || typeof raw !== "object") return null;
   const o = raw;
-  const path85 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
-  if (!path85) return null;
+  const path87 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
+  if (!path87) return null;
   const message = asString(
     pick(o, [
       "comment",
@@ -15884,7 +15958,7 @@ function toHunk(raw, groupSeverity) {
   const severity = normSeverity(pick(o, ["severity", "level", "priority", "impact"])) ?? normSeverity(groupSeverity);
   const locObj = pick(o, ["location"]) ?? o;
   return {
-    path: path85.trim(),
+    path: path87.trim(),
     line: pickLine(o) ?? pickLine(locObj),
     severity,
     message: (title && message ? `${title}: ${message}` : title || message).trim() || "(no message)"
@@ -15967,10 +16041,10 @@ function parsePlain(stdout) {
   for (const line of stdout.split(/\r?\n/)) {
     const m = line.match(HUNK_LINE_RE);
     if (!m) continue;
-    const [, path85, lineNo, sevToken, message] = m;
-    if (!path85 || !lineNo || !message) continue;
+    const [, path87, lineNo, sevToken, message] = m;
+    if (!path87 || !lineNo || !message) continue;
     hunks.push({
-      path: path85.trim(),
+      path: path87.trim(),
       line: Number(lineNo),
       severity: sevToken ? SEVERITY_MAP[sevToken.toLowerCase()] : void 0,
       message: message.trim().replace(/^[*-]\s+/, "")
@@ -16030,8 +16104,8 @@ var CoderabbitRuntimeStrategy = class {
   meta = getAgent("coderabbit");
   mode = "batch";
   os;
-  constructor(os61) {
-    this.os = os61;
+  constructor(os63) {
+    this.os = os63;
   }
   getDefaultArgs() {
     return ["review", "--agent"];
@@ -16302,10 +16376,10 @@ function cursorCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function cursorLoginLauncher(os61) {
+function cursorLoginLauncher(os63) {
   return {
     async ensureInstalled() {
-      if (os61.findInPath("cursor-agent")) return true;
+      if (os63.findInPath("cursor-agent")) return true;
       console.error(
         "\n  \u2717 cursor-agent binary not on PATH.\n    Install Cursor (https://cursor.com/) and ensure the CLI\n    plugin is enabled, then re-run `codeam link cursor`.\n"
       );
@@ -16369,8 +16443,8 @@ var CursorRuntimeStrategy = class {
   meta = getAgent("cursor");
   mode = "interactive";
   os;
-  constructor(os61) {
-    this.os = os61;
+  constructor(os63) {
+    this.os = os63;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("cursor-agent");
@@ -16586,10 +16660,10 @@ function aiderCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function aiderLoginLauncher(os61) {
+function aiderLoginLauncher(os63) {
   return {
     async ensureInstalled() {
-      if (os61.findInPath("aider")) return true;
+      if (os63.findInPath("aider")) return true;
       console.error(
         "\n  \u2717 aider binary not on PATH.\n    Install Aider:\n      pip install aider-chat\n    then re-run `codeam link aider`.\n"
       );
@@ -16599,7 +16673,7 @@ function aiderLoginLauncher(os61) {
       console.error(
         "\n  Aider has no interactive login flow.\n    Set ANTHROPIC_API_KEY or OPENAI_API_KEY in your shell,\n    or re-run `codeam link aider --api-key=<your-key>`.\n"
       );
-      return (0, import_node_child_process11.spawn)(os61.id === "win32" ? "cmd.exe" : "sh", os61.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
+      return (0, import_node_child_process11.spawn)(os63.id === "win32" ? "cmd.exe" : "sh", os63.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
         stdio: "ignore"
       });
     }
@@ -16671,8 +16745,8 @@ var AiderRuntimeStrategy = class {
   meta = getAgent("aider");
   mode = "interactive";
   os;
-  constructor(os61) {
-    this.os = os61;
+  constructor(os63) {
+    this.os = os63;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("aider");
@@ -16804,8 +16878,8 @@ function geminiCredentialLocator() {
 function geminiLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os61 = createOsStrategy();
-      return os61.findInPath("gemini") !== null;
+      const os63 = createOsStrategy();
+      return os63.findInPath("gemini") !== null;
     },
     launch() {
       return (0, import_node_child_process12.spawn)("gemini", ["auth", "login"], { stdio: "inherit" });
@@ -16995,8 +17069,8 @@ var GeminiRuntimeStrategy = class {
   meta = getAgent("gemini");
   mode = "interactive";
   os;
-  constructor(os61) {
-    this.os = os61;
+  constructor(os63) {
+    this.os = os63;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("gemini");
@@ -17287,8 +17361,8 @@ var KimiRuntimeStrategy = class {
   meta = getAgent("kimi");
   mode = "interactive";
   os;
-  constructor(os61) {
-    this.os = os61;
+  constructor(os63) {
+    this.os = os63;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("kimi");
@@ -17430,8 +17504,8 @@ var OpencodeRuntimeStrategy = class {
   meta = getAgent("opencode");
   mode = "interactive";
   os;
-  constructor(os61) {
-    this.os = os61;
+  constructor(os63) {
+    this.os = os63;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("opencode");
@@ -17515,20 +17589,20 @@ var OpencodeRuntimeStrategy = class {
 
 // src/agents/registry.ts
 var runtimeBuilders = {
-  claude: (os61) => new ClaudeRuntimeStrategy(os61),
-  codex: (os61) => new CodexRuntimeStrategy(os61),
-  coderabbit: (os61) => new CoderabbitRuntimeStrategy(os61),
-  cursor: (os61) => new CursorRuntimeStrategy(os61),
-  aider: (os61) => new AiderRuntimeStrategy(os61),
-  gemini: (os61) => new GeminiRuntimeStrategy(os61),
-  kimi: (os61) => new KimiRuntimeStrategy(os61),
-  opencode: (os61) => new OpencodeRuntimeStrategy(os61)
+  claude: (os63) => new ClaudeRuntimeStrategy(os63),
+  codex: (os63) => new CodexRuntimeStrategy(os63),
+  coderabbit: (os63) => new CoderabbitRuntimeStrategy(os63),
+  cursor: (os63) => new CursorRuntimeStrategy(os63),
+  aider: (os63) => new AiderRuntimeStrategy(os63),
+  gemini: (os63) => new GeminiRuntimeStrategy(os63),
+  kimi: (os63) => new KimiRuntimeStrategy(os63),
+  opencode: (os63) => new OpencodeRuntimeStrategy(os63)
 };
 var deployBuilders = {
   claude: () => new ClaudeDeployStrategy(),
   codex: () => new CodexDeployStrategy()
 };
-function createAgentStrategy(agent, os61 = createOsStrategy()) {
+function createAgentStrategy(agent, os63 = createOsStrategy()) {
   if (!AGENT_REGISTRY[agent]?.enabled) {
     throw new Error(
       `Agent "${agent}" is not supported in this codeam-cli version. Upgrade with 'npm i -g codeam-cli@latest'.`
@@ -17538,10 +17612,10 @@ function createAgentStrategy(agent, os61 = createOsStrategy()) {
   if (!build) {
     throw new Error(`No runtime strategy registered for agent "${agent}"`);
   }
-  return build(os61);
+  return build(os63);
 }
-function createInteractiveAgentStrategy(agent, os61 = createOsStrategy()) {
-  const s = createAgentStrategy(agent, os61);
+function createInteractiveAgentStrategy(agent, os63 = createOsStrategy()) {
+  const s = createAgentStrategy(agent, os63);
   if (s.mode !== "interactive") {
     throw new Error(
       `Agent "${agent}" is a batch agent; use createAgentStrategy + .runOneShot for one-shot reviews.`
@@ -18238,26 +18312,26 @@ function restoreCoderabbitOauthBlob(value) {
   (0, import_node_fs5.writeFileSync)(path37.join(dir, file), contents, { mode: 384 });
 }
 async function configureCoderabbit(input, deps = {}) {
-  const os61 = deps.os ?? createOsStrategy();
+  const os63 = deps.os ?? createOsStrategy();
   const ensureInstalled = deps.ensureInstalled ?? ensureCoderabbitInstalled;
   const isLoggedIn = deps.isLoggedIn ?? defaultIsLoggedIn;
   const runOAuth = deps.runOAuthLogin ?? runCoderabbitOAuthLogin;
   const snapshot = deps.snapshotDir ?? (() => snapshotCredentialDir());
   const capture2 = deps.captureCredential ?? ((b) => diffCapturedCredential(b));
   const loginWithApiKey = deps.loginWithApiKey ?? defaultLoginWithApiKey;
-  const home = os61.homeDir();
-  os61.augmentPath(
-    os61.id === "win32" ? [
+  const home = os63.homeDir();
+  os63.augmentPath(
+    os63.id === "win32" ? [
       path37.join(home, ".local", "bin"),
       path37.join(process.env.APPDATA ?? path37.join(home, "AppData", "Roaming"), "npm"),
       path37.join(home, "scoop", "shims")
     ] : [path37.join(home, ".local", "bin"), "/opt/homebrew/bin", "/usr/local/bin"]
   );
-  const installed2 = os61.findInPath("coderabbit") !== null;
+  const installed2 = os63.findInPath("coderabbit") !== null;
   const base = () => ({
     action: input.action,
     supported: true,
-    installed: os61.findInPath("coderabbit") !== null,
+    installed: os63.findInPath("coderabbit") !== null,
     loggedIn: false
   });
   if (input.action === "status") {
@@ -18271,7 +18345,7 @@ async function configureCoderabbit(input, deps = {}) {
     const key = (input.apiKey ?? "").trim();
     if (!key) return { ...res2, error: "No API key provided" };
     if (!res2.installed) {
-      const ok = await ensureInstalled(os61);
+      const ok = await ensureInstalled(os63);
       res2.installed = ok;
       if (!ok) return { ...res2, error: "CodeRabbit CLI could not be installed" };
     }
@@ -18295,7 +18369,7 @@ async function configureCoderabbit(input, deps = {}) {
     }
     if (!res2.installed) {
       deps.onEvent?.({ kind: "installing" });
-      const ok = await ensureInstalled(os61);
+      const ok = await ensureInstalled(os63);
       res2.installed = ok;
       if (!ok) return { ...res2, error: "CodeRabbit CLI could not be installed" };
     }
@@ -18325,7 +18399,7 @@ async function configureCoderabbit(input, deps = {}) {
     const res2 = base();
     if (!installed2) {
       deps.onEvent?.({ kind: "installing" });
-      const ok = await ensureInstalled(os61);
+      const ok = await ensureInstalled(os63);
       res2.installed = ok;
       if (!ok) return { ...res2, error: "CodeRabbit CLI could not be installed" };
     }
@@ -18365,7 +18439,7 @@ async function configureCoderabbit(input, deps = {}) {
   }
   const res = base();
   if (!res.installed) {
-    const ok = await ensureInstalled(os61);
+    const ok = await ensureInstalled(os63);
     res.installed = ok;
     if (!ok) return { ...res, error: "CodeRabbit CLI is not installed" };
   }
@@ -18719,16 +18793,16 @@ var MetricsCollector = class {
     this.lastLatencyMs = Math.max(0, Math.round(latencyMs));
   }
   cpuPct() {
-    const current = sampleCpuTimes();
+    const current2 = sampleCpuTimes();
     const prev = this.prevCpu;
-    this.prevCpu = current;
+    this.prevCpu = current2;
     if (!prev) {
       const cores = os31.cpus().length || 1;
       const proxy = os31.loadavg()[0] / cores * 100;
       return Math.min(100, Math.max(0, Math.round(proxy)));
     }
-    const idleDelta = current.idle - prev.idle;
-    const totalDelta = current.total - prev.total;
+    const idleDelta = current2.idle - prev.idle;
+    const totalDelta = current2.total - prev.total;
     if (totalDelta <= 0) return 0;
     const busy = (1 - idleDelta / totalDelta) * 100;
     return Math.min(100, Math.max(0, Math.round(busy)));
@@ -20430,8 +20504,8 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.61.88" : null;
-  if (!current) return;
+  const current2 = true ? "2.61.90" : null;
+  if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
   let latest = fresh && cache ? cache.latest : null;
@@ -20440,19 +20514,19 @@ async function autoUpgradeBeforeCriticalCommand() {
     if (latest) writeCache({ fetchedAt: Date.now(), latest });
   }
   if (!latest) return;
-  maybeAutoUpdate(current, latest);
+  maybeAutoUpdate(current2, latest);
 }
 function checkForUpdates() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.61.88" : null;
-  if (!current) return;
+  const current2 = true ? "2.61.90" : null;
+  if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
   if (fresh && cache) {
-    maybeAutoUpdate(current, cache.latest);
+    maybeAutoUpdate(current2, cache.latest);
     return;
   }
   void fetchLatest().then((latest) => {
@@ -20467,7 +20541,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.61.88" : null;
+  return true ? "2.61.90" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve9) => {
@@ -20479,8 +20553,8 @@ function runCmd(cmd, args2, timeoutMs) {
 }
 async function runSelfUpdate() {
   try {
-    const current = currentCliVersion();
-    if (!current) {
+    const current2 = currentCliVersion();
+    if (!current2) {
       log.trace("host-agent", "self-update: no __CLI_VERSION__ \u2014 skipping");
       return { status: "skipped" };
     }
@@ -20498,10 +20572,10 @@ async function runSelfUpdate() {
       log.trace("host-agent", "self-update: empty npm view output \u2014 skipping");
       return { status: "skipped" };
     }
-    if (compareSemver(latest, current) <= 0) {
+    if (compareSemver(latest, current2) <= 0) {
       return { status: "current" };
     }
-    log.info("host-agent", `self-update: ${current} \u2192 ${latest} available \u2014 installing`);
+    log.info("host-agent", `self-update: ${current2} \u2192 ${latest} available \u2014 installing`);
     const installArgs = ["install", "-g", `${SELF_UPDATE_PKG}@latest`];
     let install = await runCmd("npm", installArgs, SELF_UPDATE_INSTALL_TIMEOUT_MS);
     const isRoot = process.getuid?.() === 0;
@@ -20512,7 +20586,7 @@ async function runSelfUpdate() {
     if (install.code !== 0) {
       log.warn(
         "host-agent",
-        `self-update: install exited ${String(install.code)} \u2014 staying on ${current}`
+        `self-update: install exited ${String(install.code)} \u2014 staying on ${current2}`
       );
       return { status: "skipped" };
     }
@@ -22069,17 +22143,48 @@ function makeRealApplyBudgetDeps() {
   };
 }
 
