codeam-cli 2.65.2 → 2.65.3

package/dist/index.js

@@ -3321,9 +3321,9 @@ var _default = makeConfig();
 var { getConfig, ensurePluginId, addSession, removeSession, setActiveSession, getActiveSession, getActiveSessionForAgent, setDisable1mContext, setSessionAgent, setSquadAuto, getSquadAuto, clearAll, saveCliConfig, loadCliConfig } = _default;
 
 // src/commands/pair-auto.ts
-var fs64 = __toESM(require("fs"));
-var os54 = __toESM(require("os"));
-var path69 = __toESM(require("path"));
+var fs65 = __toESM(require("fs"));
+var os55 = __toESM(require("os"));
+var path70 = __toESM(require("path"));
 var import_crypto4 = require("crypto");
 
 // src/services/telemetry.service.ts
@@ -8073,7 +8073,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.65.2" : "0.0.0-dev",
+    cliVersion: true ? "2.65.3" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -8254,7 +8254,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.65.2",
+  version: "2.65.3",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -9706,7 +9706,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.65.2" ? { ideVersion: "2.65.2" } : {}
+      ..."2.65.3" ? { ideVersion: "2.65.3" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -11098,9 +11098,9 @@ function closeAllTerminals() {
 }
 
 // src/commands/start/handlers.ts
-var fs63 = __toESM(require("fs"));
-var os53 = __toESM(require("os"));
-var path68 = __toESM(require("path"));
+var fs64 = __toESM(require("fs"));
+var os54 = __toESM(require("os"));
+var path69 = __toESM(require("path"));
 var import_crypto3 = require("crypto");
 var import_child_process26 = require("child_process");
 
@@ -11932,8 +11932,8 @@ function findGitRoot2(startDir) {
 
 // src/commands/link.ts
 var import_node_crypto8 = require("crypto");
-var fs32 = __toESM(require("fs"));
-var path37 = __toESM(require("path"));
+var fs33 = __toESM(require("fs"));
+var path38 = __toESM(require("path"));
 var import_chokidar = __toESM(require("chokidar"));
 var import_picocolors2 = __toESM(require("picocolors"));
 
@@ -15556,12 +15556,302 @@ var ClaudeDeployStrategy = class {
 
 // src/agents/codex/runtime.ts
 var import_node_child_process5 = require("child_process");
-var path25 = __toESM(require("path"));
+var path26 = __toESM(require("path"));
 
 // src/agents/codex/history.ts
 var import_node_fs3 = __toESM(require("fs"));
 var import_node_path2 = __toESM(require("path"));
 var import_node_os = __toESM(require("os"));
+
+// src/agents/acp/squad-roster.ts
+var fs20 = __toESM(require("fs"));
+var os18 = __toESM(require("os"));
+var path23 = __toESM(require("path"));
+var PROMPT_MAX = 500;
+var REPLY_SUMMARY_MAX = 1e3;
+var PREAMBLE_MAX = 2e3;
+var BRIEFING_DEFAULT_MAX = 8e3;
+var GENERIC_SPECIALTY = "general implementation tasks";
+function clip(s, max) {
+  return s.length > max ? s.slice(0, max) : s;
+}
+function defaultMember() {
+  return {
+    acpSessionId: null,
+    provisioned: false,
+    binaryVerified: false,
+    lastTurnIndex: 0,
+    contextTextFallback: false
+  };
+}
+function journalPathFor(homeDir2, sessionId) {
+  return path23.join(homeDir2, ".codeam", `squad-journal-${sessionId}.json`);
+}
+function loadJournal(journalPath) {
+  try {
+    const raw = JSON.parse(fs20.readFileSync(journalPath, "utf-8"));
+    return Array.isArray(raw.turns) ? raw.turns : [];
+  } catch {
+    return [];
+  }
+}
+var SquadState = class {
+  /** Set by the caller after fetchSquadRoster; null until then. */
+  roster = null;
+  /**
+   * Autonomous chained handoffs (P2-2, PRO). Seeded from the persisted
+   * `SavedSession.squadAuto` at session start and rewritten by
+   * `squad_configure`. Read-only to callers — mutate via {@link setAuto}, which
+   * clamps the budget and re-arms the chain.
+   */
+  autoConfig = { enabled: false, hopBudget: SQUAD_HOP_BUDGET_DEFAULT };
+  /**
+   * Hops left in the CURRENT chain. Reset to the budget on every USER-initiated
+   * prompt (so a user turn always interrupts and re-arms) and decremented by
+   * each self-accepted handoff.
+   */
+  hopsLeft = 0;
+  /** Lifetime handoff counters for `squad_stats` (in-memory, this process). */
+  handoffCounters = { proposed: 0, accepted: 0, auto: 0 };
+  journalPath;
+  turns;
+  members = /* @__PURE__ */ new Map();
+  constructor(opts) {
+    this.journalPath = journalPathFor(opts.homeDir ?? os18.homedir(), opts.sessionId);
+    this.turns = loadJournal(this.journalPath);
+    if (opts.auto) this.setAuto(opts.auto);
+  }
+  get auto() {
+    return this.autoConfig;
+  }
+  /** Apply a new mode (clamping the budget) and re-arm the chain. */
+  setAuto(value) {
+    this.autoConfig = {
+      enabled: value.enabled === true,
+      hopBudget: clampHopBudget(value.hopBudget)
+    };
+    this.resetHops();
+    return this.autoConfig;
+  }
+  hopsRemaining() {
+    return this.hopsLeft;
+  }
+  /** Re-arm the chain — called at the start of every USER-initiated turn. */
+  resetHops() {
+    this.hopsLeft = this.autoConfig.enabled ? this.autoConfig.hopBudget : 0;
+  }
+  /** Spend one hop on a self-accepted handoff. */
+  consumeHop() {
+    if (this.hopsLeft > 0) this.hopsLeft -= 1;
+  }
+  countProposal(opts) {
+    this.handoffCounters.proposed += 1;
+    if (opts.auto) this.handoffCounters.auto += 1;
+  }
+  countAccepted() {
+    this.handoffCounters.accepted += 1;
+  }
+  /**
+   * Per-member activity for the `squad_stats` relay command, derived from the
+   * journal (the same shared history the delta briefing reads) plus the
+   * in-memory handoff counters. `filesTouched` counts DISTINCT paths — a member
+   * that edited the same file across three turns touched ONE file.
+   */
+  stats() {
+    const byAgent = /* @__PURE__ */ new Map();
+    for (const t2 of this.turns) {
+      let row = byAgent.get(t2.agentId);
+      if (!row) {
+        row = { turns: 0, files: /* @__PURE__ */ new Set() };
+        byAgent.set(t2.agentId, row);
+      }
+      row.turns += 1;
+      for (const f of t2.filesTouched) row.files.add(f);
+    }
+    const members = [...byAgent.entries()].map(([agentId, row]) => ({
+      agentId,
+      turns: row.turns,
+      filesTouched: row.files.size
+    }));
+    return { members, handoffs: { ...this.handoffCounters }, sinceTurn: 1 };
+  }
+  /** Returns (creating on first access) the mutable per-agent state. */
+  member(agentId) {
+    let m = this.members.get(agentId);
+    if (!m) {
+      m = defaultMember();
+      this.members.set(agentId, m);
+    }
+    return m;
+  }
+  /** Appends a journal entry and persists (fire-and-forget durability). */
+  recordTurn(entry) {
+    const turn = {
+      turn: this.turns.length + 1,
+      agentId: entry.agentId,
+      prompt: clip(entry.prompt, PROMPT_MAX),
+      replySummary: clip(entry.replySummary, REPLY_SUMMARY_MAX),
+      filesTouched: entry.filesTouched
+    };
+    this.turns.push(turn);
+    this.persist();
+  }
+  turnCount() {
+    return this.turns.length;
+  }
+  entriesSince(turnIndex) {
+    return this.turns.filter((t2) => t2.turn > turnIndex);
+  }
+  persist() {
+    try {
+      fs20.mkdirSync(path23.dirname(this.journalPath), { recursive: true, mode: 448 });
+      fs20.writeFileSync(this.journalPath, JSON.stringify({ turns: this.turns }), { mode: 384 });
+    } catch {
+    }
+  }
+};
+function specialtyFor(agentId) {
+  return SQUAD_SPECIALTIES[agentId] ?? GENERIC_SPECIALTY;
+}
+var TEAM_PREAMBLE_MARKER = "[Team context]";
+var TEAM_PREAMBLE_LINES = [
+  "[Team context] You are the active agent in a CodeAgent Mobile session where the user",
+  "has a squad of agents and can pass work between them. Your available teammates:",
+  "If a task clearly fits a teammate better than you, you MAY propose a handoff by ending",
+  `your reply with a fenced code block tagged ${HANDOFF_FENCE_TAG} containing ONE JSON object:`,
+  '{"to":"<teammate id>","reason":"<one sentence>","prompt":"<the prompt they should run>"}',
+  "Propose at most one handoff per reply, only when genuinely better, and never announce",
+  "the block in prose \u2014 the app renders it as a card the user can accept."
+];
+var TEAM_PREAMBLE_BULLET_RE = /^- .+ — best at: /;
+var BRIEFING_MARKER = "[Team update]";
+var BRIEFING_HEADER = "[Team update] While you were away, other agents worked on this session:";
+var BRIEFING_FOOTER = "Continue from the CURRENT state of the working tree.";
+function buildTeamPreamble(roster, currentAgent, opts) {
+  const others = roster.agents.filter((a) => a.agentId !== currentAgent);
+  if (others.length === 0) return null;
+  const lines = [
+    TEAM_PREAMBLE_LINES[0],
+    TEAM_PREAMBLE_LINES[1],
+    ...others.map((a) => `- ${a.displayName} \u2014 best at: ${specialtyFor(a.agentId)}`)
+  ];
+  if (opts.handoffInstructions) {
+    lines.push(...TEAM_PREAMBLE_LINES.slice(2));
+  }
+  return clip(lines.join("\n"), PREAMBLE_MAX);
+}
+function renderJournalEntry(e) {
+  const filesClause = e.filesTouched.length > 0 ? ` (files: ${e.filesTouched.join(", ")})` : "";
+  return `- turn ${e.turn} (${e.agentId}): ${e.prompt} \u2192 ${e.replySummary}${filesClause}`;
+}
+function buildDeltaBriefing(entries, maxChars = BRIEFING_DEFAULT_MAX) {
+  if (entries.length === 0) return null;
+  const header = BRIEFING_HEADER;
+  const footer = BRIEFING_FOOTER;
+  const envelope = header.length + 1 + footer.length + 1;
+  const sorted = [...entries].sort((a, b) => a.turn - b.turn);
+  const lines = [];
+  let bodyLen = 0;
+  for (let i = sorted.length - 1; i >= 0; i--) {
+    const line = renderJournalEntry(sorted[i]);
+    const addedLen = line.length + (lines.length > 0 ? 1 : 0);
+    if (lines.length > 0 && envelope + bodyLen + addedLen > maxChars) break;
+    lines.unshift(line);
+    bodyLen += addedLen;
+  }
+  return [header, lines.join("\n"), footer].join("\n");
+}
+
+// src/agents/acp/squad-context.ts
+var SQUAD_CONTEXT_URI = "codeam://squad-context";
+var HANDOFF_MARKER = "[Session handoff]";
+var HANDOFF_TERMINATOR = "--- End of handoff context ---";
+function buildSquadContextBlock(text) {
+  return {
+    type: "resource",
+    resource: { uri: SQUAD_CONTEXT_URI, mimeType: "text/plain", text }
+  };
+}
+function isSquadContextBlock(block) {
+  return block.type === "resource" && block.resource.uri === SQUAD_CONTEXT_URI;
+}
+function isLeakedSquadContextText(text) {
+  return text.trim().startsWith(SQUAD_CONTEXT_URI);
+}
+function looksLikeUnsupportedPromptShape(err) {
+  const code = err?.code;
+  if (code === -32602) return true;
+  const message = err instanceof Error ? err.message : String(err ?? "");
+  if (/invalid[ _]params|-32602/i.test(message)) return true;
+  return /\bresource\b/i.test(message) && /unsupported|not supported/i.test(message);
+}
+function skipWhile(lines, start2, keepGoing) {
+  let i = start2;
+  while (i < lines.length && keepGoing(lines[i])) i++;
+  return i;
+}
+function endOfTeamPreamble(lines, start2) {
+  if (lines[start2] !== TEAM_PREAMBLE_LINES[0]) return -1;
+  if (lines[start2 + 1] !== TEAM_PREAMBLE_LINES[1]) return -1;
+  return skipWhile(
+    lines,
+    start2 + 2,
+    (line) => TEAM_PREAMBLE_BULLET_RE.test(line) || TEAM_PREAMBLE_LINES.includes(line)
+  );
+}
+function endOfTerminatedBlock(lines, start2, terminator) {
+  for (let i = start2; i < lines.length; i++) {
+    if (lines[i].trimEnd() === terminator) return i + 1;
+  }
+  return -1;
+}
+function stripSquadContext(text) {
+  if (!text.includes(HANDOFF_MARKER) && !text.includes(BRIEFING_MARKER) && !text.includes(TEAM_PREAMBLE_MARKER)) {
+    return text;
+  }
+  const lines = text.split("\n");
+  const kept = [];
+  let i = 0;
+  let stripped = false;
+  while (i < lines.length) {
+    const line = lines[i];
+    if (line.startsWith(HANDOFF_MARKER)) {
+      const end = endOfTerminatedBlock(lines, i, HANDOFF_TERMINATOR);
+      if (end !== -1) {
+        i = end;
+        stripped = true;
+        continue;
+      }
+    } else if (line.startsWith(BRIEFING_MARKER)) {
+      const end = endOfTerminatedBlock(lines, i, BRIEFING_FOOTER);
+      if (end !== -1) {
+        i = end;
+        stripped = true;
+        continue;
+      }
+    } else if (line.startsWith(TEAM_PREAMBLE_MARKER)) {
+      const end = endOfTeamPreamble(lines, i);
+      if (end !== -1) {
+        i = end;
+        stripped = true;
+        continue;
+      }
+    }
+    kept.push(line);
+    i++;
+  }
+  if (!stripped) return text;
+  return kept.join("\n").trim();
+}
+
+// src/agents/acp/agent-meta-blocks.ts
+var AGENT_META_BLOCK_MARKERS = ["<recommended_plugins>"];
+function isAgentMetaBlock(text) {
+  const trimmed = text.trim();
+  return AGENT_META_BLOCK_MARKERS.some((marker) => trimmed.startsWith(marker));
+}
+
+// src/agents/codex/history.ts
 function resolveHistoryDir2(_cwd, homeOverride) {
   const home = homeOverride ?? import_node_os.default.homedir();
   const sessionsRoot = import_node_path2.default.join(home, ".codex", "sessions");
@@ -15620,6 +15910,8 @@ function isSyntheticCodexTurn(role, text) {
   if (trimmed.startsWith("<environment_context>")) return true;
   if (trimmed.startsWith("<turn_aborted>")) return true;
   if (/^(<<ccr:[^>]*>>\s*)+$/.test(trimmed)) return true;
+  if (isLeakedSquadContextText(trimmed)) return true;
+  if (isAgentMetaBlock(trimmed)) return true;
   return false;
 }
 function parseHistoryFile2(filePath) {
@@ -15916,16 +16208,16 @@ function getCurrentUsage2(historyDir) {
 var import_node_child_process4 = require("child_process");
 
 // src/agents/codex/local-token.ts
-var fs21 = __toESM(require("fs"));
-var os19 = __toESM(require("os"));
-var path24 = __toESM(require("path"));
+var fs22 = __toESM(require("fs"));
+var os20 = __toESM(require("os"));
+var path25 = __toESM(require("path"));
 function codexCredentialsPath() {
-  return path24.join(os19.homedir(), ".codex", "auth.json");
+  return path25.join(os20.homedir(), ".codex", "auth.json");
 }
 async function extractLocalCodexToken() {
   const file = codexCredentialsPath();
-  if (!fs21.existsSync(file)) return null;
-  const credential = fs21.readFileSync(file, "utf8").trim();
+  if (!fs22.existsSync(file)) return null;
+  const credential = fs22.readFileSync(file, "utf8").trim();
   if (credential.length === 0) return null;
   return { method: "oauth", credential, source: "flat-file" };
 }
@@ -16148,7 +16440,7 @@ function augmentNpmGlobalBin(os67) {
     if (result.status !== 0) return;
     const prefix = result.stdout.toString().trim();
     if (!prefix) return;
-    const binDir = os67.id === "win32" ? prefix : path25.join(prefix, "bin");
+    const binDir = os67.id === "win32" ? prefix : path26.join(prefix, "bin");
     os67.augmentPath([binDir]);
   } catch {
   }
@@ -16233,7 +16525,7 @@ var import_node_child_process9 = require("child_process");
 // src/agents/coderabbit/installer.ts
 var import_node_child_process7 = require("child_process");
 var import_node_fs5 = require("fs");
-var path27 = __toESM(require("path"));
+var path28 = __toESM(require("path"));
 
