codeam-cli 2.65.0 → 2.65.2

package/dist/index.js

@@ -3148,11 +3148,11 @@ function quiet(fn) {
     log.debug(TAG, "ignored sync error", err);
   }
 }
-function rmIfExistsQuiet(path91) {
+function rmIfExistsQuiet(path92) {
   try {
-    fs2.rmSync(path91, { force: true });
+    fs2.rmSync(path92, { force: true });
   } catch (err) {
-    log.debug(TAG, `rmIfExists failed for ${path91}`, err);
+    log.debug(TAG, `rmIfExists failed for ${path92}`, err);
   }
 }
 function killQuiet(target, signal = "SIGTERM") {
@@ -3321,9 +3321,9 @@ var _default = makeConfig();
 var { getConfig, ensurePluginId, addSession, removeSession, setActiveSession, getActiveSession, getActiveSessionForAgent, setDisable1mContext, setSessionAgent, setSquadAuto, getSquadAuto, clearAll, saveCliConfig, loadCliConfig } = _default;
 
 // src/commands/pair-auto.ts
-var fs63 = __toESM(require("fs"));
-var os53 = __toESM(require("os"));
-var path68 = __toESM(require("path"));
+var fs64 = __toESM(require("fs"));
+var os54 = __toESM(require("os"));
+var path69 = __toESM(require("path"));
 var import_crypto4 = require("crypto");
 
 // src/services/telemetry.service.ts
@@ -3359,8 +3359,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? (0, import_pat
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path91) {
-  return path91.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path92) {
+  return path92.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 
 // ../../node_modules/@posthog/core/dist/featureFlagUtils.mjs
@@ -5840,9 +5840,9 @@ async function addSourceContext(frames) {
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-function getContextLinesFromFile(path91, ranges, output) {
+function getContextLinesFromFile(path92, ranges, output) {
   return new Promise((resolve9) => {
-    const stream = (0, import_node_fs.createReadStream)(path91);
+    const stream = (0, import_node_fs.createReadStream)(path92);
     const lineReaded = (0, import_node_readline.createInterface)({
       input: stream
     });
@@ -5857,7 +5857,7 @@ function getContextLinesFromFile(path91, ranges, output) {
     let rangeStart = range[0];
     let rangeEnd = range[1];
     function onStreamError() {
-      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path91, 1);
+      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path92, 1);
       lineReaded.close();
       lineReaded.removeAllListeners();
       destroyStreamAndResolve();
@@ -5918,8 +5918,8 @@ function clearLineContext(frame) {
   delete frame.context_line;
   delete frame.post_context;
 }
-function shouldSkipContextLinesForFile(path91) {
-  return path91.startsWith("node:") || path91.endsWith(".min.js") || path91.endsWith(".min.cjs") || path91.endsWith(".min.mjs") || path91.startsWith("data:");
+function shouldSkipContextLinesForFile(path92) {
+  return path92.startsWith("node:") || path92.endsWith(".min.js") || path92.endsWith(".min.cjs") || path92.endsWith(".min.mjs") || path92.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame) {
   if (void 0 !== frame.lineno && frame.lineno > MAX_CONTEXTLINES_LINENO) return true;
@@ -8073,7 +8073,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.65.0" : "0.0.0-dev",
+    cliVersion: true ? "2.65.2" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -8254,7 +8254,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.65.0",
+  version: "2.65.2",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -9706,7 +9706,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.65.0" ? { ideVersion: "2.65.0" } : {}
+      ..."2.65.2" ? { ideVersion: "2.65.2" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -11098,11 +11098,11 @@ function closeAllTerminals() {
 }
 
 // src/commands/start/handlers.ts
-var fs62 = __toESM(require("fs"));
-var os52 = __toESM(require("os"));
-var path67 = __toESM(require("path"));
+var fs63 = __toESM(require("fs"));
+var os53 = __toESM(require("os"));
+var path68 = __toESM(require("path"));
 var import_crypto3 = require("crypto");
-var import_child_process25 = require("child_process");
+var import_child_process26 = require("child_process");
 
 // src/lib/payload.ts
 var import_zod = require("zod");
@@ -11932,8 +11932,8 @@ function findGitRoot2(startDir) {
 
 // src/commands/link.ts
 var import_node_crypto8 = require("crypto");
-var fs31 = __toESM(require("fs"));
-var path36 = __toESM(require("path"));
+var fs32 = __toESM(require("fs"));
+var path37 = __toESM(require("path"));
 var import_chokidar = __toESM(require("chokidar"));
 var import_picocolors2 = __toESM(require("picocolors"));
 
@@ -14610,10 +14610,10 @@ function buildForPlatform(platform3) {
 var import_node_crypto4 = require("crypto");
 
 // src/agents/claude/resolver.ts
-function buildClaudeLaunch(extraArgs = [], os66 = createOsStrategy()) {
-  const found = os66.findInPath("claude") ?? os66.findInPath("claude-code");
+function buildClaudeLaunch(extraArgs = [], os67 = createOsStrategy()) {
+  const found = os67.findInPath("claude") ?? os67.findInPath("claude-code");
   if (!found) return null;
-  return os66.buildLaunch(found, extraArgs);
+  return os67.buildLaunch(found, extraArgs);
 }
 
 // src/agents/claude/installer.ts
@@ -15203,8 +15203,8 @@ var ClaudeRuntimeStrategy = class {
   meta = getAgent("claude");
   mode = "interactive";
   os;
-  constructor(os66) {
-    this.os = os66;
+  constructor(os67) {
+    this.os = os67;
   }
   /**
    * Claude Code's react-ink TUI enables bracketed-paste mode at
@@ -15984,8 +15984,8 @@ function codexCredentialLocator() {
 function codexLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os66 = createOsStrategy();
-      return os66.findInPath("codex") !== null;
+      const os67 = createOsStrategy();
+      return os67.findInPath("codex") !== null;
     },
     launch() {
       return (0, import_node_child_process4.spawn)("codex", ["login"], { stdio: "inherit" });
@@ -16008,8 +16008,8 @@ var CodexRuntimeStrategy = class {
   meta = getAgent("codex");
   mode = "interactive";
   os;
-  constructor(os66) {
-    this.os = os66;
+  constructor(os67) {
+    this.os = os67;
   }
   async prepareLaunch() {
     let binary = this.os.findInPath("codex");
@@ -16118,12 +16118,12 @@ var CodexRuntimeStrategy = class {
     });
   }
 };
-function resolveNpm(os66) {
-  return os66.id === "win32" ? "npm.cmd" : "npm";
+function resolveNpm(os67) {
+  return os67.id === "win32" ? "npm.cmd" : "npm";
 }
-async function installCodexViaNpm(os66) {
+async function installCodexViaNpm(os67) {
   return new Promise((resolve9, reject) => {
-    const proc = (0, import_node_child_process5.spawn)(resolveNpm(os66), ["install", "-g", "@openai/codex"], {
+    const proc = (0, import_node_child_process5.spawn)(resolveNpm(os67), ["install", "-g", "@openai/codex"], {
       stdio: "inherit"
     });
     proc.on("close", (code) => {
@@ -16140,16 +16140,16 @@ async function installCodexViaNpm(os66) {
     });
   });
 }
-function augmentNpmGlobalBin(os66) {
+function augmentNpmGlobalBin(os67) {
   try {
-    const result = (0, import_node_child_process5.spawnSync)(resolveNpm(os66), ["prefix", "-g"], {
+    const result = (0, import_node_child_process5.spawnSync)(resolveNpm(os67), ["prefix", "-g"], {
       stdio: ["ignore", "pipe", "ignore"]
     });
     if (result.status !== 0) return;
     const prefix = result.stdout.toString().trim();
     if (!prefix) return;
-    const binDir = os66.id === "win32" ? prefix : path25.join(prefix, "bin");
-    os66.augmentPath([binDir]);
+    const binDir = os67.id === "win32" ? prefix : path25.join(prefix, "bin");
+    os67.augmentPath([binDir]);
   } catch {
   }
 }
@@ -16543,15 +16543,27 @@ var INSTALL_URL = "https://cli.coderabbit.ai/install.sh";
 var INSTALL_TIMEOUT_MS = 15e4;
 var PREREQ_INSTALL_TIMEOUT_MS = 12e4;
 var REQUIRED_TOOLS = ["unzip", "git"];
+function defaultRunVersionProbe(binary, env) {
+  const r = (0, import_node_child_process7.spawnSync)(binary, ["--version"], { stdio: "ignore", timeout: 15e3, env });
+  return !r.error && r.status === 0;
+}
+function probeRuns(binary, env, deps) {
+  const probe = deps.runVersionProbe ?? defaultRunVersionProbe;
+  try {
+    return probe(binary, env);
+  } catch {
+    return false;
+  }
+}
 function manualInstallHint(runner, tools) {
   const pkgs = tools.join(" ");
   const argv = osPackageInstallArgv(detectPackageManager(runner), [...tools]);
   return argv ? `\`sudo ${argv.join(" ")}\`` : `your package manager (e.g. \`${pkgs}\`)`;
 }
-function writeUnzipShim(os66, runner) {
+function writeUnzipShim(os67, runner) {
   const python = ["python3", "python"].find((p2) => runner.which(p2));
   if (!python) return null;
-  const dir = os66.scratchPath("codeam-cr-prereq");
+  const dir = os67.scratchPath("codeam-cr-prereq");
   const shim = path27.join(dir, "unzip");
   const script = `#!/bin/sh
 set -e
@@ -16573,9 +16585,9 @@ exec ${python} -m zipfile -e "$archive" "$dest"
   (0, import_node_fs5.chmodSync)(shim, 448);
   return dir;
 }
-async function ensureInstallPrerequisites(os66, deps = {}) {
+async function ensureInstallPrerequisites(os67, deps = {}) {
   const runner = deps.runner ?? defaultHeadroomRunner;
-  const missing = REQUIRED_TOOLS.filter((t2) => os66.findInPath(t2) === null);
+  const missing = REQUIRED_TOOLS.filter((t2) => os67.findInPath(t2) === null);
   if (missing.length === 0) return { ok: true, extraPath: [] };
   log.info(
     "coderabbit",
@@ -16594,10 +16606,10 @@ async function ensureInstallPrerequisites(os66, deps = {}) {
       );
     }
   }
-  const stillMissing = REQUIRED_TOOLS.filter((t2) => os66.findInPath(t2) === null);
+  const stillMissing = REQUIRED_TOOLS.filter((t2) => os67.findInPath(t2) === null);
   if (stillMissing.length === 0) return { ok: true, extraPath: [] };
   if (stillMissing.length === 1 && stillMissing[0] === "unzip") {
-    const shimDir = writeUnzipShim(os66, runner);
+    const shimDir = writeUnzipShim(os67, runner);
     if (shimDir) {
       log.info("coderabbit", "unzip is unavailable \u2014 using a scoped python zipfile shim");
       return { ok: true, extraPath: [shimDir] };
@@ -16660,15 +16672,15 @@ function summarizeInstallFailure(output) {
   }
   return lines.length > 0 ? lines[lines.length - 1] : null;
 }
-async function ensureCoderabbitInstalled(os66, deps = {}) {
-  if (os66.findInPath("coderabbit")) return { ok: true };
-  if (os66.id === "win32") {
+async function ensureCoderabbitInstalled(os67, deps = {}) {
+  if (os67.findInPath("coderabbit")) return { ok: true };
+  if (os67.id === "win32") {
     return {
       ok: false,
       error: "CodeRabbit on Windows requires WSL. Install the CLI inside your WSL distribution (curl -fsSL https://cli.coderabbit.ai/install.sh | sh), then try again."
     };
   }
-  const prereq = await ensureInstallPrerequisites(os66, deps);
+  const prereq = await ensureInstallPrerequisites(os67, deps);
   if (!prereq.ok) return { ok: false, error: prereq.error };
   const env = { ...process.env };
   if (prereq.extraPath.length > 0) {
@@ -16677,22 +16689,27 @@ async function ensureCoderabbitInstalled(os66, deps = {}) {
   log.info("coderabbit", "CodeRabbit CLI not found \u2014 installing via the official script");
   const run = deps.runInstallScript ?? defaultRunInstallScript;
   const { code, output } = await run(env);
-  if (code !== 0) {
-    const detail = summarizeInstallFailure(output);
+  os67.augmentPath([`${os67.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
+  const binary = os67.findInPath("coderabbit");
+  const detail = summarizeInstallFailure(output);
+  if (binary !== null) {
+    if (code === 0) return { ok: true };
+    if (probeRuns(binary, env, deps)) return { ok: true };
     return {
       ok: false,
-      error: detail ? `CodeRabbit CLI install failed: ${detail}` : "CodeRabbit CLI install failed \u2014 check this machine's network egress and try again."
+      error: detail ? `CodeRabbit CLI install failed and the installed binary does not run: ${detail}` : "CodeRabbit CLI install failed \u2014 the installed `coderabbit` binary does not run. Re-run the install and check this machine's network egress."
     };
   }
-  os66.augmentPath([`${os66.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
-  if (os66.findInPath("coderabbit") === null) {
-    const detail = summarizeInstallFailure(output);
+  if (code !== 0) {
     return {
       ok: false,
-      error: detail ? `CodeRabbit CLI install did not produce a binary: ${detail}` : "CodeRabbit CLI install reported success but no `coderabbit` binary was found on PATH."
+      error: detail ? `CodeRabbit CLI install failed: ${detail}` : "CodeRabbit CLI install failed \u2014 check this machine's network egress and try again."
     };
   }
-  return { ok: true };
+  return {
+    ok: false,
+    error: detail ? `CodeRabbit CLI install did not produce a binary: ${detail}` : "CodeRabbit CLI install reported success but no `coderabbit` binary was found on PATH."
+  };
 }
 
 // src/agents/coderabbit/link.ts
@@ -16727,10 +16744,10 @@ function coderabbitCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function coderabbitLoginLauncher(os66) {
+function coderabbitLoginLauncher(os67) {
   return {
     async ensureInstalled() {
-      const result = await ensureCoderabbitInstalled(os66);
+      const result = await ensureCoderabbitInstalled(os67);
       if (!result.ok && result.error) console.error(`
   \u2717 ${result.error}
 `);
@@ -16790,8 +16807,8 @@ function pickLine(obj) {
 function toHunk(raw, groupSeverity) {
   if (!raw || typeof raw !== "object") return null;
   const o = raw;
-  const path91 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
-  if (!path91) return null;
+  const path92 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
+  if (!path92) return null;
   const message = asString(
     pick(o, [
       "comment",
@@ -16808,7 +16825,7 @@ function toHunk(raw, groupSeverity) {
   const severity = normSeverity(pick(o, ["severity", "level", "priority", "impact"])) ?? normSeverity(groupSeverity);
   const locObj = pick(o, ["location"]) ?? o;
   return {
-    path: path91.trim(),
+    path: path92.trim(),
     line: pickLine(o) ?? pickLine(locObj),
     severity,
     message: (title && message ? `${title}: ${message}` : title || message).trim() || "(no message)"
@@ -16891,10 +16908,10 @@ function parsePlain(stdout) {
   for (const line of stdout.split(/\r?\n/)) {
     const m = line.match(HUNK_LINE_RE);
     if (!m) continue;
-    const [, path91, lineNo, sevToken, message] = m;
-    if (!path91 || !lineNo || !message) continue;
+    const [, path92, lineNo, sevToken, message] = m;
+    if (!path92 || !lineNo || !message) continue;
     hunks.push({
-      path: path91.trim(),
+      path: path92.trim(),
       line: Number(lineNo),
       severity: sevToken ? SEVERITY_MAP[sevToken.toLowerCase()] : void 0,
       message: message.trim().replace(/^[*-]\s+/, "")
@@ -16954,8 +16971,8 @@ var CoderabbitRuntimeStrategy = class {
   meta = getAgent("coderabbit");
   mode = "batch";
   os;
-  constructor(os66) {
-    this.os = os66;
+  constructor(os67) {
+    this.os = os67;
   }
   getDefaultArgs() {
     return ["review", "--agent"];
@@ -17226,10 +17243,10 @@ function cursorCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function cursorLoginLauncher(os66) {
+function cursorLoginLauncher(os67) {
   return {
     async ensureInstalled() {
-      if (os66.findInPath("cursor-agent")) return true;
+      if (os67.findInPath("cursor-agent")) return true;
       console.error(
         "\n  \u2717 cursor-agent binary not on PATH.\n    Install Cursor (https://cursor.com/) and ensure the CLI\n    plugin is enabled, then re-run `codeam link cursor`.\n"
       );
@@ -17293,8 +17310,8 @@ var CursorRuntimeStrategy = class {
   meta = getAgent("cursor");
   mode = "interactive";
   os;
-  constructor(os66) {
-    this.os = os66;
+  constructor(os67) {
+    this.os = os67;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("cursor-agent");
@@ -17510,10 +17527,10 @@ function aiderCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function aiderLoginLauncher(os66) {
+function aiderLoginLauncher(os67) {
   return {
     async ensureInstalled() {
-      if (os66.findInPath("aider")) return true;
+      if (os67.findInPath("aider")) return true;
       console.error(
         "\n  \u2717 aider binary not on PATH.\n    Install Aider:\n      pip install aider-chat\n    then re-run `codeam link aider`.\n"
       );
@@ -17523,7 +17540,7 @@ function aiderLoginLauncher(os66) {
       console.error(
         "\n  Aider has no interactive login flow.\n    Set ANTHROPIC_API_KEY or OPENAI_API_KEY in your shell,\n    or re-run `codeam link aider --api-key=<your-key>`.\n"
       );
-      return (0, import_node_child_process12.spawn)(os66.id === "win32" ? "cmd.exe" : "sh", os66.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
+      return (0, import_node_child_process12.spawn)(os67.id === "win32" ? "cmd.exe" : "sh", os67.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
         stdio: "ignore"
       });
     }
@@ -17581,6 +17598,198 @@ function detectAiderSelector(_lines) {
   return null;
 }
 
+// src/agents/acp/agent-binary.ts
+var import_fs = __toESM(require("fs"));
+var import_os4 = __toESM(require("os"));
+var import_path4 = __toESM(require("path"));
+var import_child_process13 = require("child_process");
+function currentPlatformKey() {
+  return `${process.platform}-${process.arch}`;
+}
+var SDK_PKG = "@anthropic-ai/claude-agent-sdk";
+function resolveSdkDirViaRequire(req = require) {
+  try {
+    return import_path4.default.dirname(req.resolve(`${SDK_PKG}/package.json`));
+  } catch {
+  }
+  try {
+    let dir = import_path4.default.dirname(req.resolve(SDK_PKG));
+    for (let i = 0; i < 5; i++) {
+      if (import_path4.default.basename(dir) === "claude-agent-sdk") return dir;
+      const parent = import_path4.default.dirname(dir);
+      if (parent === dir) break;
+      dir = parent;
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+function defaultSdkDir() {
+  return resolveSdkDirViaRequire();
+}
+function resolveClaudeNativeBinary(deps = {}) {
+  const existsSync29 = deps.existsSync ?? import_fs.default.existsSync;
+  const platformKey = deps.platformKey ?? currentPlatformKey();
+  const sdkDir = deps.sdkDir !== void 0 ? deps.sdkDir : defaultSdkDir();
+  if (!sdkDir) return null;
+  const scopeDir = import_path4.default.dirname(sdkDir);
+  const binName = platformKey.startsWith("win32-") ? "claude.exe" : "claude";
+  const candidate = import_path4.default.join(scopeDir, `claude-agent-sdk-${platformKey}`, binName);
+  return existsSync29(candidate) ? candidate : null;
+}
+var realSleep = (ms) => new Promise((resolve9) => setTimeout(resolve9, ms));
+async function waitForClaudeNativeBinary(opts = {}) {
+  const timeoutMs = opts.timeoutMs ?? 18e4;
+  const pollMs = opts.pollMs ?? 500;
+  const now = opts.now ?? Date.now;
+  const sleep5 = opts.sleep ?? realSleep;
+  const deps = {
+    sdkDir: opts.sdkDir,
+    platformKey: opts.platformKey,
+    existsSync: opts.existsSync
+  };
+  const deadline = now() + timeoutMs;
+  let found = resolveClaudeNativeBinary(deps);
+  if (found) return found;
+  while (now() < deadline) {
+    await sleep5(pollMs);
+    found = resolveClaudeNativeBinary(deps);
+    if (found) return found;
+  }
+  return resolveClaudeNativeBinary(deps);
+}
+function isCommandOnPath(cmd, probe = defaultWhich) {
+  return probe(cmd);
+}
+function defaultWhich(cmd) {
+  const finder = process.platform === "win32" ? "where" : "which";
+  try {
+    const res = (0, import_child_process13.spawnSync)(finder, [cmd], { stdio: "ignore" });
+    return res.status === 0;
+  } catch {
+    return false;
+  }
+}
+async function waitForCommandOnPath(cmd, opts = {}) {
+  const timeoutMs = opts.timeoutMs ?? 18e4;
+  const pollMs = opts.pollMs ?? 500;
+  const now = opts.now ?? Date.now;
+  const sleep5 = opts.sleep ?? realSleep;
+  const probe = opts.probe;
+  const check = () => isCommandOnPath(cmd, probe);
+  const deadline = now() + timeoutMs;
+  if (check()) return true;
+  while (now() < deadline) {
+    await sleep5(pollMs);
+    if (check()) return true;
+  }
+  return check();
+}
+function augmentUserLocalBinPaths() {
+  const home = import_os4.default.homedir();
+  const candidates = [
+    // XDG-style per-user bin — npm's default global-prefix bin dir on most
+    // Linux setups (`npm config set prefix ~/.local` or an nvm-less
+    // per-user npm), and where curl-based agent installers commonly land.
+    import_path4.default.join(home, ".local", "bin"),
+    // Common explicit npm global-prefix conventions seen in the wild
+    // (`npm config set prefix ~/.npm-global`, and Debian/Fedora's
+    // `~/.local/share/npm` layout for `npm config set prefix
+    // ~/.local/share/npm`).
+    import_path4.default.join(home, ".npm-global", "bin"),
+    import_path4.default.join(home, ".local", "share", "npm", "bin")
+  ];
+  const parts = (process.env.PATH ?? "").split(import_path4.default.delimiter).filter((p2) => p2.length > 0);
+  const existing = new Set(parts);
+  const additions = candidates.filter((dir) => !existing.has(dir));
+  if (additions.length === 0) return;
+  process.env.PATH = [...additions, ...parts].join(import_path4.default.delimiter);
+}
+function resolveCursorAgentBinary(deps = {}) {
+  const existsSync29 = deps.existsSync ?? import_fs.default.existsSync;
+  const platform3 = deps.platform ?? process.platform;
+  const env = deps.env ?? process.env;
+  if (platform3 === "win32") {
+    const localAppData = env.LOCALAPPDATA;
+    if (!localAppData) return null;
+    const exe = import_path4.default.win32.join(localAppData, "cursor-agent", "cursor-agent.exe");
+    return existsSync29(exe) ? exe : null;
+  }
+  const home = deps.homedir ?? import_os4.default.homedir();
+  const unix = import_path4.default.posix.join(home, ".local", "bin", "cursor-agent");
+  return existsSync29(unix) ? unix : null;
+}
+async function waitForCursorAgent(opts = {}) {
+  const timeoutMs = opts.timeoutMs ?? 18e4;
+  const pollMs = opts.pollMs ?? 500;
+  const now = opts.now ?? Date.now;
+  const sleep5 = opts.sleep ?? realSleep;
+  const check = () => resolveCursorAgentBinary(opts) !== null || isCommandOnPath("cursor-agent", opts.probe);
+  const deadline = now() + timeoutMs;
+  if (check()) return true;
+  while (now() < deadline) {
+    await sleep5(pollMs);
+    if (check()) return true;
+  }
+  return check();
+}
+var ADAPTER_MODULE_LOAD_ERROR_RE = /ERR_MODULE_NOT_FOUND|Cannot find module|ERR_REQUIRE_ESM|ERR_UNKNOWN_BUILTIN_MODULE|ERR_UNSUPPORTED_DIR_IMPORT|ERR_PACKAGE_PATH_NOT_EXPORTED|ERR_INVALID_PACKAGE_CONFIG|ERR_INVALID_PACKAGE_TARGET|ERR_INVALID_MODULE_SPECIFIER|node:internal\/modules\/|Directory import|SyntaxError|Unexpected (token|end|identifier)|missing \) after argument list/i;
+var PERMANENT_ADAPTER_STARTUP_RE = /IneligibleTierError|UNSUPPORTED_CLIENT|no longer supported for Gemini Code Assist|not eligible for Gemini Code Assist|Error authenticating|ProjectIdRequiredError/i;
+function probeAdapterModuleGraph(command2, args2, opts = {}) {
+  const livenessMs = opts.livenessMs ?? 400;
+  const spawnFn = opts.spawnFn ?? import_child_process13.spawn;
+  return new Promise((resolve9) => {
+    let settled = false;
+    let stderr = "";
+    let timer;
+    let child;
+    const finish = (r) => {
+      if (settled) return;
+      settled = true;
+      if (timer) clearTimeout(timer);
+      try {
+        child?.kill("SIGKILL");
+      } catch {
+      }
+      resolve9(r);
+    };
+    try {
+      child = spawnFn(command2, [...args2], { stdio: ["pipe", "ignore", "pipe"] });
+    } catch {
+      resolve9("ok");
+      return;
+    }
+    child.stderr?.on("data", (d3) => {
+      stderr += d3.toString();
+      if (stderr.length > 8192) stderr = stderr.slice(-8192);
+    });
+    child.on("error", () => finish("ok"));
+    child.on("exit", (code) => {
+      if (code !== 0 && code !== null && !PERMANENT_ADAPTER_STARTUP_RE.test(stderr)) {
+        finish("transient");
+      } else {
+        finish("ok");
+      }
+    });
+    timer = setTimeout(() => finish("ok"), livenessMs);
+  });
+}
+async function waitForAdapterModuleGraph(command2, args2, opts = {}) {
+  const timeoutMs = opts.timeoutMs ?? 18e4;
+  const pollMs = opts.pollMs ?? 500;
+  const now = opts.now ?? Date.now;
+  const sleep5 = opts.sleep ?? realSleep;
+  const probeOpts = { livenessMs: opts.livenessMs, spawnFn: opts.spawnFn };
+  const deadline = now() + timeoutMs;
+  if (await probeAdapterModuleGraph(command2, args2, probeOpts) === "ok") return true;
+  while (now() < deadline) {
+    await sleep5(pollMs);
+    if (await probeAdapterModuleGraph(command2, args2, probeOpts) === "ok") return true;
+  }
+  return false;
+}
+
 // src/agents/aider/runtime.ts
 var AIDER_CONTEXT_WINDOW = 2e5;
 var AIDER_MODELS = [
@@ -17595,10 +17804,11 @@ var AiderRuntimeStrategy = class {
   meta = getAgent("aider");
   mode = "interactive";
   os;
-  constructor(os66) {
-    this.os = os66;
+  constructor(os67) {
+    this.os = os67;
   }
   async prepareLaunch() {
+    augmentUserLocalBinPaths();
     const binary = this.os.findInPath("aider");
     if (!binary) {
       throw new Error(
@@ -17670,19 +17880,19 @@ var import_node_crypto6 = require("crypto");
 var import_node_child_process13 = require("child_process");
 