-// src/services/preview/port-registry.ts
+// src/agents/acp/guardrail-config.ts
 var fs47 = __toESM(require("fs"));
-var os41 = __toESM(require("os"));
 var path50 = __toESM(require("path"));
+var os41 = __toESM(require("os"));
+var current = null;
+function guardrailConfigPath(homeDir2 = os41.homedir()) {
+  return path50.join(homeDir2, ".codeam", "guardrails.json");
+}
+function loadGuardrailPolicy(homeDir2 = os41.homedir()) {
+  try {
+    current = normalizeGuardrailPolicy(JSON.parse(fs47.readFileSync(guardrailConfigPath(homeDir2), "utf8")));
+  } catch {
+    current = { ...DEFAULT_GUARDRAIL_POLICY };
+  }
+  return current;
+}
+function getGuardrailPolicy(homeDir2 = os41.homedir()) {
+  return current ?? loadGuardrailPolicy(homeDir2);
+}
+function setGuardrailPolicy(raw, homeDir2 = os41.homedir()) {
+  const next = normalizeGuardrailPolicy(raw);
+  current = next;
+  try {
+    const p2 = guardrailConfigPath(homeDir2);
+    fs47.mkdirSync(path50.dirname(p2), { recursive: true });
+    fs47.writeFileSync(p2, JSON.stringify(next, null, 2));
+  } catch {
+  }
+  return next;
+}
+
+// src/services/preview/port-registry.ts
+var fs48 = __toESM(require("fs"));
+var os42 = __toESM(require("os"));
+var path51 = __toESM(require("path"));
 var import_child_process14 = require("child_process");
 function registryPath() {
-  return path50.join(os41.homedir(), ".codeam", "preview-ports.json");
+  return path51.join(os42.homedir(), ".codeam", "preview-ports.json");
 }
 function readRegistry() {
   try {
-    const raw = fs47.readFileSync(registryPath(), "utf8");
+    const raw = fs48.readFileSync(registryPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object") return parsed;
   } catch {
@@ -22089,10 +22194,10 @@ function readRegistry() {
 function writeRegistry(reg) {
   try {
     const file = registryPath();
-    fs47.mkdirSync(path50.dirname(file), { recursive: true });
+    fs48.mkdirSync(path51.dirname(file), { recursive: true });
     const tmp = `${file}.tmp`;
-    fs47.writeFileSync(tmp, JSON.stringify(reg), "utf8");
-    fs47.renameSync(tmp, file);
+    fs48.writeFileSync(tmp, JSON.stringify(reg), "utf8");
+    fs48.renameSync(tmp, file);
   } catch (err) {
     log.warn("preview", `port-registry write failed: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -22158,7 +22263,7 @@ function reclaimOwnOrphanPort(port) {
 
 // src/services/preview/host-allow.ts
 var import_fs = require("fs");
-var path51 = __toESM(require("path"));
+var path52 = __toESM(require("path"));
 var NEXT_ALLOWED_ORIGINS = [
   "*.trycloudflare.com",
   "*.preview.codeagent-mobile.com",
@@ -22178,7 +22283,7 @@ var MARKER_DIR = ".codeam";
 var MARKER_FILE = "preview-host-allow.json";
 var ORIG_INFIX = ".codeam-orig";
 function markerPath(cwd) {
-  return path51.join(cwd, MARKER_DIR, MARKER_FILE);
+  return path52.join(cwd, MARKER_DIR, MARKER_FILE);
 }
 async function fileExists(p2) {
   try {
@@ -22191,13 +22296,13 @@ async function fileExists(p2) {
 async function findConfigFile(cwd, framework) {
   const base = CONFIG_BASENAMES[framework];
   for (const ext of CONFIG_EXTS) {
-    if (await fileExists(path51.join(cwd, `${base}${ext}`))) return `${base}${ext}`;
+    if (await fileExists(path52.join(cwd, `${base}${ext}`))) return `${base}${ext}`;
   }
   return null;
 }
 async function dependsOn(cwd, pkgName) {
   try {
-    const raw = await import_fs.promises.readFile(path51.join(cwd, "package.json"), "utf8");
+    const raw = await import_fs.promises.readFile(path52.join(cwd, "package.json"), "utf8");
     const pkg = JSON.parse(raw);
     return !!(pkg.dependencies?.[pkgName] ?? pkg.devDependencies?.[pkgName]);
   } catch {
@@ -22205,11 +22310,11 @@ async function dependsOn(cwd, pkgName) {
   }
 }
 async function isEsmConfig(cwd, configFile) {
-  const ext = path51.extname(configFile);
+  const ext = path52.extname(configFile);
   if (ext === ".mjs" || ext === ".mts" || ext === ".ts") return true;
   if (ext === ".cjs") return false;
   try {
-    const raw = await import_fs.promises.readFile(path51.join(cwd, "package.json"), "utf8");
+    const raw = await import_fs.promises.readFile(path52.join(cwd, "package.json"), "utf8");
     return JSON.parse(raw).type === "module";
   } catch {
     return false;
@@ -22292,7 +22397,7 @@ function shimFor(framework, origBasename, esm) {
   return framework === "next" ? nextShim(origBasename, esm) : viteShim(origBasename, esm);
 }
 async function writeMarker(cwd, marker) {
-  await import_fs.promises.mkdir(path51.join(cwd, MARKER_DIR), { recursive: true });
+  await import_fs.promises.mkdir(path52.join(cwd, MARKER_DIR), { recursive: true });
   await import_fs.promises.writeFile(markerPath(cwd), JSON.stringify(marker, null, 2), "utf8");
 }
 async function readMarker(cwd) {
@@ -22307,9 +22412,9 @@ async function restorePreviewHostAllow(cwd) {
   const marker = await readMarker(cwd);
   if (!marker) return;
   try {
-    const configAbs = path51.join(cwd, marker.configFile);
+    const configAbs = path52.join(cwd, marker.configFile);
     if (marker.backupFile) {
-      const backupAbs = path51.join(cwd, marker.backupFile);
+      const backupAbs = path52.join(cwd, marker.backupFile);
       if (await fileExists(backupAbs)) {
         await import_fs.promises.rm(configAbs, { force: true });
         await import_fs.promises.rename(backupAbs, configAbs);
@@ -22342,16 +22447,16 @@ async function applyPreviewHostAllow(cwd) {
     }
     if (!framework) return;
     if (existing) {
-      const ext = path51.extname(existing);
+      const ext = path52.extname(existing);
       const origBasename = `${CONFIG_BASENAMES[framework]}${ORIG_INFIX}${ext}`;
       const esm = await isEsmConfig(cwd, existing);
-      await import_fs.promises.rename(path51.join(cwd, existing), path51.join(cwd, origBasename));
-      await import_fs.promises.writeFile(path51.join(cwd, existing), shimFor(framework, origBasename, esm), "utf8");
+      await import_fs.promises.rename(path52.join(cwd, existing), path52.join(cwd, origBasename));
+      await import_fs.promises.writeFile(path52.join(cwd, existing), shimFor(framework, origBasename, esm), "utf8");
       await writeMarker(cwd, { framework, configFile: existing, backupFile: origBasename });
       log.info("preview", `host-allow: wrapped ${existing} (${framework}) for tunnel access`);
     } else {
       const configFile = `${CONFIG_BASENAMES[framework]}.mjs`;
-      await import_fs.promises.writeFile(path51.join(cwd, configFile), shimFor(framework, null, true), "utf8");
+      await import_fs.promises.writeFile(path52.join(cwd, configFile), shimFor(framework, null, true), "utf8");
       await writeMarker(cwd, { framework, configFile, backupFile: null });
       log.info("preview", `host-allow: created ${configFile} (${framework}) for tunnel access`);
     }
@@ -23033,19 +23138,19 @@ function activePreviewSessionIds() {
 
 // src/services/preview/start-orchestrator.ts
 var import_child_process19 = require("child_process");
-var fs55 = __toESM(require("fs"));
-var path58 = __toESM(require("path"));
+var fs56 = __toESM(require("fs"));
+var path59 = __toESM(require("path"));
 var import_which2 = __toESM(require("which"));
 
 // src/services/project-env/index.ts
 var import_fs5 = require("fs");
-var path57 = __toESM(require("path"));
+var path58 = __toESM(require("path"));
 
 // src/beads/project-key.ts
 var import_child_process18 = require("child_process");
 var crypto2 = __toESM(require("crypto"));
-var fs53 = __toESM(require("fs"));
-var path56 = __toESM(require("path"));
+var fs54 = __toESM(require("fs"));
+var path57 = __toESM(require("path"));
 function normalizeOrigin(raw) {
   const trimmed = raw.trim();
   if (!trimmed) return null;
@@ -23071,17 +23176,17 @@ function normalizeOrigin(raw) {
   return `${host2}/${pathPart}`;
 }
 function findRepoRoot(cwd) {
-  let dir = path56.resolve(cwd);
+  let dir = path57.resolve(cwd);
   const seen = /* @__PURE__ */ new Set();
   for (let i = 0; i < 256; i++) {
     if (seen.has(dir)) return null;
     seen.add(dir);
     try {
-      const stat3 = fs53.statSync(path56.join(dir, ".git"), { throwIfNoEntry: false });
+      const stat3 = fs54.statSync(path57.join(dir, ".git"), { throwIfNoEntry: false });
       if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
     } catch {
     }
-    const parent = path56.dirname(dir);
+    const parent = path57.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -23092,7 +23197,7 @@ var _execSeam2 = {
     const out2 = (0, import_child_process18.execFileSync)(file, args2, opts);
     return typeof out2 === "string" ? out2 : out2.toString("utf8");
   },
-  realpath: (p2) => fs53.realpathSync(p2)
+  realpath: (p2) => fs54.realpathSync(p2)
 };
 function readOrigin(cwd) {
   try {
@@ -23121,7 +23226,7 @@ function deriveProjectIdentity(cwd = process.cwd()) {
   } catch {
   }
   const hash = crypto2.createHash("sha256").update(real).digest("hex");
-  return { projectKey: `path:${hash}`, projectLabel: path56.basename(real) || "project" };
+  return { projectKey: `path:${hash}`, projectLabel: path57.basename(real) || "project" };
 }
 