 // src/commands/host/os-packages.ts
 var import_node_child_process6 = require("child_process");
@@ -16564,7 +16856,7 @@ function writeUnzipShim(os67, runner) {
   const python = ["python3", "python"].find((p2) => runner.which(p2));
   if (!python) return null;
   const dir = os67.scratchPath("codeam-cr-prereq");
-  const shim = path27.join(dir, "unzip");
+  const shim = path28.join(dir, "unzip");
   const script = `#!/bin/sh
 set -e
 archive=""
@@ -16714,9 +17006,9 @@ async function ensureCoderabbitInstalled(os67, deps = {}) {
 
 // src/agents/coderabbit/link.ts
 var import_node_child_process8 = require("child_process");
-var fs23 = __toESM(require("fs"));
-var os21 = __toESM(require("os"));
-var path28 = __toESM(require("path"));
+var fs24 = __toESM(require("fs"));
+var os22 = __toESM(require("os"));
+var path29 = __toESM(require("path"));
 
 // src/agents/strategy.ts
 function validateNonEmptyCredential(token) {
@@ -16725,12 +17017,12 @@ function validateNonEmptyCredential(token) {
 
 // src/agents/coderabbit/link.ts
 function authPath() {
-  return path28.join(os21.homedir(), ".coderabbit", "auth.json");
+  return path29.join(os22.homedir(), ".coderabbit", "auth.json");
 }
 async function extractLocalCoderabbitToken() {
   const file = authPath();
-  if (!fs23.existsSync(file)) return null;
-  const credential = fs23.readFileSync(file, "utf8").trim();
+  if (!fs24.existsSync(file)) return null;
+  const credential = fs24.readFileSync(file, "utf8").trim();
   if (credential.length === 0) return null;
   return { method: "oauth", credential, source: "flat-file" };
 }
@@ -17074,39 +17366,39 @@ CodeRabbit review timed out after ${Math.round(
 };
 
 // src/agents/cursor/history.ts
-var fs24 = __toESM(require("fs"));
-var os22 = __toESM(require("os"));
-var path29 = __toESM(require("path"));
+var fs25 = __toESM(require("fs"));
+var os23 = __toESM(require("os"));
+var path30 = __toESM(require("path"));
 var import_node_crypto5 = require("crypto");
-var HISTORY_ROOT = path29.join(os22.homedir(), ".cursor", "projects");
-var CURSOR_HOME = path29.join(os22.homedir(), ".cursor");
+var HISTORY_ROOT = path30.join(os23.homedir(), ".cursor", "projects");
+var CURSOR_HOME = path30.join(os23.homedir(), ".cursor");
 var STORE_FILES = ["store.db", "store.db-wal", "store.db-shm"];
 function acpSessionDir(sessionId) {
-  return path29.join(CURSOR_HOME, "acp-sessions", sessionId);
+  return path30.join(CURSOR_HOME, "acp-sessions", sessionId);
 }
 function nativeStoreDir(cwd, sessionId) {
-  const chatsRoot = path29.join(CURSOR_HOME, "chats");
+  const chatsRoot = path30.join(CURSOR_HOME, "chats");
   let buckets = [];
   try {
-    buckets = fs24.readdirSync(chatsRoot);
+    buckets = fs25.readdirSync(chatsRoot);
   } catch {
   }
   for (const b of buckets) {
-    const candidate = path29.join(chatsRoot, b, sessionId);
-    if (fs24.existsSync(path29.join(candidate, "store.db"))) return candidate;
+    const candidate = path30.join(chatsRoot, b, sessionId);
+    if (fs25.existsSync(path30.join(candidate, "store.db"))) return candidate;
   }
-  const computed = path29.join(chatsRoot, (0, import_node_crypto5.createHash)("md5").update(cwd).digest("hex"), sessionId);
-  return fs24.existsSync(computed) ? computed : null;
+  const computed = path30.join(chatsRoot, (0, import_node_crypto5.createHash)("md5").update(cwd).digest("hex"), sessionId);
+  return fs25.existsSync(computed) ? computed : null;
 }
 function copyStoreFiles(srcDir, dstDir) {
-  fs24.mkdirSync(dstDir, { recursive: true });
+  fs25.mkdirSync(dstDir, { recursive: true });
   for (const f of STORE_FILES) {
-    const dst = path29.join(dstDir, f);
-    if (fs24.existsSync(dst)) fs24.rmSync(dst, { force: true });
+    const dst = path30.join(dstDir, f);
+    if (fs25.existsSync(dst)) fs25.rmSync(dst, { force: true });
   }
   for (const f of STORE_FILES) {
-    const src = path29.join(srcDir, f);
-    if (fs24.existsSync(src)) fs24.copyFileSync(src, path29.join(dstDir, f));
+    const src = path30.join(srcDir, f);
+    if (fs25.existsSync(src)) fs25.copyFileSync(src, path30.join(dstDir, f));
   }
 }
 function bridgeNativeToAcp(cwd, sessionId) {
@@ -17118,8 +17410,8 @@ function bridgeNativeToAcp(cwd, sessionId) {
     }
     const dst = acpSessionDir(sessionId);
     copyStoreFiles(src, dst);
-    fs24.writeFileSync(
-      path29.join(dst, "meta.json"),
+    fs25.writeFileSync(
+      path30.join(dst, "meta.json"),
       JSON.stringify({ schemaVersion: 1, cwd })
     );
     log.info("cursor", `baton bridge native\u2192acp ok (${sessionId.slice(0, 8)})`);
@@ -17130,11 +17422,11 @@ function bridgeNativeToAcp(cwd, sessionId) {
 function bridgeAcpToNative(cwd, sessionId) {
   try {
     const src = acpSessionDir(sessionId);
-    if (!fs24.existsSync(path29.join(src, "store.db"))) {
+    if (!fs25.existsSync(path30.join(src, "store.db"))) {
       log.warn("cursor", `baton bridge: no acp store for ${sessionId.slice(0, 8)} \u2014 skip`);
       return;
     }
-    const dst = nativeStoreDir(cwd, sessionId) ?? path29.join(CURSOR_HOME, "chats", (0, import_node_crypto5.createHash)("md5").update(cwd).digest("hex"), sessionId);
+    const dst = nativeStoreDir(cwd, sessionId) ?? path30.join(CURSOR_HOME, "chats", (0, import_node_crypto5.createHash)("md5").update(cwd).digest("hex"), sessionId);
     copyStoreFiles(src, dst);
     log.info("cursor", `baton bridge acp\u2192native ok (${sessionId.slice(0, 8)})`);
   } catch (err) {
@@ -17145,26 +17437,26 @@ function encodeCursorCwd(cwd) {
   return cwd.replace(/^[/\\]+/, "").replace(/[/\\:]/g, "-");
 }
 function resolveHistoryFile3(cwd, sessionId, root = HISTORY_ROOT) {
-  const rel = path29.join("agent-transcripts", sessionId, `${sessionId}.jsonl`);
-  const primary = path29.join(root, encodeCursorCwd(cwd), rel);
-  if (fs24.existsSync(primary)) return primary;
+  const rel = path30.join("agent-transcripts", sessionId, `${sessionId}.jsonl`);
+  const primary = path30.join(root, encodeCursorCwd(cwd), rel);
+  if (fs25.existsSync(primary)) return primary;
   let entries;
   try {
-    entries = fs24.readdirSync(root, { withFileTypes: true });
+    entries = fs25.readdirSync(root, { withFileTypes: true });
   } catch {
     return null;
   }
   for (const e of entries) {
     if (!e.isDirectory()) continue;
-    const candidate = path29.join(root, e.name, rel);
-    if (fs24.existsSync(candidate)) return candidate;
+    const candidate = path30.join(root, e.name, rel);
+    if (fs25.existsSync(candidate)) return candidate;
   }
   return null;
 }
 function resolveHistoryDir3(cwd) {
-  if (!fs24.existsSync(HISTORY_ROOT)) return null;
-  const dir = path29.join(HISTORY_ROOT, encodeCursorCwd(cwd));
-  return fs24.existsSync(dir) ? dir : null;
+  if (!fs25.existsSync(HISTORY_ROOT)) return null;
+  const dir = path30.join(HISTORY_ROOT, encodeCursorCwd(cwd));
+  return fs25.existsSync(dir) ? dir : null;
 }
 function extractText2(content) {
   if (!Array.isArray(content)) return "";
@@ -17177,7 +17469,7 @@ function unwrapUserQuery(text) {
 function parseHistoryFile3(filePath) {
   let raw;
   try {
-    raw = fs24.readFileSync(filePath, "utf8");
+    raw = fs25.readFileSync(filePath, "utf8");
   } catch {
     return [];
   }
@@ -17215,16 +17507,16 @@ function getCurrentUsage3(_historyDir) {
 var import_node_child_process10 = require("child_process");
 
 // src/agents/cursor/local-token.ts
-var fs25 = __toESM(require("fs"));
-var os23 = __toESM(require("os"));
-var path30 = __toESM(require("path"));
+var fs26 = __toESM(require("fs"));
+var os24 = __toESM(require("os"));
+var path31 = __toESM(require("path"));
 function cursorCredentialsPath() {
-  return path30.join(os23.homedir(), ".cursor", "auth.json");
+  return path31.join(os24.homedir(), ".cursor", "auth.json");
 }
 async function extractLocalCursorToken() {
   const file = cursorCredentialsPath();
-  if (!fs25.existsSync(file)) return null;
-  const credential = fs25.readFileSync(file, "utf8").trim();
+  if (!fs26.existsSync(file)) return null;
+  const credential = fs26.readFileSync(file, "utf8").trim();
   if (credential.length === 0) return null;
   return { method: "oauth", credential, source: "flat-file" };
 }
@@ -17467,12 +17759,12 @@ var CursorRuntimeStrategy = class {
 };
 
 // src/agents/aider/history.ts
-var fs26 = __toESM(require("fs"));
-var path31 = __toESM(require("path"));
+var fs27 = __toESM(require("fs"));
+var path32 = __toESM(require("path"));
 var AIDER_HISTORY_FILE = ".aider.chat.history.md";
 function resolveHistoryDir4(cwd) {
-  const candidate = path31.join(cwd, AIDER_HISTORY_FILE);
-  return fs26.existsSync(candidate) ? cwd : null;
+  const candidate = path32.join(cwd, AIDER_HISTORY_FILE);
+  return fs27.existsSync(candidate) ? cwd : null;
 }
 function parseHistoryFile4(_filePath) {
   return [];
@@ -17485,10 +17777,10 @@ function getCurrentUsage4(_historyDir) {
 var import_node_child_process12 = require("child_process");
 
 // src/agents/aider/local-token.ts
-var fs27 = __toESM(require("fs"));
-var os24 = __toESM(require("os"));
-var path32 = __toESM(require("path"));
-var AIDER_CONF_FILE = path32.join(os24.homedir(), ".aider.conf.yml");
+var fs28 = __toESM(require("fs"));
+var os25 = __toESM(require("os"));
+var path33 = __toESM(require("path"));
+var AIDER_CONF_FILE = path33.join(os25.homedir(), ".aider.conf.yml");
 var API_KEY_ENV_VARS = [
   "ANTHROPIC_API_KEY",
   "OPENAI_API_KEY",
@@ -17503,8 +17795,8 @@ async function extractLocalAiderToken() {
       return { method: "api_key", credential: value.trim(), source: "flat-file" };
     }
   }
-  if (fs27.existsSync(AIDER_CONF_FILE)) {
-    const conf = fs27.readFileSync(AIDER_CONF_FILE, "utf8");
+  if (fs28.existsSync(AIDER_CONF_FILE)) {
+    const conf = fs28.readFileSync(AIDER_CONF_FILE, "utf8");
     const match = conf.match(/^api-key:\s*['"]?([^'"\n]+)['"]?\s*$/m);
     if (match) {
       return { method: "api_key", credential: match[1].trim(), source: "flat-file" };
@@ -17880,19 +18172,19 @@ var import_node_crypto6 = require("crypto");
 var import_node_child_process13 = require("child_process");
 
 // src/agents/gemini/local-token.ts
-var fs29 = __toESM(require("fs"));
-var os26 = __toESM(require("os"));
-var path34 = __toESM(require("path"));
+var fs30 = __toESM(require("fs"));
+var os27 = __toESM(require("os"));
+var path35 = __toESM(require("path"));
 function geminiCredentialsPath() {
-  return path34.join(os26.homedir(), ".gemini", "oauth_creds.json");
+  return path35.join(os27.homedir(), ".gemini", "oauth_creds.json");
 }
 function geminiCredentialsPaths() {
   return [geminiCredentialsPath()];
 }
 async function extractLocalGeminiToken() {
   const file = geminiCredentialsPath();
-  if (!fs29.existsSync(file)) return null;
-  const credential = fs29.readFileSync(file, "utf8").trim();
+  if (!fs30.existsSync(file)) return null;
+  const credential = fs30.readFileSync(file, "utf8").trim();
   if (credential.length === 0) return null;
   return { method: "oauth", credential, source: "flat-file" };
 }
@@ -17948,20 +18240,20 @@ function geminiLoginLauncher() {
 }
 
 // src/agents/gemini/history.ts
-var fs30 = __toESM(require("fs"));
-var os27 = __toESM(require("os"));
-var path35 = __toESM(require("path"));
-var GEMINI_ROOT = path35.join(os27.homedir(), ".gemini");
+var fs31 = __toESM(require("fs"));
+var os28 = __toESM(require("os"));
+var path36 = __toESM(require("path"));
+var GEMINI_ROOT = path36.join(os28.homedir(), ".gemini");
 function projectNameForCwd(cwd, root) {
   try {
     const parsed = JSON.parse(
-      fs30.readFileSync(path35.join(root, "projects.json"), "utf8")
+      fs31.readFileSync(path36.join(root, "projects.json"), "utf8")
     );
     const map = parsed.projects;
     if (map && typeof map === "object") {
       if (typeof map[cwd] === "string") return map[cwd];
       try {
-        const rp = fs30.realpathSync(cwd);
+        const rp = fs31.realpathSync(cwd);
         if (typeof map[rp] === "string") return map[rp];
       } catch {
       }
@@ -17970,7 +18262,7 @@ function projectNameForCwd(cwd, root) {
   } catch (err) {
     log.debug("gemini", `projects.json unreadable at ${root} \u2014 using basename fallback`, err);
   }
-  return path35.basename(cwd) || null;
+  return path36.basename(cwd) || null;
 }
 function resolveHistoryDir5(cwd, root = GEMINI_ROOT) {
   const name = projectNameForCwd(cwd, root);
@@ -17978,8 +18270,8 @@ function resolveHistoryDir5(cwd, root = GEMINI_ROOT) {
     log.warn("gemini", `resolveHistoryDir \u2014 could not derive a project name for cwd=${cwd}`);
     return null;
   }
-  const dir = path35.join(root, "tmp", name, "chats");
-  if (!fs30.existsSync(dir)) {
+  const dir = path36.join(root, "tmp", name, "chats");
+  if (!fs31.existsSync(dir)) {
     log.debug("gemini", `resolveHistoryDir \u2014 chats dir not present yet: ${dir} (project=${name})`);
     return null;
   }
@@ -17991,7 +18283,7 @@ function resolveHistoryFile4(cwd, sessionId, root = GEMINI_ROOT) {
   if (!dir) return null;
   let files;
   try {
-    files = fs30.readdirSync(dir).filter((f) => f.startsWith("session-") && f.endsWith(".jsonl"));
+    files = fs31.readdirSync(dir).filter((f) => f.startsWith("session-") && f.endsWith(".jsonl"));
   } catch (err) {
     log.warn("gemini", `resolveHistoryFile \u2014 cannot read chats dir ${dir} (id8=${id8})`, err);
     return null;
@@ -18003,12 +18295,12 @@ function resolveHistoryFile4(cwd, sessionId, root = GEMINI_ROOT) {
   const byName = files.find((f) => id8.length > 0 && f.includes(id8));
   if (byName) {
     log.info("gemini", `resolveHistoryFile \u2014 matched by filename id8=${id8}: ${byName}`);
-    return path35.join(dir, byName);
+    return path36.join(dir, byName);
   }
   for (const f of files) {
-    const full = path35.join(dir, f);
+    const full = path36.join(dir, f);
     try {
-      const firstLine = fs30.readFileSync(full, "utf8").split("\n", 1)[0] ?? "";
+      const firstLine = fs31.readFileSync(full, "utf8").split("\n", 1)[0] ?? "";
       const hdr = JSON.parse(firstLine);
       if (hdr.sessionId === sessionId) {
         log.info("gemini", `resolveHistoryFile \u2014 matched by header sessionId: ${f}`);
@@ -18021,7 +18313,7 @@ function resolveHistoryFile4(cwd, sessionId, root = GEMINI_ROOT) {
   let newest = null;
   for (const f of files) {
     try {
-      const mtime = fs30.statSync(path35.join(dir, f)).mtimeMs;
+      const mtime = fs31.statSync(path36.join(dir, f)).mtimeMs;
       if (!newest || mtime > newest.mtime) newest = { file: f, mtime };
     } catch {
     }
@@ -18030,7 +18322,7 @@ function resolveHistoryFile4(cwd, sessionId, root = GEMINI_ROOT) {
     "gemini",
     `resolveHistoryFile \u2014 no id8=${id8} match among ${files.length} file(s) in ${dir}; falling back to newest=${newest?.file ?? "none"}`
   );
-  return newest ? path35.join(dir, newest.file) : null;
+  return newest ? path36.join(dir, newest.file) : null;
 }
 function extractGeminiText(content) {
   const fromParts = (arr) => Array.isArray(arr) ? arr.map((p2) => {
@@ -18058,7 +18350,7 @@ function isSyntheticGeminiTurn(text) {
 function parseHistoryFile5(filePath) {
   let raw;
   try {
-    raw = fs30.readFileSync(filePath, "utf8");
+    raw = fs31.readFileSync(filePath, "utf8");
   } catch (err) {
     log.warn("gemini", `parseHistoryFile \u2014 cannot read ${filePath}`, err);
     return [];
@@ -18099,7 +18391,7 @@ function parseHistoryFile5(filePath) {
   }
   log.trace(
     "gemini",
-    `parseHistoryFile \u2014 ${out2.length} turn(s) from ${path35.basename(filePath)}` + (malformed > 0 ? ` (${malformed} malformed line(s) skipped)` : "")
+    `parseHistoryFile \u2014 ${out2.length} turn(s) from ${path36.basename(filePath)}` + (malformed > 0 ? ` (${malformed} malformed line(s) skipped)` : "")
   );
   return out2;
 }
@@ -18243,42 +18535,42 @@ var import_node_os3 = require("os");
 var import_node_path4 = require("path");
 
