codeam-cli 2.62.2 → 2.63.1

package/dist/index.js

@@ -271,8 +271,8 @@ var init_stdio_proxy = __esm({
       }
       async spawnChild(stdout, preResolved) {
         const spec = preResolved ?? await this.opts.spawnSpec();
-        const spawn45 = this.opts.spawnImpl ?? import_node_child_process33.spawn;
-        const child = spawn45(spec.command, spec.args, {
+        const spawn46 = this.opts.spawnImpl ?? import_node_child_process33.spawn;
+        const child = spawn46(spec.command, spec.args, {
           env: { ...process.env, ...spec.env },
           // env only — never argv
           stdio: ["pipe", "pipe", "inherit"]
@@ -2916,6 +2916,11 @@ var USER_EVENTS = {
   CODERABBIT_PROGRESS: "coderabbit_progress",
   CODERABBIT_STATUS: "coderabbit_status",
   CODERABBIT_REVIEW: "coderabbit_review",
+  // Session agent switch — the CLI posts these to /api/agent-switch/events
+  // while a `switch_agent` relay command swaps the session's agent in-process;
+  // the backend re-publishes them on the per-user SSE bus (mirrored in repo A).
+  SWITCH_AGENT_PROGRESS: "switch_agent_progress",
+  SWITCH_AGENT_STATUS: "switch_agent_status",
   // VCS / PR Command Center — the backend publishes this after an agent finishes
   // reviewing a PR (verdict + comment count + findings), driving the mobile
   // completion screen + push. Mirrored in repo A's app-shared events.ts.
@@ -3231,6 +3236,13 @@ function makeConfig(baseDir) {
     s.disable1mContext = value;
     save(c2);
   }
+  function setSessionAgent2(pluginId, agent) {
+    const c2 = load();
+    const s = c2.sessions.find((x) => x.pluginId === pluginId);
+    if (!s) return;
+    s.agent = agent;
+    save(c2);
+  }
   function clearAll2() {
     try {
       fs3.unlinkSync(file);
@@ -3243,7 +3255,7 @@ function makeConfig(baseDir) {
   function loadCliConfig2() {
     return load();
   }
-  return { getConfig: getConfig2, ensurePluginId: ensurePluginId2, addSession: addSession2, removeSession: removeSession2, setActiveSession: setActiveSession2, getActiveSession: getActiveSession2, getActiveSessionForAgent: getActiveSessionForAgent2, setDisable1mContext: setDisable1mContext2, clearAll: clearAll2, saveCliConfig: saveCliConfig2, loadCliConfig: loadCliConfig2 };
+  return { getConfig: getConfig2, ensurePluginId: ensurePluginId2, addSession: addSession2, removeSession: removeSession2, setActiveSession: setActiveSession2, getActiveSession: getActiveSession2, getActiveSessionForAgent: getActiveSessionForAgent2, setDisable1mContext: setDisable1mContext2, setSessionAgent: setSessionAgent2, clearAll: clearAll2, saveCliConfig: saveCliConfig2, loadCliConfig: loadCliConfig2 };
 }
 var CODESPACE_ENV_KEYS = [
   "PREVIEW_TUNNEL_TOKEN",
@@ -3267,11 +3279,11 @@ function loadCodespaceEnv() {
   }
 }
 var _default = makeConfig();
-var { getConfig, ensurePluginId, addSession, removeSession, setActiveSession, getActiveSession, getActiveSessionForAgent, setDisable1mContext, clearAll, saveCliConfig, loadCliConfig } = _default;
+var { getConfig, ensurePluginId, addSession, removeSession, setActiveSession, getActiveSession, getActiveSessionForAgent, setDisable1mContext, setSessionAgent, clearAll, saveCliConfig, loadCliConfig } = _default;
 
 // src/commands/pair-auto.ts
 var fs63 = __toESM(require("fs"));
-var os52 = __toESM(require("os"));
+var os53 = __toESM(require("os"));
 var path68 = __toESM(require("path"));
 var import_crypto4 = require("crypto");
 
@@ -8022,7 +8034,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.62.2" : "0.0.0-dev",
+    cliVersion: true ? "2.63.1" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -8203,7 +8215,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.62.2",
+  version: "2.63.1",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -8579,18 +8591,48 @@ async function fetchProvisionCredential(input) {
   try {
     const res = await _transport.postJsonAuthed(
       `${API_BASE}/api/plugin/agents/${input.agentId}/provision-credential`,
-      { sessionId: input.sessionId, pluginId: input.pluginId },
+      {
+        sessionId: input.sessionId,
+        pluginId: input.pluginId,
+        ...input.includeInstallScript ? { includeInstallScript: true } : {}
+      },
       input.pluginAuthToken
     );
     const data = res?.data;
     if (data && (data.method === "api_key" || data.method === "oauth") && typeof data.credential === "string" && data.credential.length > 0) {
-      return { method: data.method, credential: data.credential };
+      return {
+        method: data.method,
+        credential: data.credential,
+        ...typeof data.installScript === "string" && data.installScript.length > 0 ? { installScript: data.installScript } : {}
+      };
     }
     return null;
   } catch {
     return null;
   }
 }
+async function postAgentSwitchEvent(input) {
+  try {
+    await _transport.postJsonAuthed(
+      `${API_BASE}/api/agent-switch/events`,
+      {
+        sessionId: input.sessionId,
+        pluginId: input.pluginId,
+        type: input.type,
+        payload: input.payload ?? {}
+      },
+      input.pluginAuthToken
+    );
+    return { ok: true };
+  } catch (err) {
+    const e = err;
+    return {
+      ok: false,
+      status: typeof e.statusCode === "number" ? e.statusCode : 0,
+      message: e.message || "unknown"
+    };
+  }
+}
 async function postAgentReviewReport(input) {
   try {
     await _transport.postJsonAuthed(
@@ -9613,7 +9655,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.62.2" ? { ideVersion: "2.62.2" } : {}
+      ..."2.63.1" ? { ideVersion: "2.63.1" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -9644,6 +9686,23 @@ var CommandRelayService = class _CommandRelayService {
     }).catch(() => {
     });
   }
+  /**
+   * Swap the agent this relay reports for the session (in-session agent
+   * switch). Heartbeats pick the new id up on their next tick; call
+   * {@link reannounceAgents} to push the new `/api/plugin/agents` entry.
+   */
+  setAgentMeta(meta) {
+    this.agentMeta = meta;
+  }
+  /**
+   * Re-register the (possibly swapped) agent with the backend. Resets
+   * `agentsRegistered` so the 5 s retry timer keeps trying until a POST
+   * lands — same at-least-once semantics as the initial registration.
+   */
+  reannounceAgents() {
+    this.agentsRegistered = false;
+    this.reportAgents();
+  }
   // ─── Lifecycle ───────────────────────────────────────────────────
   cleanup() {
     if (this.pollTimer) {
@@ -9840,10 +9899,10 @@ var WINDOWS_LEGACY_JUNCTIONS = [
   /[\\/]Start Menu([\\/]|$)/i,
   /[\\/]Templates([\\/]|$)/i
 ];
-function isUnsafeWindowsWatchRoot(dir, homedir51) {
+function isUnsafeWindowsWatchRoot(dir, homedir52) {
   const norm = (p2) => p2.replace(/\//g, "\\").replace(/\\+$/, "").toLowerCase();
   const cwd = norm(dir);
-  const home = norm(homedir51);
+  const home = norm(homedir52);
   if (cwd === home) return true;
   if (/^[a-z]:$/.test(cwd)) return true;
   const sysRoots = [
@@ -10988,10 +11047,10 @@ function closeAllTerminals() {
 
 // src/commands/start/handlers.ts
 var fs62 = __toESM(require("fs"));
-var os51 = __toESM(require("os"));
+var os52 = __toESM(require("os"));
 var path67 = __toESM(require("path"));
 var import_crypto3 = require("crypto");
-var import_child_process24 = require("child_process");
+var import_child_process25 = require("child_process");
 
 // src/lib/payload.ts
 var import_zod = require("zod");
@@ -14499,10 +14558,10 @@ function buildForPlatform(platform3) {
 var import_node_crypto4 = require("crypto");
 
 // src/agents/claude/resolver.ts
-function buildClaudeLaunch(extraArgs = [], os64 = createOsStrategy()) {
-  const found = os64.findInPath("claude") ?? os64.findInPath("claude-code");
+function buildClaudeLaunch(extraArgs = [], os65 = createOsStrategy()) {
+  const found = os65.findInPath("claude") ?? os65.findInPath("claude-code");
   if (!found) return null;
-  return os64.buildLaunch(found, extraArgs);
+  return os65.buildLaunch(found, extraArgs);
 }
 