 // src/services/project-env/index.ts
@@ -23134,7 +23239,7 @@ async function readIfExists(p2) {
 }
 async function syncProjectEnvUp(cwd, ctx) {
   if (!ctx.pluginAuthToken) return;
-  const content = await readIfExists(path57.join(cwd, ".env"));
+  const content = await readIfExists(path58.join(cwd, ".env"));
   if (content == null) return;
   try {
     const { projectKey, projectLabel } = deriveProjectIdentity(cwd);
@@ -23156,7 +23261,7 @@ async function syncProjectEnvUp(cwd, ctx) {
 }
 async function restoreProjectEnvIfMissing(cwd, ctx) {
   if (!ctx.pluginAuthToken) return false;
-  const envPath = path57.join(cwd, ".env");
+  const envPath = path58.join(cwd, ".env");
   if (await readIfExists(envPath) != null) return false;
   try {
     const { projectKey, projectLabel } = deriveProjectIdentity(cwd);
@@ -23167,7 +23272,7 @@ async function restoreProjectEnvIfMissing(cwd, ctx) {
       projectKey
     });
     if (!stored) return false;
-    const tmp = path57.join(cwd, ".env.codeam-restore.tmp");
+    const tmp = path58.join(cwd, ".env.codeam-restore.tmp");
     await import_fs5.promises.writeFile(tmp, stored.content, { encoding: "utf8", mode: 384 });
     await import_fs5.promises.rename(tmp, envPath);
     log.info("project-env", `restored .env (${stored.keyCount} vars) for ${projectLabel}`);
@@ -23244,8 +23349,8 @@ function normalizeDetectionForSpawn(detection, cwd) {
   if (args2.length === 0) return detection;
   const binName = args2[0];
   if (binName.startsWith("-")) return detection;
-  const binPath = path58.join(cwd, "node_modules", ".bin", binName);
-  if (!fs55.existsSync(binPath)) return detection;
+  const binPath = path59.join(cwd, "node_modules", ".bin", binName);
+  if (!fs56.existsSync(binPath)) return detection;
   return {
     ...detection,
     command: binPath,
@@ -23618,9 +23723,9 @@ async function establishTunnel(ctx, dev) {
 
 // src/beads/bd-adapter.ts
 var import_child_process20 = require("child_process");
-var fs56 = __toESM(require("fs"));
-var os43 = __toESM(require("os"));
-var path59 = __toESM(require("path"));
+var fs57 = __toESM(require("fs"));
+var os44 = __toESM(require("os"));
+var path60 = __toESM(require("path"));
 var BD_PACKAGE = "@beads/bd";
 function resolveBundledBdBinary() {
   return _resolveSeam.resolveBundled();
@@ -23632,11 +23737,11 @@ function _defaultResolveBundled() {
   } catch {
     return null;
   }
-  const binDir = path59.join(path59.dirname(pkgJsonPath), "bin");
+  const binDir = path60.join(path60.dirname(pkgJsonPath), "bin");
   const binaryName = process.platform === "win32" ? "bd.exe" : "bd";
-  const binaryPath = path59.join(binDir, binaryName);
+  const binaryPath = path60.join(binDir, binaryName);
   try {
-    fs56.accessSync(binaryPath, fs56.constants.F_OK);
+    fs57.accessSync(binaryPath, fs57.constants.F_OK);
     return binaryPath;
   } catch {
     return null;
@@ -23646,13 +23751,13 @@ function resolveBdOnPath() {
   return _resolveSeam.resolveOnPath();
 }
 function _defaultResolveOnPath() {
-  const dirs = (process.env.PATH ?? "").split(path59.delimiter).filter(Boolean);
+  const dirs = (process.env.PATH ?? "").split(path60.delimiter).filter(Boolean);
   const candidates = process.platform === "win32" ? ["bd.exe", "bd.cmd", "bd"] : ["bd"];
   for (const dir of dirs) {
     for (const candidate of candidates) {
-      const full = path59.join(dir, candidate);
+      const full = path60.join(dir, candidate);
       try {
-        fs56.accessSync(full, fs56.constants.F_OK);
+        fs57.accessSync(full, fs57.constants.F_OK);
         return full;
       } catch {
       }
@@ -23737,7 +23842,7 @@ var BdAdapter = class {
     const env = { ...process.env };
     if (!env.HOME) {
       try {
-        const home = os43.homedir();
+        const home = os44.homedir();
         if (home) env.HOME = home;
       } catch {
       }
@@ -23829,9 +23934,9 @@ function coerceIssue(row, projectKey) {
 
 // src/beads/provisioner.ts
 var import_child_process23 = require("child_process");
-var fs58 = __toESM(require("fs"));
-var os45 = __toESM(require("os"));
-var path61 = __toESM(require("path"));
+var fs59 = __toESM(require("fs"));
+var os46 = __toESM(require("os"));
+var path62 = __toESM(require("path"));
 
 // src/beads/install-bd.ts
 var import_child_process21 = require("child_process");
@@ -23896,9 +24001,9 @@ async function installBd(platform3 = process.platform) {
 
 // src/beads/install-dolt.ts
 var import_child_process22 = require("child_process");
-var fs57 = __toESM(require("fs"));
-var os44 = __toESM(require("os"));
-var path60 = __toESM(require("path"));
+var fs58 = __toESM(require("fs"));
+var os45 = __toESM(require("os"));
+var path61 = __toESM(require("path"));
 var DOLT_INSTALL_SH_URL = "https://github.com/dolthub/dolt/releases/latest/download/install.sh";
 var DOLT_MSI_URL = "https://github.com/dolthub/dolt/releases/latest/download/dolt-windows-amd64.msi";
 function resolveDoltInstallStrategy(platform3) {
@@ -23938,11 +24043,11 @@ function resolveDoltInstallStrategy(platform3) {
 }
 var DOLT_RELEASE_BASE = "https://github.com/dolthub/dolt/releases/latest/download";
 function doltPlatformTuple(platform3, arch2) {
-  const os61 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
+  const os63 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
   const a = arch2 === "x64" ? "amd64" : arch2 === "arm64" ? "arm64" : null;
   if (!a) return null;
-  if (os61 === "windows" && a !== "amd64") return null;
-  return `${os61}-${a}`;
+  if (os63 === "windows" && a !== "amd64") return null;
+  return `${os63}-${a}`;
 }
 function resolveDoltTarballStrategy(targetDir, platform3, arch2) {
   const tuple = doltPlatformTuple(platform3, arch2);
@@ -23987,14 +24092,14 @@ async function installDoltToDir(targetDir, platform3 = process.platform, arch2 =
   return result;
 }
 var _doltPathSeam = {
-  homedir: () => os44.homedir(),
+  homedir: () => os45.homedir(),
   getPath: () => process.env.PATH ?? "",
   setPath: (p2) => {
     process.env.PATH = p2;
   },
   exists: (p2) => {
     try {
-      fs57.accessSync(p2, fs57.constants.F_OK);
+      fs58.accessSync(p2, fs58.constants.F_OK);
       return true;
     } catch {
       return false;
@@ -24005,7 +24110,7 @@ function doltBinaryNames(platform3) {
   return platform3 === "win32" ? ["dolt.exe", "dolt.cmd", "dolt"] : ["dolt"];
 }
 function knownDoltDirs(platform3) {
-  const P3 = platform3 === "win32" ? path60.win32 : path60.posix;
+  const P3 = platform3 === "win32" ? path61.win32 : path61.posix;
   const home = _doltPathSeam.homedir();
   if (platform3 === "win32") {
     return [
@@ -24021,7 +24126,7 @@ function knownDoltDirs(platform3) {
   ].filter(Boolean);
 }
 function ensureDoltResolvable(platform3 = process.platform) {
-  const P3 = platform3 === "win32" ? path60.win32 : path60.posix;
+  const P3 = platform3 === "win32" ? path61.win32 : path61.posix;
   const delim = platform3 === "win32" ? ";" : ":";
   const names = doltBinaryNames(platform3);
   const pathDirs = _doltPathSeam.getPath().split(delim).filter(Boolean);
@@ -24198,17 +24303,17 @@ var _provisionSeam = {
 };
 var _linkSeam = {
   platform: () => process.platform,
-  homedir: () => os45.homedir(),
+  homedir: () => os46.homedir(),
   isWritableDir: (dir) => {
     try {
-      fs58.accessSync(dir, fs58.constants.W_OK);
+      fs59.accessSync(dir, fs59.constants.W_OK);
       return true;
     } catch {
       return false;
     }
   },
   ensureDir: (dir) => {
-    fs58.mkdirSync(dir, { recursive: true });
+    fs59.mkdirSync(dir, { recursive: true });
   },
   /**
    * A directory to symlink `bd` into so the AGENT's shell + Claude Code's
@@ -24229,9 +24334,9 @@ var _linkSeam = {
    * which `linkBdOntoPath` creates if missing.
    */
   cliBinDir: () => {
-    const pathDirs = (process.env.PATH ?? "").split(path61.delimiter).filter(Boolean);
+    const pathDirs = (process.env.PATH ?? "").split(path62.delimiter).filter(Boolean);
     const home = _linkSeam.homedir();
-    const localBin = home ? path61.join(home, ".local", "bin") : null;
+    const localBin = home ? path62.join(home, ".local", "bin") : null;
     if (localBin) {
       try {
         _linkSeam.ensureDir(localBin);
@@ -24241,16 +24346,16 @@ var _linkSeam = {
     const candidates = [];
     if (localBin) candidates.push(localBin);
     try {
-      candidates.push(path61.dirname(process.execPath));
+      candidates.push(path62.dirname(process.execPath));
     } catch {
     }
     candidates.push("/usr/local/bin");
     const entry = process.argv[1];
     if (entry) {
       try {
-        candidates.push(path61.dirname(fs58.realpathSync(entry)));
+        candidates.push(path62.dirname(fs59.realpathSync(entry)));
       } catch {
-        candidates.push(path61.dirname(entry));
+        candidates.push(path62.dirname(entry));
       }
     }
     const onPathWritable = candidates.find(
@@ -24262,24 +24367,24 @@ var _linkSeam = {
   /** Current symlink target at `linkPath`, or null when absent / not a link. */
   readlink: (linkPath) => {
     try {
-      return fs58.readlinkSync(linkPath);
+      return fs59.readlinkSync(linkPath);
     } catch {
       return null;
     }
   },
-  unlink: (linkPath) => fs58.unlinkSync(linkPath),
-  symlink: (target, linkPath) => fs58.symlinkSync(target, linkPath)
+  unlink: (linkPath) => fs59.unlinkSync(linkPath),
+  symlink: (target, linkPath) => fs59.symlinkSync(target, linkPath)
 };
 function linkBdOntoPath(binaryPath) {
   if (_linkSeam.platform() === "win32") return;
   const binDir = _linkSeam.cliBinDir();
   if (!binDir) return;
   _linkSeam.ensureDir(binDir);
-  const linkPath = path61.join(binDir, "bd");
+  const linkPath = path62.join(binDir, "bd");
   if (linkPath === binaryPath) return;
-  const current = _linkSeam.readlink(linkPath);
-  if (current === binaryPath) return;
-  if (current !== null) _linkSeam.unlink(linkPath);
+  const current2 = _linkSeam.readlink(linkPath);
+  if (current2 === binaryPath) return;
+  if (current2 !== null) _linkSeam.unlink(linkPath);
   _linkSeam.symlink(binaryPath, linkPath);
   log.info("beads", `linked bd onto PATH: ${linkPath} -> ${binaryPath}`);
 }
@@ -24470,7 +24575,7 @@ function dedupeRecipes(agents) {
 