 // src/agents/kimi/history.ts
-var fs31 = __toESM(require("fs"));
-var os28 = __toESM(require("os"));
-var path36 = __toESM(require("path"));
+var fs32 = __toESM(require("fs"));
+var os29 = __toESM(require("os"));
+var path37 = __toESM(require("path"));
 var import_node_crypto7 = require("crypto");
 function kimiHome() {
-  return process.env.KIMI_CODE_HOME || path36.join(os28.homedir(), ".kimi-code");
+  return process.env.KIMI_CODE_HOME || path37.join(os29.homedir(), ".kimi-code");
 }
 function workDirKey(cwd) {
   const hash = (0, import_node_crypto7.createHash)("sha256").update(cwd).digest("hex").slice(0, 12);
-  return `wd_${path36.basename(cwd)}_${hash}`;
+  return `wd_${path37.basename(cwd)}_${hash}`;
 }
 function resolveHistoryDir6(cwd) {
-  const dir = path36.join(kimiHome(), "sessions", workDirKey(cwd));
-  if (!fs31.existsSync(dir)) {
+  const dir = path37.join(kimiHome(), "sessions", workDirKey(cwd));
+  if (!fs32.existsSync(dir)) {
     log.debug("kimi", `resolveHistoryDir \u2014 session bucket not present yet: ${dir}`);
     return null;
   }
   return dir;
 }
-var WIRE_REL = path36.join("agents", "main", "wire.jsonl");
+var WIRE_REL = path37.join("agents", "main", "wire.jsonl");
 function resolveHistoryFile5(cwd, sessionId) {
   const fromIndex = sessionDirFromIndex(sessionId);
   if (fromIndex) {
-    const p2 = path36.join(fromIndex, WIRE_REL);
-    if (fs31.existsSync(p2)) return p2;
+    const p2 = path37.join(fromIndex, WIRE_REL);
+    if (fs32.existsSync(p2)) return p2;
   }
-  const bucket2 = path36.join(kimiHome(), "sessions", workDirKey(cwd));
-  const computed = path36.join(bucket2, sessionId, WIRE_REL);
-  if (fs31.existsSync(computed)) return computed;
+  const bucket2 = path37.join(kimiHome(), "sessions", workDirKey(cwd));
+  const computed = path37.join(bucket2, sessionId, WIRE_REL);
+  if (fs32.existsSync(computed)) return computed;
   const scanned = scanBucketsForSession(sessionId);
   if (scanned) return scanned;
   return null;
 }
 function sessionDirFromIndex(sessionId) {
   try {
-    const raw = fs31.readFileSync(path36.join(kimiHome(), "session_index.jsonl"), "utf8");
+    const raw = fs32.readFileSync(path37.join(kimiHome(), "session_index.jsonl"), "utf8");
     for (const line of raw.split("\n")) {
       if (!line.includes(sessionId)) continue;
       try {
@@ -18294,22 +18586,22 @@ function sessionDirFromIndex(sessionId) {
   return null;
 }
 function scanBucketsForSession(sessionId) {
-  const sessionsRoot = path36.join(kimiHome(), "sessions");
+  const sessionsRoot = path37.join(kimiHome(), "sessions");
   let buckets;
   try {
-    buckets = fs31.readdirSync(sessionsRoot, { withFileTypes: true });
+    buckets = fs32.readdirSync(sessionsRoot, { withFileTypes: true });
   } catch {
     return null;
   }
   for (const b of buckets) {
     if (!b.isDirectory()) continue;
-    const candidate = path36.join(sessionsRoot, b.name, sessionId, WIRE_REL);
-    if (fs31.existsSync(candidate)) return candidate;
+    const candidate = path37.join(sessionsRoot, b.name, sessionId, WIRE_REL);
+    if (fs32.existsSync(candidate)) return candidate;
   }
   return null;
 }
 async function discoverSessionId2(cwd, opts) {
-  const bucket2 = path36.join(kimiHome(), "sessions", workDirKey(cwd));
+  const bucket2 = path37.join(kimiHome(), "sessions", workDirKey(cwd));
   const floor = opts.sinceMs - 2e3;
   const deadline = Date.now() + (opts.timeoutMs ?? 15e3);
   for (; ; ) {
@@ -18322,7 +18614,7 @@ async function discoverSessionId2(cwd, opts) {
 function newestSessionSince(bucket2, floorMs) {
   let entries;
   try {
-    entries = fs31.readdirSync(bucket2, { withFileTypes: true });
+    entries = fs32.readdirSync(bucket2, { withFileTypes: true });
   } catch {
     return null;
   }
@@ -18332,7 +18624,7 @@ function newestSessionSince(bucket2, floorMs) {
     if (!e.isDirectory() || !e.name.startsWith("session_")) continue;
     let mtime;
     try {
-      mtime = fs31.statSync(path36.join(bucket2, e.name)).mtimeMs;
+      mtime = fs32.statSync(path37.join(bucket2, e.name)).mtimeMs;
     } catch {
       continue;
     }
@@ -18353,7 +18645,7 @@ function joinTextParts(parts) {
 function parseHistoryFile6(filePath) {
   let raw;
   try {
-    raw = fs31.readFileSync(filePath, "utf8");
+    raw = fs32.readFileSync(filePath, "utf8");
   } catch {
     return [];
   }
@@ -18731,7 +19023,7 @@ function parseLinkArgs(args2) {
   if (apiKeyFileArg) {
     const filePath = apiKeyFileArg.slice("--api-key-file=".length);
     try {
-      apiKey = fs32.readFileSync(path37.resolve(filePath), "utf8").trim();
+      apiKey = fs33.readFileSync(path38.resolve(filePath), "utf8").trim();
     } catch (err) {
       throw new Error(`Could not read --api-key-file ${filePath}: ${err.message}`);
     }
@@ -18858,7 +19150,7 @@ async function link(args2 = []) {
     return;
   }
   if (parsed.tokenFile) {
-    const credential = fs32.readFileSync(path37.resolve(parsed.tokenFile), "utf8").trim();
+    const credential = fs33.readFileSync(path38.resolve(parsed.tokenFile), "utf8").trim();
     if (!credential) {
       showError(`--token-file ${parsed.tokenFile} is empty.`);
       process.exit(1);
@@ -19077,13 +19369,13 @@ async function linkDryRunPreflight(ctx) {
 // src/agents/coderabbit/configure.ts
 var import_node_child_process17 = require("child_process");
 var import_node_fs6 = require("fs");
-var path39 = __toESM(require("path"));
+var path40 = __toESM(require("path"));
 
 // src/agents/coderabbit/oauth.ts
 var import_node_child_process16 = require("child_process");
-var fs33 = __toESM(require("fs"));
-var os29 = __toESM(require("os"));
-var path38 = __toESM(require("path"));
+var fs34 = __toESM(require("fs"));
+var os30 = __toESM(require("os"));
+var path39 = __toESM(require("path"));
 function parseCoderabbitAuthEvent(line) {
   const l = line.replace(/\x1b\[[0-9;?]*[A-Za-z]/g, "").trim();
   if (!l || l[0] !== "{") return null;
@@ -19132,8 +19424,8 @@ function resolvePython() {
 function spawnCoderabbitLoginProc(cmd, args2) {
   const python = resolvePython();
   if (python) {
-    const helper = path38.join(os29.tmpdir(), "codeam-cr-pty.py");
-    fs33.writeFileSync(helper, PYTHON_PTY_HELPER, { mode: 420 });
+    const helper = path39.join(os30.tmpdir(), "codeam-cr-pty.py");
+    fs34.writeFileSync(helper, PYTHON_PTY_HELPER, { mode: 420 });
     return (0, import_node_child_process16.spawn)(python, [helper, cmd, ...args2], {
       stdio: ["pipe", "pipe", "pipe"],
       env: { ...process.env, TERM: "xterm-256color", COLUMNS: "220", LINES: "50" },
@@ -19244,7 +19536,7 @@ function runCoderabbitOAuthLogin(deps) {
   });
 }
 function coderabbitDir(home) {
-  return path38.join(home ?? os29.homedir(), ".coderabbit");
+  return path39.join(home ?? os30.homedir(), ".coderabbit");
 }
 var NON_CREDENTIAL = /* @__PURE__ */ new Set(["doctor.json", "machine-id"]);
 function snapshotCredentialDir(home) {
@@ -19252,14 +19544,14 @@ function snapshotCredentialDir(home) {
   const snap = {};
   let entries;
   try {
-    entries = fs33.readdirSync(dir, { withFileTypes: true });
+    entries = fs34.readdirSync(dir, { withFileTypes: true });
   } catch {
     return snap;
   }
   for (const e of entries) {
     if (!e.isFile() || NON_CREDENTIAL.has(e.name)) continue;
     try {
-      const st3 = fs33.statSync(path38.join(dir, e.name));
+      const st3 = fs34.statSync(path39.join(dir, e.name));
       snap[e.name] = `${st3.mtimeMs}:${st3.size}`;
     } catch {
     }
@@ -19277,7 +19569,7 @@ function diffCapturedCredential(before, home) {
   }
   if (!best) return null;
   try {
-    return { file: best.file, contents: fs33.readFileSync(path38.join(dir, best.file), "utf8") };
+    return { file: best.file, contents: fs34.readFileSync(path39.join(dir, best.file), "utf8") };
   } catch {
     return null;
   }
@@ -19354,7 +19646,7 @@ function collectChangedFiles(cwd) {
   return [...byPath.values()];
 }
 function restoreCoderabbitOauthBlob(os67, value) {
-  const dir = path39.join(os67.homeDir(), ".coderabbit");
+  const dir = path40.join(os67.homeDir(), ".coderabbit");
   (0, import_node_fs6.mkdirSync)(dir, { recursive: true });
   let file = "auth.json";
   let contents = value.trim();
@@ -19362,13 +19654,13 @@ function restoreCoderabbitOauthBlob(os67, value) {
     try {
       const parsed = JSON.parse(contents);
       if (typeof parsed.file === "string" && typeof parsed.contents === "string") {
-        file = path39.basename(parsed.file);
+        file = path40.basename(parsed.file);
         contents = parsed.contents;
       }
     } catch {
     }
   }
-  (0, import_node_fs6.writeFileSync)(path39.join(dir, file), contents, { mode: 384 });
+  (0, import_node_fs6.writeFileSync)(path40.join(dir, file), contents, { mode: 384 });
 }
 function installFailureMessage(result) {
   return result.error ?? "CodeRabbit CLI could not be installed";
@@ -19384,10 +19676,10 @@ async function configureCoderabbit(input, deps = {}) {
   const home = os67.homeDir();
   os67.augmentPath(
     os67.id === "win32" ? [
-      path39.join(home, ".local", "bin"),
-      path39.join(process.env.APPDATA ?? path39.join(home, "AppData", "Roaming"), "npm"),
-      path39.join(home, "scoop", "shims")
-    ] : [path39.join(home, ".local", "bin"), "/opt/homebrew/bin", "/usr/local/bin"]
+      path40.join(home, ".local", "bin"),
+      path40.join(process.env.APPDATA ?? path40.join(home, "AppData", "Roaming"), "npm"),
+      path40.join(home, "scoop", "shims")
+    ] : [path40.join(home, ".local", "bin"), "/opt/homebrew/bin", "/usr/local/bin"]
   );
   const installed2 = os67.findInPath("coderabbit") !== null;
   const base = () => ({
@@ -19696,9 +19988,9 @@ function defaultRunGh(args2) {
 
 // src/commands/host-agent.ts
 var import_node_child_process25 = require("child_process");
-var os42 = __toESM(require("os"));
-var fs46 = __toESM(require("fs"));
-var path50 = __toESM(require("path"));
+var os43 = __toESM(require("os"));
+var fs47 = __toESM(require("fs"));
+var path51 = __toESM(require("path"));
 
 // src/integrations/manifest.ts
 var import_node_fs8 = __toESM(require("fs"));
@@ -19822,12 +20114,12 @@ function persistOrClearSkillsFromPayload(skills) {
 
 // src/commands/host/agent-install.ts
 var import_child_process14 = require("child_process");
-var os33 = __toESM(require("os"));
+var os34 = __toESM(require("os"));
 function runAgentInstallScript(script, opts = {}) {
   const timeoutMs = opts.timeoutMs ?? 18e4;
   const scope = opts.logScope ?? "agent-install";
   return new Promise((resolve9) => {
-    const home = process.env.HOME || os33.homedir();
+    const home = process.env.HOME || os34.homedir();
     const child = (0, import_child_process14.spawn)("sh", ["-c", script], {
       env: { ...process.env, HOME: home },
       stdio: ["ignore", "pipe", "pipe"]
@@ -19893,14 +20185,14 @@ function describeReason(reason) {
 }
 
 // src/commands/host/host-client.ts
-var fs37 = __toESM(require("fs"));
-var os34 = __toESM(require("os"));
-var path42 = __toESM(require("path"));
+var fs38 = __toESM(require("fs"));
+var os35 = __toESM(require("os"));
+var path43 = __toESM(require("path"));
 var import_node_crypto9 = require("crypto");
 function sampleCpuTimes() {
   let idle = 0;
   let total = 0;
-  for (const cpu of os34.cpus()) {
+  for (const cpu of os35.cpus()) {
     const t2 = cpu.times;
     idle += t2.idle;
     total += t2.user + t2.nice + t2.sys + t2.idle + t2.irq;
@@ -19919,8 +20211,8 @@ var MetricsCollector = class {
     const prev = this.prevCpu;
     this.prevCpu = current2;
     if (!prev) {
-      const cores = os34.cpus().length || 1;
-      const proxy = os34.loadavg()[0] / cores * 100;
+      const cores = os35.cpus().length || 1;
+      const proxy = os35.loadavg()[0] / cores * 100;
       return Math.min(100, Math.max(0, Math.round(proxy)));
     }
     const idleDelta = current2.idle - prev.idle;
@@ -19933,8 +20225,8 @@ var MetricsCollector = class {
   collect() {
     return {
       cpuPct: this.cpuPct(),
-      ramUsedMb: Math.round((os34.totalmem() - os34.freemem()) / 1048576),
-      ramTotalMb: Math.round(os34.totalmem() / 1048576),
+      ramUsedMb: Math.round((os35.totalmem() - os35.freemem()) / 1048576),
+      ramTotalMb: Math.round(os35.totalmem() / 1048576),
       latencyMs: this.lastLatencyMs
     };
   }
@@ -19943,19 +20235,19 @@ function apiBase() {
   return process.env.CODEAM_API_URL ?? resolveApiBaseUrl();
 }
 function hostIdentityPath() {
-  return path42.join(os34.homedir(), ".codeam", "host-agent.json");
+  return path43.join(os35.homedir(), ".codeam", "host-agent.json");
 }
 function collectOsInfo() {
   return {
-    distro: os34.platform(),
-    arch: os34.arch(),
-    kernel: os34.release(),
+    distro: os35.platform(),
+    arch: os35.arch(),
+    kernel: os35.release(),
     nodeVersion: process.versions.node
   };
 }
 function loadHostIdentity() {
   try {
-    const raw = fs37.readFileSync(hostIdentityPath(), "utf8");
+    const raw = fs38.readFileSync(hostIdentityPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null && typeof parsed.hostId === "string" && typeof parsed.hostToken === "string" && typeof parsed.controlPluginId === "string") {
       const p2 = parsed;
@@ -19974,8 +20266,8 @@ function loadHostIdentity() {
 }
 function saveHostIdentity(identity) {
   const file = hostIdentityPath();
-  fs37.mkdirSync(path42.dirname(file), { recursive: true, mode: 448 });
-  fs37.writeFileSync(file, JSON.stringify(identity, null, 2), {
+  fs38.mkdirSync(path43.dirname(file), { recursive: true, mode: 448 });
+  fs38.writeFileSync(file, JSON.stringify(identity, null, 2), {
     encoding: "utf8",
     mode: 384
   });
@@ -20020,7 +20312,7 @@ function isTerminalEnrollError(err) {
 }
 function deleteHostIdentity() {
   try {
-    fs37.rmSync(hostIdentityPath(), { force: true });
+    fs38.rmSync(hostIdentityPath(), { force: true });
   } catch {
   }
 }
@@ -20044,7 +20336,7 @@ async function postJson(pathname, body) {
 function resolveHostLabel(label) {
   const explicit = label?.trim();
   const envLabel = process.env.CODEAM_HOST_LABEL?.trim();
-  const resolved = explicit || envLabel || os34.hostname();
+  const resolved = explicit || envLabel || os35.hostname();
   return resolved.slice(0, 80);
 }
 async function redeemEnrollToken(token, label) {
@@ -20155,17 +20447,17 @@ async function reportDeployProgress(auth, deployId, step, message, sessionId) {
 }
 