 // src/agents/claude/installer.ts
@@ -15092,8 +15151,8 @@ var ClaudeRuntimeStrategy = class {
   meta = getAgent("claude");
   mode = "interactive";
   os;
-  constructor(os64) {
-    this.os = os64;
+  constructor(os65) {
+    this.os = os65;
   }
   /**
    * Claude Code's react-ink TUI enables bracketed-paste mode at
@@ -15873,8 +15932,8 @@ function codexCredentialLocator() {
 function codexLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os64 = createOsStrategy();
-      return os64.findInPath("codex") !== null;
+      const os65 = createOsStrategy();
+      return os65.findInPath("codex") !== null;
     },
     launch() {
       return (0, import_node_child_process4.spawn)("codex", ["login"], { stdio: "inherit" });
@@ -15897,8 +15956,8 @@ var CodexRuntimeStrategy = class {
   meta = getAgent("codex");
   mode = "interactive";
   os;
-  constructor(os64) {
-    this.os = os64;
+  constructor(os65) {
+    this.os = os65;
   }
   async prepareLaunch() {
     let binary = this.os.findInPath("codex");
@@ -16007,12 +16066,12 @@ var CodexRuntimeStrategy = class {
     });
   }
 };
-function resolveNpm(os64) {
-  return os64.id === "win32" ? "npm.cmd" : "npm";
+function resolveNpm(os65) {
+  return os65.id === "win32" ? "npm.cmd" : "npm";
 }
-async function installCodexViaNpm(os64) {
+async function installCodexViaNpm(os65) {
   return new Promise((resolve9, reject) => {
-    const proc = (0, import_node_child_process5.spawn)(resolveNpm(os64), ["install", "-g", "@openai/codex"], {
+    const proc = (0, import_node_child_process5.spawn)(resolveNpm(os65), ["install", "-g", "@openai/codex"], {
       stdio: "inherit"
     });
     proc.on("close", (code) => {
@@ -16029,16 +16088,16 @@ async function installCodexViaNpm(os64) {
     });
   });
 }
-function augmentNpmGlobalBin(os64) {
+function augmentNpmGlobalBin(os65) {
   try {
-    const result = (0, import_node_child_process5.spawnSync)(resolveNpm(os64), ["prefix", "-g"], {
+    const result = (0, import_node_child_process5.spawnSync)(resolveNpm(os65), ["prefix", "-g"], {
       stdio: ["ignore", "pipe", "ignore"]
     });
     if (result.status !== 0) return;
     const prefix = result.stdout.toString().trim();
     if (!prefix) return;
-    const binDir = os64.id === "win32" ? prefix : path25.join(prefix, "bin");
-    os64.augmentPath([binDir]);
+    const binDir = os65.id === "win32" ? prefix : path25.join(prefix, "bin");
+    os65.augmentPath([binDir]);
   } catch {
   }
 }
@@ -16437,10 +16496,10 @@ function manualInstallHint(runner, tools) {
   const argv = osPackageInstallArgv(detectPackageManager(runner), [...tools]);
   return argv ? `\`sudo ${argv.join(" ")}\`` : `your package manager (e.g. \`${pkgs}\`)`;
 }
-function writeUnzipShim(os64, runner) {
+function writeUnzipShim(os65, runner) {
   const python = ["python3", "python"].find((p2) => runner.which(p2));
   if (!python) return null;
-  const dir = os64.scratchPath("codeam-cr-prereq");
+  const dir = os65.scratchPath("codeam-cr-prereq");
   const shim = path27.join(dir, "unzip");
   const script = `#!/bin/sh
 set -e
@@ -16462,9 +16521,9 @@ exec ${python} -m zipfile -e "$archive" "$dest"
   (0, import_node_fs5.chmodSync)(shim, 448);
   return dir;
 }
-async function ensureInstallPrerequisites(os64, deps = {}) {
+async function ensureInstallPrerequisites(os65, deps = {}) {
   const runner = deps.runner ?? defaultHeadroomRunner;
-  const missing = REQUIRED_TOOLS.filter((t2) => os64.findInPath(t2) === null);
+  const missing = REQUIRED_TOOLS.filter((t2) => os65.findInPath(t2) === null);
   if (missing.length === 0) return { ok: true, extraPath: [] };
   log.info(
     "coderabbit",
@@ -16483,10 +16542,10 @@ async function ensureInstallPrerequisites(os64, deps = {}) {
       );
     }
   }
-  const stillMissing = REQUIRED_TOOLS.filter((t2) => os64.findInPath(t2) === null);
+  const stillMissing = REQUIRED_TOOLS.filter((t2) => os65.findInPath(t2) === null);
   if (stillMissing.length === 0) return { ok: true, extraPath: [] };
   if (stillMissing.length === 1 && stillMissing[0] === "unzip") {
-    const shimDir = writeUnzipShim(os64, runner);
+    const shimDir = writeUnzipShim(os65, runner);
     if (shimDir) {
       log.info("coderabbit", "unzip is unavailable \u2014 using a scoped python zipfile shim");
       return { ok: true, extraPath: [shimDir] };
@@ -16549,15 +16608,15 @@ function summarizeInstallFailure(output) {
   }
   return lines.length > 0 ? lines[lines.length - 1] : null;
 }
-async function ensureCoderabbitInstalled(os64, deps = {}) {
-  if (os64.findInPath("coderabbit")) return { ok: true };
-  if (os64.id === "win32") {
+async function ensureCoderabbitInstalled(os65, deps = {}) {
+  if (os65.findInPath("coderabbit")) return { ok: true };
+  if (os65.id === "win32") {
     return {
       ok: false,
       error: "CodeRabbit on Windows requires WSL. Install the CLI inside your WSL distribution (curl -fsSL https://cli.coderabbit.ai/install.sh | sh), then try again."
     };
   }
-  const prereq = await ensureInstallPrerequisites(os64, deps);
+  const prereq = await ensureInstallPrerequisites(os65, deps);
   if (!prereq.ok) return { ok: false, error: prereq.error };
   const env = { ...process.env };
   if (prereq.extraPath.length > 0) {
@@ -16573,8 +16632,8 @@ async function ensureCoderabbitInstalled(os64, deps = {}) {
       error: detail ? `CodeRabbit CLI install failed: ${detail}` : "CodeRabbit CLI install failed \u2014 check this machine's network egress and try again."
     };
   }
-  os64.augmentPath([`${os64.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
-  if (os64.findInPath("coderabbit") === null) {
+  os65.augmentPath([`${os65.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
+  if (os65.findInPath("coderabbit") === null) {
     const detail = summarizeInstallFailure(output);
     return {
       ok: false,
@@ -16616,10 +16675,10 @@ function coderabbitCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function coderabbitLoginLauncher(os64) {
+function coderabbitLoginLauncher(os65) {
   return {
     async ensureInstalled() {
-      const result = await ensureCoderabbitInstalled(os64);
+      const result = await ensureCoderabbitInstalled(os65);
       if (!result.ok && result.error) console.error(`
   \u2717 ${result.error}
 `);
@@ -16843,8 +16902,8 @@ var CoderabbitRuntimeStrategy = class {
   meta = getAgent("coderabbit");
   mode = "batch";
   os;
-  constructor(os64) {
-    this.os = os64;
+  constructor(os65) {
+    this.os = os65;
   }
   getDefaultArgs() {
     return ["review", "--agent"];
@@ -17115,10 +17174,10 @@ function cursorCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function cursorLoginLauncher(os64) {
+function cursorLoginLauncher(os65) {
   return {
     async ensureInstalled() {
-      if (os64.findInPath("cursor-agent")) return true;
+      if (os65.findInPath("cursor-agent")) return true;
       console.error(
         "\n  \u2717 cursor-agent binary not on PATH.\n    Install Cursor (https://cursor.com/) and ensure the CLI\n    plugin is enabled, then re-run `codeam link cursor`.\n"
       );
@@ -17182,8 +17241,8 @@ var CursorRuntimeStrategy = class {
   meta = getAgent("cursor");
   mode = "interactive";
   os;
-  constructor(os64) {
-    this.os = os64;
+  constructor(os65) {
+    this.os = os65;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("cursor-agent");
@@ -17399,10 +17458,10 @@ function aiderCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function aiderLoginLauncher(os64) {
+function aiderLoginLauncher(os65) {
   return {
     async ensureInstalled() {
-      if (os64.findInPath("aider")) return true;
+      if (os65.findInPath("aider")) return true;
       console.error(
         "\n  \u2717 aider binary not on PATH.\n    Install Aider:\n      pip install aider-chat\n    then re-run `codeam link aider`.\n"
       );
@@ -17412,7 +17471,7 @@ function aiderLoginLauncher(os64) {
       console.error(
         "\n  Aider has no interactive login flow.\n    Set ANTHROPIC_API_KEY or OPENAI_API_KEY in your shell,\n    or re-run `codeam link aider --api-key=<your-key>`.\n"
       );
-      return (0, import_node_child_process12.spawn)(os64.id === "win32" ? "cmd.exe" : "sh", os64.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
+      return (0, import_node_child_process12.spawn)(os65.id === "win32" ? "cmd.exe" : "sh", os65.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
         stdio: "ignore"
       });
     }
@@ -17484,8 +17543,8 @@ var AiderRuntimeStrategy = class {
   meta = getAgent("aider");
   mode = "interactive";
   os;
-  constructor(os64) {
-    this.os = os64;
+  constructor(os65) {
+    this.os = os65;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("aider");
@@ -17617,8 +17676,8 @@ function geminiCredentialLocator() {
 function geminiLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os64 = createOsStrategy();
-      return os64.findInPath("gemini") !== null;
+      const os65 = createOsStrategy();
+      return os65.findInPath("gemini") !== null;
     },
     launch() {
       return (0, import_node_child_process13.spawn)("gemini", ["auth", "login"], { stdio: "inherit" });
@@ -17808,8 +17867,8 @@ var GeminiRuntimeStrategy = class {
   meta = getAgent("gemini");
   mode = "interactive";
   os;
-  constructor(os64) {
-    this.os = os64;
+  constructor(os65) {
+    this.os = os65;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("gemini");
@@ -18100,8 +18159,8 @@ var KimiRuntimeStrategy = class {
   meta = getAgent("kimi");
   mode = "interactive";
   os;
-  constructor(os64) {
-    this.os = os64;
+  constructor(os65) {
+    this.os = os65;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("kimi");
@@ -18243,8 +18302,8 @@ var OpencodeRuntimeStrategy = class {
   meta = getAgent("opencode");
   mode = "interactive";
   os;
-  constructor(os64) {
-    this.os = os64;
+  constructor(os65) {
+    this.os = os65;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("opencode");
@@ -18328,20 +18387,20 @@ var OpencodeRuntimeStrategy = class {
 
 // src/agents/registry.ts
 var runtimeBuilders = {
-  claude: (os64) => new ClaudeRuntimeStrategy(os64),
-  codex: (os64) => new CodexRuntimeStrategy(os64),
-  coderabbit: (os64) => new CoderabbitRuntimeStrategy(os64),
-  cursor: (os64) => new CursorRuntimeStrategy(os64),
-  aider: (os64) => new AiderRuntimeStrategy(os64),
-  gemini: (os64) => new GeminiRuntimeStrategy(os64),
-  kimi: (os64) => new KimiRuntimeStrategy(os64),
-  opencode: (os64) => new OpencodeRuntimeStrategy(os64)
+  claude: (os65) => new ClaudeRuntimeStrategy(os65),
+  codex: (os65) => new CodexRuntimeStrategy(os65),
+  coderabbit: (os65) => new CoderabbitRuntimeStrategy(os65),
+  cursor: (os65) => new CursorRuntimeStrategy(os65),
+  aider: (os65) => new AiderRuntimeStrategy(os65),
+  gemini: (os65) => new GeminiRuntimeStrategy(os65),
+  kimi: (os65) => new KimiRuntimeStrategy(os65),
+  opencode: (os65) => new OpencodeRuntimeStrategy(os65)
 };
 var deployBuilders = {
   claude: () => new ClaudeDeployStrategy(),
   codex: () => new CodexDeployStrategy()
 };
-function createAgentStrategy(agent, os64 = createOsStrategy()) {
+function createAgentStrategy(agent, os65 = createOsStrategy()) {
   if (!AGENT_REGISTRY[agent]?.enabled) {
     throw new Error(
       `Agent "${agent}" is not supported in this codeam-cli version. Upgrade with 'npm i -g codeam-cli@latest'.`
@@ -18351,10 +18410,10 @@ function createAgentStrategy(agent, os64 = createOsStrategy()) {
   if (!build) {
     throw new Error(`No runtime strategy registered for agent "${agent}"`);
   }
-  return build(os64);
+  return build(os65);
 }
-function createInteractiveAgentStrategy(agent, os64 = createOsStrategy()) {
-  const s = createAgentStrategy(agent, os64);
+function createInteractiveAgentStrategy(agent, os65 = createOsStrategy()) {
+  const s = createAgentStrategy(agent, os65);
   if (s.mode !== "interactive") {
     throw new Error(
       `Agent "${agent}" is a batch agent; use createAgentStrategy + .runOneShot for one-shot reviews.`
@@ -19032,8 +19091,8 @@ function collectChangedFiles(cwd) {
   }
   return [...byPath.values()];
 }
-function restoreCoderabbitOauthBlob(os64, value) {
-  const dir = path38.join(os64.homeDir(), ".coderabbit");
+function restoreCoderabbitOauthBlob(os65, value) {
+  const dir = path38.join(os65.homeDir(), ".coderabbit");
   (0, import_node_fs6.mkdirSync)(dir, { recursive: true });
   let file = "auth.json";
   let contents = value.trim();
@@ -19053,26 +19112,26 @@ function installFailureMessage(result) {
   return result.error ?? "CodeRabbit CLI could not be installed";
 }
 async function configureCoderabbit(input, deps = {}) {
-  const os64 = deps.os ?? createOsStrategy();
+  const os65 = deps.os ?? createOsStrategy();
   const ensureInstalled = deps.ensureInstalled ?? ensureCoderabbitInstalled;
   const isLoggedIn = deps.isLoggedIn ?? defaultIsLoggedIn;
   const runOAuth = deps.runOAuthLogin ?? runCoderabbitOAuthLogin;
   const snapshot = deps.snapshotDir ?? (() => snapshotCredentialDir());
   const capture2 = deps.captureCredential ?? ((b) => diffCapturedCredential(b));
   const loginWithApiKey = deps.loginWithApiKey ?? defaultLoginWithApiKey;
-  const home = os64.homeDir();
-  os64.augmentPath(
-    os64.id === "win32" ? [
+  const home = os65.homeDir();
+  os65.augmentPath(
+    os65.id === "win32" ? [
       path38.join(home, ".local", "bin"),
       path38.join(process.env.APPDATA ?? path38.join(home, "AppData", "Roaming"), "npm"),
       path38.join(home, "scoop", "shims")
     ] : [path38.join(home, ".local", "bin"), "/opt/homebrew/bin", "/usr/local/bin"]
   );
-  const installed2 = os64.findInPath("coderabbit") !== null;
+  const installed2 = os65.findInPath("coderabbit") !== null;
   const base = () => ({
     action: input.action,
     supported: true,
-    installed: os64.findInPath("coderabbit") !== null,
+    installed: os65.findInPath("coderabbit") !== null,
     loggedIn: false
   });
   if (input.action === "status") {
@@ -19086,7 +19145,7 @@ async function configureCoderabbit(input, deps = {}) {
     const key = (input.apiKey ?? "").trim();
     if (!key) return { ...res2, error: "No API key provided" };
     if (!res2.installed) {
-      const inst = await ensureInstalled(os64);
+      const inst = await ensureInstalled(os65);
       res2.installed = inst.ok;
       if (!inst.ok) return { ...res2, error: installFailureMessage(inst) };
     }
@@ -19110,7 +19169,7 @@ async function configureCoderabbit(input, deps = {}) {
     }
     if (!res2.installed) {
       deps.onEvent?.({ kind: "installing" });
-      const inst = await ensureInstalled(os64);
+      const inst = await ensureInstalled(os65);
       res2.installed = inst.ok;
       if (!inst.ok) return { ...res2, error: installFailureMessage(inst) };
     }
@@ -19127,7 +19186,7 @@ async function configureCoderabbit(input, deps = {}) {
       return { ...res2, loggedIn: true, linked: true };
     }
     try {
-      restoreCoderabbitOauthBlob(os64, cred.credential);
+      restoreCoderabbitOauthBlob(os65, cred.credential);
     } catch (err) {
       return {
         ...res2,
@@ -19151,7 +19210,7 @@ async function configureCoderabbit(input, deps = {}) {
     const res2 = base();
     if (!installed2) {
       deps.onEvent?.({ kind: "installing" });
-      const inst = await ensureInstalled(os64);
+      const inst = await ensureInstalled(os65);
       res2.installed = inst.ok;
       if (!inst.ok) return { ...res2, error: installFailureMessage(inst) };
     }
@@ -19191,7 +19250,7 @@ async function configureCoderabbit(input, deps = {}) {
   }
   const res = base();
   if (!res.installed) {
-    const inst = await ensureInstalled(os64);
+    const inst = await ensureInstalled(os65);
     res.installed = inst.ok;
     if (!inst.ok) return { ...res, error: installFailureMessage(inst) };
   }
@@ -19375,7 +19434,7 @@ function defaultRunGh(args2) {
 
 // src/commands/host-agent.ts
 var import_node_child_process25 = require("child_process");
-var os40 = __toESM(require("os"));
+var os41 = __toESM(require("os"));
 var fs45 = __toESM(require("fs"));
 var path49 = __toESM(require("path"));
 
@@ -19499,6 +19558,55 @@ function persistOrClearSkillsFromPayload(skills) {
   else clearSkillsManifest();
 }
 