 // src/agents/gemini/local-token.ts
-var fs28 = __toESM(require("fs"));
-var os25 = __toESM(require("os"));
-var path33 = __toESM(require("path"));
+var fs29 = __toESM(require("fs"));
+var os26 = __toESM(require("os"));
+var path34 = __toESM(require("path"));
 function geminiCredentialsPath() {
-  return path33.join(os25.homedir(), ".gemini", "oauth_creds.json");
+  return path34.join(os26.homedir(), ".gemini", "oauth_creds.json");
 }
 function geminiCredentialsPaths() {
   return [geminiCredentialsPath()];
 }
 async function extractLocalGeminiToken() {
   const file = geminiCredentialsPath();
-  if (!fs28.existsSync(file)) return null;
-  const credential = fs28.readFileSync(file, "utf8").trim();
+  if (!fs29.existsSync(file)) return null;
+  const credential = fs29.readFileSync(file, "utf8").trim();
   if (credential.length === 0) return null;
   return { method: "oauth", credential, source: "flat-file" };
 }
@@ -17728,8 +17938,8 @@ function geminiCredentialLocator() {
 function geminiLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os66 = createOsStrategy();
-      return os66.findInPath("gemini") !== null;
+      const os67 = createOsStrategy();
+      return os67.findInPath("gemini") !== null;
     },
     launch() {
       return (0, import_node_child_process13.spawn)("gemini", ["auth", "login"], { stdio: "inherit" });
@@ -17738,20 +17948,20 @@ function geminiLoginLauncher() {
 }
 
 // src/agents/gemini/history.ts
-var fs29 = __toESM(require("fs"));
-var os26 = __toESM(require("os"));
-var path34 = __toESM(require("path"));
-var GEMINI_ROOT = path34.join(os26.homedir(), ".gemini");
+var fs30 = __toESM(require("fs"));
+var os27 = __toESM(require("os"));
+var path35 = __toESM(require("path"));
+var GEMINI_ROOT = path35.join(os27.homedir(), ".gemini");
 function projectNameForCwd(cwd, root) {
   try {
     const parsed = JSON.parse(
-      fs29.readFileSync(path34.join(root, "projects.json"), "utf8")
+      fs30.readFileSync(path35.join(root, "projects.json"), "utf8")
     );
     const map = parsed.projects;
     if (map && typeof map === "object") {
       if (typeof map[cwd] === "string") return map[cwd];
       try {
-        const rp = fs29.realpathSync(cwd);
+        const rp = fs30.realpathSync(cwd);
         if (typeof map[rp] === "string") return map[rp];
       } catch {
       }
@@ -17760,7 +17970,7 @@ function projectNameForCwd(cwd, root) {
   } catch (err) {
     log.debug("gemini", `projects.json unreadable at ${root} \u2014 using basename fallback`, err);
   }
-  return path34.basename(cwd) || null;
+  return path35.basename(cwd) || null;
 }
 function resolveHistoryDir5(cwd, root = GEMINI_ROOT) {
   const name = projectNameForCwd(cwd, root);
@@ -17768,8 +17978,8 @@ function resolveHistoryDir5(cwd, root = GEMINI_ROOT) {
     log.warn("gemini", `resolveHistoryDir \u2014 could not derive a project name for cwd=${cwd}`);
     return null;
   }
-  const dir = path34.join(root, "tmp", name, "chats");
-  if (!fs29.existsSync(dir)) {
+  const dir = path35.join(root, "tmp", name, "chats");
+  if (!fs30.existsSync(dir)) {
     log.debug("gemini", `resolveHistoryDir \u2014 chats dir not present yet: ${dir} (project=${name})`);
     return null;
   }
@@ -17781,7 +17991,7 @@ function resolveHistoryFile4(cwd, sessionId, root = GEMINI_ROOT) {
   if (!dir) return null;
   let files;
   try {
-    files = fs29.readdirSync(dir).filter((f) => f.startsWith("session-") && f.endsWith(".jsonl"));
+    files = fs30.readdirSync(dir).filter((f) => f.startsWith("session-") && f.endsWith(".jsonl"));
   } catch (err) {
     log.warn("gemini", `resolveHistoryFile \u2014 cannot read chats dir ${dir} (id8=${id8})`, err);
     return null;
@@ -17793,12 +18003,12 @@ function resolveHistoryFile4(cwd, sessionId, root = GEMINI_ROOT) {
   const byName = files.find((f) => id8.length > 0 && f.includes(id8));
   if (byName) {
     log.info("gemini", `resolveHistoryFile \u2014 matched by filename id8=${id8}: ${byName}`);
-    return path34.join(dir, byName);
+    return path35.join(dir, byName);
   }
   for (const f of files) {
-    const full = path34.join(dir, f);
+    const full = path35.join(dir, f);
     try {
-      const firstLine = fs29.readFileSync(full, "utf8").split("\n", 1)[0] ?? "";
+      const firstLine = fs30.readFileSync(full, "utf8").split("\n", 1)[0] ?? "";
       const hdr = JSON.parse(firstLine);
       if (hdr.sessionId === sessionId) {
         log.info("gemini", `resolveHistoryFile \u2014 matched by header sessionId: ${f}`);
@@ -17811,7 +18021,7 @@ function resolveHistoryFile4(cwd, sessionId, root = GEMINI_ROOT) {
   let newest = null;
   for (const f of files) {
     try {
-      const mtime = fs29.statSync(path34.join(dir, f)).mtimeMs;
+      const mtime = fs30.statSync(path35.join(dir, f)).mtimeMs;
       if (!newest || mtime > newest.mtime) newest = { file: f, mtime };
     } catch {
     }
@@ -17820,7 +18030,7 @@ function resolveHistoryFile4(cwd, sessionId, root = GEMINI_ROOT) {
     "gemini",
     `resolveHistoryFile \u2014 no id8=${id8} match among ${files.length} file(s) in ${dir}; falling back to newest=${newest?.file ?? "none"}`
   );
-  return newest ? path34.join(dir, newest.file) : null;
+  return newest ? path35.join(dir, newest.file) : null;
 }
 function extractGeminiText(content) {
   const fromParts = (arr) => Array.isArray(arr) ? arr.map((p2) => {
@@ -17848,7 +18058,7 @@ function isSyntheticGeminiTurn(text) {
 function parseHistoryFile5(filePath) {
   let raw;
   try {
-    raw = fs29.readFileSync(filePath, "utf8");
+    raw = fs30.readFileSync(filePath, "utf8");
   } catch (err) {
     log.warn("gemini", `parseHistoryFile \u2014 cannot read ${filePath}`, err);
     return [];
@@ -17889,7 +18099,7 @@ function parseHistoryFile5(filePath) {
   }
   log.trace(
     "gemini",
-    `parseHistoryFile \u2014 ${out2.length} turn(s) from ${path34.basename(filePath)}` + (malformed > 0 ? ` (${malformed} malformed line(s) skipped)` : "")
+    `parseHistoryFile \u2014 ${out2.length} turn(s) from ${path35.basename(filePath)}` + (malformed > 0 ? ` (${malformed} malformed line(s) skipped)` : "")
   );
   return out2;
 }
@@ -17919,8 +18129,8 @@ var GeminiRuntimeStrategy = class {
   meta = getAgent("gemini");
   mode = "interactive";
   os;
-  constructor(os66) {
-    this.os = os66;
+  constructor(os67) {
+    this.os = os67;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("gemini");
@@ -18033,42 +18243,42 @@ var import_node_os3 = require("os");
 var import_node_path4 = require("path");
 
 // src/agents/kimi/history.ts
-var fs30 = __toESM(require("fs"));
-var os27 = __toESM(require("os"));
-var path35 = __toESM(require("path"));
+var fs31 = __toESM(require("fs"));
+var os28 = __toESM(require("os"));
+var path36 = __toESM(require("path"));
 var import_node_crypto7 = require("crypto");
 function kimiHome() {
-  return process.env.KIMI_CODE_HOME || path35.join(os27.homedir(), ".kimi-code");
+  return process.env.KIMI_CODE_HOME || path36.join(os28.homedir(), ".kimi-code");
 }
 function workDirKey(cwd) {
   const hash = (0, import_node_crypto7.createHash)("sha256").update(cwd).digest("hex").slice(0, 12);
-  return `wd_${path35.basename(cwd)}_${hash}`;
+  return `wd_${path36.basename(cwd)}_${hash}`;
 }
 function resolveHistoryDir6(cwd) {
-  const dir = path35.join(kimiHome(), "sessions", workDirKey(cwd));
-  if (!fs30.existsSync(dir)) {
+  const dir = path36.join(kimiHome(), "sessions", workDirKey(cwd));
+  if (!fs31.existsSync(dir)) {
     log.debug("kimi", `resolveHistoryDir \u2014 session bucket not present yet: ${dir}`);
     return null;
   }
   return dir;
 }
-var WIRE_REL = path35.join("agents", "main", "wire.jsonl");
+var WIRE_REL = path36.join("agents", "main", "wire.jsonl");
 function resolveHistoryFile5(cwd, sessionId) {
   const fromIndex = sessionDirFromIndex(sessionId);
   if (fromIndex) {
-    const p2 = path35.join(fromIndex, WIRE_REL);
-    if (fs30.existsSync(p2)) return p2;
+    const p2 = path36.join(fromIndex, WIRE_REL);
+    if (fs31.existsSync(p2)) return p2;
   }
-  const bucket2 = path35.join(kimiHome(), "sessions", workDirKey(cwd));
-  const computed = path35.join(bucket2, sessionId, WIRE_REL);
-  if (fs30.existsSync(computed)) return computed;
+  const bucket2 = path36.join(kimiHome(), "sessions", workDirKey(cwd));
+  const computed = path36.join(bucket2, sessionId, WIRE_REL);
+  if (fs31.existsSync(computed)) return computed;
   const scanned = scanBucketsForSession(sessionId);
   if (scanned) return scanned;
   return null;
 }
 function sessionDirFromIndex(sessionId) {
   try {
-    const raw = fs30.readFileSync(path35.join(kimiHome(), "session_index.jsonl"), "utf8");
+    const raw = fs31.readFileSync(path36.join(kimiHome(), "session_index.jsonl"), "utf8");
     for (const line of raw.split("\n")) {
       if (!line.includes(sessionId)) continue;
       try {
@@ -18084,22 +18294,22 @@ function sessionDirFromIndex(sessionId) {
   return null;
 }
 function scanBucketsForSession(sessionId) {
-  const sessionsRoot = path35.join(kimiHome(), "sessions");
+  const sessionsRoot = path36.join(kimiHome(), "sessions");
   let buckets;
   try {
-    buckets = fs30.readdirSync(sessionsRoot, { withFileTypes: true });
+    buckets = fs31.readdirSync(sessionsRoot, { withFileTypes: true });
   } catch {
     return null;
   }
   for (const b of buckets) {
     if (!b.isDirectory()) continue;
-    const candidate = path35.join(sessionsRoot, b.name, sessionId, WIRE_REL);
-    if (fs30.existsSync(candidate)) return candidate;
+    const candidate = path36.join(sessionsRoot, b.name, sessionId, WIRE_REL);
+    if (fs31.existsSync(candidate)) return candidate;
   }
   return null;
 }
 async function discoverSessionId2(cwd, opts) {
-  const bucket2 = path35.join(kimiHome(), "sessions", workDirKey(cwd));
+  const bucket2 = path36.join(kimiHome(), "sessions", workDirKey(cwd));
   const floor = opts.sinceMs - 2e3;
   const deadline = Date.now() + (opts.timeoutMs ?? 15e3);
   for (; ; ) {
@@ -18112,7 +18322,7 @@ async function discoverSessionId2(cwd, opts) {
 function newestSessionSince(bucket2, floorMs) {
   let entries;
   try {
-    entries = fs30.readdirSync(bucket2, { withFileTypes: true });
+    entries = fs31.readdirSync(bucket2, { withFileTypes: true });
   } catch {
     return null;
   }
@@ -18122,7 +18332,7 @@ function newestSessionSince(bucket2, floorMs) {
     if (!e.isDirectory() || !e.name.startsWith("session_")) continue;
     let mtime;
     try {
-      mtime = fs30.statSync(path35.join(bucket2, e.name)).mtimeMs;
+      mtime = fs31.statSync(path36.join(bucket2, e.name)).mtimeMs;
     } catch {
       continue;
     }
@@ -18143,7 +18353,7 @@ function joinTextParts(parts) {
 function parseHistoryFile6(filePath) {
   let raw;
   try {
-    raw = fs30.readFileSync(filePath, "utf8");
+    raw = fs31.readFileSync(filePath, "utf8");
   } catch {
     return [];
   }
@@ -18211,8 +18421,8 @@ var KimiRuntimeStrategy = class {
   meta = getAgent("kimi");
   mode = "interactive";
   os;
-  constructor(os66) {
-    this.os = os66;
+  constructor(os67) {
+    this.os = os67;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("kimi");
@@ -18354,8 +18564,8 @@ var OpencodeRuntimeStrategy = class {
   meta = getAgent("opencode");
   mode = "interactive";
   os;
-  constructor(os66) {
-    this.os = os66;
+  constructor(os67) {
+    this.os = os67;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("opencode");
@@ -18439,20 +18649,20 @@ var OpencodeRuntimeStrategy = class {
 
 // src/agents/registry.ts
 var runtimeBuilders = {
-  claude: (os66) => new ClaudeRuntimeStrategy(os66),
-  codex: (os66) => new CodexRuntimeStrategy(os66),
-  coderabbit: (os66) => new CoderabbitRuntimeStrategy(os66),
-  cursor: (os66) => new CursorRuntimeStrategy(os66),
-  aider: (os66) => new AiderRuntimeStrategy(os66),
-  gemini: (os66) => new GeminiRuntimeStrategy(os66),
-  kimi: (os66) => new KimiRuntimeStrategy(os66),
-  opencode: (os66) => new OpencodeRuntimeStrategy(os66)
+  claude: (os67) => new ClaudeRuntimeStrategy(os67),
+  codex: (os67) => new CodexRuntimeStrategy(os67),
+  coderabbit: (os67) => new CoderabbitRuntimeStrategy(os67),
+  cursor: (os67) => new CursorRuntimeStrategy(os67),
+  aider: (os67) => new AiderRuntimeStrategy(os67),
+  gemini: (os67) => new GeminiRuntimeStrategy(os67),
+  kimi: (os67) => new KimiRuntimeStrategy(os67),
+  opencode: (os67) => new OpencodeRuntimeStrategy(os67)
 };
 var deployBuilders = {
   claude: () => new ClaudeDeployStrategy(),
   codex: () => new CodexDeployStrategy()
 };
-function createAgentStrategy(agent, os66 = createOsStrategy()) {
+function createAgentStrategy(agent, os67 = createOsStrategy()) {
   if (!AGENT_REGISTRY[agent]?.enabled) {
     throw new Error(
       `Agent "${agent}" is not supported in this codeam-cli version. Upgrade with 'npm i -g codeam-cli@latest'.`
@@ -18462,10 +18672,10 @@ function createAgentStrategy(agent, os66 = createOsStrategy()) {
   if (!build) {
     throw new Error(`No runtime strategy registered for agent "${agent}"`);
   }
-  return build(os66);
+  return build(os67);
 }
-function createInteractiveAgentStrategy(agent, os66 = createOsStrategy()) {
-  const s = createAgentStrategy(agent, os66);
+function createInteractiveAgentStrategy(agent, os67 = createOsStrategy()) {
+  const s = createAgentStrategy(agent, os67);
   if (s.mode !== "interactive") {
     throw new Error(
       `Agent "${agent}" is a batch agent; use createAgentStrategy + .runOneShot for one-shot reviews.`
@@ -18521,7 +18731,7 @@ function parseLinkArgs(args2) {
   if (apiKeyFileArg) {
     const filePath = apiKeyFileArg.slice("--api-key-file=".length);
     try {
-      apiKey = fs31.readFileSync(path36.resolve(filePath), "utf8").trim();
+      apiKey = fs32.readFileSync(path37.resolve(filePath), "utf8").trim();
     } catch (err) {
       throw new Error(`Could not read --api-key-file ${filePath}: ${err.message}`);
     }
@@ -18648,7 +18858,7 @@ async function link(args2 = []) {
     return;
   }
   if (parsed.tokenFile) {
-    const credential = fs31.readFileSync(path36.resolve(parsed.tokenFile), "utf8").trim();
+    const credential = fs32.readFileSync(path37.resolve(parsed.tokenFile), "utf8").trim();
     if (!credential) {
       showError(`--token-file ${parsed.tokenFile} is empty.`);
       process.exit(1);
@@ -18867,13 +19077,13 @@ async function linkDryRunPreflight(ctx) {
 // src/agents/coderabbit/configure.ts
 var import_node_child_process17 = require("child_process");
 var import_node_fs6 = require("fs");
-var path38 = __toESM(require("path"));
+var path39 = __toESM(require("path"));
 