 // src/beads/watcher.ts
 var crypto4 = __toESM(require("crypto"));
-var path62 = __toESM(require("path"));
+var path63 = __toESM(require("path"));
 var API_BASE6 = resolveApiBaseUrl();
 var DEBOUNCE_MS2 = 400;
 var ZERO_SUMMARY = {
@@ -24494,7 +24599,7 @@ var BeadsWatcher = class {
   constructor(opts) {
     this.opts = opts;
     this.bd = opts.adapter ?? new BdAdapter({ cwd: opts.cwd, beadsDir: opts.beadsDir });
-    this.feedPath = opts.feedPath ?? path62.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
+    this.feedPath = opts.feedPath ?? path63.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
     this.apiBase = opts.apiBaseUrl ?? API_BASE6;
   }
   opts;
@@ -24993,8 +25098,8 @@ function cleanupAttachmentTempFiles() {
 function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
-    const tmpPath = path65.join(os49.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
-    fs61.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
+    const tmpPath = path66.join(os50.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
+    fs62.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     pendingAttachmentFiles.add(tmpPath);
     return tmpPath;
   });
@@ -25206,10 +25311,10 @@ var listFiles = async (ctx, cmd, parsed) => {
   await ctx.relay.sendResult(cmd.id, "completed", result);
 };
 var envReadH = async (ctx, cmd) => {
-  const envPath = path65.join(process.cwd(), ".env");
+  const envPath = path66.join(process.cwd(), ".env");
   await restoreProjectEnvIfMissing(process.cwd(), ctx);
   try {
-    const raw = await fs61.promises.readFile(envPath, "utf8");
+    const raw = await fs62.promises.readFile(envPath, "utf8");
     await ctx.relay.sendResult(cmd.id, "completed", {
       exists: true,
       vars: parseDotenv(raw)
@@ -25240,15 +25345,15 @@ var envWriteH = async (ctx, cmd, parsed) => {
     }
     seen.add(v.key);
   }
-  const envPath = path65.join(process.cwd(), ".env");
-  const tmpPath = path65.join(process.cwd(), ".env.codeam.tmp");
+  const envPath = path66.join(process.cwd(), ".env");
+  const tmpPath = path66.join(process.cwd(), ".env.codeam.tmp");
   try {
-    await fs61.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
-    await fs61.promises.rename(tmpPath, envPath);
+    await fs62.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
+    await fs62.promises.rename(tmpPath, envPath);
     await ctx.relay.sendResult(cmd.id, "completed", { ok: true, count: vars.length });
     void syncProjectEnvUp(process.cwd(), ctx);
   } catch (err) {
-    await fs61.promises.rm(tmpPath, { force: true }).catch(() => void 0);
+    await fs62.promises.rm(tmpPath, { force: true }).catch(() => void 0);
     await ctx.relay.sendResult(cmd.id, "failed", { error: err.message });
   }
 };
@@ -25297,7 +25402,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
   let configuredAgent = rawAgentId;
   if (!configuredAgent) {
     try {
-      const raw = JSON.parse(fs61.readFileSync(headroomConfigPath(), "utf8"));
+      const raw = JSON.parse(fs62.readFileSync(headroomConfigPath(), "utf8"));
       configuredAgent = raw.agent ?? "";
     } catch {
     }
@@ -25331,7 +25436,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
     persist: persistHeadroomConfig,
     readEnabled: () => {
       try {
-        const raw = JSON.parse(fs61.readFileSync(headroomConfigPath(), "utf8"));
+        const raw = JSON.parse(fs62.readFileSync(headroomConfigPath(), "utf8"));
         return raw.enabled === true;
       } catch {
         return false;
@@ -25588,7 +25693,7 @@ var vcsAgentReviewH = async (ctx, cmd, parsed) => {
   });
   const token = ctx.pluginAuthToken;
   void (async () => {
-    const os61 = createOsStrategy();
+    const os63 = createOsStrategy();
     try {
       const report = await reviewPullRequest(
         {
@@ -25597,7 +25702,7 @@ var vcsAgentReviewH = async (ctx, cmd, parsed) => {
           baseBranch: parsed.baseBranch
         },
         {
-          runReview: (input) => new CoderabbitRuntimeStrategy(os61).runOneShot(input),
+          runReview: (input) => new CoderabbitRuntimeStrategy(os63).runOneShot(input),
           runGh: (args2) => defaultRunGh(args2),
           postReport: async (r) => {
             if (!token) return;
@@ -25635,7 +25740,7 @@ var headroomBudgetH = async (ctx, cmd) => {
   }
   let headroomActive = false;
   try {
-    const raw = JSON.parse(fs61.readFileSync(headroomConfigPath(), "utf8"));
+    const raw = JSON.parse(fs62.readFileSync(headroomConfigPath(), "utf8"));
     headroomActive = raw.enabled === true;
   } catch {
   }
@@ -25645,7 +25750,7 @@ var headroomBudgetH = async (ctx, cmd) => {
   }
   let existingConfig = { enabled: true };
   try {
-    existingConfig = JSON.parse(fs61.readFileSync(headroomConfigPath(), "utf8"));
+    existingConfig = JSON.parse(fs62.readFileSync(headroomConfigPath(), "utf8"));
   } catch {
   }
   if (payload.budgetEnabled && payload.budgetUsd != null) {
@@ -25758,9 +25863,9 @@ var CLI_UPDATE_MAX_ATTEMPTS = 3;
 function buildNpmInstallInvocation(opts) {
   const entryScript = opts?.entryScript ?? process.argv[1] ?? "";
   const execPath = opts?.execPath ?? process.execPath;
-  const exists2 = opts?.existsSync ?? fs61.existsSync;
+  const exists2 = opts?.existsSync ?? fs62.existsSync;
   const platform3 = opts?.platform ?? process.platform;
-  const p2 = platform3 === "win32" ? path65.win32 : path65.posix;
+  const p2 = platform3 === "win32" ? path66.win32 : path66.posix;
   const normalized = entryScript.split(/[\\/]/).join("/");
   const marker = "/lib/node_modules/codeam-cli/";
   const markerIdx = normalized.indexOf(marker);
@@ -25782,7 +25887,7 @@ function isPermissionError(stderr) {
 function resolveGlobalNodeModulesDir(opts) {
   const entryScript = opts?.entryScript ?? process.argv[1] ?? "";
   const platform3 = opts?.platform ?? process.platform;
-  const p2 = platform3 === "win32" ? path65.win32 : path65.posix;
+  const p2 = platform3 === "win32" ? path66.win32 : path66.posix;
   const marker = "/lib/node_modules/codeam-cli/";
   const markerIdx = entryScript.split(/[\\/]/).join("/").indexOf(marker);
   if (markerIdx <= 0) return null;
@@ -25792,9 +25897,9 @@ function resolveGlobalNodeModulesDir(opts) {
 var STALE_STAGING_AGE_MS = CLI_UPDATE_INSTALL_TIMEOUT_MS;
 function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
   if (!nodeModulesDir) return 0;
-  const readdirSync13 = deps?.readdirSync ?? fs61.readdirSync;
-  const statSync17 = deps?.statSync ?? fs61.statSync;
-  const rmSync9 = deps?.rmSync ?? fs61.rmSync;
+  const readdirSync13 = deps?.readdirSync ?? fs62.readdirSync;
+  const statSync17 = deps?.statSync ?? fs62.statSync;
+  const rmSync9 = deps?.rmSync ?? fs62.rmSync;
   let removed = 0;
   let entries;
   try {
@@ -25804,7 +25909,7 @@ function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
   }
   for (const name of entries) {
     if (!/^\.codeam-cli-/.test(name)) continue;
-    const full = path65.join(nodeModulesDir, name);
+    const full = path66.join(nodeModulesDir, name);
     try {
       const st3 = statSync17(full);
       if (now - st3.mtimeMs < STALE_STAGING_AGE_MS) continue;
@@ -26351,6 +26456,15 @@ var savePreviewConfigH = (_ctx, _cmd, parsed) => {
     log.info("preview", `save_preview_config failed: ${String(err)}`);
   });
 };
+var guardrailConfigureH = async (ctx, cmd) => {
+  const payload = cmd.payload;
+  if (payload?.action === "write") {
+    const policy = setGuardrailPolicy(payload.policy);
+    await ctx.relay.sendResult(cmd.id, "completed", { policy });
+    return;
+  }
+  await ctx.relay.sendResult(cmd.id, "completed", { policy: getGuardrailPolicy() });
+};
 var handlers = {
   start_task: startTask,
   provide_input: provideInput,
@@ -26402,6 +26516,7 @@ var handlers = {
   vcs_agent_review: vcsAgentReviewH,
   headroom_budget: headroomBudgetH,
   beads_configure: beadsConfigureH,
+  guardrail_configure: guardrailConfigureH,
   cli_self_update: cliSelfUpdateH()
 };
 async function dispatchCommand(ctx, cmd) {
@@ -26671,11 +26786,11 @@ function resolveTokenValue(args2) {
   }
   const fileFlag = args2.find((a) => a.startsWith("--token-file="));
   if (fileFlag) {
-    const path85 = fileFlag.slice("--token-file=".length);
+    const path87 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs62.readFileSync(path85, "utf8").trim();
-      if (content.length === 0) fail(`--token-file ${path85} is empty`);
-      rmIfExistsQuiet(path85);
+      const content = fs63.readFileSync(path87, "utf8").trim();
+      if (content.length === 0) fail(`--token-file ${path87} is empty`);
+      rmIfExistsQuiet(path87);
       return content;
     } catch (err) {
       fail(`Could not read --token-file: ${err.message}`);
@@ -26704,7 +26819,7 @@ async function claimOnce(token, pluginId, pluginSecretHash) {
     pluginId,
     ideName: "codeam-cli (codespace)",
     ideVersion: process.env.npm_package_version ?? "unknown",
-    hostname: os50.hostname(),
+    hostname: os51.hostname(),
     codespaceName: process.env.CODESPACE_NAME ?? "",
     // Current git branch of the codespace's working directory, so the
     // backend can populate `PairedSession.branch` for the codespace pair.
@@ -26765,7 +26880,7 @@ async function claim(token, pluginId, pluginSecretHash) {
   }
 }
 function pairAutoLockPath() {
-  return path66.join(os50.homedir(), ".codeam", "pair-auto.lock");
+  return path67.join(os51.homedir(), ".codeam", "pair-auto.lock");
 }
 function isLivePairAuto(pid) {
   if (!Number.isInteger(pid) || pid <= 0 || pid === process.pid) return false;
@@ -26775,7 +26890,7 @@ function isLivePairAuto(pid) {
     if (e.code !== "EPERM") return false;
   }
   try {
-    return fs62.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
+    return fs63.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
   } catch {
     return true;
   }
@@ -26785,24 +26900,24 @@ function isLiveCodeam(pid) {
 }
 function daemonLockPath(sessionId) {
   const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
-  return path66.join(os50.homedir(), ".codeam", `daemon-${safe}.lock`);
+  return path67.join(os51.homedir(), ".codeam", `daemon-${safe}.lock`);
 }
 function acquireDaemonLock(sessionId) {
   const lockPath = daemonLockPath(sessionId);
   try {
-    fs62.mkdirSync(path66.dirname(lockPath), { recursive: true });
+    fs63.mkdirSync(path67.dirname(lockPath), { recursive: true });
     try {
-      fs62.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs63.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs62.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs63.readFileSync(lockPath, "utf8").trim());
       if (holder && holder !== process.pid && isLiveCodeam(holder)) return false;
-      fs62.writeFileSync(lockPath, String(process.pid));
+      fs63.writeFileSync(lockPath, String(process.pid));
     }
     const release3 = () => {
       try {
-        if (fs62.existsSync(lockPath) && Number(fs62.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs62.unlinkSync(lockPath);
+        if (fs63.existsSync(lockPath) && Number(fs63.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs63.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -26824,19 +26939,19 @@ function acquireDaemonLock(sessionId) {
 function acquireSingletonLock() {
   const lockPath = pairAutoLockPath();
   try {
-    fs62.mkdirSync(path66.dirname(lockPath), { recursive: true });
+    fs63.mkdirSync(path67.dirname(lockPath), { recursive: true });
     try {
-      fs62.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs63.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs62.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs63.readFileSync(lockPath, "utf8").trim());
       if (isLivePairAuto(holder)) return false;
-      fs62.writeFileSync(lockPath, String(process.pid));
+      fs63.writeFileSync(lockPath, String(process.pid));
     }
     process.once("exit", () => {
       try {
-        if (fs62.existsSync(lockPath) && Number(fs62.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs62.unlinkSync(lockPath);
+        if (fs63.existsSync(lockPath) && Number(fs63.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs63.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -27288,7 +27403,7 @@ var AgentService = class _AgentService {
 };
 
 // src/agents/acp/adapters.ts
-var path68 = __toESM(require("path"));
+var path69 = __toESM(require("path"));
 
 // src/agents/acp/agent-binary.ts
 var import_fs6 = __toESM(require("fs"));
@@ -27321,14 +27436,14 @@ function defaultSdkDir() {
   return resolveSdkDirViaRequire();
 }
 function resolveClaudeNativeBinary(deps = {}) {
-  const existsSync27 = deps.existsSync ?? import_fs6.default.existsSync;
+  const existsSync28 = deps.existsSync ?? import_fs6.default.existsSync;
   const platformKey = deps.platformKey ?? currentPlatformKey();
   const sdkDir = deps.sdkDir !== void 0 ? deps.sdkDir : defaultSdkDir();
   if (!sdkDir) return null;
   const scopeDir = import_path8.default.dirname(sdkDir);
   const binName = platformKey.startsWith("win32-") ? "claude.exe" : "claude";
   const candidate = import_path8.default.join(scopeDir, `claude-agent-sdk-${platformKey}`, binName);
-  return existsSync27(candidate) ? candidate : null;
+  return existsSync28(candidate) ? candidate : null;
 }
 var realSleep = (ms) => new Promise((resolve9) => setTimeout(resolve9, ms));
 async function waitForClaudeNativeBinary(opts = {}) {
@@ -27379,18 +27494,18 @@ async function waitForCommandOnPath(cmd, opts = {}) {
   return check();
 }
 function resolveCursorAgentBinary(deps = {}) {
-  const existsSync27 = deps.existsSync ?? import_fs6.default.existsSync;
+  const existsSync28 = deps.existsSync ?? import_fs6.default.existsSync;
   const platform3 = deps.platform ?? process.platform;
   const env = deps.env ?? process.env;
   if (platform3 === "win32") {
     const localAppData = env.LOCALAPPDATA;
     if (!localAppData) return null;
     const exe = import_path8.default.win32.join(localAppData, "cursor-agent", "cursor-agent.exe");
-    return existsSync27(exe) ? exe : null;
+    return existsSync28(exe) ? exe : null;
   }
   const home = deps.homedir ?? import_os11.default.homedir();
   const unix = import_path8.default.posix.join(home, ".local", "bin", "cursor-agent");
-  return existsSync27(unix) ? unix : null;
+  return existsSync28(unix) ? unix : null;
 }
 async function waitForCursorAgent(opts = {}) {
   const timeoutMs = opts.timeoutMs ?? 18e4;
@@ -27578,13 +27693,13 @@ function resolveBin(pkgName, binName) {
   try {
     const manifestPath = require_.resolve(`${pkgName}/package.json`);
     const manifest = require_(`${pkgName}/package.json`);
-    const pkgDir = path68.dirname(manifestPath);
+    const pkgDir = path69.dirname(manifestPath);
     const bin = manifest.bin;
     if (!bin) return null;
-    if (typeof bin === "string") return path68.resolve(pkgDir, bin);
+    if (typeof bin === "string") return path69.resolve(pkgDir, bin);
     const target = binName ?? Object.keys(bin)[0];
     if (!target || !bin[target]) return null;
-    return path68.resolve(pkgDir, bin[target]);
+    return path69.resolve(pkgDir, bin[target]);
   } catch {
     return null;
   }
@@ -27734,9 +27849,9 @@ async function resolveAcpAdapterWithRetry(agent, opts = {}) {
 var import_node_crypto11 = require("crypto");
 
 // src/services/history.service.ts
-var fs64 = __toESM(require("fs"));
-var path69 = __toESM(require("path"));
-var os52 = __toESM(require("os"));
+var fs65 = __toESM(require("fs"));
+var path70 = __toESM(require("path"));
+var os53 = __toESM(require("os"));
 var https7 = __toESM(require("https"));
 var http6 = __toESM(require("http"));
 var import_zod2 = require("zod");
@@ -27763,7 +27878,7 @@ function parseJsonl(filePath) {
   const messages = [];
   let raw;
   try {
-    raw = fs64.readFileSync(filePath, "utf8");
+    raw = fs65.readFileSync(filePath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       log.warn("history:parseJsonl", `read failed for ${filePath}`, err);
@@ -27904,7 +28019,7 @@ var HistoryService = class _HistoryService {
     return this._quotaPercent === null || Date.now() - this._quotaFetchedAt > ttlMs;
   }
   get projectDir() {
-    return this.runtime.resolveHistoryDir(this.cwd) ?? path69.join(os52.homedir(), ".claude", "projects", encodeCwd(this.cwd));
+    return this.runtime.resolveHistoryDir(this.cwd) ?? path70.join(os53.homedir(), ".claude", "projects", encodeCwd(this.cwd));
   }
   /** Set the current Claude conversation ID (extracted from /cost command or session start) */
   setCurrentConversationId(id) {
@@ -27916,7 +28031,7 @@ var HistoryService = class _HistoryService {
   /** Return the current message count in the active conversation. */
   getCurrentMessageCount() {
     if (!this.currentConversationId) return 0;
-    const filePath = path69.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+    const filePath = path70.join(this.projectDir, `${this.currentConversationId}.jsonl`);
     return parseJsonl(filePath).length;
   }
   /**
@@ -27927,7 +28042,7 @@ var HistoryService = class _HistoryService {
     const deadline = Date.now() + timeoutMs;
     while (Date.now() < deadline) {
       if (!this.currentConversationId) return null;
-      const filePath = path69.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+      const filePath = path70.join(this.projectDir, `${this.currentConversationId}.jsonl`);
       const messages = parseJsonl(filePath);
       if (messages.length > previousCount) {
         for (let i = messages.length - 1; i >= previousCount; i--) {
@@ -27953,16 +28068,16 @@ var HistoryService = class _HistoryService {
     const dir = this.projectDir;
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     try {
-      const files = fs64.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
+      const files = fs65.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
         try {
-          const stat3 = fs64.statSync(path69.join(dir, e.name));
+          const stat3 = fs65.statSync(path70.join(dir, e.name));
           return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
         } catch {
           return { name: e.name, mtime: 0, birthtime: 0 };
         }
       }).filter((f) => f.birthtime >= cutoff).sort((a, b) => b.mtime - a.mtime);
       if (files.length > 0) {
-        this.currentConversationId = path69.basename(files[0].name, ".jsonl");
+        this.currentConversationId = path70.basename(files[0].name, ".jsonl");
       }
     } catch {
     }
@@ -27996,13 +28111,13 @@ var HistoryService = class _HistoryService {
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     let entries;
     try {
-      entries = fs64.readdirSync(dir, { withFileTypes: true });
+      entries = fs65.readdirSync(dir, { withFileTypes: true });
     } catch {
       return null;
     }
     const files = entries.filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
       try {
-        const stat3 = fs64.statSync(path69.join(dir, e.name));
+        const stat3 = fs65.statSync(path70.join(dir, e.name));
         return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
       } catch {
         return { name: e.name, mtime: 0, birthtime: 0 };
@@ -28011,12 +28126,12 @@ var HistoryService = class _HistoryService {
     if (files.length === 0) return null;
     const targetFile = this.currentConversationId ? `${this.currentConversationId}.jsonl` : files[0].name;
     if (!files.some((f) => f.name === targetFile)) return null;
-    return this.extractUsageFromFile(path69.join(dir, targetFile));
+    return this.extractUsageFromFile(path70.join(dir, targetFile));
   }
   extractUsageFromFile(filePath) {
     let raw;
     try {
-      raw = fs64.readFileSync(filePath, "utf8");
+      raw = fs65.readFileSync(filePath, "utf8");
     } catch {
       return null;
     }
@@ -28061,9 +28176,9 @@ var HistoryService = class _HistoryService {
     let totalCost = 0;
     let files;
     try {
-      files = fs64.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
+      files = fs65.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
         try {
-          return fs64.statSync(path69.join(projectDir, f)).mtimeMs >= monthStartMs;
+          return fs65.statSync(path70.join(projectDir, f)).mtimeMs >= monthStartMs;
         } catch {
           return false;
         }
@@ -28074,7 +28189,7 @@ var HistoryService = class _HistoryService {
     for (const file of files) {
       let raw;
       try {
-        raw = fs64.readFileSync(path69.join(projectDir, file), "utf8");
+        raw = fs65.readFileSync(path70.join(projectDir, file), "utf8");
       } catch {
         continue;
       }
@@ -28153,7 +28268,7 @@ var HistoryService = class _HistoryService {
     if (this.runtime.resolveHistoryFile) {
       return this.runtime.resolveHistoryFile(this.cwd, sessionId);
     }
-    return path69.join(this.projectDir, `${sessionId}.jsonl`);
+    return path70.join(this.projectDir, `${sessionId}.jsonl`);
   }
   /**
    * Parse a conversation's messages from disk, agent-aware. Claude uses the
@@ -28187,7 +28302,7 @@ var HistoryService = class _HistoryService {
         };
       });
     }
-    return parseJsonl(path69.join(this.projectDir, `${sessionId}.jsonl`));
+    return parseJsonl(path70.join(this.projectDir, `${sessionId}.jsonl`));
   }
   async loadConversation(sessionId) {
     const messages = this.readConversation(sessionId);
@@ -28255,7 +28370,7 @@ var HistoryService = class _HistoryService {
     if (!filePath) return false;
     let mtimeMs;
     try {
-      mtimeMs = fs64.statSync(filePath).mtimeMs;
+      mtimeMs = fs65.statSync(filePath).mtimeMs;
     } catch {
       return false;
     }
@@ -28330,10 +28445,10 @@ var HistoryService = class _HistoryService {
 
 // src/agents/acp/client.ts
 var import_node_child_process29 = require("child_process");
-var fs65 = __toESM(require("fs/promises"));
+var fs66 = __toESM(require("fs/promises"));
 var fsSync = __toESM(require("fs"));
-var os54 = __toESM(require("os"));
-var path71 = __toESM(require("path"));
+var os55 = __toESM(require("os"));
+var path72 = __toESM(require("path"));
 var import_node_stream = require("stream");
 
 // ../../node_modules/@agentclientprotocol/sdk/dist/schema/index.js
@@ -30527,7 +30642,7 @@ var Connection = class {
     if (this.abortController.signal.aborted) {
       return;
     }
-    let current = message;
+    let current2 = message;
     let retry = false;
     try {
       for (const handler of [
@@ -30537,26 +30652,26 @@ var Connection = class {
         if (this.abortController.signal.aborted) {
           return;
         }
-        const result = await handler.handleMessage(current, this.context) ?? {
+        const result = await handler.handleMessage(current2, this.context) ?? {
           handled: true
         };
         if (result.handled) {
           return;
         }
-        current = result.message ?? current;
+        current2 = result.message ?? current2;
         retry = retry || Boolean(result.retry);
       }
       if (retry) {
-        this.retryQueue.push(current);
-      } else if (current.kind === "request") {
-        await current.responder.respondWithError(RequestError.methodNotFound(current.method));
+        this.retryQueue.push(current2);
+      } else if (current2.kind === "request") {
+        await current2.responder.respondWithError(RequestError.methodNotFound(current2.method));
       }
     } catch (error) {
       if (this.abortController.signal.aborted) {
         return;
       }
-      if (current.kind === "request" && !current.responder.responded) {
-        await current.responder.respondWithResult(errorToRequestResult(error, current.responder.signal));
+      if (current2.kind === "request" && !current2.responder.responded) {
+        await current2.responder.respondWithResult(errorToRequestResult(error, current2.responder.signal));
       } else {
         const response = errorToResult(error);
         if ("error" in response) {
@@ -32359,8 +32474,8 @@ function createIdleTimeout(idleMs, makeError, activeIdleMs = idleMs) {
 }
 
 // src/agents/acp/internal-paths.ts
-var path70 = __toESM(require("path"));
-var os53 = __toESM(require("os"));
+var path71 = __toESM(require("path"));
+var os54 = __toESM(require("os"));
 var INTERNAL_TOKENS = [".codeam", "house-claude"];
 var SELF_HOSTED_WORKSPACE_RE = /\.codeam[/\\]self-hosted/gi;
 function textReferencesInternal(text) {
@@ -32368,13 +32483,13 @@ function textReferencesInternal(text) {
   const scrubbed = text.replace(SELF_HOSTED_WORKSPACE_RE, " ");
   return INTERNAL_TOKENS.some((t2) => scrubbed.includes(t2));
 }
-function pathIsInternal(p2, homeDir2 = os53.homedir()) {
+function pathIsInternal(p2, homeDir2 = os54.homedir()) {
   if (!p2) return false;
-  const abs = path70.resolve(p2);
-  const home = path70.resolve(homeDir2);
-  const within = (root) => abs === root || abs.startsWith(root + path70.sep);
-  if (within(path70.join(home, ".codeam", "self-hosted"))) return false;
-  return within(path70.join(home, ".codeam")) || within(path70.join(home, ".beads")) || abs === path70.join(home, ".codeam-host.log") || abs.includes(`${path70.sep}house-claude${path70.sep}`) || abs.endsWith(`${path70.sep}house-claude`);
+  const abs = path71.resolve(p2);
+  const home = path71.resolve(homeDir2);
+  const within = (root) => abs === root || abs.startsWith(root + path71.sep);
+  if (within(path71.join(home, ".codeam", "self-hosted"))) return false;
+  return within(path71.join(home, ".codeam")) || within(path71.join(home, ".beads")) || abs === path71.join(home, ".codeam-host.log") || abs.includes(`${path71.sep}house-claude${path71.sep}`) || abs.endsWith(`${path71.sep}house-claude`);
 }
 function toolCallReferencesInternal(call) {
   if (textReferencesInternal(call.title)) return true;
@@ -32395,6 +32510,89 @@ function internalPathPermissionOutcome(request) {
 }
 var INTERNAL_BLOCK_REASON = "This path is a CodeAgent platform internal (CodeAgent's own runtime plumbing, not part of the user's project) and is off-limits. Continue with the user's own project files.";
 
+// src/agents/acp/guardrails.ts
+var SECRET_RE = /(^|[\s"'`=(/\\])(\.env(\.[\w.-]+)?|[\w.-]+\.(pem|key|pfx|p12|jks|keystore)|id_rsa|id_ed25519|\.npmrc|\.pgpass|\.netrc|\.git-credentials|kubeconfig|credentials(\.[\w-]+)?)\b/i;
+var DESTRUCTIVE_RES = [
+  /\brm\s+-[a-z]*f/i,
+  // rm -rf / -fr / -f
+  /\brm\s+[^\n]*--force/i,
+  /\bgit\s+reset\s+--hard/i,
+  /\bgit\s+clean\s+-[a-z]*f/i,
+  /\bgit\s+checkout\s+--\s+\./i,
+  // discard all local changes
+  /\bshred\b/i,
+  /\btruncate\s+-s\s*0/i,
+  /\b(drop|truncate)\s+(table|database)\b/i,
+  /\bmkfs\b/i,
+  /\bdd\b[^\n]*\bof=/i
+];
+var PROTECTED_BRANCHES = "main|master|develop|development|release[\\w./-]*|prod|production";
+var PROTECTED_PUSH_RE = new RegExp(`\\bgit\\s+push\\b[^\\n]*\\b(${PROTECTED_BRANCHES})\\b`, "i");
+var OUTWARD_RES = [
+  /\bgit\s+push\b[^\n]*(--force\b|--force-with-lease\b|(?:^|\s)-f(?:\s|$))/i,
+  /\b(npm|yarn|pnpm)\s+publish\b/i,
+  /\bgh\s+release\s+create\b/i,
+  /\bgit\s+push\b[^\n]*--tags\b/i,
+  /\bvercel\b[^\n]*(--prod|deploy)/i,
+  /\bnetlify\s+deploy\b/i,
+  /\beas\s+(submit|build)\b/i
+];
+function haystack(call) {
+  let s = typeof call.title === "string" ? call.title : "";
+  if (call.rawInput != null) {
+    try {
+      s += "\n" + JSON.stringify(call.rawInput);
+    } catch {
+    }
+  }
+  return s;
+}
+function matchedCategories(hay) {
+  const m = /* @__PURE__ */ new Set();
+  if (SECRET_RE.test(hay)) m.add("secretRead");
+  if (DESTRUCTIVE_RES.some((re2) => re2.test(hay))) m.add("destructiveShell");
+  if (OUTWARD_RES.some((re2) => re2.test(hay))) m.add("outwardIrreversible");
+  if (PROTECTED_PUSH_RE.test(hay)) m.add("protectedBranch");
+  return m;
+}
+function rejectOutcome(options) {
+  const reject = options.find((o) => o.kind === "reject_always") ?? options.find((o) => o.kind === "reject_once");
+  return reject ? { outcome: { outcome: "selected", optionId: reject.optionId } } : { outcome: { outcome: "cancelled" } };
+}
+function toolPathIsSecret(p2) {
+  return !!p2 && SECRET_RE.test(p2);
+}
+var GUARDRAIL_SECRET_READ_BLOCK_REASON = "Reading this secret file is blocked by this session's guardrails (Reading secrets = Deny). Adjust it in the session Guardrails settings if intended.";
+function guardrailDecision(request, policy) {
+  const hay = haystack(request.toolCall);
+  if (!hay) return null;
+  const matched = matchedCategories(hay);
+  if (matched.size === 0) return null;
+  let denyCat;
+  let confirmCat;
+  for (const cat of GUARDRAIL_CATEGORIES) {
+    if (!matched.has(cat)) continue;
+    const d3 = policy[cat];
+    if (d3 === "deny") {
+      denyCat = cat;
+      break;
+    }
+    if (d3 === "confirm" && !confirmCat) confirmCat = cat;
+  }
+  if (denyCat) {
+    return {
+      kind: "deny",
+      category: denyCat,
+      reason: GUARDRAIL_CATEGORY_META[denyCat].description,
+      outcome: rejectOutcome(request.options)
+    };
+  }
+  if (confirmCat) {
+    return { kind: "confirm", category: confirmCat, reason: GUARDRAIL_CATEGORY_META[confirmCat].description };
+  }
+  return null;
+}
+
 // src/agents/acp/client.ts
 var TRANSIENT_ADAPTER_SPAWN_RE = /ETXTBSY|ENOENT/;
 var MAX_START_ATTEMPTS = 5;
@@ -33202,8 +33400,11 @@ var AcpClient = class {
         if (!isLocalSession() && pathIsInternal(params.path)) {
           throw new RequestError(-32002, INTERNAL_BLOCK_REASON, { uri: params.path });
         }
+        if (!isLocalSession() && getGuardrailPolicy().secretRead === "deny" && toolPathIsSecret(params.path)) {
+          throw new RequestError(-32002, GUARDRAIL_SECRET_READ_BLOCK_REASON, { uri: params.path });
+        }
         try {
-          const content = await fs65.readFile(params.path, "utf8");
+          const content = await fs66.readFile(params.path, "utf8");
           return applyLineRange(content, params.line ?? null, params.limit ?? null);
         } catch (err) {
           const code = err.code;
@@ -33226,7 +33427,7 @@ var AcpClient = class {
           throw new RequestError(-32002, INTERNAL_BLOCK_REASON, { uri: params.path });
         }
         try {
-          await fs65.writeFile(params.path, params.content, "utf8");
+          await fs66.writeFile(params.path, params.content, "utf8");
           return {};
         } catch (err) {
           const code = err.code;
@@ -33286,29 +33487,29 @@ function applyLineRange(content, line, limit) {
   return { content: lines.slice(start2, end).join("\n") };
 }
 function knownAgentBinaryDirs() {
-  const home = os54.homedir();
+  const home = os55.homedir();
   const out2 = [];
   out2.push("/tmp/codeam-node20/bin");
   for (const root of [
     "/usr/local/share/nvm/versions/node",
-    path71.join(home, ".nvm/versions/node")
+    path72.join(home, ".nvm/versions/node")
   ]) {
     try {
       for (const child of fsSync.readdirSync(root)) {
-        out2.push(path71.join(root, child, "bin"));
+        out2.push(path72.join(root, child, "bin"));
       }
     } catch {
     }
   }
-  out2.push(path71.join(home, ".volta/bin"));
+  out2.push(path72.join(home, ".volta/bin"));
   out2.push("/usr/local/bin");
   out2.push("/usr/bin");
-  out2.push(path71.join(home, ".local/bin"));
-  out2.push(path71.join(home, "bin"));
+  out2.push(path72.join(home, ".local/bin"));
+  out2.push(path72.join(home, "bin"));
   if (process.platform === "win32") {
     const { LOCALAPPDATA, APPDATA } = process.env;
-    if (LOCALAPPDATA) out2.push(path71.join(LOCALAPPDATA, "cursor-agent"));
-    if (APPDATA) out2.push(path71.join(APPDATA, "npm"));
+    if (LOCALAPPDATA) out2.push(path72.join(LOCALAPPDATA, "cursor-agent"));
+    if (APPDATA) out2.push(path72.join(APPDATA, "npm"));
   }
   return out2.filter((p2) => {
     try {
@@ -33320,7 +33521,7 @@ function knownAgentBinaryDirs() {
 }
 function expandPathForAgentBinaries(existingPath) {
   const existing = new Set(
-    existingPath.split(path71.delimiter).filter((p2) => p2.length > 0)
+    existingPath.split(path72.delimiter).filter((p2) => p2.length > 0)
   );
   const additions = [];
   for (const dir of knownAgentBinaryDirs()) {
@@ -33330,7 +33531,7 @@ function expandPathForAgentBinaries(existingPath) {
     }
   }
   if (additions.length === 0) return existingPath;
-  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path71.delimiter);
+  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path72.delimiter);
 }
 
 // src/agents/acp/headroom-budget-proxy.ts
@@ -33812,15 +34013,15 @@ function commonPrefixLength(a, b) {
 
 // src/agents/acp/onboarding.ts
 var import_child_process27 = require("child_process");
-var fs66 = __toESM(require("fs"));
-var os55 = __toESM(require("os"));
-var path72 = __toESM(require("path"));
+var fs67 = __toESM(require("fs"));
+var os56 = __toESM(require("os"));
+var path73 = __toESM(require("path"));
 var _onboardingSeam = {
-  markerPath: (sessionId) => path72.join(os55.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
-  exists: (p2) => fs66.existsSync(p2),
+  markerPath: (sessionId) => path73.join(os56.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
+  exists: (p2) => fs67.existsSync(p2),
   write: (p2) => {
-    fs66.mkdirSync(path72.dirname(p2), { recursive: true });
-    fs66.writeFileSync(p2, "");
+    fs67.mkdirSync(path73.dirname(p2), { recursive: true });
+    fs67.writeFileSync(p2, "");
   },
   disabled: () => {
     const v = process.env.CODEAM_ONBOARDING_DISABLED;
@@ -33857,7 +34058,7 @@ function resolveRepoName(cwd) {
       if (name) return name;
     }
   }
-  const base = path72.basename(cwd || "");
+  const base = path73.basename(cwd || "");
   if (base && !isUuid(base)) return base;
   return "this project";
 }
@@ -34115,13 +34316,13 @@ var import_crypto5 = require("crypto");
 
 // src/services/turn-files/git-changeset.ts
 var import_child_process28 = require("child_process");
-var fs68 = __toESM(require("fs/promises"));
-var path74 = __toESM(require("path"));
+var fs69 = __toESM(require("fs/promises"));
+var path75 = __toESM(require("path"));
 
 // src/services/turn-files/review-ignore.ts
 var import_ignore2 = __toESM(require("ignore"));
-var fs67 = __toESM(require("fs"));
-var path73 = __toESM(require("path"));
+var fs68 = __toESM(require("fs"));
+var path74 = __toESM(require("path"));
 var CURATED_REVIEW_IGNORE = [
   // Google Cloud SDK (the incident) — installs a huge python tree.
   "google-cloud-sdk/",
@@ -34160,7 +34361,7 @@ var CURATED_REVIEW_IGNORE = [
 function makeReviewIgnore(repoRoot) {
   const ig = (0, import_ignore2.default)().add(CURATED_REVIEW_IGNORE);
   try {
-    const custom = fs67.readFileSync(path73.join(repoRoot, ".codeam", "reviewignore"), "utf8");
+    const custom = fs68.readFileSync(path74.join(repoRoot, ".codeam", "reviewignore"), "utf8");
     ig.add(custom);
   } catch {
   }
@@ -34205,7 +34406,7 @@ async function collectRepoChangeset(opts) {
     let stats;
     if (!truncated && row.fileStatus === "added" && numstatEntry === void 0) {
       const lineCount = await readUntrackedLineCount(
-        path74.join(opts.repoRoot, row.filePath)
+        path75.join(opts.repoRoot, row.filePath)
       );
       stats = { added: lineCount, removed: 0 };
     } else {
@@ -34236,7 +34437,7 @@ function readUntrackedLineCount(absPath) {
 }
 async function defaultReadUntrackedLineCount(absPath) {
   try {
-    const content = await fs68.readFile(absPath, "utf8");
+    const content = await fs69.readFile(absPath, "utf8");
     let count = 0;
     let pos = -1;
     while ((pos = content.indexOf("\n", pos + 1)) !== -1) {
@@ -34328,7 +34529,7 @@ function defaultRunGit(cwd, args2) {
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs75 = await import("fs/promises");
+  const fs77 = await import("fs/promises");
   const out2 = [];
   await walk(workingDir, 0);
   return out2;
@@ -34336,7 +34537,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (depth > maxDepth) return;
     let entries = [];
     try {
-      const dirents = await fs75.readdir(dir, { withFileTypes: true });
+      const dirents = await fs77.readdir(dir, { withFileTypes: true });
       entries = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -34347,8 +34548,8 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (hasGit) {
       out2.push({
         repoRoot: dir,
-        repoPath: path74.relative(workingDir, dir),
-        repoName: path74.basename(dir)
+        repoPath: path75.relative(workingDir, dir),
+        repoName: path75.basename(dir)
       });
       return;
     }
@@ -34356,14 +34557,14 @@ async function discoverRepos(workingDir, maxDepth = 4) {
       if (!entry.isDirectory) continue;
       if (entry.name === "node_modules") continue;
       if (entry.name === "dist" || entry.name === "build") continue;
-      await walk(path74.join(dir, entry.name), depth + 1);
+      await walk(path75.join(dir, entry.name), depth + 1);
     }
   }
 }
 
 // src/services/turn-files/files-outbox.ts
-var fs69 = __toESM(require("fs/promises"));
-var path75 = __toESM(require("path"));
+var fs70 = __toESM(require("fs/promises"));
+var path76 = __toESM(require("path"));
 var import_os12 = require("os");
 var HOME_OUTBOX_DIR = ".codeam/outbox";
 var MAX_AGE_MS = 24 * 60 * 60 * 1e3;
@@ -34396,16 +34597,16 @@ var FilesOutbox = class {
   backoffIndex = 0;
   stopped = false;
   constructor(opts) {
-    const base = opts.baseDir ?? path75.join(homeDir(), HOME_OUTBOX_DIR);
-    this.filePath = path75.join(base, `${opts.sessionId}.jsonl`);
+    const base = opts.baseDir ?? path76.join(homeDir(), HOME_OUTBOX_DIR);
+    this.filePath = path76.join(base, `${opts.sessionId}.jsonl`);
     this.post = opts.post;
     this.autoSchedule = opts.autoSchedule !== false;
   }
   /** Persist the entry to disk and trigger a flush. Returns once the
    *  line is durable on disk (not once the POST succeeds). */
   async enqueue(entry) {
-    await fs69.mkdir(path75.dirname(this.filePath), { recursive: true });
-    await fs69.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
+    await fs70.mkdir(path76.dirname(this.filePath), { recursive: true });
+    await fs70.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
     this.backoffIndex = 0;
     if (this.autoSchedule) this.scheduleFlush(0);
   }
@@ -34496,7 +34697,7 @@ var FilesOutbox = class {
   async readAll() {
     let raw = "";
     try {
-      raw = await fs69.readFile(this.filePath, "utf8");
+      raw = await fs70.readFile(this.filePath, "utf8");
     } catch {
       return [];
     }
@@ -34520,12 +34721,12 @@ var FilesOutbox = class {
   async rewrite(entries) {
     const tmpPath = `${this.filePath}.${process.pid}.tmp`;
     if (entries.length === 0) {
-      await fs69.unlink(this.filePath).catch(() => void 0);
+      await fs70.unlink(this.filePath).catch(() => void 0);
       return;
     }
     const payload = entries.map((e) => JSON.stringify(e)).join("\n") + "\n";
-    await fs69.writeFile(tmpPath, payload, "utf8");
-    await fs69.rename(tmpPath, this.filePath);
+    await fs70.writeFile(tmpPath, payload, "utf8");
+    await fs70.rename(tmpPath, this.filePath);
   }
 };
 function applyJitter(ms) {
@@ -34749,9 +34950,9 @@ function replyIsCursorUpgradeRequired(finalText) {
   if (t2.length === 0 || t2.length > 200) return false;
   return t2.includes("upgrade your plan to continue") || t2.includes("upgrade your plan") && t2.includes("continue");
 }
-function isGeminiIneligibleTier(haystack) {
+function isGeminiIneligibleTier(haystack2) {
   return /IneligibleTierError|UNSUPPORTED_CLIENT|no longer supported for Gemini Code Assist|not eligible for Gemini Code Assist/i.test(
-    haystack
+    haystack2
   );
 }
 var ACP_AGENT_HOOKS = {
@@ -34775,7 +34976,7 @@ var ACP_AGENT_HOOKS = {
   },
   gemini: {
     statusPage: { vendor: "Google", url: "https://status.cloud.google.com" },
-    classifyStartupFailure: (haystack) => isGeminiIneligibleTier(haystack) ? "ineligible_tier" : null
+    classifyStartupFailure: (haystack2) => isGeminiIneligibleTier(haystack2) ? "ineligible_tier" : null
   },
   copilot: {
     statusPage: { vendor: "GitHub", url: "https://www.githubstatus.com" }
@@ -34841,9 +35042,9 @@ The agent provider returned an overload/outage error, so this turn couldn\u2019t
 Follow the status here: [${info.url}](${info.url})` : "");
 }
 function startupFailureMessage(agent, detail, recentStderr) {
-  const haystack = `${detail}
+  const haystack2 = `${detail}
 ${recentStderr}`;
-  if (agentHooks(agent)?.classifyStartupFailure?.(haystack) === "ineligible_tier") {
+  if (agentHooks(agent)?.classifyStartupFailure?.(haystack2) === "ineligible_tier") {
     return [
       "\u26A0\uFE0F **Gemini couldn't start \u2014 your Google account isn't eligible.**",
       "",
@@ -34854,8 +35055,8 @@ ${recentStderr}`;
       "\u2022 a paid **Gemini Code Assist (Standard/Enterprise)** subscription."
     ].join("\n");
   }
-  if (looksLikeAuthFailure(haystack)) return AUTH_FAILURE_MESSAGE;
-  if (looksLikeProviderOutage(haystack)) return providerOutageMessage(agent);
+  if (looksLikeAuthFailure(haystack2)) return AUTH_FAILURE_MESSAGE;
+  if (looksLikeProviderOutage(haystack2)) return providerOutageMessage(agent);
   const tail = recentStderr.split("\n").filter(Boolean).slice(-3).join("\n");
   return [
     `\u26A0\uFE0F The ${agent} agent failed to start.`,
@@ -35153,6 +35354,55 @@ function buildAcpPromptBlocks(payload) {
   return blocks;
 }
 
+// src/agents/agent-standard.ts
+var fs72 = __toESM(require("fs"));
+var path78 = __toESM(require("path"));
+var os57 = __toESM(require("os"));
+function ensureAgentStandard(homeDir2 = os57.homedir()) {
+  try {
+    const file = path78.join(homeDir2, ".claude", "CLAUDE.md");
+    let existing = "";
+    try {
+      existing = fs72.readFileSync(file, "utf8");
+    } catch {
+    }
+    if (existing.includes(AGENT_STANDARD_MARKER)) return;
+    fs72.mkdirSync(path78.dirname(file), { recursive: true });
+    const next = existing.trim() ? `${existing.trimEnd()}
+
+${AGENT_STANDARD_BLOCK}
+` : `${AGENT_STANDARD_BLOCK}
+`;
+    fs72.writeFileSync(file, next);
+  } catch {
+  }
+}
+var _agentStandardSeam = {
+  isLocalSession: () => isLocalSession(),
+  markerPath: (sessionId) => path78.join(os57.homedir(), ".codeam", "agent-standard", `${sessionId}.done`),
+  exists: (p2) => fs72.existsSync(p2),
+  write: (p2) => {
+    fs72.mkdirSync(path78.dirname(p2), { recursive: true });
+    fs72.writeFileSync(p2, "");
+  }
+};
+function isClaude(agent) {
+  return agent === "claude" || agent === "claude_code";
+}
+function maybePrefaceAgentStandard(blocks, agent, sessionId, seam = _agentStandardSeam) {
+  if (seam.isLocalSession()) return;
+  if (isClaude(agent)) return;
+  if (!sessionId) return;
+  const marker = seam.markerPath(sessionId);
+  try {
+    if (seam.exists(marker)) return;
+    seam.write(marker);
+  } catch {
+    return;
+  }
+  blocks.unshift({ type: "text", text: AGENT_STANDARD_TEXT });
+}
+
 // src/agents/acp/promptEcho.ts
 var MAX_PROMPT_CHARS = 200;
 var MAX_AGENT_REPLY_CHARS = 280;
@@ -35270,6 +35520,7 @@ async function startTaskH(ctx) {
   }
   await streaming.beginTurn();
   history.appendUserPrompt(promptText);
+  maybePrefaceAgentStandard(blocks, opts.agent, opts.sessionId);
   let turnClosed = false;
   try {
     const reply = await client3.prompt(blocks);
@@ -35472,6 +35723,10 @@ async function listModesH(ctx) {
   });
   return;
 }
+var FULL_AUTO_MODE_RE = /bypass|yolo|danger|full.?access|skip.?perm|auto.?approve/i;
+function modeIsFullAutoApprove(modeId) {
+  return FULL_AUTO_MODE_RE.test(modeId);
+}
 async function setModeH(ctx) {
   const { cmd, client: client3, relay, opts } = ctx;
   const payload = cmd.payload;
@@ -35482,6 +35737,11 @@ async function setModeH(ctx) {
   }
   try {
     await client3.setMode(modeId);
+    opts.autoApprovePermissions = modeIsFullAutoApprove(modeId);
+    log.info(
+      "acpRunner",
+      `set_mode \u2192 ${modeId} (autoApprovePermissions=${opts.autoApprovePermissions})`
+    );
     await relay.sendResult(cmd.id, "completed", { modeId });
   } catch (err) {
     log.warn("acpRunner", `set_mode failed: ${describeError(err)}`);
@@ -36321,14 +36581,14 @@ var AcpHistory = class {
   async flush() {
     if (this.summary === null || this.messages.length === 0) return;
     const timestamp = Date.now();
-    const current = { id: this.opts.acpSessionId, summary: this.summary, timestamp };
-    let sessions3 = [current];
+    const current2 = { id: this.opts.acpSessionId, summary: this.summary, timestamp };
+    let sessions3 = [current2];
     const listed = this.opts.listSessions ? await this.opts.listSessions() : null;
     if (listed && listed.length > 0) {
       sessions3 = listed.map(
         (s) => s.id === this.opts.acpSessionId && !s.summary ? { ...s, summary: this.summary } : s
       );
-      if (!sessions3.some((s) => s.id === this.opts.acpSessionId)) sessions3.unshift(current);
+      if (!sessions3.some((s) => s.id === this.opts.acpSessionId)) sessions3.unshift(current2);
     }
     await Promise.all([
       this.publisher.pushSessionList({ agentId: this.opts.agent, sessions: sessions3 }),
@@ -36446,6 +36706,7 @@ async function runAcpSession(opts) {
     beginLoadReplay: () => streaming.beginLoadReplay(),
     endLoadReplay: () => streaming.endLoadReplay(),
     onRequestPermission: async (request) => {
+      let guardrailConfirm = false;
       if (!isLocalSession()) {
         const denied = internalPathPermissionOutcome(request);
         if (denied) {
@@ -36455,8 +36716,17 @@ async function runAcpSession(opts) {
           );
           return denied;
         }
+        const g = guardrailDecision(request, getGuardrailPolicy());
+        if (g?.kind === "deny") {
+          log.warn("acpRunner", `guardrail [${g.category}] \u2014 denying tool call`);
+          return g.outcome;
+        }
+        if (g?.kind === "confirm") {
+          guardrailConfirm = true;
+          log.info("acpRunner", `guardrail [${g.category}] \u2014 requiring confirmation`);
+        }
       }
-      if (opts.autoApprovePermissions) {
+      if (opts.autoApprovePermissions && !guardrailConfirm) {
         const allow = pickAllowOption(request.options);
         if (allow) {
           log.info(
@@ -37539,21 +37809,21 @@ var StreamingEmitterService = class {
   classifyLines(lines, runtime) {
     const parseLine2 = runtime.parseTuiChrome?.bind(runtime);
     const groups = [];
-    let current = null;
+    let current2 = null;
     const flush = () => {
-      if (!current) return;
-      const text = current.lines.join("\n").replace(/\n{3,}/g, "\n\n").trim();
-      if (text.length > 0) groups.push({ kind: current.kind, content: text });
-      current = null;
+      if (!current2) return;
+      const text = current2.lines.join("\n").replace(/\n{3,}/g, "\n\n").trim();
+      if (text.length > 0) groups.push({ kind: current2.kind, content: text });
+      current2 = null;
     };
     for (const rawLine of lines) {
       const kind = classifyLine(rawLine, parseLine2, runtime);
       if (kind === null) continue;
-      if (!current || current.kind !== kind) {
+      if (!current2 || current2.kind !== kind) {
         flush();
-        current = { kind, lines: [rawLine] };
+        current2 = { kind, lines: [rawLine] };
       } else {
-        current.lines.push(rawLine);
+        current2.lines.push(rawLine);
       }
     }
     flush();
@@ -37783,9 +38053,9 @@ function startClaudeCredentialSync(opts) {
 }
 
 // src/beads/workflow-hint.ts
-var fs71 = __toESM(require("fs"));
-var path77 = __toESM(require("path"));
-var os56 = __toESM(require("os"));
+var fs73 = __toESM(require("fs"));
+var path79 = __toESM(require("path"));
+var os58 = __toESM(require("os"));
 var BEADS_HINT_MARKER = "<!-- codeam:beads-workflow -->";
 var BEADS_HINT = `${BEADS_HINT_MARKER}
 # Beads (bd) \u2014 task tracking + persistent memory (ALWAYS use it)
@@ -37799,22 +38069,22 @@ This environment uses **bd (beads)** for issue/task tracking and persistent memo
 - \`bd ready\` (available work) \xB7 \`bd show <id>\` \xB7 \`bd update <id> --claim\` \xB7 \`bd close <id>\`.
 - Use \`bd remember "..."\` for persistent knowledge \u2014 do NOT use MEMORY.md files.
 ${BEADS_HINT_MARKER}`;
-function ensureBeadsWorkflowHint(homeDir2 = os56.homedir()) {
+function ensureBeadsWorkflowHint(homeDir2 = os58.homedir()) {
   try {
-    const file = path77.join(homeDir2, ".claude", "CLAUDE.md");
+    const file = path79.join(homeDir2, ".claude", "CLAUDE.md");
     let existing = "";
     try {
-      existing = fs71.readFileSync(file, "utf8");
+      existing = fs73.readFileSync(file, "utf8");
     } catch {
     }
     if (existing.includes(BEADS_HINT_MARKER)) return;
-    fs71.mkdirSync(path77.dirname(file), { recursive: true });
+    fs73.mkdirSync(path79.dirname(file), { recursive: true });
     const next = existing.trim() ? `${existing.trimEnd()}
 
 ${BEADS_HINT}
 ` : `${BEADS_HINT}
 `;
-    fs71.writeFileSync(file, next);
+    fs73.writeFileSync(file, next);
   } catch {
   }
 }
@@ -37905,14 +38175,14 @@ var BatonController = class {
   async shutdown() {
     await Promise.allSettled([this.deps.local.stop(), this.deps.mobile.stop()]);
   }
-  async switchDriver(from, current, next, to, nextKind) {
+  async switchDriver(from, current2, next, to, nextKind) {
     if (this._state !== from) return;
     this.setState("SWITCHING");
     const priorActive = this._active;
     const priorConversationId = this._conversationId;
     try {
-      await current.whenSafeToYield();
-      await current.stop();
+      await current2.whenSafeToYield();
+      await current2.stop();
       this._conversationId = await next.start(this._conversationId ?? void 0);
       this._active = nextKind;
       this.setState(to);
@@ -38186,7 +38456,7 @@ var AcpDriver = class {
 };
 
 // src/baton/transcript-mirror.ts
-var fs72 = __toESM(require("fs"));
+var fs74 = __toESM(require("fs"));
 var TranscriptMirror = class {
   constructor(deps) {
     this.deps = deps;
@@ -38253,7 +38523,7 @@ var TranscriptMirror = class {
   }
 };
 function defaultWatch(file, onChange) {
-  const w3 = fs72.watch(file, { persistent: false }, () => onChange());
+  const w3 = fs74.watch(file, { persistent: false }, () => onChange());
   return () => w3.close();
 }
 
@@ -38515,16 +38785,16 @@ function toEpochMs(ts) {
 }
 
 // src/agents/claude/onboarding.ts
-var fs73 = __toESM(require("fs"));
-var os58 = __toESM(require("os"));
-var path78 = __toESM(require("path"));
+var fs75 = __toESM(require("fs"));
+var os60 = __toESM(require("os"));
+var path80 = __toESM(require("path"));
 var ONBOARDING_VERSION_SENTINEL = "9999.0.0";
 function ensureClaudeOnboarded(cwd) {
   try {
-    const file = path78.join(os58.homedir(), ".claude.json");
+    const file = path80.join(os60.homedir(), ".claude.json");
     let config = {};
     try {
-      config = JSON.parse(fs73.readFileSync(file, "utf8"));
+      config = JSON.parse(fs75.readFileSync(file, "utf8"));
     } catch {
     }
     let changed = false;
@@ -38549,8 +38819,8 @@ function ensureClaudeOnboarded(cwd) {
       }
     }
     if (!changed) return;
-    fs73.mkdirSync(path78.dirname(file), { recursive: true });
-    fs73.writeFileSync(file, JSON.stringify(config, null, 2));
+    fs75.mkdirSync(path80.dirname(file), { recursive: true });
+    fs75.writeFileSync(file, JSON.stringify(config, null, 2));
     log.info(
       "claude",
       `pre-completed Claude onboarding${cwd ? ` + trusted workspace ${cwd}` : ""}`
@@ -38653,6 +38923,9 @@ async function start(requestedAgent, presetSession) {
   let beads = null;
   const getBeads = () => beads;
   ensureBeadsWorkflowHint();
+  if (!isLocalSession() && session.agent === "claude") {
+    ensureAgentStandard();
+  }
   const beadsReady = provisionBeadsForStart({
     sessionId: session.id,
     pluginId,
@@ -39277,7 +39550,7 @@ var import_picocolors11 = __toESM(require("picocolors"));
 var import_child_process29 = require("child_process");
 var import_util4 = require("util");
 var import_picocolors9 = __toESM(require("picocolors"));
-var path79 = __toESM(require("path"));
+var path81 = __toESM(require("path"));
 var execFileP6 = (0, import_util4.promisify)(import_child_process29.execFile);
 var MAX_BUFFER = 8 * 1024 * 1024;
 function resetStdinForChild() {
@@ -39766,7 +40039,7 @@ var GitHubCodespacesProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path79.posix.dirname(remotePath);
+    const remoteDir = path81.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote(remoteDir)}`,
       `cat > ${shellQuote(remotePath)}`
@@ -39836,7 +40109,7 @@ function shellQuote(s) {
 // src/services/providers/gitpod.ts
 var import_child_process30 = require("child_process");
 var import_util5 = require("util");
-var path80 = __toESM(require("path"));
+var path82 = __toESM(require("path"));
 var import_picocolors10 = __toESM(require("picocolors"));
 var execFileP7 = (0, import_util5.promisify)(import_child_process30.execFile);
 var MAX_BUFFER2 = 8 * 1024 * 1024;
@@ -40076,7 +40349,7 @@ var GitpodProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path80.posix.dirname(remotePath);
+    const remoteDir = path82.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote2(remoteDir)}`,
       `cat > ${shellQuote2(remotePath)}`
@@ -40112,7 +40385,7 @@ function shellQuote2(s) {
 // src/services/providers/gitlab-workspaces.ts
 var import_child_process31 = require("child_process");
 var import_util6 = require("util");
-var path81 = __toESM(require("path"));
+var path83 = __toESM(require("path"));
 var execFileP8 = (0, import_util6.promisify)(import_child_process31.execFile);
 var MAX_BUFFER3 = 8 * 1024 * 1024;
 var GITLAB_API_BASE = process.env.CODEAM_GITLAB_API_URL ?? "https://gitlab.com/api/v4";
@@ -40372,7 +40645,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
-    const remoteDir = path81.posix.dirname(remotePath);
+    const remoteDir = path83.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote3(remoteDir)}`, `cat > ${shellQuote3(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote3(remotePath)}`);
@@ -40409,8 +40682,8 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
         ["auth", "status", "--show-token"],
         { maxBuffer: MAX_BUFFER3 }
       );
-      const haystack = stdout + "\n" + stderr;
-      const m = haystack.match(/Token:\s+(\S+)/);
+      const haystack2 = stdout + "\n" + stderr;
+      const m = haystack2.match(/Token:\s+(\S+)/);
       return m?.[1] ?? null;
     } catch {
       return null;
@@ -40440,7 +40713,7 @@ function shellQuote3(s) {
 // src/services/providers/railway.ts
 var import_child_process32 = require("child_process");
 var import_util7 = require("util");
-var path82 = __toESM(require("path"));
+var path84 = __toESM(require("path"));
 var execFileP9 = (0, import_util7.promisify)(import_child_process32.execFile);
 var MAX_BUFFER4 = 8 * 1024 * 1024;
 function resetStdinForChild4() {
@@ -40676,7 +40949,7 @@ var RailwayProvider = class {
     if (!projectId || !serviceId) {
       throw new Error("Invalid Railway workspace id (expected projectId/serviceId).");
     }
-    const remoteDir = path82.posix.dirname(remotePath);
+    const remoteDir = path84.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote4(remoteDir)}`, `cat > ${shellQuote4(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote4(remotePath)}`);
@@ -41322,8 +41595,8 @@ async function invite() {
 var import_node_dns = require("dns");
 var import_node_util5 = require("util");
 var import_node_crypto13 = require("crypto");
-var fs74 = __toESM(require("fs"));
-var path83 = __toESM(require("path"));
+var fs76 = __toESM(require("fs"));
+var path85 = __toESM(require("path"));
 var import_picocolors14 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util5.promisify)(import_node_dns.resolve);
 async function checkDns(apiBase2) {
@@ -41379,13 +41652,13 @@ async function checkHealth(apiBase2) {
   }
 }
 function checkConfigDir() {
-  const dir = path83.join(require("os").homedir(), ".codeam");
+  const dir = path85.join(require("os").homedir(), ".codeam");
   try {
-    fs74.mkdirSync(dir, { recursive: true, mode: 448 });
-    const probe = path83.join(dir, ".doctor-probe");
-    fs74.writeFileSync(probe, "ok", { mode: 384 });
-    const read2 = fs74.readFileSync(probe, "utf8");
-    fs74.unlinkSync(probe);
+    fs76.mkdirSync(dir, { recursive: true, mode: 448 });
+    const probe = path85.join(dir, ".doctor-probe");
+    fs76.writeFileSync(probe, "ok", { mode: 384 });
+    const read2 = fs76.readFileSync(probe, "utf8");
+    fs76.unlinkSync(probe);
     if (read2 !== "ok") throw new Error("write/read round-trip mismatch");
     return {
       id: "config-dir",
@@ -41425,9 +41698,9 @@ function checkSessions() {
   }
 }
 function checkAgentBinaries() {
-  const os61 = createOsStrategy();
+  const os63 = createOsStrategy();
   return getEnabledAgents().map((meta) => {
-    const found = os61.findInPath(meta.binaryName);
+    const found = os63.findInPath(meta.binaryName);
     return {
       id: `agent-${meta.id}`,
       label: `Agent binary: ${meta.displayName} (${meta.binaryName})`,
@@ -41449,7 +41722,7 @@ function checkNodePty() {
       detail: "not required on this platform"
     };
   }
-  const vendoredPath = path83.join(__dirname, "vendor", "node-pty");
+  const vendoredPath = path85.join(__dirname, "vendor", "node-pty");
   for (const target of [vendoredPath, "node-pty"]) {
     try {
       require(target);
@@ -41491,7 +41764,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.61.88" : "0.0.0-dev";
+  const cliVersion = true ? "2.61.90" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -41863,18 +42136,18 @@ async function mcpRun(args2) {
     pluginAuthToken,
     pollSecret: process.env.CODEAM_MCP_POLL_SECRET
   });
-  let current = null;
+  let current2 = null;
   const proxy = new RestartableStdioProxy({
     spawnSpec: async () => {
-      current = await client3.getToken(id);
+      current2 = await client3.getToken(id);
       const env = { ...delivery.staticEnv };
       for (const [envVar, field] of Object.entries(delivery.envMapping)) {
-        const value = current[field];
+        const value = current2[field];
         if (typeof value === "string" && value) env[envVar] = value;
       }
       return { command: launcher, args: delivery.args, env };
     },
-    shouldRestartNow: () => current !== null && new Date(current.expiresAt).getTime() - Date.now() < RESTART_AHEAD_MS
+    shouldRestartNow: () => current2 !== null && new Date(current2.expiresAt).getTime() - Date.now() < RESTART_AHEAD_MS
   });
   await proxy.start();
 }
@@ -41882,7 +42155,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.61.88" : "unknown";
+  const v = true ? "2.61.90" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 
@@ -42031,10 +42304,10 @@ var EXIT_CODE_NAMES = {
 };
 
 // src/index.ts
-var os60 = __toESM(require("os"));
+var os62 = __toESM(require("os"));
 if (!process.env.HOME) {
   try {
-    const home = os60.homedir();
+    const home = os62.homedir();
     if (home) process.env.HOME = home;
   } catch {
   }