 // src/commands/host/workspace.ts
-var fs38 = __toESM(require("fs"));
-var os35 = __toESM(require("os"));
-var path43 = __toESM(require("path"));
+var fs39 = __toESM(require("fs"));
+var os36 = __toESM(require("os"));
+var path44 = __toESM(require("path"));
 var import_node_child_process20 = require("child_process");
 var import_node_util4 = require("util");
 var execFileP4 = (0, import_node_util4.promisify)(import_node_child_process20.execFile);
 function isAbsolutePathTarget(target) {
-  return path43.isAbsolute(target);
+  return path44.isAbsolute(target);
 }
 function selfHostedWorkspaceRoot() {
-  return path43.join(os35.homedir(), ".codeam", "self-hosted");
+  return path44.join(os36.homedir(), ".codeam", "self-hosted");
 }
 function nonInteractiveGitEnv() {
   return {
@@ -20235,15 +20527,15 @@ async function configureGitCredentials(dest, repoRef, cloneToken, provider = "gi
   const isGitlab = provider === "gitlab";
   if (isGitlab ? !gitlabProjectPath(repoRef.trim()) : !githubOwnerRepo(repoRef.trim())) return;
   if (!cloneToken) return;
-  const credFile = path43.join(dest, ".git", "codeam-credentials");
+  const credFile = path44.join(dest, ".git", "codeam-credentials");
   const credLine = isGitlab ? `https://oauth2:${cloneToken}@gitlab.com
 ` : `https://x-access-token:${cloneToken}@github.com
 `;
-  fs38.writeFileSync(credFile, credLine, { mode: 384 });
+  fs39.writeFileSync(credFile, credLine, { mode: 384 });
   restrictToOwner(credFile);
   const env = nonInteractiveGitEnv();
   const git2 = (args2) => execFileP4("git", ["-C", dest, ...args2], { timeout: 3e4, env });
-  const credFilePosix = credFile.split(path43.sep).join("/");
+  const credFilePosix = credFile.split(path44.sep).join("/");
   await git2(["config", "--local", "--replace-all", "credential.helper", ""]).catch(() => {
   });
   await git2([
@@ -20276,17 +20568,17 @@ function maskToken(text, cloneToken) {
 }
 async function prepareWorkspace(repoOrPath, deployId, cloneToken, provider = "github", branch) {
   if (isAbsolutePathTarget(repoOrPath)) {
-    if (!fs38.existsSync(repoOrPath)) {
+    if (!fs39.existsSync(repoOrPath)) {
       throw new Error(`deploy target path does not exist: ${repoOrPath}`);
     }
     return repoOrPath;
   }
-  const dest = path43.join(selfHostedWorkspaceRoot(), deployId);
-  if (fs38.existsSync(path43.join(dest, ".git"))) {
+  const dest = path44.join(selfHostedWorkspaceRoot(), deployId);
+  if (fs39.existsSync(path44.join(dest, ".git"))) {
     if (cloneToken) await configureGitCredentials(dest, repoOrPath, cloneToken, provider);
     return dest;
   }
-  fs38.mkdirSync(selfHostedWorkspaceRoot(), { recursive: true, mode: 448 });
+  fs39.mkdirSync(selfHostedWorkspaceRoot(), { recursive: true, mode: 448 });
   const cloneUrl = repoCloneUrl(repoOrPath, cloneToken, provider);
   const cloneArgs = branch ? ["clone", "--depth", "1", "--branch", branch, cloneUrl, dest] : ["clone", "--depth", "1", cloneUrl, dest];
   try {
@@ -20304,9 +20596,9 @@ async function prepareWorkspace(repoOrPath, deployId, cloneToken, provider = "gi
 }
 
 // src/commands/host/agent-provisioning.ts
-var fs39 = __toESM(require("fs"));
-var os36 = __toESM(require("os"));
-var path44 = __toESM(require("path"));
+var fs40 = __toESM(require("fs"));
+var os37 = __toESM(require("os"));
+var path45 = __toESM(require("path"));
 var PUBLIC_TO_INTERNAL_AGENT = {
   claude_code: "claude",
   claude: "claude",
@@ -20323,22 +20615,22 @@ function toInternalAgentId(publicAgentId) {
   return PUBLIC_TO_INTERNAL_AGENT[publicAgentId] ?? null;
 }
 function ensureDir(dir) {
-  fs39.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs40.mkdirSync(dir, { recursive: true, mode: 448 });
 }
 function writeFile0600(filePath, contents) {
-  ensureDir(path44.dirname(filePath));
-  fs39.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
+  ensureDir(path45.dirname(filePath));
+  fs40.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
   restrictToOwner(filePath);
 }
 function rmIfExists(filePath) {
   try {
-    fs39.rmSync(filePath, { force: true });
+    fs40.rmSync(filePath, { force: true });
   } catch {
   }
 }
 var claudeProvisioner = {
   write(auth, home) {
-    const credentialsJson = path44.join(home, ".claude", ".credentials.json");
+    const credentialsJson = path45.join(home, ".claude", ".credentials.json");
     if (auth.kind === "api_key") {
       rmIfExists(credentialsJson);
       return { ANTHROPIC_API_KEY: auth.value };
@@ -20350,8 +20642,8 @@ var claudeProvisioner = {
     } else {
       rmIfExists(credentialsJson);
     }
-    const claudeJson = path44.join(home, ".claude.json");
-    if (!fs39.existsSync(claudeJson)) {
+    const claudeJson = path45.join(home, ".claude.json");
+    if (!fs40.existsSync(claudeJson)) {
       writeFile0600(
         claudeJson,
         JSON.stringify({ hasCompletedOnboarding: true, customApiKeyResponses: { approved: [] } })
@@ -20362,7 +20654,7 @@ var claudeProvisioner = {
 };
 var codexProvisioner = {
   write(auth, home) {
-    const authJson = path44.join(home, ".codex", "auth.json");
+    const authJson = path45.join(home, ".codex", "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { OPENAI_API_KEY: auth.value };
@@ -20373,8 +20665,8 @@ var codexProvisioner = {
 };
 var geminiProvisioner = {
   write(auth, home) {
-    const settingsJson = path44.join(home, ".gemini", "settings.json");
-    const oauthCreds = path44.join(home, ".gemini", "oauth_creds.json");
+    const settingsJson = path45.join(home, ".gemini", "settings.json");
+    const oauthCreds = path45.join(home, ".gemini", "oauth_creds.json");
     if (auth.kind === "api_key") {
       rmIfExists(oauthCreds);
       writeFile0600(settingsJson, '{"security":{"auth":{"selectedType":"gemini-api-key"}}}');
@@ -20387,7 +20679,7 @@ var geminiProvisioner = {
 };
 var cursorProvisioner = {
   write(auth, home) {
-    const authJson = path44.join(home, ".config", "cursor", "auth.json");
+    const authJson = path45.join(home, ".config", "cursor", "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { CURSOR_API_KEY: auth.value };
@@ -20429,22 +20721,22 @@ max_context_size = 262144
 var kimiProvisioner = {
   write(auth, home) {
     const credentialsFiles = [
-      path44.join(home, ".kimi", "credentials", "kimi-code.json"),
-      path44.join(home, ".kimi-code", "credentials", "kimi-code.json")
+      path45.join(home, ".kimi", "credentials", "kimi-code.json"),
+      path45.join(home, ".kimi-code", "credentials", "kimi-code.json")
     ];
     if (auth.kind === "api_key") {
       credentialsFiles.forEach(rmIfExists);
       return { KIMI_API_KEY: auth.value };
     }
     credentialsFiles.forEach((f) => writeFile0600(f, auth.value));
-    writeFile0600(path44.join(home, ".kimi-code", "config.toml"), KIMI_MANAGED_CONFIG_TOML);
+    writeFile0600(path45.join(home, ".kimi-code", "config.toml"), KIMI_MANAGED_CONFIG_TOML);
     return {};
   }
 };
 var coderabbitProvisioner = {
   write(auth, home) {
-    const dir = path44.join(home, ".coderabbit");
-    const authJson = path44.join(dir, "auth.json");
+    const dir = path45.join(home, ".coderabbit");
+    const authJson = path45.join(dir, "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { CODERABBIT_API_KEY: auth.value };
@@ -20456,13 +20748,13 @@ var coderabbitProvisioner = {
       try {
         const parsed = JSON.parse(value);
         if (typeof parsed.file === "string" && typeof parsed.contents === "string") {
-          file = path44.basename(parsed.file);
+          file = path45.basename(parsed.file);
           contents = parsed.contents;
         }
       } catch {
       }
     }
-    writeFile0600(path44.join(dir, file), contents);
+    writeFile0600(path45.join(dir, file), contents);
     return {};
   }
 };
@@ -20490,7 +20782,7 @@ var UnsupportedAgentError = class extends Error {
     this.agentId = agentId;
   }
 };
-function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os36.homedir()) {
+function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os37.homedir()) {
   const internal = toInternalAgentId(publicAgentId);
   if (!internal) throw new UnsupportedAgentError(publicAgentId);
   const provisioner = PROVISIONERS[internal];
@@ -20500,11 +20792,11 @@ function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os36.homedir(
 
 // src/commands/host/git-tooling.ts
 var import_node_child_process21 = require("child_process");
-var fs40 = __toESM(require("fs"));
-var os37 = __toESM(require("os"));
-var path45 = __toESM(require("path"));
+var fs41 = __toESM(require("fs"));
+var os38 = __toESM(require("os"));
+var path46 = __toESM(require("path"));
 function codeamBinDir() {
-  return process.env.CODEAM_BIN_DIR ?? path45.join(os37.homedir(), ".codeam", "bin");
+  return process.env.CODEAM_BIN_DIR ?? path46.join(os38.homedir(), ".codeam", "bin");
 }
 var FALLBACK_GH_VERSION = "2.62.0";
 var RELEASE_API = "https://api.github.com/repos/cli/cli/releases/latest";
@@ -20536,7 +20828,7 @@ async function download(url2, dest) {
     const res = await fetch(url2, { headers: { "User-Agent": "codeam-cli" } });
     if (!res.ok || !res.body) return false;
     const buf = Buffer.from(await res.arrayBuffer());
-    fs40.writeFileSync(dest, buf);
+    fs41.writeFileSync(dest, buf);
     return true;
   } catch {
     return false;
@@ -20559,8 +20851,8 @@ async function ensureGhCli(runner, token, deps = {}) {
     const version3 = await resolveVersionFn(token);
     const asset = `gh_${version3}_${osToken}_${arch2}`;
     const url2 = `https://github.com/cli/cli/releases/download/v${version3}/${asset}.${ext}`;
-    const tmpRoot = fs40.mkdtempSync(path45.join(os37.tmpdir(), "codeam-gh-"));
-    const archive = path45.join(tmpRoot, `${asset}.${ext}`);
+    const tmpRoot = fs41.mkdtempSync(path46.join(os38.tmpdir(), "codeam-gh-"));
+    const archive = path46.join(tmpRoot, `${asset}.${ext}`);
     if (!await downloadFn(url2, archive)) {
       log.warn("host-agent", "gh download failed \u2014 skipping (git pull/push still work via the credential helper)");
       return null;
@@ -20570,16 +20862,16 @@ async function ensureGhCli(runner, token, deps = {}) {
       log.warn("host-agent", `gh archive extraction failed (code=${String(extract.code)}) \u2014 skipping`);
       return null;
     }
-    const extractedBin = path45.join(tmpRoot, asset, "bin", binaryName);
-    if (!fs40.existsSync(extractedBin)) {
+    const extractedBin = path46.join(tmpRoot, asset, "bin", binaryName);
+    if (!fs41.existsSync(extractedBin)) {
       log.warn("host-agent", "gh binary not found in the extracted archive \u2014 skipping");
       return null;
     }
     const binDir = codeamBinDir();
-    fs40.mkdirSync(binDir, { recursive: true });
-    const target = path45.join(binDir, binaryName);
-    fs40.copyFileSync(extractedBin, target);
-    fs40.chmodSync(target, 493);
+    fs41.mkdirSync(binDir, { recursive: true });
+    const target = path46.join(binDir, binaryName);
+    fs41.copyFileSync(extractedBin, target);
+    fs41.chmodSync(target, 493);
     log.info("host-agent", `gh installed to ${target} (v${version3})`);
     return target;
   } catch (e) {
@@ -20639,8 +20931,8 @@ async function ensureGlabCli(runner, deps = {}) {
     const version3 = await resolveLatestGlabVersion();
     const asset = `glab_${version3}_${osToken}_${arch2}`;
     const url2 = `https://gitlab.com/gitlab-org/cli/-/releases/v${version3}/downloads/${asset}.${ext}`;
-    const tmpRoot = fs40.mkdtempSync(path45.join(os37.tmpdir(), "codeam-glab-"));
-    const archive = path45.join(tmpRoot, `${asset}.${ext}`);
+    const tmpRoot = fs41.mkdtempSync(path46.join(os38.tmpdir(), "codeam-glab-"));
+    const archive = path46.join(tmpRoot, `${asset}.${ext}`);
     if (!await downloadFn(url2, archive)) {
       log.warn("host-agent", "glab download failed \u2014 skipping (git push/pull still work)");
       return null;
@@ -20651,20 +20943,20 @@ async function ensureGlabCli(runner, deps = {}) {
       return null;
     }
     const candidates = [
-      path45.join(tmpRoot, "bin", binaryName),
-      path45.join(tmpRoot, asset, "bin", binaryName),
-      path45.join(tmpRoot, binaryName)
+      path46.join(tmpRoot, "bin", binaryName),
+      path46.join(tmpRoot, asset, "bin", binaryName),
+      path46.join(tmpRoot, binaryName)
     ];
-    const extractedBin = candidates.find((c2) => fs40.existsSync(c2));
+    const extractedBin = candidates.find((c2) => fs41.existsSync(c2));
     if (!extractedBin) {
       log.warn("host-agent", "glab binary not found in the extracted archive \u2014 skipping");
       return null;
     }
     const binDir = codeamBinDir();
-    fs40.mkdirSync(binDir, { recursive: true });
-    const target = path45.join(binDir, binaryName);
-    fs40.copyFileSync(extractedBin, target);
-    fs40.chmodSync(target, 493);
+    fs41.mkdirSync(binDir, { recursive: true });
+    const target = path46.join(binDir, binaryName);
+    fs41.copyFileSync(extractedBin, target);
+    fs41.chmodSync(target, 493);
     log.info("host-agent", `glab installed to ${target} (v${version3})`);
     return target;
   } catch (e) {
@@ -20861,24 +21153,24 @@ var HeadroomStatsReporter = class {
 };
 
 // src/commands/host/headroom-bootstrap.ts
-var fs42 = __toESM(require("fs"));
-var path47 = __toESM(require("path"));
-var os39 = __toESM(require("os"));
+var fs43 = __toESM(require("fs"));
+var path48 = __toESM(require("path"));
+var os40 = __toESM(require("os"));
 