 // src/agents/coderabbit/oauth.ts
 var import_node_child_process16 = require("child_process");
-var fs32 = __toESM(require("fs"));
-var os28 = __toESM(require("os"));
-var path37 = __toESM(require("path"));
+var fs33 = __toESM(require("fs"));
+var os29 = __toESM(require("os"));
+var path38 = __toESM(require("path"));
 function parseCoderabbitAuthEvent(line) {
   const l = line.replace(/\x1b\[[0-9;?]*[A-Za-z]/g, "").trim();
   if (!l || l[0] !== "{") return null;
@@ -18922,8 +19132,8 @@ function resolvePython() {
 function spawnCoderabbitLoginProc(cmd, args2) {
   const python = resolvePython();
   if (python) {
-    const helper = path37.join(os28.tmpdir(), "codeam-cr-pty.py");
-    fs32.writeFileSync(helper, PYTHON_PTY_HELPER, { mode: 420 });
+    const helper = path38.join(os29.tmpdir(), "codeam-cr-pty.py");
+    fs33.writeFileSync(helper, PYTHON_PTY_HELPER, { mode: 420 });
     return (0, import_node_child_process16.spawn)(python, [helper, cmd, ...args2], {
       stdio: ["pipe", "pipe", "pipe"],
       env: { ...process.env, TERM: "xterm-256color", COLUMNS: "220", LINES: "50" },
@@ -19034,7 +19244,7 @@ function runCoderabbitOAuthLogin(deps) {
   });
 }
 function coderabbitDir(home) {
-  return path37.join(home ?? os28.homedir(), ".coderabbit");
+  return path38.join(home ?? os29.homedir(), ".coderabbit");
 }
 var NON_CREDENTIAL = /* @__PURE__ */ new Set(["doctor.json", "machine-id"]);
 function snapshotCredentialDir(home) {
@@ -19042,14 +19252,14 @@ function snapshotCredentialDir(home) {
   const snap = {};
   let entries;
   try {
-    entries = fs32.readdirSync(dir, { withFileTypes: true });
+    entries = fs33.readdirSync(dir, { withFileTypes: true });
   } catch {
     return snap;
   }
   for (const e of entries) {
     if (!e.isFile() || NON_CREDENTIAL.has(e.name)) continue;
     try {
-      const st3 = fs32.statSync(path37.join(dir, e.name));
+      const st3 = fs33.statSync(path38.join(dir, e.name));
       snap[e.name] = `${st3.mtimeMs}:${st3.size}`;
     } catch {
     }
@@ -19067,7 +19277,7 @@ function diffCapturedCredential(before, home) {
   }
   if (!best) return null;
   try {
-    return { file: best.file, contents: fs32.readFileSync(path37.join(dir, best.file), "utf8") };
+    return { file: best.file, contents: fs33.readFileSync(path38.join(dir, best.file), "utf8") };
   } catch {
     return null;
   }
@@ -19143,8 +19353,8 @@ function collectChangedFiles(cwd) {
   }
   return [...byPath.values()];
 }
-function restoreCoderabbitOauthBlob(os66, value) {
-  const dir = path38.join(os66.homeDir(), ".coderabbit");
+function restoreCoderabbitOauthBlob(os67, value) {
+  const dir = path39.join(os67.homeDir(), ".coderabbit");
   (0, import_node_fs6.mkdirSync)(dir, { recursive: true });
   let file = "auth.json";
   let contents = value.trim();
@@ -19152,38 +19362,38 @@ function restoreCoderabbitOauthBlob(os66, value) {
     try {
       const parsed = JSON.parse(contents);
       if (typeof parsed.file === "string" && typeof parsed.contents === "string") {
-        file = path38.basename(parsed.file);
+        file = path39.basename(parsed.file);
         contents = parsed.contents;
       }
     } catch {
     }
   }
-  (0, import_node_fs6.writeFileSync)(path38.join(dir, file), contents, { mode: 384 });
+  (0, import_node_fs6.writeFileSync)(path39.join(dir, file), contents, { mode: 384 });
 }
 function installFailureMessage(result) {
   return result.error ?? "CodeRabbit CLI could not be installed";
 }
 async function configureCoderabbit(input, deps = {}) {
-  const os66 = deps.os ?? createOsStrategy();
+  const os67 = deps.os ?? createOsStrategy();
   const ensureInstalled = deps.ensureInstalled ?? ensureCoderabbitInstalled;
   const isLoggedIn = deps.isLoggedIn ?? defaultIsLoggedIn;
   const runOAuth = deps.runOAuthLogin ?? runCoderabbitOAuthLogin;
   const snapshot = deps.snapshotDir ?? (() => snapshotCredentialDir());
   const capture2 = deps.captureCredential ?? ((b) => diffCapturedCredential(b));
   const loginWithApiKey = deps.loginWithApiKey ?? defaultLoginWithApiKey;
-  const home = os66.homeDir();
-  os66.augmentPath(
-    os66.id === "win32" ? [
-      path38.join(home, ".local", "bin"),
-      path38.join(process.env.APPDATA ?? path38.join(home, "AppData", "Roaming"), "npm"),
-      path38.join(home, "scoop", "shims")
-    ] : [path38.join(home, ".local", "bin"), "/opt/homebrew/bin", "/usr/local/bin"]
+  const home = os67.homeDir();
+  os67.augmentPath(
+    os67.id === "win32" ? [
+      path39.join(home, ".local", "bin"),
+      path39.join(process.env.APPDATA ?? path39.join(home, "AppData", "Roaming"), "npm"),
+      path39.join(home, "scoop", "shims")
+    ] : [path39.join(home, ".local", "bin"), "/opt/homebrew/bin", "/usr/local/bin"]
   );
-  const installed2 = os66.findInPath("coderabbit") !== null;
+  const installed2 = os67.findInPath("coderabbit") !== null;
   const base = () => ({
     action: input.action,
     supported: true,
-    installed: os66.findInPath("coderabbit") !== null,
+    installed: os67.findInPath("coderabbit") !== null,
     loggedIn: false
   });
   if (input.action === "status") {
@@ -19197,7 +19407,7 @@ async function configureCoderabbit(input, deps = {}) {
     const key = (input.apiKey ?? "").trim();
     if (!key) return { ...res2, error: "No API key provided" };
     if (!res2.installed) {
-      const inst = await ensureInstalled(os66);
+      const inst = await ensureInstalled(os67);
       res2.installed = inst.ok;
       if (!inst.ok) return { ...res2, error: installFailureMessage(inst) };
     }
@@ -19221,7 +19431,7 @@ async function configureCoderabbit(input, deps = {}) {
     }
     if (!res2.installed) {
       deps.onEvent?.({ kind: "installing" });
-      const inst = await ensureInstalled(os66);
+      const inst = await ensureInstalled(os67);
       res2.installed = inst.ok;
       if (!inst.ok) return { ...res2, error: installFailureMessage(inst) };
     }
@@ -19238,7 +19448,7 @@ async function configureCoderabbit(input, deps = {}) {
       return { ...res2, loggedIn: true, linked: true };
     }
     try {
-      restoreCoderabbitOauthBlob(os66, cred.credential);
+      restoreCoderabbitOauthBlob(os67, cred.credential);
     } catch (err) {
       return {
         ...res2,
@@ -19262,7 +19472,7 @@ async function configureCoderabbit(input, deps = {}) {
     const res2 = base();
     if (!installed2) {
       deps.onEvent?.({ kind: "installing" });
-      const inst = await ensureInstalled(os66);
+      const inst = await ensureInstalled(os67);
       res2.installed = inst.ok;
       if (!inst.ok) return { ...res2, error: installFailureMessage(inst) };
     }
@@ -19302,7 +19512,7 @@ async function configureCoderabbit(input, deps = {}) {
   }
   const res = base();
   if (!res.installed) {
-    const inst = await ensureInstalled(os66);
+    const inst = await ensureInstalled(os67);
     res.installed = inst.ok;
     if (!inst.ok) return { ...res, error: installFailureMessage(inst) };
   }
@@ -19486,9 +19696,9 @@ function defaultRunGh(args2) {
 
 // src/commands/host-agent.ts
 var import_node_child_process25 = require("child_process");
-var os41 = __toESM(require("os"));
-var fs45 = __toESM(require("fs"));
-var path49 = __toESM(require("path"));
+var os42 = __toESM(require("os"));
+var fs46 = __toESM(require("fs"));
+var path50 = __toESM(require("path"));
 
 // src/integrations/manifest.ts
 var import_node_fs8 = __toESM(require("fs"));
@@ -19611,14 +19821,14 @@ function persistOrClearSkillsFromPayload(skills) {
 }
 
 // src/commands/host/agent-install.ts
-var import_child_process13 = require("child_process");
-var os32 = __toESM(require("os"));
+var import_child_process14 = require("child_process");
+var os33 = __toESM(require("os"));
 function runAgentInstallScript(script, opts = {}) {
   const timeoutMs = opts.timeoutMs ?? 18e4;
   const scope = opts.logScope ?? "agent-install";
   return new Promise((resolve9) => {
-    const home = process.env.HOME || os32.homedir();
-    const child = (0, import_child_process13.spawn)("sh", ["-c", script], {
+    const home = process.env.HOME || os33.homedir();
+    const child = (0, import_child_process14.spawn)("sh", ["-c", script], {
       env: { ...process.env, HOME: home },
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -19683,14 +19893,14 @@ function describeReason(reason) {
 }
 
 // src/commands/host/host-client.ts
-var fs36 = __toESM(require("fs"));
-var os33 = __toESM(require("os"));
-var path41 = __toESM(require("path"));
+var fs37 = __toESM(require("fs"));
+var os34 = __toESM(require("os"));
+var path42 = __toESM(require("path"));
 var import_node_crypto9 = require("crypto");
 function sampleCpuTimes() {
   let idle = 0;
   let total = 0;
-  for (const cpu of os33.cpus()) {
+  for (const cpu of os34.cpus()) {
     const t2 = cpu.times;
     idle += t2.idle;
     total += t2.user + t2.nice + t2.sys + t2.idle + t2.irq;
@@ -19709,8 +19919,8 @@ var MetricsCollector = class {
     const prev = this.prevCpu;
     this.prevCpu = current2;
     if (!prev) {
-      const cores = os33.cpus().length || 1;
-      const proxy = os33.loadavg()[0] / cores * 100;
+      const cores = os34.cpus().length || 1;
+      const proxy = os34.loadavg()[0] / cores * 100;
       return Math.min(100, Math.max(0, Math.round(proxy)));
     }
     const idleDelta = current2.idle - prev.idle;
@@ -19723,8 +19933,8 @@ var MetricsCollector = class {
   collect() {
     return {
       cpuPct: this.cpuPct(),
-      ramUsedMb: Math.round((os33.totalmem() - os33.freemem()) / 1048576),
-      ramTotalMb: Math.round(os33.totalmem() / 1048576),
+      ramUsedMb: Math.round((os34.totalmem() - os34.freemem()) / 1048576),
+      ramTotalMb: Math.round(os34.totalmem() / 1048576),
       latencyMs: this.lastLatencyMs
     };
   }
@@ -19733,19 +19943,19 @@ function apiBase() {
   return process.env.CODEAM_API_URL ?? resolveApiBaseUrl();
 }
 function hostIdentityPath() {
-  return path41.join(os33.homedir(), ".codeam", "host-agent.json");
+  return path42.join(os34.homedir(), ".codeam", "host-agent.json");
 }
 function collectOsInfo() {
   return {
-    distro: os33.platform(),
-    arch: os33.arch(),
-    kernel: os33.release(),
+    distro: os34.platform(),
+    arch: os34.arch(),
+    kernel: os34.release(),
     nodeVersion: process.versions.node
   };
 }
 function loadHostIdentity() {
   try {
-    const raw = fs36.readFileSync(hostIdentityPath(), "utf8");
+    const raw = fs37.readFileSync(hostIdentityPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null && typeof parsed.hostId === "string" && typeof parsed.hostToken === "string" && typeof parsed.controlPluginId === "string") {
       const p2 = parsed;
@@ -19764,8 +19974,8 @@ function loadHostIdentity() {
 }
 function saveHostIdentity(identity) {
   const file = hostIdentityPath();
-  fs36.mkdirSync(path41.dirname(file), { recursive: true, mode: 448 });
-  fs36.writeFileSync(file, JSON.stringify(identity, null, 2), {
+  fs37.mkdirSync(path42.dirname(file), { recursive: true, mode: 448 });
+  fs37.writeFileSync(file, JSON.stringify(identity, null, 2), {
     encoding: "utf8",
     mode: 384
   });
@@ -19810,7 +20020,7 @@ function isTerminalEnrollError(err) {
 }
 function deleteHostIdentity() {
   try {
-    fs36.rmSync(hostIdentityPath(), { force: true });
+    fs37.rmSync(hostIdentityPath(), { force: true });
   } catch {
   }
 }
@@ -19834,7 +20044,7 @@ async function postJson(pathname, body) {
 function resolveHostLabel(label) {
   const explicit = label?.trim();
   const envLabel = process.env.CODEAM_HOST_LABEL?.trim();
-  const resolved = explicit || envLabel || os33.hostname();
+  const resolved = explicit || envLabel || os34.hostname();
   return resolved.slice(0, 80);
 }
 async function redeemEnrollToken(token, label) {
@@ -19945,17 +20155,17 @@ async function reportDeployProgress(auth, deployId, step, message, sessionId) {
 }
 
 // src/commands/host/workspace.ts
-var fs37 = __toESM(require("fs"));
-var os34 = __toESM(require("os"));
-var path42 = __toESM(require("path"));
+var fs38 = __toESM(require("fs"));
+var os35 = __toESM(require("os"));
+var path43 = __toESM(require("path"));
 var import_node_child_process20 = require("child_process");
 var import_node_util4 = require("util");
 var execFileP4 = (0, import_node_util4.promisify)(import_node_child_process20.execFile);
 function isAbsolutePathTarget(target) {
-  return path42.isAbsolute(target);
+  return path43.isAbsolute(target);
 }
 function selfHostedWorkspaceRoot() {
-  return path42.join(os34.homedir(), ".codeam", "self-hosted");
+  return path43.join(os35.homedir(), ".codeam", "self-hosted");
 }
 function nonInteractiveGitEnv() {
   return {
@@ -20025,15 +20235,15 @@ async function configureGitCredentials(dest, repoRef, cloneToken, provider = "gi
   const isGitlab = provider === "gitlab";
   if (isGitlab ? !gitlabProjectPath(repoRef.trim()) : !githubOwnerRepo(repoRef.trim())) return;
   if (!cloneToken) return;
-  const credFile = path42.join(dest, ".git", "codeam-credentials");
+  const credFile = path43.join(dest, ".git", "codeam-credentials");
   const credLine = isGitlab ? `https://oauth2:${cloneToken}@gitlab.com
 ` : `https://x-access-token:${cloneToken}@github.com
 `;
-  fs37.writeFileSync(credFile, credLine, { mode: 384 });
+  fs38.writeFileSync(credFile, credLine, { mode: 384 });
   restrictToOwner(credFile);
   const env = nonInteractiveGitEnv();
   const git2 = (args2) => execFileP4("git", ["-C", dest, ...args2], { timeout: 3e4, env });
-  const credFilePosix = credFile.split(path42.sep).join("/");
+  const credFilePosix = credFile.split(path43.sep).join("/");
   await git2(["config", "--local", "--replace-all", "credential.helper", ""]).catch(() => {
   });
   await git2([
@@ -20066,17 +20276,17 @@ function maskToken(text, cloneToken) {
 }
 async function prepareWorkspace(repoOrPath, deployId, cloneToken, provider = "github", branch) {
   if (isAbsolutePathTarget(repoOrPath)) {
-    if (!fs37.existsSync(repoOrPath)) {
+    if (!fs38.existsSync(repoOrPath)) {
       throw new Error(`deploy target path does not exist: ${repoOrPath}`);
     }
     return repoOrPath;
   }
-  const dest = path42.join(selfHostedWorkspaceRoot(), deployId);
-  if (fs37.existsSync(path42.join(dest, ".git"))) {
+  const dest = path43.join(selfHostedWorkspaceRoot(), deployId);
+  if (fs38.existsSync(path43.join(dest, ".git"))) {
     if (cloneToken) await configureGitCredentials(dest, repoOrPath, cloneToken, provider);
     return dest;
   }
-  fs37.mkdirSync(selfHostedWorkspaceRoot(), { recursive: true, mode: 448 });
+  fs38.mkdirSync(selfHostedWorkspaceRoot(), { recursive: true, mode: 448 });
   const cloneUrl = repoCloneUrl(repoOrPath, cloneToken, provider);
   const cloneArgs = branch ? ["clone", "--depth", "1", "--branch", branch, cloneUrl, dest] : ["clone", "--depth", "1", cloneUrl, dest];
   try {
@@ -20094,9 +20304,9 @@ async function prepareWorkspace(repoOrPath, deployId, cloneToken, provider = "gi
 }
 
 // src/commands/host/agent-provisioning.ts
-var fs38 = __toESM(require("fs"));
-var os35 = __toESM(require("os"));
-var path43 = __toESM(require("path"));
+var fs39 = __toESM(require("fs"));
+var os36 = __toESM(require("os"));
+var path44 = __toESM(require("path"));
 var PUBLIC_TO_INTERNAL_AGENT = {
   claude_code: "claude",
   claude: "claude",
@@ -20113,22 +20323,22 @@ function toInternalAgentId(publicAgentId) {
   return PUBLIC_TO_INTERNAL_AGENT[publicAgentId] ?? null;
 }
 function ensureDir(dir) {
-  fs38.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs39.mkdirSync(dir, { recursive: true, mode: 448 });
 }
 function writeFile0600(filePath, contents) {
-  ensureDir(path43.dirname(filePath));
-  fs38.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
+  ensureDir(path44.dirname(filePath));
+  fs39.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
   restrictToOwner(filePath);
 }
 function rmIfExists(filePath) {
   try {
-    fs38.rmSync(filePath, { force: true });
+    fs39.rmSync(filePath, { force: true });
   } catch {
   }
 }
 var claudeProvisioner = {
   write(auth, home) {
-    const credentialsJson = path43.join(home, ".claude", ".credentials.json");
+    const credentialsJson = path44.join(home, ".claude", ".credentials.json");
     if (auth.kind === "api_key") {
       rmIfExists(credentialsJson);
       return { ANTHROPIC_API_KEY: auth.value };
@@ -20140,8 +20350,8 @@ var claudeProvisioner = {
     } else {
       rmIfExists(credentialsJson);
     }
-    const claudeJson = path43.join(home, ".claude.json");
-    if (!fs38.existsSync(claudeJson)) {
+    const claudeJson = path44.join(home, ".claude.json");
+    if (!fs39.existsSync(claudeJson)) {
       writeFile0600(
         claudeJson,
         JSON.stringify({ hasCompletedOnboarding: true, customApiKeyResponses: { approved: [] } })
@@ -20152,7 +20362,7 @@ var claudeProvisioner = {
 };
 var codexProvisioner = {
   write(auth, home) {
-    const authJson = path43.join(home, ".codex", "auth.json");
+    const authJson = path44.join(home, ".codex", "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { OPENAI_API_KEY: auth.value };
@@ -20163,8 +20373,8 @@ var codexProvisioner = {
 };
 var geminiProvisioner = {
   write(auth, home) {
-    const settingsJson = path43.join(home, ".gemini", "settings.json");
-    const oauthCreds = path43.join(home, ".gemini", "oauth_creds.json");
+    const settingsJson = path44.join(home, ".gemini", "settings.json");
+    const oauthCreds = path44.join(home, ".gemini", "oauth_creds.json");
     if (auth.kind === "api_key") {
       rmIfExists(oauthCreds);
       writeFile0600(settingsJson, '{"security":{"auth":{"selectedType":"gemini-api-key"}}}');
@@ -20177,7 +20387,7 @@ var geminiProvisioner = {
 };
 var cursorProvisioner = {
   write(auth, home) {
-    const authJson = path43.join(home, ".config", "cursor", "auth.json");
+    const authJson = path44.join(home, ".config", "cursor", "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { CURSOR_API_KEY: auth.value };
@@ -20219,22 +20429,22 @@ max_context_size = 262144
 var kimiProvisioner = {
   write(auth, home) {
     const credentialsFiles = [
-      path43.join(home, ".kimi", "credentials", "kimi-code.json"),
-      path43.join(home, ".kimi-code", "credentials", "kimi-code.json")
+      path44.join(home, ".kimi", "credentials", "kimi-code.json"),
+      path44.join(home, ".kimi-code", "credentials", "kimi-code.json")
     ];
     if (auth.kind === "api_key") {
       credentialsFiles.forEach(rmIfExists);
       return { KIMI_API_KEY: auth.value };
     }
     credentialsFiles.forEach((f) => writeFile0600(f, auth.value));
-    writeFile0600(path43.join(home, ".kimi-code", "config.toml"), KIMI_MANAGED_CONFIG_TOML);
+    writeFile0600(path44.join(home, ".kimi-code", "config.toml"), KIMI_MANAGED_CONFIG_TOML);
     return {};
   }
 };
 var coderabbitProvisioner = {
   write(auth, home) {
-    const dir = path43.join(home, ".coderabbit");
-    const authJson = path43.join(dir, "auth.json");
+    const dir = path44.join(home, ".coderabbit");
+    const authJson = path44.join(dir, "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { CODERABBIT_API_KEY: auth.value };
@@ -20246,13 +20456,13 @@ var coderabbitProvisioner = {
       try {
         const parsed = JSON.parse(value);
         if (typeof parsed.file === "string" && typeof parsed.contents === "string") {
-          file = path43.basename(parsed.file);
+          file = path44.basename(parsed.file);
           contents = parsed.contents;
         }
       } catch {
       }
     }
-    writeFile0600(path43.join(dir, file), contents);
+    writeFile0600(path44.join(dir, file), contents);
     return {};
   }
 };
@@ -20280,7 +20490,7 @@ var UnsupportedAgentError = class extends Error {
     this.agentId = agentId;
   }
 };
-function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os35.homedir()) {
+function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os36.homedir()) {
   const internal = toInternalAgentId(publicAgentId);
   if (!internal) throw new UnsupportedAgentError(publicAgentId);
   const provisioner = PROVISIONERS[internal];
@@ -20290,11 +20500,11 @@ function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os35.homedir(
 
 // src/commands/host/git-tooling.ts
 var import_node_child_process21 = require("child_process");
-var fs39 = __toESM(require("fs"));
-var os36 = __toESM(require("os"));
-var path44 = __toESM(require("path"));
+var fs40 = __toESM(require("fs"));
+var os37 = __toESM(require("os"));
+var path45 = __toESM(require("path"));
 function codeamBinDir() {
-  return process.env.CODEAM_BIN_DIR ?? path44.join(os36.homedir(), ".codeam", "bin");
+  return process.env.CODEAM_BIN_DIR ?? path45.join(os37.homedir(), ".codeam", "bin");
 }
 var FALLBACK_GH_VERSION = "2.62.0";
 var RELEASE_API = "https://api.github.com/repos/cli/cli/releases/latest";
@@ -20326,7 +20536,7 @@ async function download(url2, dest) {
     const res = await fetch(url2, { headers: { "User-Agent": "codeam-cli" } });
     if (!res.ok || !res.body) return false;
     const buf = Buffer.from(await res.arrayBuffer());
-    fs39.writeFileSync(dest, buf);
+    fs40.writeFileSync(dest, buf);
     return true;
   } catch {
     return false;
@@ -20349,8 +20559,8 @@ async function ensureGhCli(runner, token, deps = {}) {
     const version3 = await resolveVersionFn(token);
     const asset = `gh_${version3}_${osToken}_${arch2}`;
     const url2 = `https://github.com/cli/cli/releases/download/v${version3}/${asset}.${ext}`;
-    const tmpRoot = fs39.mkdtempSync(path44.join(os36.tmpdir(), "codeam-gh-"));
-    const archive = path44.join(tmpRoot, `${asset}.${ext}`);
+    const tmpRoot = fs40.mkdtempSync(path45.join(os37.tmpdir(), "codeam-gh-"));
+    const archive = path45.join(tmpRoot, `${asset}.${ext}`);
     if (!await downloadFn(url2, archive)) {
       log.warn("host-agent", "gh download failed \u2014 skipping (git pull/push still work via the credential helper)");
       return null;
@@ -20360,16 +20570,16 @@ async function ensureGhCli(runner, token, deps = {}) {
       log.warn("host-agent", `gh archive extraction failed (code=${String(extract.code)}) \u2014 skipping`);
       return null;
     }
-    const extractedBin = path44.join(tmpRoot, asset, "bin", binaryName);
-    if (!fs39.existsSync(extractedBin)) {
+    const extractedBin = path45.join(tmpRoot, asset, "bin", binaryName);
+    if (!fs40.existsSync(extractedBin)) {
       log.warn("host-agent", "gh binary not found in the extracted archive \u2014 skipping");
       return null;
     }
     const binDir = codeamBinDir();
-    fs39.mkdirSync(binDir, { recursive: true });
-    const target = path44.join(binDir, binaryName);
-    fs39.copyFileSync(extractedBin, target);
-    fs39.chmodSync(target, 493);
+    fs40.mkdirSync(binDir, { recursive: true });
+    const target = path45.join(binDir, binaryName);
+    fs40.copyFileSync(extractedBin, target);
+    fs40.chmodSync(target, 493);
     log.info("host-agent", `gh installed to ${target} (v${version3})`);
     return target;
   } catch (e) {
@@ -20429,8 +20639,8 @@ async function ensureGlabCli(runner, deps = {}) {
     const version3 = await resolveLatestGlabVersion();
     const asset = `glab_${version3}_${osToken}_${arch2}`;
     const url2 = `https://gitlab.com/gitlab-org/cli/-/releases/v${version3}/downloads/${asset}.${ext}`;
-    const tmpRoot = fs39.mkdtempSync(path44.join(os36.tmpdir(), "codeam-glab-"));
-    const archive = path44.join(tmpRoot, `${asset}.${ext}`);
+    const tmpRoot = fs40.mkdtempSync(path45.join(os37.tmpdir(), "codeam-glab-"));
+    const archive = path45.join(tmpRoot, `${asset}.${ext}`);
     if (!await downloadFn(url2, archive)) {
       log.warn("host-agent", "glab download failed \u2014 skipping (git push/pull still work)");
       return null;
@@ -20441,20 +20651,20 @@ async function ensureGlabCli(runner, deps = {}) {
       return null;
     }
     const candidates = [
-      path44.join(tmpRoot, "bin", binaryName),
-      path44.join(tmpRoot, asset, "bin", binaryName),
-      path44.join(tmpRoot, binaryName)
+      path45.join(tmpRoot, "bin", binaryName),
+      path45.join(tmpRoot, asset, "bin", binaryName),
+      path45.join(tmpRoot, binaryName)
     ];
-    const extractedBin = candidates.find((c2) => fs39.existsSync(c2));
+    const extractedBin = candidates.find((c2) => fs40.existsSync(c2));
     if (!extractedBin) {
       log.warn("host-agent", "glab binary not found in the extracted archive \u2014 skipping");
       return null;
     }
     const binDir = codeamBinDir();
-    fs39.mkdirSync(binDir, { recursive: true });
-    const target = path44.join(binDir, binaryName);
-    fs39.copyFileSync(extractedBin, target);
-    fs39.chmodSync(target, 493);
+    fs40.mkdirSync(binDir, { recursive: true });
+    const target = path45.join(binDir, binaryName);
+    fs40.copyFileSync(extractedBin, target);
+    fs40.chmodSync(target, 493);
     log.info("host-agent", `glab installed to ${target} (v${version3})`);
     return target;
   } catch (e) {
@@ -20651,24 +20861,24 @@ var HeadroomStatsReporter = class {
 };
 
 // src/commands/host/headroom-bootstrap.ts
-var fs41 = __toESM(require("fs"));
-var path46 = __toESM(require("path"));
-var os38 = __toESM(require("os"));
+var fs42 = __toESM(require("fs"));
+var path47 = __toESM(require("path"));
+var os39 = __toESM(require("os"));
 
 // src/commands/host/headroom-config.ts
-var fs40 = __toESM(require("fs"));
-var os37 = __toESM(require("os"));
-var path45 = __toESM(require("path"));
+var fs41 = __toESM(require("fs"));
+var os38 = __toESM(require("os"));
+var path46 = __toESM(require("path"));
 function headroomConfigPath() {
-  return path45.join(os37.homedir(), ".codeam", "headroom-config.json");
+  return path46.join(os38.homedir(), ".codeam", "headroom-config.json");
 }
 function persistHeadroomConfig(config) {
   try {
     const file = headroomConfigPath();
-    fs40.mkdirSync(path45.dirname(file), { recursive: true, mode: 448 });
+    fs41.mkdirSync(path46.dirname(file), { recursive: true, mode: 448 });
     const tmp = `${file}.tmp-${process.pid}`;
-    fs40.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
-    fs40.renameSync(tmp, file);
+    fs41.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
+    fs41.renameSync(tmp, file);
     restrictToOwner(file);
   } catch (err) {
     log.warn(
@@ -20678,21 +20888,21 @@ function persistHeadroomConfig(config) {
   }
 }
 function agentSettingsPath(kind) {
-  const home = os37.homedir();
-  if (kind === "claude") return path45.join(home, ".claude", "settings.json");
-  if (kind === "codex") return path45.join(home, ".codex", "auth.json");
-  if (kind === "copilot") return path45.join(home, ".config", "github-copilot", "hosts.json");
+  const home = os38.homedir();
+  if (kind === "claude") return path46.join(home, ".claude", "settings.json");
+  if (kind === "codex") return path46.join(home, ".codex", "auth.json");
+  if (kind === "copilot") return path46.join(home, ".config", "github-copilot", "hosts.json");
   return null;
 }
 function backupAgentHeadroomConfig(kind) {
   const src = agentSettingsPath(kind);
   if (!src) return;
   try {
-    if (!fs40.existsSync(src)) return;
-    const dest = path45.join(os37.homedir(), ".codeam", `headroom-backup-${kind}.json`);
-    fs40.mkdirSync(path45.dirname(dest), { recursive: true, mode: 448 });
-    fs40.copyFileSync(src, dest);
-    fs40.chmodSync(dest, 384);
+    if (!fs41.existsSync(src)) return;
+    const dest = path46.join(os38.homedir(), ".codeam", `headroom-backup-${kind}.json`);
+    fs41.mkdirSync(path46.dirname(dest), { recursive: true, mode: 448 });
+    fs41.copyFileSync(src, dest);
+    fs41.chmodSync(dest, 384);
     log.info("host-agent", `headroom config backup: ${src} \u2192 ${dest}`);
   } catch (err) {
     log.warn(
@@ -20704,12 +20914,12 @@ function backupAgentHeadroomConfig(kind) {
 function restoreAgentHeadroomConfig(kind) {
   const dest = agentSettingsPath(kind);
   if (!dest) return false;
-  const src = path45.join(os37.homedir(), ".codeam", `headroom-backup-${kind}.json`);
-  if (!fs40.existsSync(src)) return false;
+  const src = path46.join(os38.homedir(), ".codeam", `headroom-backup-${kind}.json`);
+  if (!fs41.existsSync(src)) return false;
   try {
-    fs40.mkdirSync(path45.dirname(dest), { recursive: true, mode: 448 });
-    fs40.copyFileSync(src, dest);
-    fs40.chmodSync(dest, 384);
+    fs41.mkdirSync(path46.dirname(dest), { recursive: true, mode: 448 });
+    fs41.copyFileSync(src, dest);
+    fs41.chmodSync(dest, 384);
     log.info("host-agent", `headroom config restored: ${src} \u2192 ${dest}`);
     return true;
   } catch (err) {
@@ -20722,7 +20932,7 @@ function restoreAgentHeadroomConfig(kind) {
 }
 function readHeadroomChildEnv() {
   try {
-    const raw = fs40.readFileSync(headroomConfigPath(), "utf8");
+    const raw = fs41.readFileSync(headroomConfigPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed !== "object" || parsed === null) return {};
     const o = parsed;
@@ -20758,49 +20968,49 @@ function bundledClaudeBinDir() {
   const roots = /* @__PURE__ */ new Set();
   let dir = __dirname;
   for (let i = 0; i < 6; i++) {
-    roots.add(path46.join(dir, "node_modules"));
-    const parent = path46.dirname(dir);
+    roots.add(path47.join(dir, "node_modules"));
+    const parent = path47.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
   try {
     const main2 = require.resolve("@anthropic-ai/claude-agent-sdk");
-    const marker = `${path46.sep}@anthropic-ai${path46.sep}`;
+    const marker = `${path47.sep}@anthropic-ai${path47.sep}`;
     const idx = main2.lastIndexOf(marker);
     if (idx !== -1) roots.add(main2.slice(0, idx));
   } catch {
   }
   for (const nm of roots) {
-    const atAnthropic = path46.join(nm, "@anthropic-ai");
+    const atAnthropic = path47.join(nm, "@anthropic-ai");
     let entries;
     try {
-      entries = fs41.readdirSync(atAnthropic);
+      entries = fs42.readdirSync(atAnthropic);
     } catch {
       continue;
     }
     for (const entry of entries) {
       if (!entry.startsWith("claude-agent-sdk-")) continue;
-      const bin = path46.join(atAnthropic, entry, "claude");
-      if (fs41.existsSync(bin)) return path46.dirname(bin);
+      const bin = path47.join(atAnthropic, entry, "claude");
+      if (fs42.existsSync(bin)) return path47.dirname(bin);
     }
   }
   return null;
 }
 async function getFreeDiskBytes(dir) {
   try {
-    const s = await fs41.promises.statfs(dir);
+    const s = await fs42.promises.statfs(dir);
     return s.bsize * s.bavail;
   } catch {
     return null;
   }
 }
 function headroomModelsCached() {
-  const hubDir = process.env.HUGGINGFACE_HUB_CACHE || path46.join(
-    process.env.HF_HOME || path46.join(os38.homedir(), ".cache", "huggingface"),
+  const hubDir = process.env.HUGGINGFACE_HUB_CACHE || path47.join(
+    process.env.HF_HOME || path47.join(os39.homedir(), ".cache", "huggingface"),
     "hub"
   );
   return HEADROOM_MODELS.every(
-    (m) => fs41.existsSync(path46.join(hubDir, `models--${m.repo.replace("/", "--")}`))
+    (m) => fs42.existsSync(path47.join(hubDir, `models--${m.repo.replace("/", "--")}`))
   );
 }
 async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner, opts = {}) {
@@ -20869,7 +21079,7 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner,
   if (initKind === "claude") {
     const claudeDir = bundledClaudeBinDir();
     if (claudeDir) {
-      initEnv.PATH = `${claudeDir}${path46.delimiter}${process.env["PATH"] ?? ""}`;
+      initEnv.PATH = `${claudeDir}${path47.delimiter}${process.env["PATH"] ?? ""}`;
       log.info("host-agent", `headroom init: bundled claude on PATH (${claudeDir})`);
     } else {
       log.warn("host-agent", "headroom init: bundled claude binary not found \u2014 init may fail");
@@ -20906,19 +21116,19 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner,
 }
 
 // src/commands/host/house-proxy-config.ts
-var fs42 = __toESM(require("fs"));
-var os39 = __toESM(require("os"));
-var path47 = __toESM(require("path"));
+var fs43 = __toESM(require("fs"));
+var os40 = __toESM(require("os"));
+var path48 = __toESM(require("path"));
 function houseProxyConfigPath() {
-  return path47.join(os39.homedir(), ".codeam", "house-proxy.json");
+  return path48.join(os40.homedir(), ".codeam", "house-proxy.json");
 }
 function persistHouseProxyConfig(config) {
   try {
     const file = houseProxyConfigPath();
-    fs42.mkdirSync(path47.dirname(file), { recursive: true, mode: 448 });
+    fs43.mkdirSync(path48.dirname(file), { recursive: true, mode: 448 });
     const tmp = `${file}.tmp-${process.pid}`;
-    fs42.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
-    fs42.renameSync(tmp, file);
+    fs43.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
+    fs43.renameSync(tmp, file);
     restrictToOwner(file);
   } catch (err) {
     log.warn(
@@ -20929,13 +21139,13 @@ function persistHouseProxyConfig(config) {
 }
 function clearHouseProxyConfig() {
   try {
-    fs42.rmSync(houseProxyConfigPath(), { force: true });
+    fs43.rmSync(houseProxyConfigPath(), { force: true });
   } catch {
   }
 }
 function readHouseProxyChildEnv() {
   try {
-    const raw = fs42.readFileSync(houseProxyConfigPath(), "utf8");
+    const raw = fs43.readFileSync(houseProxyConfigPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed !== "object" || parsed === null) return {};
     const o = parsed;
@@ -20968,9 +21178,9 @@ function readHouseProxyChildEnv() {
 var import_node_child_process23 = require("child_process");
 
 // src/lib/updateNotifier.ts
-var fs43 = __toESM(require("fs"));
-var os40 = __toESM(require("os"));
-var path48 = __toESM(require("path"));
+var fs44 = __toESM(require("fs"));
+var os41 = __toESM(require("os"));
+var path49 = __toESM(require("path"));
 var https6 = __toESM(require("https"));
 var import_node_child_process22 = require("child_process");
 var import_picocolors3 = __toESM(require("picocolors"));
@@ -20979,12 +21189,12 @@ var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
 var TTL_MS = 24 * 60 * 60 * 1e3;
 var REQUEST_TIMEOUT_MS = 1500;
 function cachePath() {
-  const dir = path48.join(os40.homedir(), ".codeam");
-  return path48.join(dir, "update-check.json");
+  const dir = path49.join(os41.homedir(), ".codeam");
+  return path49.join(dir, "update-check.json");
 }
 function readCache() {
   try {
-    const raw = fs43.readFileSync(cachePath(), "utf8");
+    const raw = fs44.readFileSync(cachePath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.fetchedAt !== "number" || typeof parsed.latest !== "string") return null;
     return parsed;
@@ -20995,10 +21205,10 @@ function readCache() {
 function writeCache(cache) {
   try {
     const file = cachePath();
-    fs43.mkdirSync(path48.dirname(file), { recursive: true });
+    fs44.mkdirSync(path49.dirname(file), { recursive: true });
     const tmp = `${file}.${process.pid}.tmp`;
-    fs43.writeFileSync(tmp, JSON.stringify(cache));
-    fs43.renameSync(tmp, file);
+    fs44.writeFileSync(tmp, JSON.stringify(cache));
+    fs44.renameSync(tmp, file);
   } catch {
   }
 }
@@ -21072,8 +21282,8 @@ function isLinkedInstall() {
       timeout: 2e3
     }).trim();
     if (!root) return false;
-    const pkgPath = path48.join(root, PKG_NAME);
-    return fs43.lstatSync(pkgPath).isSymbolicLink();
+    const pkgPath = path49.join(root, PKG_NAME);
+    return fs44.lstatSync(pkgPath).isSymbolicLink();
   } catch {
     return false;
   }
@@ -21109,7 +21319,7 @@ function maybeAutoUpdate(currentVersion, latest) {
     return;
   }
   try {
-    fs43.unlinkSync(cachePath());
+    fs44.unlinkSync(cachePath());
   } catch {
   }
   process.stderr.write(`  ${import_picocolors3.default.green("\u2713")} Updated. Resuming session...
@@ -21125,7 +21335,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.65.0" : null;
+  const current2 = true ? "2.65.2" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -21142,7 +21352,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.65.0" : null;
+  const current2 = true ? "2.65.2" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -21162,7 +21372,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.65.0" : null;
+  return true ? "2.65.2" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve9) => {
@@ -21229,7 +21439,7 @@ async function runSelfUpdate() {
 
 // src/commands/host/teardown.ts
 var import_node_child_process24 = require("child_process");
-var fs44 = __toESM(require("fs"));
+var fs45 = __toESM(require("fs"));
 var defaultDisableService = () => {
   try {
     (0, import_node_child_process24.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
@@ -21238,7 +21448,7 @@ var defaultDisableService = () => {
 };
 var defaultTeardownHeadroom = () => {
   try {
-    const kind = JSON.parse(fs44.readFileSync(headroomConfigPath(), "utf8")).agent;
+    const kind = JSON.parse(fs45.readFileSync(headroomConfigPath(), "utf8")).agent;
     if (kind) {
       (0, import_node_child_process24.execFileSync)("headroom", ["unwrap", kind], { stdio: "ignore", timeout: 15e3 });
     }
@@ -21306,8 +21516,8 @@ function maybeResumeLocalHeadroomReporter(ctx) {
   if (process.env["HEADROOM_ENABLED"] === "1") return null;
   try {
     const file = headroomConfigPath();
-    if (!fs45.existsSync(file)) return null;
-    const cfg = JSON.parse(fs45.readFileSync(file, "utf8"));
+    if (!fs46.existsSync(file)) return null;
+    const cfg = JSON.parse(fs46.readFileSync(file, "utf8"));
     if (!cfg?.enabled) return null;
     const agent = cfg.agent ?? "claude";
     const ingestUrl = `${resolveApiBaseUrl()}/api/sessions/${ctx.sessionId}/headroom-savings`;
@@ -21894,13 +22104,13 @@ var HostAgentSupervisor = class {
     const relay = this.relay;
     if (!relay) return;
     const raw = cmd.payload?.path;
-    const target = typeof raw === "string" && raw.trim() ? path49.resolve(raw.trim()) : os41.homedir();
+    const target = typeof raw === "string" && raw.trim() ? path50.resolve(raw.trim()) : os42.homedir();
     try {
-      const dirents = await fs45.promises.readdir(target, { withFileTypes: true });
+      const dirents = await fs46.promises.readdir(target, { withFileTypes: true });
       const entries = dirents.filter((d3) => !d3.name.startsWith(".")).map((d3) => ({ name: d3.name, isDir: d3.isDirectory() })).sort(
         (a, b) => a.isDir === b.isDir ? a.name.localeCompare(b.name) : a.isDir ? -1 : 1
       );
-      const parent = path49.dirname(target);
+      const parent = path50.dirname(target);
       await relay.sendResult(cmd.id, "completed", {
         path: target,
         // null at the filesystem root so the UI can hide the ".." affordance.
@@ -22133,14 +22343,14 @@ var HostAgentSupervisor = class {
           API_TIMEOUT_MS: "3000000",
           CODEAM_AUTO_TOKEN: payload.autoPairToken
         };
-        const houseConfigDir = path49.join(
-          os41.homedir(),
+        const houseConfigDir = path50.join(
+          os42.homedir(),
           ".codeam",
           "house-claude",
           payload.deployId
         );
         try {
-          fs45.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
+          fs46.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
         } catch {
         }
         childEnv.CLAUDE_CONFIG_DIR = houseConfigDir;
@@ -22166,7 +22376,7 @@ var HostAgentSupervisor = class {
         report("installing", "installing agent CLI");
         await this.runAgentInstall(payload.agentInstallScript);
       }
-      const home = process.env.HOME || os41.homedir();
+      const home = process.env.HOME || os42.homedir();
       childEnv.PATH = `${home}/.local/bin:${process.env.PATH ?? ""}`;
       if (payload.cloneToken) {
         try {
@@ -22174,13 +22384,13 @@ var HostAgentSupervisor = class {
           if ((payload.repoProvider ?? "github") === "gitlab") {
             const glabCmd = await ensureGlabCli(defaultGitToolingRunner);
             if (glabCmd) {
-              childEnv.PATH = `${codeamBinDir()}${path49.delimiter}${childEnv.PATH}`;
+              childEnv.PATH = `${codeamBinDir()}${path50.delimiter}${childEnv.PATH}`;
               await ensureGlabAuth(defaultGitToolingRunner, glabCmd, payload.cloneToken);
             }
           } else {
             const ghCmd = await ensureGhCli(defaultGitToolingRunner, payload.cloneToken);
             if (ghCmd) {
-              childEnv.PATH = `${codeamBinDir()}${path49.delimiter}${childEnv.PATH}`;
+              childEnv.PATH = `${codeamBinDir()}${path50.delimiter}${childEnv.PATH}`;
               await ensureGhAuth(defaultGitToolingRunner, ghCmd, payload.cloneToken);
             }
           }
@@ -22200,7 +22410,7 @@ var HostAgentSupervisor = class {
       }
       if (payload.headroomEnabled && payload.headroomAgent && payload.headroomSavingsIngestUrl && isHeadroomSupportedAgent(payload.headroomAgent)) {
         report("headroom", "setting up Headroom proxy");
-        const freeBytes = await this.getFreeDisk(os41.homedir());
+        const freeBytes = await this.getFreeDisk(os42.homedir());
         const alreadyInstalled = this.isHeadroomInstalled();
         if (!alreadyInstalled && freeBytes !== null && freeBytes < HEADROOM_MIN_FREE_DISK_BYTES) {
           const freeGb = (freeBytes / 1e9).toFixed(1);
@@ -22259,9 +22469,9 @@ var HostAgentSupervisor = class {
       );
       if (!payload.suppressOnboardingWelcome) {
         try {
-          const cfgDir = childEnv.CLAUDE_CONFIG_DIR || path49.join(os41.homedir(), ".claude");
-          const projectDir = path49.join(cfgDir, "projects", encodeCwd(cwd));
-          const hasPriorConversation = fs45.existsSync(projectDir) && fs45.readdirSync(projectDir).some((f) => f.endsWith(".jsonl"));
+          const cfgDir = childEnv.CLAUDE_CONFIG_DIR || path50.join(os42.homedir(), ".claude");
+          const projectDir = path50.join(cfgDir, "projects", encodeCwd(cwd));
+          const hasPriorConversation = fs46.existsSync(projectDir) && fs46.readdirSync(projectDir).some((f) => f.endsWith(".jsonl"));
           if (hasPriorConversation) {
             childEnv.CODEAM_RESUME_LATEST = "1";
             log.info(
@@ -22360,7 +22570,7 @@ var HostAgentSupervisor = class {
       if (this.children.size > 0) return;
       const session = getActiveSession();
       if (!session || !session.pluginId || !session.pollSecret || !session.agent) return;
-      const cwd = session.cwd && fs45.existsSync(session.cwd) ? session.cwd : process.cwd();
+      const cwd = session.cwd && fs46.existsSync(session.cwd) ? session.cwd : process.cwd();
       const proc = this.resumeSpawner(
         { ...readHeadroomChildEnv(), ...readHouseProxyChildEnv() },
         cwd
@@ -22457,12 +22667,12 @@ var HostAgentSupervisor = class {
       this.children.delete(deployId);
     }
     const dirs = [
-      path49.join(selfHostedWorkspaceRoot(), deployId),
-      path49.join(os41.homedir(), ".codeam", "house-claude", deployId)
+      path50.join(selfHostedWorkspaceRoot(), deployId),
+      path50.join(os42.homedir(), ".codeam", "house-claude", deployId)
     ];
     for (const dir of dirs) {
       try {
-        fs45.rmSync(dir, { recursive: true, force: true });
+        fs46.rmSync(dir, { recursive: true, force: true });
       } catch (err) {
         log.warn(
           "host-agent",
@@ -22599,10 +22809,10 @@ async function configureHeadroom(action, ctx, deps) {
 }
 