+// src/commands/host/agent-install.ts
+var import_child_process13 = require("child_process");
+var os32 = __toESM(require("os"));
+function runAgentInstallScript(script, opts = {}) {
+  const timeoutMs = opts.timeoutMs ?? 18e4;
+  const scope = opts.logScope ?? "agent-install";
+  return new Promise((resolve9) => {
+    const home = process.env.HOME || os32.homedir();
+    const child = (0, import_child_process13.spawn)("sh", ["-c", script], {
+      env: { ...process.env, HOME: home },
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    const onData = (b) => {
+      const line = b.toString().replace(/\n+$/g, "");
+      if (line) log.info(scope, `agent-install: ${line}`);
+    };
+    child.stdout?.on("data", onData);
+    child.stderr?.on("data", onData);
+    let settled = false;
+    const done = (result) => {
+      if (settled) return;
+      settled = true;
+      resolve9(result);
+    };
+    const timer = setTimeout(() => {
+      log.warn(scope, `agent install timed out (${Math.round(timeoutMs / 1e3)}s)`);
+      try {
+        child.kill("SIGTERM");
+      } catch {
+      }
+      done({ ok: false, code: null, timedOut: true });
+    }, timeoutMs);
+    child.once("exit", (code) => {
+      clearTimeout(timer);
+      if (code !== 0) {
+        log.warn(scope, `agent install exited code=${code}`);
+      } else {
+        log.info(scope, "agent CLI installed");
+      }
+      done({ ok: code === 0, code: code ?? null, timedOut: false });
+    });
+    child.once("error", (e) => {
+      clearTimeout(timer);
+      log.warn(scope, `agent install spawn error: ${e.message}`);
+      done({ ok: false, code: null, timedOut: false });
+    });
+  });
+}
+
 // src/lib/process-guards.ts
 var installed = false;
 function installRelayCrashGuards() {
@@ -19524,13 +19632,13 @@ function describeReason(reason) {
 
 // src/commands/host/host-client.ts
 var fs36 = __toESM(require("fs"));
-var os32 = __toESM(require("os"));
+var os33 = __toESM(require("os"));
 var path41 = __toESM(require("path"));
 var import_node_crypto9 = require("crypto");
 function sampleCpuTimes() {
   let idle = 0;
   let total = 0;
-  for (const cpu of os32.cpus()) {
+  for (const cpu of os33.cpus()) {
     const t2 = cpu.times;
     idle += t2.idle;
     total += t2.user + t2.nice + t2.sys + t2.idle + t2.irq;
@@ -19549,8 +19657,8 @@ var MetricsCollector = class {
     const prev = this.prevCpu;
     this.prevCpu = current2;
     if (!prev) {
-      const cores = os32.cpus().length || 1;
-      const proxy = os32.loadavg()[0] / cores * 100;
+      const cores = os33.cpus().length || 1;
+      const proxy = os33.loadavg()[0] / cores * 100;
       return Math.min(100, Math.max(0, Math.round(proxy)));
     }
     const idleDelta = current2.idle - prev.idle;
@@ -19563,8 +19671,8 @@ var MetricsCollector = class {
   collect() {
     return {
       cpuPct: this.cpuPct(),
-      ramUsedMb: Math.round((os32.totalmem() - os32.freemem()) / 1048576),
-      ramTotalMb: Math.round(os32.totalmem() / 1048576),
+      ramUsedMb: Math.round((os33.totalmem() - os33.freemem()) / 1048576),
+      ramTotalMb: Math.round(os33.totalmem() / 1048576),
       latencyMs: this.lastLatencyMs
     };
   }
@@ -19573,13 +19681,13 @@ function apiBase() {
   return process.env.CODEAM_API_URL ?? resolveApiBaseUrl();
 }
 function hostIdentityPath() {
-  return path41.join(os32.homedir(), ".codeam", "host-agent.json");
+  return path41.join(os33.homedir(), ".codeam", "host-agent.json");
 }
 function collectOsInfo() {
   return {
-    distro: os32.platform(),
-    arch: os32.arch(),
-    kernel: os32.release(),
+    distro: os33.platform(),
+    arch: os33.arch(),
+    kernel: os33.release(),
     nodeVersion: process.versions.node
   };
 }
@@ -19674,7 +19782,7 @@ async function postJson(pathname, body) {
 function resolveHostLabel(label) {
   const explicit = label?.trim();
   const envLabel = process.env.CODEAM_HOST_LABEL?.trim();
-  const resolved = explicit || envLabel || os32.hostname();
+  const resolved = explicit || envLabel || os33.hostname();
   return resolved.slice(0, 80);
 }
 async function redeemEnrollToken(token, label) {
@@ -19786,7 +19894,7 @@ async function reportDeployProgress(auth, deployId, step, message, sessionId) {
 
 // src/commands/host/workspace.ts
 var fs37 = __toESM(require("fs"));
-var os33 = __toESM(require("os"));
+var os34 = __toESM(require("os"));
 var path42 = __toESM(require("path"));
 var import_node_child_process20 = require("child_process");
 var import_node_util4 = require("util");
@@ -19795,7 +19903,7 @@ function isAbsolutePathTarget(target) {
   return path42.isAbsolute(target);
 }
 function selfHostedWorkspaceRoot() {
-  return path42.join(os33.homedir(), ".codeam", "self-hosted");
+  return path42.join(os34.homedir(), ".codeam", "self-hosted");
 }
 function nonInteractiveGitEnv() {
   return {
@@ -19935,7 +20043,7 @@ async function prepareWorkspace(repoOrPath, deployId, cloneToken, provider = "gi
 
 // src/commands/host/agent-provisioning.ts
 var fs38 = __toESM(require("fs"));
-var os34 = __toESM(require("os"));
+var os35 = __toESM(require("os"));
 var path43 = __toESM(require("path"));
 var PUBLIC_TO_INTERNAL_AGENT = {
   claude_code: "claude",
@@ -20120,7 +20228,7 @@ var UnsupportedAgentError = class extends Error {
     this.agentId = agentId;
   }
 };
-function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os34.homedir()) {
+function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os35.homedir()) {
   const internal = toInternalAgentId(publicAgentId);
   if (!internal) throw new UnsupportedAgentError(publicAgentId);
   const provisioner = PROVISIONERS[internal];
@@ -20131,10 +20239,10 @@ function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os34.homedir(
 // src/commands/host/git-tooling.ts
 var import_node_child_process21 = require("child_process");
 var fs39 = __toESM(require("fs"));
-var os35 = __toESM(require("os"));
+var os36 = __toESM(require("os"));
 var path44 = __toESM(require("path"));
 function codeamBinDir() {
-  return process.env.CODEAM_BIN_DIR ?? path44.join(os35.homedir(), ".codeam", "bin");
+  return process.env.CODEAM_BIN_DIR ?? path44.join(os36.homedir(), ".codeam", "bin");
 }
 var FALLBACK_GH_VERSION = "2.62.0";
 var RELEASE_API = "https://api.github.com/repos/cli/cli/releases/latest";
@@ -20189,7 +20297,7 @@ async function ensureGhCli(runner, token, deps = {}) {
     const version3 = await resolveVersionFn(token);
     const asset = `gh_${version3}_${osToken}_${arch2}`;
     const url2 = `https://github.com/cli/cli/releases/download/v${version3}/${asset}.${ext}`;
-    const tmpRoot = fs39.mkdtempSync(path44.join(os35.tmpdir(), "codeam-gh-"));
+    const tmpRoot = fs39.mkdtempSync(path44.join(os36.tmpdir(), "codeam-gh-"));
     const archive = path44.join(tmpRoot, `${asset}.${ext}`);
     if (!await downloadFn(url2, archive)) {
       log.warn("host-agent", "gh download failed \u2014 skipping (git pull/push still work via the credential helper)");
@@ -20269,7 +20377,7 @@ async function ensureGlabCli(runner, deps = {}) {
     const version3 = await resolveLatestGlabVersion();
     const asset = `glab_${version3}_${osToken}_${arch2}`;
     const url2 = `https://gitlab.com/gitlab-org/cli/-/releases/v${version3}/downloads/${asset}.${ext}`;
-    const tmpRoot = fs39.mkdtempSync(path44.join(os35.tmpdir(), "codeam-glab-"));
+    const tmpRoot = fs39.mkdtempSync(path44.join(os36.tmpdir(), "codeam-glab-"));
     const archive = path44.join(tmpRoot, `${asset}.${ext}`);
     if (!await downloadFn(url2, archive)) {
       log.warn("host-agent", "glab download failed \u2014 skipping (git push/pull still work)");
@@ -20493,14 +20601,14 @@ var HeadroomStatsReporter = class {
 // src/commands/host/headroom-bootstrap.ts
 var fs41 = __toESM(require("fs"));
 var path46 = __toESM(require("path"));
-var os37 = __toESM(require("os"));
+var os38 = __toESM(require("os"));
 
 // src/commands/host/headroom-config.ts
 var fs40 = __toESM(require("fs"));
-var os36 = __toESM(require("os"));
+var os37 = __toESM(require("os"));
 var path45 = __toESM(require("path"));
 function headroomConfigPath() {
-  return path45.join(os36.homedir(), ".codeam", "headroom-config.json");
+  return path45.join(os37.homedir(), ".codeam", "headroom-config.json");
 }
 function persistHeadroomConfig(config) {
   try {
@@ -20518,7 +20626,7 @@ function persistHeadroomConfig(config) {
   }
 }
 function agentSettingsPath(kind) {
-  const home = os36.homedir();
+  const home = os37.homedir();
   if (kind === "claude") return path45.join(home, ".claude", "settings.json");
   if (kind === "codex") return path45.join(home, ".codex", "auth.json");
   if (kind === "copilot") return path45.join(home, ".config", "github-copilot", "hosts.json");
@@ -20529,7 +20637,7 @@ function backupAgentHeadroomConfig(kind) {
   if (!src) return;
   try {
     if (!fs40.existsSync(src)) return;
-    const dest = path45.join(os36.homedir(), ".codeam", `headroom-backup-${kind}.json`);
+    const dest = path45.join(os37.homedir(), ".codeam", `headroom-backup-${kind}.json`);
     fs40.mkdirSync(path45.dirname(dest), { recursive: true, mode: 448 });
     fs40.copyFileSync(src, dest);
     fs40.chmodSync(dest, 384);
@@ -20544,7 +20652,7 @@ function backupAgentHeadroomConfig(kind) {
 function restoreAgentHeadroomConfig(kind) {
   const dest = agentSettingsPath(kind);
   if (!dest) return false;
-  const src = path45.join(os36.homedir(), ".codeam", `headroom-backup-${kind}.json`);
+  const src = path45.join(os37.homedir(), ".codeam", `headroom-backup-${kind}.json`);
   if (!fs40.existsSync(src)) return false;
   try {
     fs40.mkdirSync(path45.dirname(dest), { recursive: true, mode: 448 });
@@ -20636,7 +20744,7 @@ async function getFreeDiskBytes(dir) {
 }
 function headroomModelsCached() {
   const hubDir = process.env.HUGGINGFACE_HUB_CACHE || path46.join(
-    process.env.HF_HOME || path46.join(os37.homedir(), ".cache", "huggingface"),
+    process.env.HF_HOME || path46.join(os38.homedir(), ".cache", "huggingface"),
     "hub"
   );
   return HEADROOM_MODELS.every(
@@ -20747,10 +20855,10 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner,
 
 // src/commands/host/house-proxy-config.ts
 var fs42 = __toESM(require("fs"));
-var os38 = __toESM(require("os"));
+var os39 = __toESM(require("os"));
 var path47 = __toESM(require("path"));
 function houseProxyConfigPath() {
-  return path47.join(os38.homedir(), ".codeam", "house-proxy.json");
+  return path47.join(os39.homedir(), ".codeam", "house-proxy.json");
 }
 function persistHouseProxyConfig(config) {
   try {
@@ -20809,7 +20917,7 @@ var import_node_child_process23 = require("child_process");
 