 // src/commands/host/headroom-config.ts
-var fs41 = __toESM(require("fs"));
-var os38 = __toESM(require("os"));
-var path46 = __toESM(require("path"));
+var fs42 = __toESM(require("fs"));
+var os39 = __toESM(require("os"));
+var path47 = __toESM(require("path"));
 function headroomConfigPath() {
-  return path46.join(os38.homedir(), ".codeam", "headroom-config.json");
+  return path47.join(os39.homedir(), ".codeam", "headroom-config.json");
 }
 function persistHeadroomConfig(config) {
   try {
     const file = headroomConfigPath();
-    fs41.mkdirSync(path46.dirname(file), { recursive: true, mode: 448 });
+    fs42.mkdirSync(path47.dirname(file), { recursive: true, mode: 448 });
     const tmp = `${file}.tmp-${process.pid}`;
-    fs41.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
-    fs41.renameSync(tmp, file);
+    fs42.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
+    fs42.renameSync(tmp, file);
     restrictToOwner(file);
   } catch (err) {
     log.warn(
@@ -20888,21 +21180,21 @@ function persistHeadroomConfig(config) {
   }
 }
 function agentSettingsPath(kind) {
-  const home = os38.homedir();
-  if (kind === "claude") return path46.join(home, ".claude", "settings.json");
-  if (kind === "codex") return path46.join(home, ".codex", "auth.json");
-  if (kind === "copilot") return path46.join(home, ".config", "github-copilot", "hosts.json");
+  const home = os39.homedir();
+  if (kind === "claude") return path47.join(home, ".claude", "settings.json");
+  if (kind === "codex") return path47.join(home, ".codex", "auth.json");
+  if (kind === "copilot") return path47.join(home, ".config", "github-copilot", "hosts.json");
   return null;
 }
 function backupAgentHeadroomConfig(kind) {
   const src = agentSettingsPath(kind);
   if (!src) return;
   try {
-    if (!fs41.existsSync(src)) return;
-    const dest = path46.join(os38.homedir(), ".codeam", `headroom-backup-${kind}.json`);
-    fs41.mkdirSync(path46.dirname(dest), { recursive: true, mode: 448 });
-    fs41.copyFileSync(src, dest);
-    fs41.chmodSync(dest, 384);
+    if (!fs42.existsSync(src)) return;
+    const dest = path47.join(os39.homedir(), ".codeam", `headroom-backup-${kind}.json`);
+    fs42.mkdirSync(path47.dirname(dest), { recursive: true, mode: 448 });
+    fs42.copyFileSync(src, dest);
+    fs42.chmodSync(dest, 384);
     log.info("host-agent", `headroom config backup: ${src} \u2192 ${dest}`);
   } catch (err) {
     log.warn(
@@ -20914,12 +21206,12 @@ function backupAgentHeadroomConfig(kind) {
 function restoreAgentHeadroomConfig(kind) {
   const dest = agentSettingsPath(kind);
   if (!dest) return false;
-  const src = path46.join(os38.homedir(), ".codeam", `headroom-backup-${kind}.json`);
-  if (!fs41.existsSync(src)) return false;
+  const src = path47.join(os39.homedir(), ".codeam", `headroom-backup-${kind}.json`);
+  if (!fs42.existsSync(src)) return false;
   try {
-    fs41.mkdirSync(path46.dirname(dest), { recursive: true, mode: 448 });
-    fs41.copyFileSync(src, dest);
-    fs41.chmodSync(dest, 384);
+    fs42.mkdirSync(path47.dirname(dest), { recursive: true, mode: 448 });
+    fs42.copyFileSync(src, dest);
+    fs42.chmodSync(dest, 384);
     log.info("host-agent", `headroom config restored: ${src} \u2192 ${dest}`);
     return true;
   } catch (err) {
@@ -20932,7 +21224,7 @@ function restoreAgentHeadroomConfig(kind) {
 }
 function readHeadroomChildEnv() {
   try {
-    const raw = fs41.readFileSync(headroomConfigPath(), "utf8");
+    const raw = fs42.readFileSync(headroomConfigPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed !== "object" || parsed === null) return {};
     const o = parsed;
@@ -20968,49 +21260,49 @@ function bundledClaudeBinDir() {
   const roots = /* @__PURE__ */ new Set();
   let dir = __dirname;
   for (let i = 0; i < 6; i++) {
-    roots.add(path47.join(dir, "node_modules"));
-    const parent = path47.dirname(dir);
+    roots.add(path48.join(dir, "node_modules"));
+    const parent = path48.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
   try {
     const main2 = require.resolve("@anthropic-ai/claude-agent-sdk");
-    const marker = `${path47.sep}@anthropic-ai${path47.sep}`;
+    const marker = `${path48.sep}@anthropic-ai${path48.sep}`;
     const idx = main2.lastIndexOf(marker);
     if (idx !== -1) roots.add(main2.slice(0, idx));
   } catch {
   }
   for (const nm of roots) {
-    const atAnthropic = path47.join(nm, "@anthropic-ai");
+    const atAnthropic = path48.join(nm, "@anthropic-ai");
     let entries;
     try {
-      entries = fs42.readdirSync(atAnthropic);
+      entries = fs43.readdirSync(atAnthropic);
     } catch {
       continue;
     }
     for (const entry of entries) {
       if (!entry.startsWith("claude-agent-sdk-")) continue;
-      const bin = path47.join(atAnthropic, entry, "claude");
-      if (fs42.existsSync(bin)) return path47.dirname(bin);
+      const bin = path48.join(atAnthropic, entry, "claude");
+      if (fs43.existsSync(bin)) return path48.dirname(bin);
     }
   }
   return null;
 }
 async function getFreeDiskBytes(dir) {
   try {
-    const s = await fs42.promises.statfs(dir);
+    const s = await fs43.promises.statfs(dir);
     return s.bsize * s.bavail;
   } catch {
     return null;
   }
 }
 function headroomModelsCached() {
-  const hubDir = process.env.HUGGINGFACE_HUB_CACHE || path47.join(
-    process.env.HF_HOME || path47.join(os39.homedir(), ".cache", "huggingface"),
+  const hubDir = process.env.HUGGINGFACE_HUB_CACHE || path48.join(
+    process.env.HF_HOME || path48.join(os40.homedir(), ".cache", "huggingface"),
     "hub"
   );
   return HEADROOM_MODELS.every(
-    (m) => fs42.existsSync(path47.join(hubDir, `models--${m.repo.replace("/", "--")}`))
+    (m) => fs43.existsSync(path48.join(hubDir, `models--${m.repo.replace("/", "--")}`))
   );
 }
 async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner, opts = {}) {
@@ -21079,7 +21371,7 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner,
   if (initKind === "claude") {
     const claudeDir = bundledClaudeBinDir();
     if (claudeDir) {
-      initEnv.PATH = `${claudeDir}${path47.delimiter}${process.env["PATH"] ?? ""}`;
+      initEnv.PATH = `${claudeDir}${path48.delimiter}${process.env["PATH"] ?? ""}`;
       log.info("host-agent", `headroom init: bundled claude on PATH (${claudeDir})`);
     } else {
       log.warn("host-agent", "headroom init: bundled claude binary not found \u2014 init may fail");
@@ -21116,19 +21408,19 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner,
 }
 
 // src/commands/host/house-proxy-config.ts
-var fs43 = __toESM(require("fs"));
-var os40 = __toESM(require("os"));
-var path48 = __toESM(require("path"));
+var fs44 = __toESM(require("fs"));
+var os41 = __toESM(require("os"));
+var path49 = __toESM(require("path"));
 function houseProxyConfigPath() {
-  return path48.join(os40.homedir(), ".codeam", "house-proxy.json");
+  return path49.join(os41.homedir(), ".codeam", "house-proxy.json");
 }
 function persistHouseProxyConfig(config) {
   try {
     const file = houseProxyConfigPath();
-    fs43.mkdirSync(path48.dirname(file), { recursive: true, mode: 448 });
+    fs44.mkdirSync(path49.dirname(file), { recursive: true, mode: 448 });
     const tmp = `${file}.tmp-${process.pid}`;
-    fs43.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
-    fs43.renameSync(tmp, file);
+    fs44.writeFileSync(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: 384 });
+    fs44.renameSync(tmp, file);
     restrictToOwner(file);
   } catch (err) {
     log.warn(
@@ -21139,13 +21431,13 @@ function persistHouseProxyConfig(config) {
 }
 function clearHouseProxyConfig() {
   try {
-    fs43.rmSync(houseProxyConfigPath(), { force: true });
+    fs44.rmSync(houseProxyConfigPath(), { force: true });
   } catch {
   }
 }
 function readHouseProxyChildEnv() {
   try {
-    const raw = fs43.readFileSync(houseProxyConfigPath(), "utf8");
+    const raw = fs44.readFileSync(houseProxyConfigPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed !== "object" || parsed === null) return {};
     const o = parsed;
@@ -21178,9 +21470,9 @@ function readHouseProxyChildEnv() {
 var import_node_child_process23 = require("child_process");
 
 // src/lib/updateNotifier.ts
-var fs44 = __toESM(require("fs"));
-var os41 = __toESM(require("os"));
-var path49 = __toESM(require("path"));
+var fs45 = __toESM(require("fs"));
+var os42 = __toESM(require("os"));
+var path50 = __toESM(require("path"));
 var https6 = __toESM(require("https"));
 var import_node_child_process22 = require("child_process");
 var import_picocolors3 = __toESM(require("picocolors"));
@@ -21189,12 +21481,12 @@ var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
 var TTL_MS = 24 * 60 * 60 * 1e3;
 var REQUEST_TIMEOUT_MS = 1500;
 function cachePath() {
-  const dir = path49.join(os41.homedir(), ".codeam");
-  return path49.join(dir, "update-check.json");
+  const dir = path50.join(os42.homedir(), ".codeam");
+  return path50.join(dir, "update-check.json");
 }
 function readCache() {
   try {
-    const raw = fs44.readFileSync(cachePath(), "utf8");
+    const raw = fs45.readFileSync(cachePath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.fetchedAt !== "number" || typeof parsed.latest !== "string") return null;
     return parsed;
@@ -21205,10 +21497,10 @@ function readCache() {
 function writeCache(cache) {
   try {
     const file = cachePath();
-    fs44.mkdirSync(path49.dirname(file), { recursive: true });
+    fs45.mkdirSync(path50.dirname(file), { recursive: true });
     const tmp = `${file}.${process.pid}.tmp`;
-    fs44.writeFileSync(tmp, JSON.stringify(cache));
-    fs44.renameSync(tmp, file);
+    fs45.writeFileSync(tmp, JSON.stringify(cache));
+    fs45.renameSync(tmp, file);
   } catch {
   }
 }
@@ -21282,8 +21574,8 @@ function isLinkedInstall() {
       timeout: 2e3
     }).trim();
     if (!root) return false;
-    const pkgPath = path49.join(root, PKG_NAME);
-    return fs44.lstatSync(pkgPath).isSymbolicLink();
+    const pkgPath = path50.join(root, PKG_NAME);
+    return fs45.lstatSync(pkgPath).isSymbolicLink();
   } catch {
     return false;
   }
@@ -21319,7 +21611,7 @@ function maybeAutoUpdate(currentVersion, latest) {
     return;
   }
   try {
-    fs44.unlinkSync(cachePath());
+    fs45.unlinkSync(cachePath());
   } catch {
   }
   process.stderr.write(`  ${import_picocolors3.default.green("\u2713")} Updated. Resuming session...
@@ -21335,7 +21627,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.65.2" : null;
+  const current2 = true ? "2.65.3" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -21352,7 +21644,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.65.2" : null;
+  const current2 = true ? "2.65.3" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -21372,7 +21664,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.65.2" : null;
+  return true ? "2.65.3" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve9) => {
@@ -21439,7 +21731,7 @@ async function runSelfUpdate() {
 
 // src/commands/host/teardown.ts
 var import_node_child_process24 = require("child_process");
-var fs45 = __toESM(require("fs"));
+var fs46 = __toESM(require("fs"));
 var defaultDisableService = () => {
   try {
     (0, import_node_child_process24.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
@@ -21448,7 +21740,7 @@ var defaultDisableService = () => {
 };
 var defaultTeardownHeadroom = () => {
   try {
-    const kind = JSON.parse(fs45.readFileSync(headroomConfigPath(), "utf8")).agent;
+    const kind = JSON.parse(fs46.readFileSync(headroomConfigPath(), "utf8")).agent;
     if (kind) {
       (0, import_node_child_process24.execFileSync)("headroom", ["unwrap", kind], { stdio: "ignore", timeout: 15e3 });
     }
@@ -21516,8 +21808,8 @@ function maybeResumeLocalHeadroomReporter(ctx) {
   if (process.env["HEADROOM_ENABLED"] === "1") return null;
   try {
     const file = headroomConfigPath();
-    if (!fs46.existsSync(file)) return null;
-    const cfg = JSON.parse(fs46.readFileSync(file, "utf8"));
+    if (!fs47.existsSync(file)) return null;
+    const cfg = JSON.parse(fs47.readFileSync(file, "utf8"));
     if (!cfg?.enabled) return null;
     const agent = cfg.agent ?? "claude";
     const ingestUrl = `${resolveApiBaseUrl()}/api/sessions/${ctx.sessionId}/headroom-savings`;
@@ -22104,13 +22396,13 @@ var HostAgentSupervisor = class {
     const relay = this.relay;
     if (!relay) return;
     const raw = cmd.payload?.path;
-    const target = typeof raw === "string" && raw.trim() ? path50.resolve(raw.trim()) : os42.homedir();
+    const target = typeof raw === "string" && raw.trim() ? path51.resolve(raw.trim()) : os43.homedir();
     try {
-      const dirents = await fs46.promises.readdir(target, { withFileTypes: true });
+      const dirents = await fs47.promises.readdir(target, { withFileTypes: true });
       const entries = dirents.filter((d3) => !d3.name.startsWith(".")).map((d3) => ({ name: d3.name, isDir: d3.isDirectory() })).sort(
         (a, b) => a.isDir === b.isDir ? a.name.localeCompare(b.name) : a.isDir ? -1 : 1
       );
-      const parent = path50.dirname(target);
+      const parent = path51.dirname(target);
       await relay.sendResult(cmd.id, "completed", {
         path: target,
         // null at the filesystem root so the UI can hide the ".." affordance.
@@ -22343,14 +22635,14 @@ var HostAgentSupervisor = class {
           API_TIMEOUT_MS: "3000000",
           CODEAM_AUTO_TOKEN: payload.autoPairToken
         };
-        const houseConfigDir = path50.join(
-          os42.homedir(),
+        const houseConfigDir = path51.join(
+          os43.homedir(),
           ".codeam",
           "house-claude",
           payload.deployId
         );
         try {
-          fs46.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
+          fs47.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
         } catch {
         }
         childEnv.CLAUDE_CONFIG_DIR = houseConfigDir;
@@ -22376,7 +22668,7 @@ var HostAgentSupervisor = class {
         report("installing", "installing agent CLI");
         await this.runAgentInstall(payload.agentInstallScript);
       }
-      const home = process.env.HOME || os42.homedir();
+      const home = process.env.HOME || os43.homedir();
       childEnv.PATH = `${home}/.local/bin:${process.env.PATH ?? ""}`;
       if (payload.cloneToken) {
         try {
@@ -22384,13 +22676,13 @@ var HostAgentSupervisor = class {
           if ((payload.repoProvider ?? "github") === "gitlab") {
             const glabCmd = await ensureGlabCli(defaultGitToolingRunner);
             if (glabCmd) {
-              childEnv.PATH = `${codeamBinDir()}${path50.delimiter}${childEnv.PATH}`;
+              childEnv.PATH = `${codeamBinDir()}${path51.delimiter}${childEnv.PATH}`;
               await ensureGlabAuth(defaultGitToolingRunner, glabCmd, payload.cloneToken);
             }
           } else {
             const ghCmd = await ensureGhCli(defaultGitToolingRunner, payload.cloneToken);
             if (ghCmd) {
-              childEnv.PATH = `${codeamBinDir()}${path50.delimiter}${childEnv.PATH}`;
+              childEnv.PATH = `${codeamBinDir()}${path51.delimiter}${childEnv.PATH}`;
               await ensureGhAuth(defaultGitToolingRunner, ghCmd, payload.cloneToken);
             }
           }
@@ -22410,7 +22702,7 @@ var HostAgentSupervisor = class {
       }
       if (payload.headroomEnabled && payload.headroomAgent && payload.headroomSavingsIngestUrl && isHeadroomSupportedAgent(payload.headroomAgent)) {
         report("headroom", "setting up Headroom proxy");
-        const freeBytes = await this.getFreeDisk(os42.homedir());
+        const freeBytes = await this.getFreeDisk(os43.homedir());
         const alreadyInstalled = this.isHeadroomInstalled();
         if (!alreadyInstalled && freeBytes !== null && freeBytes < HEADROOM_MIN_FREE_DISK_BYTES) {
           const freeGb = (freeBytes / 1e9).toFixed(1);
@@ -22469,9 +22761,9 @@ var HostAgentSupervisor = class {
       );
       if (!payload.suppressOnboardingWelcome) {
         try {
-          const cfgDir = childEnv.CLAUDE_CONFIG_DIR || path50.join(os42.homedir(), ".claude");
-          const projectDir = path50.join(cfgDir, "projects", encodeCwd(cwd));
-          const hasPriorConversation = fs46.existsSync(projectDir) && fs46.readdirSync(projectDir).some((f) => f.endsWith(".jsonl"));
+          const cfgDir = childEnv.CLAUDE_CONFIG_DIR || path51.join(os43.homedir(), ".claude");
+          const projectDir = path51.join(cfgDir, "projects", encodeCwd(cwd));
+          const hasPriorConversation = fs47.existsSync(projectDir) && fs47.readdirSync(projectDir).some((f) => f.endsWith(".jsonl"));
           if (hasPriorConversation) {
             childEnv.CODEAM_RESUME_LATEST = "1";
             log.info(
@@ -22570,7 +22862,7 @@ var HostAgentSupervisor = class {
       if (this.children.size > 0) return;
       const session = getActiveSession();
       if (!session || !session.pluginId || !session.pollSecret || !session.agent) return;
-      const cwd = session.cwd && fs46.existsSync(session.cwd) ? session.cwd : process.cwd();
+      const cwd = session.cwd && fs47.existsSync(session.cwd) ? session.cwd : process.cwd();
       const proc = this.resumeSpawner(
         { ...readHeadroomChildEnv(), ...readHouseProxyChildEnv() },
         cwd
@@ -22667,12 +22959,12 @@ var HostAgentSupervisor = class {
       this.children.delete(deployId);
     }
     const dirs = [
-      path50.join(selfHostedWorkspaceRoot(), deployId),
-      path50.join(os42.homedir(), ".codeam", "house-claude", deployId)
+      path51.join(selfHostedWorkspaceRoot(), deployId),
+      path51.join(os43.homedir(), ".codeam", "house-claude", deployId)
     ];
     for (const dir of dirs) {
       try {
-        fs46.rmSync(dir, { recursive: true, force: true });
+        fs47.rmSync(dir, { recursive: true, force: true });
       } catch (err) {
         log.warn(
           "host-agent",
@@ -22809,9 +23101,9 @@ async function configureHeadroom(action, ctx, deps) {
 }
 