 // src/services/headroom/budget-relaunch.ts
-var fs46 = __toESM(require("fs"));
-var os42 = __toESM(require("os"));
-var path50 = __toESM(require("path"));
-var import_child_process14 = require("child_process");
+var fs47 = __toESM(require("fs"));
+var os43 = __toESM(require("os"));
+var path51 = __toESM(require("path"));
+var import_child_process15 = require("child_process");
 function amendDeploymentManifestBudget(manifest, budget) {
   const rawArgs = manifest.proxy_args ?? [];
   const strippedArgs = [];
@@ -22635,7 +22845,7 @@ function amendDeploymentManifestBudget(manifest, budget) {
   return { ...manifest, proxy_args: newArgs, base_env: newEnv };
 }
 function findHeadroomDeployments(homeDir2, deps) {
-  const deployDir = path50.join(homeDir2, ".headroom", "deploy");
+  const deployDir = path51.join(homeDir2, ".headroom", "deploy");
   let profiles;
   try {
     profiles = deps.readDir(deployDir);
@@ -22644,7 +22854,7 @@ function findHeadroomDeployments(homeDir2, deps) {
   }
   const results = [];
   for (const profile of profiles) {
-    const manifestPath = path50.join(deployDir, profile, "manifest.json");
+    const manifestPath = path51.join(deployDir, profile, "manifest.json");
     let raw;
     try {
       raw = deps.readJson(manifestPath);
@@ -22676,12 +22886,12 @@ async function applyBudgetToHeadroom(budget, deps) {
 }
 function writeManifestReal(manifestPath, manifest) {
   const tmp = manifestPath + ".codeam.tmp";
-  fs46.writeFileSync(tmp, JSON.stringify(manifest, null, 2) + "\n", { mode: 384 });
-  fs46.renameSync(tmp, manifestPath);
+  fs47.writeFileSync(tmp, JSON.stringify(manifest, null, 2) + "\n", { mode: 384 });
+  fs47.renameSync(tmp, manifestPath);
 }
 function restartDeploymentReal(profile) {
   try {
-    const proc = (0, import_child_process14.spawn)("headroom", ["install", "restart", "--profile", profile], {
+    const proc = (0, import_child_process15.spawn)("headroom", ["install", "restart", "--profile", profile], {
       detached: true,
       stdio: "ignore"
     });
@@ -22712,11 +22922,11 @@ function spawnProxyReal2(_budget) {
   );
 }
 function makeRealApplyBudgetDeps() {
-  const homeDir2 = os42.homedir();
+  const homeDir2 = os43.homedir();
   return {
     findDeployments: () => findHeadroomDeployments(homeDir2, {
-      readDir: (dir) => fs46.readdirSync(dir),
-      readJson: (filePath) => JSON.parse(fs46.readFileSync(filePath, "utf8"))
+      readDir: (dir) => fs47.readdirSync(dir),
+      readJson: (filePath) => JSON.parse(fs47.readFileSync(filePath, "utf8"))
     }),
     writeManifest: writeManifestReal,
     restartDeployment: restartDeploymentReal,
@@ -22831,7 +23041,7 @@ async function defaultFetchJson(url2) {
 async function readUsageReport(deps = {}) {
   const port = deps.port ?? HEADROOM_PROXY_PORT;
   const base = `http://127.0.0.1:${port}`;
-  const get2 = deps.fetchJson ?? ((path91) => defaultFetchJson(`${base}${path91}`));
+  const get2 = deps.fetchJson ?? ((path92) => defaultFetchJson(`${base}${path92}`));
   let history;
   try {
     history = await get2("/stats-history");
@@ -22849,47 +23059,47 @@ async function readUsageReport(deps = {}) {
 }
 
 // src/agents/acp/guardrail-config.ts
-var fs47 = __toESM(require("fs"));
-var path51 = __toESM(require("path"));
-var os43 = __toESM(require("os"));
+var fs48 = __toESM(require("fs"));
+var path52 = __toESM(require("path"));
+var os44 = __toESM(require("os"));
 var current = null;
-function guardrailConfigPath(homeDir2 = os43.homedir()) {
-  return path51.join(homeDir2, ".codeam", "guardrails.json");
+function guardrailConfigPath(homeDir2 = os44.homedir()) {
+  return path52.join(homeDir2, ".codeam", "guardrails.json");
 }
-function loadGuardrailPolicy(homeDir2 = os43.homedir()) {
+function loadGuardrailPolicy(homeDir2 = os44.homedir()) {
   try {
-    current = normalizeGuardrailPolicy(JSON.parse(fs47.readFileSync(guardrailConfigPath(homeDir2), "utf8")));
+    current = normalizeGuardrailPolicy(JSON.parse(fs48.readFileSync(guardrailConfigPath(homeDir2), "utf8")));
   } catch {
     current = { ...DEFAULT_GUARDRAIL_POLICY };
   }
   return current;
 }
-function getGuardrailPolicy(homeDir2 = os43.homedir()) {
+function getGuardrailPolicy(homeDir2 = os44.homedir()) {
   return current ?? loadGuardrailPolicy(homeDir2);
 }
-function setGuardrailPolicy(raw, homeDir2 = os43.homedir()) {
+function setGuardrailPolicy(raw, homeDir2 = os44.homedir()) {
   const next = normalizeGuardrailPolicy(raw);
   current = next;
   try {
     const p2 = guardrailConfigPath(homeDir2);
-    fs47.mkdirSync(path51.dirname(p2), { recursive: true });
-    fs47.writeFileSync(p2, JSON.stringify(next, null, 2));
+    fs48.mkdirSync(path52.dirname(p2), { recursive: true });
+    fs48.writeFileSync(p2, JSON.stringify(next, null, 2));
   } catch {
   }
   return next;
 }
 
 // src/services/preview/port-registry.ts
-var fs48 = __toESM(require("fs"));
-var os44 = __toESM(require("os"));
-var path52 = __toESM(require("path"));
-var import_child_process15 = require("child_process");
+var fs49 = __toESM(require("fs"));
+var os45 = __toESM(require("os"));
+var path53 = __toESM(require("path"));
+var import_child_process16 = require("child_process");
 function registryPath() {
-  return path52.join(os44.homedir(), ".codeam", "preview-ports.json");
+  return path53.join(os45.homedir(), ".codeam", "preview-ports.json");
 }
 function readRegistry() {
   try {
-    const raw = fs48.readFileSync(registryPath(), "utf8");
+    const raw = fs49.readFileSync(registryPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object") return parsed;
   } catch {
@@ -22899,10 +23109,10 @@ function readRegistry() {
 function writeRegistry(reg) {
   try {
     const file = registryPath();
-    fs48.mkdirSync(path52.dirname(file), { recursive: true });
+    fs49.mkdirSync(path53.dirname(file), { recursive: true });
     const tmp = `${file}.tmp`;
-    fs48.writeFileSync(tmp, JSON.stringify(reg), "utf8");
-    fs48.renameSync(tmp, file);
+    fs49.writeFileSync(tmp, JSON.stringify(reg), "utf8");
+    fs49.renameSync(tmp, file);
   } catch (err) {
     log.warn("preview", `port-registry write failed: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -22930,7 +23140,7 @@ function groupAlive(pgid) {
 }
 function killGroup(pgid) {
   if (process.platform === "win32") {
-    (0, import_child_process15.spawnSync)("taskkill", ["/F", "/T", "/PID", String(pgid)], { stdio: "ignore" });
+    (0, import_child_process16.spawnSync)("taskkill", ["/F", "/T", "/PID", String(pgid)], { stdio: "ignore" });
     return;
   }
   try {
@@ -22967,8 +23177,8 @@ function reclaimOwnOrphanPort(port) {
 }
 
 // src/services/preview/host-allow.ts
-var import_fs = require("fs");
-var path53 = __toESM(require("path"));
+var import_fs2 = require("fs");
+var path54 = __toESM(require("path"));
 var NEXT_ALLOWED_ORIGINS = [
   "*.trycloudflare.com",
   "*.preview.codeagent-mobile.com",
@@ -22988,11 +23198,11 @@ var MARKER_DIR = ".codeam";
 var MARKER_FILE = "preview-host-allow.json";
 var ORIG_INFIX = ".codeam-orig";
 function markerPath(cwd) {
-  return path53.join(cwd, MARKER_DIR, MARKER_FILE);
+  return path54.join(cwd, MARKER_DIR, MARKER_FILE);
 }
 async function fileExists(p2) {
   try {
-    await import_fs.promises.access(p2);
+    await import_fs2.promises.access(p2);
     return true;
   } catch {
     return false;
@@ -23001,13 +23211,13 @@ async function fileExists(p2) {
 async function findConfigFile(cwd, framework) {
   const base = CONFIG_BASENAMES[framework];
   for (const ext of CONFIG_EXTS) {
-    if (await fileExists(path53.join(cwd, `${base}${ext}`))) return `${base}${ext}`;
+    if (await fileExists(path54.join(cwd, `${base}${ext}`))) return `${base}${ext}`;
   }
   return null;
 }
 async function dependsOn(cwd, pkgName) {
   try {
-    const raw = await import_fs.promises.readFile(path53.join(cwd, "package.json"), "utf8");
+    const raw = await import_fs2.promises.readFile(path54.join(cwd, "package.json"), "utf8");
     const pkg = JSON.parse(raw);
     return !!(pkg.dependencies?.[pkgName] ?? pkg.devDependencies?.[pkgName]);
   } catch {
@@ -23015,11 +23225,11 @@ async function dependsOn(cwd, pkgName) {
   }
 }
 async function isEsmConfig(cwd, configFile) {
-  const ext = path53.extname(configFile);
+  const ext = path54.extname(configFile);
   if (ext === ".mjs" || ext === ".mts" || ext === ".ts") return true;
   if (ext === ".cjs") return false;
   try {
-    const raw = await import_fs.promises.readFile(path53.join(cwd, "package.json"), "utf8");
+    const raw = await import_fs2.promises.readFile(path54.join(cwd, "package.json"), "utf8");
     return JSON.parse(raw).type === "module";
   } catch {
     return false;
@@ -23102,12 +23312,12 @@ function shimFor(framework, origBasename, esm) {
   return framework === "next" ? nextShim(origBasename, esm) : viteShim(origBasename, esm);
 }
 async function writeMarker(cwd, marker) {
-  await import_fs.promises.mkdir(path53.join(cwd, MARKER_DIR), { recursive: true });
-  await import_fs.promises.writeFile(markerPath(cwd), JSON.stringify(marker, null, 2), "utf8");
+  await import_fs2.promises.mkdir(path54.join(cwd, MARKER_DIR), { recursive: true });
+  await import_fs2.promises.writeFile(markerPath(cwd), JSON.stringify(marker, null, 2), "utf8");
 }
 async function readMarker(cwd) {
   try {
-    const parsed = JSON.parse(await import_fs.promises.readFile(markerPath(cwd), "utf8"));
+    const parsed = JSON.parse(await import_fs2.promises.readFile(markerPath(cwd), "utf8"));
     return parsed && parsed.configFile ? parsed : null;
   } catch {
     return null;
@@ -23117,20 +23327,20 @@ async function restorePreviewHostAllow(cwd) {
   const marker = await readMarker(cwd);
   if (!marker) return;
   try {
-    const configAbs = path53.join(cwd, marker.configFile);
+    const configAbs = path54.join(cwd, marker.configFile);
     if (marker.backupFile) {
-      const backupAbs = path53.join(cwd, marker.backupFile);
+      const backupAbs = path54.join(cwd, marker.backupFile);
       if (await fileExists(backupAbs)) {
-        await import_fs.promises.rm(configAbs, { force: true });
-        await import_fs.promises.rename(backupAbs, configAbs);
+        await import_fs2.promises.rm(configAbs, { force: true });
+        await import_fs2.promises.rename(backupAbs, configAbs);
       }
     } else {
-      await import_fs.promises.rm(configAbs, { force: true });
+      await import_fs2.promises.rm(configAbs, { force: true });
     }
   } catch (err) {
     log.warn("preview", `host-allow restore failed: ${err instanceof Error ? err.message : err}`);
   } finally {
-    await import_fs.promises.rm(markerPath(cwd), { force: true }).catch(() => void 0);
+    await import_fs2.promises.rm(markerPath(cwd), { force: true }).catch(() => void 0);
   }
 }
 async function applyPreviewHostAllow(cwd) {
@@ -23152,16 +23362,16 @@ async function applyPreviewHostAllow(cwd) {
     }
     if (!framework) return;
     if (existing) {
-      const ext = path53.extname(existing);
+      const ext = path54.extname(existing);
       const origBasename = `${CONFIG_BASENAMES[framework]}${ORIG_INFIX}${ext}`;
       const esm = await isEsmConfig(cwd, existing);
-      await import_fs.promises.rename(path53.join(cwd, existing), path53.join(cwd, origBasename));
-      await import_fs.promises.writeFile(path53.join(cwd, existing), shimFor(framework, origBasename, esm), "utf8");
+      await import_fs2.promises.rename(path54.join(cwd, existing), path54.join(cwd, origBasename));
+      await import_fs2.promises.writeFile(path54.join(cwd, existing), shimFor(framework, origBasename, esm), "utf8");
       await writeMarker(cwd, { framework, configFile: existing, backupFile: origBasename });
       log.info("preview", `host-allow: wrapped ${existing} (${framework}) for tunnel access`);
     } else {
       const configFile = `${CONFIG_BASENAMES[framework]}.mjs`;
-      await import_fs.promises.writeFile(path53.join(cwd, configFile), shimFor(framework, null, true), "utf8");
+      await import_fs2.promises.writeFile(path54.join(cwd, configFile), shimFor(framework, null, true), "utf8");
       await writeMarker(cwd, { framework, configFile, backupFile: null });
       log.info("preview", `host-allow: created ${configFile} (${framework}) for tunnel access`);
     }
@@ -23171,14 +23381,14 @@ async function applyPreviewHostAllow(cwd) {
 }
 
 // src/services/preview/cloudflared.ts
-var import_child_process16 = require("child_process");
-var import_fs2 = require("fs");
+var import_child_process17 = require("child_process");
+var import_fs3 = require("fs");
 var import_promises = __toESM(require("fs/promises"));
-var import_os9 = __toESM(require("os"));
-var import_path4 = __toESM(require("path"));
+var import_os10 = __toESM(require("os"));
+var import_path5 = __toESM(require("path"));
 var import_promises2 = require("stream/promises");
 var import_which = __toESM(require("which"));
-var CACHED_BINARY = import_path4.default.join(import_os9.default.homedir(), ".codeam", "bin", "cloudflared");
+var CACHED_BINARY = import_path5.default.join(import_os10.default.homedir(), ".codeam", "bin", "cloudflared");
 async function resolveCloudflared(opts = {}) {
   try {
     return await (0, import_which.default)("cloudflared");
@@ -23202,7 +23412,7 @@ async function resolveCloudflared(opts = {}) {
 }
 async function downloadCloudflared(target) {
   const url2 = downloadUrlForPlatform();
-  await import_promises.default.mkdir(import_path4.default.dirname(target), { recursive: true });
+  await import_promises.default.mkdir(import_path5.default.dirname(target), { recursive: true });
   const response = await fetch(url2);
   if (!response.ok || !response.body) {
     throw new Error(
@@ -23213,10 +23423,10 @@ async function downloadCloudflared(target) {
     const tmp = `${target}.download.tgz`;
     await (0, import_promises2.pipeline)(
       response.body,
-      (0, import_fs2.createWriteStream)(tmp)
+      (0, import_fs3.createWriteStream)(tmp)
     );
     try {
-      await extractTgz(tmp, import_path4.default.dirname(target));
+      await extractTgz(tmp, import_path5.default.dirname(target));
       await import_promises.default.access(target);
       await import_promises.default.chmod(target, 493);
     } catch (err) {
@@ -23230,7 +23440,7 @@ async function downloadCloudflared(target) {
   }
   await (0, import_promises2.pipeline)(
     response.body,
-    (0, import_fs2.createWriteStream)(target, { mode: 493 })
+    (0, import_fs3.createWriteStream)(target, { mode: 493 })
   );
 }
 async function isExecutableBinary(p2) {
@@ -23248,7 +23458,7 @@ async function isExecutableBinary(p2) {
 }
 function extractTgz(tgzPath, destDir) {
   return new Promise((resolve9, reject) => {
-    const child = (0, import_child_process16.spawn)("tar", ["-xzf", tgzPath, "-C", destDir], { stdio: "ignore" });
+    const child = (0, import_child_process17.spawn)("tar", ["-xzf", tgzPath, "-C", destDir], { stdio: "ignore" });
     child.on("error", (err) => reject(err));
     child.on(
       "exit",
@@ -23278,11 +23488,11 @@ function decodeTunnelToken(token) {
 }
 async function spawnNamedTunnel(bin, token, port) {
   const creds = decodeTunnelToken(token);
-  const credDir = import_path4.default.join(import_os9.default.homedir(), ".codeam");
+  const credDir = import_path5.default.join(import_os10.default.homedir(), ".codeam");
   await import_promises.default.mkdir(credDir, { recursive: true });
-  const credFile = import_path4.default.join(credDir, `tunnel-${creds.TunnelID}.json`);
+  const credFile = import_path5.default.join(credDir, `tunnel-${creds.TunnelID}.json`);
   await import_promises.default.writeFile(credFile, JSON.stringify(creds), { mode: 384 });
-  return (0, import_child_process16.spawn)(
+  return (0, import_child_process17.spawn)(
     bin,
     [
       "tunnel",
@@ -23298,17 +23508,17 @@ async function spawnNamedTunnel(bin, token, port) {
 }
 
 // src/services/preview/codespace.ts
-var import_child_process17 = require("child_process");
+var import_child_process18 = require("child_process");
 var import_util3 = require("util");
-var execFileP5 = (0, import_util3.promisify)(import_child_process17.execFile);
+var execFileP5 = (0, import_util3.promisify)(import_child_process18.execFile);
 
 // src/services/preview/config-file.ts
 var import_promises3 = __toESM(require("fs/promises"));
-var import_path5 = __toESM(require("path"));
+var import_path6 = __toESM(require("path"));
 var CONFIG_DIR = ".codeam";
 var CONFIG_FILE = "preview.json";
 function configPath(cwd) {
-  return import_path5.default.join(cwd, CONFIG_DIR, CONFIG_FILE);
+  return import_path6.default.join(cwd, CONFIG_DIR, CONFIG_FILE);
 }
 var REQUIRED_FIELDS = [
   "framework",
@@ -23339,7 +23549,7 @@ async function readPreviewConfig(cwd) {
 }
 async function writePreviewConfig(cwd, detection) {
   const filePath = configPath(cwd);
-  await import_promises3.default.mkdir(import_path5.default.dirname(filePath), { recursive: true });
+  await import_promises3.default.mkdir(import_path6.default.dirname(filePath), { recursive: true });
   await import_promises3.default.writeFile(filePath, JSON.stringify(detection, null, 2) + "\n", "utf-8");
 }
 
@@ -23491,14 +23701,14 @@ async function waitForPortListening(port, opts) {
 }
 
 // src/services/preview/provision-deps.ts
-var import_fs3 = require("fs");
-var import_path6 = __toESM(require("path"));
+var import_fs4 = require("fs");
+var import_path7 = __toESM(require("path"));
 
 // src/services/preview/run-setup.ts
-var import_child_process18 = require("child_process");
+var import_child_process19 = require("child_process");
 function runSetupCommand(cmd, args2, cwd, env, opts) {
   return new Promise((resolve9) => {
-    const child = (0, import_child_process18.spawn)(cmd, args2, {
+    const child = (0, import_child_process19.spawn)(cmd, args2, {
       cwd,
       env: { ...process.env, ...env ?? {} },
       stdio: ["ignore", "pipe", "pipe"]
@@ -23639,37 +23849,37 @@ function pickMigrationScript(scripts) {
 }
 async function exists(p2) {
   try {
-    await import_fs3.promises.access(p2);
+    await import_fs4.promises.access(p2);
     return true;
   } catch {
     return false;
   }
 }
 async function firstExisting(cwd, names) {
-  for (const n of names) if (await exists(import_path6.default.join(cwd, n))) return n;
+  for (const n of names) if (await exists(import_path7.default.join(cwd, n))) return n;
   return null;
 }
 async function ensureEnvFile(cwd, generated) {
-  if (await exists(import_path6.default.join(cwd, ".env"))) {
+  if (await exists(import_path7.default.join(cwd, ".env"))) {
     log.info("provision", ".env already present \u2014 leaving it untouched");
     return;
   }
   const sample = await firstExisting(cwd, ENV_SAMPLES);
   if (sample) {
-    const body = await import_fs3.promises.readFile(import_path6.default.join(cwd, sample), "utf8");
-    await import_fs3.promises.writeFile(import_path6.default.join(cwd, ".env"), body);
+    const body = await import_fs4.promises.readFile(import_path7.default.join(cwd, sample), "utf8");
+    await import_fs4.promises.writeFile(import_path7.default.join(cwd, ".env"), body);
     log.info("provision", `wrote .env from ${sample}`);
     return;
   }
   if (generated.length > 0) {
     const body = "# Generated by codeam \u2014 points at the auto-provisioned local services.\n" + generated.flatMap((s) => s.envLines).join("\n") + "\n";
-    await import_fs3.promises.writeFile(import_path6.default.join(cwd, ".env"), body);
+    await import_fs4.promises.writeFile(import_path7.default.join(cwd, ".env"), body);
     log.info("provision", `generated .env for ${generated.map((s) => s.name).join("+")}`);
   }
 }
 async function readPackageJson(cwd) {
   try {
-    return JSON.parse(await import_fs3.promises.readFile(import_path6.default.join(cwd, "package.json"), "utf8"));
+    return JSON.parse(await import_fs4.promises.readFile(import_path7.default.join(cwd, "package.json"), "utf8"));
   } catch {
     return null;
   }
@@ -23709,10 +23919,10 @@ async function provisionProjectDependencies(cwd) {
     } else if (pkg) {
       generated = detectServicesFromDeps(pkg);
       if (generated.length > 0) {
-        const dir = import_path6.default.join(cwd, ".codeam", "provision");
-        await import_fs3.promises.mkdir(dir, { recursive: true });
-        const file = import_path6.default.join(dir, "compose.generated.yaml");
-        await import_fs3.promises.writeFile(file, renderComposeYaml(generated));
+        const dir = import_path7.default.join(cwd, ".codeam", "provision");
+        await import_fs4.promises.mkdir(dir, { recursive: true });
+        const file = import_path7.default.join(dir, "compose.generated.yaml");
+        await import_fs4.promises.writeFile(file, renderComposeYaml(generated));
         log.info(
           "provision",
           `no compose in repo \u2014 generated ${generated.map((s) => s.name).join("+")}`
@@ -23733,12 +23943,12 @@ async function provisionProjectDependencies(cwd) {
 }
 
 // src/services/preview/setup-deps.ts
-var import_fs4 = __toESM(require("fs"));
-var import_path7 = __toESM(require("path"));
+var import_fs5 = __toESM(require("fs"));
+var import_path8 = __toESM(require("path"));
 function detectMissingNodeDeps(cwd) {
-  if (!import_fs4.default.existsSync(import_path7.default.join(cwd, "package.json"))) return null;
-  if (import_fs4.default.existsSync(import_path7.default.join(cwd, "node_modules"))) return null;
-  if (import_fs4.default.existsSync(import_path7.default.join(cwd, "yarn.lock"))) {
+  if (!import_fs5.default.existsSync(import_path8.default.join(cwd, "package.json"))) return null;
+  if (import_fs5.default.existsSync(import_path8.default.join(cwd, "node_modules"))) return null;
+  if (import_fs5.default.existsSync(import_path8.default.join(cwd, "yarn.lock"))) {
     return { cmd: "yarn", args: ["install"] };
   }
   return { cmd: "npm", args: ["install", "--legacy-peer-deps"] };
@@ -23842,20 +24052,20 @@ function activePreviewSessionIds() {
 }
 
 // src/services/preview/start-orchestrator.ts
-var import_child_process20 = require("child_process");
-var fs56 = __toESM(require("fs"));
-var path60 = __toESM(require("path"));
+var import_child_process21 = require("child_process");
+var fs57 = __toESM(require("fs"));
+var path61 = __toESM(require("path"));
 var import_which2 = __toESM(require("which"));
 
 // src/services/project-env/index.ts
-var import_fs5 = require("fs");
-var path59 = __toESM(require("path"));
+var import_fs6 = require("fs");
+var path60 = __toESM(require("path"));
 
 // src/beads/project-key.ts
-var import_child_process19 = require("child_process");
+var import_child_process20 = require("child_process");
 var crypto2 = __toESM(require("crypto"));
-var fs54 = __toESM(require("fs"));
-var path58 = __toESM(require("path"));
+var fs55 = __toESM(require("fs"));
+var path59 = __toESM(require("path"));
 function normalizeOrigin(raw) {
   const trimmed = raw.trim();
   if (!trimmed) return null;
@@ -23881,17 +24091,17 @@ function normalizeOrigin(raw) {
   return `${host2}/${pathPart}`;
 }
 function findRepoRoot(cwd) {
-  let dir = path58.resolve(cwd);
+  let dir = path59.resolve(cwd);
   const seen = /* @__PURE__ */ new Set();
   for (let i = 0; i < 256; i++) {
     if (seen.has(dir)) return null;
     seen.add(dir);
     try {
-      const stat3 = fs54.statSync(path58.join(dir, ".git"), { throwIfNoEntry: false });
+      const stat3 = fs55.statSync(path59.join(dir, ".git"), { throwIfNoEntry: false });
       if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
     } catch {
     }
-    const parent = path58.dirname(dir);
+    const parent = path59.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -23899,10 +24109,10 @@ function findRepoRoot(cwd) {
 }
 var _execSeam2 = {
   exec: (file, args2, opts) => {
-    const out2 = (0, import_child_process19.execFileSync)(file, args2, opts);
+    const out2 = (0, import_child_process20.execFileSync)(file, args2, opts);
     return typeof out2 === "string" ? out2 : out2.toString("utf8");
   },
-  realpath: (p2) => fs54.realpathSync(p2)
+  realpath: (p2) => fs55.realpathSync(p2)
 };
 function readOrigin(cwd) {
   try {
@@ -23931,20 +24141,20 @@ function deriveProjectIdentity(cwd = process.cwd()) {
   } catch {
   }
   const hash = crypto2.createHash("sha256").update(real).digest("hex");
-  return { projectKey: `path:${hash}`, projectLabel: path58.basename(real) || "project" };
+  return { projectKey: `path:${hash}`, projectLabel: path59.basename(real) || "project" };
 }
 
 // src/services/project-env/index.ts
 async function readIfExists(p2) {
   try {
-    return await import_fs5.promises.readFile(p2, "utf8");
+    return await import_fs6.promises.readFile(p2, "utf8");
   } catch {
     return null;
   }
 }
 async function syncProjectEnvUp(cwd, ctx) {
   if (!ctx.pluginAuthToken) return;
-  const content = await readIfExists(path59.join(cwd, ".env"));
+  const content = await readIfExists(path60.join(cwd, ".env"));
   if (content == null) return;
   try {
     const { projectKey, projectLabel } = deriveProjectIdentity(cwd);
@@ -23966,7 +24176,7 @@ async function syncProjectEnvUp(cwd, ctx) {
 }
 async function restoreProjectEnvIfMissing(cwd, ctx) {
   if (!ctx.pluginAuthToken) return false;
-  const envPath = path59.join(cwd, ".env");
+  const envPath = path60.join(cwd, ".env");
   if (await readIfExists(envPath) != null) return false;
   try {
     const { projectKey, projectLabel } = deriveProjectIdentity(cwd);
@@ -23977,9 +24187,9 @@ async function restoreProjectEnvIfMissing(cwd, ctx) {
       projectKey
     });
     if (!stored) return false;
-    const tmp = path59.join(cwd, ".env.codeam-restore.tmp");
-    await import_fs5.promises.writeFile(tmp, stored.content, { encoding: "utf8", mode: 384 });
-    await import_fs5.promises.rename(tmp, envPath);
+    const tmp = path60.join(cwd, ".env.codeam-restore.tmp");
+    await import_fs6.promises.writeFile(tmp, stored.content, { encoding: "utf8", mode: 384 });
+    await import_fs6.promises.rename(tmp, envPath);
     log.info("project-env", `restored .env (${stored.keyCount} vars) for ${projectLabel}`);
     return true;
   } catch (err) {
@@ -24054,8 +24264,8 @@ function normalizeDetectionForSpawn(detection, cwd) {
   if (args2.length === 0) return detection;
   const binName = args2[0];
   if (binName.startsWith("-")) return detection;
-  const binPath = path60.join(cwd, "node_modules", ".bin", binName);
-  if (!fs56.existsSync(binPath)) return detection;
+  const binPath = path61.join(cwd, "node_modules", ".bin", binName);
+  if (!fs57.existsSync(binPath)) return detection;
   return {
     ...detection,
     command: binPath,
@@ -24271,7 +24481,7 @@ async function startDevServer(ctx) {
   await applyPreviewHostAllow(cwd);
   const spawnable = normalizeDetectionForSpawn(detection, cwd);
   emitProgress("BOOT_SEQUENCE", `${spawnable.command} ${spawnable.args.join(" ")}`);
-  const devServer = (0, import_child_process20.spawn)(spawnable.command, spawnable.args, {
+  const devServer = (0, import_child_process21.spawn)(spawnable.command, spawnable.args, {
     cwd,
     env: { ...process.env, ...spawnable.env ?? {} },
     stdio: ["ignore", "pipe", "pipe"],
@@ -24396,7 +24606,7 @@ async function establishTunnel(ctx, dev) {
         `cloudflared quick tunnel (retry ${attempt}/${MAX_TUNNEL_ATTEMPTS})`
       );
     }
-    const candidate = (0, import_child_process20.spawn)(
+    const candidate = (0, import_child_process21.spawn)(
       bin,
       ["tunnel", "--url", `http://localhost:${detection.port}`],
       { stdio: ["ignore", "pipe", "pipe"] }
@@ -24427,10 +24637,10 @@ async function establishTunnel(ctx, dev) {
 }
 
 // src/beads/bd-adapter.ts
-var import_child_process21 = require("child_process");
-var fs57 = __toESM(require("fs"));
-var os46 = __toESM(require("os"));
-var path61 = __toESM(require("path"));
+var import_child_process22 = require("child_process");
+var fs58 = __toESM(require("fs"));
+var os47 = __toESM(require("os"));
+var path62 = __toESM(require("path"));
 var BD_PACKAGE = "@beads/bd";
 function resolveBundledBdBinary() {
   return _resolveSeam.resolveBundled();
@@ -24442,11 +24652,11 @@ function _defaultResolveBundled() {
   } catch {
     return null;
   }
-  const binDir = path61.join(path61.dirname(pkgJsonPath), "bin");
+  const binDir = path62.join(path62.dirname(pkgJsonPath), "bin");
   const binaryName = process.platform === "win32" ? "bd.exe" : "bd";
-  const binaryPath = path61.join(binDir, binaryName);
+  const binaryPath = path62.join(binDir, binaryName);
   try {
-    fs57.accessSync(binaryPath, fs57.constants.F_OK);
+    fs58.accessSync(binaryPath, fs58.constants.F_OK);
     return binaryPath;
   } catch {
     return null;
@@ -24456,13 +24666,13 @@ function resolveBdOnPath() {
   return _resolveSeam.resolveOnPath();
 }
 function _defaultResolveOnPath() {
-  const dirs = (process.env.PATH ?? "").split(path61.delimiter).filter(Boolean);
+  const dirs = (process.env.PATH ?? "").split(path62.delimiter).filter(Boolean);
   const candidates = process.platform === "win32" ? ["bd.exe", "bd.cmd", "bd"] : ["bd"];
   for (const dir of dirs) {
     for (const candidate of candidates) {
-      const full = path61.join(dir, candidate);
+      const full = path62.join(dir, candidate);
       try {
-        fs57.accessSync(full, fs57.constants.F_OK);
+        fs58.accessSync(full, fs58.constants.F_OK);
         return full;
       } catch {
       }
@@ -24481,7 +24691,7 @@ function _defaultSpawn(binaryPath, args2, opts) {
   return new Promise((resolve9) => {
     let proc;
     try {
-      proc = (0, import_child_process21.spawn)(binaryPath, args2, { cwd: opts.cwd, env: opts.env });
+      proc = (0, import_child_process22.spawn)(binaryPath, args2, { cwd: opts.cwd, env: opts.env });
     } catch (err) {
       resolve9({ code: -1, stdout: "", stderr: err.message });
       return;
@@ -24547,7 +24757,7 @@ var BdAdapter = class {
     const env = { ...process.env };
     if (!env.HOME) {
       try {
-        const home = os46.homedir();
+        const home = os47.homedir();
         if (home) env.HOME = home;
       } catch {
       }
@@ -24638,13 +24848,13 @@ function coerceIssue(row, projectKey) {
 }
 
 // src/beads/provisioner.ts
-var import_child_process24 = require("child_process");
-var fs59 = __toESM(require("fs"));
-var os48 = __toESM(require("os"));
-var path63 = __toESM(require("path"));
+var import_child_process25 = require("child_process");
+var fs60 = __toESM(require("fs"));
+var os49 = __toESM(require("os"));
+var path64 = __toESM(require("path"));
 
 // src/beads/install-bd.ts
-var import_child_process22 = require("child_process");
+var import_child_process23 = require("child_process");
 var INSTALL_SH_URL = "https://raw.githubusercontent.com/gastownhall/beads/main/scripts/install.sh";
 var INSTALL_PS1_URL = "https://raw.githubusercontent.com/gastownhall/beads/main/install.ps1";
 function resolveInstallStrategy(platform3) {
@@ -24675,7 +24885,7 @@ function _defaultInstallSpawn(strategy) {
   return new Promise((resolve9) => {
     let proc;
     try {
-      proc = (0, import_child_process22.spawn)(strategy.command, strategy.args, { env: process.env });
+      proc = (0, import_child_process23.spawn)(strategy.command, strategy.args, { env: process.env });
     } catch (err) {
       resolve9({ ok: false, code: -1, stderr: err.message });
       return;
@@ -24705,10 +24915,10 @@ async function installBd(platform3 = process.platform) {
 }
 
 // src/beads/install-dolt.ts
-var import_child_process23 = require("child_process");
-var fs58 = __toESM(require("fs"));
-var os47 = __toESM(require("os"));
-var path62 = __toESM(require("path"));
+var import_child_process24 = require("child_process");
+var fs59 = __toESM(require("fs"));
+var os48 = __toESM(require("os"));
+var path63 = __toESM(require("path"));
 var DOLT_INSTALL_SH_URL = "https://github.com/dolthub/dolt/releases/latest/download/install.sh";
 var DOLT_MSI_URL = "https://github.com/dolthub/dolt/releases/latest/download/dolt-windows-amd64.msi";
 function resolveDoltInstallStrategy(platform3) {
@@ -24748,11 +24958,11 @@ function resolveDoltInstallStrategy(platform3) {
 }
 var DOLT_RELEASE_BASE = "https://github.com/dolthub/dolt/releases/latest/download";
 function doltPlatformTuple(platform3, arch2) {
-  const os66 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
+  const os67 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
   const a = arch2 === "x64" ? "amd64" : arch2 === "arm64" ? "arm64" : null;
   if (!a) return null;
-  if (os66 === "windows" && a !== "amd64") return null;
-  return `${os66}-${a}`;
+  if (os67 === "windows" && a !== "amd64") return null;
+  return `${os67}-${a}`;
 }
 function resolveDoltTarballStrategy(targetDir, platform3, arch2) {
   const tuple = doltPlatformTuple(platform3, arch2);
@@ -24797,14 +25007,14 @@ async function installDoltToDir(targetDir, platform3 = process.platform, arch2 =
   return result;
 }
 var _doltPathSeam = {
-  homedir: () => os47.homedir(),
+  homedir: () => os48.homedir(),
   getPath: () => process.env.PATH ?? "",
   setPath: (p2) => {
     process.env.PATH = p2;
   },
   exists: (p2) => {
     try {
-      fs58.accessSync(p2, fs58.constants.F_OK);
+      fs59.accessSync(p2, fs59.constants.F_OK);
       return true;
     } catch {
       return false;
@@ -24815,7 +25025,7 @@ function doltBinaryNames(platform3) {
   return platform3 === "win32" ? ["dolt.exe", "dolt.cmd", "dolt"] : ["dolt"];
 }
 function knownDoltDirs(platform3) {
-  const P3 = platform3 === "win32" ? path62.win32 : path62.posix;
+  const P3 = platform3 === "win32" ? path63.win32 : path63.posix;
   const home = _doltPathSeam.homedir();
   if (platform3 === "win32") {
     return [
@@ -24831,7 +25041,7 @@ function knownDoltDirs(platform3) {
   ].filter(Boolean);
 }
 function ensureDoltResolvable(platform3 = process.platform) {
-  const P3 = platform3 === "win32" ? path62.win32 : path62.posix;
+  const P3 = platform3 === "win32" ? path63.win32 : path63.posix;
   const delim = platform3 === "win32" ? ";" : ":";
   const names = doltBinaryNames(platform3);
   const pathDirs = _doltPathSeam.getPath().split(delim).filter(Boolean);
@@ -24867,7 +25077,7 @@ function _defaultDoltInstallSpawn(strategy) {
     };
     let proc;
     try {
-      proc = (0, import_child_process23.spawn)(strategy.command, strategy.args, {
+      proc = (0, import_child_process24.spawn)(strategy.command, strategy.args, {
         env: process.env,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -25008,17 +25218,17 @@ var _provisionSeam = {
 };
 var _linkSeam = {
   platform: () => process.platform,
-  homedir: () => os48.homedir(),
+  homedir: () => os49.homedir(),
   isWritableDir: (dir) => {
     try {
-      fs59.accessSync(dir, fs59.constants.W_OK);
+      fs60.accessSync(dir, fs60.constants.W_OK);
       return true;
     } catch {
       return false;
     }
   },
   ensureDir: (dir) => {
-    fs59.mkdirSync(dir, { recursive: true });
+    fs60.mkdirSync(dir, { recursive: true });
   },
   /**
    * A directory to symlink `bd` into so the AGENT's shell + Claude Code's
@@ -25039,9 +25249,9 @@ var _linkSeam = {
    * which `linkBdOntoPath` creates if missing.
    */
   cliBinDir: () => {
-    const pathDirs = (process.env.PATH ?? "").split(path63.delimiter).filter(Boolean);
+    const pathDirs = (process.env.PATH ?? "").split(path64.delimiter).filter(Boolean);
     const home = _linkSeam.homedir();
-    const localBin = home ? path63.join(home, ".local", "bin") : null;
+    const localBin = home ? path64.join(home, ".local", "bin") : null;
     if (localBin) {
       try {
         _linkSeam.ensureDir(localBin);
@@ -25051,16 +25261,16 @@ var _linkSeam = {
     const candidates = [];
     if (localBin) candidates.push(localBin);
     try {
-      candidates.push(path63.dirname(process.execPath));
+      candidates.push(path64.dirname(process.execPath));
     } catch {
     }
     candidates.push("/usr/local/bin");
     const entry = process.argv[1];
     if (entry) {
       try {
-        candidates.push(path63.dirname(fs59.realpathSync(entry)));
+        candidates.push(path64.dirname(fs60.realpathSync(entry)));
       } catch {
-        candidates.push(path63.dirname(entry));
+        candidates.push(path64.dirname(entry));
       }
     }
     const onPathWritable = candidates.find(
@@ -25072,20 +25282,20 @@ var _linkSeam = {
   /** Current symlink target at `linkPath`, or null when absent / not a link. */
   readlink: (linkPath) => {
     try {
-      return fs59.readlinkSync(linkPath);
+      return fs60.readlinkSync(linkPath);
     } catch {
       return null;
     }
   },
-  unlink: (linkPath) => fs59.unlinkSync(linkPath),
-  symlink: (target, linkPath) => fs59.symlinkSync(target, linkPath)
+  unlink: (linkPath) => fs60.unlinkSync(linkPath),
+  symlink: (target, linkPath) => fs60.symlinkSync(target, linkPath)
 };
 function linkBdOntoPath(binaryPath) {
   if (_linkSeam.platform() === "win32") return;
   const binDir = _linkSeam.cliBinDir();
   if (!binDir) return;
   _linkSeam.ensureDir(binDir);
-  const linkPath = path63.join(binDir, "bd");
+  const linkPath = path64.join(binDir, "bd");
   if (linkPath === binaryPath) return;
   const current2 = _linkSeam.readlink(linkPath);
   if (current2 === binaryPath) return;
@@ -25094,7 +25304,7 @@ function linkBdOntoPath(binaryPath) {
   log.info("beads", `linked bd onto PATH: ${linkPath} -> ${binaryPath}`);
 }
 function setGitBeadsRole() {
-  (0, import_child_process24.execFileSync)("git", ["config", "--global", "beads.role", "contributor"], {
+  (0, import_child_process25.execFileSync)("git", ["config", "--global", "beads.role", "contributor"], {
     stdio: "ignore"
   });
 }
@@ -25280,7 +25490,7 @@ function dedupeRecipes(agents) {
 
 // src/beads/watcher.ts
 var crypto4 = __toESM(require("crypto"));
-var path64 = __toESM(require("path"));
+var path65 = __toESM(require("path"));
 var API_BASE6 = resolveApiBaseUrl();
 var DEBOUNCE_MS2 = 400;
 var ZERO_SUMMARY = {
@@ -25304,7 +25514,7 @@ var BeadsWatcher = class {
   constructor(opts) {
     this.opts = opts;
     this.bd = opts.adapter ?? new BdAdapter({ cwd: opts.cwd, beadsDir: opts.beadsDir });
-    this.feedPath = opts.feedPath ?? path64.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
+    this.feedPath = opts.feedPath ?? path65.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
     this.apiBase = opts.apiBaseUrl ?? API_BASE6;
   }
   opts;
@@ -25803,8 +26013,8 @@ function cleanupAttachmentTempFiles() {
 function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
-    const tmpPath = path67.join(os52.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
-    fs62.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
+    const tmpPath = path68.join(os53.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
+    fs63.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     pendingAttachmentFiles.add(tmpPath);
     return tmpPath;
   });
@@ -25949,7 +26159,7 @@ var sessionTerminated = async (ctx, cmd) => {
   }
   quiet(() => ctx.agent.kill());
   try {
-    const proc = (0, import_child_process25.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
+    const proc = (0, import_child_process26.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
       detached: true,
       stdio: "ignore"
     });
@@ -25968,7 +26178,7 @@ var shutdownSession = async (ctx, cmd) => {
   quiet(() => ctx.agent.kill());
   if (ctx.keepAliveCtx.inCodespace && ctx.keepAliveCtx.codespaceName) {
     try {
-      const stopProc = (0, import_child_process25.spawn)(
+      const stopProc = (0, import_child_process26.spawn)(
         "bash",
         ["-lc", `sleep 1; gh codespace stop -c ${JSON.stringify(ctx.keepAliveCtx.codespaceName)} >/dev/null 2>&1 || true`],
         { detached: true, stdio: "ignore" }
@@ -25978,7 +26188,7 @@ var shutdownSession = async (ctx, cmd) => {
     }
   }
   try {
-    const proc = (0, import_child_process25.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
+    const proc = (0, import_child_process26.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
       detached: true,
       stdio: "ignore"
     });
@@ -26022,10 +26232,10 @@ var listFiles = async (ctx, cmd, parsed) => {
   await ctx.relay.sendResult(cmd.id, "completed", result);
 };
 var envReadH = async (ctx, cmd) => {
-  const envPath = path67.join(process.cwd(), ".env");
+  const envPath = path68.join(process.cwd(), ".env");
   await restoreProjectEnvIfMissing(process.cwd(), ctx);
   try {
-    const raw = await fs62.promises.readFile(envPath, "utf8");
+    const raw = await fs63.promises.readFile(envPath, "utf8");
     await ctx.relay.sendResult(cmd.id, "completed", {
       exists: true,
       vars: parseDotenv(raw)
@@ -26056,15 +26266,15 @@ var envWriteH = async (ctx, cmd, parsed) => {
     }
     seen.add(v.key);
   }
-  const envPath = path67.join(process.cwd(), ".env");
-  const tmpPath = path67.join(process.cwd(), ".env.codeam.tmp");
+  const envPath = path68.join(process.cwd(), ".env");
+  const tmpPath = path68.join(process.cwd(), ".env.codeam.tmp");
   try {
-    await fs62.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
-    await fs62.promises.rename(tmpPath, envPath);
+    await fs63.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
+    await fs63.promises.rename(tmpPath, envPath);
     await ctx.relay.sendResult(cmd.id, "completed", { ok: true, count: vars.length });
     void syncProjectEnvUp(process.cwd(), ctx);
   } catch (err) {
-    await fs62.promises.rm(tmpPath, { force: true }).catch(() => void 0);
+    await fs63.promises.rm(tmpPath, { force: true }).catch(() => void 0);
     await ctx.relay.sendResult(cmd.id, "failed", { error: err.message });
   }
 };
@@ -26113,7 +26323,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
   let configuredAgent = rawAgentId;
   if (!configuredAgent) {
     try {
-      const raw = JSON.parse(fs62.readFileSync(headroomConfigPath(), "utf8"));
+      const raw = JSON.parse(fs63.readFileSync(headroomConfigPath(), "utf8"));
       configuredAgent = raw.agent ?? "";
     } catch {
     }
@@ -26147,7 +26357,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
     persist: persistHeadroomConfig,
     readEnabled: () => {
       try {
-        const raw = JSON.parse(fs62.readFileSync(headroomConfigPath(), "utf8"));
+        const raw = JSON.parse(fs63.readFileSync(headroomConfigPath(), "utf8"));
         return raw.enabled === true;
       } catch {
         return false;
@@ -26404,7 +26614,7 @@ var vcsAgentReviewH = async (ctx, cmd, parsed) => {
   });
   const token = ctx.pluginAuthToken;
   void (async () => {
-    const os66 = createOsStrategy();
+    const os67 = createOsStrategy();
     try {
       const report = await reviewPullRequest(
         {
@@ -26413,7 +26623,7 @@ var vcsAgentReviewH = async (ctx, cmd, parsed) => {
           baseBranch: parsed.baseBranch
         },
         {
-          runReview: (input) => new CoderabbitRuntimeStrategy(os66).runOneShot(input),
+          runReview: (input) => new CoderabbitRuntimeStrategy(os67).runOneShot(input),
           runGh: (args2) => defaultRunGh(args2),
           postReport: async (r) => {
             if (!token) return;
@@ -26469,7 +26679,7 @@ var headroomBudgetH = async (ctx, cmd) => {
   }
   let headroomActive = false;
   try {
-    const raw = JSON.parse(fs62.readFileSync(headroomConfigPath(), "utf8"));
+    const raw = JSON.parse(fs63.readFileSync(headroomConfigPath(), "utf8"));
     headroomActive = raw.enabled === true;
   } catch {
   }
@@ -26479,7 +26689,7 @@ var headroomBudgetH = async (ctx, cmd) => {
   }
   let existingConfig = { enabled: true };
   try {
-    existingConfig = JSON.parse(fs62.readFileSync(headroomConfigPath(), "utf8"));
+    existingConfig = JSON.parse(fs63.readFileSync(headroomConfigPath(), "utf8"));
   } catch {
   }
   if (payload.budgetEnabled && payload.budgetUsd != null) {
@@ -26583,7 +26793,7 @@ var defaultCliUpdateDeps = {
   // Only a truly local `codeam start` (neither marker) re-execs in place below.
   isSupervised: () => process.env["CODEAM_AUTO_APPROVE"] === "1" || process.env["CODESPACES"] === "true",
   relaunch: (args2) => {
-    const child = (0, import_child_process25.spawnSync)("codeam", args2, { stdio: "inherit", env: process.env });
+    const child = (0, import_child_process26.spawnSync)("codeam", args2, { stdio: "inherit", env: process.env });
     process.exit(child.status ?? 0);
   }
 };
@@ -26592,9 +26802,9 @@ var CLI_UPDATE_MAX_ATTEMPTS = 3;
 function buildNpmInstallInvocation(opts) {
   const entryScript = opts?.entryScript ?? process.argv[1] ?? "";
   const execPath = opts?.execPath ?? process.execPath;
-  const exists2 = opts?.existsSync ?? fs62.existsSync;
+  const exists2 = opts?.existsSync ?? fs63.existsSync;
   const platform3 = opts?.platform ?? process.platform;
-  const p2 = platform3 === "win32" ? path67.win32 : path67.posix;
+  const p2 = platform3 === "win32" ? path68.win32 : path68.posix;
   const normalized = entryScript.split(/[\\/]/).join("/");
   const marker = "/lib/node_modules/codeam-cli/";
   const markerIdx = normalized.indexOf(marker);
@@ -26616,7 +26826,7 @@ function isPermissionError(stderr) {
 function resolveGlobalNodeModulesDir(opts) {
   const entryScript = opts?.entryScript ?? process.argv[1] ?? "";
   const platform3 = opts?.platform ?? process.platform;
-  const p2 = platform3 === "win32" ? path67.win32 : path67.posix;
+  const p2 = platform3 === "win32" ? path68.win32 : path68.posix;
   const marker = "/lib/node_modules/codeam-cli/";
   const markerIdx = entryScript.split(/[\\/]/).join("/").indexOf(marker);
   if (markerIdx <= 0) return null;
@@ -26626,9 +26836,9 @@ function resolveGlobalNodeModulesDir(opts) {
 var STALE_STAGING_AGE_MS = CLI_UPDATE_INSTALL_TIMEOUT_MS;
 function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
   if (!nodeModulesDir) return 0;
-  const readdirSync15 = deps?.readdirSync ?? fs62.readdirSync;
-  const statSync17 = deps?.statSync ?? fs62.statSync;
-  const rmSync9 = deps?.rmSync ?? fs62.rmSync;
+  const readdirSync15 = deps?.readdirSync ?? fs63.readdirSync;
+  const statSync17 = deps?.statSync ?? fs63.statSync;
+  const rmSync9 = deps?.rmSync ?? fs63.rmSync;
   let removed = 0;
   let entries;
   try {
@@ -26638,7 +26848,7 @@ function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
   }
   for (const name of entries) {
     if (!/^\.codeam-cli-/.test(name)) continue;
-    const full = path67.join(nodeModulesDir, name);
+    const full = path68.join(nodeModulesDir, name);
     try {
       const st3 = statSync17(full);
       if (now - st3.mtimeMs < STALE_STAGING_AGE_MS) continue;
@@ -26664,7 +26874,7 @@ async function runNpmInstallLatest() {
     const useShell = process.platform === "win32";
     const command2 = useShell && invocation.command.includes(" ") ? `"${invocation.command}"` : invocation.command;
     const result = await new Promise((resolve9) => {
-      (0, import_child_process25.execFile)(
+      (0, import_child_process26.execFile)(
         command2,
         invocation.args,
         { timeout: CLI_UPDATE_INSTALL_TIMEOUT_MS, shell: useShell },
@@ -27278,13 +27488,13 @@ async function dispatchCommand(ctx, cmd) {
 }
 
 // src/commands/start/keep-alive.ts
-var import_child_process26 = require("child_process");
+var import_child_process27 = require("child_process");
 function buildKeepAlive(ctx) {
   let timer = null;
   async function setIdleTimeout(minutes) {
     if (!ctx.inCodespace || !ctx.codespaceName) return;
     await new Promise((resolve9) => {
-      const proc = (0, import_child_process26.spawn)(
+      const proc = (0, import_child_process27.spawn)(
         "gh",
         [
           "api",
@@ -27516,11 +27726,11 @@ function resolveTokenValue(args2) {
   }
   const fileFlag = args2.find((a) => a.startsWith("--token-file="));
   if (fileFlag) {
-    const path91 = fileFlag.slice("--token-file=".length);
+    const path92 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs63.readFileSync(path91, "utf8").trim();
-      if (content.length === 0) fail(`--token-file ${path91} is empty`);
-      rmIfExistsQuiet(path91);
+      const content = fs64.readFileSync(path92, "utf8").trim();
+      if (content.length === 0) fail(`--token-file ${path92} is empty`);
+      rmIfExistsQuiet(path92);
       return content;
     } catch (err) {
       fail(`Could not read --token-file: ${err.message}`);
@@ -27549,7 +27759,7 @@ async function claimOnce(token, pluginId, pluginSecretHash) {
     pluginId,
     ideName: "codeam-cli (codespace)",
     ideVersion: process.env.npm_package_version ?? "unknown",
-    hostname: os53.hostname(),
+    hostname: os54.hostname(),
     codespaceName: process.env.CODESPACE_NAME ?? "",
     // Current git branch of the codespace's working directory, so the
     // backend can populate `PairedSession.branch` for the codespace pair.
@@ -27610,7 +27820,7 @@ async function claim(token, pluginId, pluginSecretHash) {
   }
 }
 function pairAutoLockPath() {
-  return path68.join(os53.homedir(), ".codeam", "pair-auto.lock");
+  return path69.join(os54.homedir(), ".codeam", "pair-auto.lock");
 }
 function isLivePairAuto(pid) {
   if (!Number.isInteger(pid) || pid <= 0 || pid === process.pid) return false;
@@ -27620,7 +27830,7 @@ function isLivePairAuto(pid) {
     if (e.code !== "EPERM") return false;
   }
   try {
-    return fs63.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
+    return fs64.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
   } catch {
     return true;
   }
@@ -27630,24 +27840,24 @@ function isLiveCodeam(pid) {
 }
 function daemonLockPath(sessionId) {
   const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
-  return path68.join(os53.homedir(), ".codeam", `daemon-${safe}.lock`);
+  return path69.join(os54.homedir(), ".codeam", `daemon-${safe}.lock`);
 }
 function acquireDaemonLock(sessionId) {
   const lockPath = daemonLockPath(sessionId);
   try {
-    fs63.mkdirSync(path68.dirname(lockPath), { recursive: true });
+    fs64.mkdirSync(path69.dirname(lockPath), { recursive: true });
     try {
-      fs63.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs64.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs63.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs64.readFileSync(lockPath, "utf8").trim());
       if (holder && holder !== process.pid && isLiveCodeam(holder)) return false;
-      fs63.writeFileSync(lockPath, String(process.pid));
+      fs64.writeFileSync(lockPath, String(process.pid));
     }
     const release3 = () => {
       try {
-        if (fs63.existsSync(lockPath) && Number(fs63.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs63.unlinkSync(lockPath);
+        if (fs64.existsSync(lockPath) && Number(fs64.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs64.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -27669,19 +27879,19 @@ function acquireDaemonLock(sessionId) {
 function acquireSingletonLock() {
   const lockPath = pairAutoLockPath();
   try {
-    fs63.mkdirSync(path68.dirname(lockPath), { recursive: true });
+    fs64.mkdirSync(path69.dirname(lockPath), { recursive: true });
     try {
-      fs63.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs64.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs63.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs64.readFileSync(lockPath, "utf8").trim());
       if (isLivePairAuto(holder)) return false;
-      fs63.writeFileSync(lockPath, String(process.pid));
+      fs64.writeFileSync(lockPath, String(process.pid));
     }
     process.once("exit", () => {
       try {
-        if (fs63.existsSync(lockPath) && Number(fs63.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs63.unlinkSync(lockPath);
+        if (fs64.existsSync(lockPath) && Number(fs64.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs64.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -28135,178 +28345,6 @@ var AgentService = class _AgentService {
 // src/agents/acp/adapters.ts
 var path70 = __toESM(require("path"));
 
-// src/agents/acp/agent-binary.ts
-var import_fs6 = __toESM(require("fs"));
-var import_os11 = __toESM(require("os"));
-var import_path8 = __toESM(require("path"));
-var import_child_process27 = require("child_process");
-function currentPlatformKey() {
-  return `${process.platform}-${process.arch}`;
-}
-var SDK_PKG = "@anthropic-ai/claude-agent-sdk";
-function resolveSdkDirViaRequire(req = require) {
-  try {
-    return import_path8.default.dirname(req.resolve(`${SDK_PKG}/package.json`));
-  } catch {
-  }
-  try {
-    let dir = import_path8.default.dirname(req.resolve(SDK_PKG));
-    for (let i = 0; i < 5; i++) {
-      if (import_path8.default.basename(dir) === "claude-agent-sdk") return dir;
-      const parent = import_path8.default.dirname(dir);
-      if (parent === dir) break;
-      dir = parent;
-    }
-    return null;
-  } catch {
-    return null;
-  }
-}
-function defaultSdkDir() {
-  return resolveSdkDirViaRequire();
-}
-function resolveClaudeNativeBinary(deps = {}) {
-  const existsSync29 = deps.existsSync ?? import_fs6.default.existsSync;
-  const platformKey = deps.platformKey ?? currentPlatformKey();
-  const sdkDir = deps.sdkDir !== void 0 ? deps.sdkDir : defaultSdkDir();
-  if (!sdkDir) return null;
-  const scopeDir = import_path8.default.dirname(sdkDir);
-  const binName = platformKey.startsWith("win32-") ? "claude.exe" : "claude";
-  const candidate = import_path8.default.join(scopeDir, `claude-agent-sdk-${platformKey}`, binName);
-  return existsSync29(candidate) ? candidate : null;
-}
-var realSleep = (ms) => new Promise((resolve9) => setTimeout(resolve9, ms));
-async function waitForClaudeNativeBinary(opts = {}) {
-  const timeoutMs = opts.timeoutMs ?? 18e4;
-  const pollMs = opts.pollMs ?? 500;
-  const now = opts.now ?? Date.now;
-  const sleep5 = opts.sleep ?? realSleep;
-  const deps = {
-    sdkDir: opts.sdkDir,
-    platformKey: opts.platformKey,
-    existsSync: opts.existsSync
-  };
-  const deadline = now() + timeoutMs;
-  let found = resolveClaudeNativeBinary(deps);
-  if (found) return found;
-  while (now() < deadline) {
-    await sleep5(pollMs);
-    found = resolveClaudeNativeBinary(deps);
-    if (found) return found;
-  }
-  return resolveClaudeNativeBinary(deps);
-}
-function isCommandOnPath(cmd, probe = defaultWhich) {
-  return probe(cmd);
-}
-function defaultWhich(cmd) {
-  const finder = process.platform === "win32" ? "where" : "which";
-  try {
-    const res = (0, import_child_process27.spawnSync)(finder, [cmd], { stdio: "ignore" });
-    return res.status === 0;
-  } catch {
-    return false;
-  }
-}
-async function waitForCommandOnPath(cmd, opts = {}) {
-  const timeoutMs = opts.timeoutMs ?? 18e4;
-  const pollMs = opts.pollMs ?? 500;
-  const now = opts.now ?? Date.now;
-  const sleep5 = opts.sleep ?? realSleep;
-  const probe = opts.probe;
-  const check = () => isCommandOnPath(cmd, probe);
-  const deadline = now() + timeoutMs;
-  if (check()) return true;
-  while (now() < deadline) {
-    await sleep5(pollMs);
-    if (check()) return true;
-  }
-  return check();
-}
-function resolveCursorAgentBinary(deps = {}) {
-  const existsSync29 = deps.existsSync ?? import_fs6.default.existsSync;
-  const platform3 = deps.platform ?? process.platform;
-  const env = deps.env ?? process.env;
-  if (platform3 === "win32") {
-    const localAppData = env.LOCALAPPDATA;
-    if (!localAppData) return null;
-    const exe = import_path8.default.win32.join(localAppData, "cursor-agent", "cursor-agent.exe");
-    return existsSync29(exe) ? exe : null;
-  }
-  const home = deps.homedir ?? import_os11.default.homedir();
-  const unix = import_path8.default.posix.join(home, ".local", "bin", "cursor-agent");
-  return existsSync29(unix) ? unix : null;
-}
-async function waitForCursorAgent(opts = {}) {
-  const timeoutMs = opts.timeoutMs ?? 18e4;
-  const pollMs = opts.pollMs ?? 500;
-  const now = opts.now ?? Date.now;
-  const sleep5 = opts.sleep ?? realSleep;
-  const check = () => resolveCursorAgentBinary(opts) !== null || isCommandOnPath("cursor-agent", opts.probe);
-  const deadline = now() + timeoutMs;
-  if (check()) return true;
-  while (now() < deadline) {
-    await sleep5(pollMs);
-    if (check()) return true;
-  }
-  return check();
-}
-var ADAPTER_MODULE_LOAD_ERROR_RE = /ERR_MODULE_NOT_FOUND|Cannot find module|ERR_REQUIRE_ESM|ERR_UNKNOWN_BUILTIN_MODULE|ERR_UNSUPPORTED_DIR_IMPORT|ERR_PACKAGE_PATH_NOT_EXPORTED|ERR_INVALID_PACKAGE_CONFIG|ERR_INVALID_PACKAGE_TARGET|ERR_INVALID_MODULE_SPECIFIER|node:internal\/modules\/|Directory import|SyntaxError|Unexpected (token|end|identifier)|missing \) after argument list/i;
-var PERMANENT_ADAPTER_STARTUP_RE = /IneligibleTierError|UNSUPPORTED_CLIENT|no longer supported for Gemini Code Assist|not eligible for Gemini Code Assist|Error authenticating|ProjectIdRequiredError/i;
-function probeAdapterModuleGraph(command2, args2, opts = {}) {
-  const livenessMs = opts.livenessMs ?? 400;
-  const spawnFn = opts.spawnFn ?? import_child_process27.spawn;
-  return new Promise((resolve9) => {
-    let settled = false;
-    let stderr = "";
-    let timer;
-    let child;
-    const finish = (r) => {
-      if (settled) return;
-      settled = true;
-      if (timer) clearTimeout(timer);
-      try {
-        child?.kill("SIGKILL");
-      } catch {
-      }
-      resolve9(r);
-    };
-    try {
-      child = spawnFn(command2, [...args2], { stdio: ["pipe", "ignore", "pipe"] });
-    } catch {
-      resolve9("ok");
-      return;
-    }
-    child.stderr?.on("data", (d3) => {
-      stderr += d3.toString();
-      if (stderr.length > 8192) stderr = stderr.slice(-8192);
-    });
-    child.on("error", () => finish("ok"));
-    child.on("exit", (code) => {
-      if (code !== 0 && code !== null && !PERMANENT_ADAPTER_STARTUP_RE.test(stderr)) {
-        finish("transient");
-      } else {
-        finish("ok");
-      }
-    });
-    timer = setTimeout(() => finish("ok"), livenessMs);
-  });
-}
-async function waitForAdapterModuleGraph(command2, args2, opts = {}) {
-  const timeoutMs = opts.timeoutMs ?? 18e4;
-  const pollMs = opts.pollMs ?? 500;
-  const now = opts.now ?? Date.now;
-  const sleep5 = opts.sleep ?? realSleep;
-  const probeOpts = { livenessMs: opts.livenessMs, spawnFn: opts.spawnFn };
-  const deadline = now() + timeoutMs;
-  if (await probeAdapterModuleGraph(command2, args2, probeOpts) === "ok") return true;
-  while (now() < deadline) {
-    await sleep5(pollMs);
-    if (await probeAdapterModuleGraph(command2, args2, probeOpts) === "ok") return true;
-  }
-  return false;
-}
-
 // src/agents/kimi/installer.ts
 var import_node_child_process27 = require("child_process");
 var import_node_os10 = require("os");
@@ -28455,7 +28493,10 @@ var REGISTRY = {
       args: [bin],
       requiresAgentBinary: "codex",
       // codex ships via `npm install -g @openai/codex` → PATH binary.
-      waitForBinary: (o) => waitForCommandOnPath("codex", o)
+      waitForBinary: (o) => {
+        augmentUserLocalBinPaths();
+        return waitForCommandOnPath("codex", o);
+      }
     };
   },
   // Cursor speaks ACP NATIVELY via `cursor-agent acp` ("Start the Cursor
@@ -28481,7 +28522,30 @@ var REGISTRY = {
     command: resolveCursorAgentBinary() ?? "cursor-agent",
     args: ["acp"],
     requiresAgentBinary: "cursor-agent",
-    waitForBinary: (o) => waitForCursorAgent(o)
+    // Stale-PATH guard — same class as codex/gemini above, kept here so the
+    // PROBE and the SPAWN agree about what "ready" means.
+    //
+    // On an in-session switch the adapter spec is resolved BEFORE the install
+    // (`ensureAgentBinaryForSwitch`'s first step), so with no cursor-agent on
+    // disk yet `resolveCursorAgentBinary()` returns null and the spec is
+    // PERMANENTLY CACHED with the bare name `cursor-agent`. The installer then
+    // drops the binary in ~/.local/bin, which a systemd-minimal PATH lacks,
+    // yet `waitForCursorAgent` still reports READY (it probes the absolute
+    // install location).
+    //
+    // ⚠️ Scope, honestly: this is defence in depth, NOT a live outage fix.
+    // `AcpClient.start` already spawns with `expandPathForAgentBinaries(...)`
+    // (client.ts), which folds the same dirs in, so the production ACP spawn
+    // very likely resolved anyway. What was genuinely wrong is that a probe
+    // could report ready while a *plain* spawn from the same process could not
+    // find the binary — the real-install gate
+    // (`__tests__/integration/agent-install.int.test.ts`) spawns without that
+    // expansion and caught the divergence. Aligning the probe with codex/gemini
+    // costs one idempotent call and removes the discrepancy.
+    waitForBinary: (o) => {
+      augmentUserLocalBinPaths();
+      return waitForCursorAgent(o);
+    }
   }),
   // Gemini speaks ACP natively via `gemini --acp` — no npm adapter
   // package, just the user-installed `gemini` binary on PATH. Same
@@ -28499,7 +28563,12 @@ var REGISTRY = {
     // codeam was launched from.
     args: ["--skip-trust", "--acp"],
     requiresAgentBinary: "gemini",
-    waitForBinary: (o) => waitForCommandOnPath("gemini", o)
+    // gemini ships via `npm install -g @google/gemini-cli` → PATH binary,
+    // same stale-PATH exposure as codex above.
+    waitForBinary: (o) => {
+      augmentUserLocalBinPaths();
+      return waitForCommandOnPath("gemini", o);
+    }
   }),
   // Kimi Code (Moonshot) speaks ACP natively via `kimi acp` — a stdio
   // JSON-RPC server that answers `initialize` (agentInfo `Kimi Code CLI`,
@@ -34688,7 +34757,7 @@ async function ensureAgentBinaryForSwitch(agentId, installScript, deps = {}) {
     };
   }
   log.info("switchAgent", `installing ${agentId} binary (missing on PATH)`);
-  const res = await runInstall(installScript, { logScope: "switchAgent" });
+  const res = await runInstall(installScript, { logScope: "switchAgent", timeoutMs: 3e5 });
   if (!res.ok) {
     return {
       ok: false,
@@ -34696,6 +34765,22 @@ async function ensureAgentBinaryForSwitch(agentId, installScript, deps = {}) {
     };
   }
   if (await spec.waitForBinary({ timeoutMs: 3e4 })) return { ok: true };
+  log.info(
+    "switchAgent",
+    "install probe failed \u2014 retrying install once (half-finished bin link class)"
+  );
+  deps.onRetry?.();
+  const retryRes = await runInstall(installScript, {
+    logScope: "switchAgent",
+    timeoutMs: 3e5
+  });
+  if (!retryRes.ok) {
+    return {
+      ok: false,
+      error: retryRes.timedOut ? `${displayName(agentId)} install timed out.` : `${displayName(agentId)} install failed.`
+    };
+  }
+  if (await spec.waitForBinary({ timeoutMs: 3e4 })) return { ok: true };
   return {
     ok: false,
     error: `${displayName(agentId)} installed but its binary never appeared on PATH.`
@@ -34729,7 +34814,11 @@ async function performAgentSwitch(deps, rawAgentId, fastPath = {}) {
   const from = deps.currentAgent();
   const target = resolveSwitchTarget(rawAgentId, from);
   if (!target.ok) {
-    return { ok: false, agentId: typeof rawAgentId === "string" ? rawAgentId : "", error: target.error };
+    return {
+      ok: false,
+      agentId: typeof rawAgentId === "string" ? rawAgentId : "",
+      error: target.error
+    };
   }
   const agentId = target.agentId;
   const emitStatus = (status2) => deps.postEvent("switch_agent_status", { ...status2 });
@@ -34760,7 +34849,9 @@ async function performAgentSwitch(deps, rawAgentId, fastPath = {}) {
   }
   if (!fastPath.skipInstall) {
     void emitStep("install");
-    const bin = await deps.ensureBinary(agentId, installScript);
+    const bin = await deps.ensureBinary(agentId, installScript, () => {
+      void emitStep("install");
+    });
     if (!bin.ok) return fail2(bin.error);
   }
   void emitStep("restart");
@@ -34776,7 +34867,9 @@ async function performAgentSwitch(deps, rawAgentId, fastPath = {}) {
         `Switching to ${displayName(agentId)} failed and ${displayName(from)} couldn't be restored \u2014 restart the session.`
       );
     }
-    return fail2(`Couldn't start ${displayName(agentId)} \u2014 the session stays on ${displayName(from)}.`);
+    return fail2(
+      `Couldn't start ${displayName(agentId)} \u2014 the session stays on ${displayName(from)}.`
+    );
   }
   try {
     deps.persistAgent(agentId);
@@ -35848,7 +35941,7 @@ function defaultRunGit(cwd, args2) {
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs80 = await import("fs/promises");
+  const fs81 = await import("fs/promises");
   const out2 = [];
   await walk(workingDir, 0);
   return out2;
@@ -35856,7 +35949,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (depth > maxDepth) return;
     let entries = [];
     try {
-      const dirents = await fs80.readdir(dir, { withFileTypes: true });
+      const dirents = await fs81.readdir(dir, { withFileTypes: true });
       entries = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -37091,12 +37184,124 @@ function buildMcpServersForStart(ctx) {
   return servers;
 }
 
-// src/integrations/detect-stack.ts
+// src/services/local-mcp-servers.ts
 var import_node_fs12 = __toESM(require("fs"));
+var import_node_os12 = __toESM(require("os"));
 var import_node_path11 = __toESM(require("path"));
+var MAX_LOCAL_MCP_SERVERS = 10;
+function localMcpServersPath() {
+  return import_node_path11.default.join(import_node_os12.default.homedir(), ".codeam", "mcp-servers.json");
+}
+function isStringArray(v) {
+  return Array.isArray(v) && v.every((item) => typeof item === "string");
+}
+function toEnvVariables(v) {
+  if (v === void 0) return [];
+  if (v === null || typeof v !== "object" || Array.isArray(v)) return null;
+  const entries = Object.entries(v);
+  if (entries.some(([, value]) => typeof value !== "string")) return null;
+  return entries.map(([name, value]) => ({ name, value }));
+}
+function isValidEntry(entry) {
+  return typeof entry.name === "string" && entry.name.length > 0 && typeof entry.command === "string" && entry.command.length > 0 && isStringArray(entry.args);
+}
+function readLocalMcpServers() {
+  let raw;
+  try {
+    raw = import_node_fs12.default.readFileSync(localMcpServersPath(), "utf8");
+  } catch {
+    return [];
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (err) {
+    log.warn(
+      "localMcp",
+      `~/.codeam/mcp-servers.json is not valid JSON \u2014 ignoring (${err instanceof Error ? err.message : String(err)})`
+    );
+    return [];
+  }
+  if (!Array.isArray(parsed)) {
+    log.warn("localMcp", "~/.codeam/mcp-servers.json must be a JSON array \u2014 ignoring");
+    return [];
+  }
+  const servers = [];
+  let sawInvalid = false;
+  let sawTruncated = false;
+  let sawDuplicate = false;
+  const seenNames = /* @__PURE__ */ new Set();
+  for (const entry of parsed) {
+    if (servers.length >= MAX_LOCAL_MCP_SERVERS) {
+      sawTruncated = true;
+      continue;
+    }
+    if (entry === null || typeof entry !== "object" || !isValidEntry(entry)) {
+      sawInvalid = true;
+      continue;
+    }
+    const env = toEnvVariables(entry.env);
+    if (env === null) {
+      sawInvalid = true;
+      continue;
+    }
+    if (seenNames.has(entry.name)) {
+      sawDuplicate = true;
+      continue;
+    }
+    seenNames.add(entry.name);
+    servers.push({ name: entry.name, command: entry.command, args: entry.args, env });
+  }
+  if (sawDuplicate) {
+    log.warn(
+      "localMcp",
+      "~/.codeam/mcp-servers.json has duplicate server names \u2014 kept the first of each"
+    );
+  }
+  if (sawInvalid) {
+    log.warn(
+      "localMcp",
+      '~/.codeam/mcp-servers.json contains one or more invalid entries \u2014 skipped (each needs a non-empty "name", non-empty "command", "args" as a string array, and "env" as an object of string values)'
+    );
+  }
+  if (sawTruncated) {
+    log.warn(
+      "localMcp",
+      `~/.codeam/mcp-servers.json has more than ${MAX_LOCAL_MCP_SERVERS} entries \u2014 only the first ${MAX_LOCAL_MCP_SERVERS} were loaded`
+    );
+  }
+  if (servers.length) {
+    log.info(
+      "localMcp",
+      `loaded ${servers.length} local MCP server(s): ${servers.map((s) => s.name).join(", ")}`
+    );
+  }
+  return servers;
+}
+function mergeWithLocalMcpServers(integrationServers) {
+  const localServers = readLocalMcpServers();
+  if (localServers.length === 0) return integrationServers;
+  const integrationNames = new Set(integrationServers.map((s) => s.name));
+  const merged = [...integrationServers];
+  for (const local of localServers) {
+    if (integrationNames.has(local.name)) {
+      log.warn(
+        "localMcp",
+        `local MCP server "${local.name}" collides with an Agent Toolkit integration of the same name \u2014 the integration wins, skipping the local entry`
+      );
+      continue;
+    }
+    merged.push(local);
+  }
+  return merged;
+}
+
+// src/integrations/detect-stack.ts
+var import_node_fs13 = __toESM(require("fs"));
+var import_node_path12 = __toESM(require("path"));
 function readSafe(cwd, rel) {
   try {
-    return import_node_fs12.default.readFileSync(import_node_path11.default.join(cwd, rel), "utf8");
+    return import_node_fs13.default.readFileSync(import_node_path12.default.join(cwd, rel), "utf8");
   } catch {
     return "";
   }
@@ -37279,35 +37484,35 @@ function buildAcpPromptBlocks(payload) {
 }
 
 // src/agents/agent-standard.ts
-var fs75 = __toESM(require("fs"));
-var path82 = __toESM(require("path"));
-var os60 = __toESM(require("os"));
-function ensureAgentStandard(homeDir2 = os60.homedir()) {
+var fs76 = __toESM(require("fs"));
+var path83 = __toESM(require("path"));
+var os61 = __toESM(require("os"));
+function ensureAgentStandard(homeDir2 = os61.homedir()) {
   try {
-    const file = path82.join(homeDir2, ".claude", "CLAUDE.md");
+    const file = path83.join(homeDir2, ".claude", "CLAUDE.md");
     let existing = "";
     try {
-      existing = fs75.readFileSync(file, "utf8");
+      existing = fs76.readFileSync(file, "utf8");
     } catch {
     }
     if (existing.includes(AGENT_STANDARD_MARKER)) return;
-    fs75.mkdirSync(path82.dirname(file), { recursive: true });
+    fs76.mkdirSync(path83.dirname(file), { recursive: true });
     const next = existing.trim() ? `${existing.trimEnd()}
 
 ${AGENT_STANDARD_BLOCK}
 ` : `${AGENT_STANDARD_BLOCK}
 `;
-    fs75.writeFileSync(file, next);
+    fs76.writeFileSync(file, next);
   } catch {
   }
 }
 var _agentStandardSeam = {
   isLocalSession: () => isLocalSession(),
-  markerPath: (sessionId) => path82.join(os60.homedir(), ".codeam", "agent-standard", `${sessionId}.done`),
-  exists: (p2) => fs75.existsSync(p2),
+  markerPath: (sessionId) => path83.join(os61.homedir(), ".codeam", "agent-standard", `${sessionId}.done`),
+  exists: (p2) => fs76.existsSync(p2),
   write: (p2) => {
-    fs75.mkdirSync(path82.dirname(p2), { recursive: true });
-    fs75.writeFileSync(p2, "");
+    fs76.mkdirSync(path83.dirname(p2), { recursive: true });
+    fs76.writeFileSync(p2, "");
   }
 };
 function isClaude(agent) {
@@ -38245,12 +38450,14 @@ async function integrationsSyncH(ctx) {
     const previousIds = new Set((readIntegrationsManifest()?.integrations ?? []).map((e) => e.id));
     persistIntegrationsManifest(manifest);
     await prewarmNewMcpEntries(manifest, previousIds);
-    const servers = buildMcpServersForStart({
-      sessionId: opts.sessionId,
-      pluginId: opts.pluginId,
-      pluginAuthToken: opts.pluginAuthToken,
-      pollSecret: opts.pollSecret
-    });
+    const servers = mergeWithLocalMcpServers(
+      buildMcpServersForStart({
+        sessionId: opts.sessionId,
+        pluginId: opts.pluginId,
+        pluginAuthToken: opts.pluginAuthToken,
+        pollSecret: opts.pollSecret
+      })
+    );
     const applied = await client3.reprovisionMcp(servers);
     await relay.sendResult(cmd.id, "completed", {
       synced: true,
@@ -39348,7 +39555,7 @@ async function runAcpSession(opts) {
     provisionCredential: (agentId, auth) => {
       switchCredentialEnv = provisionAgentCredentials(agentId, auth);
     },
-    ensureBinary: (agentId, installScript) => ensureAgentBinaryForSwitch(agentId, installScript),
+    ensureBinary: (agentId, installScript, onRetry) => ensureAgentBinaryForSwitch(agentId, installScript, { onRetry }),
     swapRuntime: relaunchWith,
     revertRuntime: relaunchWith,
     persistAgent: (agentId) => setSessionAgent(opts.pluginId, agentId),
@@ -40515,9 +40722,9 @@ function startClaudeCredentialSync(opts) {
 }
 
 // src/beads/workflow-hint.ts
-var fs76 = __toESM(require("fs"));
-var path83 = __toESM(require("path"));
-var os61 = __toESM(require("os"));
+var fs77 = __toESM(require("fs"));
+var path84 = __toESM(require("path"));
+var os62 = __toESM(require("os"));
 var BEADS_HINT_MARKER = "<!-- codeam:beads-workflow -->";
 var BEADS_HINT = `${BEADS_HINT_MARKER}
 # Beads (bd) \u2014 task tracking + persistent memory (ALWAYS use it)
@@ -40531,29 +40738,29 @@ This environment uses **bd (beads)** for issue/task tracking and persistent memo
 - \`bd ready\` (available work) \xB7 \`bd show <id>\` \xB7 \`bd update <id> --claim\` \xB7 \`bd close <id>\`.
 - Use \`bd remember "..."\` for persistent knowledge \u2014 do NOT use MEMORY.md files.
 ${BEADS_HINT_MARKER}`;
-function ensureBeadsWorkflowHint(homeDir2 = os61.homedir()) {
+function ensureBeadsWorkflowHint(homeDir2 = os62.homedir()) {
   try {
-    const file = path83.join(homeDir2, ".claude", "CLAUDE.md");
+    const file = path84.join(homeDir2, ".claude", "CLAUDE.md");
     let existing = "";
     try {
-      existing = fs76.readFileSync(file, "utf8");
+      existing = fs77.readFileSync(file, "utf8");
     } catch {
     }
     if (existing.includes(BEADS_HINT_MARKER)) return;
-    fs76.mkdirSync(path83.dirname(file), { recursive: true });
+    fs77.mkdirSync(path84.dirname(file), { recursive: true });
     const next = existing.trim() ? `${existing.trimEnd()}
 
 ${BEADS_HINT}
 ` : `${BEADS_HINT}
 `;
-    fs76.writeFileSync(file, next);
+    fs77.writeFileSync(file, next);
   } catch {
   }
 }
 
 // src/skills/provision.ts
-var import_node_os12 = __toESM(require("os"));
-function provisionSkillsForStart(home = import_node_os12.default.homedir()) {
+var import_node_os13 = __toESM(require("os"));
+function provisionSkillsForStart(home = import_node_os13.default.homedir()) {
   const materialized = [];
   try {
     const manifest = readSkillsManifest();
@@ -40918,7 +41125,7 @@ var AcpDriver = class {
 };
 
 // src/baton/transcript-mirror.ts
-var fs77 = __toESM(require("fs"));
+var fs78 = __toESM(require("fs"));
 var TranscriptMirror = class {
   constructor(deps) {
     this.deps = deps;
@@ -40985,7 +41192,7 @@ var TranscriptMirror = class {
   }
 };
 function defaultWatch(file, onChange) {
-  const w3 = fs77.watch(file, { persistent: false }, () => onChange());
+  const w3 = fs78.watch(file, { persistent: false }, () => onChange());
   return () => w3.close();
 }
 
@@ -41283,16 +41490,16 @@ function keepDeviceAwake(deps = {}) {
 }
 
 // src/agents/claude/onboarding.ts
-var fs78 = __toESM(require("fs"));
-var os63 = __toESM(require("os"));
-var path84 = __toESM(require("path"));
+var fs79 = __toESM(require("fs"));
+var os64 = __toESM(require("os"));
+var path85 = __toESM(require("path"));
 var ONBOARDING_VERSION_SENTINEL = "9999.0.0";
 function ensureClaudeOnboarded(cwd) {
   try {
-    const file = path84.join(os63.homedir(), ".claude.json");
+    const file = path85.join(os64.homedir(), ".claude.json");
     let config = {};
     try {
-      config = JSON.parse(fs78.readFileSync(file, "utf8"));
+      config = JSON.parse(fs79.readFileSync(file, "utf8"));
     } catch {
     }
     let changed = false;
@@ -41317,8 +41524,8 @@ function ensureClaudeOnboarded(cwd) {
       }
     }
     if (!changed) return;
-    fs78.mkdirSync(path84.dirname(file), { recursive: true });
-    fs78.writeFileSync(file, JSON.stringify(config, null, 2));
+    fs79.mkdirSync(path85.dirname(file), { recursive: true });
+    fs79.writeFileSync(file, JSON.stringify(config, null, 2));
     log.info(
       "claude",
       `pre-completed Claude onboarding${cwd ? ` + trusted workspace ${cwd}` : ""}`
@@ -41436,12 +41643,14 @@ async function start(requestedAgent, presetSession) {
     beads = started;
     return started;
   });
-  const mcpServers = buildMcpServersForStart({
-    sessionId: session.id,
-    pluginId,
-    pluginAuthToken: session.pluginAuthToken ?? void 0,
-    pollSecret: session.pollSecret
-  });
+  const mcpServers = mergeWithLocalMcpServers(
+    buildMcpServersForStart({
+      sessionId: session.id,
+      pluginId,
+      pluginAuthToken: session.pluginAuthToken ?? void 0,
+      pollSecret: session.pollSecret
+    })
+  );
   provisionSkillsForStart();
   const depsReady = process.env.CODESPACES === "true" ? provisionProjectDependencies(cwd).catch(() => void 0) : Promise.resolve();
   if (process.env.CODESPACES === "true") {
@@ -42050,7 +42259,7 @@ var import_picocolors11 = __toESM(require("picocolors"));
 var import_child_process30 = require("child_process");
 var import_util4 = require("util");
 var import_picocolors9 = __toESM(require("picocolors"));
-var path85 = __toESM(require("path"));
+var path86 = __toESM(require("path"));
 var execFileP6 = (0, import_util4.promisify)(import_child_process30.execFile);
 var MAX_BUFFER = 8 * 1024 * 1024;
 function resetStdinForChild() {
@@ -42539,7 +42748,7 @@ var GitHubCodespacesProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path85.posix.dirname(remotePath);
+    const remoteDir = path86.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote(remoteDir)}`,
       `cat > ${shellQuote(remotePath)}`
@@ -42609,7 +42818,7 @@ function shellQuote(s) {
 // src/services/providers/gitpod.ts
 var import_child_process31 = require("child_process");
 var import_util5 = require("util");
-var path86 = __toESM(require("path"));
+var path87 = __toESM(require("path"));
 var import_picocolors10 = __toESM(require("picocolors"));
 var execFileP7 = (0, import_util5.promisify)(import_child_process31.execFile);
 var MAX_BUFFER2 = 8 * 1024 * 1024;
@@ -42849,7 +43058,7 @@ var GitpodProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path86.posix.dirname(remotePath);
+    const remoteDir = path87.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote2(remoteDir)}`,
       `cat > ${shellQuote2(remotePath)}`
@@ -42885,7 +43094,7 @@ function shellQuote2(s) {
 // src/services/providers/gitlab-workspaces.ts
 var import_child_process32 = require("child_process");
 var import_util6 = require("util");
-var path87 = __toESM(require("path"));
+var path88 = __toESM(require("path"));
 var execFileP8 = (0, import_util6.promisify)(import_child_process32.execFile);
 var MAX_BUFFER3 = 8 * 1024 * 1024;
 var GITLAB_API_BASE = process.env.CODEAM_GITLAB_API_URL ?? "https://gitlab.com/api/v4";
@@ -43145,7 +43354,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
-    const remoteDir = path87.posix.dirname(remotePath);
+    const remoteDir = path88.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote3(remoteDir)}`, `cat > ${shellQuote3(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote3(remotePath)}`);
@@ -43213,7 +43422,7 @@ function shellQuote3(s) {
 // src/services/providers/railway.ts
 var import_child_process33 = require("child_process");
 var import_util7 = require("util");
-var path88 = __toESM(require("path"));
+var path89 = __toESM(require("path"));
 var execFileP9 = (0, import_util7.promisify)(import_child_process33.execFile);
 var MAX_BUFFER4 = 8 * 1024 * 1024;
 function resetStdinForChild4() {
@@ -43449,7 +43658,7 @@ var RailwayProvider = class {
     if (!projectId || !serviceId) {
       throw new Error("Invalid Railway workspace id (expected projectId/serviceId).");
     }
-    const remoteDir = path88.posix.dirname(remotePath);
+    const remoteDir = path89.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote4(remoteDir)}`, `cat > ${shellQuote4(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote4(remotePath)}`);
@@ -44095,8 +44304,8 @@ async function invite() {
 var import_node_dns = require("dns");
 var import_node_util5 = require("util");
 var import_node_crypto13 = require("crypto");
-var fs79 = __toESM(require("fs"));
-var path89 = __toESM(require("path"));
+var fs80 = __toESM(require("fs"));
+var path90 = __toESM(require("path"));
 var import_picocolors14 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util5.promisify)(import_node_dns.resolve);
 async function checkDns(apiBase2) {
@@ -44152,13 +44361,13 @@ async function checkHealth(apiBase2) {
   }
 }
 function checkConfigDir() {
-  const dir = path89.join(require("os").homedir(), ".codeam");
+  const dir = path90.join(require("os").homedir(), ".codeam");
   try {
-    fs79.mkdirSync(dir, { recursive: true, mode: 448 });
-    const probe = path89.join(dir, ".doctor-probe");
-    fs79.writeFileSync(probe, "ok", { mode: 384 });
-    const read2 = fs79.readFileSync(probe, "utf8");
-    fs79.unlinkSync(probe);
+    fs80.mkdirSync(dir, { recursive: true, mode: 448 });
+    const probe = path90.join(dir, ".doctor-probe");
+    fs80.writeFileSync(probe, "ok", { mode: 384 });
+    const read2 = fs80.readFileSync(probe, "utf8");
+    fs80.unlinkSync(probe);
     if (read2 !== "ok") throw new Error("write/read round-trip mismatch");
     return {
       id: "config-dir",
@@ -44198,9 +44407,9 @@ function checkSessions() {
   }
 }
 function checkAgentBinaries() {
-  const os66 = createOsStrategy();
+  const os67 = createOsStrategy();
   return getEnabledAgents().map((meta) => {
-    const found = os66.findInPath(meta.binaryName);
+    const found = os67.findInPath(meta.binaryName);
     return {
       id: `agent-${meta.id}`,
       label: `Agent binary: ${meta.displayName} (${meta.binaryName})`,
@@ -44222,7 +44431,7 @@ function checkNodePty() {
       detail: "not required on this platform"
     };
   }
-  const vendoredPath = path89.join(__dirname, "vendor", "node-pty");
+  const vendoredPath = path90.join(__dirname, "vendor", "node-pty");
   for (const target of [vendoredPath, "node-pty"]) {
     try {
       require(target);
@@ -44264,7 +44473,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.65.0" : "0.0.0-dev";
+  const cliVersion = true ? "2.65.2" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -44462,9 +44671,9 @@ async function completion(args2) {
 
 // src/integrations/mcp-run.ts
 var import_node_child_process34 = require("child_process");
-var import_node_fs13 = require("fs");
-var import_node_os13 = __toESM(require("os"));
-var import_node_path12 = __toESM(require("path"));
+var import_node_fs14 = require("fs");
+var import_node_os14 = __toESM(require("os"));
+var import_node_path13 = __toESM(require("path"));
 
 // src/integrations/token-client.ts
 var REFRESH_AHEAD_MS = 5 * 60 * 1e3;
@@ -44544,13 +44753,13 @@ function commandExists(command2) {
 }
 function localBinCandidates(command2) {
   return [
-    import_node_path12.default.join(import_node_os13.default.homedir(), ".local", "bin", command2),
-    import_node_path12.default.join(import_node_os13.default.homedir(), ".cargo", "bin", command2)
+    import_node_path13.default.join(import_node_os14.default.homedir(), ".local", "bin", command2),
+    import_node_path13.default.join(import_node_os14.default.homedir(), ".cargo", "bin", command2)
   ];
 }
 function resolveLauncherPath(command2, deps = {
   commandExists,
-  existsSync: import_node_fs13.existsSync
+  existsSync: import_node_fs14.existsSync
 }) {
   if (deps.commandExists(command2)) return command2;
   for (const candidate of localBinCandidates(command2)) {
@@ -44655,7 +44864,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.65.0" : "unknown";
+  const v = true ? "2.65.2" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 
@@ -44804,10 +45013,10 @@ var EXIT_CODE_NAMES = {
 };
 
 // src/index.ts
-var os65 = __toESM(require("os"));
+var os66 = __toESM(require("os"));
 if (!process.env.HOME) {
   try {
-    const home = os65.homedir();
+    const home = os66.homedir();
     if (home) process.env.HOME = home;
   } catch {
   }