 // src/lib/updateNotifier.ts
 var fs43 = __toESM(require("fs"));
-var os39 = __toESM(require("os"));
+var os40 = __toESM(require("os"));
 var path48 = __toESM(require("path"));
 var https6 = __toESM(require("https"));
 var import_node_child_process22 = require("child_process");
@@ -20819,7 +20927,7 @@ var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
 var TTL_MS = 24 * 60 * 60 * 1e3;
 var REQUEST_TIMEOUT_MS = 1500;
 function cachePath() {
-  const dir = path48.join(os39.homedir(), ".codeam");
+  const dir = path48.join(os40.homedir(), ".codeam");
   return path48.join(dir, "update-check.json");
 }
 function readCache() {
@@ -20965,7 +21073,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.62.2" : null;
+  const current2 = true ? "2.63.1" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -20982,7 +21090,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.62.2" : null;
+  const current2 = true ? "2.63.1" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -21002,7 +21110,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.62.2" : null;
+  return true ? "2.63.1" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve9) => {
@@ -21734,7 +21842,7 @@ var HostAgentSupervisor = class {
     const relay = this.relay;
     if (!relay) return;
     const raw = cmd.payload?.path;
-    const target = typeof raw === "string" && raw.trim() ? path49.resolve(raw.trim()) : os40.homedir();
+    const target = typeof raw === "string" && raw.trim() ? path49.resolve(raw.trim()) : os41.homedir();
     try {
       const dirents = await fs45.promises.readdir(target, { withFileTypes: true });
       const entries = dirents.filter((d3) => !d3.name.startsWith(".")).map((d3) => ({ name: d3.name, isDir: d3.isDirectory() })).sort(
@@ -21974,7 +22082,7 @@ var HostAgentSupervisor = class {
           CODEAM_AUTO_TOKEN: payload.autoPairToken
         };
         const houseConfigDir = path49.join(
-          os40.homedir(),
+          os41.homedir(),
           ".codeam",
           "house-claude",
           payload.deployId
@@ -22006,7 +22114,7 @@ var HostAgentSupervisor = class {
         report("installing", "installing agent CLI");
         await this.runAgentInstall(payload.agentInstallScript);
       }
-      const home = process.env.HOME || os40.homedir();
+      const home = process.env.HOME || os41.homedir();
       childEnv.PATH = `${home}/.local/bin:${process.env.PATH ?? ""}`;
       if (payload.cloneToken) {
         try {
@@ -22040,7 +22148,7 @@ var HostAgentSupervisor = class {
       }
       if (payload.headroomEnabled && payload.headroomAgent && payload.headroomSavingsIngestUrl && isHeadroomSupportedAgent(payload.headroomAgent)) {
         report("headroom", "setting up Headroom proxy");
-        const freeBytes = await this.getFreeDisk(os40.homedir());
+        const freeBytes = await this.getFreeDisk(os41.homedir());
         const alreadyInstalled = this.isHeadroomInstalled();
         if (!alreadyInstalled && freeBytes !== null && freeBytes < HEADROOM_MIN_FREE_DISK_BYTES) {
           const freeGb = (freeBytes / 1e9).toFixed(1);
@@ -22099,7 +22207,7 @@ var HostAgentSupervisor = class {
       );
       if (!payload.suppressOnboardingWelcome) {
         try {
-          const cfgDir = childEnv.CLAUDE_CONFIG_DIR || path49.join(os40.homedir(), ".claude");
+          const cfgDir = childEnv.CLAUDE_CONFIG_DIR || path49.join(os41.homedir(), ".claude");
           const projectDir = path49.join(cfgDir, "projects", encodeCwd(cwd));
           const hasPriorConversation = fs45.existsSync(projectDir) && fs45.readdirSync(projectDir).some((f) => f.endsWith(".jsonl"));
           if (hasPriorConversation) {
@@ -22247,54 +22355,14 @@ var HostAgentSupervisor = class {
    * HOME is forced so the installer's `~/.local/bin` resolves on a detached
    * host-agent whose env may lack it.
    */
-  runAgentInstall(script) {
-    return new Promise((resolve9) => {
-      const home = process.env.HOME || os40.homedir();
-      const child = (0, import_node_child_process25.spawn)("sh", ["-c", script], {
-        env: { ...process.env, HOME: home },
-        stdio: ["ignore", "pipe", "pipe"]
-      });
-      const onData = (b) => {
-        const line = b.toString().replace(/\n+$/g, "");
-        if (line) log.info("host-agent", `agent-install: ${line}`);
-      };
-      child.stdout?.on("data", onData);
-      child.stderr?.on("data", onData);
-      let settled = false;
-      const done = () => {
-        if (settled) return;
-        settled = true;
-        resolve9();
-      };
-      const timer = setTimeout(() => {
-        log.warn(
-          "host-agent",
-          "agent install timed out (180s) \u2014 preview detection may be unavailable"
-        );
-        try {
-          child.kill("SIGTERM");
-        } catch {
-        }
-        done();
-      }, 18e4);
-      child.once("exit", (code) => {
-        clearTimeout(timer);
-        if (code !== 0) {
-          log.warn(
-            "host-agent",
-            `agent install exited code=${code} \u2014 preview detection may be unavailable; agent still runs`
-          );
-        } else {
-          log.info("host-agent", "agent CLI installed");
-        }
-        done();
-      });
-      child.once("error", (e) => {
-        clearTimeout(timer);
-        log.warn("host-agent", `agent install spawn error: ${e.message}`);
-        done();
-      });
-    });
+  async runAgentInstall(script) {
+    const res = await runAgentInstallScript(script, { logScope: "host-agent" });
+    if (!res.ok) {
+      log.warn(
+        "host-agent",
+        "agent install failed \u2014 preview detection may be unavailable; agent still runs"
+      );
+    }
   }
   /**
    * Kill the child for the given id. The backend correlates the session it
@@ -22338,7 +22406,7 @@ var HostAgentSupervisor = class {
     }
     const dirs = [
       path49.join(selfHostedWorkspaceRoot(), deployId),
-      path49.join(os40.homedir(), ".codeam", "house-claude", deployId)
+      path49.join(os41.homedir(), ".codeam", "house-claude", deployId)
     ];
     for (const dir of dirs) {
       try {
@@ -22480,9 +22548,9 @@ async function configureHeadroom(action, ctx, deps) {
 
 // src/services/headroom/budget-relaunch.ts
 var fs46 = __toESM(require("fs"));
-var os41 = __toESM(require("os"));
+var os42 = __toESM(require("os"));
 var path50 = __toESM(require("path"));
-var import_child_process13 = require("child_process");
+var import_child_process14 = require("child_process");
 function amendDeploymentManifestBudget(manifest, budget) {
   const rawArgs = manifest.proxy_args ?? [];
   const strippedArgs = [];
@@ -22561,7 +22629,7 @@ function writeManifestReal(manifestPath, manifest) {
 }
 function restartDeploymentReal(profile) {
   try {
-    const proc = (0, import_child_process13.spawn)("headroom", ["install", "restart", "--profile", profile], {
+    const proc = (0, import_child_process14.spawn)("headroom", ["install", "restart", "--profile", profile], {
       detached: true,
       stdio: "ignore"
     });
@@ -22592,7 +22660,7 @@ function spawnProxyReal2(_budget) {
   );
 }
 function makeRealApplyBudgetDeps() {
-  const homeDir2 = os41.homedir();
+  const homeDir2 = os42.homedir();
   return {
     findDeployments: () => findHeadroomDeployments(homeDir2, {
       readDir: (dir) => fs46.readdirSync(dir),
@@ -22731,12 +22799,12 @@ async function readUsageReport(deps = {}) {
 // src/agents/acp/guardrail-config.ts
 var fs47 = __toESM(require("fs"));
 var path51 = __toESM(require("path"));
-var os42 = __toESM(require("os"));
+var os43 = __toESM(require("os"));
 var current = null;
-function guardrailConfigPath(homeDir2 = os42.homedir()) {
+function guardrailConfigPath(homeDir2 = os43.homedir()) {
   return path51.join(homeDir2, ".codeam", "guardrails.json");
 }
-function loadGuardrailPolicy(homeDir2 = os42.homedir()) {
+function loadGuardrailPolicy(homeDir2 = os43.homedir()) {
   try {
     current = normalizeGuardrailPolicy(JSON.parse(fs47.readFileSync(guardrailConfigPath(homeDir2), "utf8")));
   } catch {
@@ -22744,10 +22812,10 @@ function loadGuardrailPolicy(homeDir2 = os42.homedir()) {
   }
   return current;
 }
-function getGuardrailPolicy(homeDir2 = os42.homedir()) {
+function getGuardrailPolicy(homeDir2 = os43.homedir()) {
   return current ?? loadGuardrailPolicy(homeDir2);
 }
-function setGuardrailPolicy(raw, homeDir2 = os42.homedir()) {
+function setGuardrailPolicy(raw, homeDir2 = os43.homedir()) {
   const next = normalizeGuardrailPolicy(raw);
   current = next;
   try {
@@ -22761,11 +22829,11 @@ function setGuardrailPolicy(raw, homeDir2 = os42.homedir()) {
 
 // src/services/preview/port-registry.ts
 var fs48 = __toESM(require("fs"));
-var os43 = __toESM(require("os"));
+var os44 = __toESM(require("os"));
 var path52 = __toESM(require("path"));
-var import_child_process14 = require("child_process");
+var import_child_process15 = require("child_process");
 function registryPath() {
-  return path52.join(os43.homedir(), ".codeam", "preview-ports.json");
+  return path52.join(os44.homedir(), ".codeam", "preview-ports.json");
 }
 function readRegistry() {
   try {
@@ -22810,7 +22878,7 @@ function groupAlive(pgid) {
 }
 function killGroup(pgid) {
   if (process.platform === "win32") {
-    (0, import_child_process14.spawnSync)("taskkill", ["/F", "/T", "/PID", String(pgid)], { stdio: "ignore" });
+    (0, import_child_process15.spawnSync)("taskkill", ["/F", "/T", "/PID", String(pgid)], { stdio: "ignore" });
     return;
   }
   try {
@@ -23051,7 +23119,7 @@ async function applyPreviewHostAllow(cwd) {
 }
 
 // src/services/preview/cloudflared.ts
-var import_child_process15 = require("child_process");
+var import_child_process16 = require("child_process");
 var import_fs2 = require("fs");
 var import_promises = __toESM(require("fs/promises"));
 var import_os9 = __toESM(require("os"));
@@ -23128,7 +23196,7 @@ async function isExecutableBinary(p2) {
 }
 function extractTgz(tgzPath, destDir) {
   return new Promise((resolve9, reject) => {
-    const child = (0, import_child_process15.spawn)("tar", ["-xzf", tgzPath, "-C", destDir], { stdio: "ignore" });
+    const child = (0, import_child_process16.spawn)("tar", ["-xzf", tgzPath, "-C", destDir], { stdio: "ignore" });
     child.on("error", (err) => reject(err));
     child.on(
       "exit",
@@ -23162,7 +23230,7 @@ async function spawnNamedTunnel(bin, token, port) {
   await import_promises.default.mkdir(credDir, { recursive: true });
   const credFile = import_path4.default.join(credDir, `tunnel-${creds.TunnelID}.json`);
   await import_promises.default.writeFile(credFile, JSON.stringify(creds), { mode: 384 });
-  return (0, import_child_process15.spawn)(
+  return (0, import_child_process16.spawn)(
     bin,
     [
       "tunnel",
@@ -23178,9 +23246,9 @@ async function spawnNamedTunnel(bin, token, port) {
 }
 
 // src/services/preview/codespace.ts
-var import_child_process16 = require("child_process");
+var import_child_process17 = require("child_process");
 var import_util3 = require("util");
-var execFileP5 = (0, import_util3.promisify)(import_child_process16.execFile);
+var execFileP5 = (0, import_util3.promisify)(import_child_process17.execFile);
 
 // src/services/preview/config-file.ts
 var import_promises3 = __toESM(require("fs/promises"));
@@ -23375,10 +23443,10 @@ var import_fs3 = require("fs");
 var import_path6 = __toESM(require("path"));
 
 // src/services/preview/run-setup.ts
-var import_child_process17 = require("child_process");
+var import_child_process18 = require("child_process");
 function runSetupCommand(cmd, args2, cwd, env, opts) {
   return new Promise((resolve9) => {
-    const child = (0, import_child_process17.spawn)(cmd, args2, {
+    const child = (0, import_child_process18.spawn)(cmd, args2, {
       cwd,
       env: { ...process.env, ...env ?? {} },
       stdio: ["ignore", "pipe", "pipe"]
@@ -23722,7 +23790,7 @@ function activePreviewSessionIds() {
 }
 
 // src/services/preview/start-orchestrator.ts
-var import_child_process19 = require("child_process");
+var import_child_process20 = require("child_process");
 var fs56 = __toESM(require("fs"));
 var path60 = __toESM(require("path"));
 var import_which2 = __toESM(require("which"));
@@ -23732,7 +23800,7 @@ var import_fs5 = require("fs");
 var path59 = __toESM(require("path"));
 
 // src/beads/project-key.ts
-var import_child_process18 = require("child_process");
+var import_child_process19 = require("child_process");
 var crypto2 = __toESM(require("crypto"));
 var fs54 = __toESM(require("fs"));
 var path58 = __toESM(require("path"));
@@ -23779,7 +23847,7 @@ function findRepoRoot(cwd) {
 }
 var _execSeam2 = {
   exec: (file, args2, opts) => {
-    const out2 = (0, import_child_process18.execFileSync)(file, args2, opts);
+    const out2 = (0, import_child_process19.execFileSync)(file, args2, opts);
     return typeof out2 === "string" ? out2 : out2.toString("utf8");
   },
   realpath: (p2) => fs54.realpathSync(p2)
@@ -24151,7 +24219,7 @@ async function startDevServer(ctx) {
   await applyPreviewHostAllow(cwd);
   const spawnable = normalizeDetectionForSpawn(detection, cwd);
   emitProgress("BOOT_SEQUENCE", `${spawnable.command} ${spawnable.args.join(" ")}`);
-  const devServer = (0, import_child_process19.spawn)(spawnable.command, spawnable.args, {
+  const devServer = (0, import_child_process20.spawn)(spawnable.command, spawnable.args, {
     cwd,
     env: { ...process.env, ...spawnable.env ?? {} },
     stdio: ["ignore", "pipe", "pipe"],
@@ -24276,7 +24344,7 @@ async function establishTunnel(ctx, dev) {
         `cloudflared quick tunnel (retry ${attempt}/${MAX_TUNNEL_ATTEMPTS})`
       );
     }
-    const candidate = (0, import_child_process19.spawn)(
+    const candidate = (0, import_child_process20.spawn)(
       bin,
       ["tunnel", "--url", `http://localhost:${detection.port}`],
       { stdio: ["ignore", "pipe", "pipe"] }
@@ -24307,9 +24375,9 @@ async function establishTunnel(ctx, dev) {
 }
 
 // src/beads/bd-adapter.ts
-var import_child_process20 = require("child_process");
+var import_child_process21 = require("child_process");
 var fs57 = __toESM(require("fs"));
-var os45 = __toESM(require("os"));
+var os46 = __toESM(require("os"));
 var path61 = __toESM(require("path"));
 var BD_PACKAGE = "@beads/bd";
 function resolveBundledBdBinary() {
@@ -24361,7 +24429,7 @@ function _defaultSpawn(binaryPath, args2, opts) {
   return new Promise((resolve9) => {
     let proc;
     try {
-      proc = (0, import_child_process20.spawn)(binaryPath, args2, { cwd: opts.cwd, env: opts.env });
+      proc = (0, import_child_process21.spawn)(binaryPath, args2, { cwd: opts.cwd, env: opts.env });
     } catch (err) {
       resolve9({ code: -1, stdout: "", stderr: err.message });
       return;
@@ -24427,7 +24495,7 @@ var BdAdapter = class {
     const env = { ...process.env };
     if (!env.HOME) {
       try {
-        const home = os45.homedir();
+        const home = os46.homedir();
         if (home) env.HOME = home;
       } catch {
       }
@@ -24518,13 +24586,13 @@ function coerceIssue(row, projectKey) {
 }
 
 // src/beads/provisioner.ts
-var import_child_process23 = require("child_process");
+var import_child_process24 = require("child_process");
 var fs59 = __toESM(require("fs"));
-var os47 = __toESM(require("os"));
+var os48 = __toESM(require("os"));
 var path63 = __toESM(require("path"));
 
 // src/beads/install-bd.ts
-var import_child_process21 = require("child_process");
+var import_child_process22 = require("child_process");
 var INSTALL_SH_URL = "https://raw.githubusercontent.com/gastownhall/beads/main/scripts/install.sh";
 var INSTALL_PS1_URL = "https://raw.githubusercontent.com/gastownhall/beads/main/install.ps1";
 function resolveInstallStrategy(platform3) {
@@ -24555,7 +24623,7 @@ function _defaultInstallSpawn(strategy) {
   return new Promise((resolve9) => {
     let proc;
     try {
-      proc = (0, import_child_process21.spawn)(strategy.command, strategy.args, { env: process.env });
+      proc = (0, import_child_process22.spawn)(strategy.command, strategy.args, { env: process.env });
     } catch (err) {
       resolve9({ ok: false, code: -1, stderr: err.message });
       return;
@@ -24585,9 +24653,9 @@ async function installBd(platform3 = process.platform) {
 }
 
 // src/beads/install-dolt.ts
-var import_child_process22 = require("child_process");
+var import_child_process23 = require("child_process");
 var fs58 = __toESM(require("fs"));
-var os46 = __toESM(require("os"));
+var os47 = __toESM(require("os"));
 var path62 = __toESM(require("path"));
 var DOLT_INSTALL_SH_URL = "https://github.com/dolthub/dolt/releases/latest/download/install.sh";
 var DOLT_MSI_URL = "https://github.com/dolthub/dolt/releases/latest/download/dolt-windows-amd64.msi";
@@ -24628,11 +24696,11 @@ function resolveDoltInstallStrategy(platform3) {
 }
 var DOLT_RELEASE_BASE = "https://github.com/dolthub/dolt/releases/latest/download";
 function doltPlatformTuple(platform3, arch2) {
-  const os64 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
+  const os65 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
   const a = arch2 === "x64" ? "amd64" : arch2 === "arm64" ? "arm64" : null;
   if (!a) return null;
-  if (os64 === "windows" && a !== "amd64") return null;
-  return `${os64}-${a}`;
+  if (os65 === "windows" && a !== "amd64") return null;
+  return `${os65}-${a}`;
 }
 function resolveDoltTarballStrategy(targetDir, platform3, arch2) {
   const tuple = doltPlatformTuple(platform3, arch2);
@@ -24677,7 +24745,7 @@ async function installDoltToDir(targetDir, platform3 = process.platform, arch2 =
   return result;
 }
 var _doltPathSeam = {
-  homedir: () => os46.homedir(),
+  homedir: () => os47.homedir(),
   getPath: () => process.env.PATH ?? "",
   setPath: (p2) => {
     process.env.PATH = p2;
@@ -24747,7 +24815,7 @@ function _defaultDoltInstallSpawn(strategy) {
     };
     let proc;
     try {
-      proc = (0, import_child_process22.spawn)(strategy.command, strategy.args, {
+      proc = (0, import_child_process23.spawn)(strategy.command, strategy.args, {
         env: process.env,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -24888,7 +24956,7 @@ var _provisionSeam = {
 };
 var _linkSeam = {
   platform: () => process.platform,
-  homedir: () => os47.homedir(),
+  homedir: () => os48.homedir(),
   isWritableDir: (dir) => {
     try {
       fs59.accessSync(dir, fs59.constants.W_OK);
@@ -24974,7 +25042,7 @@ function linkBdOntoPath(binaryPath) {
   log.info("beads", `linked bd onto PATH: ${linkPath} -> ${binaryPath}`);
 }
 function setGitBeadsRole() {
-  (0, import_child_process23.execFileSync)("git", ["config", "--global", "beads.role", "contributor"], {
+  (0, import_child_process24.execFileSync)("git", ["config", "--global", "beads.role", "contributor"], {
     stdio: "ignore"
   });
 }
@@ -25683,7 +25751,7 @@ function cleanupAttachmentTempFiles() {
 function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
-    const tmpPath = path67.join(os51.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
+    const tmpPath = path67.join(os52.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
     fs62.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     pendingAttachmentFiles.add(tmpPath);
     return tmpPath;
@@ -25823,7 +25891,7 @@ var sessionTerminated = async (ctx, cmd) => {
   }
   quiet(() => ctx.agent.kill());
   try {
-    const proc = (0, import_child_process24.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
+    const proc = (0, import_child_process25.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
       detached: true,
       stdio: "ignore"
     });
@@ -25842,7 +25910,7 @@ var shutdownSession = async (ctx, cmd) => {
   quiet(() => ctx.agent.kill());
   if (ctx.keepAliveCtx.inCodespace && ctx.keepAliveCtx.codespaceName) {
     try {
-      const stopProc = (0, import_child_process24.spawn)(
+      const stopProc = (0, import_child_process25.spawn)(
         "bash",
         ["-lc", `sleep 1; gh codespace stop -c ${JSON.stringify(ctx.keepAliveCtx.codespaceName)} >/dev/null 2>&1 || true`],
         { detached: true, stdio: "ignore" }
@@ -25852,7 +25920,7 @@ var shutdownSession = async (ctx, cmd) => {
     }
   }
   try {
-    const proc = (0, import_child_process24.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
+    const proc = (0, import_child_process25.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
       detached: true,
       stdio: "ignore"
     });
@@ -26278,7 +26346,7 @@ var vcsAgentReviewH = async (ctx, cmd, parsed) => {
   });
   const token = ctx.pluginAuthToken;
   void (async () => {
-    const os64 = createOsStrategy();
+    const os65 = createOsStrategy();
     try {
       const report = await reviewPullRequest(
         {
@@ -26287,7 +26355,7 @@ var vcsAgentReviewH = async (ctx, cmd, parsed) => {
           baseBranch: parsed.baseBranch
         },
         {
-          runReview: (input) => new CoderabbitRuntimeStrategy(os64).runOneShot(input),
+          runReview: (input) => new CoderabbitRuntimeStrategy(os65).runOneShot(input),
           runGh: (args2) => defaultRunGh(args2),
           postReport: async (r) => {
             if (!token) return;
@@ -26457,7 +26525,7 @@ var defaultCliUpdateDeps = {
   // Only a truly local `codeam start` (neither marker) re-execs in place below.
   isSupervised: () => process.env["CODEAM_AUTO_APPROVE"] === "1" || process.env["CODESPACES"] === "true",
   relaunch: (args2) => {
-    const child = (0, import_child_process24.spawnSync)("codeam", args2, { stdio: "inherit", env: process.env });
+    const child = (0, import_child_process25.spawnSync)("codeam", args2, { stdio: "inherit", env: process.env });
     process.exit(child.status ?? 0);
   }
 };
@@ -26538,7 +26606,7 @@ async function runNpmInstallLatest() {
     const useShell = process.platform === "win32";
     const command2 = useShell && invocation.command.includes(" ") ? `"${invocation.command}"` : invocation.command;
     const result = await new Promise((resolve9) => {
-      (0, import_child_process24.execFile)(
+      (0, import_child_process25.execFile)(
         command2,
         invocation.args,
         { timeout: CLI_UPDATE_INSTALL_TIMEOUT_MS, shell: useShell },
@@ -27152,13 +27220,13 @@ async function dispatchCommand(ctx, cmd) {
 }
 
 // src/commands/start/keep-alive.ts
-var import_child_process25 = require("child_process");
+var import_child_process26 = require("child_process");
 function buildKeepAlive(ctx) {
   let timer = null;
   async function setIdleTimeout(minutes) {
     if (!ctx.inCodespace || !ctx.codespaceName) return;
     await new Promise((resolve9) => {
-      const proc = (0, import_child_process25.spawn)(
+      const proc = (0, import_child_process26.spawn)(
         "gh",
         [
           "api",
@@ -27423,7 +27491,7 @@ async function claimOnce(token, pluginId, pluginSecretHash) {
     pluginId,
     ideName: "codeam-cli (codespace)",
     ideVersion: process.env.npm_package_version ?? "unknown",
-    hostname: os52.hostname(),
+    hostname: os53.hostname(),
     codespaceName: process.env.CODESPACE_NAME ?? "",
     // Current git branch of the codespace's working directory, so the
     // backend can populate `PairedSession.branch` for the codespace pair.
@@ -27484,7 +27552,7 @@ async function claim(token, pluginId, pluginSecretHash) {
   }
 }
 function pairAutoLockPath() {
-  return path68.join(os52.homedir(), ".codeam", "pair-auto.lock");
+  return path68.join(os53.homedir(), ".codeam", "pair-auto.lock");
 }
 function isLivePairAuto(pid) {
   if (!Number.isInteger(pid) || pid <= 0 || pid === process.pid) return false;
@@ -27504,7 +27572,7 @@ function isLiveCodeam(pid) {
 }
 function daemonLockPath(sessionId) {
   const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
-  return path68.join(os52.homedir(), ".codeam", `daemon-${safe}.lock`);
+  return path68.join(os53.homedir(), ".codeam", `daemon-${safe}.lock`);
 }
 function acquireDaemonLock(sessionId) {
   const lockPath = daemonLockPath(sessionId);
@@ -28013,7 +28081,7 @@ var path70 = __toESM(require("path"));
 var import_fs6 = __toESM(require("fs"));
 var import_os11 = __toESM(require("os"));
 var import_path8 = __toESM(require("path"));
-var import_child_process26 = require("child_process");
+var import_child_process27 = require("child_process");
 function currentPlatformKey() {
   return `${process.platform}-${process.arch}`;
 }
@@ -28076,7 +28144,7 @@ function isCommandOnPath(cmd, probe = defaultWhich) {
 function defaultWhich(cmd) {
   const finder = process.platform === "win32" ? "where" : "which";
   try {
-    const res = (0, import_child_process26.spawnSync)(finder, [cmd], { stdio: "ignore" });
+    const res = (0, import_child_process27.spawnSync)(finder, [cmd], { stdio: "ignore" });
     return res.status === 0;
   } catch {
     return false;
@@ -28129,7 +28197,7 @@ var ADAPTER_MODULE_LOAD_ERROR_RE = /ERR_MODULE_NOT_FOUND|Cannot find module|ERR_
 var PERMANENT_ADAPTER_STARTUP_RE = /IneligibleTierError|UNSUPPORTED_CLIENT|no longer supported for Gemini Code Assist|not eligible for Gemini Code Assist|Error authenticating|ProjectIdRequiredError/i;
 function probeAdapterModuleGraph(command2, args2, opts = {}) {
   const livenessMs = opts.livenessMs ?? 400;
-  const spawnFn = opts.spawnFn ?? import_child_process26.spawn;
+  const spawnFn = opts.spawnFn ?? import_child_process27.spawn;
   return new Promise((resolve9) => {
     let settled = false;
     let stderr = "";
@@ -28193,11 +28261,12 @@ function kimiRuns() {
   const r = (0, import_node_child_process27.spawnSync)("kimi", ["--version"], { stdio: "ignore", timeout: 15e3 });
   return !r.error && r.status === 0;
 }
-function augmentPath2() {
+function augmentKimiPath() {
   const dir = kimiBinDir();
   const parts = (process.env.PATH ?? "").split(":");
   if (!parts.includes(dir)) process.env.PATH = `${dir}:${process.env.PATH ?? ""}`;
 }
+var augmentPath2 = augmentKimiPath;
 async function runInstaller2() {
   return new Promise((resolve9) => {
     const proc = (0, import_node_child_process27.spawn)("sh", ["-c", `curl -fsSL ${INSTALL_URL2} | bash`], { stdio: "inherit" });
@@ -28245,11 +28314,12 @@ function opencodeRuns() {
   const r = (0, import_node_child_process28.spawnSync)("opencode", ["--version"], { stdio: "ignore", timeout: 15e3 });
   return !r.error && r.status === 0;
 }
-function augmentPath3() {
+function augmentOpencodePath() {
   const dir = opencodeBinDir();
   const parts = (process.env.PATH ?? "").split(":");
   if (!parts.includes(dir)) process.env.PATH = `${dir}:${process.env.PATH ?? ""}`;
 }
+var augmentPath3 = augmentOpencodePath;
 async function runInstaller3() {
   return new Promise((resolve9) => {
     const proc = (0, import_node_child_process28.spawn)("sh", ["-c", `curl -fsSL ${INSTALL_URL3} | bash`], { stdio: "inherit" });
@@ -28391,6 +28461,7 @@ var REGISTRY = {
     // provisions it, so there we just wait for the binary to appear.
     waitForBinary: async (o) => {
       if (isLocalSession()) await ensureKimiInstalled();
+      augmentKimiPath();
       return waitForCommandOnPath("kimi", o);
     }
   }),
@@ -28406,6 +28477,7 @@ var REGISTRY = {
     requiresAgentBinary: "opencode",
     waitForBinary: async (o) => {
       if (isLocalSession()) await ensureOpencodeInstalled();
+      augmentOpencodePath();
       return waitForCommandOnPath("opencode", o);
     }
   })
@@ -28455,7 +28527,7 @@ var import_node_crypto11 = require("crypto");
 // src/services/history.service.ts
 var fs65 = __toESM(require("fs"));
 var path71 = __toESM(require("path"));
-var os54 = __toESM(require("os"));
+var os55 = __toESM(require("os"));
 var https7 = __toESM(require("https"));
 var http6 = __toESM(require("http"));
 var import_zod2 = require("zod");
@@ -28623,7 +28695,7 @@ var HistoryService = class _HistoryService {
     return this._quotaPercent === null || Date.now() - this._quotaFetchedAt > ttlMs;
   }
   get projectDir() {
-    return this.runtime.resolveHistoryDir(this.cwd) ?? path71.join(os54.homedir(), ".claude", "projects", encodeCwd(this.cwd));
+    return this.runtime.resolveHistoryDir(this.cwd) ?? path71.join(os55.homedir(), ".claude", "projects", encodeCwd(this.cwd));
   }
   /** Set the current Claude conversation ID (extracted from /cost command or session start) */
   setCurrentConversationId(id) {
@@ -29051,7 +29123,7 @@ var HistoryService = class _HistoryService {
 var import_node_child_process29 = require("child_process");
 var fs66 = __toESM(require("fs/promises"));
 var fsSync = __toESM(require("fs"));
-var os56 = __toESM(require("os"));
+var os57 = __toESM(require("os"));
 var path73 = __toESM(require("path"));
 var import_node_stream = require("stream");
 
@@ -33079,7 +33151,7 @@ function createIdleTimeout(idleMs, makeError, activeIdleMs = idleMs) {
 
 // src/agents/acp/internal-paths.ts
 var path72 = __toESM(require("path"));
-var os55 = __toESM(require("os"));
+var os56 = __toESM(require("os"));
 var INTERNAL_TOKENS = [".codeam", "house-claude"];
 var SELF_HOSTED_WORKSPACE_RE = /\.codeam[/\\]self-hosted/gi;
 function textReferencesInternal(text) {
@@ -33087,7 +33159,7 @@ function textReferencesInternal(text) {
   const scrubbed = text.replace(SELF_HOSTED_WORKSPACE_RE, " ");
   return INTERNAL_TOKENS.some((t2) => scrubbed.includes(t2));
 }
-function pathIsInternal(p2, homeDir2 = os55.homedir()) {
+function pathIsInternal(p2, homeDir2 = os56.homedir()) {
   if (!p2) return false;
   const abs = path72.resolve(p2);
   const home = path72.resolve(homeDir2);
@@ -34135,7 +34207,7 @@ function applyLineRange(content, line, limit) {
   return { content: lines.slice(start2, end).join("\n") };
 }
 function knownAgentBinaryDirs() {
-  const home = os56.homedir();
+  const home = os57.homedir();
   const out2 = [];
   out2.push("/tmp/codeam-node20/bin");
   for (const root of [
@@ -34190,12 +34262,12 @@ function buildRelaunchProxyEnv(baseEnv) {
   return env;
 }
 var relaunchProxyWithoutBudget = async () => {
-  const { spawn: spawn45 } = await import("child_process");
+  const { spawn: spawn46 } = await import("child_process");
   killHeadroomProxy();
   await new Promise((r) => setTimeout(r, 500));
   const proxyEnv = buildRelaunchProxyEnv(process.env);
   try {
-    const proxy = spawn45(
+    const proxy = spawn46(
       "headroom",
       ["proxy", "--port", "8787"],
       { stdio: "ignore", detached: true, env: proxyEnv }
@@ -34214,6 +34286,148 @@ var relaunchProxyWithoutBudget = async () => {
   await new Promise((r) => setTimeout(r, 3e3));
 };
 
+// src/agents/acp/switch-agent.ts
+var NON_SWITCHABLE = /* @__PURE__ */ new Set([
+  // Review-only reviewer — added to a session, never the primary agent.
+  "coderabbit"
+]);
+function displayName(id) {
+  return isKnownAgentId(id) ? AGENT_REGISTRY[id]?.displayName ?? id : id;
+}
+function resolveSwitchTarget(raw, currentAgent) {
+  if (typeof raw !== "string" || raw.length === 0) {
+    return { ok: false, error: "switch_agent: missing agentId" };
+  }
+  if (!isKnownAgentId(raw)) {
+    return { ok: false, error: `Unknown agent "${raw}".` };
+  }
+  if (NON_SWITCHABLE.has(raw)) {
+    return { ok: false, error: `${displayName(raw)} is a reviewer \u2014 it can't drive a session.` };
+  }
+  if (!requiresAcp(raw)) {
+    return {
+      ok: false,
+      error: `${displayName(raw)} can't be switched to in a live session yet.`
+    };
+  }
+  if (raw === currentAgent) {
+    return { ok: false, error: `${displayName(raw)} is already this session's agent.` };
+  }
+  return { ok: true, agentId: raw };
+}
+function toAgentAuth(method, credential) {
+  return { kind: method === "api_key" ? "api_key" : "oauth_token", value: credential };
+}
+async function ensureAgentBinaryForSwitch(agentId, installScript, deps = {}) {
+  const resolveAdapter = deps.resolveAdapter ?? getAcpAdapter;
+  const runInstall = deps.runInstall ?? runAgentInstallScript;
+  const spec = resolveAdapter(agentId);
+  if (!spec) {
+    return { ok: false, error: `${displayName(agentId)} ACP adapter is unavailable on this CLI.` };
+  }
+  if (await spec.waitForBinary({ timeoutMs: 2e3 })) return { ok: true };
+  if (!installScript) {
+    return {
+      ok: false,
+      error: `${displayName(agentId)} CLI is not installed on this machine.`
+    };
+  }
+  log.info("switchAgent", `installing ${agentId} binary (missing on PATH)`);
+  const res = await runInstall(installScript, { logScope: "switchAgent" });
+  if (!res.ok) {
+    return {
+      ok: false,
+      error: res.timedOut ? `${displayName(agentId)} install timed out.` : `${displayName(agentId)} install failed.`
+    };
+  }
+  if (await spec.waitForBinary({ timeoutMs: 3e4 })) return { ok: true };
+  return {
+    ok: false,
+    error: `${displayName(agentId)} installed but its binary never appeared on PATH.`
+  };
+}
+function buildHandoffPreamble(fromAgent, toAgent, transcript) {
+  const trimmed = transcript.trim();
+  if (trimmed.length === 0) return null;
+  const takeover = fromAgent === toAgent ? `[Session handoff] You (${displayName(toAgent)}) are resuming a live coding session after a restart. ` : `[Session handoff] You (${displayName(toAgent)}) are taking over a live coding session previously driven by ${displayName(fromAgent)}. `;
+  return [
+    takeover,
+    `The conversation below is context from that session \u2014 continue the work seamlessly from where it left off. `,
+    `Do not re-introduce yourself or re-do completed work.
+
+`,
+    `--- Recent conversation with ${displayName(fromAgent)} ---
+`,
+    `${trimmed}
+`,
+    `--- End of handoff context ---`
+  ].join("");
+}
+function makeSerializedSwitchEmitter(post2) {
+  let chain = Promise.resolve();
+  return (type, payload) => {
+    chain = chain.then(() => post2(type, payload)).catch(() => void 0);
+    return chain;
+  };
+}
+async function performAgentSwitch(deps, rawAgentId) {
+  const from = deps.currentAgent();
+  const target = resolveSwitchTarget(rawAgentId, from);
+  if (!target.ok) {
+    return { ok: false, agentId: typeof rawAgentId === "string" ? rawAgentId : "", error: target.error };
+  }
+  const agentId = target.agentId;
+  const emitStatus = (status2) => deps.postEvent("switch_agent_status", { ...status2 });
+  const emitStep = (step) => deps.postEvent("switch_agent_progress", { step, agentId });
+  const fail2 = (error) => {
+    log.warn("switchAgent", `switch ${from} \u2192 ${agentId} failed: ${error}`);
+    void emitStatus({ state: "error", agentId, fromAgentId: from, error });
+    return { ok: false, agentId, error };
+  };
+  log.info("switchAgent", `switch requested ${from} \u2192 ${agentId}`);
+  void emitStatus({ state: "switching", agentId, fromAgentId: from });
+  void emitStep("credential");
+  const cred = await deps.fetchCredential(agentId);
+  if (!cred) {
+    return fail2(
+      `No linked credential for ${displayName(agentId)}. Link it in Profile \u203A Agents first.`
+    );
+  }
+  try {
+    deps.provisionCredential(agentId, toAgentAuth(cred.method, cred.credential));
+  } catch (err) {
+    log.warn("switchAgent", `credential provisioning failed: ${err.message}`);
+    return fail2(`Couldn't write the ${displayName(agentId)} credential on this machine.`);
+  }
+  void emitStep("install");
+  const bin = await deps.ensureBinary(agentId, cred.installScript);
+  if (!bin.ok) return fail2(bin.error);
+  void emitStep("restart");
+  try {
+    await deps.swapRuntime(agentId);
+  } catch (err) {
+    log.warn("switchAgent", `swap failed, reverting to ${from}: ${err.message}`);
+    try {
+      await deps.revertRuntime(from);
+    } catch (revertErr) {
+      log.warn("switchAgent", `revert failed: ${revertErr.message}`);
+      return fail2(
+        `Switching to ${displayName(agentId)} failed and ${displayName(from)} couldn't be restored \u2014 restart the session.`
+      );
+    }
+    return fail2(`Couldn't start ${displayName(agentId)} \u2014 the session stays on ${displayName(from)}.`);
+  }
+  try {
+    deps.persistAgent(agentId);
+  } catch (err) {
+    log.warn("switchAgent", `persist failed (non-fatal): ${err.message}`);
+  }
+  deps.reannounce(agentId);
+  await emitStatus({ state: "ready", agentId, fromAgentId: from });
+  log.info("switchAgent", `switch complete ${from} \u2192 ${agentId}`);
+  return { ok: true, agentId };
+}
+
 // src/services/streaming/transport.ts
 var http7 = __toESM(require("http"));
 var https8 = __toESM(require("https"));
@@ -34660,12 +34874,12 @@ function commonPrefixLength(a, b) {
 }
 
 // src/agents/acp/onboarding.ts
-var import_child_process27 = require("child_process");
+var import_child_process28 = require("child_process");
 var fs67 = __toESM(require("fs"));
-var os57 = __toESM(require("os"));
+var os58 = __toESM(require("os"));
 var path74 = __toESM(require("path"));
 var _onboardingSeam = {
-  markerPath: (sessionId) => path74.join(os57.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
+  markerPath: (sessionId) => path74.join(os58.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
   exists: (p2) => fs67.existsSync(p2),
   write: (p2) => {
     fs67.mkdirSync(path74.dirname(p2), { recursive: true });
@@ -34681,7 +34895,7 @@ var _onboardingSeam = {
    */
   gitRemoteUrl: (cwd) => {
     try {
-      return (0, import_child_process27.execFileSync)("git", ["-C", cwd, "remote", "get-url", "origin"], {
+      return (0, import_child_process28.execFileSync)("git", ["-C", cwd, "remote", "get-url", "origin"], {
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"],
         timeout: 2e3
@@ -34963,7 +35177,7 @@ function extractSelectPrompt(text) {
 var import_crypto5 = require("crypto");
 
 // src/services/turn-files/git-changeset.ts
-var import_child_process28 = require("child_process");
+var import_child_process29 = require("child_process");
 var fs69 = __toESM(require("fs/promises"));
 var path76 = __toESM(require("path"));
 
@@ -35149,7 +35363,7 @@ function defaultRunGit(cwd, args2) {
   return new Promise((resolve9) => {
     let proc;
     try {
-      proc = (0, import_child_process28.spawn)("git", args2, { cwd, env: process.env });
+      proc = (0, import_child_process29.spawn)("git", args2, { cwd, env: process.env });
     } catch {
       resolve9(null);
       return;
@@ -36539,8 +36753,8 @@ function buildAcpPromptBlocks(payload) {
 // src/agents/agent-standard.ts
 var fs74 = __toESM(require("fs"));
 var path81 = __toESM(require("path"));
-var os58 = __toESM(require("os"));
-function ensureAgentStandard(homeDir2 = os58.homedir()) {
+var os59 = __toESM(require("os"));
+function ensureAgentStandard(homeDir2 = os59.homedir()) {
   try {
     const file = path81.join(homeDir2, ".claude", "CLAUDE.md");
     let existing = "";
@@ -36561,7 +36775,7 @@ ${AGENT_STANDARD_BLOCK}
 }
 var _agentStandardSeam = {
   isLocalSession: () => isLocalSession(),
-  markerPath: (sessionId) => path81.join(os58.homedir(), ".codeam", "agent-standard", `${sessionId}.done`),
+  markerPath: (sessionId) => path81.join(os59.homedir(), ".codeam", "agent-standard", `${sessionId}.done`),
   exists: (p2) => fs74.existsSync(p2),
   write: (p2) => {
     fs74.mkdirSync(path81.dirname(p2), { recursive: true });
@@ -36703,6 +36917,10 @@ async function startTaskH(ctx) {
   await streaming.beginTurn();
   history.appendUserPrompt(promptText);
   maybePrefaceAgentStandard(blocks, opts.agent, opts.sessionId);
+  if (ctx.pendingHandoff?.current) {
+    blocks.unshift({ type: "text", text: ctx.pendingHandoff.current });
+    ctx.pendingHandoff.current = null;
+  }
   let turnClosed = false;
   try {
     const reply = await client3.prompt(blocks);
@@ -37246,6 +37464,27 @@ async function integrationsDetectH(ctx) {
     });
   }
 }
+async function switchAgentH(ctx) {
+  const { cmd, relay } = ctx;
+  if (!ctx.switchAgent) {
+    await relay.sendResult(cmd.id, "failed", {
+      error: "Switching agents is not supported on this session."
+    });
+    return;
+  }
+  const rawAgentId = cmd.payload?.agentId;
+  try {
+    const result = await ctx.switchAgent(rawAgentId);
+    await relay.sendResult(
+      cmd.id,
+      result.ok ? "completed" : "failed",
+      result
+    );
+  } catch (err) {
+    log.warn("acpRunner", `switch_agent failed: ${describeError(err)}`);
+    await relay.sendResult(cmd.id, "failed", { error: describeError(err) });
+  }
+}
 var ACP_COMMAND_HANDLERS = {
   integrations_sync: integrationsSyncH,
   integrations_detect: integrationsDetectH,
@@ -37263,6 +37502,7 @@ var ACP_COMMAND_HANDLERS = {
   select_option: selectOptionH,
   provide_input: provideInputH,
   resume_session: resumeSessionH,
+  switch_agent: switchAgentH,
   change_model: changeModelH,
   summarize: summarizeH,
   session_terminated: sessionShutdownH,
@@ -37712,6 +37952,27 @@ var AcpHistory = class {
     this.messages.length = 0;
     this.summary = null;
   }
+  /**
+   * Render the TAIL of the buffered conversation as plain text, bounded to
+   * `maxChars` — the in-session agent switch captures this right before the
+   * old client stops and prefixes it to the first post-switch prompt, so the
+   * NEW agent inherits the session's context (a cross-agent `session/load`
+   * is impossible; this handoff is the continuity mechanism). Walks newest →
+   * oldest so the most recent turns always survive the cap, then restores
+   * chronological order.
+   */
+  recentTranscript(maxChars) {
+    const lines = [];
+    let used = 0;
+    for (let i = this.messages.length - 1; i >= 0; i--) {
+      const m = this.messages[i];
+      const line = `${m.role === "user" ? "User" : "Agent"}: ${m.text.trim()}`;
+      if (used + line.length > maxChars) break;
+      lines.push(line);
+      used += line.length + 2;
+    }
+    return lines.reverse().join("\n\n");
+  }
   appendUserPrompt(text) {
     if (this.summary === null) {
       const trimmed = text.trim().replace(/\s+/g, " ");
@@ -37953,9 +38214,9 @@ async function runAcpSession(opts) {
       })();
     }
   };
-  const client3 = new AcpClient(clientOptions);
+  let client3 = new AcpClient(clientOptions);
   let _budgetReachedPosted = false;
-  const budgetRecovery = createBudgetRecovery({
+  const makeBudgetRecovery = () => createBudgetRecovery({
     publishText: (text) => publisher.publishOutput({ type: "text", content: text, done: true }),
     publishSelectPrompt: (question, options) => publisher.publishOutput({
       type: "select_prompt",
@@ -37974,6 +38235,7 @@ async function runAcpSession(opts) {
     agentId: opts.agent,
     log: (msg) => log.info("acpRunner", msg)
   });
+  let budgetRecovery = makeBudgetRecovery();
   showInfo(`Starting ${opts.agent} via ACP adapter (${opts.adapter.requiresAgentBinary})\u2026`);
   let handshake;
   try {
@@ -37992,6 +38254,7 @@ async function runAcpSession(opts) {
   }
   let acpSessionId = handshake.sessionId;
   const { initialize, model: handshakeModel, tier: handshakeTier } = handshake;
+  let agentCaps = initialize.agentCapabilities;
   log.trace(
     "acpRunner",
     `adapter handshake ok protocolVersion=${initialize.protocolVersion} sessionId=${acpSessionId.slice(0, 8)}`
@@ -38027,8 +38290,8 @@ async function runAcpSession(opts) {
     path: opts.cwd,
     done: true
   });
-  const runtime = createInteractiveAgentStrategy(opts.agent, createOsStrategy());
-  const history = new AcpHistory(publisher, {
+  let runtime = createInteractiveAgentStrategy(opts.agent, createOsStrategy());
+  let history = new AcpHistory(publisher, {
     agent: opts.agent,
     acpSessionId,
     // Agent-agnostic RECENT list: enumerate via the ACP session/list RPC (any
@@ -38036,7 +38299,7 @@ async function runAcpSession(opts) {
     // agents → flush() falls back to the current session only.
     listSessions: () => client3.listSessions()
   });
-  const jsonlHistory = new HistoryService(runtime, opts.pluginId, opts.cwd, {
+  let jsonlHistory = new HistoryService(runtime, opts.pluginId, opts.cwd, {
     pluginAuthToken: opts.pluginAuthToken
   });
   void (async () => {
@@ -38107,7 +38370,7 @@ async function runAcpSession(opts) {
         opts,
         history,
         jsonlHistory,
-        initialize.agentCapabilities,
+        agentCaps,
         turnFiles,
         getBeads,
         publisher,
@@ -38123,11 +38386,98 @@ async function runAcpSession(opts) {
         // conversation" fix).
         (id) => {
           acpSessionId = id;
-        }
+        },
+        switchAgentForSession,
+        pendingHandoff
       );
     },
     { id: opts.agent, name: opts.agent, displayName: opts.agent }
   );
+  const HANDOFF_MAX_CHARS = 16e3;
+  const pendingHandoff = { current: null };
+  let switchCredentialEnv = {};
+  const relaunchWith = async (nextAgent) => {
+    try {
+      await client3.cancel();
+    } catch {
+    }
+    await streaming.closeAll();
+    const prevAgent = opts.agent;
+    const transcript = history.recentTranscript(HANDOFF_MAX_CHARS);
+    await client3.stop();
+    const adapter = await resolveAcpAdapterWithRetry(nextAgent);
+    if (!adapter) throw new Error(`no ACP adapter available for ${nextAgent}`);
+    const disable1m = loadCliConfig().sessions.find((s) => s.pluginId === opts.pluginId)?.disable1mContext === true;
+    clientOptions.adapter = adapter;
+    clientOptions.extraEnv = {
+      ...computeAdapterExtraEnv({
+        agent: nextAgent,
+        autoApprovePermissions: opts.autoApprovePermissions,
+        disable1mContext: disable1m
+      }),
+      ...switchCredentialEnv
+    };
+    const next = new AcpClient(clientOptions);
+    const hs = await next.start();
+    client3 = next;
+    opts.agent = nextAgent;
+    opts.adapter = adapter;
+    acpSessionId = hs.sessionId;
+    agentCaps = hs.initialize.agentCapabilities;
+    runtime = createInteractiveAgentStrategy(nextAgent, createOsStrategy());
+    history = new AcpHistory(publisher, {
+      agent: nextAgent,
+      acpSessionId,
+      listSessions: () => client3.listSessions()
+    });
+    jsonlHistory = new HistoryService(runtime, opts.pluginId, opts.cwd, {
+      pluginAuthToken: opts.pluginAuthToken
+    });
+    budgetRecovery = makeBudgetRecovery();
+    pendingHandoff.current = buildHandoffPreamble(prevAgent, nextAgent, transcript);
+    void publisher.publishOutput({
+      type: "agent_banner",
+      agentId: nextAgent,
+      title: "Welcome back!",
+      subtitle: buildBannerSubtitle(nextAgent, hs.sessionId, hs.model, hs.tier),
+      path: opts.cwd,
+      done: true
+    });
+  };
+  const emitSwitchEvent = makeSerializedSwitchEmitter(
+    (type, payload) => postAgentSwitchEvent({
+      sessionId: opts.sessionId,
+      pluginId: opts.pluginId,
+      pluginAuthToken: opts.pluginAuthToken,
+      type,
+      payload
+    })
+  );
+  const switchAgentForSession = (rawAgentId) => performAgentSwitch(
+    {
+      currentAgent: () => opts.agent,
+      postEvent: emitSwitchEvent,
+      fetchCredential: (agentId) => fetchProvisionCredential({
+        agentId,
+        sessionId: opts.sessionId,
+        pluginId: opts.pluginId,
+        pluginAuthToken: opts.pluginAuthToken,
+        includeInstallScript: true
+      }),
+      provisionCredential: (agentId, auth) => {
+        switchCredentialEnv = provisionAgentCredentials(agentId, auth);
+      },
+      ensureBinary: (agentId, installScript) => ensureAgentBinaryForSwitch(agentId, installScript),
+      swapRuntime: relaunchWith,
+      revertRuntime: relaunchWith,
+      persistAgent: (agentId) => setSessionAgent(opts.pluginId, agentId),
+      reannounce: (agentId) => {
+        relay.setAgentMeta({ id: agentId, name: agentId, displayName: agentId });
+        relay.reannounceAgents();
+      }
+    },
+    rawAgentId
+  );
   await onboardingWelcomeDone;
   relay.start();
   void createWakeCredentialProbe({
@@ -38158,7 +38508,7 @@ async function runAcpSession(opts) {
   await new Promise(() => {
   });
 }
-async function handleCommand(cmd, client3, relay, acpSessionId, streaming, opts, history, jsonlHistory, agentCaps, turnFiles, getBeads, publisher, recentStderr, budgetRecovery, budgetReachedFlag, onActiveSessionChanged) {
+async function handleCommand(cmd, client3, relay, acpSessionId, streaming, opts, history, jsonlHistory, agentCaps, turnFiles, getBeads, publisher, recentStderr, budgetRecovery, budgetReachedFlag, onActiveSessionChanged, switchAgent, pendingHandoff) {
   const session = {
     client: client3,
     relay,
@@ -38174,16 +38524,18 @@ async function handleCommand(cmd, client3, relay, acpSessionId, streaming, opts,
     recentStderr,
     budgetRecovery,
     budgetReachedFlag,
-    onActiveSessionChanged
+    onActiveSessionChanged,
+    switchAgent,
+    pendingHandoff
   };
   await dispatchAcpCommand(assembleAcpCommandContext(session, cmd));
 }
 function buildBannerSubtitle(agentId, acpSessionId, model, tier) {
   const meta = AGENT_REGISTRY[agentId];
-  const displayName = meta?.displayName ?? agentId;
-  if (model && tier) return `${displayName} \xB7 ${model} \xB7 ${tier}`;
-  if (model) return `${displayName} \xB7 ${model}`;
-  return `${displayName} \xB7 ACP \xB7 ${acpSessionId.slice(0, 8)}`;
+  const displayName2 = meta?.displayName ?? agentId;
+  if (model && tier) return `${displayName2} \xB7 ${model} \xB7 ${tier}`;
+  if (model) return `${displayName2} \xB7 ${model}`;
+  return `${displayName2} \xB7 ACP \xB7 ${acpSessionId.slice(0, 8)}`;
 }
 
 // src/services/output/chrome-tracker.ts
@@ -39236,7 +39588,7 @@ function startClaudeCredentialSync(opts) {
 // src/beads/workflow-hint.ts
 var fs75 = __toESM(require("fs"));
 var path82 = __toESM(require("path"));
-var os59 = __toESM(require("os"));
+var os60 = __toESM(require("os"));
 var BEADS_HINT_MARKER = "<!-- codeam:beads-workflow -->";
 var BEADS_HINT = `${BEADS_HINT_MARKER}
 # Beads (bd) \u2014 task tracking + persistent memory (ALWAYS use it)
@@ -39250,7 +39602,7 @@ This environment uses **bd (beads)** for issue/task tracking and persistent memo
 - \`bd ready\` (available work) \xB7 \`bd show <id>\` \xB7 \`bd update <id> --claim\` \xB7 \`bd close <id>\`.
 - Use \`bd remember "..."\` for persistent knowledge \u2014 do NOT use MEMORY.md files.
 ${BEADS_HINT_MARKER}`;
-function ensureBeadsWorkflowHint(homeDir2 = os59.homedir()) {
+function ensureBeadsWorkflowHint(homeDir2 = os60.homedir()) {
   try {
     const file = path82.join(homeDir2, ".claude", "CLAUDE.md");
     let existing = "";
@@ -40003,12 +40355,12 @@ function keepDeviceAwake(deps = {}) {
 
 // src/agents/claude/onboarding.ts
 var fs77 = __toESM(require("fs"));
-var os61 = __toESM(require("os"));
+var os62 = __toESM(require("os"));
 var path83 = __toESM(require("path"));
 var ONBOARDING_VERSION_SENTINEL = "9999.0.0";
 function ensureClaudeOnboarded(cwd) {
   try {
-    const file = path83.join(os61.homedir(), ".claude.json");
+    const file = path83.join(os62.homedir(), ".claude.json");
     let config = {};
     try {
       config = JSON.parse(fs77.readFileSync(file, "utf8"));
@@ -40054,10 +40406,10 @@ async function start(requestedAgent, presetSession) {
   const session = presetSession ? presetSession : requestedAgent ? getActiveSessionForAgent(requestedAgent) : getActiveSession();
   if (!session) {
     if (requestedAgent) {
-      const displayName = AGENT_REGISTRY[requestedAgent]?.displayName ?? requestedAgent;
-      console.log(`  ${import_picocolors4.default.dim(`No paired ${displayName} session found.`)}`);
+      const displayName2 = AGENT_REGISTRY[requestedAgent]?.displayName ?? requestedAgent;
+      console.log(`  ${import_picocolors4.default.dim(`No paired ${displayName2} session found.`)}`);
       console.log(
-        `  ${import_picocolors4.default.dim(`Run ${import_picocolors4.default.white("codeam pair")} from a ${displayName} setup to connect your mobile app.`)}
+        `  ${import_picocolors4.default.dim(`Run ${import_picocolors4.default.white("codeam pair")} from a ${displayName2} setup to connect your mobile app.`)}
 `
       );
     } else {
@@ -40766,11 +41118,11 @@ async function logout() {
 var import_picocolors11 = __toESM(require("picocolors"));
 
 // src/services/providers/github-codespaces.ts
-var import_child_process29 = require("child_process");
+var import_child_process30 = require("child_process");
 var import_util4 = require("util");
 var import_picocolors9 = __toESM(require("picocolors"));
 var path84 = __toESM(require("path"));
-var execFileP6 = (0, import_util4.promisify)(import_child_process29.execFile);
+var execFileP6 = (0, import_util4.promisify)(import_child_process30.execFile);
 var MAX_BUFFER = 8 * 1024 * 1024;
 function resetStdinForChild() {
   if (process.stdin.isTTY) {
@@ -40814,7 +41166,7 @@ var GitHubCodespacesProvider = class {
     if (!isAuthed) {
       resetStdinForChild();
       await new Promise((resolve9, reject) => {
-        const proc = (0, import_child_process29.spawn)("gh", ["auth", "login", "-s", "codespace,repo,read:user"], {
+        const proc = (0, import_child_process30.spawn)("gh", ["auth", "login", "-s", "codespace,repo,read:user"], {
           stdio: "inherit"
         });
         proc.on("exit", (code) => {
@@ -40848,7 +41200,7 @@ var GitHubCodespacesProvider = class {
       wt(noteLines.join("\n"), "One more permission needed");
       resetStdinForChild();
       const refreshCode = await new Promise((resolve9, reject) => {
-        const proc = (0, import_child_process29.spawn)(
+        const proc = (0, import_child_process30.spawn)(
           "gh",
           ["auth", "refresh", "-h", "github.com", "-s", "codespace"],
           { stdio: "inherit" }
@@ -40998,7 +41350,7 @@ var GitHubCodespacesProvider = class {
     O2.step(`Installing gh via ${installCmd.describe}\u2026`);
     resetStdinForChild();
     const ok = await new Promise((resolve9) => {
-      const proc = (0, import_child_process29.spawn)(installCmd.exe, installCmd.args, { stdio: "inherit" });
+      const proc = (0, import_child_process30.spawn)(installCmd.exe, installCmd.args, { stdio: "inherit" });
       proc.on("exit", (code) => resolve9(code === 0));
       proc.on("error", () => resolve9(false));
     });
@@ -41025,7 +41377,7 @@ var GitHubCodespacesProvider = class {
     );
     resetStdinForChild();
     await new Promise((resolve9, reject) => {
-      const proc = (0, import_child_process29.spawn)(
+      const proc = (0, import_child_process30.spawn)(
         "gh",
         ["auth", "refresh", "-h", "github.com", "-s", "repo,read:org"],
         { stdio: "inherit" }
@@ -41203,7 +41555,7 @@ var GitHubCodespacesProvider = class {
   async streamCommand(workspaceId, command2) {
     resetStdinForChild();
     return new Promise((resolve9, reject) => {
-      const proc = (0, import_child_process29.spawn)(
+      const proc = (0, import_child_process30.spawn)(
         "gh",
         ["codespace", "ssh", "-c", workspaceId, "--", "-tt", command2],
         { stdio: "inherit" }
@@ -41230,11 +41582,11 @@ var GitHubCodespacesProvider = class {
       `mkdir -p ${shellQuote(remoteDir)} && tar -xzf - -C ${shellQuote(remoteDir)}`
     ];
     await new Promise((resolve9, reject) => {
-      const tar = (0, import_child_process29.spawn)("tar", tarArgs, {
+      const tar = (0, import_child_process30.spawn)("tar", tarArgs, {
         stdio: ["ignore", "pipe", "pipe"],
         env: tarEnv
       });
-      const ssh = (0, import_child_process29.spawn)("gh", sshArgs, {
+      const ssh = (0, import_child_process30.spawn)("gh", sshArgs, {
         stdio: [tar.stdout, "pipe", "pipe"]
       });
       let tarErr = "";
@@ -41268,7 +41620,7 @@ var GitHubCodespacesProvider = class {
     }
     const cmd = parts.join(" && ");
     await new Promise((resolve9, reject) => {
-      const proc = (0, import_child_process29.spawn)(
+      const proc = (0, import_child_process30.spawn)(
         "gh",
         ["codespace", "ssh", "-c", workspaceId, "--", cmd],
         { stdio: ["pipe", "pipe", "pipe"] }
@@ -41326,11 +41678,11 @@ function shellQuote(s) {
 }
 
 // src/services/providers/gitpod.ts
-var import_child_process30 = require("child_process");
+var import_child_process31 = require("child_process");
 var import_util5 = require("util");
 var path85 = __toESM(require("path"));
 var import_picocolors10 = __toESM(require("picocolors"));
-var execFileP7 = (0, import_util5.promisify)(import_child_process30.execFile);
+var execFileP7 = (0, import_util5.promisify)(import_child_process31.execFile);
 var MAX_BUFFER2 = 8 * 1024 * 1024;
 function resetStdinForChild2() {
   if (process.stdin.isTTY) {
@@ -41370,7 +41722,7 @@ var GitpodProvider = class {
     );
     resetStdinForChild2();
     await new Promise((resolve9, reject) => {
-      const proc = (0, import_child_process30.spawn)("gitpod", ["login"], { stdio: "inherit" });
+      const proc = (0, import_child_process31.spawn)("gitpod", ["login"], { stdio: "inherit" });
       proc.on("exit", (code) => {
         if (code === 0) resolve9();
         else reject(new Error("gitpod login failed."));
@@ -41522,7 +41874,7 @@ var GitpodProvider = class {
   async streamCommand(workspaceId, command2) {
     resetStdinForChild2();
     return new Promise((resolve9, reject) => {
-      const proc = (0, import_child_process30.spawn)(
+      const proc = (0, import_child_process31.spawn)(
         "gitpod",
         ["workspace", "ssh", workspaceId, "--", "-tt", command2],
         { stdio: "inherit" }
@@ -41542,11 +41894,11 @@ var GitpodProvider = class {
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote2(remoteDir)} && tar -xzf - -C ${shellQuote2(remoteDir)}`;
     await new Promise((resolve9, reject) => {
-      const tar = (0, import_child_process30.spawn)("tar", tarArgs, {
+      const tar = (0, import_child_process31.spawn)("tar", tarArgs, {
         stdio: ["ignore", "pipe", "pipe"],
         env: tarEnv
       });
-      const ssh = (0, import_child_process30.spawn)(
+      const ssh = (0, import_child_process31.spawn)(
         "gitpod",
         ["workspace", "ssh", workspaceId, "--", remoteCmd],
         { stdio: [tar.stdout, "pipe", "pipe"] }
@@ -41578,7 +41930,7 @@ var GitpodProvider = class {
     }
     const cmd = parts.join(" && ");
     await new Promise((resolve9, reject) => {
-      const proc = (0, import_child_process30.spawn)(
+      const proc = (0, import_child_process31.spawn)(
         "gitpod",
         ["workspace", "ssh", workspaceId, "--", cmd],
         { stdio: ["pipe", "pipe", "pipe"] }
@@ -41602,10 +41954,10 @@ function shellQuote2(s) {
 }
 
 // src/services/providers/gitlab-workspaces.ts
-var import_child_process31 = require("child_process");
+var import_child_process32 = require("child_process");
 var import_util6 = require("util");
 var path86 = __toESM(require("path"));
-var execFileP8 = (0, import_util6.promisify)(import_child_process31.execFile);
+var execFileP8 = (0, import_util6.promisify)(import_child_process32.execFile);
 var MAX_BUFFER3 = 8 * 1024 * 1024;
 var GITLAB_API_BASE = process.env.CODEAM_GITLAB_API_URL ?? "https://gitlab.com/api/v4";
 function resetStdinForChild3() {
@@ -41647,7 +41999,7 @@ var GitLabWorkspacesProvider = class {
     );
     resetStdinForChild3();
     await new Promise((resolve9, reject) => {
-      const proc = (0, import_child_process31.spawn)(
+      const proc = (0, import_child_process32.spawn)(
         "glab",
         ["auth", "login", "--scopes", "api,read_user,read_repository"],
         { stdio: "inherit" }
@@ -41819,7 +42171,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
     resetStdinForChild3();
     return new Promise((resolve9, reject) => {
-      const proc = (0, import_child_process31.spawn)(
+      const proc = (0, import_child_process32.spawn)(
         "ssh",
         ["-tt", "-o", "StrictHostKeyChecking=accept-new", `${workspaceId}@${sshHost}`, command2],
         { stdio: "inherit" }
@@ -41840,8 +42192,8 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote3(remoteDir)} && tar -xzf - -C ${shellQuote3(remoteDir)}`;
     await new Promise((resolve9, reject) => {
-      const tar = (0, import_child_process31.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
-      const ssh = (0, import_child_process31.spawn)(
+      const tar = (0, import_child_process32.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
+      const ssh = (0, import_child_process32.spawn)(
         "ssh",
         ["-o", "StrictHostKeyChecking=accept-new", `${workspaceId}@${sshHost}`, remoteCmd],
         { stdio: [tar.stdout, "pipe", "pipe"] }
@@ -41871,7 +42223,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
     }
     const cmd = parts.join(" && ");
     await new Promise((resolve9, reject) => {
-      const proc = (0, import_child_process31.spawn)(
+      const proc = (0, import_child_process32.spawn)(
         "ssh",
         ["-o", "StrictHostKeyChecking=accept-new", `${workspaceId}@${sshHost}`, cmd],
         { stdio: ["pipe", "pipe", "pipe"] }
@@ -41930,10 +42282,10 @@ function shellQuote3(s) {
 }
 
 // src/services/providers/railway.ts
-var import_child_process32 = require("child_process");
+var import_child_process33 = require("child_process");
 var import_util7 = require("util");
 var path87 = __toESM(require("path"));
-var execFileP9 = (0, import_util7.promisify)(import_child_process32.execFile);
+var execFileP9 = (0, import_util7.promisify)(import_child_process33.execFile);
 var MAX_BUFFER4 = 8 * 1024 * 1024;
 function resetStdinForChild4() {
   if (process.stdin.isTTY) {
@@ -41974,7 +42326,7 @@ var RailwayProvider = class {
     );
     resetStdinForChild4();
     await new Promise((resolve9, reject) => {
-      const proc = (0, import_child_process32.spawn)("railway", ["login"], { stdio: "inherit" });
+      const proc = (0, import_child_process33.spawn)("railway", ["login"], { stdio: "inherit" });
       proc.on("exit", (code) => {
         if (code === 0) resolve9();
         else reject(new Error("railway login failed."));
@@ -42117,7 +42469,7 @@ var RailwayProvider = class {
     }
     resetStdinForChild4();
     return new Promise((resolve9, reject) => {
-      const proc = (0, import_child_process32.spawn)(
+      const proc = (0, import_child_process33.spawn)(
         "railway",
         ["shell", "--project", projectId, "--service", serviceId, "--command", command2],
         { stdio: "inherit" }
@@ -42141,8 +42493,8 @@ var RailwayProvider = class {
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote4(remoteDir)} && tar -xzf - -C ${shellQuote4(remoteDir)}`;
     await new Promise((resolve9, reject) => {
-      const tar = (0, import_child_process32.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
-      const sh = (0, import_child_process32.spawn)(
+      const tar = (0, import_child_process33.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
+      const sh = (0, import_child_process33.spawn)(
         "railway",
         ["shell", "--project", projectId, "--service", serviceId, "--command", remoteCmd],
         { stdio: [tar.stdout, "pipe", "pipe"] }
@@ -42175,7 +42527,7 @@ var RailwayProvider = class {
     }
     const cmd = parts.join(" && ");
     await new Promise((resolve9, reject) => {
-      const proc = (0, import_child_process32.spawn)(
+      const proc = (0, import_child_process33.spawn)(
         "railway",
         ["shell", "--project", projectId, "--service", serviceId, "--command", cmd],
         { stdio: ["pipe", "pipe", "pipe"] }
@@ -42917,9 +43269,9 @@ function checkSessions() {
   }
 }
 function checkAgentBinaries() {
-  const os64 = createOsStrategy();
+  const os65 = createOsStrategy();
   return getEnabledAgents().map((meta) => {
-    const found = os64.findInPath(meta.binaryName);
+    const found = os65.findInPath(meta.binaryName);
     return {
       id: `agent-${meta.id}`,
       label: `Agent binary: ${meta.displayName} (${meta.binaryName})`,
@@ -42983,7 +43335,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.62.2" : "0.0.0-dev";
+  const cliVersion = true ? "2.63.1" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -43374,7 +43726,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.62.2" : "unknown";
+  const v = true ? "2.63.1" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 
@@ -43523,10 +43875,10 @@ var EXIT_CODE_NAMES = {
 };
 
 // src/index.ts
-var os63 = __toESM(require("os"));
+var os64 = __toESM(require("os"));
 if (!process.env.HOME) {
   try {
-    const home = os63.homedir();
+    const home = os64.homedir();
     if (home) process.env.HOME = home;
   } catch {
   }