 // src/services/headroom/budget-relaunch.ts
-var fs47 = __toESM(require("fs"));
-var os43 = __toESM(require("os"));
-var path51 = __toESM(require("path"));
+var fs48 = __toESM(require("fs"));
+var os44 = __toESM(require("os"));
+var path52 = __toESM(require("path"));
 var import_child_process15 = require("child_process");
 function amendDeploymentManifestBudget(manifest, budget) {
   const rawArgs = manifest.proxy_args ?? [];
@@ -22845,7 +23137,7 @@ function amendDeploymentManifestBudget(manifest, budget) {
   return { ...manifest, proxy_args: newArgs, base_env: newEnv };
 }
 function findHeadroomDeployments(homeDir2, deps) {
-  const deployDir = path51.join(homeDir2, ".headroom", "deploy");
+  const deployDir = path52.join(homeDir2, ".headroom", "deploy");
   let profiles;
   try {
     profiles = deps.readDir(deployDir);
@@ -22854,7 +23146,7 @@ function findHeadroomDeployments(homeDir2, deps) {
   }
   const results = [];
   for (const profile of profiles) {
-    const manifestPath = path51.join(deployDir, profile, "manifest.json");
+    const manifestPath = path52.join(deployDir, profile, "manifest.json");
     let raw;
     try {
       raw = deps.readJson(manifestPath);
@@ -22886,8 +23178,8 @@ async function applyBudgetToHeadroom(budget, deps) {
 }
 function writeManifestReal(manifestPath, manifest) {
   const tmp = manifestPath + ".codeam.tmp";
-  fs47.writeFileSync(tmp, JSON.stringify(manifest, null, 2) + "\n", { mode: 384 });
-  fs47.renameSync(tmp, manifestPath);
+  fs48.writeFileSync(tmp, JSON.stringify(manifest, null, 2) + "\n", { mode: 384 });
+  fs48.renameSync(tmp, manifestPath);
 }
 function restartDeploymentReal(profile) {
   try {
@@ -22922,11 +23214,11 @@ function spawnProxyReal2(_budget) {
   );
 }
 function makeRealApplyBudgetDeps() {
-  const homeDir2 = os43.homedir();
+  const homeDir2 = os44.homedir();
   return {
     findDeployments: () => findHeadroomDeployments(homeDir2, {
-      readDir: (dir) => fs47.readdirSync(dir),
-      readJson: (filePath) => JSON.parse(fs47.readFileSync(filePath, "utf8"))
+      readDir: (dir) => fs48.readdirSync(dir),
+      readJson: (filePath) => JSON.parse(fs48.readFileSync(filePath, "utf8"))
     }),
     writeManifest: writeManifestReal,
     restartDeployment: restartDeploymentReal,
@@ -23059,47 +23351,47 @@ async function readUsageReport(deps = {}) {
 }
 
 // src/agents/acp/guardrail-config.ts
-var fs48 = __toESM(require("fs"));
-var path52 = __toESM(require("path"));
-var os44 = __toESM(require("os"));
+var fs49 = __toESM(require("fs"));
+var path53 = __toESM(require("path"));
+var os45 = __toESM(require("os"));
 var current = null;
-function guardrailConfigPath(homeDir2 = os44.homedir()) {
-  return path52.join(homeDir2, ".codeam", "guardrails.json");
+function guardrailConfigPath(homeDir2 = os45.homedir()) {
+  return path53.join(homeDir2, ".codeam", "guardrails.json");
 }
-function loadGuardrailPolicy(homeDir2 = os44.homedir()) {
+function loadGuardrailPolicy(homeDir2 = os45.homedir()) {
   try {
-    current = normalizeGuardrailPolicy(JSON.parse(fs48.readFileSync(guardrailConfigPath(homeDir2), "utf8")));
+    current = normalizeGuardrailPolicy(JSON.parse(fs49.readFileSync(guardrailConfigPath(homeDir2), "utf8")));
   } catch {
     current = { ...DEFAULT_GUARDRAIL_POLICY };
   }
   return current;
 }
-function getGuardrailPolicy(homeDir2 = os44.homedir()) {
+function getGuardrailPolicy(homeDir2 = os45.homedir()) {
   return current ?? loadGuardrailPolicy(homeDir2);
 }
-function setGuardrailPolicy(raw, homeDir2 = os44.homedir()) {
+function setGuardrailPolicy(raw, homeDir2 = os45.homedir()) {
   const next = normalizeGuardrailPolicy(raw);
   current = next;
   try {
     const p2 = guardrailConfigPath(homeDir2);
-    fs48.mkdirSync(path52.dirname(p2), { recursive: true });
-    fs48.writeFileSync(p2, JSON.stringify(next, null, 2));
+    fs49.mkdirSync(path53.dirname(p2), { recursive: true });
+    fs49.writeFileSync(p2, JSON.stringify(next, null, 2));
   } catch {
   }
   return next;
 }
 
 // src/services/preview/port-registry.ts
-var fs49 = __toESM(require("fs"));
-var os45 = __toESM(require("os"));
-var path53 = __toESM(require("path"));
+var fs50 = __toESM(require("fs"));
+var os46 = __toESM(require("os"));
+var path54 = __toESM(require("path"));
 var import_child_process16 = require("child_process");
 function registryPath() {
-  return path53.join(os45.homedir(), ".codeam", "preview-ports.json");
+  return path54.join(os46.homedir(), ".codeam", "preview-ports.json");
 }
 function readRegistry() {
   try {
-    const raw = fs49.readFileSync(registryPath(), "utf8");
+    const raw = fs50.readFileSync(registryPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object") return parsed;
   } catch {
@@ -23109,10 +23401,10 @@ function readRegistry() {
 function writeRegistry(reg) {
   try {
     const file = registryPath();
-    fs49.mkdirSync(path53.dirname(file), { recursive: true });
+    fs50.mkdirSync(path54.dirname(file), { recursive: true });
     const tmp = `${file}.tmp`;
-    fs49.writeFileSync(tmp, JSON.stringify(reg), "utf8");
-    fs49.renameSync(tmp, file);
+    fs50.writeFileSync(tmp, JSON.stringify(reg), "utf8");
+    fs50.renameSync(tmp, file);
   } catch (err) {
     log.warn("preview", `port-registry write failed: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -23178,7 +23470,7 @@ function reclaimOwnOrphanPort(port) {
 
 // src/services/preview/host-allow.ts
 var import_fs2 = require("fs");
-var path54 = __toESM(require("path"));
+var path55 = __toESM(require("path"));
 var NEXT_ALLOWED_ORIGINS = [
   "*.trycloudflare.com",
   "*.preview.codeagent-mobile.com",
@@ -23198,7 +23490,7 @@ var MARKER_DIR = ".codeam";
 var MARKER_FILE = "preview-host-allow.json";
 var ORIG_INFIX = ".codeam-orig";
 function markerPath(cwd) {
-  return path54.join(cwd, MARKER_DIR, MARKER_FILE);
+  return path55.join(cwd, MARKER_DIR, MARKER_FILE);
 }
 async function fileExists(p2) {
   try {
@@ -23211,13 +23503,13 @@ async function fileExists(p2) {
 async function findConfigFile(cwd, framework) {
   const base = CONFIG_BASENAMES[framework];
   for (const ext of CONFIG_EXTS) {
-    if (await fileExists(path54.join(cwd, `${base}${ext}`))) return `${base}${ext}`;
+    if (await fileExists(path55.join(cwd, `${base}${ext}`))) return `${base}${ext}`;
   }
   return null;
 }
 async function dependsOn(cwd, pkgName) {
   try {
-    const raw = await import_fs2.promises.readFile(path54.join(cwd, "package.json"), "utf8");
+    const raw = await import_fs2.promises.readFile(path55.join(cwd, "package.json"), "utf8");
     const pkg = JSON.parse(raw);
     return !!(pkg.dependencies?.[pkgName] ?? pkg.devDependencies?.[pkgName]);
   } catch {
@@ -23225,11 +23517,11 @@ async function dependsOn(cwd, pkgName) {
   }
 }
 async function isEsmConfig(cwd, configFile) {
-  const ext = path54.extname(configFile);
+  const ext = path55.extname(configFile);
   if (ext === ".mjs" || ext === ".mts" || ext === ".ts") return true;
   if (ext === ".cjs") return false;
   try {
-    const raw = await import_fs2.promises.readFile(path54.join(cwd, "package.json"), "utf8");
+    const raw = await import_fs2.promises.readFile(path55.join(cwd, "package.json"), "utf8");
     return JSON.parse(raw).type === "module";
   } catch {
     return false;
@@ -23312,7 +23604,7 @@ function shimFor(framework, origBasename, esm) {
   return framework === "next" ? nextShim(origBasename, esm) : viteShim(origBasename, esm);
 }
 async function writeMarker(cwd, marker) {
-  await import_fs2.promises.mkdir(path54.join(cwd, MARKER_DIR), { recursive: true });
+  await import_fs2.promises.mkdir(path55.join(cwd, MARKER_DIR), { recursive: true });
   await import_fs2.promises.writeFile(markerPath(cwd), JSON.stringify(marker, null, 2), "utf8");
 }
 async function readMarker(cwd) {
@@ -23327,9 +23619,9 @@ async function restorePreviewHostAllow(cwd) {
   const marker = await readMarker(cwd);
   if (!marker) return;
   try {
-    const configAbs = path54.join(cwd, marker.configFile);
+    const configAbs = path55.join(cwd, marker.configFile);
     if (marker.backupFile) {
-      const backupAbs = path54.join(cwd, marker.backupFile);
+      const backupAbs = path55.join(cwd, marker.backupFile);
       if (await fileExists(backupAbs)) {
         await import_fs2.promises.rm(configAbs, { force: true });
         await import_fs2.promises.rename(backupAbs, configAbs);
@@ -23362,16 +23654,16 @@ async function applyPreviewHostAllow(cwd) {
     }
     if (!framework) return;
     if (existing) {
-      const ext = path54.extname(existing);
+      const ext = path55.extname(existing);
       const origBasename = `${CONFIG_BASENAMES[framework]}${ORIG_INFIX}${ext}`;
       const esm = await isEsmConfig(cwd, existing);
-      await import_fs2.promises.rename(path54.join(cwd, existing), path54.join(cwd, origBasename));
-      await import_fs2.promises.writeFile(path54.join(cwd, existing), shimFor(framework, origBasename, esm), "utf8");
+      await import_fs2.promises.rename(path55.join(cwd, existing), path55.join(cwd, origBasename));
+      await import_fs2.promises.writeFile(path55.join(cwd, existing), shimFor(framework, origBasename, esm), "utf8");
       await writeMarker(cwd, { framework, configFile: existing, backupFile: origBasename });
       log.info("preview", `host-allow: wrapped ${existing} (${framework}) for tunnel access`);
     } else {
       const configFile = `${CONFIG_BASENAMES[framework]}.mjs`;
-      await import_fs2.promises.writeFile(path54.join(cwd, configFile), shimFor(framework, null, true), "utf8");
+      await import_fs2.promises.writeFile(path55.join(cwd, configFile), shimFor(framework, null, true), "utf8");
       await writeMarker(cwd, { framework, configFile, backupFile: null });
       log.info("preview", `host-allow: created ${configFile} (${framework}) for tunnel access`);
     }
@@ -24053,19 +24345,19 @@ function activePreviewSessionIds() {
 
 // src/services/preview/start-orchestrator.ts
 var import_child_process21 = require("child_process");
-var fs57 = __toESM(require("fs"));
-var path61 = __toESM(require("path"));
+var fs58 = __toESM(require("fs"));
+var path62 = __toESM(require("path"));
 var import_which2 = __toESM(require("which"));
 
 // src/services/project-env/index.ts
 var import_fs6 = require("fs");
-var path60 = __toESM(require("path"));
+var path61 = __toESM(require("path"));
 
 // src/beads/project-key.ts
 var import_child_process20 = require("child_process");
 var crypto2 = __toESM(require("crypto"));
-var fs55 = __toESM(require("fs"));
-var path59 = __toESM(require("path"));
+var fs56 = __toESM(require("fs"));
+var path60 = __toESM(require("path"));
 function normalizeOrigin(raw) {
   const trimmed = raw.trim();
   if (!trimmed) return null;
@@ -24091,17 +24383,17 @@ function normalizeOrigin(raw) {
   return `${host2}/${pathPart}`;
 }
 function findRepoRoot(cwd) {
-  let dir = path59.resolve(cwd);
+  let dir = path60.resolve(cwd);
   const seen = /* @__PURE__ */ new Set();
   for (let i = 0; i < 256; i++) {
     if (seen.has(dir)) return null;
     seen.add(dir);
     try {
-      const stat3 = fs55.statSync(path59.join(dir, ".git"), { throwIfNoEntry: false });
+      const stat3 = fs56.statSync(path60.join(dir, ".git"), { throwIfNoEntry: false });
       if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
     } catch {
     }
-    const parent = path59.dirname(dir);
+    const parent = path60.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -24112,7 +24404,7 @@ var _execSeam2 = {
     const out2 = (0, import_child_process20.execFileSync)(file, args2, opts);
     return typeof out2 === "string" ? out2 : out2.toString("utf8");
   },
-  realpath: (p2) => fs55.realpathSync(p2)
+  realpath: (p2) => fs56.realpathSync(p2)
 };
 function readOrigin(cwd) {
   try {
@@ -24141,7 +24433,7 @@ function deriveProjectIdentity(cwd = process.cwd()) {
   } catch {
   }
   const hash = crypto2.createHash("sha256").update(real).digest("hex");
-  return { projectKey: `path:${hash}`, projectLabel: path59.basename(real) || "project" };
+  return { projectKey: `path:${hash}`, projectLabel: path60.basename(real) || "project" };
 }
 
 // src/services/project-env/index.ts
@@ -24154,7 +24446,7 @@ async function readIfExists(p2) {
 }
 async function syncProjectEnvUp(cwd, ctx) {
   if (!ctx.pluginAuthToken) return;
-  const content = await readIfExists(path60.join(cwd, ".env"));
+  const content = await readIfExists(path61.join(cwd, ".env"));
   if (content == null) return;
   try {
     const { projectKey, projectLabel } = deriveProjectIdentity(cwd);
@@ -24176,7 +24468,7 @@ async function syncProjectEnvUp(cwd, ctx) {
 }
 async function restoreProjectEnvIfMissing(cwd, ctx) {
   if (!ctx.pluginAuthToken) return false;
-  const envPath = path60.join(cwd, ".env");
+  const envPath = path61.join(cwd, ".env");
   if (await readIfExists(envPath) != null) return false;
   try {
     const { projectKey, projectLabel } = deriveProjectIdentity(cwd);
@@ -24187,7 +24479,7 @@ async function restoreProjectEnvIfMissing(cwd, ctx) {
       projectKey
     });
     if (!stored) return false;
-    const tmp = path60.join(cwd, ".env.codeam-restore.tmp");
+    const tmp = path61.join(cwd, ".env.codeam-restore.tmp");
     await import_fs6.promises.writeFile(tmp, stored.content, { encoding: "utf8", mode: 384 });
     await import_fs6.promises.rename(tmp, envPath);
     log.info("project-env", `restored .env (${stored.keyCount} vars) for ${projectLabel}`);
@@ -24264,8 +24556,8 @@ function normalizeDetectionForSpawn(detection, cwd) {
   if (args2.length === 0) return detection;
   const binName = args2[0];
   if (binName.startsWith("-")) return detection;
-  const binPath = path61.join(cwd, "node_modules", ".bin", binName);
-  if (!fs57.existsSync(binPath)) return detection;
+  const binPath = path62.join(cwd, "node_modules", ".bin", binName);
+  if (!fs58.existsSync(binPath)) return detection;
   return {
     ...detection,
     command: binPath,
@@ -24638,9 +24930,9 @@ async function establishTunnel(ctx, dev) {
 
 // src/beads/bd-adapter.ts
 var import_child_process22 = require("child_process");
-var fs58 = __toESM(require("fs"));
-var os47 = __toESM(require("os"));
-var path62 = __toESM(require("path"));
+var fs59 = __toESM(require("fs"));
+var os48 = __toESM(require("os"));
+var path63 = __toESM(require("path"));
 var BD_PACKAGE = "@beads/bd";
 function resolveBundledBdBinary() {
   return _resolveSeam.resolveBundled();
@@ -24652,11 +24944,11 @@ function _defaultResolveBundled() {
   } catch {
     return null;
   }
-  const binDir = path62.join(path62.dirname(pkgJsonPath), "bin");
+  const binDir = path63.join(path63.dirname(pkgJsonPath), "bin");
   const binaryName = process.platform === "win32" ? "bd.exe" : "bd";
-  const binaryPath = path62.join(binDir, binaryName);
+  const binaryPath = path63.join(binDir, binaryName);
   try {
-    fs58.accessSync(binaryPath, fs58.constants.F_OK);
+    fs59.accessSync(binaryPath, fs59.constants.F_OK);
     return binaryPath;
   } catch {
     return null;
@@ -24666,13 +24958,13 @@ function resolveBdOnPath() {
   return _resolveSeam.resolveOnPath();
 }
 function _defaultResolveOnPath() {
-  const dirs = (process.env.PATH ?? "").split(path62.delimiter).filter(Boolean);
+  const dirs = (process.env.PATH ?? "").split(path63.delimiter).filter(Boolean);
   const candidates = process.platform === "win32" ? ["bd.exe", "bd.cmd", "bd"] : ["bd"];
   for (const dir of dirs) {
     for (const candidate of candidates) {
-      const full = path62.join(dir, candidate);
+      const full = path63.join(dir, candidate);
       try {
-        fs58.accessSync(full, fs58.constants.F_OK);
+        fs59.accessSync(full, fs59.constants.F_OK);
         return full;
       } catch {
       }
@@ -24757,7 +25049,7 @@ var BdAdapter = class {
     const env = { ...process.env };
     if (!env.HOME) {
       try {
-        const home = os47.homedir();
+        const home = os48.homedir();
         if (home) env.HOME = home;
       } catch {
       }
@@ -24849,9 +25141,9 @@ function coerceIssue(row, projectKey) {
 
 // src/beads/provisioner.ts
 var import_child_process25 = require("child_process");
-var fs60 = __toESM(require("fs"));
-var os49 = __toESM(require("os"));
-var path64 = __toESM(require("path"));
+var fs61 = __toESM(require("fs"));
+var os50 = __toESM(require("os"));
+var path65 = __toESM(require("path"));
 
 // src/beads/install-bd.ts
 var import_child_process23 = require("child_process");
@@ -24916,9 +25208,9 @@ async function installBd(platform3 = process.platform) {
 
 // src/beads/install-dolt.ts
 var import_child_process24 = require("child_process");
-var fs59 = __toESM(require("fs"));
-var os48 = __toESM(require("os"));
-var path63 = __toESM(require("path"));
+var fs60 = __toESM(require("fs"));
+var os49 = __toESM(require("os"));
+var path64 = __toESM(require("path"));
 var DOLT_INSTALL_SH_URL = "https://github.com/dolthub/dolt/releases/latest/download/install.sh";
 var DOLT_MSI_URL = "https://github.com/dolthub/dolt/releases/latest/download/dolt-windows-amd64.msi";
 function resolveDoltInstallStrategy(platform3) {
@@ -25007,14 +25299,14 @@ async function installDoltToDir(targetDir, platform3 = process.platform, arch2 =
   return result;
 }
 var _doltPathSeam = {
-  homedir: () => os48.homedir(),
+  homedir: () => os49.homedir(),
   getPath: () => process.env.PATH ?? "",
   setPath: (p2) => {
     process.env.PATH = p2;
   },
   exists: (p2) => {
     try {
-      fs59.accessSync(p2, fs59.constants.F_OK);
+      fs60.accessSync(p2, fs60.constants.F_OK);
       return true;
     } catch {
       return false;
@@ -25025,7 +25317,7 @@ function doltBinaryNames(platform3) {
   return platform3 === "win32" ? ["dolt.exe", "dolt.cmd", "dolt"] : ["dolt"];
 }
 function knownDoltDirs(platform3) {
-  const P3 = platform3 === "win32" ? path63.win32 : path63.posix;
+  const P3 = platform3 === "win32" ? path64.win32 : path64.posix;
   const home = _doltPathSeam.homedir();
   if (platform3 === "win32") {
     return [
@@ -25041,7 +25333,7 @@ function knownDoltDirs(platform3) {
   ].filter(Boolean);
 }
 function ensureDoltResolvable(platform3 = process.platform) {
-  const P3 = platform3 === "win32" ? path63.win32 : path63.posix;
+  const P3 = platform3 === "win32" ? path64.win32 : path64.posix;
   const delim = platform3 === "win32" ? ";" : ":";
   const names = doltBinaryNames(platform3);
   const pathDirs = _doltPathSeam.getPath().split(delim).filter(Boolean);
@@ -25218,17 +25510,17 @@ var _provisionSeam = {
 };
 var _linkSeam = {
   platform: () => process.platform,
-  homedir: () => os49.homedir(),
+  homedir: () => os50.homedir(),
   isWritableDir: (dir) => {
     try {
-      fs60.accessSync(dir, fs60.constants.W_OK);
+      fs61.accessSync(dir, fs61.constants.W_OK);
       return true;
     } catch {
       return false;
     }
   },
   ensureDir: (dir) => {
-    fs60.mkdirSync(dir, { recursive: true });
+    fs61.mkdirSync(dir, { recursive: true });
   },
   /**
    * A directory to symlink `bd` into so the AGENT's shell + Claude Code's
@@ -25249,9 +25541,9 @@ var _linkSeam = {
    * which `linkBdOntoPath` creates if missing.
    */
   cliBinDir: () => {
-    const pathDirs = (process.env.PATH ?? "").split(path64.delimiter).filter(Boolean);
+    const pathDirs = (process.env.PATH ?? "").split(path65.delimiter).filter(Boolean);
     const home = _linkSeam.homedir();
-    const localBin = home ? path64.join(home, ".local", "bin") : null;
+    const localBin = home ? path65.join(home, ".local", "bin") : null;
     if (localBin) {
       try {
         _linkSeam.ensureDir(localBin);
@@ -25261,16 +25553,16 @@ var _linkSeam = {
     const candidates = [];
     if (localBin) candidates.push(localBin);
     try {
-      candidates.push(path64.dirname(process.execPath));
+      candidates.push(path65.dirname(process.execPath));
     } catch {
     }
     candidates.push("/usr/local/bin");
     const entry = process.argv[1];
     if (entry) {
       try {
-        candidates.push(path64.dirname(fs60.realpathSync(entry)));
+        candidates.push(path65.dirname(fs61.realpathSync(entry)));
       } catch {
-        candidates.push(path64.dirname(entry));
+        candidates.push(path65.dirname(entry));
       }
     }
     const onPathWritable = candidates.find(
@@ -25282,20 +25574,20 @@ var _linkSeam = {
   /** Current symlink target at `linkPath`, or null when absent / not a link. */
   readlink: (linkPath) => {
     try {
-      return fs60.readlinkSync(linkPath);
+      return fs61.readlinkSync(linkPath);
     } catch {
       return null;
     }
   },
-  unlink: (linkPath) => fs60.unlinkSync(linkPath),
-  symlink: (target, linkPath) => fs60.symlinkSync(target, linkPath)
+  unlink: (linkPath) => fs61.unlinkSync(linkPath),
+  symlink: (target, linkPath) => fs61.symlinkSync(target, linkPath)
 };
 function linkBdOntoPath(binaryPath) {
   if (_linkSeam.platform() === "win32") return;
   const binDir = _linkSeam.cliBinDir();
   if (!binDir) return;
   _linkSeam.ensureDir(binDir);
-  const linkPath = path64.join(binDir, "bd");
+  const linkPath = path65.join(binDir, "bd");
   if (linkPath === binaryPath) return;
   const current2 = _linkSeam.readlink(linkPath);
   if (current2 === binaryPath) return;
@@ -25490,7 +25782,7 @@ function dedupeRecipes(agents) {
 
 // src/beads/watcher.ts
 var crypto4 = __toESM(require("crypto"));
-var path65 = __toESM(require("path"));
+var path66 = __toESM(require("path"));
 var API_BASE6 = resolveApiBaseUrl();
 var DEBOUNCE_MS2 = 400;
 var ZERO_SUMMARY = {
@@ -25514,7 +25806,7 @@ var BeadsWatcher = class {
   constructor(opts) {
     this.opts = opts;
     this.bd = opts.adapter ?? new BdAdapter({ cwd: opts.cwd, beadsDir: opts.beadsDir });
-    this.feedPath = opts.feedPath ?? path65.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
+    this.feedPath = opts.feedPath ?? path66.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
     this.apiBase = opts.apiBaseUrl ?? API_BASE6;
   }
   opts;
@@ -26013,8 +26305,8 @@ function cleanupAttachmentTempFiles() {
 function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
-    const tmpPath = path68.join(os53.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
-    fs63.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
+    const tmpPath = path69.join(os54.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
+    fs64.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     pendingAttachmentFiles.add(tmpPath);
     return tmpPath;
   });
@@ -26232,10 +26524,10 @@ var listFiles = async (ctx, cmd, parsed) => {
   await ctx.relay.sendResult(cmd.id, "completed", result);
 };
 var envReadH = async (ctx, cmd) => {
-  const envPath = path68.join(process.cwd(), ".env");
+  const envPath = path69.join(process.cwd(), ".env");
   await restoreProjectEnvIfMissing(process.cwd(), ctx);
   try {
-    const raw = await fs63.promises.readFile(envPath, "utf8");
+    const raw = await fs64.promises.readFile(envPath, "utf8");
     await ctx.relay.sendResult(cmd.id, "completed", {
       exists: true,
       vars: parseDotenv(raw)
@@ -26266,15 +26558,15 @@ var envWriteH = async (ctx, cmd, parsed) => {
     }
     seen.add(v.key);
   }
-  const envPath = path68.join(process.cwd(), ".env");
-  const tmpPath = path68.join(process.cwd(), ".env.codeam.tmp");
+  const envPath = path69.join(process.cwd(), ".env");
+  const tmpPath = path69.join(process.cwd(), ".env.codeam.tmp");
   try {
-    await fs63.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
-    await fs63.promises.rename(tmpPath, envPath);
+    await fs64.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
+    await fs64.promises.rename(tmpPath, envPath);
     await ctx.relay.sendResult(cmd.id, "completed", { ok: true, count: vars.length });
     void syncProjectEnvUp(process.cwd(), ctx);
   } catch (err) {
-    await fs63.promises.rm(tmpPath, { force: true }).catch(() => void 0);
+    await fs64.promises.rm(tmpPath, { force: true }).catch(() => void 0);
     await ctx.relay.sendResult(cmd.id, "failed", { error: err.message });
   }
 };
@@ -26323,7 +26615,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
   let configuredAgent = rawAgentId;
   if (!configuredAgent) {
     try {
-      const raw = JSON.parse(fs63.readFileSync(headroomConfigPath(), "utf8"));
+      const raw = JSON.parse(fs64.readFileSync(headroomConfigPath(), "utf8"));
       configuredAgent = raw.agent ?? "";
     } catch {
     }
@@ -26357,7 +26649,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
     persist: persistHeadroomConfig,
     readEnabled: () => {
       try {
-        const raw = JSON.parse(fs63.readFileSync(headroomConfigPath(), "utf8"));
+        const raw = JSON.parse(fs64.readFileSync(headroomConfigPath(), "utf8"));
         return raw.enabled === true;
       } catch {
         return false;
@@ -26679,7 +26971,7 @@ var headroomBudgetH = async (ctx, cmd) => {
   }
   let headroomActive = false;
   try {
-    const raw = JSON.parse(fs63.readFileSync(headroomConfigPath(), "utf8"));
+    const raw = JSON.parse(fs64.readFileSync(headroomConfigPath(), "utf8"));
     headroomActive = raw.enabled === true;
   } catch {
   }
@@ -26689,7 +26981,7 @@ var headroomBudgetH = async (ctx, cmd) => {
   }
   let existingConfig = { enabled: true };
   try {
-    existingConfig = JSON.parse(fs63.readFileSync(headroomConfigPath(), "utf8"));
+    existingConfig = JSON.parse(fs64.readFileSync(headroomConfigPath(), "utf8"));
   } catch {
   }
   if (payload.budgetEnabled && payload.budgetUsd != null) {
@@ -26802,9 +27094,9 @@ var CLI_UPDATE_MAX_ATTEMPTS = 3;
 function buildNpmInstallInvocation(opts) {
   const entryScript = opts?.entryScript ?? process.argv[1] ?? "";
   const execPath = opts?.execPath ?? process.execPath;
-  const exists2 = opts?.existsSync ?? fs63.existsSync;
+  const exists2 = opts?.existsSync ?? fs64.existsSync;
   const platform3 = opts?.platform ?? process.platform;
-  const p2 = platform3 === "win32" ? path68.win32 : path68.posix;
+  const p2 = platform3 === "win32" ? path69.win32 : path69.posix;
   const normalized = entryScript.split(/[\\/]/).join("/");
   const marker = "/lib/node_modules/codeam-cli/";
   const markerIdx = normalized.indexOf(marker);
@@ -26826,7 +27118,7 @@ function isPermissionError(stderr) {
 function resolveGlobalNodeModulesDir(opts) {
   const entryScript = opts?.entryScript ?? process.argv[1] ?? "";
   const platform3 = opts?.platform ?? process.platform;
-  const p2 = platform3 === "win32" ? path68.win32 : path68.posix;
+  const p2 = platform3 === "win32" ? path69.win32 : path69.posix;
   const marker = "/lib/node_modules/codeam-cli/";
   const markerIdx = entryScript.split(/[\\/]/).join("/").indexOf(marker);
   if (markerIdx <= 0) return null;
@@ -26836,9 +27128,9 @@ function resolveGlobalNodeModulesDir(opts) {
 var STALE_STAGING_AGE_MS = CLI_UPDATE_INSTALL_TIMEOUT_MS;
 function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
   if (!nodeModulesDir) return 0;
-  const readdirSync15 = deps?.readdirSync ?? fs63.readdirSync;
-  const statSync17 = deps?.statSync ?? fs63.statSync;
-  const rmSync9 = deps?.rmSync ?? fs63.rmSync;
+  const readdirSync15 = deps?.readdirSync ?? fs64.readdirSync;
+  const statSync17 = deps?.statSync ?? fs64.statSync;
+  const rmSync9 = deps?.rmSync ?? fs64.rmSync;
   let removed = 0;
   let entries;
   try {
@@ -26848,7 +27140,7 @@ function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
   }
   for (const name of entries) {
     if (!/^\.codeam-cli-/.test(name)) continue;
-    const full = path68.join(nodeModulesDir, name);
+    const full = path69.join(nodeModulesDir, name);
     try {
       const st3 = statSync17(full);
       if (now - st3.mtimeMs < STALE_STAGING_AGE_MS) continue;
@@ -27728,7 +28020,7 @@ function resolveTokenValue(args2) {
   if (fileFlag) {
     const path92 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs64.readFileSync(path92, "utf8").trim();
+      const content = fs65.readFileSync(path92, "utf8").trim();
       if (content.length === 0) fail(`--token-file ${path92} is empty`);
       rmIfExistsQuiet(path92);
       return content;
@@ -27759,7 +28051,7 @@ async function claimOnce(token, pluginId, pluginSecretHash) {
     pluginId,
     ideName: "codeam-cli (codespace)",
     ideVersion: process.env.npm_package_version ?? "unknown",
-    hostname: os54.hostname(),
+    hostname: os55.hostname(),
     codespaceName: process.env.CODESPACE_NAME ?? "",
     // Current git branch of the codespace's working directory, so the
     // backend can populate `PairedSession.branch` for the codespace pair.
@@ -27820,7 +28112,7 @@ async function claim(token, pluginId, pluginSecretHash) {
   }
 }
 function pairAutoLockPath() {
-  return path69.join(os54.homedir(), ".codeam", "pair-auto.lock");
+  return path70.join(os55.homedir(), ".codeam", "pair-auto.lock");
 }
 function isLivePairAuto(pid) {
   if (!Number.isInteger(pid) || pid <= 0 || pid === process.pid) return false;
@@ -27830,7 +28122,7 @@ function isLivePairAuto(pid) {
     if (e.code !== "EPERM") return false;
   }
   try {
-    return fs64.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
+    return fs65.readFileSync(`/proc/${pid}/cmdline`, "utf8").includes("codeam");
   } catch {
     return true;
   }
@@ -27840,24 +28132,24 @@ function isLiveCodeam(pid) {
 }
 function daemonLockPath(sessionId) {
   const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
-  return path69.join(os54.homedir(), ".codeam", `daemon-${safe}.lock`);
+  return path70.join(os55.homedir(), ".codeam", `daemon-${safe}.lock`);
 }
 function acquireDaemonLock(sessionId) {
   const lockPath = daemonLockPath(sessionId);
   try {
-    fs64.mkdirSync(path69.dirname(lockPath), { recursive: true });
+    fs65.mkdirSync(path70.dirname(lockPath), { recursive: true });
     try {
-      fs64.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs65.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs64.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs65.readFileSync(lockPath, "utf8").trim());
       if (holder && holder !== process.pid && isLiveCodeam(holder)) return false;
-      fs64.writeFileSync(lockPath, String(process.pid));
+      fs65.writeFileSync(lockPath, String(process.pid));
     }
     const release3 = () => {
       try {
-        if (fs64.existsSync(lockPath) && Number(fs64.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs64.unlinkSync(lockPath);
+        if (fs65.existsSync(lockPath) && Number(fs65.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs65.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -27879,19 +28171,19 @@ function acquireDaemonLock(sessionId) {
 function acquireSingletonLock() {
   const lockPath = pairAutoLockPath();
   try {
-    fs64.mkdirSync(path69.dirname(lockPath), { recursive: true });
+    fs65.mkdirSync(path70.dirname(lockPath), { recursive: true });
     try {
-      fs64.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
+      fs65.writeFileSync(lockPath, String(process.pid), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
-      const holder = Number(fs64.readFileSync(lockPath, "utf8").trim());
+      const holder = Number(fs65.readFileSync(lockPath, "utf8").trim());
       if (isLivePairAuto(holder)) return false;
-      fs64.writeFileSync(lockPath, String(process.pid));
+      fs65.writeFileSync(lockPath, String(process.pid));
     }
     process.once("exit", () => {
       try {
-        if (fs64.existsSync(lockPath) && Number(fs64.readFileSync(lockPath, "utf8").trim()) === process.pid) {
-          fs64.unlinkSync(lockPath);
+        if (fs65.existsSync(lockPath) && Number(fs65.readFileSync(lockPath, "utf8").trim()) === process.pid) {
+          fs65.unlinkSync(lockPath);
         }
       } catch {
       }
@@ -28343,7 +28635,7 @@ var AgentService = class _AgentService {
 };
 
 // src/agents/acp/adapters.ts
-var path70 = __toESM(require("path"));
+var path71 = __toESM(require("path"));
 
 // src/agents/kimi/installer.ts
 var import_node_child_process27 = require("child_process");
@@ -28463,13 +28755,13 @@ function resolveBin(pkgName, binName) {
   try {
     const manifestPath = require_.resolve(`${pkgName}/package.json`);
     const manifest = require_(`${pkgName}/package.json`);
-    const pkgDir = path70.dirname(manifestPath);
+    const pkgDir = path71.dirname(manifestPath);
     const bin = manifest.bin;
     if (!bin) return null;
-    if (typeof bin === "string") return path70.resolve(pkgDir, bin);
+    if (typeof bin === "string") return path71.resolve(pkgDir, bin);
     const target = binName ?? Object.keys(bin)[0];
     if (!target || !bin[target]) return null;
-    return path70.resolve(pkgDir, bin[target]);
+    return path71.resolve(pkgDir, bin[target]);
   } catch {
     return null;
   }
@@ -28658,286 +28950,6 @@ var os56 = __toESM(require("os"));
 var https7 = __toESM(require("https"));
 var http6 = __toESM(require("http"));
 var import_zod2 = require("zod");
-
-// src/agents/acp/squad-roster.ts
-var fs65 = __toESM(require("fs"));
-var os55 = __toESM(require("os"));
-var path71 = __toESM(require("path"));
-var PROMPT_MAX = 500;
-var REPLY_SUMMARY_MAX = 1e3;
-var PREAMBLE_MAX = 2e3;
-var BRIEFING_DEFAULT_MAX = 8e3;
-var GENERIC_SPECIALTY = "general implementation tasks";
-function clip(s, max) {
-  return s.length > max ? s.slice(0, max) : s;
-}
-function defaultMember() {
-  return {
-    acpSessionId: null,
-    provisioned: false,
-    binaryVerified: false,
-    lastTurnIndex: 0,
-    contextTextFallback: false
-  };
-}
-function journalPathFor(homeDir2, sessionId) {
-  return path71.join(homeDir2, ".codeam", `squad-journal-${sessionId}.json`);
-}
-function loadJournal(journalPath) {
-  try {
-    const raw = JSON.parse(fs65.readFileSync(journalPath, "utf-8"));
-    return Array.isArray(raw.turns) ? raw.turns : [];
-  } catch {
-    return [];
-  }
-}
-var SquadState = class {
-  /** Set by the caller after fetchSquadRoster; null until then. */
-  roster = null;
-  /**
-   * Autonomous chained handoffs (P2-2, PRO). Seeded from the persisted
-   * `SavedSession.squadAuto` at session start and rewritten by
-   * `squad_configure`. Read-only to callers — mutate via {@link setAuto}, which
-   * clamps the budget and re-arms the chain.
-   */
-  autoConfig = { enabled: false, hopBudget: SQUAD_HOP_BUDGET_DEFAULT };
-  /**
-   * Hops left in the CURRENT chain. Reset to the budget on every USER-initiated
-   * prompt (so a user turn always interrupts and re-arms) and decremented by
-   * each self-accepted handoff.
-   */
-  hopsLeft = 0;
-  /** Lifetime handoff counters for `squad_stats` (in-memory, this process). */
-  handoffCounters = { proposed: 0, accepted: 0, auto: 0 };
-  journalPath;
-  turns;
-  members = /* @__PURE__ */ new Map();
-  constructor(opts) {
-    this.journalPath = journalPathFor(opts.homeDir ?? os55.homedir(), opts.sessionId);
-    this.turns = loadJournal(this.journalPath);
-    if (opts.auto) this.setAuto(opts.auto);
-  }
-  get auto() {
-    return this.autoConfig;
-  }
-  /** Apply a new mode (clamping the budget) and re-arm the chain. */
-  setAuto(value) {
-    this.autoConfig = {
-      enabled: value.enabled === true,
-      hopBudget: clampHopBudget(value.hopBudget)
-    };
-    this.resetHops();
-    return this.autoConfig;
-  }
-  hopsRemaining() {
-    return this.hopsLeft;
-  }
-  /** Re-arm the chain — called at the start of every USER-initiated turn. */
-  resetHops() {
-    this.hopsLeft = this.autoConfig.enabled ? this.autoConfig.hopBudget : 0;
-  }
-  /** Spend one hop on a self-accepted handoff. */
-  consumeHop() {
-    if (this.hopsLeft > 0) this.hopsLeft -= 1;
-  }
-  countProposal(opts) {
-    this.handoffCounters.proposed += 1;
-    if (opts.auto) this.handoffCounters.auto += 1;
-  }
-  countAccepted() {
-    this.handoffCounters.accepted += 1;
-  }
-  /**
-   * Per-member activity for the `squad_stats` relay command, derived from the
-   * journal (the same shared history the delta briefing reads) plus the
-   * in-memory handoff counters. `filesTouched` counts DISTINCT paths — a member
-   * that edited the same file across three turns touched ONE file.
-   */
-  stats() {
-    const byAgent = /* @__PURE__ */ new Map();
-    for (const t2 of this.turns) {
-      let row = byAgent.get(t2.agentId);
-      if (!row) {
-        row = { turns: 0, files: /* @__PURE__ */ new Set() };
-        byAgent.set(t2.agentId, row);
-      }
-      row.turns += 1;
-      for (const f of t2.filesTouched) row.files.add(f);
-    }
-    const members = [...byAgent.entries()].map(([agentId, row]) => ({
-      agentId,
-      turns: row.turns,
-      filesTouched: row.files.size
-    }));
-    return { members, handoffs: { ...this.handoffCounters }, sinceTurn: 1 };
-  }
-  /** Returns (creating on first access) the mutable per-agent state. */
-  member(agentId) {
-    let m = this.members.get(agentId);
-    if (!m) {
-      m = defaultMember();
-      this.members.set(agentId, m);
-    }
-    return m;
-  }
-  /** Appends a journal entry and persists (fire-and-forget durability). */
-  recordTurn(entry) {
-    const turn = {
-      turn: this.turns.length + 1,
-      agentId: entry.agentId,
-      prompt: clip(entry.prompt, PROMPT_MAX),
-      replySummary: clip(entry.replySummary, REPLY_SUMMARY_MAX),
-      filesTouched: entry.filesTouched
-    };
-    this.turns.push(turn);
-    this.persist();
-  }
-  turnCount() {
-    return this.turns.length;
-  }
-  entriesSince(turnIndex) {
-    return this.turns.filter((t2) => t2.turn > turnIndex);
-  }
-  persist() {
-    try {
-      fs65.mkdirSync(path71.dirname(this.journalPath), { recursive: true, mode: 448 });
-      fs65.writeFileSync(this.journalPath, JSON.stringify({ turns: this.turns }), { mode: 384 });
-    } catch {
-    }
-  }
-};
-function specialtyFor(agentId) {
-  return SQUAD_SPECIALTIES[agentId] ?? GENERIC_SPECIALTY;
-}
-var TEAM_PREAMBLE_MARKER = "[Team context]";
-var TEAM_PREAMBLE_LINES = [
-  "[Team context] You are the active agent in a CodeAgent Mobile session where the user",
-  "has a squad of agents and can pass work between them. Your available teammates:",
-  "If a task clearly fits a teammate better than you, you MAY propose a handoff by ending",
-  `your reply with a fenced code block tagged ${HANDOFF_FENCE_TAG} containing ONE JSON object:`,
-  '{"to":"<teammate id>","reason":"<one sentence>","prompt":"<the prompt they should run>"}',
-  "Propose at most one handoff per reply, only when genuinely better, and never announce",
-  "the block in prose \u2014 the app renders it as a card the user can accept."
-];
-var TEAM_PREAMBLE_BULLET_RE = /^- .+ — best at: /;
-var BRIEFING_MARKER = "[Team update]";
-var BRIEFING_HEADER = "[Team update] While you were away, other agents worked on this session:";
-var BRIEFING_FOOTER = "Continue from the CURRENT state of the working tree.";
-function buildTeamPreamble(roster, currentAgent, opts) {
-  const others = roster.agents.filter((a) => a.agentId !== currentAgent);
-  if (others.length === 0) return null;
-  const lines = [
-    TEAM_PREAMBLE_LINES[0],
-    TEAM_PREAMBLE_LINES[1],
-    ...others.map((a) => `- ${a.displayName} \u2014 best at: ${specialtyFor(a.agentId)}`)
-  ];
-  if (opts.handoffInstructions) {
-    lines.push(...TEAM_PREAMBLE_LINES.slice(2));
-  }
-  return clip(lines.join("\n"), PREAMBLE_MAX);
-}
-function renderJournalEntry(e) {
-  const filesClause = e.filesTouched.length > 0 ? ` (files: ${e.filesTouched.join(", ")})` : "";
-  return `- turn ${e.turn} (${e.agentId}): ${e.prompt} \u2192 ${e.replySummary}${filesClause}`;
-}
-function buildDeltaBriefing(entries, maxChars = BRIEFING_DEFAULT_MAX) {
-  if (entries.length === 0) return null;
-  const header = BRIEFING_HEADER;
-  const footer = BRIEFING_FOOTER;
-  const envelope = header.length + 1 + footer.length + 1;
-  const sorted = [...entries].sort((a, b) => a.turn - b.turn);
-  const lines = [];
-  let bodyLen = 0;
-  for (let i = sorted.length - 1; i >= 0; i--) {
-    const line = renderJournalEntry(sorted[i]);
-    const addedLen = line.length + (lines.length > 0 ? 1 : 0);
-    if (lines.length > 0 && envelope + bodyLen + addedLen > maxChars) break;
-    lines.unshift(line);
-    bodyLen += addedLen;
-  }
-  return [header, lines.join("\n"), footer].join("\n");
-}
-
-// src/agents/acp/squad-context.ts
-var SQUAD_CONTEXT_URI = "codeam://squad-context";
-var HANDOFF_MARKER = "[Session handoff]";
-var HANDOFF_TERMINATOR = "--- End of handoff context ---";
-function buildSquadContextBlock(text) {
-  return {
-    type: "resource",
-    resource: { uri: SQUAD_CONTEXT_URI, mimeType: "text/plain", text }
-  };
-}
-function isSquadContextBlock(block) {
-  return block.type === "resource" && block.resource.uri === SQUAD_CONTEXT_URI;
-}
-function looksLikeUnsupportedPromptShape(err) {
-  const code = err?.code;
-  if (code === -32602) return true;
-  const message = err instanceof Error ? err.message : String(err ?? "");
-  if (/invalid[ _]params|-32602/i.test(message)) return true;
-  return /\bresource\b/i.test(message) && /unsupported|not supported/i.test(message);
-}
-function skipWhile(lines, start2, keepGoing) {
-  let i = start2;
-  while (i < lines.length && keepGoing(lines[i])) i++;
-  return i;
-}
-function endOfTeamPreamble(lines, start2) {
-  if (lines[start2] !== TEAM_PREAMBLE_LINES[0]) return -1;
-  if (lines[start2 + 1] !== TEAM_PREAMBLE_LINES[1]) return -1;
-  return skipWhile(
-    lines,
-    start2 + 2,
-    (line) => TEAM_PREAMBLE_BULLET_RE.test(line) || TEAM_PREAMBLE_LINES.includes(line)
-  );
-}
-function endOfTerminatedBlock(lines, start2, terminator) {
-  for (let i = start2; i < lines.length; i++) {
-    if (lines[i].trimEnd() === terminator) return i + 1;
-  }
-  return -1;
-}
-function stripSquadContext(text) {
-  if (!text.includes(HANDOFF_MARKER) && !text.includes(BRIEFING_MARKER) && !text.includes(TEAM_PREAMBLE_MARKER)) {
-    return text;
-  }
-  const lines = text.split("\n");
-  const kept = [];
-  let i = 0;
-  let stripped = false;
-  while (i < lines.length) {
-    const line = lines[i];
-    if (line.startsWith(HANDOFF_MARKER)) {
-      const end = endOfTerminatedBlock(lines, i, HANDOFF_TERMINATOR);
-      if (end !== -1) {
-        i = end;
-        stripped = true;
-        continue;
-      }
-    } else if (line.startsWith(BRIEFING_MARKER)) {
-      const end = endOfTerminatedBlock(lines, i, BRIEFING_FOOTER);
-      if (end !== -1) {
-        i = end;
-        stripped = true;
-        continue;
-      }
-    } else if (line.startsWith(TEAM_PREAMBLE_MARKER)) {
-      const end = endOfTeamPreamble(lines, i);
-      if (end !== -1) {
-        i = end;
-        stripped = true;
-        continue;
-      }
-    }
-    kept.push(line);
-    i++;
-  }
-  if (!stripped) return text;
-  return kept.join("\n").trim();
-}
-
-// src/services/history.service.ts
 var historyRecordSchema = import_zod2.z.object({
   type: import_zod2.z.string().optional(),
   timestamp: import_zod2.z.union([import_zod2.z.string(), import_zod2.z.number()]).optional(),
@@ -28960,6 +28972,7 @@ var CONVERSATION_BATCH_SIZE = 30;
 function scrubSquadContext(messages) {
   const out2 = [];
   for (const m of messages) {
+    if (isLeakedSquadContextText(m.text) || isAgentMetaBlock(m.text)) continue;
     const text = stripSquadContext(m.text);
     if (text === m.text) {
       out2.push(m);
@@ -28991,7 +29004,11 @@ function parseJsonl(filePath) {
     }
     const result = historyRecordSchema.safeParse(parsedJson);
     if (!result.success) {
-      log.warn("history:parseJsonl", `record failed schema validation in ${filePath}`, result.error.issues);
+      log.warn(
+        "history:parseJsonl",
+        `record failed schema validation in ${filePath}`,
+        result.error.issues
+      );
       continue;
     }
     const record2 = result.data;
@@ -29256,7 +29273,14 @@ var HistoryService = class _HistoryService {
     const inputTokens = (lastUsage["input_tokens"] ?? lastUsage["prompt_tokens"] ?? 0) + (lastUsage["cache_read_input_tokens"] ?? 0) + (lastUsage["cache_creation_input_tokens"] ?? 0);
     const outputTokens = lastUsage["output_tokens"] ?? lastUsage["completion_tokens"] ?? 0;
     const percent = Math.min(100, Math.round(inputTokens / total * 100));
-    return { used: inputTokens, total, percent, model: lastModel, outputTokens, cacheReadTokens: lastUsage["cache_read_input_tokens"] ?? 0 };
+    return {
+      used: inputTokens,
+      total,
+      percent,
+      model: lastModel,
+      outputTokens,
+      cacheReadTokens: lastUsage["cache_read_input_tokens"] ?? 0
+    };
   }
   /**
    * Estimate the API cost for the current month in the current project directory.
@@ -29429,7 +29453,9 @@ var HistoryService = class _HistoryService {
         ok = await post("/api/sessions/conversation", body, this.pluginAuthToken);
       }
       if (!ok) {
-        throw new Error(`Failed to upload conversation batch ${i + 1}/${totalBatches} after all retries`);
+        throw new Error(
+          `Failed to upload conversation batch ${i + 1}/${totalBatches} after all retries`
+        );
       }
     }
     const last = messages[messages.length - 1];
@@ -44473,7 +44499,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.65.2" : "0.0.0-dev";
+  const cliVersion = true ? "2.65.3" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -44864,7 +44890,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.65.2" : "unknown";
+  const v = true ? "2.65.3" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }