codeam-cli 2.62.0 → 2.62.2

package/dist/index.js

@@ -3120,11 +3120,11 @@ function quiet(fn) {
     log.debug(TAG, "ignored sync error", err);
   }
 }
-function rmIfExistsQuiet(path89) {
+function rmIfExistsQuiet(path90) {
   try {
-    fs2.rmSync(path89, { force: true });
+    fs2.rmSync(path90, { force: true });
   } catch (err) {
-    log.debug(TAG, `rmIfExists failed for ${path89}`, err);
+    log.debug(TAG, `rmIfExists failed for ${path90}`, err);
   }
 }
 function killQuiet(target, signal = "SIGTERM") {
@@ -3272,7 +3272,7 @@ var { getConfig, ensurePluginId, addSession, removeSession, setActiveSession, ge
 // src/commands/pair-auto.ts
 var fs63 = __toESM(require("fs"));
 var os52 = __toESM(require("os"));
-var path67 = __toESM(require("path"));
+var path68 = __toESM(require("path"));
 var import_crypto4 = require("crypto");
 
 // src/services/telemetry.service.ts
@@ -3308,8 +3308,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? (0, import_pat
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path89) {
-  return path89.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path90) {
+  return path90.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 
 // ../../node_modules/@posthog/core/dist/featureFlagUtils.mjs
@@ -5789,9 +5789,9 @@ async function addSourceContext(frames) {
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-function getContextLinesFromFile(path89, ranges, output) {
+function getContextLinesFromFile(path90, ranges, output) {
   return new Promise((resolve9) => {
-    const stream = (0, import_node_fs.createReadStream)(path89);
+    const stream = (0, import_node_fs.createReadStream)(path90);
     const lineReaded = (0, import_node_readline.createInterface)({
       input: stream
     });
@@ -5806,7 +5806,7 @@ function getContextLinesFromFile(path89, ranges, output) {
     let rangeStart = range[0];
     let rangeEnd = range[1];
     function onStreamError() {
-      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path89, 1);
+      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path90, 1);
       lineReaded.close();
       lineReaded.removeAllListeners();
       destroyStreamAndResolve();
@@ -5867,8 +5867,8 @@ function clearLineContext(frame) {
   delete frame.context_line;
   delete frame.post_context;
 }
-function shouldSkipContextLinesForFile(path89) {
-  return path89.startsWith("node:") || path89.endsWith(".min.js") || path89.endsWith(".min.cjs") || path89.endsWith(".min.mjs") || path89.startsWith("data:");
+function shouldSkipContextLinesForFile(path90) {
+  return path90.startsWith("node:") || path90.endsWith(".min.js") || path90.endsWith(".min.cjs") || path90.endsWith(".min.mjs") || path90.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame) {
   if (void 0 !== frame.lineno && frame.lineno > MAX_CONTEXTLINES_LINENO) return true;
@@ -8022,7 +8022,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.62.0" : "0.0.0-dev",
+    cliVersion: true ? "2.62.2" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -8203,7 +8203,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.62.0",
+  version: "2.62.2",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -8863,6 +8863,7 @@ function computePollDelay({ baseMs, failures }) {
 var fs7 = __toESM(require("fs"));
 var os7 = __toESM(require("os"));
 var path6 = __toESM(require("path"));
+var net = __toESM(require("net"));
 
 // src/services/headroom/proxy-process.ts
 var import_child_process2 = require("child_process");
@@ -8915,12 +8916,13 @@ function isPidAlive(pid) {
     return false;
   }
 }
-function pidLooksLikeProxy(pid) {
+function pidLooksLikeProxy(pid, opts = {}) {
   try {
     const cmd = fs5.readFileSync(`/proc/${pid}/cmdline`, "utf8").replace(/\0/g, " ").toLowerCase();
     if (cmd.trim() === "") return false;
     return cmd.includes("headroom") && cmd.includes("proxy");
   } catch {
+    if (opts.strict) return false;
     return isPidAlive(pid);
   }
 }
@@ -8959,7 +8961,7 @@ function findRunningProxyPid() {
     if (!/^\d+$/.test(name)) continue;
     const pid = Number(name);
     if (pid === process.pid) continue;
-    if (pidLooksLikeProxy(pid)) return pid;
+    if (pidLooksLikeProxy(pid, { strict: true })) return pid;
   }
   return null;
 }
@@ -9088,6 +9090,7 @@ function spawnHeadroomProxy(logging, opts = {}) {
 
 // src/services/headroom/proxy-supervisor.ts
 var PROXY_STARTUP_GRACE_MS = 45e3;
+var PRE_TURN_READY_TIMEOUT_MS = 15e4;
 async function ensureHeadroomProxy(deps) {
   if (!deps.isConfigured()) return "skip";
   let alive = false;
@@ -9119,11 +9122,19 @@ async function ensureHeadroomProxyReady(deps, opts = {}) {
   (deps.spawnProxyForce ?? deps.spawnProxy)();
   const sleep5 = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   const pollMs = opts.pollMs ?? 1500;
-  const maxPolls = Math.max(1, Math.ceil((opts.timeoutMs ?? 6e4) / pollMs));
+  const maxPolls = Math.max(1, Math.ceil((opts.timeoutMs ?? PRE_TURN_READY_TIMEOUT_MS) / pollMs));
   for (let i = 0; i < maxPolls; i += 1) {
     await sleep5(pollMs);
+    const elapsed = (i + 1) * pollMs / 1e3;
     if (await deps.probeAlive().catch(() => false)) {
-      log.info("headroom-supervisor", `proxy :8787 ready after ~${(i + 1) * pollMs / 1e3}s`);
+      log.info("headroom-supervisor", `proxy :8787 ready after ~${elapsed}s`);
+      return true;
+    }
+    if (await (deps.probePortOpen?.() ?? Promise.resolve(false)).catch(() => false)) {
+      log.info(
+        "headroom-supervisor",
+        `proxy :8787 accepting connections after ~${elapsed}s (still warming \u2014 turn is safe to send)`
+      );
       return true;
     }
   }
@@ -9166,6 +9177,20 @@ async function probeProxyAliveReal() {
     clearTimeout(timer);
   }
 }
+async function probeProxyPortOpenReal() {
+  return new Promise((resolve9) => {
+    const socket = net.connect({ host: "127.0.0.1", port: 8787 });
+    const done = (ok) => {
+      socket.removeAllListeners();
+      socket.destroy();
+      resolve9(ok);
+    };
+    socket.setTimeout(2e3);
+    socket.once("connect", () => done(true));
+    socket.once("timeout", () => done(false));
+    socket.once("error", () => done(false));
+  });
+}
 function spawnProxyReal() {
   spawnHeadroomProxy({
     tag: "headroom-supervisor",
@@ -9177,6 +9202,7 @@ function makeRealProxySupervisorDeps() {
   return {
     isConfigured: () => isHeadroomConfiguredReal(),
     probeAlive: probeProxyAliveReal,
+    probePortOpen: probeProxyPortOpenReal,
     proxyProcessAlive: () => isHeadroomProxyProcessAlive(),
     proxyStartupAgeMs: () => headroomProxyPidfileAgeMs(Date.now()),
     adoptRunningProxy: () => adoptRunningProxy(),
@@ -9587,7 +9613,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.62.0" ? { ideVersion: "2.62.0" } : {}
+      ..."2.62.2" ? { ideVersion: "2.62.2" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -9814,10 +9840,10 @@ var WINDOWS_LEGACY_JUNCTIONS = [
   /[\\/]Start Menu([\\/]|$)/i,
   /[\\/]Templates([\\/]|$)/i
 ];
-function isUnsafeWindowsWatchRoot(dir, homedir52) {
+function isUnsafeWindowsWatchRoot(dir, homedir51) {
   const norm = (p2) => p2.replace(/\//g, "\\").replace(/\\+$/, "").toLowerCase();
   const cwd = norm(dir);
-  const home = norm(homedir52);
+  const home = norm(homedir51);
   if (cwd === home) return true;
   if (/^[a-z]:$/.test(cwd)) return true;
   const sysRoots = [
@@ -10963,7 +10989,7 @@ function closeAllTerminals() {
 // src/commands/start/handlers.ts
 var fs62 = __toESM(require("fs"));
 var os51 = __toESM(require("os"));
-var path66 = __toESM(require("path"));
+var path67 = __toESM(require("path"));
 var import_crypto3 = require("crypto");
 var import_child_process24 = require("child_process");
 
@@ -11796,7 +11822,7 @@ function findGitRoot2(startDir) {
 // src/commands/link.ts
 var import_node_crypto8 = require("crypto");
 var fs31 = __toESM(require("fs"));
-var path35 = __toESM(require("path"));
+var path36 = __toESM(require("path"));
 var import_chokidar = __toESM(require("chokidar"));
 var import_picocolors2 = __toESM(require("picocolors"));
 
@@ -13757,7 +13783,7 @@ function subscribeToPairCompletion(pluginId, onPaired, onTimeout, pollSecret) {
     onPaired(info);
   };
   dispatchers.add(dispatch);
-  const connect = () => {
+  const connect2 = () => {
     if (stopped) return;
     const url2 = new URL(`${API_BASE5}/api/commands/pending/stream`);
     url2.searchParams.set("pluginId", pluginId);
@@ -13783,7 +13809,7 @@ function subscribeToPairCompletion(pluginId, onPaired, onTimeout, pollSecret) {
             `sse status=${res.statusCode}; will reconnect in 1s`
           );
           res.resume();
-          setTimeout(connect, 1e3);
+          setTimeout(connect2, 1e3);
           return;
         }
         let buf = "";
@@ -13798,23 +13824,23 @@ function subscribeToPairCompletion(pluginId, onPaired, onTimeout, pollSecret) {
           }
         });
         res.on("end", () => {
-          if (!stopped) setTimeout(connect, 250);
+          if (!stopped) setTimeout(connect2, 250);
         });
         res.on("error", () => {
-          if (!stopped) setTimeout(connect, 1e3);
+          if (!stopped) setTimeout(connect2, 1e3);
         });
       }
     );
     req.on("error", () => {
-      if (!stopped) setTimeout(connect, 1e3);
+      if (!stopped) setTimeout(connect2, 1e3);
     });
     req.on("timeout", () => {
       req?.destroy();
-      if (!stopped) setTimeout(connect, 250);
+      if (!stopped) setTimeout(connect2, 250);
     });
     req.end();
   };
-  connect();
+  connect2();
   timeoutTimer = setTimeout(() => {
     stop();
     onTimeout();
@@ -16091,55 +16117,478 @@ var CodexDeployStrategy = class {
 };
 
 // src/agents/coderabbit/runtime.ts
-var import_node_child_process8 = require("child_process");
+var import_node_child_process9 = require("child_process");
 
 // src/agents/coderabbit/installer.ts
+var import_node_child_process7 = require("child_process");
+var import_node_fs5 = require("fs");
+var path27 = __toESM(require("path"));
+
+// src/commands/host/os-packages.ts
 var import_node_child_process6 = require("child_process");
-var INSTALL_URL = "https://cli.coderabbit.ai/install.sh";
-async function ensureCoderabbitInstalled(os64) {
-  if (os64.findInPath("coderabbit")) return true;
-  if (os64.id === "win32") {
-    console.error(
-      "\n  \u2717 CodeRabbit on Windows requires WSL.\n    Install the CLI inside your WSL distribution\n    (curl -fsSL https://cli.coderabbit.ai/install.sh | sh)\n    then re-run `codeam link coderabbit` from WSL.\n"
+var PM_INSTALL_TIMEOUT_MS = 18e4;
+var defaultHeadroomRunner = {
+  which(cmd) {
+    try {
+      (0, import_node_child_process6.execFileSync)("which", [cmd], { stdio: "ignore" });
+      return true;
+    } catch {
+      return false;
+    }
+  },
+  run(cmd, args2, opts = {}) {
+    return new Promise((resolve9) => {
+      const spawnEnv = opts.env ?? process.env;
+      const child = (0, import_node_child_process6.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"], env: spawnEnv });
+      let stderrBuf = "";
+      let stdoutBuf = "";
+      let settled = false;
+      const done = (code) => {
+        if (settled) return;
+        settled = true;
+        resolve9({ code, stderr: stderrBuf, stdout: stdoutBuf });
+      };
+      child.stdout?.on("data", (b) => {
+        const chunk = b.toString();
+        stdoutBuf += chunk;
+        const line = chunk.replace(/\n+$/, "");
+        if (line) log.info("host-agent", `headroom[${cmd}]: ${line}`);
+      });
+      child.stderr?.on("data", (b) => {
+        const chunk = b.toString();
+        stderrBuf += chunk;
+        const line = chunk.replace(/\n+$/, "");
+        if (line) log.info("host-agent", `headroom[${cmd}]: ${line}`);
+      });
+      const timeoutMs = opts.timeoutMs;
+      let timer;
+      if (timeoutMs !== void 0) {
+        timer = setTimeout(() => {
+          log.warn(
+            "host-agent",
+            `headroom[${cmd}] timed out after ${timeoutMs / 1e3}s \u2014 aborting`
+          );
+          killQuiet(child);
+          done(null);
+        }, timeoutMs);
+      }
+      child.once("exit", (code) => {
+        if (timer !== void 0) clearTimeout(timer);
+        done(code);
+      });
+      child.once("error", (e) => {
+        if (timer !== void 0) clearTimeout(timer);
+        log.trace("host-agent", `headroom[${cmd}] spawn error: ${e.message}`);
+        done(null);
+      });
+    });
+  }
+};
+var PACKAGE_MANAGERS = [
+  "apt-get",
+  "apk",
+  "dnf",
+  "yum",
+  "pacman",
+  "zypper"
+];
+var PROVISION_RECIPES = {
+  "apt-get": {
+    update: ["apt-get", "update"],
+    install: [
+      "apt-get",
+      "install",
+      "-y",
+      "python3",
+      "python3-pip",
+      "python3-venv",
+      "ca-certificates",
+      "curl"
+    ]
+  },
+  apk: {
+    install: ["apk", "add", "--no-cache", "python3", "py3-pip", "ca-certificates", "curl"]
+  },
+  dnf: {
+    install: ["dnf", "install", "-y", "python3", "python3-pip", "ca-certificates", "curl"]
+  },
+  yum: {
+    install: ["yum", "install", "-y", "python3", "python3-pip", "ca-certificates", "curl"]
+  },
+  pacman: {
+    install: ["pacman", "-Sy", "--noconfirm", "python", "python-pip", "ca-certificates", "curl"]
+  },
+  zypper: {
+    install: [
+      "zypper",
+      "--non-interactive",
+      "install",
+      "python3",
+      "python3-pip",
+      "ca-certificates",
+      "curl"
+    ]
+  }
+};
+function detectPackageManager(runner) {
+  for (const pm of PACKAGE_MANAGERS) {
+    if (runner.which(pm)) return pm;
+  }
+  return null;
+}
+var INSTALL_ARGV_PREFIX = {
+  "apt-get": ["apt-get", "install", "-y", "--no-install-recommends"],
+  apk: ["apk", "add", "--no-cache"],
+  dnf: ["dnf", "install", "-y"],
+  yum: ["yum", "install", "-y"],
+  pacman: ["pacman", "-Sy", "--noconfirm"],
+  zypper: ["zypper", "--non-interactive", "install"]
+};
+function osPackageInstallArgv(pm, packages) {
+  if (pm === null || packages.length === 0) return null;
+  return [...INSTALL_ARGV_PREFIX[pm], ...packages];
+}
+function escalateCommand(argv) {
+  const isRoot = process.getuid?.() === 0;
+  return isRoot ? { cmd: argv[0], args: argv.slice(1) } : { cmd: "sudo", args: argv };
+}
+async function ensurePip(runner) {
+  if (runner.which("pip") || runner.which("pip3")) {
+    return true;
+  }
+  const pm = detectPackageManager(runner);
+  if (!pm) {
+    log.warn(
+      "host-agent",
+      "pip is absent and no known package manager (apt-get/apk/dnf/yum/pacman/zypper) found \u2014 skipping Headroom"
+    );
+    return false;
+  }
+  const escalate = escalateCommand;
+  const recipe = PROVISION_RECIPES[pm];
+  log.info(
+    "host-agent",
+    `pip absent \u2014 provisioning bare box (python3+pip+ca-certificates+curl) via ${pm}`
+  );
+  try {
+    if (recipe.update) {
+      const { cmd: cmd2, args: args3 } = escalate(recipe.update);
+      const updateResult = await runner.run(cmd2, args3, { timeoutMs: PM_INSTALL_TIMEOUT_MS });
+      if (updateResult.code !== 0) {
+        log.warn(
+          "host-agent",
+          `${pm} update exited ${String(updateResult.code)} \u2014 attempting install anyway`
+        );
+      }
+    }
+    const { cmd, args: args2 } = escalate(recipe.install);
+    const installResult = await runner.run(cmd, args2, { timeoutMs: PM_INSTALL_TIMEOUT_MS });
+    if (installResult.code !== 0) {
+      log.warn(
+        "host-agent",
+        `${pm} bare-box provision failed (code=${String(installResult.code)}) \u2014 skipping Headroom`
+      );
+      return false;
+    }
+  } catch (e) {
+    log.warn(
+      "host-agent",
+      `bare-box provision threw unexpectedly: ${e instanceof Error ? e.message : String(e)} \u2014 skipping Headroom`
     );
     return false;
   }
-  console.log("\n  CodeRabbit CLI not found \u2014 installing via the official script\u2026\n");
-  const ok = await new Promise((resolve9) => {
-    const INSTALL_TIMEOUT_MS2 = 15e4;
-    const proc = (0, import_node_child_process6.spawn)(
+  log.info("host-agent", `bare box provisioned via ${pm} (python3+pip+ca-certificates+curl)`);
+  return true;
+}
+async function resolveHeadroomPython(runner) {
+  const PROBE_TIMEOUT_MS = 5e3;
+  const SUFFIXES = ["python3.13", "python3.12", "python3.11", "python3.10"];
+  const PREFIX_DIRS = ["/opt/homebrew/bin", "/usr/local/bin"];
+  const probe = async (candidate) => {
+    try {
+      const r = await runner.run(
+        candidate,
+        ["-c", 'import sys; print("%d.%d" % sys.version_info[:2])'],
+        { timeoutMs: PROBE_TIMEOUT_MS }
+      );
+      if (r.code !== 0) return false;
+      const parts = (r.stdout ?? "").trim().split(".");
+      const major = parseInt(parts[0] ?? "", 10);
+      const minor = parseInt(parts[1] ?? "", 10);
+      if (!(major === 3 && minor >= 10)) return false;
+      const pipCheck = await runner.run(candidate, ["-m", "pip", "--version"], {
+        timeoutMs: PROBE_TIMEOUT_MS
+      });
+      return pipCheck.code === 0;
+    } catch {
+      return false;
+    }
+  };
+  for (const suffix of SUFFIXES) {
+    try {
+      if (await probe(suffix)) return suffix;
+    } catch {
+    }
+  }
+  for (const suffix of SUFFIXES) {
+    for (const dir of PREFIX_DIRS) {
+      const candidate = `${dir}/${suffix}`;
+      try {
+        if (await probe(candidate)) return candidate;
+      } catch {
+      }
+    }
+  }
+  try {
+    if (await probe("python3")) return "python3";
+  } catch {
+  }
+  return null;
+}
+var PY_INSTALL_TIMEOUT_MS = 6e5;
+var MODERN_PYTHON_RECIPES = {
+  "apt-get": [
+    ["apt-get", "install", "-y", "python3.12"],
+    ["apt-get", "install", "-y", "python3.11"],
+    ["apt-get", "install", "-y", "python3"]
+  ],
+  dnf: [
+    ["dnf", "install", "-y", "python3.12"],
+    ["dnf", "install", "-y", "python3"]
+  ],
+  yum: [
+    ["yum", "install", "-y", "python3.12"],
+    ["yum", "install", "-y", "python3"]
+  ],
+  apk: [["apk", "add", "--no-cache", "python3"]],
+  pacman: [["pacman", "-Sy", "--noconfirm", "python"]],
+  zypper: [
+    ["zypper", "--non-interactive", "install", "python311"],
+    ["zypper", "--non-interactive", "install", "python3"]
+  ]
+};
+async function ensureModernPython(runner) {
+  let py = await resolveHeadroomPython(runner);
+  if (py !== null) return py;
+  try {
+    if (process.platform === "darwin") {
+      if (runner.which("brew")) {
+        log.info("host-agent", "no Python \u22653.10 found \u2014 installing python@3.12 via Homebrew");
+        const r = await runner.run("brew", ["install", "python@3.12"], {
+          timeoutMs: PY_INSTALL_TIMEOUT_MS
+        });
+        if (r.code !== 0) {
+          log.warn(
+            "host-agent",
+            `brew install python@3.12 exited ${String(r.code)} \u2014 will re-probe anyway`
+          );
+        }
+      } else {
+        log.warn(
+          "host-agent",
+          "no Python \u22653.10 and Homebrew is absent \u2014 cannot auto-install Python on macOS"
+        );
+      }
+    } else if (process.platform === "linux") {
+      const pm = detectPackageManager(runner);
+      if (!pm) {
+        log.warn(
+          "host-agent",
+          "no Python \u22653.10 and no known package manager (apt-get/apk/dnf/yum/pacman/zypper) \u2014 cannot auto-install Python"
+        );
+      } else {
+        log.info("host-agent", `no Python \u22653.10 found \u2014 installing a modern Python via ${pm}`);
+        for (const argv of MODERN_PYTHON_RECIPES[pm]) {
+          const { cmd, args: args2 } = escalateCommand(argv);
+          const r = await runner.run(cmd, args2, { timeoutMs: PY_INSTALL_TIMEOUT_MS });
+          if (r.code === 0) {
+            log.info("host-agent", `installed Python package via ${pm}: ${argv.join(" ")}`);
+            break;
+          }
+          log.warn(
+            "host-agent",
+            `${pm} install '${argv.join(" ")}' exited ${String(r.code)} \u2014 trying next`
+          );
+        }
+      }
+    } else {
+      log.warn(
+        "host-agent",
+        `no Python \u22653.10 and platform '${process.platform}' has no auto-install path`
+      );
+    }
+  } catch (e) {
+    log.warn(
+      "host-agent",
+      `Python auto-install threw unexpectedly (best-effort): ${e instanceof Error ? e.message : String(e)}`
+    );
+  }
+  py = await resolveHeadroomPython(runner);
+  return py;
+}
+
+// src/agents/coderabbit/installer.ts
+var INSTALL_URL = "https://cli.coderabbit.ai/install.sh";
+var INSTALL_TIMEOUT_MS = 15e4;
+var PREREQ_INSTALL_TIMEOUT_MS = 12e4;
+var REQUIRED_TOOLS = ["unzip", "git"];
+function manualInstallHint(runner, tools) {
+  const pkgs = tools.join(" ");
+  const argv = osPackageInstallArgv(detectPackageManager(runner), [...tools]);
+  return argv ? `\`sudo ${argv.join(" ")}\`` : `your package manager (e.g. \`${pkgs}\`)`;
+}
+function writeUnzipShim(os64, runner) {
+  const python = ["python3", "python"].find((p2) => runner.which(p2));
+  if (!python) return null;
+  const dir = os64.scratchPath("codeam-cr-prereq");
+  const shim = path27.join(dir, "unzip");
+  const script = `#!/bin/sh
+set -e
+archive=""
+dest="."
+while [ $# -gt 0 ]; do
+  case "$1" in
+    -q|-o|-qq) shift ;;
+    -d) dest="$2"; shift 2 ;;
+    *) if [ -z "$archive" ]; then archive="$1"; fi; shift ;;
+  esac
+done
+[ -n "$archive" ] || { echo "unzip shim: no archive given" >&2; exit 1; }
+mkdir -p "$dest"
+exec ${python} -m zipfile -e "$archive" "$dest"
+`;
+  (0, import_node_fs5.mkdirSync)(dir, { recursive: true });
+  (0, import_node_fs5.writeFileSync)(shim, script, { mode: 448 });
+  (0, import_node_fs5.chmodSync)(shim, 448);
+  return dir;
+}
+async function ensureInstallPrerequisites(os64, deps = {}) {
+  const runner = deps.runner ?? defaultHeadroomRunner;
+  const missing = REQUIRED_TOOLS.filter((t2) => os64.findInPath(t2) === null);
+  if (missing.length === 0) return { ok: true, extraPath: [] };
+  log.info(
+    "coderabbit",
+    `installer prerequisites missing: ${missing.join(", ")} \u2014 attempting to provision them`
+  );
+  const argv = osPackageInstallArgv(detectPackageManager(runner), [...missing]);
+  if (argv) {
+    const isRoot = process.getuid?.() === 0;
+    const cmd = isRoot ? argv[0] : "sudo";
+    const args2 = isRoot ? argv.slice(1) : ["-n", ...argv];
+    const r = await runner.run(cmd, args2, { timeoutMs: PREREQ_INSTALL_TIMEOUT_MS });
+    if (r.code !== 0) {
+      log.warn(
+        "coderabbit",
+        `prerequisite install exited ${String(r.code)} \u2014 falling back to the unprivileged path`
+      );
+    }
+  }
+  const stillMissing = REQUIRED_TOOLS.filter((t2) => os64.findInPath(t2) === null);
+  if (stillMissing.length === 0) return { ok: true, extraPath: [] };
+  if (stillMissing.length === 1 && stillMissing[0] === "unzip") {
+    const shimDir = writeUnzipShim(os64, runner);
+    if (shimDir) {
+      log.info("coderabbit", "unzip is unavailable \u2014 using a scoped python zipfile shim");
+      return { ok: true, extraPath: [shimDir] };
+    }
+  }
+  const list = stillMissing.join(" and ");
+  return {
+    ok: false,
+    error: `CodeRabbit's installer needs ${list} on this machine, and it couldn't be installed automatically (no root / no passwordless sudo). Install it with ${manualInstallHint(runner, stillMissing)} and try again.`
+  };
+}
+function defaultRunInstallScript(env) {
+  return new Promise((resolve9) => {
+    const proc = (0, import_node_child_process7.spawn)(
       "sh",
       ["-c", `curl -fsSL --connect-timeout 15 --max-time 120 ${INSTALL_URL} | sh`],
-      { stdio: "inherit" }
+      { stdio: ["ignore", "pipe", "pipe"], env }
     );
+    let output = "";
     let settled = false;
-    const finish = (v) => {
+    const finish = (code) => {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
-      resolve9(v);
+      resolve9({ code, output });
+    };
+    const onData = (b) => {
+      const chunk = b.toString();
+      output += chunk;
+      const line = chunk.replace(/\n+$/, "");
+      if (line) log.info("coderabbit", `install: ${line}`);
     };
+    proc.stdout?.on("data", onData);
+    proc.stderr?.on("data", onData);
     const timer = setTimeout(() => {
-      console.error("\n  \u2717 CodeRabbit install timed out \u2014 check network egress and retry.\n");
       try {
         proc.kill("SIGKILL");
       } catch {
       }
-      finish(false);
-    }, INSTALL_TIMEOUT_MS2);
-    proc.on("close", (code) => finish(code === 0));
-    proc.on("error", () => finish(false));
+      output += "\ninstall timed out";
+      finish(null);
+    }, INSTALL_TIMEOUT_MS);
+    proc.on("close", (code) => finish(code));
+    proc.on("error", (e) => {
+      output += `
+${e.message}`;
+      finish(null);
+    });
   });
-  if (!ok) return false;
+}
+function summarizeInstallFailure(output) {
+  const clean = output.replace(/\u001b\[[0-9;]*m/g, "");
+  const lines = clean.split(/\r?\n/).map((l) => l.trim()).filter(Boolean);
+  const err = lines.find((l) => /\[ERROR\]|^error[: ]/i.test(l));
+  if (err) {
+    const idx = lines.indexOf(err);
+    const bullets = lines.slice(idx + 1).filter((l) => l.startsWith("- "));
+    const detail = bullets.length > 0 ? ` ${bullets.join(", ")}` : "";
+    return `${err.replace(/^\[ERROR\]\s*/, "")}${detail}`.trim();
+  }
+  return lines.length > 0 ? lines[lines.length - 1] : null;
+}
+async function ensureCoderabbitInstalled(os64, deps = {}) {
+  if (os64.findInPath("coderabbit")) return { ok: true };
+  if (os64.id === "win32") {
+    return {
+      ok: false,
+      error: "CodeRabbit on Windows requires WSL. Install the CLI inside your WSL distribution (curl -fsSL https://cli.coderabbit.ai/install.sh | sh), then try again."
+    };
+  }
+  const prereq = await ensureInstallPrerequisites(os64, deps);
+  if (!prereq.ok) return { ok: false, error: prereq.error };
+  const env = { ...process.env };
+  if (prereq.extraPath.length > 0) {
+    env.PATH = [...prereq.extraPath, process.env.PATH ?? ""].filter(Boolean).join(":");
+  }
+  log.info("coderabbit", "CodeRabbit CLI not found \u2014 installing via the official script");
+  const run = deps.runInstallScript ?? defaultRunInstallScript;
+  const { code, output } = await run(env);
+  if (code !== 0) {
+    const detail = summarizeInstallFailure(output);
+    return {
+      ok: false,
+      error: detail ? `CodeRabbit CLI install failed: ${detail}` : "CodeRabbit CLI install failed \u2014 check this machine's network egress and try again."
+    };
+  }
   os64.augmentPath([`${os64.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
-  return os64.findInPath("coderabbit") !== null;
+  if (os64.findInPath("coderabbit") === null) {
+    const detail = summarizeInstallFailure(output);
+    return {
+      ok: false,
+      error: detail ? `CodeRabbit CLI install did not produce a binary: ${detail}` : "CodeRabbit CLI install reported success but no `coderabbit` binary was found on PATH."
+    };
+  }
+  return { ok: true };
 }
 
 // src/agents/coderabbit/link.ts
-var import_node_child_process7 = require("child_process");
+var import_node_child_process8 = require("child_process");
 var fs23 = __toESM(require("fs"));
 var os21 = __toESM(require("os"));
-var path27 = __toESM(require("path"));
+var path28 = __toESM(require("path"));
 
 // src/agents/strategy.ts
 function validateNonEmptyCredential(token) {
@@ -16148,7 +16597,7 @@ function validateNonEmptyCredential(token) {
 
 // src/agents/coderabbit/link.ts
 function authPath() {
-  return path27.join(os21.homedir(), ".coderabbit", "auth.json");
+  return path28.join(os21.homedir(), ".coderabbit", "auth.json");
 }
 async function extractLocalCoderabbitToken() {
   const file = authPath();
@@ -16170,10 +16619,14 @@ function coderabbitCredentialLocator() {
 function coderabbitLoginLauncher(os64) {
   return {
     async ensureInstalled() {
-      return ensureCoderabbitInstalled(os64);
+      const result = await ensureCoderabbitInstalled(os64);
+      if (!result.ok && result.error) console.error(`
+  \u2717 ${result.error}
+`);
+      return result.ok;
     },
     launch() {
-      return (0, import_node_child_process7.spawn)("coderabbit", ["auth", "login"], { stdio: "inherit" });
+      return (0, import_node_child_process8.spawn)("coderabbit", ["auth", "login"], { stdio: "inherit" });
     }
   };
 }
@@ -16226,8 +16679,8 @@ function pickLine(obj) {
 function toHunk(raw, groupSeverity) {
   if (!raw || typeof raw !== "object") return null;
   const o = raw;
-  const path89 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
-  if (!path89) return null;
+  const path90 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
+  if (!path90) return null;
   const message = asString(
     pick(o, [
       "comment",
@@ -16244,7 +16697,7 @@ function toHunk(raw, groupSeverity) {
   const severity = normSeverity(pick(o, ["severity", "level", "priority", "impact"])) ?? normSeverity(groupSeverity);
   const locObj = pick(o, ["location"]) ?? o;
   return {
-    path: path89.trim(),
+    path: path90.trim(),
     line: pickLine(o) ?? pickLine(locObj),
     severity,
     message: (title && message ? `${title}: ${message}` : title || message).trim() || "(no message)"
@@ -16327,10 +16780,10 @@ function parsePlain(stdout) {
   for (const line of stdout.split(/\r?\n/)) {
     const m = line.match(HUNK_LINE_RE);
     if (!m) continue;
-    const [, path89, lineNo, sevToken, message] = m;
-    if (!path89 || !lineNo || !message) continue;
+    const [, path90, lineNo, sevToken, message] = m;
+    if (!path90 || !lineNo || !message) continue;
     hunks.push({
-      path: path89.trim(),
+      path: path90.trim(),
       line: Number(lineNo),
       severity: sevToken ? SEVERITY_MAP[sevToken.toLowerCase()] : void 0,
       message: message.trim().replace(/^[*-]\s+/, "")
@@ -16430,7 +16883,7 @@ var CoderabbitRuntimeStrategy = class {
     return new Promise((resolve9, reject) => {
       const stdoutBuf = [];
       const stderrBuf = [];
-      const proc = (0, import_node_child_process8.spawn)(launch.cmd, launch.args, {
+      const proc = (0, import_node_child_process9.spawn)(launch.cmd, launch.args, {
         env: { ...process.env, ...launch.env ?? {} },
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -16495,37 +16948,37 @@ CodeRabbit review timed out after ${Math.round(
 // src/agents/cursor/history.ts
 var fs24 = __toESM(require("fs"));
 var os22 = __toESM(require("os"));
-var path28 = __toESM(require("path"));
+var path29 = __toESM(require("path"));
 var import_node_crypto5 = require("crypto");
-var HISTORY_ROOT = path28.join(os22.homedir(), ".cursor", "projects");
-var CURSOR_HOME = path28.join(os22.homedir(), ".cursor");
+var HISTORY_ROOT = path29.join(os22.homedir(), ".cursor", "projects");
+var CURSOR_HOME = path29.join(os22.homedir(), ".cursor");
 var STORE_FILES = ["store.db", "store.db-wal", "store.db-shm"];
 function acpSessionDir(sessionId) {
-  return path28.join(CURSOR_HOME, "acp-sessions", sessionId);
+  return path29.join(CURSOR_HOME, "acp-sessions", sessionId);
 }
 function nativeStoreDir(cwd, sessionId) {
-  const chatsRoot = path28.join(CURSOR_HOME, "chats");
+  const chatsRoot = path29.join(CURSOR_HOME, "chats");
   let buckets = [];
   try {
     buckets = fs24.readdirSync(chatsRoot);
   } catch {
   }
   for (const b of buckets) {
-    const candidate = path28.join(chatsRoot, b, sessionId);
-    if (fs24.existsSync(path28.join(candidate, "store.db"))) return candidate;
+    const candidate = path29.join(chatsRoot, b, sessionId);
+    if (fs24.existsSync(path29.join(candidate, "store.db"))) return candidate;
   }
-  const computed = path28.join(chatsRoot, (0, import_node_crypto5.createHash)("md5").update(cwd).digest("hex"), sessionId);
+  const computed = path29.join(chatsRoot, (0, import_node_crypto5.createHash)("md5").update(cwd).digest("hex"), sessionId);
   return fs24.existsSync(computed) ? computed : null;
 }
 function copyStoreFiles(srcDir, dstDir) {
   fs24.mkdirSync(dstDir, { recursive: true });
   for (const f of STORE_FILES) {
-    const dst = path28.join(dstDir, f);
+    const dst = path29.join(dstDir, f);
     if (fs24.existsSync(dst)) fs24.rmSync(dst, { force: true });
   }
   for (const f of STORE_FILES) {
-    const src = path28.join(srcDir, f);
-    if (fs24.existsSync(src)) fs24.copyFileSync(src, path28.join(dstDir, f));
+    const src = path29.join(srcDir, f);
+    if (fs24.existsSync(src)) fs24.copyFileSync(src, path29.join(dstDir, f));
   }
 }
 function bridgeNativeToAcp(cwd, sessionId) {
@@ -16538,7 +16991,7 @@ function bridgeNativeToAcp(cwd, sessionId) {
     const dst = acpSessionDir(sessionId);
     copyStoreFiles(src, dst);
     fs24.writeFileSync(
-      path28.join(dst, "meta.json"),
+      path29.join(dst, "meta.json"),
       JSON.stringify({ schemaVersion: 1, cwd })
     );
     log.info("cursor", `baton bridge native\u2192acp ok (${sessionId.slice(0, 8)})`);
@@ -16549,11 +17002,11 @@ function bridgeNativeToAcp(cwd, sessionId) {
 function bridgeAcpToNative(cwd, sessionId) {
   try {
     const src = acpSessionDir(sessionId);
-    if (!fs24.existsSync(path28.join(src, "store.db"))) {
+    if (!fs24.existsSync(path29.join(src, "store.db"))) {
       log.warn("cursor", `baton bridge: no acp store for ${sessionId.slice(0, 8)} \u2014 skip`);
       return;
     }
-    const dst = nativeStoreDir(cwd, sessionId) ?? path28.join(CURSOR_HOME, "chats", (0, import_node_crypto5.createHash)("md5").update(cwd).digest("hex"), sessionId);
+    const dst = nativeStoreDir(cwd, sessionId) ?? path29.join(CURSOR_HOME, "chats", (0, import_node_crypto5.createHash)("md5").update(cwd).digest("hex"), sessionId);
     copyStoreFiles(src, dst);
     log.info("cursor", `baton bridge acp\u2192native ok (${sessionId.slice(0, 8)})`);
   } catch (err) {
@@ -16564,8 +17017,8 @@ function encodeCursorCwd(cwd) {
   return cwd.replace(/^[/\\]+/, "").replace(/[/\\:]/g, "-");
 }
 function resolveHistoryFile3(cwd, sessionId, root = HISTORY_ROOT) {
-  const rel = path28.join("agent-transcripts", sessionId, `${sessionId}.jsonl`);
-  const primary = path28.join(root, encodeCursorCwd(cwd), rel);
+  const rel = path29.join("agent-transcripts", sessionId, `${sessionId}.jsonl`);
+  const primary = path29.join(root, encodeCursorCwd(cwd), rel);
   if (fs24.existsSync(primary)) return primary;
   let entries;
   try {
@@ -16575,14 +17028,14 @@ function resolveHistoryFile3(cwd, sessionId, root = HISTORY_ROOT) {
   }
   for (const e of entries) {
     if (!e.isDirectory()) continue;
-    const candidate = path28.join(root, e.name, rel);
+    const candidate = path29.join(root, e.name, rel);
     if (fs24.existsSync(candidate)) return candidate;
   }
   return null;
 }
 function resolveHistoryDir3(cwd) {
   if (!fs24.existsSync(HISTORY_ROOT)) return null;
-  const dir = path28.join(HISTORY_ROOT, encodeCursorCwd(cwd));
+  const dir = path29.join(HISTORY_ROOT, encodeCursorCwd(cwd));
   return fs24.existsSync(dir) ? dir : null;
 }
 function extractText2(content) {
@@ -16631,14 +17084,14 @@ function getCurrentUsage3(_historyDir) {
 }
 
 // src/agents/cursor/link.ts
-var import_node_child_process9 = require("child_process");
+var import_node_child_process10 = require("child_process");
 
 // src/agents/cursor/local-token.ts
 var fs25 = __toESM(require("fs"));
 var os23 = __toESM(require("os"));
-var path29 = __toESM(require("path"));
+var path30 = __toESM(require("path"));
 function cursorCredentialsPath() {
-  return path29.join(os23.homedir(), ".cursor", "auth.json");
+  return path30.join(os23.homedir(), ".cursor", "auth.json");
 }
 async function extractLocalCursorToken() {
   const file = cursorCredentialsPath();
@@ -16672,7 +17125,7 @@ function cursorLoginLauncher(os64) {
       return false;
     },
     launch() {
-      return (0, import_node_child_process9.spawn)("cursor-agent", ["login"], { stdio: "inherit" });
+      return (0, import_node_child_process10.spawn)("cursor-agent", ["login"], { stdio: "inherit" });
     }
   };
 }
@@ -16716,7 +17169,7 @@ function detectCursorSelector(lines) {
 }
 
 // src/agents/cursor/runtime.ts
-var import_node_child_process10 = require("child_process");
+var import_node_child_process11 = require("child_process");
 var UUID_RE = /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i;
 var CURSOR_CONTEXT_WINDOW = 2e5;
 var CURSOR_MODELS = [
@@ -16764,7 +17217,7 @@ var CursorRuntimeStrategy = class {
   mintChatId(binary) {
     try {
       const launch = this.os.buildLaunch(binary, ["create-chat"]);
-      const r = (0, import_node_child_process10.spawnSync)(launch.cmd, launch.args, {
+      const r = (0, import_node_child_process11.spawnSync)(launch.cmd, launch.args, {
         encoding: "utf8",
         timeout: 2e4,
         stdio: ["ignore", "pipe", "pipe"]
@@ -16887,10 +17340,10 @@ var CursorRuntimeStrategy = class {
 
 // src/agents/aider/history.ts
 var fs26 = __toESM(require("fs"));
-var path30 = __toESM(require("path"));
+var path31 = __toESM(require("path"));
 var AIDER_HISTORY_FILE = ".aider.chat.history.md";
 function resolveHistoryDir4(cwd) {
-  const candidate = path30.join(cwd, AIDER_HISTORY_FILE);
+  const candidate = path31.join(cwd, AIDER_HISTORY_FILE);
   return fs26.existsSync(candidate) ? cwd : null;
 }
 function parseHistoryFile4(_filePath) {
@@ -16901,13 +17354,13 @@ function getCurrentUsage4(_historyDir) {
 }
 
 // src/agents/aider/link.ts
-var import_node_child_process11 = require("child_process");
+var import_node_child_process12 = require("child_process");
 
 // src/agents/aider/local-token.ts
 var fs27 = __toESM(require("fs"));
 var os24 = __toESM(require("os"));
-var path31 = __toESM(require("path"));
-var AIDER_CONF_FILE = path31.join(os24.homedir(), ".aider.conf.yml");
+var path32 = __toESM(require("path"));
+var AIDER_CONF_FILE = path32.join(os24.homedir(), ".aider.conf.yml");
 var API_KEY_ENV_VARS = [
   "ANTHROPIC_API_KEY",
   "OPENAI_API_KEY",
@@ -16959,7 +17412,7 @@ function aiderLoginLauncher(os64) {
       console.error(
         "\n  Aider has no interactive login flow.\n    Set ANTHROPIC_API_KEY or OPENAI_API_KEY in your shell,\n    or re-run `codeam link aider --api-key=<your-key>`.\n"
       );
-      return (0, import_node_child_process11.spawn)(os64.id === "win32" ? "cmd.exe" : "sh", os64.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
+      return (0, import_node_child_process12.spawn)(os64.id === "win32" ? "cmd.exe" : "sh", os64.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
         stdio: "ignore"
       });
     }
@@ -17103,14 +17556,14 @@ var AiderRuntimeStrategy = class {
 var import_node_crypto6 = require("crypto");
 
 // src/agents/gemini/link.ts
-var import_node_child_process12 = require("child_process");
+var import_node_child_process13 = require("child_process");
 
 // src/agents/gemini/local-token.ts
 var fs28 = __toESM(require("fs"));
 var os25 = __toESM(require("os"));
-var path32 = __toESM(require("path"));
+var path33 = __toESM(require("path"));
 function geminiCredentialsPath() {
-  return path32.join(os25.homedir(), ".gemini", "oauth_creds.json");
+  return path33.join(os25.homedir(), ".gemini", "oauth_creds.json");
 }
 function geminiCredentialsPaths() {
   return [geminiCredentialsPath()];
@@ -17168,7 +17621,7 @@ function geminiLoginLauncher() {
       return os64.findInPath("gemini") !== null;
     },
     launch() {
-      return (0, import_node_child_process12.spawn)("gemini", ["auth", "login"], { stdio: "inherit" });
+      return (0, import_node_child_process13.spawn)("gemini", ["auth", "login"], { stdio: "inherit" });
     }
   };
 }
@@ -17176,12 +17629,12 @@ function geminiLoginLauncher() {
 // src/agents/gemini/history.ts
 var fs29 = __toESM(require("fs"));
 var os26 = __toESM(require("os"));
-var path33 = __toESM(require("path"));
-var GEMINI_ROOT = path33.join(os26.homedir(), ".gemini");
+var path34 = __toESM(require("path"));
+var GEMINI_ROOT = path34.join(os26.homedir(), ".gemini");
 function projectNameForCwd(cwd, root) {
   try {
     const parsed = JSON.parse(
-      fs29.readFileSync(path33.join(root, "projects.json"), "utf8")
+      fs29.readFileSync(path34.join(root, "projects.json"), "utf8")
     );
     const map = parsed.projects;
     if (map && typeof map === "object") {
@@ -17196,7 +17649,7 @@ function projectNameForCwd(cwd, root) {
   } catch (err) {
     log.debug("gemini", `projects.json unreadable at ${root} \u2014 using basename fallback`, err);
   }
-  return path33.basename(cwd) || null;
+  return path34.basename(cwd) || null;
 }
 function resolveHistoryDir5(cwd, root = GEMINI_ROOT) {
   const name = projectNameForCwd(cwd, root);
@@ -17204,7 +17657,7 @@ function resolveHistoryDir5(cwd, root = GEMINI_ROOT) {
     log.warn("gemini", `resolveHistoryDir \u2014 could not derive a project name for cwd=${cwd}`);
     return null;
   }
-  const dir = path33.join(root, "tmp", name, "chats");
+  const dir = path34.join(root, "tmp", name, "chats");
   if (!fs29.existsSync(dir)) {
     log.debug("gemini", `resolveHistoryDir \u2014 chats dir not present yet: ${dir} (project=${name})`);
     return null;
@@ -17229,10 +17682,10 @@ function resolveHistoryFile4(cwd, sessionId, root = GEMINI_ROOT) {
   const byName = files.find((f) => id8.length > 0 && f.includes(id8));
   if (byName) {
     log.info("gemini", `resolveHistoryFile \u2014 matched by filename id8=${id8}: ${byName}`);
-    return path33.join(dir, byName);
+    return path34.join(dir, byName);
   }
   for (const f of files) {
-    const full = path33.join(dir, f);
+    const full = path34.join(dir, f);
     try {
       const firstLine = fs29.readFileSync(full, "utf8").split("\n", 1)[0] ?? "";
       const hdr = JSON.parse(firstLine);
@@ -17247,7 +17700,7 @@ function resolveHistoryFile4(cwd, sessionId, root = GEMINI_ROOT) {
   let newest = null;
   for (const f of files) {
     try {
-      const mtime = fs29.statSync(path33.join(dir, f)).mtimeMs;
+      const mtime = fs29.statSync(path34.join(dir, f)).mtimeMs;
       if (!newest || mtime > newest.mtime) newest = { file: f, mtime };
     } catch {
     }
@@ -17256,7 +17709,7 @@ function resolveHistoryFile4(cwd, sessionId, root = GEMINI_ROOT) {
     "gemini",
     `resolveHistoryFile \u2014 no id8=${id8} match among ${files.length} file(s) in ${dir}; falling back to newest=${newest?.file ?? "none"}`
   );
-  return newest ? path33.join(dir, newest.file) : null;
+  return newest ? path34.join(dir, newest.file) : null;
 }
 function extractGeminiText(content) {
   const fromParts = (arr) => Array.isArray(arr) ? arr.map((p2) => {
@@ -17325,7 +17778,7 @@ function parseHistoryFile5(filePath) {
   }
   log.trace(
     "gemini",
-    `parseHistoryFile \u2014 ${out2.length} turn(s) from ${path33.basename(filePath)}` + (malformed > 0 ? ` (${malformed} malformed line(s) skipped)` : "")
+    `parseHistoryFile \u2014 ${out2.length} turn(s) from ${path34.basename(filePath)}` + (malformed > 0 ? ` (${malformed} malformed line(s) skipped)` : "")
   );
   return out2;
 }
@@ -17464,39 +17917,39 @@ var GeminiRuntimeStrategy = class {
 };
 
 // src/agents/kimi/runtime.ts
-var import_node_child_process13 = require("child_process");
+var import_node_child_process14 = require("child_process");
 var import_node_os3 = require("os");
 var import_node_path4 = require("path");
 
 // src/agents/kimi/history.ts
 var fs30 = __toESM(require("fs"));
 var os27 = __toESM(require("os"));
-var path34 = __toESM(require("path"));
+var path35 = __toESM(require("path"));
 var import_node_crypto7 = require("crypto");
 function kimiHome() {
-  return process.env.KIMI_CODE_HOME || path34.join(os27.homedir(), ".kimi-code");
+  return process.env.KIMI_CODE_HOME || path35.join(os27.homedir(), ".kimi-code");
 }
 function workDirKey(cwd) {
   const hash = (0, import_node_crypto7.createHash)("sha256").update(cwd).digest("hex").slice(0, 12);
-  return `wd_${path34.basename(cwd)}_${hash}`;
+  return `wd_${path35.basename(cwd)}_${hash}`;
 }
 function resolveHistoryDir6(cwd) {
-  const dir = path34.join(kimiHome(), "sessions", workDirKey(cwd));
+  const dir = path35.join(kimiHome(), "sessions", workDirKey(cwd));
   if (!fs30.existsSync(dir)) {
     log.debug("kimi", `resolveHistoryDir \u2014 session bucket not present yet: ${dir}`);
     return null;
   }
   return dir;
 }
-var WIRE_REL = path34.join("agents", "main", "wire.jsonl");
+var WIRE_REL = path35.join("agents", "main", "wire.jsonl");
 function resolveHistoryFile5(cwd, sessionId) {
   const fromIndex = sessionDirFromIndex(sessionId);
   if (fromIndex) {
-    const p2 = path34.join(fromIndex, WIRE_REL);
+    const p2 = path35.join(fromIndex, WIRE_REL);
     if (fs30.existsSync(p2)) return p2;
   }
-  const bucket2 = path34.join(kimiHome(), "sessions", workDirKey(cwd));
-  const computed = path34.join(bucket2, sessionId, WIRE_REL);
+  const bucket2 = path35.join(kimiHome(), "sessions", workDirKey(cwd));
+  const computed = path35.join(bucket2, sessionId, WIRE_REL);
   if (fs30.existsSync(computed)) return computed;
   const scanned = scanBucketsForSession(sessionId);
   if (scanned) return scanned;
@@ -17504,7 +17957,7 @@ function resolveHistoryFile5(cwd, sessionId) {
 }
 function sessionDirFromIndex(sessionId) {
   try {
-    const raw = fs30.readFileSync(path34.join(kimiHome(), "session_index.jsonl"), "utf8");
+    const raw = fs30.readFileSync(path35.join(kimiHome(), "session_index.jsonl"), "utf8");
     for (const line of raw.split("\n")) {
       if (!line.includes(sessionId)) continue;
       try {
@@ -17520,7 +17973,7 @@ function sessionDirFromIndex(sessionId) {
   return null;
 }
 function scanBucketsForSession(sessionId) {
-  const sessionsRoot = path34.join(kimiHome(), "sessions");
+  const sessionsRoot = path35.join(kimiHome(), "sessions");
   let buckets;
   try {
     buckets = fs30.readdirSync(sessionsRoot, { withFileTypes: true });
@@ -17529,13 +17982,13 @@ function scanBucketsForSession(sessionId) {
   }
   for (const b of buckets) {
     if (!b.isDirectory()) continue;
-    const candidate = path34.join(sessionsRoot, b.name, sessionId, WIRE_REL);
+    const candidate = path35.join(sessionsRoot, b.name, sessionId, WIRE_REL);
     if (fs30.existsSync(candidate)) return candidate;
   }
   return null;
 }
 async function discoverSessionId2(cwd, opts) {
-  const bucket2 = path34.join(kimiHome(), "sessions", workDirKey(cwd));
+  const bucket2 = path35.join(kimiHome(), "sessions", workDirKey(cwd));
   const floor = opts.sinceMs - 2e3;
   const deadline = Date.now() + (opts.timeoutMs ?? 15e3);
   for (; ; ) {
@@ -17558,7 +18011,7 @@ function newestSessionSince(bucket2, floorMs) {
     if (!e.isDirectory() || !e.name.startsWith("session_")) continue;
     let mtime;
     try {
-      mtime = fs30.statSync(path34.join(bucket2, e.name)).mtimeMs;
+      mtime = fs30.statSync(path35.join(bucket2, e.name)).mtimeMs;
     } catch {
       continue;
     }
@@ -17753,14 +18206,14 @@ var KimiRuntimeStrategy = class {
         return createOsStrategy().findInPath("kimi") !== null;
       },
       launch() {
-        return (0, import_node_child_process13.spawn)("kimi", [], { stdio: "inherit" });
+        return (0, import_node_child_process14.spawn)("kimi", [], { stdio: "inherit" });
       }
     };
   }
 };
 
 // src/agents/opencode/runtime.ts
-var import_node_child_process14 = require("child_process");
+var import_node_child_process15 = require("child_process");
 
 // src/agents/opencode/local-token.ts
 var API_KEY_ENV_VARS2 = [
@@ -17867,7 +18320,7 @@ var OpencodeRuntimeStrategy = class {
         return createOsStrategy().findInPath("opencode") !== null;
       },
       launch() {
-        return (0, import_node_child_process14.spawn)("opencode", ["auth", "login"], { stdio: "inherit" });
+        return (0, import_node_child_process15.spawn)("opencode", ["auth", "login"], { stdio: "inherit" });
       }
     };
   }
@@ -17957,7 +18410,7 @@ function parseLinkArgs(args2) {
   if (apiKeyFileArg) {
     const filePath = apiKeyFileArg.slice("--api-key-file=".length);
     try {
-      apiKey = fs31.readFileSync(path35.resolve(filePath), "utf8").trim();
+      apiKey = fs31.readFileSync(path36.resolve(filePath), "utf8").trim();
     } catch (err) {
       throw new Error(`Could not read --api-key-file ${filePath}: ${err.message}`);
     }
@@ -18084,7 +18537,7 @@ async function link(args2 = []) {
     return;
   }
   if (parsed.tokenFile) {
-    const credential = fs31.readFileSync(path35.resolve(parsed.tokenFile), "utf8").trim();
+    const credential = fs31.readFileSync(path36.resolve(parsed.tokenFile), "utf8").trim();
     if (!credential) {
       showError(`--token-file ${parsed.tokenFile} is empty.`);
       process.exit(1);
@@ -18301,16 +18754,15 @@ async function linkDryRunPreflight(ctx) {
 }
 
 // src/agents/coderabbit/configure.ts
-var import_node_child_process16 = require("child_process");
-var import_node_os4 = require("os");
-var import_node_fs5 = require("fs");
-var path37 = __toESM(require("path"));
+var import_node_child_process17 = require("child_process");
+var import_node_fs6 = require("fs");
+var path38 = __toESM(require("path"));
 
 // src/agents/coderabbit/oauth.ts
-var import_node_child_process15 = require("child_process");
+var import_node_child_process16 = require("child_process");
 var fs32 = __toESM(require("fs"));
 var os28 = __toESM(require("os"));
-var path36 = __toESM(require("path"));
+var path37 = __toESM(require("path"));
 function parseCoderabbitAuthEvent(line) {
   const l = line.replace(/\x1b\[[0-9;?]*[A-Za-z]/g, "").trim();
   if (!l || l[0] !== "{") return null;
@@ -18349,7 +18801,7 @@ function parseCoderabbitAuthEvent(line) {
 function resolvePython() {
   for (const bin of ["python3", "python"]) {
     try {
-      const r = (0, import_node_child_process15.spawnSync)(bin, ["--version"], { stdio: "ignore", timeout: 4e3 });
+      const r = (0, import_node_child_process16.spawnSync)(bin, ["--version"], { stdio: "ignore", timeout: 4e3 });
       if (!r.error && r.status === 0) return bin;
     } catch {
     }
@@ -18359,15 +18811,15 @@ function resolvePython() {
 function spawnCoderabbitLoginProc(cmd, args2) {
   const python = resolvePython();
   if (python) {
-    const helper = path36.join(os28.tmpdir(), "codeam-cr-pty.py");
+    const helper = path37.join(os28.tmpdir(), "codeam-cr-pty.py");
     fs32.writeFileSync(helper, PYTHON_PTY_HELPER, { mode: 420 });
-    return (0, import_node_child_process15.spawn)(python, [helper, cmd, ...args2], {
+    return (0, import_node_child_process16.spawn)(python, [helper, cmd, ...args2], {
       stdio: ["pipe", "pipe", "pipe"],
       env: { ...process.env, TERM: "xterm-256color", COLUMNS: "220", LINES: "50" },
       shell: false
     });
   }
-  return (0, import_node_child_process15.spawn)(cmd, args2, { stdio: ["pipe", "pipe", "pipe"], shell: false });
+  return (0, import_node_child_process16.spawn)(cmd, args2, { stdio: ["pipe", "pipe", "pipe"], shell: false });
 }
 var pendingCoderabbitLogin = null;
 function setPendingCoderabbitLogin(handle) {
@@ -18471,7 +18923,7 @@ function runCoderabbitOAuthLogin(deps) {
   });
 }
 function coderabbitDir(home) {
-  return path36.join(home ?? os28.homedir(), ".coderabbit");
+  return path37.join(home ?? os28.homedir(), ".coderabbit");
 }
 var NON_CREDENTIAL = /* @__PURE__ */ new Set(["doctor.json", "machine-id"]);
 function snapshotCredentialDir(home) {
@@ -18486,7 +18938,7 @@ function snapshotCredentialDir(home) {
   for (const e of entries) {
     if (!e.isFile() || NON_CREDENTIAL.has(e.name)) continue;
     try {
-      const st3 = fs32.statSync(path36.join(dir, e.name));
+      const st3 = fs32.statSync(path37.join(dir, e.name));
       snap[e.name] = `${st3.mtimeMs}:${st3.size}`;
     } catch {
     }
@@ -18504,7 +18956,7 @@ function diffCapturedCredential(before, home) {
   }
   if (!best) return null;
   try {
-    return { file: best.file, contents: fs32.readFileSync(path36.join(dir, best.file), "utf8") };
+    return { file: best.file, contents: fs32.readFileSync(path37.join(dir, best.file), "utf8") };
   } catch {
     return null;
   }
@@ -18512,7 +18964,7 @@ function diffCapturedCredential(before, home) {
 
 // src/agents/coderabbit/configure.ts
 function defaultIsLoggedIn() {
-  const r = (0, import_node_child_process16.spawnSync)("coderabbit", ["auth", "status", "--agent"], {
+  const r = (0, import_node_child_process17.spawnSync)("coderabbit", ["auth", "status", "--agent"], {
     encoding: "utf8",
     timeout: 15e3
   });
@@ -18530,7 +18982,7 @@ function defaultIsLoggedIn() {
   return false;
 }
 function defaultLoginWithApiKey(key) {
-  const r = (0, import_node_child_process16.spawnSync)("coderabbit", ["auth", "login", "--api-key", key], {
+  const r = (0, import_node_child_process17.spawnSync)("coderabbit", ["auth", "login", "--api-key", key], {
     encoding: "utf8",
     timeout: 3e4
   });
@@ -18544,7 +18996,7 @@ function defaultLoginWithApiKey(key) {
 function collectChangedFiles(cwd) {
   const run = (args2) => {
     try {
-      const r = (0, import_node_child_process16.spawnSync)("git", args2, { cwd, encoding: "utf8", timeout: 1e4 });
+      const r = (0, import_node_child_process17.spawnSync)("git", args2, { cwd, encoding: "utf8", timeout: 1e4 });
       return r.status === 0 && typeof r.stdout === "string" ? r.stdout : "";
     } catch {
       return "";
@@ -18580,22 +19032,25 @@ function collectChangedFiles(cwd) {
   }
   return [...byPath.values()];
 }
-function restoreCoderabbitOauthBlob(value) {
-  const dir = path37.join((0, import_node_os4.homedir)(), ".coderabbit");
-  (0, import_node_fs5.mkdirSync)(dir, { recursive: true });
+function restoreCoderabbitOauthBlob(os64, value) {
+  const dir = path38.join(os64.homeDir(), ".coderabbit");
+  (0, import_node_fs6.mkdirSync)(dir, { recursive: true });
   let file = "auth.json";
   let contents = value.trim();
   if (contents.startsWith("{")) {
     try {
       const parsed = JSON.parse(contents);
       if (typeof parsed.file === "string" && typeof parsed.contents === "string") {
-        file = path37.basename(parsed.file);
+        file = path38.basename(parsed.file);
         contents = parsed.contents;
       }
     } catch {
     }
   }
-  (0, import_node_fs5.writeFileSync)(path37.join(dir, file), contents, { mode: 384 });
+  (0, import_node_fs6.writeFileSync)(path38.join(dir, file), contents, { mode: 384 });
+}
+function installFailureMessage(result) {
+  return result.error ?? "CodeRabbit CLI could not be installed";
 }
 async function configureCoderabbit(input, deps = {}) {
   const os64 = deps.os ?? createOsStrategy();
@@ -18608,10 +19063,10 @@ async function configureCoderabbit(input, deps = {}) {
   const home = os64.homeDir();
   os64.augmentPath(
     os64.id === "win32" ? [
-      path37.join(home, ".local", "bin"),
-      path37.join(process.env.APPDATA ?? path37.join(home, "AppData", "Roaming"), "npm"),
-      path37.join(home, "scoop", "shims")
-    ] : [path37.join(home, ".local", "bin"), "/opt/homebrew/bin", "/usr/local/bin"]
+      path38.join(home, ".local", "bin"),
+      path38.join(process.env.APPDATA ?? path38.join(home, "AppData", "Roaming"), "npm"),
+      path38.join(home, "scoop", "shims")
+    ] : [path38.join(home, ".local", "bin"), "/opt/homebrew/bin", "/usr/local/bin"]
   );
   const installed2 = os64.findInPath("coderabbit") !== null;
   const base = () => ({
@@ -18631,9 +19086,9 @@ async function configureCoderabbit(input, deps = {}) {
     const key = (input.apiKey ?? "").trim();
     if (!key) return { ...res2, error: "No API key provided" };
     if (!res2.installed) {
-      const ok = await ensureInstalled(os64);
-      res2.installed = ok;
-      if (!ok) return { ...res2, error: "CodeRabbit CLI could not be installed" };
+      const inst = await ensureInstalled(os64);
+      res2.installed = inst.ok;
+      if (!inst.ok) return { ...res2, error: installFailureMessage(inst) };
     }
     const login = loginWithApiKey(key);
     if (!login.ok) {
@@ -18655,9 +19110,9 @@ async function configureCoderabbit(input, deps = {}) {
     }
     if (!res2.installed) {
       deps.onEvent?.({ kind: "installing" });
-      const ok = await ensureInstalled(os64);
-      res2.installed = ok;
-      if (!ok) return { ...res2, error: "CodeRabbit CLI could not be installed" };
+      const inst = await ensureInstalled(os64);
+      res2.installed = inst.ok;
+      if (!inst.ok) return { ...res2, error: installFailureMessage(inst) };
     }
     if (cred.method === "api_key") {
       const login = loginWithApiKey(cred.credential.trim());
@@ -18672,22 +19127,33 @@ async function configureCoderabbit(input, deps = {}) {
       return { ...res2, loggedIn: true, linked: true };
     }
     try {
-      restoreCoderabbitOauthBlob(cred.credential);
+      restoreCoderabbitOauthBlob(os64, cred.credential);
     } catch (err) {
       return {
         ...res2,
         error: err instanceof Error ? err.message : "Failed to restore the vaulted credential"
       };
     }
+    if (!isLoggedIn()) {
+      return {
+        ...res2,
+        loggedIn: false,
+        linked: false,
+        // Deliberately phrased as "couldn't confirm", not "is invalid": a
+        // transient `coderabbit auth status` failure is not proof the credential
+        // is dead, and both remedies (retry / re-link) are offered.
+        error: "Your saved CodeRabbit sign-in couldn't be confirmed on this machine \u2014 try again, or sign in with your browser to refresh it."
+      };
+    }
     return { ...res2, loggedIn: true, linked: true };
   }
   if (input.action === "link_oauth") {
     const res2 = base();
     if (!installed2) {
       deps.onEvent?.({ kind: "installing" });
-      const ok = await ensureInstalled(os64);
-      res2.installed = ok;
-      if (!ok) return { ...res2, error: "CodeRabbit CLI could not be installed" };
+      const inst = await ensureInstalled(os64);
+      res2.installed = inst.ok;
+      if (!inst.ok) return { ...res2, error: installFailureMessage(inst) };
     }
     const before = snapshot();
     const login = await runOAuth({
@@ -18725,9 +19191,9 @@ async function configureCoderabbit(input, deps = {}) {
   }
   const res = base();
   if (!res.installed) {
-    const ok = await ensureInstalled(os64);
-    res.installed = ok;
-    if (!ok) return { ...res, error: "CodeRabbit CLI is not installed" };
+    const inst = await ensureInstalled(os64);
+    res.installed = inst.ok;
+    if (!inst.ok) return { ...res, error: installFailureMessage(inst) };
   }
   if (!deps.runReview) return { ...res, error: "No reviewer available" };
   const out2 = await deps.runReview(input.review ?? {});
@@ -18753,7 +19219,7 @@ async function configureCoderabbit(input, deps = {}) {
 }
 
 // src/agents/coderabbit/review-pr.ts
-var import_node_child_process17 = require("child_process");
+var import_node_child_process18 = require("child_process");
 function repoSlug(prRef) {
   return `${prRef.owner}/${prRef.repo}`;
 }
@@ -18887,7 +19353,7 @@ function defaultRunGh(args2) {
     const stderr = [];
     let proc;
     try {
-      proc = (0, import_node_child_process17.spawn)("gh", args2, { stdio: ["ignore", "pipe", "pipe"] });
+      proc = (0, import_node_child_process18.spawn)("gh", args2, { stdio: ["ignore", "pipe", "pipe"] });
     } catch (err) {
       resolve9({ code: -1, stdout: "", stderr: err instanceof Error ? err.message : String(err) });
       return;
@@ -18911,17 +19377,17 @@ function defaultRunGh(args2) {
 var import_node_child_process25 = require("child_process");
 var os40 = __toESM(require("os"));
 var fs45 = __toESM(require("fs"));
-var path48 = __toESM(require("path"));
+var path49 = __toESM(require("path"));
 
 // src/integrations/manifest.ts
-var import_node_fs7 = __toESM(require("fs"));
-var import_node_os6 = __toESM(require("os"));
+var import_node_fs8 = __toESM(require("fs"));
+var import_node_os5 = __toESM(require("os"));
 var import_node_path5 = __toESM(require("path"));
 
 // src/lib/restrict-to-owner.ts
-var import_node_fs6 = __toESM(require("fs"));
-var import_node_os5 = __toESM(require("os"));
-var import_node_child_process18 = require("child_process");
+var import_node_fs7 = __toESM(require("fs"));
+var import_node_os4 = __toESM(require("os"));
+var import_node_child_process19 = require("child_process");
 var BROAD_WINDOWS_SIDS = [
   "*S-1-1-0",
   "*S-1-5-11",
@@ -18932,8 +19398,8 @@ var BROAD_WINDOWS_SIDS = [
 function restrictToOwner(filePath) {
   try {
     if (process.platform === "win32") {
-      const username = import_node_os5.default.userInfo().username;
-      (0, import_node_child_process18.execFileSync)(
+      const username = import_node_os4.default.userInfo().username;
+      (0, import_node_child_process19.execFileSync)(
         "icacls",
         [
           filePath,
@@ -18945,7 +19411,7 @@ function restrictToOwner(filePath) {
         { stdio: "ignore" }
       );
     } else {
-      import_node_fs6.default.chmodSync(filePath, 384);
+      import_node_fs7.default.chmodSync(filePath, 384);
     }
   } catch {
   }
@@ -18953,11 +19419,11 @@ function restrictToOwner(filePath) {
 
 // src/integrations/manifest.ts
 function integrationsManifestPath() {
-  return import_node_path5.default.join(import_node_os6.default.homedir(), ".codeam", "integrations.json");
+  return import_node_path5.default.join(import_node_os5.default.homedir(), ".codeam", "integrations.json");
 }
 function readIntegrationsManifest() {
   try {
-    const raw = JSON.parse(import_node_fs7.default.readFileSync(integrationsManifestPath(), "utf8"));
+    const raw = JSON.parse(import_node_fs8.default.readFileSync(integrationsManifestPath(), "utf8"));
     if (!Array.isArray(raw?.integrations)) return null;
     return raw;
   } catch {
@@ -18967,10 +19433,10 @@ function readIntegrationsManifest() {
 function persistIntegrationsManifest(m) {
   try {
     const file = integrationsManifestPath();
-    import_node_fs7.default.mkdirSync(import_node_path5.default.dirname(file), { recursive: true, mode: 448 });
+    import_node_fs8.default.mkdirSync(import_node_path5.default.dirname(file), { recursive: true, mode: 448 });
     const tmp = `${file}.tmp-${process.pid}`;
-    import_node_fs7.default.writeFileSync(tmp, JSON.stringify(m, null, 2), { encoding: "utf8", mode: 384 });
-    import_node_fs7.default.renameSync(tmp, file);
+    import_node_fs8.default.writeFileSync(tmp, JSON.stringify(m, null, 2), { encoding: "utf8", mode: 384 });
+    import_node_fs8.default.renameSync(tmp, file);
     restrictToOwner(file);
   } catch (err) {
     log.warn(
@@ -18981,21 +19447,21 @@ function persistIntegrationsManifest(m) {
 }
 function clearIntegrationsManifest() {
   try {
-    import_node_fs7.default.rmSync(integrationsManifestPath(), { force: true });
+    import_node_fs8.default.rmSync(integrationsManifestPath(), { force: true });
   } catch {
   }
 }
 
 // src/skills/manifest.ts
-var import_node_fs8 = __toESM(require("fs"));
-var import_node_os7 = __toESM(require("os"));
+var import_node_fs9 = __toESM(require("fs"));
+var import_node_os6 = __toESM(require("os"));
 var import_node_path6 = __toESM(require("path"));
 function skillsManifestPath() {
-  return import_node_path6.default.join(import_node_os7.default.homedir(), ".codeam", "skills.json");
+  return import_node_path6.default.join(import_node_os6.default.homedir(), ".codeam", "skills.json");
 }
 function readSkillsManifest() {
   try {
-    const raw = JSON.parse(import_node_fs8.default.readFileSync(skillsManifestPath(), "utf8"));
+    const raw = JSON.parse(import_node_fs9.default.readFileSync(skillsManifestPath(), "utf8"));
     if (!Array.isArray(raw?.skills)) return null;
     raw.skills = raw.skills.filter(
       (s) => Boolean(s) && typeof s === "object" && typeof s.id === "string"
@@ -19008,10 +19474,10 @@ function readSkillsManifest() {
 function persistSkillsManifest(m) {
   try {
     const file = skillsManifestPath();
-    import_node_fs8.default.mkdirSync(import_node_path6.default.dirname(file), { recursive: true, mode: 448 });
+    import_node_fs9.default.mkdirSync(import_node_path6.default.dirname(file), { recursive: true, mode: 448 });
     const tmp = `${file}.tmp-${process.pid}`;
-    import_node_fs8.default.writeFileSync(tmp, JSON.stringify(m, null, 2), { encoding: "utf8", mode: 384 });
-    import_node_fs8.default.renameSync(tmp, file);
+    import_node_fs9.default.writeFileSync(tmp, JSON.stringify(m, null, 2), { encoding: "utf8", mode: 384 });
+    import_node_fs9.default.renameSync(tmp, file);
     restrictToOwner(file);
   } catch (err) {
     log.warn(
@@ -19022,7 +19488,7 @@ function persistSkillsManifest(m) {
 }
 function clearSkillsManifest() {
   try {
-    import_node_fs8.default.rmSync(skillsManifestPath(), { force: true });
+    import_node_fs9.default.rmSync(skillsManifestPath(), { force: true });
   } catch {
   }
 }
@@ -19059,7 +19525,7 @@ function describeReason(reason) {
 // src/commands/host/host-client.ts
 var fs36 = __toESM(require("fs"));
 var os32 = __toESM(require("os"));
-var path40 = __toESM(require("path"));
+var path41 = __toESM(require("path"));
 var import_node_crypto9 = require("crypto");
 function sampleCpuTimes() {
   let idle = 0;
@@ -19107,7 +19573,7 @@ function apiBase() {
   return process.env.CODEAM_API_URL ?? resolveApiBaseUrl();
 }
 function hostIdentityPath() {
-  return path40.join(os32.homedir(), ".codeam", "host-agent.json");
+  return path41.join(os32.homedir(), ".codeam", "host-agent.json");
 }
 function collectOsInfo() {
   return {
@@ -19138,7 +19604,7 @@ function loadHostIdentity() {
 }
 function saveHostIdentity(identity) {
   const file = hostIdentityPath();
-  fs36.mkdirSync(path40.dirname(file), { recursive: true, mode: 448 });
+  fs36.mkdirSync(path41.dirname(file), { recursive: true, mode: 448 });
   fs36.writeFileSync(file, JSON.stringify(identity, null, 2), {
     encoding: "utf8",
     mode: 384
@@ -19321,15 +19787,15 @@ async function reportDeployProgress(auth, deployId, step, message, sessionId) {
 // src/commands/host/workspace.ts
 var fs37 = __toESM(require("fs"));
 var os33 = __toESM(require("os"));
-var path41 = __toESM(require("path"));
-var import_node_child_process19 = require("child_process");
+var path42 = __toESM(require("path"));
+var import_node_child_process20 = require("child_process");
 var import_node_util4 = require("util");
-var execFileP4 = (0, import_node_util4.promisify)(import_node_child_process19.execFile);
+var execFileP4 = (0, import_node_util4.promisify)(import_node_child_process20.execFile);
 function isAbsolutePathTarget(target) {
-  return path41.isAbsolute(target);
+  return path42.isAbsolute(target);
 }
 function selfHostedWorkspaceRoot() {
-  return path41.join(os33.homedir(), ".codeam", "self-hosted");
+  return path42.join(os33.homedir(), ".codeam", "self-hosted");
 }
 function nonInteractiveGitEnv() {
   return {
@@ -19399,7 +19865,7 @@ async function configureGitCredentials(dest, repoRef, cloneToken, provider = "gi
   const isGitlab = provider === "gitlab";
   if (isGitlab ? !gitlabProjectPath(repoRef.trim()) : !githubOwnerRepo(repoRef.trim())) return;
   if (!cloneToken) return;
-  const credFile = path41.join(dest, ".git", "codeam-credentials");
+  const credFile = path42.join(dest, ".git", "codeam-credentials");
   const credLine = isGitlab ? `https://oauth2:${cloneToken}@gitlab.com
 ` : `https://x-access-token:${cloneToken}@github.com
 `;
@@ -19407,7 +19873,7 @@ async function configureGitCredentials(dest, repoRef, cloneToken, provider = "gi
   restrictToOwner(credFile);
   const env = nonInteractiveGitEnv();
   const git2 = (args2) => execFileP4("git", ["-C", dest, ...args2], { timeout: 3e4, env });
-  const credFilePosix = credFile.split(path41.sep).join("/");
+  const credFilePosix = credFile.split(path42.sep).join("/");
   await git2(["config", "--local", "--replace-all", "credential.helper", ""]).catch(() => {
   });
   await git2([
@@ -19445,8 +19911,8 @@ async function prepareWorkspace(repoOrPath, deployId, cloneToken, provider = "gi
     }
     return repoOrPath;
   }
-  const dest = path41.join(selfHostedWorkspaceRoot(), deployId);
-  if (fs37.existsSync(path41.join(dest, ".git"))) {
+  const dest = path42.join(selfHostedWorkspaceRoot(), deployId);
+  if (fs37.existsSync(path42.join(dest, ".git"))) {
     if (cloneToken) await configureGitCredentials(dest, repoOrPath, cloneToken, provider);
     return dest;
   }
@@ -19470,7 +19936,7 @@ async function prepareWorkspace(repoOrPath, deployId, cloneToken, provider = "gi
 // src/commands/host/agent-provisioning.ts
 var fs38 = __toESM(require("fs"));
 var os34 = __toESM(require("os"));
-var path42 = __toESM(require("path"));
+var path43 = __toESM(require("path"));
 var PUBLIC_TO_INTERNAL_AGENT = {
   claude_code: "claude",
   claude: "claude",
@@ -19490,7 +19956,7 @@ function ensureDir(dir) {
   fs38.mkdirSync(dir, { recursive: true, mode: 448 });
 }
 function writeFile0600(filePath, contents) {
-  ensureDir(path42.dirname(filePath));
+  ensureDir(path43.dirname(filePath));
   fs38.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
   restrictToOwner(filePath);
 }
@@ -19502,7 +19968,7 @@ function rmIfExists(filePath) {
 }
 var claudeProvisioner = {
   write(auth, home) {
-    const credentialsJson = path42.join(home, ".claude", ".credentials.json");
+    const credentialsJson = path43.join(home, ".claude", ".credentials.json");
     if (auth.kind === "api_key") {
       rmIfExists(credentialsJson);
       return { ANTHROPIC_API_KEY: auth.value };
@@ -19514,7 +19980,7 @@ var claudeProvisioner = {
     } else {
       rmIfExists(credentialsJson);
     }
-    const claudeJson = path42.join(home, ".claude.json");
+    const claudeJson = path43.join(home, ".claude.json");
     if (!fs38.existsSync(claudeJson)) {
       writeFile0600(
         claudeJson,
@@ -19526,7 +19992,7 @@ var claudeProvisioner = {
 };
 var codexProvisioner = {
   write(auth, home) {
-    const authJson = path42.join(home, ".codex", "auth.json");
+    const authJson = path43.join(home, ".codex", "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { OPENAI_API_KEY: auth.value };
@@ -19537,8 +20003,8 @@ var codexProvisioner = {
 };
 var geminiProvisioner = {
   write(auth, home) {
-    const settingsJson = path42.join(home, ".gemini", "settings.json");
-    const oauthCreds = path42.join(home, ".gemini", "oauth_creds.json");
+    const settingsJson = path43.join(home, ".gemini", "settings.json");
+    const oauthCreds = path43.join(home, ".gemini", "oauth_creds.json");
     if (auth.kind === "api_key") {
       rmIfExists(oauthCreds);
       writeFile0600(settingsJson, '{"security":{"auth":{"selectedType":"gemini-api-key"}}}');
@@ -19551,7 +20017,7 @@ var geminiProvisioner = {
 };
 var cursorProvisioner = {
   write(auth, home) {
-    const authJson = path42.join(home, ".config", "cursor", "auth.json");
+    const authJson = path43.join(home, ".config", "cursor", "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { CURSOR_API_KEY: auth.value };
@@ -19593,22 +20059,22 @@ max_context_size = 262144
 var kimiProvisioner = {
   write(auth, home) {
     const credentialsFiles = [
-      path42.join(home, ".kimi", "credentials", "kimi-code.json"),
-      path42.join(home, ".kimi-code", "credentials", "kimi-code.json")
+      path43.join(home, ".kimi", "credentials", "kimi-code.json"),
+      path43.join(home, ".kimi-code", "credentials", "kimi-code.json")
     ];
     if (auth.kind === "api_key") {
       credentialsFiles.forEach(rmIfExists);
       return { KIMI_API_KEY: auth.value };
     }
     credentialsFiles.forEach((f) => writeFile0600(f, auth.value));
-    writeFile0600(path42.join(home, ".kimi-code", "config.toml"), KIMI_MANAGED_CONFIG_TOML);
+    writeFile0600(path43.join(home, ".kimi-code", "config.toml"), KIMI_MANAGED_CONFIG_TOML);
     return {};
   }
 };
 var coderabbitProvisioner = {
   write(auth, home) {
-    const dir = path42.join(home, ".coderabbit");
-    const authJson = path42.join(dir, "auth.json");
+    const dir = path43.join(home, ".coderabbit");
+    const authJson = path43.join(dir, "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { CODERABBIT_API_KEY: auth.value };
@@ -19620,13 +20086,13 @@ var coderabbitProvisioner = {
       try {
         const parsed = JSON.parse(value);
         if (typeof parsed.file === "string" && typeof parsed.contents === "string") {
-          file = path42.basename(parsed.file);
+          file = path43.basename(parsed.file);
           contents = parsed.contents;
         }
       } catch {
       }
     }
-    writeFile0600(path42.join(dir, file), contents);
+    writeFile0600(path43.join(dir, file), contents);
     return {};
   }
 };
@@ -19663,12 +20129,12 @@ function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os34.homedir(
 }
 
 // src/commands/host/git-tooling.ts
-var import_node_child_process20 = require("child_process");
+var import_node_child_process21 = require("child_process");
 var fs39 = __toESM(require("fs"));
 var os35 = __toESM(require("os"));
-var path43 = __toESM(require("path"));
+var path44 = __toESM(require("path"));
 function codeamBinDir() {
-  return process.env.CODEAM_BIN_DIR ?? path43.join(os35.homedir(), ".codeam", "bin");
+  return process.env.CODEAM_BIN_DIR ?? path44.join(os35.homedir(), ".codeam", "bin");
 }
 var FALLBACK_GH_VERSION = "2.62.0";
 var RELEASE_API = "https://api.github.com/repos/cli/cli/releases/latest";
@@ -19723,8 +20189,8 @@ async function ensureGhCli(runner, token, deps = {}) {
     const version3 = await resolveVersionFn(token);
     const asset = `gh_${version3}_${osToken}_${arch2}`;
     const url2 = `https://github.com/cli/cli/releases/download/v${version3}/${asset}.${ext}`;
-    const tmpRoot = fs39.mkdtempSync(path43.join(os35.tmpdir(), "codeam-gh-"));
-    const archive = path43.join(tmpRoot, `${asset}.${ext}`);
+    const tmpRoot = fs39.mkdtempSync(path44.join(os35.tmpdir(), "codeam-gh-"));
+    const archive = path44.join(tmpRoot, `${asset}.${ext}`);
     if (!await downloadFn(url2, archive)) {
       log.warn("host-agent", "gh download failed \u2014 skipping (git pull/push still work via the credential helper)");
       return null;
@@ -19734,14 +20200,14 @@ async function ensureGhCli(runner, token, deps = {}) {
       log.warn("host-agent", `gh archive extraction failed (code=${String(extract.code)}) \u2014 skipping`);
       return null;
     }
-    const extractedBin = path43.join(tmpRoot, asset, "bin", binaryName);
+    const extractedBin = path44.join(tmpRoot, asset, "bin", binaryName);
     if (!fs39.existsSync(extractedBin)) {
       log.warn("host-agent", "gh binary not found in the extracted archive \u2014 skipping");
       return null;
     }
     const binDir = codeamBinDir();
     fs39.mkdirSync(binDir, { recursive: true });
-    const target = path43.join(binDir, binaryName);
+    const target = path44.join(binDir, binaryName);
     fs39.copyFileSync(extractedBin, target);
     fs39.chmodSync(target, 493);
     log.info("host-agent", `gh installed to ${target} (v${version3})`);
@@ -19803,8 +20269,8 @@ async function ensureGlabCli(runner, deps = {}) {
     const version3 = await resolveLatestGlabVersion();
     const asset = `glab_${version3}_${osToken}_${arch2}`;
     const url2 = `https://gitlab.com/gitlab-org/cli/-/releases/v${version3}/downloads/${asset}.${ext}`;
-    const tmpRoot = fs39.mkdtempSync(path43.join(os35.tmpdir(), "codeam-glab-"));
-    const archive = path43.join(tmpRoot, `${asset}.${ext}`);
+    const tmpRoot = fs39.mkdtempSync(path44.join(os35.tmpdir(), "codeam-glab-"));
+    const archive = path44.join(tmpRoot, `${asset}.${ext}`);
     if (!await downloadFn(url2, archive)) {
       log.warn("host-agent", "glab download failed \u2014 skipping (git push/pull still work)");
       return null;
@@ -19815,9 +20281,9 @@ async function ensureGlabCli(runner, deps = {}) {
       return null;
     }
     const candidates = [
-      path43.join(tmpRoot, "bin", binaryName),
-      path43.join(tmpRoot, asset, "bin", binaryName),
-      path43.join(tmpRoot, binaryName)
+      path44.join(tmpRoot, "bin", binaryName),
+      path44.join(tmpRoot, asset, "bin", binaryName),
+      path44.join(tmpRoot, binaryName)
     ];
     const extractedBin = candidates.find((c2) => fs39.existsSync(c2));
     if (!extractedBin) {
@@ -19826,7 +20292,7 @@ async function ensureGlabCli(runner, deps = {}) {
     }
     const binDir = codeamBinDir();
     fs39.mkdirSync(binDir, { recursive: true });
-    const target = path43.join(binDir, binaryName);
+    const target = path44.join(binDir, binaryName);
     fs39.copyFileSync(extractedBin, target);
     fs39.chmodSync(target, 493);
     log.info("host-agent", `glab installed to ${target} (v${version3})`);
@@ -19863,7 +20329,7 @@ var defaultGitToolingRunner = {
   which(cmd) {
     try {
       const probe = process.platform === "win32" ? "where" : "which";
-      (0, import_node_child_process20.execFileSync)(probe, [cmd], { stdio: "ignore" });
+      (0, import_node_child_process21.execFileSync)(probe, [cmd], { stdio: "ignore" });
       return true;
     } catch {
       return false;
@@ -19871,7 +20337,7 @@ var defaultGitToolingRunner = {
   },
   run(cmd, args2, opts = {}) {
     return new Promise((resolve9) => {
-      const child = (0, import_node_child_process20.spawn)(cmd, args2, {
+      const child = (0, import_node_child_process21.spawn)(cmd, args2, {
         stdio: [opts.input !== void 0 ? "pipe" : "ignore", "ignore", "pipe"]
       });
       let stderr = "";
@@ -20024,313 +20490,22 @@ var HeadroomStatsReporter = class {
   }
 };
 
-// src/commands/host/os-packages.ts
-var import_node_child_process21 = require("child_process");
-var PM_INSTALL_TIMEOUT_MS = 18e4;
-var defaultHeadroomRunner = {
-  which(cmd) {
-    try {
-      (0, import_node_child_process21.execFileSync)("which", [cmd], { stdio: "ignore" });
-      return true;
-    } catch {
-      return false;
-    }
-  },
-  run(cmd, args2, opts = {}) {
-    return new Promise((resolve9) => {
-      const spawnEnv = opts.env ?? process.env;
-      const child = (0, import_node_child_process21.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"], env: spawnEnv });
-      let stderrBuf = "";
-      let stdoutBuf = "";
-      let settled = false;
-      const done = (code) => {
-        if (settled) return;
-        settled = true;
-        resolve9({ code, stderr: stderrBuf, stdout: stdoutBuf });
-      };
-      child.stdout?.on("data", (b) => {
-        const chunk = b.toString();
-        stdoutBuf += chunk;
-        const line = chunk.replace(/\n+$/, "");
-        if (line) log.info("host-agent", `headroom[${cmd}]: ${line}`);
-      });
-      child.stderr?.on("data", (b) => {
-        const chunk = b.toString();
-        stderrBuf += chunk;
-        const line = chunk.replace(/\n+$/, "");
-        if (line) log.info("host-agent", `headroom[${cmd}]: ${line}`);
-      });
-      const timeoutMs = opts.timeoutMs;
-      let timer;
-      if (timeoutMs !== void 0) {
-        timer = setTimeout(() => {
-          log.warn(
-            "host-agent",
-            `headroom[${cmd}] timed out after ${timeoutMs / 1e3}s \u2014 aborting`
-          );
-          killQuiet(child);
-          done(null);
-        }, timeoutMs);
-      }
-      child.once("exit", (code) => {
-        if (timer !== void 0) clearTimeout(timer);
-        done(code);
-      });
-      child.once("error", (e) => {
-        if (timer !== void 0) clearTimeout(timer);
-        log.trace("host-agent", `headroom[${cmd}] spawn error: ${e.message}`);
-        done(null);
-      });
-    });
-  }
-};
-var PACKAGE_MANAGERS = [
-  "apt-get",
-  "apk",
-  "dnf",
-  "yum",
-  "pacman",
-  "zypper"
-];
-var PROVISION_RECIPES = {
-  "apt-get": {
-    update: ["apt-get", "update"],
-    install: [
-      "apt-get",
-      "install",
-      "-y",
-      "python3",
-      "python3-pip",
-      "python3-venv",
-      "ca-certificates",
-      "curl"
-    ]
-  },
-  apk: {
-    install: ["apk", "add", "--no-cache", "python3", "py3-pip", "ca-certificates", "curl"]
-  },
-  dnf: {
-    install: ["dnf", "install", "-y", "python3", "python3-pip", "ca-certificates", "curl"]
-  },
-  yum: {
-    install: ["yum", "install", "-y", "python3", "python3-pip", "ca-certificates", "curl"]
-  },
-  pacman: {
-    install: ["pacman", "-Sy", "--noconfirm", "python", "python-pip", "ca-certificates", "curl"]
-  },
-  zypper: {
-    install: [
-      "zypper",
-      "--non-interactive",
-      "install",
-      "python3",
-      "python3-pip",
-      "ca-certificates",
-      "curl"
-    ]
-  }
-};
-function detectPackageManager(runner) {
-  for (const pm of PACKAGE_MANAGERS) {
-    if (runner.which(pm)) return pm;
-  }
-  return null;
-}
-function escalateCommand(argv) {
-  const isRoot = process.getuid?.() === 0;
-  return isRoot ? { cmd: argv[0], args: argv.slice(1) } : { cmd: "sudo", args: argv };
-}
-async function ensurePip(runner) {
-  if (runner.which("pip") || runner.which("pip3")) {
-    return true;
-  }
-  const pm = detectPackageManager(runner);
-  if (!pm) {
-    log.warn(
-      "host-agent",
-      "pip is absent and no known package manager (apt-get/apk/dnf/yum/pacman/zypper) found \u2014 skipping Headroom"
-    );
-    return false;
-  }
-  const escalate = escalateCommand;
-  const recipe = PROVISION_RECIPES[pm];
-  log.info(
-    "host-agent",
-    `pip absent \u2014 provisioning bare box (python3+pip+ca-certificates+curl) via ${pm}`
-  );
-  try {
-    if (recipe.update) {
-      const { cmd: cmd2, args: args3 } = escalate(recipe.update);
-      const updateResult = await runner.run(cmd2, args3, { timeoutMs: PM_INSTALL_TIMEOUT_MS });
-      if (updateResult.code !== 0) {
-        log.warn(
-          "host-agent",
-          `${pm} update exited ${String(updateResult.code)} \u2014 attempting install anyway`
-        );
-      }
-    }
-    const { cmd, args: args2 } = escalate(recipe.install);
-    const installResult = await runner.run(cmd, args2, { timeoutMs: PM_INSTALL_TIMEOUT_MS });
-    if (installResult.code !== 0) {
-      log.warn(
-        "host-agent",
-        `${pm} bare-box provision failed (code=${String(installResult.code)}) \u2014 skipping Headroom`
-      );
-      return false;
-    }
-  } catch (e) {
-    log.warn(
-      "host-agent",
-      `bare-box provision threw unexpectedly: ${e instanceof Error ? e.message : String(e)} \u2014 skipping Headroom`
-    );
-    return false;
-  }
-  log.info("host-agent", `bare box provisioned via ${pm} (python3+pip+ca-certificates+curl)`);
-  return true;
-}
-async function resolveHeadroomPython(runner) {
-  const PROBE_TIMEOUT_MS = 5e3;
-  const SUFFIXES = ["python3.13", "python3.12", "python3.11", "python3.10"];
-  const PREFIX_DIRS = ["/opt/homebrew/bin", "/usr/local/bin"];
-  const probe = async (candidate) => {
-    try {
-      const r = await runner.run(
-        candidate,
-        ["-c", 'import sys; print("%d.%d" % sys.version_info[:2])'],
-        { timeoutMs: PROBE_TIMEOUT_MS }
-      );
-      if (r.code !== 0) return false;
-      const parts = (r.stdout ?? "").trim().split(".");
-      const major = parseInt(parts[0] ?? "", 10);
-      const minor = parseInt(parts[1] ?? "", 10);
-      if (!(major === 3 && minor >= 10)) return false;
-      const pipCheck = await runner.run(candidate, ["-m", "pip", "--version"], {
-        timeoutMs: PROBE_TIMEOUT_MS
-      });
-      return pipCheck.code === 0;
-    } catch {
-      return false;
-    }
-  };
-  for (const suffix of SUFFIXES) {
-    try {
-      if (await probe(suffix)) return suffix;
-    } catch {
-    }
-  }
-  for (const suffix of SUFFIXES) {
-    for (const dir of PREFIX_DIRS) {
-      const candidate = `${dir}/${suffix}`;
-      try {
-        if (await probe(candidate)) return candidate;
-      } catch {
-      }
-    }
-  }
-  try {
-    if (await probe("python3")) return "python3";
-  } catch {
-  }
-  return null;
-}
-var PY_INSTALL_TIMEOUT_MS = 6e5;
-var MODERN_PYTHON_RECIPES = {
-  "apt-get": [
-    ["apt-get", "install", "-y", "python3.12"],
-    ["apt-get", "install", "-y", "python3.11"],
-    ["apt-get", "install", "-y", "python3"]
-  ],
-  dnf: [
-    ["dnf", "install", "-y", "python3.12"],
-    ["dnf", "install", "-y", "python3"]
-  ],
-  yum: [
-    ["yum", "install", "-y", "python3.12"],
-    ["yum", "install", "-y", "python3"]
-  ],
-  apk: [["apk", "add", "--no-cache", "python3"]],
-  pacman: [["pacman", "-Sy", "--noconfirm", "python"]],
-  zypper: [
-    ["zypper", "--non-interactive", "install", "python311"],
-    ["zypper", "--non-interactive", "install", "python3"]
-  ]
-};
-async function ensureModernPython(runner) {
-  let py = await resolveHeadroomPython(runner);
-  if (py !== null) return py;
-  try {
-    if (process.platform === "darwin") {
-      if (runner.which("brew")) {
-        log.info("host-agent", "no Python \u22653.10 found \u2014 installing python@3.12 via Homebrew");
-        const r = await runner.run("brew", ["install", "python@3.12"], {
-          timeoutMs: PY_INSTALL_TIMEOUT_MS
-        });
-        if (r.code !== 0) {
-          log.warn(
-            "host-agent",
-            `brew install python@3.12 exited ${String(r.code)} \u2014 will re-probe anyway`
-          );
-        }
-      } else {
-        log.warn(
-          "host-agent",
-          "no Python \u22653.10 and Homebrew is absent \u2014 cannot auto-install Python on macOS"
-        );
-      }
-    } else if (process.platform === "linux") {
-      const pm = detectPackageManager(runner);
-      if (!pm) {
-        log.warn(
-          "host-agent",
-          "no Python \u22653.10 and no known package manager (apt-get/apk/dnf/yum/pacman/zypper) \u2014 cannot auto-install Python"
-        );
-      } else {
-        log.info("host-agent", `no Python \u22653.10 found \u2014 installing a modern Python via ${pm}`);
-        for (const argv of MODERN_PYTHON_RECIPES[pm]) {
-          const { cmd, args: args2 } = escalateCommand(argv);
-          const r = await runner.run(cmd, args2, { timeoutMs: PY_INSTALL_TIMEOUT_MS });
-          if (r.code === 0) {
-            log.info("host-agent", `installed Python package via ${pm}: ${argv.join(" ")}`);
-            break;
-          }
-          log.warn(
-            "host-agent",
-            `${pm} install '${argv.join(" ")}' exited ${String(r.code)} \u2014 trying next`
-          );
-        }
-      }
-    } else {
-      log.warn(
-        "host-agent",
-        `no Python \u22653.10 and platform '${process.platform}' has no auto-install path`
-      );
-    }
-  } catch (e) {
-    log.warn(
-      "host-agent",
-      `Python auto-install threw unexpectedly (best-effort): ${e instanceof Error ? e.message : String(e)}`
-    );
-  }
-  py = await resolveHeadroomPython(runner);
-  return py;
-}
-
 // src/commands/host/headroom-bootstrap.ts
 var fs41 = __toESM(require("fs"));
-var path45 = __toESM(require("path"));
+var path46 = __toESM(require("path"));
 var os37 = __toESM(require("os"));
 
 // src/commands/host/headroom-config.ts
 var fs40 = __toESM(require("fs"));
 var os36 = __toESM(require("os"));
-var path44 = __toESM(require("path"));
+var path45 = __toESM(require("path"));
 function headroomConfigPath() {
-  return path44.join(os36.homedir(), ".codeam", "headroom-config.json");
+  return path45.join(os36.homedir(), ".codeam", "headroom-config.json");
 }
 function persistHeadroomConfig(config) {
   try {
     const file = headroomConfigPath();
-    fs40.mkdirSync(path44.dirname(file), { recursive: true, mode: 448 });
+    fs40.mkdirSync(path45.dirname(file), { recursive: true, mode: 448 });
     const tmp = `${file}.tmp-${process.pid}`;
     fs40.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
     fs40.renameSync(tmp, file);
@@ -20344,9 +20519,9 @@ function persistHeadroomConfig(config) {
 }
 function agentSettingsPath(kind) {
   const home = os36.homedir();
-  if (kind === "claude") return path44.join(home, ".claude", "settings.json");
-  if (kind === "codex") return path44.join(home, ".codex", "auth.json");
-  if (kind === "copilot") return path44.join(home, ".config", "github-copilot", "hosts.json");
+  if (kind === "claude") return path45.join(home, ".claude", "settings.json");
+  if (kind === "codex") return path45.join(home, ".codex", "auth.json");
+  if (kind === "copilot") return path45.join(home, ".config", "github-copilot", "hosts.json");
   return null;
 }
 function backupAgentHeadroomConfig(kind) {
@@ -20354,8 +20529,8 @@ function backupAgentHeadroomConfig(kind) {
   if (!src) return;
   try {
     if (!fs40.existsSync(src)) return;
-    const dest = path44.join(os36.homedir(), ".codeam", `headroom-backup-${kind}.json`);
-    fs40.mkdirSync(path44.dirname(dest), { recursive: true, mode: 448 });
+    const dest = path45.join(os36.homedir(), ".codeam", `headroom-backup-${kind}.json`);
+    fs40.mkdirSync(path45.dirname(dest), { recursive: true, mode: 448 });
     fs40.copyFileSync(src, dest);
     fs40.chmodSync(dest, 384);
     log.info("host-agent", `headroom config backup: ${src} \u2192 ${dest}`);
@@ -20369,10 +20544,10 @@ function backupAgentHeadroomConfig(kind) {
 function restoreAgentHeadroomConfig(kind) {
   const dest = agentSettingsPath(kind);
   if (!dest) return false;
-  const src = path44.join(os36.homedir(), ".codeam", `headroom-backup-${kind}.json`);
+  const src = path45.join(os36.homedir(), ".codeam", `headroom-backup-${kind}.json`);
   if (!fs40.existsSync(src)) return false;
   try {
-    fs40.mkdirSync(path44.dirname(dest), { recursive: true, mode: 448 });
+    fs40.mkdirSync(path45.dirname(dest), { recursive: true, mode: 448 });
     fs40.copyFileSync(src, dest);
     fs40.chmodSync(dest, 384);
     log.info("host-agent", `headroom config restored: ${src} \u2192 ${dest}`);
@@ -20423,20 +20598,20 @@ function bundledClaudeBinDir() {
   const roots = /* @__PURE__ */ new Set();
   let dir = __dirname;
   for (let i = 0; i < 6; i++) {
-    roots.add(path45.join(dir, "node_modules"));
-    const parent = path45.dirname(dir);
+    roots.add(path46.join(dir, "node_modules"));
+    const parent = path46.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
   try {
     const main2 = require.resolve("@anthropic-ai/claude-agent-sdk");
-    const marker = `${path45.sep}@anthropic-ai${path45.sep}`;
+    const marker = `${path46.sep}@anthropic-ai${path46.sep}`;
     const idx = main2.lastIndexOf(marker);
     if (idx !== -1) roots.add(main2.slice(0, idx));
   } catch {
   }
   for (const nm of roots) {
-    const atAnthropic = path45.join(nm, "@anthropic-ai");
+    const atAnthropic = path46.join(nm, "@anthropic-ai");
     let entries;
     try {
       entries = fs41.readdirSync(atAnthropic);
@@ -20445,8 +20620,8 @@ function bundledClaudeBinDir() {
     }
     for (const entry of entries) {
       if (!entry.startsWith("claude-agent-sdk-")) continue;
-      const bin = path45.join(atAnthropic, entry, "claude");
-      if (fs41.existsSync(bin)) return path45.dirname(bin);
+      const bin = path46.join(atAnthropic, entry, "claude");
+      if (fs41.existsSync(bin)) return path46.dirname(bin);
     }
   }
   return null;
@@ -20460,12 +20635,12 @@ async function getFreeDiskBytes(dir) {
   }
 }
 function headroomModelsCached() {
-  const hubDir = process.env.HUGGINGFACE_HUB_CACHE || path45.join(
-    process.env.HF_HOME || path45.join(os37.homedir(), ".cache", "huggingface"),
+  const hubDir = process.env.HUGGINGFACE_HUB_CACHE || path46.join(
+    process.env.HF_HOME || path46.join(os37.homedir(), ".cache", "huggingface"),
     "hub"
   );
   return HEADROOM_MODELS.every(
-    (m) => fs41.existsSync(path45.join(hubDir, `models--${m.repo.replace("/", "--")}`))
+    (m) => fs41.existsSync(path46.join(hubDir, `models--${m.repo.replace("/", "--")}`))
   );
 }
 async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner, opts = {}) {
@@ -20534,7 +20709,7 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner,
   if (initKind === "claude") {
     const claudeDir = bundledClaudeBinDir();
     if (claudeDir) {
-      initEnv.PATH = `${claudeDir}${path45.delimiter}${process.env["PATH"] ?? ""}`;
+      initEnv.PATH = `${claudeDir}${path46.delimiter}${process.env["PATH"] ?? ""}`;
       log.info("host-agent", `headroom init: bundled claude on PATH (${claudeDir})`);
     } else {
       log.warn("host-agent", "headroom init: bundled claude binary not found \u2014 init may fail");
@@ -20573,14 +20748,14 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner,
 // src/commands/host/house-proxy-config.ts
 var fs42 = __toESM(require("fs"));
 var os38 = __toESM(require("os"));
-var path46 = __toESM(require("path"));
+var path47 = __toESM(require("path"));
 function houseProxyConfigPath() {
-  return path46.join(os38.homedir(), ".codeam", "house-proxy.json");
+  return path47.join(os38.homedir(), ".codeam", "house-proxy.json");
 }
 function persistHouseProxyConfig(config) {
   try {
     const file = houseProxyConfigPath();
-    fs42.mkdirSync(path46.dirname(file), { recursive: true, mode: 448 });
+    fs42.mkdirSync(path47.dirname(file), { recursive: true, mode: 448 });
     const tmp = `${file}.tmp-${process.pid}`;
     fs42.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
     fs42.renameSync(tmp, file);
@@ -20635,7 +20810,7 @@ var import_node_child_process23 = require("child_process");
 // src/lib/updateNotifier.ts
 var fs43 = __toESM(require("fs"));
 var os39 = __toESM(require("os"));
-var path47 = __toESM(require("path"));
+var path48 = __toESM(require("path"));
 var https6 = __toESM(require("https"));
 var import_node_child_process22 = require("child_process");
 var import_picocolors3 = __toESM(require("picocolors"));
@@ -20644,8 +20819,8 @@ var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
 var TTL_MS = 24 * 60 * 60 * 1e3;
 var REQUEST_TIMEOUT_MS = 1500;
 function cachePath() {
-  const dir = path47.join(os39.homedir(), ".codeam");
-  return path47.join(dir, "update-check.json");
+  const dir = path48.join(os39.homedir(), ".codeam");
+  return path48.join(dir, "update-check.json");
 }
 function readCache() {
   try {
@@ -20660,7 +20835,7 @@ function readCache() {
 function writeCache(cache) {
   try {
     const file = cachePath();
-    fs43.mkdirSync(path47.dirname(file), { recursive: true });
+    fs43.mkdirSync(path48.dirname(file), { recursive: true });
     const tmp = `${file}.${process.pid}.tmp`;
     fs43.writeFileSync(tmp, JSON.stringify(cache));
     fs43.renameSync(tmp, file);
@@ -20737,7 +20912,7 @@ function isLinkedInstall() {
       timeout: 2e3
     }).trim();
     if (!root) return false;
-    const pkgPath = path47.join(root, PKG_NAME);
+    const pkgPath = path48.join(root, PKG_NAME);
     return fs43.lstatSync(pkgPath).isSymbolicLink();
   } catch {
     return false;
@@ -20790,7 +20965,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.62.0" : null;
+  const current2 = true ? "2.62.2" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -20807,7 +20982,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.62.0" : null;
+  const current2 = true ? "2.62.2" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -20827,7 +21002,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.62.0" : null;
+  return true ? "2.62.2" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve9) => {
@@ -21559,13 +21734,13 @@ var HostAgentSupervisor = class {
     const relay = this.relay;
     if (!relay) return;
     const raw = cmd.payload?.path;
-    const target = typeof raw === "string" && raw.trim() ? path48.resolve(raw.trim()) : os40.homedir();
+    const target = typeof raw === "string" && raw.trim() ? path49.resolve(raw.trim()) : os40.homedir();
     try {
       const dirents = await fs45.promises.readdir(target, { withFileTypes: true });
       const entries = dirents.filter((d3) => !d3.name.startsWith(".")).map((d3) => ({ name: d3.name, isDir: d3.isDirectory() })).sort(
         (a, b) => a.isDir === b.isDir ? a.name.localeCompare(b.name) : a.isDir ? -1 : 1
       );
-      const parent = path48.dirname(target);
+      const parent = path49.dirname(target);
       await relay.sendResult(cmd.id, "completed", {
         path: target,
         // null at the filesystem root so the UI can hide the ".." affordance.
@@ -21798,7 +21973,7 @@ var HostAgentSupervisor = class {
           API_TIMEOUT_MS: "3000000",
           CODEAM_AUTO_TOKEN: payload.autoPairToken
         };
-        const houseConfigDir = path48.join(
+        const houseConfigDir = path49.join(
           os40.homedir(),
           ".codeam",
           "house-claude",
@@ -21839,13 +22014,13 @@ var HostAgentSupervisor = class {
           if ((payload.repoProvider ?? "github") === "gitlab") {
             const glabCmd = await ensureGlabCli(defaultGitToolingRunner);
             if (glabCmd) {
-              childEnv.PATH = `${codeamBinDir()}${path48.delimiter}${childEnv.PATH}`;
+              childEnv.PATH = `${codeamBinDir()}${path49.delimiter}${childEnv.PATH}`;
               await ensureGlabAuth(defaultGitToolingRunner, glabCmd, payload.cloneToken);
             }
           } else {
             const ghCmd = await ensureGhCli(defaultGitToolingRunner, payload.cloneToken);
             if (ghCmd) {
-              childEnv.PATH = `${codeamBinDir()}${path48.delimiter}${childEnv.PATH}`;
+              childEnv.PATH = `${codeamBinDir()}${path49.delimiter}${childEnv.PATH}`;
               await ensureGhAuth(defaultGitToolingRunner, ghCmd, payload.cloneToken);
             }
           }
@@ -21924,8 +22099,8 @@ var HostAgentSupervisor = class {
       );
       if (!payload.suppressOnboardingWelcome) {
         try {
-          const cfgDir = childEnv.CLAUDE_CONFIG_DIR || path48.join(os40.homedir(), ".claude");
-          const projectDir = path48.join(cfgDir, "projects", encodeCwd(cwd));
+          const cfgDir = childEnv.CLAUDE_CONFIG_DIR || path49.join(os40.homedir(), ".claude");
+          const projectDir = path49.join(cfgDir, "projects", encodeCwd(cwd));
           const hasPriorConversation = fs45.existsSync(projectDir) && fs45.readdirSync(projectDir).some((f) => f.endsWith(".jsonl"));
           if (hasPriorConversation) {
             childEnv.CODEAM_RESUME_LATEST = "1";
@@ -22162,8 +22337,8 @@ var HostAgentSupervisor = class {
       this.children.delete(deployId);
     }
     const dirs = [
-      path48.join(selfHostedWorkspaceRoot(), deployId),
-      path48.join(os40.homedir(), ".codeam", "house-claude", deployId)
+      path49.join(selfHostedWorkspaceRoot(), deployId),
+      path49.join(os40.homedir(), ".codeam", "house-claude", deployId)
     ];
     for (const dir of dirs) {
       try {
@@ -22306,7 +22481,7 @@ async function configureHeadroom(action, ctx, deps) {
 // src/services/headroom/budget-relaunch.ts
 var fs46 = __toESM(require("fs"));
 var os41 = __toESM(require("os"));
-var path49 = __toESM(require("path"));
+var path50 = __toESM(require("path"));
 var import_child_process13 = require("child_process");
 function amendDeploymentManifestBudget(manifest, budget) {
   const rawArgs = manifest.proxy_args ?? [];
@@ -22340,7 +22515,7 @@ function amendDeploymentManifestBudget(manifest, budget) {
   return { ...manifest, proxy_args: newArgs, base_env: newEnv };
 }
 function findHeadroomDeployments(homeDir2, deps) {
-  const deployDir = path49.join(homeDir2, ".headroom", "deploy");
+  const deployDir = path50.join(homeDir2, ".headroom", "deploy");
   let profiles;
   try {
     profiles = deps.readDir(deployDir);
@@ -22349,7 +22524,7 @@ function findHeadroomDeployments(homeDir2, deps) {
   }
   const results = [];
   for (const profile of profiles) {
-    const manifestPath = path49.join(deployDir, profile, "manifest.json");
+    const manifestPath = path50.join(deployDir, profile, "manifest.json");
     let raw;
     try {
       raw = deps.readJson(manifestPath);
@@ -22536,7 +22711,7 @@ async function defaultFetchJson(url2) {
 async function readUsageReport(deps = {}) {
   const port = deps.port ?? HEADROOM_PROXY_PORT;
   const base = `http://127.0.0.1:${port}`;
-  const get2 = deps.fetchJson ?? ((path89) => defaultFetchJson(`${base}${path89}`));
+  const get2 = deps.fetchJson ?? ((path90) => defaultFetchJson(`${base}${path90}`));
   let history;
   try {
     history = await get2("/stats-history");
@@ -22555,11 +22730,11 @@ async function readUsageReport(deps = {}) {
 
 // src/agents/acp/guardrail-config.ts
 var fs47 = __toESM(require("fs"));
-var path50 = __toESM(require("path"));
+var path51 = __toESM(require("path"));
 var os42 = __toESM(require("os"));
 var current = null;
 function guardrailConfigPath(homeDir2 = os42.homedir()) {
-  return path50.join(homeDir2, ".codeam", "guardrails.json");
+  return path51.join(homeDir2, ".codeam", "guardrails.json");
 }
 function loadGuardrailPolicy(homeDir2 = os42.homedir()) {
   try {
@@ -22577,7 +22752,7 @@ function setGuardrailPolicy(raw, homeDir2 = os42.homedir()) {
   current = next;
   try {
     const p2 = guardrailConfigPath(homeDir2);
-    fs47.mkdirSync(path50.dirname(p2), { recursive: true });
+    fs47.mkdirSync(path51.dirname(p2), { recursive: true });
     fs47.writeFileSync(p2, JSON.stringify(next, null, 2));
   } catch {
   }
@@ -22587,10 +22762,10 @@ function setGuardrailPolicy(raw, homeDir2 = os42.homedir()) {
 // src/services/preview/port-registry.ts
 var fs48 = __toESM(require("fs"));
 var os43 = __toESM(require("os"));
-var path51 = __toESM(require("path"));
+var path52 = __toESM(require("path"));
 var import_child_process14 = require("child_process");
 function registryPath() {
-  return path51.join(os43.homedir(), ".codeam", "preview-ports.json");
+  return path52.join(os43.homedir(), ".codeam", "preview-ports.json");
 }
 function readRegistry() {
   try {
@@ -22604,7 +22779,7 @@ function readRegistry() {
 function writeRegistry(reg) {
   try {
     const file = registryPath();
-    fs48.mkdirSync(path51.dirname(file), { recursive: true });
+    fs48.mkdirSync(path52.dirname(file), { recursive: true });
     const tmp = `${file}.tmp`;
     fs48.writeFileSync(tmp, JSON.stringify(reg), "utf8");
     fs48.renameSync(tmp, file);
@@ -22673,7 +22848,7 @@ function reclaimOwnOrphanPort(port) {
 
 // src/services/preview/host-allow.ts
 var import_fs = require("fs");
-var path52 = __toESM(require("path"));
+var path53 = __toESM(require("path"));
 var NEXT_ALLOWED_ORIGINS = [
   "*.trycloudflare.com",
   "*.preview.codeagent-mobile.com",
@@ -22693,7 +22868,7 @@ var MARKER_DIR = ".codeam";
 var MARKER_FILE = "preview-host-allow.json";
 var ORIG_INFIX = ".codeam-orig";
 function markerPath(cwd) {
-  return path52.join(cwd, MARKER_DIR, MARKER_FILE);
+  return path53.join(cwd, MARKER_DIR, MARKER_FILE);
 }
 async function fileExists(p2) {
   try {
@@ -22706,13 +22881,13 @@ async function fileExists(p2) {
 async function findConfigFile(cwd, framework) {
   const base = CONFIG_BASENAMES[framework];
   for (const ext of CONFIG_EXTS) {
-    if (await fileExists(path52.join(cwd, `${base}${ext}`))) return `${base}${ext}`;
+    if (await fileExists(path53.join(cwd, `${base}${ext}`))) return `${base}${ext}`;
   }
   return null;
 }
 async function dependsOn(cwd, pkgName) {
   try {
-    const raw = await import_fs.promises.readFile(path52.join(cwd, "package.json"), "utf8");
+    const raw = await import_fs.promises.readFile(path53.join(cwd, "package.json"), "utf8");
     const pkg = JSON.parse(raw);
     return !!(pkg.dependencies?.[pkgName] ?? pkg.devDependencies?.[pkgName]);
   } catch {
@@ -22720,11 +22895,11 @@ async function dependsOn(cwd, pkgName) {
   }
 }
 async function isEsmConfig(cwd, configFile) {
-  const ext = path52.extname(configFile);
+  const ext = path53.extname(configFile);
   if (ext === ".mjs" || ext === ".mts" || ext === ".ts") return true;
   if (ext === ".cjs") return false;
   try {
-    const raw = await import_fs.promises.readFile(path52.join(cwd, "package.json"), "utf8");
+    const raw = await import_fs.promises.readFile(path53.join(cwd, "package.json"), "utf8");
     return JSON.parse(raw).type === "module";
   } catch {
     return false;
@@ -22807,7 +22982,7 @@ function shimFor(framework, origBasename, esm) {
   return framework === "next" ? nextShim(origBasename, esm) : viteShim(origBasename, esm);
 }
 async function writeMarker(cwd, marker) {
-  await import_fs.promises.mkdir(path52.join(cwd, MARKER_DIR), { recursive: true });
+  await import_fs.promises.mkdir(path53.join(cwd, MARKER_DIR), { recursive: true });
   await import_fs.promises.writeFile(markerPath(cwd), JSON.stringify(marker, null, 2), "utf8");
 }
 async function readMarker(cwd) {
@@ -22822,9 +22997,9 @@ async function restorePreviewHostAllow(cwd) {
   const marker = await readMarker(cwd);
   if (!marker) return;
   try {
-    const configAbs = path52.join(cwd, marker.configFile);
+    const configAbs = path53.join(cwd, marker.configFile);
     if (marker.backupFile) {
-      const backupAbs = path52.join(cwd, marker.backupFile);
+      const backupAbs = path53.join(cwd, marker.backupFile);
       if (await fileExists(backupAbs)) {
         await import_fs.promises.rm(configAbs, { force: true });
         await import_fs.promises.rename(backupAbs, configAbs);
@@ -22857,16 +23032,16 @@ async function applyPreviewHostAllow(cwd) {
     }
     if (!framework) return;
     if (existing) {
-      const ext = path52.extname(existing);
+      const ext = path53.extname(existing);
       const origBasename = `${CONFIG_BASENAMES[framework]}${ORIG_INFIX}${ext}`;
       const esm = await isEsmConfig(cwd, existing);
-      await import_fs.promises.rename(path52.join(cwd, existing), path52.join(cwd, origBasename));
-      await import_fs.promises.writeFile(path52.join(cwd, existing), shimFor(framework, origBasename, esm), "utf8");
+      await import_fs.promises.rename(path53.join(cwd, existing), path53.join(cwd, origBasename));
+      await import_fs.promises.writeFile(path53.join(cwd, existing), shimFor(framework, origBasename, esm), "utf8");
       await writeMarker(cwd, { framework, configFile: existing, backupFile: origBasename });
       log.info("preview", `host-allow: wrapped ${existing} (${framework}) for tunnel access`);
     } else {
       const configFile = `${CONFIG_BASENAMES[framework]}.mjs`;
-      await import_fs.promises.writeFile(path52.join(cwd, configFile), shimFor(framework, null, true), "utf8");
+      await import_fs.promises.writeFile(path53.join(cwd, configFile), shimFor(framework, null, true), "utf8");
       await writeMarker(cwd, { framework, configFile, backupFile: null });
       log.info("preview", `host-allow: created ${configFile} (${framework}) for tunnel access`);
     }
@@ -23169,10 +23344,10 @@ function parseExpoUrl(stdout) {
 }
 
 // src/services/preview/port-ready.ts
-var net = __toESM(require("net"));
+var net2 = __toESM(require("net"));
 function isPortListening(port, host2 = "127.0.0.1") {
   return new Promise((resolve9) => {
-    const socket = new net.Socket();
+    const socket = new net2.Socket();
     const done = (result) => {
       socket.removeAllListeners();
       socket.destroy();
@@ -23549,18 +23724,18 @@ function activePreviewSessionIds() {
 // src/services/preview/start-orchestrator.ts
 var import_child_process19 = require("child_process");
 var fs56 = __toESM(require("fs"));
-var path59 = __toESM(require("path"));
+var path60 = __toESM(require("path"));
 var import_which2 = __toESM(require("which"));
 
 // src/services/project-env/index.ts
 var import_fs5 = require("fs");
-var path58 = __toESM(require("path"));
+var path59 = __toESM(require("path"));
 
 // src/beads/project-key.ts
 var import_child_process18 = require("child_process");
 var crypto2 = __toESM(require("crypto"));
 var fs54 = __toESM(require("fs"));
-var path57 = __toESM(require("path"));
+var path58 = __toESM(require("path"));
 function normalizeOrigin(raw) {
   const trimmed = raw.trim();
   if (!trimmed) return null;
@@ -23586,17 +23761,17 @@ function normalizeOrigin(raw) {
   return `${host2}/${pathPart}`;
 }
 function findRepoRoot(cwd) {
-  let dir = path57.resolve(cwd);
+  let dir = path58.resolve(cwd);
   const seen = /* @__PURE__ */ new Set();
   for (let i = 0; i < 256; i++) {
     if (seen.has(dir)) return null;
     seen.add(dir);
     try {
-      const stat3 = fs54.statSync(path57.join(dir, ".git"), { throwIfNoEntry: false });
+      const stat3 = fs54.statSync(path58.join(dir, ".git"), { throwIfNoEntry: false });
       if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
     } catch {
     }
-    const parent = path57.dirname(dir);
+    const parent = path58.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -23636,7 +23811,7 @@ function deriveProjectIdentity(cwd = process.cwd()) {
   } catch {
   }
   const hash = crypto2.createHash("sha256").update(real).digest("hex");
-  return { projectKey: `path:${hash}`, projectLabel: path57.basename(real) || "project" };
+  return { projectKey: `path:${hash}`, projectLabel: path58.basename(real) || "project" };
 }
 
 // src/services/project-env/index.ts
@@ -23649,7 +23824,7 @@ async function readIfExists(p2) {
 }
 async function syncProjectEnvUp(cwd, ctx) {
   if (!ctx.pluginAuthToken) return;
-  const content = await readIfExists(path58.join(cwd, ".env"));
+  const content = await readIfExists(path59.join(cwd, ".env"));
   if (content == null) return;
   try {
     const { projectKey, projectLabel } = deriveProjectIdentity(cwd);
@@ -23671,7 +23846,7 @@ async function syncProjectEnvUp(cwd, ctx) {
 }
 async function restoreProjectEnvIfMissing(cwd, ctx) {
   if (!ctx.pluginAuthToken) return false;
-  const envPath = path58.join(cwd, ".env");
+  const envPath = path59.join(cwd, ".env");
   if (await readIfExists(envPath) != null) return false;
   try {
     const { projectKey, projectLabel } = deriveProjectIdentity(cwd);
@@ -23682,7 +23857,7 @@ async function restoreProjectEnvIfMissing(cwd, ctx) {
       projectKey
     });
     if (!stored) return false;
-    const tmp = path58.join(cwd, ".env.codeam-restore.tmp");
+    const tmp = path59.join(cwd, ".env.codeam-restore.tmp");
     await import_fs5.promises.writeFile(tmp, stored.content, { encoding: "utf8", mode: 384 });
     await import_fs5.promises.rename(tmp, envPath);
     log.info("project-env", `restored .env (${stored.keyCount} vars) for ${projectLabel}`);
@@ -23694,7 +23869,7 @@ async function restoreProjectEnvIfMissing(cwd, ctx) {
 }
 
 // src/services/preview/start-orchestrator.ts
-var INSTALL_TIMEOUT_MS = 5 * 6e4;
+var INSTALL_TIMEOUT_MS2 = 5 * 6e4;
 var SETUP_TIMEOUT_MS = 2 * 6e4;
 var TUNNEL_REGISTER_DEADLINE_MS = 45e3;
 function compileReadyPattern(pattern) {
@@ -23759,7 +23934,7 @@ function normalizeDetectionForSpawn(detection, cwd) {
   if (args2.length === 0) return detection;
   const binName = args2[0];
   if (binName.startsWith("-")) return detection;
-  const binPath = path59.join(cwd, "node_modules", ".bin", binName);
+  const binPath = path60.join(cwd, "node_modules", ".bin", binName);
   if (!fs56.existsSync(binPath)) return detection;
   return {
     ...detection,
@@ -23839,7 +24014,7 @@ async function provisionDeps(ctx) {
             ["install", "-g", "yarn"],
             cwd,
             detection.env,
-            { timeoutMs: INSTALL_TIMEOUT_MS }
+            { timeoutMs: INSTALL_TIMEOUT_MS2 }
           );
           return { ok: r.status === "ok", code: r.code };
         }
@@ -23861,12 +24036,12 @@ async function provisionDeps(ctx) {
       missingDeps.args,
       cwd,
       detection.env,
-      { timeoutMs: INSTALL_TIMEOUT_MS }
+      { timeoutMs: INSTALL_TIMEOUT_MS2 }
     );
     if (result.status === "timeout") {
       emit2(USER_EVENTS.PREVIEW_ERROR, {
         stage: "ready_timeout",
-        message: `Dependency install (${missingDeps.cmd} ${missingDeps.args.join(" ")}) didn't finish within ${Math.round(INSTALL_TIMEOUT_MS / 1e3)}s and was stopped. Run it manually in this project, then try the preview again.`
+        message: `Dependency install (${missingDeps.cmd} ${missingDeps.args.join(" ")}) didn't finish within ${Math.round(INSTALL_TIMEOUT_MS2 / 1e3)}s and was stopped. Run it manually in this project, then try the preview again.`
       });
       return false;
     }
@@ -23893,7 +24068,7 @@ async function provisionDeps(ctx) {
   const agentSetupCommands = preflightRan ? normalizedSetup.filter((s) => !isJsInstallCommand(s.cmd, s.args)) : normalizedSetup;
   for (const setup of agentSetupCommands) {
     emitProgress("SETUP_RUN", `${setup.cmd} ${setup.args.join(" ")}`);
-    const timeoutMs = isJsInstallCommand(setup.cmd, setup.args) ? INSTALL_TIMEOUT_MS : SETUP_TIMEOUT_MS;
+    const timeoutMs = isJsInstallCommand(setup.cmd, setup.args) ? INSTALL_TIMEOUT_MS2 : SETUP_TIMEOUT_MS;
     const result = await runSetupCommand(
       setup.cmd,
       setup.args,
@@ -24135,7 +24310,7 @@ async function establishTunnel(ctx, dev) {
 var import_child_process20 = require("child_process");
 var fs57 = __toESM(require("fs"));
 var os45 = __toESM(require("os"));
-var path60 = __toESM(require("path"));
+var path61 = __toESM(require("path"));
 var BD_PACKAGE = "@beads/bd";
 function resolveBundledBdBinary() {
   return _resolveSeam.resolveBundled();
@@ -24147,9 +24322,9 @@ function _defaultResolveBundled() {
   } catch {
     return null;
   }
-  const binDir = path60.join(path60.dirname(pkgJsonPath), "bin");
+  const binDir = path61.join(path61.dirname(pkgJsonPath), "bin");
   const binaryName = process.platform === "win32" ? "bd.exe" : "bd";
-  const binaryPath = path60.join(binDir, binaryName);
+  const binaryPath = path61.join(binDir, binaryName);
   try {
     fs57.accessSync(binaryPath, fs57.constants.F_OK);
     return binaryPath;
@@ -24161,11 +24336,11 @@ function resolveBdOnPath() {
   return _resolveSeam.resolveOnPath();
 }
 function _defaultResolveOnPath() {
-  const dirs = (process.env.PATH ?? "").split(path60.delimiter).filter(Boolean);
+  const dirs = (process.env.PATH ?? "").split(path61.delimiter).filter(Boolean);
   const candidates = process.platform === "win32" ? ["bd.exe", "bd.cmd", "bd"] : ["bd"];
   for (const dir of dirs) {
     for (const candidate of candidates) {
-      const full = path60.join(dir, candidate);
+      const full = path61.join(dir, candidate);
       try {
         fs57.accessSync(full, fs57.constants.F_OK);
         return full;
@@ -24346,7 +24521,7 @@ function coerceIssue(row, projectKey) {
 var import_child_process23 = require("child_process");
 var fs59 = __toESM(require("fs"));
 var os47 = __toESM(require("os"));
-var path62 = __toESM(require("path"));
+var path63 = __toESM(require("path"));
 
 // src/beads/install-bd.ts
 var import_child_process21 = require("child_process");
@@ -24413,7 +24588,7 @@ async function installBd(platform3 = process.platform) {
 var import_child_process22 = require("child_process");
 var fs58 = __toESM(require("fs"));
 var os46 = __toESM(require("os"));
-var path61 = __toESM(require("path"));
+var path62 = __toESM(require("path"));
 var DOLT_INSTALL_SH_URL = "https://github.com/dolthub/dolt/releases/latest/download/install.sh";
 var DOLT_MSI_URL = "https://github.com/dolthub/dolt/releases/latest/download/dolt-windows-amd64.msi";
 function resolveDoltInstallStrategy(platform3) {
@@ -24520,7 +24695,7 @@ function doltBinaryNames(platform3) {
   return platform3 === "win32" ? ["dolt.exe", "dolt.cmd", "dolt"] : ["dolt"];
 }
 function knownDoltDirs(platform3) {
-  const P3 = platform3 === "win32" ? path61.win32 : path61.posix;
+  const P3 = platform3 === "win32" ? path62.win32 : path62.posix;
   const home = _doltPathSeam.homedir();
   if (platform3 === "win32") {
     return [
@@ -24536,7 +24711,7 @@ function knownDoltDirs(platform3) {
   ].filter(Boolean);
 }
 function ensureDoltResolvable(platform3 = process.platform) {
-  const P3 = platform3 === "win32" ? path61.win32 : path61.posix;
+  const P3 = platform3 === "win32" ? path62.win32 : path62.posix;
   const delim = platform3 === "win32" ? ";" : ":";
   const names = doltBinaryNames(platform3);
   const pathDirs = _doltPathSeam.getPath().split(delim).filter(Boolean);
@@ -24744,9 +24919,9 @@ var _linkSeam = {
    * which `linkBdOntoPath` creates if missing.
    */
   cliBinDir: () => {
-    const pathDirs = (process.env.PATH ?? "").split(path62.delimiter).filter(Boolean);
+    const pathDirs = (process.env.PATH ?? "").split(path63.delimiter).filter(Boolean);
     const home = _linkSeam.homedir();
-    const localBin = home ? path62.join(home, ".local", "bin") : null;
+    const localBin = home ? path63.join(home, ".local", "bin") : null;
     if (localBin) {
       try {
         _linkSeam.ensureDir(localBin);
@@ -24756,16 +24931,16 @@ var _linkSeam = {
     const candidates = [];
     if (localBin) candidates.push(localBin);
     try {
-      candidates.push(path62.dirname(process.execPath));
+      candidates.push(path63.dirname(process.execPath));
     } catch {
     }
     candidates.push("/usr/local/bin");
     const entry = process.argv[1];
     if (entry) {
       try {
-        candidates.push(path62.dirname(fs59.realpathSync(entry)));
+        candidates.push(path63.dirname(fs59.realpathSync(entry)));
       } catch {
-        candidates.push(path62.dirname(entry));
+        candidates.push(path63.dirname(entry));
       }
     }
     const onPathWritable = candidates.find(
@@ -24790,7 +24965,7 @@ function linkBdOntoPath(binaryPath) {
   const binDir = _linkSeam.cliBinDir();
   if (!binDir) return;
   _linkSeam.ensureDir(binDir);
-  const linkPath = path62.join(binDir, "bd");
+  const linkPath = path63.join(binDir, "bd");
   if (linkPath === binaryPath) return;
   const current2 = _linkSeam.readlink(linkPath);
   if (current2 === binaryPath) return;
@@ -24985,7 +25160,7 @@ function dedupeRecipes(agents) {
 
 // src/beads/watcher.ts
 var crypto4 = __toESM(require("crypto"));
-var path63 = __toESM(require("path"));
+var path64 = __toESM(require("path"));
 var API_BASE6 = resolveApiBaseUrl();
 var DEBOUNCE_MS2 = 400;
 var ZERO_SUMMARY = {
@@ -25009,7 +25184,7 @@ var BeadsWatcher = class {
   constructor(opts) {
     this.opts = opts;
     this.bd = opts.adapter ?? new BdAdapter({ cwd: opts.cwd, beadsDir: opts.beadsDir });
-    this.feedPath = opts.feedPath ?? path63.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
+    this.feedPath = opts.feedPath ?? path64.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
     this.apiBase = opts.apiBaseUrl ?? API_BASE6;
   }
   opts;
@@ -25260,15 +25435,15 @@ async function handleBeadsActionCommand(action, started) {
 }
 
 // src/beads/config-store.ts
-var import_node_fs9 = __toESM(require("fs"));
-var import_node_os8 = __toESM(require("os"));
+var import_node_fs10 = __toESM(require("fs"));
+var import_node_os7 = __toESM(require("os"));
 var import_node_path7 = __toESM(require("path"));
 function beadsConfigPath() {
-  return import_node_path7.default.join(import_node_os8.default.homedir(), ".codeam", "beads-config.json");
+  return import_node_path7.default.join(import_node_os7.default.homedir(), ".codeam", "beads-config.json");
 }
 function readBeadsEnabled() {
   try {
-    const raw = import_node_fs9.default.readFileSync(beadsConfigPath(), "utf8");
+    const raw = import_node_fs10.default.readFileSync(beadsConfigPath(), "utf8");
     const cfg = JSON.parse(raw);
     return cfg.enabled !== false;
   } catch {
@@ -25277,10 +25452,10 @@ function readBeadsEnabled() {
 }
 function persistBeadsConfig(cfg) {
   const file = beadsConfigPath();
-  import_node_fs9.default.mkdirSync(import_node_path7.default.dirname(file), { recursive: true });
+  import_node_fs10.default.mkdirSync(import_node_path7.default.dirname(file), { recursive: true });
   const tmp = `${file}.tmp`;
-  import_node_fs9.default.writeFileSync(tmp, JSON.stringify(cfg), { mode: 384 });
-  import_node_fs9.default.renameSync(tmp, file);
+  import_node_fs10.default.writeFileSync(tmp, JSON.stringify(cfg), { mode: 384 });
+  import_node_fs10.default.renameSync(tmp, file);
   restrictToOwner(file);
 }
 
@@ -25416,14 +25591,14 @@ async function configureBeads(action, ctx, deps) {
 }
 
 // src/skills/configure.ts
-var import_node_os10 = __toESM(require("os"));
+var import_node_os9 = __toESM(require("os"));
 
 // src/skills/materialize.ts
-var import_node_fs10 = __toESM(require("fs"));
-var import_node_os9 = __toESM(require("os"));
+var import_node_fs11 = __toESM(require("fs"));
+var import_node_os8 = __toESM(require("os"));
 var import_node_path8 = __toESM(require("path"));
 var NS = "codeam-";
-function skillDirFor(id, home = import_node_os9.default.homedir()) {
+function skillDirFor(id, home = import_node_os8.default.homedir()) {
   return import_node_path8.default.join(home, ".claude", "skills", `${NS}${id}`);
 }
 function renderSkillMd(id, description, body) {
@@ -25436,13 +25611,13 @@ description: ${JSON.stringify(desc)}
 ${body.trim()}
 `;
 }
-function materializeSkill(id, home = import_node_os9.default.homedir()) {
+function materializeSkill(id, home = import_node_os8.default.homedir()) {
   const def = getSkillDefinition(id);
   if (!def?.delivery.skillFile) return false;
   try {
     const dir = skillDirFor(id, home);
-    import_node_fs10.default.mkdirSync(dir, { recursive: true, mode: 448 });
-    import_node_fs10.default.writeFileSync(
+    import_node_fs11.default.mkdirSync(dir, { recursive: true, mode: 448 });
+    import_node_fs11.default.writeFileSync(
       import_node_path8.default.join(dir, "SKILL.md"),
       renderSkillMd(id, def.description, def.delivery.skillFile.body),
       { encoding: "utf8", mode: 384 }
@@ -25454,8 +25629,8 @@ function materializeSkill(id, home = import_node_os9.default.homedir()) {
       if (!import_node_path8.default.resolve(target).startsWith(baseDirWithSep) && import_node_path8.default.resolve(target) !== baseDir) {
         continue;
       }
-      import_node_fs10.default.mkdirSync(import_node_path8.default.dirname(target), { recursive: true, mode: 448 });
-      import_node_fs10.default.writeFileSync(target, contents, { encoding: "utf8", mode: 384 });
+      import_node_fs11.default.mkdirSync(import_node_path8.default.dirname(target), { recursive: true, mode: 448 });
+      import_node_fs11.default.writeFileSync(target, contents, { encoding: "utf8", mode: 384 });
     }
     return true;
   } catch (err) {
@@ -25463,9 +25638,9 @@ function materializeSkill(id, home = import_node_os9.default.homedir()) {
     return false;
   }
 }
-function removeSkill(id, home = import_node_os9.default.homedir()) {
+function removeSkill(id, home = import_node_os8.default.homedir()) {
   try {
-    import_node_fs10.default.rmSync(skillDirFor(id, home), { recursive: true, force: true });
+    import_node_fs11.default.rmSync(skillDirFor(id, home), { recursive: true, force: true });
   } catch {
   }
 }
@@ -25475,7 +25650,7 @@ function currentInstalled() {
   const m = readSkillsManifest();
   return (m?.skills ?? []).map((s) => s.id).filter(isSkillId);
 }
-function configureSkill(action, skillId, home = import_node_os10.default.homedir()) {
+function configureSkill(action, skillId, home = import_node_os9.default.homedir()) {
   if (action === "list") return { ok: true, installed: currentInstalled() };
   if (!skillId || !isSkillId(skillId)) {
     return { ok: false, installed: currentInstalled(), error: `unknown skill: ${skillId ?? "(none)"}` };
@@ -25508,7 +25683,7 @@ function cleanupAttachmentTempFiles() {
 function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
-    const tmpPath = path66.join(os51.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
+    const tmpPath = path67.join(os51.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
     fs62.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     pendingAttachmentFiles.add(tmpPath);
     return tmpPath;
@@ -25721,7 +25896,7 @@ var listFiles = async (ctx, cmd, parsed) => {
   await ctx.relay.sendResult(cmd.id, "completed", result);
 };
 var envReadH = async (ctx, cmd) => {
-  const envPath = path66.join(process.cwd(), ".env");
+  const envPath = path67.join(process.cwd(), ".env");
   await restoreProjectEnvIfMissing(process.cwd(), ctx);
   try {
     const raw = await fs62.promises.readFile(envPath, "utf8");
@@ -25755,8 +25930,8 @@ var envWriteH = async (ctx, cmd, parsed) => {
     }
     seen.add(v.key);
   }
-  const envPath = path66.join(process.cwd(), ".env");
-  const tmpPath = path66.join(process.cwd(), ".env.codeam.tmp");
+  const envPath = path67.join(process.cwd(), ".env");
+  const tmpPath = path67.join(process.cwd(), ".env.codeam.tmp");
   try {
     await fs62.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
     await fs62.promises.rename(tmpPath, envPath);
@@ -26293,7 +26468,7 @@ function buildNpmInstallInvocation(opts) {
   const execPath = opts?.execPath ?? process.execPath;
   const exists2 = opts?.existsSync ?? fs62.existsSync;
   const platform3 = opts?.platform ?? process.platform;
-  const p2 = platform3 === "win32" ? path66.win32 : path66.posix;
+  const p2 = platform3 === "win32" ? path67.win32 : path67.posix;
   const normalized = entryScript.split(/[\\/]/).join("/");
   const marker = "/lib/node_modules/codeam-cli/";
   const markerIdx = normalized.indexOf(marker);
@@ -26315,7 +26490,7 @@ function isPermissionError(stderr) {
 function resolveGlobalNodeModulesDir(opts) {
   const entryScript = opts?.entryScript ?? process.argv[1] ?? "";
   const platform3 = opts?.platform ?? process.platform;
-  const p2 = platform3 === "win32" ? path66.win32 : path66.posix;
+  const p2 = platform3 === "win32" ? path67.win32 : path67.posix;
   const marker = "/lib/node_modules/codeam-cli/";
   const markerIdx = entryScript.split(/[\\/]/).join("/").indexOf(marker);
   if (markerIdx <= 0) return null;
@@ -26337,7 +26512,7 @@ function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
   }
   for (const name of entries) {
     if (!/^\.codeam-cli-/.test(name)) continue;
-    const full = path66.join(nodeModulesDir, name);
+    const full = path67.join(nodeModulesDir, name);
     try {
       const st3 = statSync17(full);
       if (now - st3.mtimeMs < STALE_STAGING_AGE_MS) continue;
@@ -27215,11 +27390,11 @@ function resolveTokenValue(args2) {
   }
   const fileFlag = args2.find((a) => a.startsWith("--token-file="));
   if (fileFlag) {
-    const path89 = fileFlag.slice("--token-file=".length);
+    const path90 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs63.readFileSync(path89, "utf8").trim();
-      if (content.length === 0) fail(`--token-file ${path89} is empty`);
-      rmIfExistsQuiet(path89);
+      const content = fs63.readFileSync(path90, "utf8").trim();
+      if (content.length === 0) fail(`--token-file ${path90} is empty`);
+      rmIfExistsQuiet(path90);
       return content;
     } catch (err) {
       fail(`Could not read --token-file: ${err.message}`);
@@ -27309,7 +27484,7 @@ async function claim(token, pluginId, pluginSecretHash) {
   }
 }
 function pairAutoLockPath() {
-  return path67.join(os52.homedir(), ".codeam", "pair-auto.lock");
+  return path68.join(os52.homedir(), ".codeam", "pair-auto.lock");
 }
 function isLivePairAuto(pid) {
   if (!Number.isInteger(pid) || pid <= 0 || pid === process.pid) return false;
@@ -27329,12 +27504,12 @@ function isLiveCodeam(pid) {
 }
 function daemonLockPath(sessionId) {
   const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
-  return path67.join(os52.homedir(), ".codeam", `daemon-${safe}.lock`);
+  return path68.join(os52.homedir(), ".codeam", `daemon-${safe}.lock`);
 }
 function acquireDaemonLock(sessionId) {
   const lockPath = daemonLockPath(sessionId);
   try {
-    fs63.mkdirSync(path67.dirname(lockPath), { recursive: true });
+    fs63.mkdirSync(path68.dirname(lockPath), { recursive: true });
     try {
       fs63.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
@@ -27368,7 +27543,7 @@ function acquireDaemonLock(sessionId) {
 function acquireSingletonLock() {
   const lockPath = pairAutoLockPath();
   try {
-    fs63.mkdirSync(path67.dirname(lockPath), { recursive: true });
+    fs63.mkdirSync(path68.dirname(lockPath), { recursive: true });
     try {
       fs63.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
@@ -27832,7 +28007,7 @@ var AgentService = class _AgentService {
 };
 
 // src/agents/acp/adapters.ts
-var path69 = __toESM(require("path"));
+var path70 = __toESM(require("path"));
 
 // src/agents/acp/agent-binary.ts
 var import_fs6 = __toESM(require("fs"));
@@ -28008,11 +28183,11 @@ async function waitForAdapterModuleGraph(command2, args2, opts = {}) {
 
 // src/agents/kimi/installer.ts
 var import_node_child_process27 = require("child_process");
-var import_node_os11 = require("os");
+var import_node_os10 = require("os");
 var import_node_path9 = require("path");
 var INSTALL_URL2 = "https://code.kimi.com/kimi-code/install.sh";
 function kimiBinDir() {
-  return (0, import_node_path9.join)(process.env.KIMI_CODE_HOME || (0, import_node_path9.join)((0, import_node_os11.homedir)(), ".kimi-code"), "bin");
+  return (0, import_node_path9.join)(process.env.KIMI_CODE_HOME || (0, import_node_path9.join)((0, import_node_os10.homedir)(), ".kimi-code"), "bin");
 }
 function kimiRuns() {
   const r = (0, import_node_child_process27.spawnSync)("kimi", ["--version"], { stdio: "ignore", timeout: 15e3 });
@@ -28060,11 +28235,11 @@ async function ensureKimiInstalled() {
 
 // src/agents/opencode/installer.ts
 var import_node_child_process28 = require("child_process");
-var import_node_os12 = require("os");
+var import_node_os11 = require("os");
 var import_node_path10 = require("path");
 var INSTALL_URL3 = "https://opencode.ai/install";
 function opencodeBinDir() {
-  return (0, import_node_path10.join)(process.env.OPENCODE_HOME || (0, import_node_path10.join)((0, import_node_os12.homedir)(), ".opencode"), "bin");
+  return (0, import_node_path10.join)(process.env.OPENCODE_HOME || (0, import_node_path10.join)((0, import_node_os11.homedir)(), ".opencode"), "bin");
 }
 function opencodeRuns() {
   const r = (0, import_node_child_process28.spawnSync)("opencode", ["--version"], { stdio: "ignore", timeout: 15e3 });
@@ -28122,13 +28297,13 @@ function resolveBin(pkgName, binName) {
   try {
     const manifestPath = require_.resolve(`${pkgName}/package.json`);
     const manifest = require_(`${pkgName}/package.json`);
-    const pkgDir = path69.dirname(manifestPath);
+    const pkgDir = path70.dirname(manifestPath);
     const bin = manifest.bin;
     if (!bin) return null;
-    if (typeof bin === "string") return path69.resolve(pkgDir, bin);
+    if (typeof bin === "string") return path70.resolve(pkgDir, bin);
     const target = binName ?? Object.keys(bin)[0];
     if (!target || !bin[target]) return null;
-    return path69.resolve(pkgDir, bin[target]);
+    return path70.resolve(pkgDir, bin[target]);
   } catch {
     return null;
   }
@@ -28279,7 +28454,7 @@ var import_node_crypto11 = require("crypto");
 
 // src/services/history.service.ts
 var fs65 = __toESM(require("fs"));
-var path70 = __toESM(require("path"));
+var path71 = __toESM(require("path"));
 var os54 = __toESM(require("os"));
 var https7 = __toESM(require("https"));
 var http6 = __toESM(require("http"));
@@ -28448,7 +28623,7 @@ var HistoryService = class _HistoryService {
     return this._quotaPercent === null || Date.now() - this._quotaFetchedAt > ttlMs;
   }
   get projectDir() {
-    return this.runtime.resolveHistoryDir(this.cwd) ?? path70.join(os54.homedir(), ".claude", "projects", encodeCwd(this.cwd));
+    return this.runtime.resolveHistoryDir(this.cwd) ?? path71.join(os54.homedir(), ".claude", "projects", encodeCwd(this.cwd));
   }
   /** Set the current Claude conversation ID (extracted from /cost command or session start) */
   setCurrentConversationId(id) {
@@ -28460,7 +28635,7 @@ var HistoryService = class _HistoryService {
   /** Return the current message count in the active conversation. */
   getCurrentMessageCount() {
     if (!this.currentConversationId) return 0;
-    const filePath = path70.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+    const filePath = path71.join(this.projectDir, `${this.currentConversationId}.jsonl`);
     return parseJsonl(filePath).length;
   }
   /**
@@ -28471,7 +28646,7 @@ var HistoryService = class _HistoryService {
     const deadline = Date.now() + timeoutMs;
     while (Date.now() < deadline) {
       if (!this.currentConversationId) return null;
-      const filePath = path70.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+      const filePath = path71.join(this.projectDir, `${this.currentConversationId}.jsonl`);
       const messages = parseJsonl(filePath);
       if (messages.length > previousCount) {
         for (let i = messages.length - 1; i >= previousCount; i--) {
@@ -28499,14 +28674,14 @@ var HistoryService = class _HistoryService {
     try {
       const files = fs65.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
         try {
-          const stat3 = fs65.statSync(path70.join(dir, e.name));
+          const stat3 = fs65.statSync(path71.join(dir, e.name));
           return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
         } catch {
           return { name: e.name, mtime: 0, birthtime: 0 };
         }
       }).filter((f) => f.birthtime >= cutoff).sort((a, b) => b.mtime - a.mtime);
       if (files.length > 0) {
-        this.currentConversationId = path70.basename(files[0].name, ".jsonl");
+        this.currentConversationId = path71.basename(files[0].name, ".jsonl");
       }
     } catch {
     }
@@ -28546,7 +28721,7 @@ var HistoryService = class _HistoryService {
     }
     const files = entries.filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
       try {
-        const stat3 = fs65.statSync(path70.join(dir, e.name));
+        const stat3 = fs65.statSync(path71.join(dir, e.name));
         return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
       } catch {
         return { name: e.name, mtime: 0, birthtime: 0 };
@@ -28555,7 +28730,7 @@ var HistoryService = class _HistoryService {
     if (files.length === 0) return null;
     const targetFile = this.currentConversationId ? `${this.currentConversationId}.jsonl` : files[0].name;
     if (!files.some((f) => f.name === targetFile)) return null;
-    return this.extractUsageFromFile(path70.join(dir, targetFile));
+    return this.extractUsageFromFile(path71.join(dir, targetFile));
   }
   extractUsageFromFile(filePath) {
     let raw;
@@ -28607,7 +28782,7 @@ var HistoryService = class _HistoryService {
     try {
       files = fs65.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
         try {
-          return fs65.statSync(path70.join(projectDir, f)).mtimeMs >= monthStartMs;
+          return fs65.statSync(path71.join(projectDir, f)).mtimeMs >= monthStartMs;
         } catch {
           return false;
         }
@@ -28618,7 +28793,7 @@ var HistoryService = class _HistoryService {
     for (const file of files) {
       let raw;
       try {
-        raw = fs65.readFileSync(path70.join(projectDir, file), "utf8");
+        raw = fs65.readFileSync(path71.join(projectDir, file), "utf8");
       } catch {
         continue;
       }
@@ -28697,7 +28872,7 @@ var HistoryService = class _HistoryService {
     if (this.runtime.resolveHistoryFile) {
       return this.runtime.resolveHistoryFile(this.cwd, sessionId);
     }
-    return path70.join(this.projectDir, `${sessionId}.jsonl`);
+    return path71.join(this.projectDir, `${sessionId}.jsonl`);
   }
   /**
    * Parse a conversation's messages from disk, agent-aware. Claude uses the
@@ -28731,7 +28906,7 @@ var HistoryService = class _HistoryService {
         };
       });
     }
-    return parseJsonl(path70.join(this.projectDir, `${sessionId}.jsonl`));
+    return parseJsonl(path71.join(this.projectDir, `${sessionId}.jsonl`));
   }
   async loadConversation(sessionId) {
     const messages = this.readConversation(sessionId);
@@ -28877,7 +29052,7 @@ var import_node_child_process29 = require("child_process");
 var fs66 = __toESM(require("fs/promises"));
 var fsSync = __toESM(require("fs"));
 var os56 = __toESM(require("os"));
-var path72 = __toESM(require("path"));
+var path73 = __toESM(require("path"));
 var import_node_stream = require("stream");
 
 // ../../node_modules/@agentclientprotocol/sdk/dist/schema/index.js
@@ -32903,7 +33078,7 @@ function createIdleTimeout(idleMs, makeError, activeIdleMs = idleMs) {
 }
 
 // src/agents/acp/internal-paths.ts
-var path71 = __toESM(require("path"));
+var path72 = __toESM(require("path"));
 var os55 = __toESM(require("os"));
 var INTERNAL_TOKENS = [".codeam", "house-claude"];
 var SELF_HOSTED_WORKSPACE_RE = /\.codeam[/\\]self-hosted/gi;
@@ -32914,11 +33089,11 @@ function textReferencesInternal(text) {
 }
 function pathIsInternal(p2, homeDir2 = os55.homedir()) {
   if (!p2) return false;
-  const abs = path71.resolve(p2);
-  const home = path71.resolve(homeDir2);
-  const within = (root) => abs === root || abs.startsWith(root + path71.sep);
-  if (within(path71.join(home, ".codeam", "self-hosted"))) return false;
-  return within(path71.join(home, ".codeam")) || within(path71.join(home, ".beads")) || abs === path71.join(home, ".codeam-host.log") || abs.includes(`${path71.sep}house-claude${path71.sep}`) || abs.endsWith(`${path71.sep}house-claude`);
+  const abs = path72.resolve(p2);
+  const home = path72.resolve(homeDir2);
+  const within = (root) => abs === root || abs.startsWith(root + path72.sep);
+  if (within(path72.join(home, ".codeam", "self-hosted"))) return false;
+  return within(path72.join(home, ".codeam")) || within(path72.join(home, ".beads")) || abs === path72.join(home, ".codeam-host.log") || abs.includes(`${path72.sep}house-claude${path72.sep}`) || abs.endsWith(`${path72.sep}house-claude`);
 }
 function toolCallReferencesInternal(call) {
   if (textReferencesInternal(call.title)) return true;
@@ -33965,24 +34140,24 @@ function knownAgentBinaryDirs() {
   out2.push("/tmp/codeam-node20/bin");
   for (const root of [
     "/usr/local/share/nvm/versions/node",
-    path72.join(home, ".nvm/versions/node")
+    path73.join(home, ".nvm/versions/node")
   ]) {
     try {
       for (const child of fsSync.readdirSync(root)) {
-        out2.push(path72.join(root, child, "bin"));
+        out2.push(path73.join(root, child, "bin"));
       }
     } catch {
     }
   }
-  out2.push(path72.join(home, ".volta/bin"));
+  out2.push(path73.join(home, ".volta/bin"));
   out2.push("/usr/local/bin");
   out2.push("/usr/bin");
-  out2.push(path72.join(home, ".local/bin"));
-  out2.push(path72.join(home, "bin"));
+  out2.push(path73.join(home, ".local/bin"));
+  out2.push(path73.join(home, "bin"));
   if (process.platform === "win32") {
     const { LOCALAPPDATA, APPDATA } = process.env;
-    if (LOCALAPPDATA) out2.push(path72.join(LOCALAPPDATA, "cursor-agent"));
-    if (APPDATA) out2.push(path72.join(APPDATA, "npm"));
+    if (LOCALAPPDATA) out2.push(path73.join(LOCALAPPDATA, "cursor-agent"));
+    if (APPDATA) out2.push(path73.join(APPDATA, "npm"));
   }
   return out2.filter((p2) => {
     try {
@@ -33994,7 +34169,7 @@ function knownAgentBinaryDirs() {
 }
 function expandPathForAgentBinaries(existingPath) {
   const existing = new Set(
-    existingPath.split(path72.delimiter).filter((p2) => p2.length > 0)
+    existingPath.split(path73.delimiter).filter((p2) => p2.length > 0)
   );
   const additions = [];
   for (const dir of knownAgentBinaryDirs()) {
@@ -34004,7 +34179,7 @@ function expandPathForAgentBinaries(existingPath) {
     }
   }
   if (additions.length === 0) return existingPath;
-  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path72.delimiter);
+  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path73.delimiter);
 }
 
 // src/agents/acp/headroom-budget-proxy.ts
@@ -34488,12 +34663,12 @@ function commonPrefixLength(a, b) {
 var import_child_process27 = require("child_process");
 var fs67 = __toESM(require("fs"));
 var os57 = __toESM(require("os"));
-var path73 = __toESM(require("path"));
+var path74 = __toESM(require("path"));
 var _onboardingSeam = {
-  markerPath: (sessionId) => path73.join(os57.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
+  markerPath: (sessionId) => path74.join(os57.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
   exists: (p2) => fs67.existsSync(p2),
   write: (p2) => {
-    fs67.mkdirSync(path73.dirname(p2), { recursive: true });
+    fs67.mkdirSync(path74.dirname(p2), { recursive: true });
     fs67.writeFileSync(p2, "");
   },
   disabled: () => {
@@ -34531,7 +34706,7 @@ function resolveRepoName(cwd) {
       if (name) return name;
     }
   }
-  const base = path73.basename(cwd || "");
+  const base = path74.basename(cwd || "");
   if (base && !isUuid(base)) return base;
   return "this project";
 }
@@ -34790,12 +34965,12 @@ var import_crypto5 = require("crypto");
 // src/services/turn-files/git-changeset.ts
 var import_child_process28 = require("child_process");
 var fs69 = __toESM(require("fs/promises"));
-var path75 = __toESM(require("path"));
+var path76 = __toESM(require("path"));
 
 // src/services/turn-files/review-ignore.ts
 var import_ignore2 = __toESM(require("ignore"));
 var fs68 = __toESM(require("fs"));
-var path74 = __toESM(require("path"));
+var path75 = __toESM(require("path"));
 var CURATED_REVIEW_IGNORE = [
   // Google Cloud SDK (the incident) — installs a huge python tree.
   "google-cloud-sdk/",
@@ -34834,7 +35009,7 @@ var CURATED_REVIEW_IGNORE = [
 function makeReviewIgnore(repoRoot) {
   const ig = (0, import_ignore2.default)().add(CURATED_REVIEW_IGNORE);
   try {
-    const custom = fs68.readFileSync(path74.join(repoRoot, ".codeam", "reviewignore"), "utf8");
+    const custom = fs68.readFileSync(path75.join(repoRoot, ".codeam", "reviewignore"), "utf8");
     ig.add(custom);
   } catch {
   }
@@ -34879,7 +35054,7 @@ async function collectRepoChangeset(opts) {
     let stats;
     if (!truncated && row.fileStatus === "added" && numstatEntry === void 0) {
       const lineCount = await readUntrackedLineCount(
-        path75.join(opts.repoRoot, row.filePath)
+        path76.join(opts.repoRoot, row.filePath)
       );
       stats = { added: lineCount, removed: 0 };
     } else {
@@ -35021,8 +35196,8 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (hasGit) {
       out2.push({
         repoRoot: dir,
-        repoPath: path75.relative(workingDir, dir),
-        repoName: path75.basename(dir)
+        repoPath: path76.relative(workingDir, dir),
+        repoName: path76.basename(dir)
       });
       return;
     }
@@ -35030,14 +35205,14 @@ async function discoverRepos(workingDir, maxDepth = 4) {
       if (!entry.isDirectory) continue;
       if (entry.name === "node_modules") continue;
       if (entry.name === "dist" || entry.name === "build") continue;
-      await walk(path75.join(dir, entry.name), depth + 1);
+      await walk(path76.join(dir, entry.name), depth + 1);
     }
   }
 }
 
 // src/services/turn-files/files-outbox.ts
 var fs70 = __toESM(require("fs/promises"));
-var path76 = __toESM(require("path"));
+var path77 = __toESM(require("path"));
 var import_os12 = require("os");
 var HOME_OUTBOX_DIR = ".codeam/outbox";
 var MAX_AGE_MS = 24 * 60 * 60 * 1e3;
@@ -35070,15 +35245,15 @@ var FilesOutbox = class {
   backoffIndex = 0;
   stopped = false;
   constructor(opts) {
-    const base = opts.baseDir ?? path76.join(homeDir(), HOME_OUTBOX_DIR);
-    this.filePath = path76.join(base, `${opts.sessionId}.jsonl`);
+    const base = opts.baseDir ?? path77.join(homeDir(), HOME_OUTBOX_DIR);
+    this.filePath = path77.join(base, `${opts.sessionId}.jsonl`);
     this.post = opts.post;
     this.autoSchedule = opts.autoSchedule !== false;
   }
   /** Persist the entry to disk and trigger a flush. Returns once the
    *  line is durable on disk (not once the POST succeeds). */
   async enqueue(entry) {
-    await fs70.mkdir(path76.dirname(this.filePath), { recursive: true });
+    await fs70.mkdir(path77.dirname(this.filePath), { recursive: true });
     await fs70.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
     this.backoffIndex = 0;
     if (this.autoSchedule) this.scheduleFlush(0);
@@ -35656,7 +35831,7 @@ async function postBudgetReached(opts, fetchImpl = fetch) {
 // src/packs/gates.ts
 var import_node_child_process30 = require("child_process");
 var fs71 = __toESM(require("fs"));
-var path77 = __toESM(require("path"));
+var path78 = __toESM(require("path"));
 var defaultCommandRunner = (file, args2, cwd, timeoutMs) => new Promise((resolve9) => {
   (0, import_node_child_process30.execFile)(
     file,
@@ -35693,14 +35868,14 @@ var NO_TEST_PLACEHOLDER = 'echo "Error: no test specified"';
 var CHECKS_TIMEOUT_MS = 5 * 6e4;
 function detectChecksCommand(cwd) {
   try {
-    const cfg = JSON.parse(fs71.readFileSync(path77.join(cwd, ".codeam", "pack.json"), "utf8"));
+    const cfg = JSON.parse(fs71.readFileSync(path78.join(cwd, ".codeam", "pack.json"), "utf8"));
     if (typeof cfg.checksCommand === "string" && cfg.checksCommand.trim().length > 0) {
       return cfg.checksCommand.trim();
     }
   } catch {
   }
   try {
-    const pkg = JSON.parse(fs71.readFileSync(path77.join(cwd, "package.json"), "utf8"));
+    const pkg = JSON.parse(fs71.readFileSync(path78.join(cwd, "package.json"), "utf8"));
     const test = pkg.scripts?.test;
     if (typeof test === "string" && test.trim().length > 0 && !test.includes(NO_TEST_PLACEHOLDER)) {
       return "npm test";
@@ -35719,36 +35894,36 @@ ${res.stderr}`.trim();
 
 // src/packs/run-store.ts
 var fs72 = __toESM(require("fs"));
-var path78 = __toESM(require("path"));
+var path79 = __toESM(require("path"));
 var crypto5 = __toESM(require("crypto"));
 function packsDir(cwd) {
-  return path78.join(cwd, ".codeam", "packs");
+  return path79.join(cwd, ".codeam", "packs");
 }
 function runDir(cwd, runId) {
-  return path78.join(packsDir(cwd), runId);
+  return path79.join(packsDir(cwd), runId);
 }
 function newRunId() {
   return `pk_${Date.now().toString(36)}_${crypto5.randomBytes(4).toString("hex")}`;
 }
 function writeJsonAtomic(file, value) {
-  fs72.mkdirSync(path78.dirname(file), { recursive: true });
+  fs72.mkdirSync(path79.dirname(file), { recursive: true });
   const tmp = `${file}.tmp`;
   fs72.writeFileSync(tmp, JSON.stringify(value, null, 2));
   fs72.renameSync(tmp, file);
 }
 function saveRun(cwd, state) {
-  writeJsonAtomic(path78.join(runDir(cwd, state.runId), "run.json"), state);
+  writeJsonAtomic(path79.join(runDir(cwd, state.runId), "run.json"), state);
 }
 function saveStageHandoff(cwd, runId, stageIndex, role, handoff) {
   const name = `${String(stageIndex + 1).padStart(2, "0")}-${role}.json`;
-  writeJsonAtomic(path78.join(runDir(cwd, runId), name), handoff);
+  writeJsonAtomic(path79.join(runDir(cwd, runId), name), handoff);
 }
 function loadLatestRun(cwd) {
   try {
     const dir = packsDir(cwd);
     const entries = fs72.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name).sort();
     for (let i = entries.length - 1; i >= 0; i--) {
-      const file = path78.join(dir, entries[i], "run.json");
+      const file = path79.join(dir, entries[i], "run.json");
       try {
         const parsed = JSON.parse(fs72.readFileSync(file, "utf8"));
         if (parsed && typeof parsed.runId === "string") return parsed;
@@ -35761,16 +35936,16 @@ function loadLatestRun(cwd) {
 }
 function ensureLedgerIgnored(cwd) {
   try {
-    const gitDir = path78.join(cwd, ".git");
+    const gitDir = path79.join(cwd, ".git");
     if (!fs72.existsSync(gitDir)) return;
-    const exclude = path78.join(gitDir, "info", "exclude");
+    const exclude = path79.join(gitDir, "info", "exclude");
     let existing = "";
     try {
       existing = fs72.readFileSync(exclude, "utf8");
     } catch {
     }
     if (existing.includes(".codeam/packs/")) return;
-    fs72.mkdirSync(path78.dirname(exclude), { recursive: true });
+    fs72.mkdirSync(path79.dirname(exclude), { recursive: true });
     fs72.writeFileSync(exclude, `${existing.trimEnd()}
 .codeam/packs/
 `.trimStart());
@@ -36225,11 +36400,11 @@ function buildMcpServersForStart(ctx) {
 }
 
 // src/integrations/detect-stack.ts
-var import_node_fs11 = __toESM(require("fs"));
+var import_node_fs12 = __toESM(require("fs"));
 var import_node_path11 = __toESM(require("path"));
 function readSafe(cwd, rel) {
   try {
-    return import_node_fs11.default.readFileSync(import_node_path11.default.join(cwd, rel), "utf8");
+    return import_node_fs12.default.readFileSync(import_node_path11.default.join(cwd, rel), "utf8");
   } catch {
     return "";
   }
@@ -36363,18 +36538,18 @@ function buildAcpPromptBlocks(payload) {
 
 // src/agents/agent-standard.ts
 var fs74 = __toESM(require("fs"));
-var path80 = __toESM(require("path"));
+var path81 = __toESM(require("path"));
 var os58 = __toESM(require("os"));
 function ensureAgentStandard(homeDir2 = os58.homedir()) {
   try {
-    const file = path80.join(homeDir2, ".claude", "CLAUDE.md");
+    const file = path81.join(homeDir2, ".claude", "CLAUDE.md");
     let existing = "";
     try {
       existing = fs74.readFileSync(file, "utf8");
     } catch {
     }
     if (existing.includes(AGENT_STANDARD_MARKER)) return;
-    fs74.mkdirSync(path80.dirname(file), { recursive: true });
+    fs74.mkdirSync(path81.dirname(file), { recursive: true });
     const next = existing.trim() ? `${existing.trimEnd()}
 
 ${AGENT_STANDARD_BLOCK}
@@ -36386,10 +36561,10 @@ ${AGENT_STANDARD_BLOCK}
 }
 var _agentStandardSeam = {
   isLocalSession: () => isLocalSession(),
-  markerPath: (sessionId) => path80.join(os58.homedir(), ".codeam", "agent-standard", `${sessionId}.done`),
+  markerPath: (sessionId) => path81.join(os58.homedir(), ".codeam", "agent-standard", `${sessionId}.done`),
   exists: (p2) => fs74.existsSync(p2),
   write: (p2) => {
-    fs74.mkdirSync(path80.dirname(p2), { recursive: true });
+    fs74.mkdirSync(path81.dirname(p2), { recursive: true });
     fs74.writeFileSync(p2, "");
   }
 };
@@ -39060,7 +39235,7 @@ function startClaudeCredentialSync(opts) {
 
 // src/beads/workflow-hint.ts
 var fs75 = __toESM(require("fs"));
-var path81 = __toESM(require("path"));
+var path82 = __toESM(require("path"));
 var os59 = __toESM(require("os"));
 var BEADS_HINT_MARKER = "<!-- codeam:beads-workflow -->";
 var BEADS_HINT = `${BEADS_HINT_MARKER}
@@ -39077,14 +39252,14 @@ This environment uses **bd (beads)** for issue/task tracking and persistent memo
 ${BEADS_HINT_MARKER}`;
 function ensureBeadsWorkflowHint(homeDir2 = os59.homedir()) {
   try {
-    const file = path81.join(homeDir2, ".claude", "CLAUDE.md");
+    const file = path82.join(homeDir2, ".claude", "CLAUDE.md");
     let existing = "";
     try {
       existing = fs75.readFileSync(file, "utf8");
     } catch {
     }
     if (existing.includes(BEADS_HINT_MARKER)) return;
-    fs75.mkdirSync(path81.dirname(file), { recursive: true });
+    fs75.mkdirSync(path82.dirname(file), { recursive: true });
     const next = existing.trim() ? `${existing.trimEnd()}
 
 ${BEADS_HINT}
@@ -39096,8 +39271,8 @@ ${BEADS_HINT}
 }
 
 // src/skills/provision.ts
-var import_node_os13 = __toESM(require("os"));
-function provisionSkillsForStart(home = import_node_os13.default.homedir()) {
+var import_node_os12 = __toESM(require("os"));
+function provisionSkillsForStart(home = import_node_os12.default.homedir()) {
   const materialized = [];
   try {
     const manifest = readSkillsManifest();
@@ -39829,11 +40004,11 @@ function keepDeviceAwake(deps = {}) {
 // src/agents/claude/onboarding.ts
 var fs77 = __toESM(require("fs"));
 var os61 = __toESM(require("os"));
-var path82 = __toESM(require("path"));
+var path83 = __toESM(require("path"));
 var ONBOARDING_VERSION_SENTINEL = "9999.0.0";
 function ensureClaudeOnboarded(cwd) {
   try {
-    const file = path82.join(os61.homedir(), ".claude.json");
+    const file = path83.join(os61.homedir(), ".claude.json");
     let config = {};
     try {
       config = JSON.parse(fs77.readFileSync(file, "utf8"));
@@ -39861,7 +40036,7 @@ function ensureClaudeOnboarded(cwd) {
       }
     }
     if (!changed) return;
-    fs77.mkdirSync(path82.dirname(file), { recursive: true });
+    fs77.mkdirSync(path83.dirname(file), { recursive: true });
     fs77.writeFileSync(file, JSON.stringify(config, null, 2));
     log.info(
       "claude",
@@ -40594,7 +40769,7 @@ var import_picocolors11 = __toESM(require("picocolors"));
 var import_child_process29 = require("child_process");
 var import_util4 = require("util");
 var import_picocolors9 = __toESM(require("picocolors"));
-var path83 = __toESM(require("path"));
+var path84 = __toESM(require("path"));
 var execFileP6 = (0, import_util4.promisify)(import_child_process29.execFile);
 var MAX_BUFFER = 8 * 1024 * 1024;
 function resetStdinForChild() {
@@ -41083,7 +41258,7 @@ var GitHubCodespacesProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path83.posix.dirname(remotePath);
+    const remoteDir = path84.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote(remoteDir)}`,
       `cat > ${shellQuote(remotePath)}`
@@ -41153,7 +41328,7 @@ function shellQuote(s) {
 // src/services/providers/gitpod.ts
 var import_child_process30 = require("child_process");
 var import_util5 = require("util");
-var path84 = __toESM(require("path"));
+var path85 = __toESM(require("path"));
 var import_picocolors10 = __toESM(require("picocolors"));
 var execFileP7 = (0, import_util5.promisify)(import_child_process30.execFile);
 var MAX_BUFFER2 = 8 * 1024 * 1024;
@@ -41393,7 +41568,7 @@ var GitpodProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path84.posix.dirname(remotePath);
+    const remoteDir = path85.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote2(remoteDir)}`,
       `cat > ${shellQuote2(remotePath)}`
@@ -41429,7 +41604,7 @@ function shellQuote2(s) {
 // src/services/providers/gitlab-workspaces.ts
 var import_child_process31 = require("child_process");
 var import_util6 = require("util");
-var path85 = __toESM(require("path"));
+var path86 = __toESM(require("path"));
 var execFileP8 = (0, import_util6.promisify)(import_child_process31.execFile);
 var MAX_BUFFER3 = 8 * 1024 * 1024;
 var GITLAB_API_BASE = process.env.CODEAM_GITLAB_API_URL ?? "https://gitlab.com/api/v4";
@@ -41689,7 +41864,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
-    const remoteDir = path85.posix.dirname(remotePath);
+    const remoteDir = path86.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote3(remoteDir)}`, `cat > ${shellQuote3(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote3(remotePath)}`);
@@ -41757,7 +41932,7 @@ function shellQuote3(s) {
 // src/services/providers/railway.ts
 var import_child_process32 = require("child_process");
 var import_util7 = require("util");
-var path86 = __toESM(require("path"));
+var path87 = __toESM(require("path"));
 var execFileP9 = (0, import_util7.promisify)(import_child_process32.execFile);
 var MAX_BUFFER4 = 8 * 1024 * 1024;
 function resetStdinForChild4() {
@@ -41993,7 +42168,7 @@ var RailwayProvider = class {
     if (!projectId || !serviceId) {
       throw new Error("Invalid Railway workspace id (expected projectId/serviceId).");
     }
-    const remoteDir = path86.posix.dirname(remotePath);
+    const remoteDir = path87.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote4(remoteDir)}`, `cat > ${shellQuote4(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote4(remotePath)}`);
@@ -42640,7 +42815,7 @@ var import_node_dns = require("dns");
 var import_node_util5 = require("util");
 var import_node_crypto13 = require("crypto");
 var fs78 = __toESM(require("fs"));
-var path87 = __toESM(require("path"));
+var path88 = __toESM(require("path"));
 var import_picocolors14 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util5.promisify)(import_node_dns.resolve);
 async function checkDns(apiBase2) {
@@ -42696,10 +42871,10 @@ async function checkHealth(apiBase2) {
   }
 }
 function checkConfigDir() {
-  const dir = path87.join(require("os").homedir(), ".codeam");
+  const dir = path88.join(require("os").homedir(), ".codeam");
   try {
     fs78.mkdirSync(dir, { recursive: true, mode: 448 });
-    const probe = path87.join(dir, ".doctor-probe");
+    const probe = path88.join(dir, ".doctor-probe");
     fs78.writeFileSync(probe, "ok", { mode: 384 });
     const read2 = fs78.readFileSync(probe, "utf8");
     fs78.unlinkSync(probe);
@@ -42766,7 +42941,7 @@ function checkNodePty() {
       detail: "not required on this platform"
     };
   }
-  const vendoredPath = path87.join(__dirname, "vendor", "node-pty");
+  const vendoredPath = path88.join(__dirname, "vendor", "node-pty");
   for (const target of [vendoredPath, "node-pty"]) {
     try {
       require(target);
@@ -42808,7 +42983,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.62.0" : "0.0.0-dev";
+  const cliVersion = true ? "2.62.2" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -43006,8 +43181,8 @@ async function completion(args2) {
 
 // src/integrations/mcp-run.ts
 var import_node_child_process34 = require("child_process");
-var import_node_fs12 = require("fs");
-var import_node_os14 = __toESM(require("os"));
+var import_node_fs13 = require("fs");
+var import_node_os13 = __toESM(require("os"));
 var import_node_path12 = __toESM(require("path"));
 
 // src/integrations/token-client.ts
@@ -43088,13 +43263,13 @@ function commandExists(command2) {
 }
 function localBinCandidates(command2) {
   return [
-    import_node_path12.default.join(import_node_os14.default.homedir(), ".local", "bin", command2),
-    import_node_path12.default.join(import_node_os14.default.homedir(), ".cargo", "bin", command2)
+    import_node_path12.default.join(import_node_os13.default.homedir(), ".local", "bin", command2),
+    import_node_path12.default.join(import_node_os13.default.homedir(), ".cargo", "bin", command2)
   ];
 }
 function resolveLauncherPath(command2, deps = {
   commandExists,
-  existsSync: import_node_fs12.existsSync
+  existsSync: import_node_fs13.existsSync
 }) {
   if (deps.commandExists(command2)) return command2;
   for (const candidate of localBinCandidates(command2)) {
@@ -43199,7 +43374,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.62.0" : "unknown";
+  const v = true ? "2.62.2" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }