codeam-cli 2.75.34 → 2.75.36

package/dist/index.js

@@ -77,12 +77,12 @@ var require_src = __commonJS({
       lineEnd: `${CSI2}K`,
       lineStart: `${CSI2}1K`,
       lines(count) {
-        let clear = "";
+        let clear2 = "";
         for (let i = 0; i < count; i++)
-          clear += this.line + (i < count - 1 ? cursor.up() : "");
+          clear2 += this.line + (i < count - 1 ? cursor.up() : "");
         if (count)
-          clear += cursor.left;
-        return clear;
+          clear2 += cursor.left;
+        return clear2;
       }
     };
     module2.exports = { cursor, scroll, erase, beep };
@@ -357,8 +357,8 @@ function defaultSpawn(timeoutMs) {
   });
 }
 function resolveConvexBin(cwd) {
-  const local = path95.join(cwd, "node_modules", ".bin", process.platform === "win32" ? "convex.cmd" : "convex");
-  if (fs81.existsSync(local)) return { cmd: local, args: [] };
+  const local = path96.join(cwd, "node_modules", ".bin", process.platform === "win32" ? "convex.cmd" : "convex");
+  if (fs82.existsSync(local)) return { cmd: local, args: [] };
   return { cmd: "npx", args: ["--yes", "convex"] };
 }
 function redact(text, key) {
@@ -489,13 +489,13 @@ async function runConvexAdminMcp(client3, id) {
   });
   await server.connect(new StdioServerTransport());
 }
-var import_node_child_process32, fs81, path95, TOOLS;
+var import_node_child_process32, fs82, path96, TOOLS;
 var init_convex_admin_mcp = __esm({
   "src/integrations/convex-admin-mcp.ts"() {
     "use strict";
     import_node_child_process32 = require("child_process");
-    fs81 = __toESM(require("fs"));
-    path95 = __toESM(require("path"));
+    fs82 = __toESM(require("fs"));
+    path96 = __toESM(require("path"));
     TOOLS = [
       {
         name: "tables",
@@ -578,7 +578,7 @@ function createToolCallWatchdog(deps) {
   const clearTimer = deps.clearTimer ?? ((t2) => clearTimeout(t2));
   const timers = /* @__PURE__ */ new Map();
   const answered = /* @__PURE__ */ new Set();
-  const clear = (id) => {
+  const clear2 = (id) => {
     const t2 = timers.get(id);
     if (t2) {
       clearTimer(t2);
@@ -590,7 +590,7 @@ function createToolCallWatchdog(deps) {
       const m = msg;
       if (m.method !== "tools/call" || m.id === void 0) return;
       const id = m.id;
-      clear(id);
+      clear2(id);
       const timer = setTimer(() => {
         timers.delete(id);
         answered.add(id);
@@ -610,7 +610,7 @@ function createToolCallWatchdog(deps) {
     onServerMessage(msg) {
       const m = msg;
       if (m.id === void 0 || m.method !== void 0) return false;
-      clear(m.id);
+      clear2(m.id);
       return answered.delete(m.id);
     },
     dispose() {
@@ -1135,12 +1135,25 @@ var PUBLIC_TO_INTERNAL = {
   "managed-codex": "claude",
   "managed-claude": "claude"
 };
+var INTERNAL_TO_PUBLIC = {
+  claude: "claude_code",
+  codex: "codex",
+  cursor: "cursor",
+  aider: "aider",
+  coderabbit: "coderabbit",
+  gemini: "gemini",
+  kimi: "kimi",
+  opencode: "opencode"
+};
 function isPublicToInternalKey(v) {
   return Object.prototype.hasOwnProperty.call(PUBLIC_TO_INTERNAL, v);
 }
 function publicToInternal(publicId) {
   return isPublicToInternalKey(publicId) ? PUBLIC_TO_INTERNAL[publicId] : null;
 }
+function internalToPublic(internal) {
+  return INTERNAL_TO_PUBLIC[internal] ?? null;
+}
 var TERMINAL_AGENT_PREFIX = "__terminal__:";
 var AGENT_ID_ALIASES = {
   claude_code: "claude",
@@ -3532,11 +3545,11 @@ function quiet(fn) {
     log.debug(TAG, "ignored sync error", err);
   }
 }
-function rmIfExistsQuiet(path97) {
+function rmIfExistsQuiet(path98) {
   try {
-    fs2.rmSync(path97, { force: true });
+    fs2.rmSync(path98, { force: true });
   } catch (err) {
-    log.debug(TAG, `rmIfExists failed for ${path97}`, err);
+    log.debug(TAG, `rmIfExists failed for ${path98}`, err);
   }
 }
 function killQuiet(target, signal = "SIGTERM") {
@@ -3740,8 +3753,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? (0, import_pat
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path97) {
-  return path97.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path98) {
+  return path98.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 
 // ../../node_modules/@posthog/core/dist/error-tracking/index.mjs
@@ -4815,20 +4828,20 @@ var ErrorPropertiesBuilder = class {
     };
     return context;
   }
-  buildCoercingContext(mechanism, hint, depth = 0) {
-    const coerce = (input, depth2) => {
-      if (!(depth2 <= MAX_CAUSE_RECURSION)) return;
+  buildCoercingContext(mechanism, hint, depth2 = 0) {
+    const coerce = (input, depth3) => {
+      if (!(depth3 <= MAX_CAUSE_RECURSION)) return;
       {
-        const ctx = this.buildCoercingContext(mechanism, hint, depth2);
+        const ctx = this.buildCoercingContext(mechanism, hint, depth3);
         return this.applyCoercers(input, ctx);
       }
     };
     const context = {
       ...hint,
-      syntheticException: 0 == depth ? hint.syntheticException : void 0,
+      syntheticException: 0 == depth2 ? hint.syntheticException : void 0,
       mechanism,
-      apply: (input) => coerce(input, depth),
-      next: (input) => coerce(input, depth + 1)
+      apply: (input) => coerce(input, depth2),
+      next: (input) => coerce(input, depth2 + 1)
     };
     return context;
   }
@@ -6474,13 +6487,13 @@ var PostHogCoreStateless = class {
       sentFromRoute += batchMessages.length;
     }
   }
-  async _sendOtlpBatch({ path: path97, payload }) {
+  async _sendOtlpBatch({ path: path98, payload }) {
     if (this.disabled) return {
       kind: "fatal",
       error: new Error("The client is disabled")
     };
     const serialized = JSON.stringify(payload);
-    const url2 = `${this.host}/i/v1/${path97}?token=${encodeURIComponent(this.apiKey)}`;
+    const url2 = `${this.host}/i/v1/${path98}?token=${encodeURIComponent(this.apiKey)}`;
     const gzippedPayload = this.disableCompression ? null : await this.compressPayload(serialized);
     const fetchOptions = {
       method: "POST",
@@ -7126,7 +7139,7 @@ function encodeBigInt(value, logger) {
     intValue: decimal
   };
 }
-function encodeAnyValue(value, logger, state, depth) {
+function encodeAnyValue(value, logger, state, depth2) {
   if (state.remainingNodes <= 0) return {
     stringValue: TRUNCATED_VALUE
   };
@@ -7174,7 +7187,7 @@ function encodeAnyValue(value, logger, state, depth) {
     if (state.ancestors.has(value)) return {
       stringValue: CIRCULAR_VALUE
     };
-    if (depth >= MAX_JSON_SAFE_VALUE_DEPTH) return {
+    if (depth2 >= MAX_JSON_SAFE_VALUE_DEPTH) return {
       stringValue: TRUNCATED_VALUE
     };
     if (value instanceof Date) {
@@ -7188,17 +7201,17 @@ function encodeAnyValue(value, logger, state, depth) {
     try {
       try {
         const toJSON = value.toJSON;
-        if ("function" == typeof toJSON) return encodeAnyValue(toJSON.call(value), logger, state, depth + 1);
+        if ("function" == typeof toJSON) return encodeAnyValue(toJSON.call(value), logger, state, depth2 + 1);
       } catch {
       }
       if (isArray(value)) return {
         arrayValue: {
-          values: encodeArrayValues(value, logger, state, depth + 1)
+          values: encodeArrayValues(value, logger, state, depth2 + 1)
         }
       };
       return {
         kvlistValue: {
-          values: encodeKeyValueList(value, logger, state, depth + 1)
+          values: encodeKeyValueList(value, logger, state, depth2 + 1)
         }
       };
     } finally {
@@ -7209,14 +7222,14 @@ function encodeAnyValue(value, logger, state, depth) {
     stringValue: sanitizeString(String(value))
   };
 }
-function encodeArrayValues(values, logger, state, depth) {
+function encodeArrayValues(values, logger, state, depth2) {
   const result = [];
   const itemCount = Math.min(values.length, MAX_JSON_SAFE_VALUE_ITEMS);
   let index = 0;
   for (; index < itemCount && state.remainingNodes > 0; index++) try {
     const element = index in values ? values[index] : void 0;
     if (isNullish(element)) continue;
-    result.push(encodeAnyValue(element, logger, state, depth));
+    result.push(encodeAnyValue(element, logger, state, depth2));
   } catch {
     result.push({
       stringValue: UNSERIALIZABLE_VALUE
@@ -7227,7 +7240,7 @@ function encodeArrayValues(values, logger, state, depth) {
   });
   return result;
 }
-function encodeKeyValueList(attrs, logger, state, depth) {
+function encodeKeyValueList(attrs, logger, state, depth2) {
   const result = [];
   for (const key in attrs) if (propertyIsEnumerable.call(attrs, key)) {
     if (!key) {
@@ -7243,7 +7256,7 @@ function encodeKeyValueList(attrs, logger, state, depth) {
       if (isNull(value) || isUndefined(value)) continue;
       result.push({
         key: sanitizeString(key),
-        value: encodeAnyValue(value, logger, state, depth)
+        value: encodeAnyValue(value, logger, state, depth2)
       });
     } catch {
       result.push({
@@ -7720,14 +7733,14 @@ async function addSourceContext(frames, openSourceFile = import_promises.open, l
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-async function openRegularSourceFile(path97, openSourceFile, logger) {
+async function openRegularSourceFile(path98, openSourceFile, logger) {
   let fileHandle;
   let isValid = false;
   try {
-    fileHandle = await openSourceFile(path97, import_node_fs.constants.O_RDONLY | import_node_fs.constants.O_NONBLOCK);
+    fileHandle = await openSourceFile(path98, import_node_fs.constants.O_RDONLY | import_node_fs.constants.O_NONBLOCK);
     const fileStat = await fileHandle.stat();
     if (!fileStat.isFile()) return;
-    if (fileStat.size > MAX_CONTEXTLINES_FILE_SIZE) return void logger?.debug(`Skipping source context for oversized file ${path97}: ${fileStat.size} bytes exceeds ${MAX_CONTEXTLINES_FILE_SIZE}`);
+    if (fileStat.size > MAX_CONTEXTLINES_FILE_SIZE) return void logger?.debug(`Skipping source context for oversized file ${path98}: ${fileStat.size} bytes exceeds ${MAX_CONTEXTLINES_FILE_SIZE}`);
     isValid = true;
     return fileHandle;
   } catch {
@@ -7737,8 +7750,8 @@ async function openRegularSourceFile(path97, openSourceFile, logger) {
     });
   }
 }
-async function getContextLinesFromFile(path97, ranges, output, cacheKey, openSourceFile, logger) {
-  const fileHandle = await openRegularSourceFile(path97, openSourceFile, logger);
+async function getContextLinesFromFile(path98, ranges, output, cacheKey, openSourceFile, logger) {
+  const fileHandle = await openRegularSourceFile(path98, openSourceFile, logger);
   if (void 0 === fileHandle) return void LRU_FILE_CONTENTS_FS_READ_FAILED.set(cacheKey, 1);
   const openedFileHandle = fileHandle;
   return new Promise((resolve12) => {
@@ -7840,22 +7853,22 @@ function clearLineContext(frame) {
   delete frame.context_line;
   delete frame.post_context;
 }
-function shouldSkipContextLinesForFile(path97) {
-  return path97.startsWith("node:") || path97.endsWith(".min.js") || path97.endsWith(".min.cjs") || path97.endsWith(".min.mjs") || path97.startsWith("data:");
+function shouldSkipContextLinesForFile(path98) {
+  return path98.startsWith("node:") || path98.endsWith(".min.js") || path98.endsWith(".min.cjs") || path98.endsWith(".min.mjs") || path98.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame) {
   if (void 0 !== frame.lineno && frame.lineno > MAX_CONTEXTLINES_LINENO) return true;
   if (void 0 !== frame.colno && frame.colno > MAX_CONTEXTLINES_COLNO) return true;
   return false;
 }
-function makeSourceCacheKey(path97, basePath) {
-  if ((0, import_node_path.isAbsolute)(path97)) return JSON.stringify([
+function makeSourceCacheKey(path98, basePath) {
+  if ((0, import_node_path.isAbsolute)(path98)) return JSON.stringify([
     null,
-    path97
+    path98
   ]);
   return void 0 === basePath ? void 0 : JSON.stringify([
     basePath,
-    path97
+    path98
   ]);
 }
 function rangeExistsInContentCache(cacheKey, range) {
@@ -10516,7 +10529,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.75.34" : "0.0.0-dev",
+    cliVersion: true ? "2.75.36" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -10758,7 +10771,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.75.34",
+  version: "2.75.36",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -12088,7 +12101,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.75.34" ? { ideVersion: "2.75.34" } : {}
+      ..."2.75.36" ? { ideVersion: "2.75.36" } : {}
     };
     try {
       const res = await _postJson(`${API_BASE2}/api/plugin/heartbeat`, body);
@@ -12161,10 +12174,12 @@ var CommandRelayService = class _CommandRelayService {
         installed: true
       }
     ];
+    const linkedAgentId = this.linkedAgentIdProvider?.() ?? null;
     _postJson(`${API_BASE2}/api/plugin/agents`, {
       pluginId: this.pluginId,
       agents,
-      capabilities: { squad: true }
+      capabilities: { squad: true },
+      ...linkedAgentId ? { linkedAgentId } : {}
     }).then(() => {
       this.agentsRegistered = true;
     }).catch(() => {
@@ -12175,6 +12190,16 @@ var CommandRelayService = class _CommandRelayService {
    * switch). Heartbeats pick the new id up on their next tick; call
    * {@link reannounceAgents} to push the new `/api/plugin/agents` entry.
    */
+  /**
+   * The PUBLIC id of the agent really running (`managed-codex`, `claude_code`),
+   * sent alongside the runtime-keyed `agents` list. The runtime id is `claude`
+   * for every managed agent, so without this a session the host RESUMED on a
+   * managed agent read as the user's own Claude in the app (owner, 2026-09-26).
+   */
+  linkedAgentIdProvider = null;
+  setLinkedAgentIdProvider(provider) {
+    this.linkedAgentIdProvider = provider;
+  }
   setAgentMeta(meta) {
     this.agentMeta = meta;
   }
@@ -12394,10 +12419,10 @@ var WINDOWS_LEGACY_JUNCTIONS = [
   /[\\/]Start Menu([\\/]|$)/i,
   /[\\/]Templates([\\/]|$)/i
 ];
-function isUnsafeWindowsWatchRoot(dir, homedir52) {
+function isUnsafeWindowsWatchRoot(dir, homedir53) {
   const norm = (p2) => p2.replace(/\//g, "\\").replace(/\\+$/, "").toLowerCase();
   const cwd = norm(dir);
-  const home = norm(homedir52);
+  const home = norm(homedir53);
   if (cwd === home) return true;
   if (/^[a-z]:$/.test(cwd)) return true;
   const sysRoots = [
@@ -13796,8 +13821,8 @@ async function isExistingFile(absPath) {
     return false;
   }
 }
-async function walkForSuffix(dir, needleVariants, depth, ctx) {
-  if (depth > MAX_WALK_DEPTH) return;
+async function walkForSuffix(dir, needleVariants, depth2, ctx) {
+  if (depth2 > MAX_WALK_DEPTH) return;
   if (ctx.visited > MAX_VISITED_DIRS) return;
   if (ctx.matches.length >= ctx.cap) return;
   ctx.visited++;
@@ -13819,7 +13844,7 @@ async function walkForSuffix(dir, needleVariants, depth, ctx) {
     if (!e.isDirectory()) continue;
     if (SUBDIR_IGNORE.has(e.name)) continue;
     if (e.name.startsWith(".") && SUBDIR_IGNORE.has(e.name)) continue;
-    await walkForSuffix(path7.join(dir, e.name), needleVariants, depth + 1, ctx);
+    await walkForSuffix(path7.join(dir, e.name), needleVariants, depth2 + 1, ctx);
     if (ctx.matches.length >= ctx.cap) return;
   }
 }
@@ -13941,7 +13966,7 @@ async function listProjectFiles(opts = {}) {
   const q2 = (opts.query ?? "").trim().toLowerCase();
   const out2 = [];
   let truncated = false;
-  async function walk(dir, depth) {
+  async function walk(dir, depth2) {
     if (out2.length >= cap) {
       truncated = true;
       return;
@@ -13960,8 +13985,8 @@ async function listProjectFiles(opts = {}) {
       if (PROJECT_IGNORE.has(e.name)) continue;
       const full = path8.join(dir, e.name);
       if (e.isDirectory()) {
-        if (depth >= 12) continue;
-        await walk(full, depth + 1);
+        if (depth2 >= 12) continue;
+        await walk(full, depth2 + 1);
       } else if (e.isFile()) {
         const rel = path8.relative(root, full);
         if (q2 && !rel.toLowerCase().includes(q2) && !e.name.toLowerCase().includes(q2)) {
@@ -17127,10 +17152,10 @@ function buildForPlatform(platform3) {
 var import_node_crypto4 = require("crypto");
 
 // src/agents/claude/resolver.ts
-function buildClaudeLaunch(extraArgs = [], os66 = createOsStrategy()) {
-  const found = os66.findInPath("claude") ?? os66.findInPath("claude-code");
+function buildClaudeLaunch(extraArgs = [], os67 = createOsStrategy()) {
+  const found = os67.findInPath("claude") ?? os67.findInPath("claude-code");
   if (!found) return null;
-  return os66.buildLaunch(found, extraArgs);
+  return os67.buildLaunch(found, extraArgs);
 }
 
 // src/agents/claude/installer.ts
@@ -17908,8 +17933,8 @@ var ClaudeRuntimeStrategy = class {
   meta = getAgent("claude");
   mode = "interactive";
   os;
-  constructor(os66) {
-    this.os = os66;
+  constructor(os67) {
+    this.os = os67;
   }
   /**
    * Claude Code's react-ink TUI enables bracketed-paste mode at
@@ -19003,8 +19028,8 @@ function codexCredentialLocator() {
 function codexLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os66 = createOsStrategy();
-      return os66.findInPath("codex") !== null;
+      const os67 = createOsStrategy();
+      return os67.findInPath("codex") !== null;
     },
     launch() {
       return (0, import_node_child_process3.spawn)("codex", ["login"], { stdio: "inherit" });
@@ -19027,8 +19052,8 @@ var CodexRuntimeStrategy = class {
   meta = getAgent("codex");
   mode = "interactive";
   os;
-  constructor(os66) {
-    this.os = os66;
+  constructor(os67) {
+    this.os = os67;
   }
   async prepareLaunch() {
     let binary = this.os.findInPath("codex");
@@ -19138,12 +19163,12 @@ var CodexRuntimeStrategy = class {
     });
   }
 };
-function resolveNpm(os66) {
-  return os66.id === "win32" ? "npm.cmd" : "npm";
+function resolveNpm(os67) {
+  return os67.id === "win32" ? "npm.cmd" : "npm";
 }
-async function installCodexViaNpm(os66) {
+async function installCodexViaNpm(os67) {
   return new Promise((resolve12, reject) => {
-    const proc = (0, import_node_child_process4.spawn)(resolveNpm(os66), ["install", "-g", "@openai/codex"], {
+    const proc = (0, import_node_child_process4.spawn)(resolveNpm(os67), ["install", "-g", "@openai/codex"], {
       stdio: "inherit"
     });
     proc.on("close", (code) => {
@@ -19160,16 +19185,16 @@ async function installCodexViaNpm(os66) {
     });
   });
 }
-function augmentNpmGlobalBin(os66) {
+function augmentNpmGlobalBin(os67) {
   try {
-    const result = (0, import_node_child_process4.spawnSync)(resolveNpm(os66), ["prefix", "-g"], {
+    const result = (0, import_node_child_process4.spawnSync)(resolveNpm(os67), ["prefix", "-g"], {
       stdio: ["ignore", "pipe", "ignore"]
     });
     if (result.status !== 0) return;
     const prefix = result.stdout.toString().trim();
     if (!prefix) return;
-    const binDir = os66.id === "win32" ? prefix : path24.join(prefix, "bin");
-    os66.augmentPath([binDir]);
+    const binDir = os67.id === "win32" ? prefix : path24.join(prefix, "bin");
+    os67.augmentPath([binDir]);
   } catch {
   }
 }
@@ -19363,10 +19388,10 @@ function manualInstallHint(runner, tools) {
   const argv = osPackageInstallArgv(detectPackageManager(runner), [...tools]);
   return argv ? `\`sudo ${argv.join(" ")}\`` : `your package manager (e.g. \`${pkgs}\`)`;
 }
-function writeUnzipShim(os66, runner) {
+function writeUnzipShim(os67, runner) {
   const python = ["python3", "python"].find((p2) => runner.which(p2));
   if (!python) return null;
-  const dir = os66.scratchPath("codeam-cr-prereq");
+  const dir = os67.scratchPath("codeam-cr-prereq");
   const shim = path26.join(dir, "unzip");
   const script = `#!/bin/sh
 set -e
@@ -19388,9 +19413,9 @@ exec ${python} -m zipfile -e "$archive" "$dest"
   (0, import_node_fs5.chmodSync)(shim, 448);
   return dir;
 }
-async function ensureInstallPrerequisites(os66, deps = {}) {
+async function ensureInstallPrerequisites(os67, deps = {}) {
   const runner = deps.runner ?? defaultOsRunner;
-  const missing = REQUIRED_TOOLS.filter((t2) => os66.findInPath(t2) === null);
+  const missing = REQUIRED_TOOLS.filter((t2) => os67.findInPath(t2) === null);
   if (missing.length === 0) return { ok: true, extraPath: [] };
   log.info(
     "coderabbit",
@@ -19409,10 +19434,10 @@ async function ensureInstallPrerequisites(os66, deps = {}) {
       );
     }
   }
-  const stillMissing = REQUIRED_TOOLS.filter((t2) => os66.findInPath(t2) === null);
+  const stillMissing = REQUIRED_TOOLS.filter((t2) => os67.findInPath(t2) === null);
   if (stillMissing.length === 0) return { ok: true, extraPath: [] };
   if (stillMissing.length === 1 && stillMissing[0] === "unzip") {
-    const shimDir = writeUnzipShim(os66, runner);
+    const shimDir = writeUnzipShim(os67, runner);
     if (shimDir) {
       log.info("coderabbit", "unzip is unavailable \u2014 using a scoped python zipfile shim");
       return { ok: true, extraPath: [shimDir] };
@@ -19475,15 +19500,15 @@ function summarizeInstallFailure(output) {
   }
   return lines.length > 0 ? lines[lines.length - 1] : null;
 }
-async function ensureCoderabbitInstalled(os66, deps = {}) {
-  if (os66.findInPath("coderabbit")) return { ok: true };
-  if (os66.id === "win32") {
+async function ensureCoderabbitInstalled(os67, deps = {}) {
+  if (os67.findInPath("coderabbit")) return { ok: true };
+  if (os67.id === "win32") {
     return {
       ok: false,
       error: "CodeRabbit on Windows requires WSL. Install the CLI inside your WSL distribution (curl -fsSL https://cli.coderabbit.ai/install.sh | sh), then try again."
     };
   }
-  const prereq = await ensureInstallPrerequisites(os66, deps);
+  const prereq = await ensureInstallPrerequisites(os67, deps);
   if (!prereq.ok) return { ok: false, error: prereq.error };
   const env = { ...process.env };
   if (prereq.extraPath.length > 0) {
@@ -19492,8 +19517,8 @@ async function ensureCoderabbitInstalled(os66, deps = {}) {
   log.info("coderabbit", "CodeRabbit CLI not found \u2014 installing via the official script");
   const run = deps.runInstallScript ?? defaultRunInstallScript;
   const { code, output } = await run(env);
-  os66.augmentPath([`${os66.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
-  const binary = os66.findInPath("coderabbit");
+  os67.augmentPath([`${os67.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
+  const binary = os67.findInPath("coderabbit");
   const detail = summarizeInstallFailure(output);
   if (binary !== null) {
     if (code === 0) return { ok: true };
@@ -19547,10 +19572,10 @@ function coderabbitCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function coderabbitLoginLauncher(os66) {
+function coderabbitLoginLauncher(os67) {
   return {
     async ensureInstalled() {
-      const result = await ensureCoderabbitInstalled(os66);
+      const result = await ensureCoderabbitInstalled(os67);
       if (!result.ok && result.error) console.error(`
   \u2717 ${result.error}
 `);
@@ -19610,8 +19635,8 @@ function pickLine(obj) {
 function toHunk(raw, groupSeverity) {
   if (!raw || typeof raw !== "object") return null;
   const o = raw;
-  const path97 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
-  if (!path97) return null;
+  const path98 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
+  if (!path98) return null;
   const message = asString(
     pick(o, [
       "comment",
@@ -19628,7 +19653,7 @@ function toHunk(raw, groupSeverity) {
   const severity = normSeverity(pick(o, ["severity", "level", "priority", "impact"])) ?? normSeverity(groupSeverity);
   const locObj = pick(o, ["location"]) ?? o;
   return {
-    path: path97.trim(),
+    path: path98.trim(),
     line: pickLine(o) ?? pickLine(locObj),
     severity,
     message: (title && message ? `${title}: ${message}` : title || message).trim() || "(no message)"
@@ -19711,10 +19736,10 @@ function parsePlain(stdout) {
   for (const line of stdout.split(/\r?\n/)) {
     const m = line.match(HUNK_LINE_RE);
     if (!m) continue;
-    const [, path97, lineNo, sevToken, message] = m;
-    if (!path97 || !lineNo || !message) continue;
+    const [, path98, lineNo, sevToken, message] = m;
+    if (!path98 || !lineNo || !message) continue;
     hunks.push({
-      path: path97.trim(),
+      path: path98.trim(),
       line: Number(lineNo),
       severity: sevToken ? SEVERITY_MAP[sevToken.toLowerCase()] : void 0,
       message: message.trim().replace(/^[*-]\s+/, "")
@@ -19774,8 +19799,8 @@ var CoderabbitRuntimeStrategy = class {
   meta = getAgent("coderabbit");
   mode = "batch";
   os;
-  constructor(os66) {
-    this.os = os66;
+  constructor(os67) {
+    this.os = os67;
   }
   getDefaultArgs() {
     return ["review", "--agent"];
@@ -20046,10 +20071,10 @@ function cursorCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function cursorLoginLauncher(os66) {
+function cursorLoginLauncher(os67) {
   return {
     async ensureInstalled() {
-      if (os66.findInPath("cursor-agent")) return true;
+      if (os67.findInPath("cursor-agent")) return true;
       console.error(
         "\n  \u2717 cursor-agent binary not on PATH.\n    Install Cursor (https://cursor.com/) and ensure the CLI\n    plugin is enabled, then re-run `codeam link cursor`.\n"
       );
@@ -20113,8 +20138,8 @@ var CursorRuntimeStrategy = class {
   meta = getAgent("cursor");
   mode = "interactive";
   os;
-  constructor(os66) {
-    this.os = os66;
+  constructor(os67) {
+    this.os = os67;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("cursor-agent");
@@ -20331,10 +20356,10 @@ function aiderCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function aiderLoginLauncher(os66) {
+function aiderLoginLauncher(os67) {
   return {
     async ensureInstalled() {
-      if (os66.findInPath("aider")) return true;
+      if (os67.findInPath("aider")) return true;
       console.error(
         "\n  \u2717 aider binary not on PATH.\n    Install Aider:\n      pip install aider-chat\n    then re-run `codeam link aider`.\n"
       );
@@ -20344,7 +20369,7 @@ function aiderLoginLauncher(os66) {
       console.error(
         "\n  Aider has no interactive login flow.\n    Set ANTHROPIC_API_KEY or OPENAI_API_KEY in your shell,\n    or re-run `codeam link aider --api-key=<your-key>`.\n"
       );
-      return (0, import_node_child_process11.spawn)(os66.id === "win32" ? "cmd.exe" : "sh", os66.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
+      return (0, import_node_child_process11.spawn)(os67.id === "win32" ? "cmd.exe" : "sh", os67.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
         stdio: "ignore"
       });
     }
@@ -20433,14 +20458,14 @@ function defaultSdkDir() {
   return resolveSdkDirViaRequire();
 }
 function resolveClaudeNativeBinary(deps = {}) {
-  const existsSync30 = deps.existsSync ?? import_fs.default.existsSync;
+  const existsSync31 = deps.existsSync ?? import_fs.default.existsSync;
   const platformKey = deps.platformKey ?? currentPlatformKey();
   const sdkDir = deps.sdkDir !== void 0 ? deps.sdkDir : defaultSdkDir();
   if (!sdkDir) return null;
   const scopeDir = import_path4.default.dirname(sdkDir);
   const binName = platformKey.startsWith("win32-") ? "claude.exe" : "claude";
   const candidate = import_path4.default.join(scopeDir, `claude-agent-sdk-${platformKey}`, binName);
-  return existsSync30(candidate) ? candidate : null;
+  return existsSync31(candidate) ? candidate : null;
 }
 var realSleep = (ms) => new Promise((resolve12) => setTimeout(resolve12, ms));
 async function waitForClaudeNativeBinary(opts = {}) {
@@ -20522,18 +20547,18 @@ function augmentUserLocalBinPaths(deps = {}) {
   env.PATH = [...additions, ...parts].join(p2.delimiter);
 }
 function resolveCursorAgentBinary(deps = {}) {
-  const existsSync30 = deps.existsSync ?? import_fs.default.existsSync;
+  const existsSync31 = deps.existsSync ?? import_fs.default.existsSync;
   const platform3 = deps.platform ?? process.platform;
   const env = deps.env ?? process.env;
   if (platform3 === "win32") {
     const localAppData = env.LOCALAPPDATA;
     if (!localAppData) return null;
     const exe = import_path4.default.win32.join(localAppData, "cursor-agent", "cursor-agent.exe");
-    return existsSync30(exe) ? exe : null;
+    return existsSync31(exe) ? exe : null;
   }
   const home = deps.homedir ?? import_os4.default.homedir();
   const unix = import_path4.default.posix.join(home, ".local", "bin", "cursor-agent");
-  return existsSync30(unix) ? unix : null;
+  return existsSync31(unix) ? unix : null;
 }
 async function waitForCursorAgent(opts = {}) {
   const timeoutMs = opts.timeoutMs ?? 18e4;
@@ -20619,8 +20644,8 @@ var AiderRuntimeStrategy = class {
   meta = getAgent("aider");
   mode = "interactive";
   os;
-  constructor(os66) {
-    this.os = os66;
+  constructor(os67) {
+    this.os = os67;
   }
   async prepareLaunch() {
     augmentUserLocalBinPaths();
@@ -20753,8 +20778,8 @@ function geminiCredentialLocator() {
 function geminiLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os66 = createOsStrategy();
-      return os66.findInPath("gemini") !== null;
+      const os67 = createOsStrategy();
+      return os67.findInPath("gemini") !== null;
     },
     launch() {
       return (0, import_node_child_process12.spawn)("gemini", ["auth", "login"], { stdio: "inherit" });
@@ -20944,8 +20969,8 @@ var GeminiRuntimeStrategy = class {
   meta = getAgent("gemini");
   mode = "interactive";
   os;
-  constructor(os66) {
-    this.os = os66;
+  constructor(os67) {
+    this.os = os67;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("gemini");
@@ -21237,8 +21262,8 @@ var KimiRuntimeStrategy = class {
   meta = getAgent("kimi");
   mode = "interactive";
   os;
-  constructor(os66) {
-    this.os = os66;
+  constructor(os67) {
+    this.os = os67;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("kimi");
@@ -21381,8 +21406,8 @@ var OpencodeRuntimeStrategy = class {
   meta = getAgent("opencode");
   mode = "interactive";
   os;
-  constructor(os66) {
-    this.os = os66;
+  constructor(os67) {
+    this.os = os67;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("opencode");
@@ -21467,20 +21492,20 @@ var OpencodeRuntimeStrategy = class {
 
 // src/agents/registry.ts
 var runtimeBuilders = {
-  claude: (os66) => new ClaudeRuntimeStrategy(os66),
-  codex: (os66) => new CodexRuntimeStrategy(os66),
-  coderabbit: (os66) => new CoderabbitRuntimeStrategy(os66),
-  cursor: (os66) => new CursorRuntimeStrategy(os66),
-  aider: (os66) => new AiderRuntimeStrategy(os66),
-  gemini: (os66) => new GeminiRuntimeStrategy(os66),
-  kimi: (os66) => new KimiRuntimeStrategy(os66),
-  opencode: (os66) => new OpencodeRuntimeStrategy(os66)
+  claude: (os67) => new ClaudeRuntimeStrategy(os67),
+  codex: (os67) => new CodexRuntimeStrategy(os67),
+  coderabbit: (os67) => new CoderabbitRuntimeStrategy(os67),
+  cursor: (os67) => new CursorRuntimeStrategy(os67),
+  aider: (os67) => new AiderRuntimeStrategy(os67),
+  gemini: (os67) => new GeminiRuntimeStrategy(os67),
+  kimi: (os67) => new KimiRuntimeStrategy(os67),
+  opencode: (os67) => new OpencodeRuntimeStrategy(os67)
 };
 var deployBuilders = {
   claude: () => new ClaudeDeployStrategy(),
   codex: () => new CodexDeployStrategy()
 };
-function createAgentStrategy(agent, os66 = createOsStrategy()) {
+function createAgentStrategy(agent, os67 = createOsStrategy()) {
   if (!AGENT_REGISTRY[agent]?.enabled) {
     throw new Error(
       `Agent "${agent}" is not supported in this codeam-cli version. Upgrade with 'npm i -g codeam-cli@latest'.`
@@ -21490,10 +21515,10 @@ function createAgentStrategy(agent, os66 = createOsStrategy()) {
   if (!build) {
     throw new Error(`No runtime strategy registered for agent "${agent}"`);
   }
-  return build(os66);
+  return build(os67);
 }
-function createInteractiveAgentStrategy(agent, os66 = createOsStrategy()) {
-  const s = createAgentStrategy(agent, os66);
+function createInteractiveAgentStrategy(agent, os67 = createOsStrategy()) {
+  const s = createAgentStrategy(agent, os67);
   if (s.mode !== "interactive") {
     throw new Error(
       `Agent "${agent}" is a batch agent; use createAgentStrategy + .runOneShot for one-shot reviews.`
@@ -22207,8 +22232,8 @@ function collectChangedFiles(cwd) {
   }
   return [...byPath.values()];
 }
-function restoreCoderabbitOauthBlob(os66, value) {
-  const dir = path38.join(os66.homeDir(), ".coderabbit");
+function restoreCoderabbitOauthBlob(os67, value) {
+  const dir = path38.join(os67.homeDir(), ".coderabbit");
   (0, import_node_fs6.mkdirSync)(dir, { recursive: true });
   let file = "auth.json";
   let contents = value.trim();
@@ -22228,26 +22253,26 @@ function installFailureMessage(result) {
   return result.error ?? "CodeRabbit CLI could not be installed";
 }
 async function configureCoderabbit(input, deps = {}) {
-  const os66 = deps.os ?? createOsStrategy();
+  const os67 = deps.os ?? createOsStrategy();
   const ensureInstalled = deps.ensureInstalled ?? ensureCoderabbitInstalled;
   const isLoggedIn = deps.isLoggedIn ?? defaultIsLoggedIn;
   const runOAuth = deps.runOAuthLogin ?? runCoderabbitOAuthLogin;
   const snapshot = deps.snapshotDir ?? (() => snapshotCredentialDir());
   const capture2 = deps.captureCredential ?? ((b) => diffCapturedCredential(b));
   const loginWithApiKey = deps.loginWithApiKey ?? defaultLoginWithApiKey;
-  const home = os66.homeDir();
-  os66.augmentPath(
-    os66.id === "win32" ? [
+  const home = os67.homeDir();
+  os67.augmentPath(
+    os67.id === "win32" ? [
       path38.join(home, ".local", "bin"),
       path38.join(process.env.APPDATA ?? path38.join(home, "AppData", "Roaming"), "npm"),
       path38.join(home, "scoop", "shims")
     ] : [path38.join(home, ".local", "bin"), "/opt/homebrew/bin", "/usr/local/bin"]
   );
-  const installed2 = os66.findInPath("coderabbit") !== null;
+  const installed2 = os67.findInPath("coderabbit") !== null;
   const base = () => ({
     action: input.action,
     supported: true,
-    installed: os66.findInPath("coderabbit") !== null,
+    installed: os67.findInPath("coderabbit") !== null,
     loggedIn: false
   });
   if (input.action === "status") {
@@ -22261,7 +22286,7 @@ async function configureCoderabbit(input, deps = {}) {
     const key = (input.apiKey ?? "").trim();
     if (!key) return { ...res2, error: "No API key provided" };
     if (!res2.installed) {
-      const inst = await ensureInstalled(os66);
+      const inst = await ensureInstalled(os67);
       res2.installed = inst.ok;
       if (!inst.ok) return { ...res2, error: installFailureMessage(inst) };
     }
@@ -22285,7 +22310,7 @@ async function configureCoderabbit(input, deps = {}) {
     }
     if (!res2.installed) {
       deps.onEvent?.({ kind: "installing" });
-      const inst = await ensureInstalled(os66);
+      const inst = await ensureInstalled(os67);
       res2.installed = inst.ok;
       if (!inst.ok) return { ...res2, error: installFailureMessage(inst) };
     }
@@ -22302,7 +22327,7 @@ async function configureCoderabbit(input, deps = {}) {
       return { ...res2, loggedIn: true, linked: true };
     }
     try {
-      restoreCoderabbitOauthBlob(os66, cred.credential);
+      restoreCoderabbitOauthBlob(os67, cred.credential);
     } catch (err) {
       return {
         ...res2,
@@ -22326,7 +22351,7 @@ async function configureCoderabbit(input, deps = {}) {
     const res2 = base();
     if (!installed2) {
       deps.onEvent?.({ kind: "installing" });
-      const inst = await ensureInstalled(os66);
+      const inst = await ensureInstalled(os67);
       res2.installed = inst.ok;
       if (!inst.ok) return { ...res2, error: installFailureMessage(inst) };
     }
@@ -22366,7 +22391,7 @@ async function configureCoderabbit(input, deps = {}) {
   }
   const res = base();
   if (!res.installed) {
-    const inst = await ensureInstalled(os66);
+    const inst = await ensureInstalled(os67);
     res.installed = inst.ok;
     if (!inst.ok) return { ...res, error: installFailureMessage(inst) };
   }
@@ -23319,7 +23344,7 @@ function tryParseObject(s) {
 function extractFirstJsonObject(s) {
   const start2 = s.indexOf("{");
   if (start2 < 0) return null;
-  let depth = 0;
+  let depth2 = 0;
   let inString = false;
   let escaped = false;
   for (let i = start2; i < s.length; i += 1) {
@@ -23340,10 +23365,10 @@ function extractFirstJsonObject(s) {
       inString = true;
       continue;
     }
-    if (c2 === "{") depth += 1;
+    if (c2 === "{") depth2 += 1;
     else if (c2 === "}") {
-      depth -= 1;
-      if (depth === 0) return s.slice(start2, i + 1);
+      depth2 -= 1;
+      if (depth2 === 0) return s.slice(start2, i + 1);
     }
   }
   return null;
@@ -25754,11 +25779,11 @@ function resolveDoltInstallStrategy(platform3) {
 }
 var DOLT_RELEASE_BASE = "https://github.com/dolthub/dolt/releases/latest/download";
 function doltPlatformTuple(platform3, arch2) {
-  const os66 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
+  const os67 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
   const a = arch2 === "x64" ? "amd64" : arch2 === "arm64" ? "arm64" : null;
   if (!a) return null;
-  if (os66 === "windows" && a !== "amd64") return null;
-  return `${os66}-${a}`;
+  if (os67 === "windows" && a !== "amd64") return null;
+  return `${os67}-${a}`;
 }
 function resolveDoltTarballStrategy(targetDir, platform3, arch2) {
   const tuple = doltPlatformTuple(platform3, arch2);
@@ -27447,7 +27472,7 @@ var vcsAgentReviewH = async (ctx, cmd, parsed) => {
   });
   const token = ctx.pluginAuthToken;
   void (async () => {
-    const os66 = createOsStrategy();
+    const os67 = createOsStrategy();
     try {
       const report = await reviewPullRequest(
         {
@@ -27456,7 +27481,7 @@ var vcsAgentReviewH = async (ctx, cmd, parsed) => {
           baseBranch: parsed.baseBranch
         },
         {
-          runReview: (input) => new CoderabbitRuntimeStrategy(os66).runOneShot(input),
+          runReview: (input) => new CoderabbitRuntimeStrategy(os67).runOneShot(input),
           runGh: (args2) => defaultRunGh(args2),
           postReport: async (r) => {
             if (!token) return;
@@ -27596,7 +27621,7 @@ function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
   if (!nodeModulesDir) return 0;
   const readdirSync14 = deps?.readdirSync ?? fs51.readdirSync;
   const statSync15 = deps?.statSync ?? fs51.statSync;
-  const rmSync9 = deps?.rmSync ?? fs51.rmSync;
+  const rmSync10 = deps?.rmSync ?? fs51.rmSync;
   let removed = 0;
   let entries;
   try {
@@ -27610,7 +27635,7 @@ function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
     try {
       const st3 = statSync15(full);
       if (now - st3.mtimeMs < STALE_STAGING_AGE_MS) continue;
-      rmSync9(full, { recursive: true, force: true });
+      rmSync10(full, { recursive: true, force: true });
       removed++;
     } catch {
     }
@@ -28636,11 +28661,11 @@ function resolveTokenValue(args2) {
   }
   const fileFlag = args2.find((a) => a.startsWith("--token-file="));
   if (fileFlag) {
-    const path97 = fileFlag.slice("--token-file=".length);
+    const path98 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs52.readFileSync(path97, "utf8").trim();
-      if (content.length === 0) fail(`--token-file ${path97} is empty`);
-      rmIfExistsQuiet(path97);
+      const content = fs52.readFileSync(path98, "utf8").trim();
+      if (content.length === 0) fail(`--token-file ${path98} is empty`);
+      rmIfExistsQuiet(path98);
       return content;
     } catch (err) {
       fail(`Could not read --token-file: ${err.message}`);
@@ -29733,9 +29758,9 @@ async function prepareWorkspace(repoOrPath, deployId, cloneToken, provider = "gi
 
 // src/agents/acp/runner.ts
 var import_node_crypto11 = require("crypto");
-var fs71 = __toESM(require("fs"));
-var os55 = __toESM(require("os"));
-var path82 = __toESM(require("path"));
+var fs72 = __toESM(require("fs"));
+var os56 = __toESM(require("os"));
+var path83 = __toESM(require("path"));
 
 // src/lib/provider-routing.ts
 var fs55 = __toESM(require("fs"));
@@ -37912,15 +37937,15 @@ function defaultRunGit(cwd, args2) {
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs82 = await import("fs/promises");
+  const fs83 = await import("fs/promises");
   const out2 = [];
   await walk(workingDir, 0);
   return out2;
-  async function walk(dir, depth) {
-    if (depth > maxDepth) return;
+  async function walk(dir, depth2) {
+    if (depth2 > maxDepth) return;
     let entries = [];
     try {
-      const dirents = await fs82.readdir(dir, { withFileTypes: true });
+      const dirents = await fs83.readdir(dir, { withFileTypes: true });
       entries = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -37940,7 +37965,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
       if (!entry.isDirectory) continue;
       if (entry.name === "node_modules") continue;
       if (entry.name === "dist" || entry.name === "build") continue;
-      await walk(path74.join(dir, entry.name), depth + 1);
+      await walk(path74.join(dir, entry.name), depth2 + 1);
     }
   }
 }
@@ -38655,10 +38680,52 @@ async function postCredentialSync(opts, fetchImpl = fetch) {
   }
 }
 
-// src/packs/gates.ts
-var import_node_child_process23 = require("child_process");
+// src/services/turn-marker.ts
 var fs65 = __toESM(require("fs"));
+var os52 = __toESM(require("os"));
 var path76 = __toESM(require("path"));
+var depth = 0;
+function codeamHome() {
+  return path76.join(os52.homedir(), ".codeam");
+}
+function turnMarkerPath(pid = process.pid, home = codeamHome()) {
+  return path76.join(home, "turns", String(pid));
+}
+function mark() {
+  try {
+    const file = turnMarkerPath();
+    fs65.mkdirSync(path76.dirname(file), { recursive: true });
+    fs65.writeFileSync(file, String(Date.now()));
+  } catch {
+  }
+}
+function clear() {
+  try {
+    fs65.rmSync(turnMarkerPath(), { force: true });
+  } catch {
+  }
+}
+async function withTurnMarker(fn) {
+  if (depth++ === 0) mark();
+  try {
+    return await fn();
+  } finally {
+    if (--depth === 0) clear();
+  }
+}
+function isProcessMidTurn(pid, home) {
+  if (!pid) return false;
+  try {
+    return fs65.existsSync(turnMarkerPath(pid, home));
+  } catch {
+    return false;
+  }
+}
+
+// src/packs/gates.ts
+var import_node_child_process23 = require("child_process");
+var fs66 = __toESM(require("fs"));
+var path77 = __toESM(require("path"));
 var defaultCommandRunner = (file, args2, cwd, timeoutMs, env) => new Promise((resolve12) => {
   (0, import_node_child_process23.execFile)(
     file,
@@ -38708,7 +38775,7 @@ async function changedFiles(run, cwd, from, to) {
 }
 function readWorkspaceFile(cwd, relPath) {
   try {
-    return fs65.readFileSync(path76.join(cwd, relPath), "utf8");
+    return fs66.readFileSync(path77.join(cwd, relPath), "utf8");
   } catch {
     return null;
   }
@@ -38717,14 +38784,14 @@ var NO_TEST_PLACEHOLDER = 'echo "Error: no test specified"';
 var CHECKS_TIMEOUT_MS = 5 * 6e4;
 function detectChecksCommand(cwd) {
   try {
-    const cfg = JSON.parse(fs65.readFileSync(path76.join(cwd, ".codeam", "pack.json"), "utf8"));
+    const cfg = JSON.parse(fs66.readFileSync(path77.join(cwd, ".codeam", "pack.json"), "utf8"));
     if (typeof cfg.checksCommand === "string" && cfg.checksCommand.trim().length > 0) {
       return cfg.checksCommand.trim();
     }
   } catch {
   }
   try {
-    const pkg = JSON.parse(fs65.readFileSync(path76.join(cwd, "package.json"), "utf8"));
+    const pkg = JSON.parse(fs66.readFileSync(path77.join(cwd, "package.json"), "utf8"));
     const test = pkg.scripts?.test;
     if (typeof test === "string" && test.trim().length > 0 && !test.includes(NO_TEST_PLACEHOLDER)) {
       return "npm test";
@@ -38742,39 +38809,39 @@ ${res.stderr}`.trim();
 }
 
 // src/packs/run-store.ts
-var fs66 = __toESM(require("fs"));
-var path77 = __toESM(require("path"));
+var fs67 = __toESM(require("fs"));
+var path78 = __toESM(require("path"));
 var crypto5 = __toESM(require("crypto"));
 function packsDir(cwd) {
-  return path77.join(cwd, ".codeam", "packs");
+  return path78.join(cwd, ".codeam", "packs");
 }
 function runDir(cwd, runId) {
-  return path77.join(packsDir(cwd), runId);
+  return path78.join(packsDir(cwd), runId);
 }
 function newRunId() {
   return `pk_${Date.now().toString(36)}_${crypto5.randomBytes(4).toString("hex")}`;
 }
 function writeJsonAtomic(file, value) {
-  fs66.mkdirSync(path77.dirname(file), { recursive: true });
+  fs67.mkdirSync(path78.dirname(file), { recursive: true });
   const tmp = `${file}.tmp`;
-  fs66.writeFileSync(tmp, JSON.stringify(value, null, 2));
-  fs66.renameSync(tmp, file);
+  fs67.writeFileSync(tmp, JSON.stringify(value, null, 2));
+  fs67.renameSync(tmp, file);
 }
 function saveRun(cwd, state) {
-  writeJsonAtomic(path77.join(runDir(cwd, state.runId), "run.json"), state);
+  writeJsonAtomic(path78.join(runDir(cwd, state.runId), "run.json"), state);
 }
 function saveStageHandoff(cwd, runId, stageIndex, role, handoff) {
   const name = `${String(stageIndex + 1).padStart(2, "0")}-${role}.json`;
-  writeJsonAtomic(path77.join(runDir(cwd, runId), name), handoff);
+  writeJsonAtomic(path78.join(runDir(cwd, runId), name), handoff);
 }
 function loadLatestRun(cwd) {
   try {
     const dir = packsDir(cwd);
-    const entries = fs66.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name).sort();
+    const entries = fs67.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name).sort();
     for (let i = entries.length - 1; i >= 0; i--) {
-      const file = path77.join(dir, entries[i], "run.json");
+      const file = path78.join(dir, entries[i], "run.json");
       try {
-        const parsed = JSON.parse(fs66.readFileSync(file, "utf8"));
+        const parsed = JSON.parse(fs67.readFileSync(file, "utf8"));
         if (parsed && typeof parsed.runId === "string") return parsed;
       } catch {
       }
@@ -38785,17 +38852,17 @@ function loadLatestRun(cwd) {
 }
 function ensureLedgerIgnored(cwd) {
   try {
-    const gitDir = path77.join(cwd, ".git");
-    if (!fs66.existsSync(gitDir)) return;
-    const exclude = path77.join(gitDir, "info", "exclude");
+    const gitDir = path78.join(cwd, ".git");
+    if (!fs67.existsSync(gitDir)) return;
+    const exclude = path78.join(gitDir, "info", "exclude");
     let existing = "";
     try {
-      existing = fs66.readFileSync(exclude, "utf8");
+      existing = fs67.readFileSync(exclude, "utf8");
     } catch {
     }
     if (existing.includes(".codeam/packs/")) return;
-    fs66.mkdirSync(path77.dirname(exclude), { recursive: true });
-    fs66.writeFileSync(exclude, `${existing.trimEnd()}
+    fs67.mkdirSync(path78.dirname(exclude), { recursive: true });
+    fs67.writeFileSync(exclude, `${existing.trimEnd()}
 .codeam/packs/
 `.trimStart());
   } catch {
@@ -39776,20 +39843,20 @@ async function mcpRouter() {
 }
 
 // src/integrations/mcp-secrets.ts
-var fs68 = __toESM(require("fs"));
-var os53 = __toESM(require("os"));
-var path79 = __toESM(require("path"));
+var fs69 = __toESM(require("fs"));
+var os54 = __toESM(require("os"));
+var path80 = __toESM(require("path"));
 var MCP_SECRETS_FILE_ENV = "CODEAM_MCP_SECRETS_FILE";
 function mcpSecretsDir() {
-  return path79.join(os53.homedir(), ".codeam", "mcp-secrets");
+  return path80.join(os54.homedir(), ".codeam", "mcp-secrets");
 }
 function mcpSecretsPath(scope, pid = process.pid) {
-  return path79.join(mcpSecretsDir(), `${pid}-${scope}.json`);
+  return path80.join(mcpSecretsDir(), `${pid}-${scope}.json`);
 }
 var registeredForCleanup = /* @__PURE__ */ new Set();
 function readFileVars(file) {
   try {
-    const parsed = JSON.parse(fs68.readFileSync(file, "utf8"));
+    const parsed = JSON.parse(fs69.readFileSync(file, "utf8"));
     if (!parsed || typeof parsed !== "object") return {};
     const out2 = {};
     for (const [k2, v] of Object.entries(parsed)) {
@@ -39811,7 +39878,7 @@ function pidAlive(pid) {
 function pruneStale(dir) {
   let names = [];
   try {
-    names = fs68.readdirSync(dir);
+    names = fs69.readdirSync(dir);
   } catch {
     return;
   }
@@ -39821,25 +39888,25 @@ function pruneStale(dir) {
     const pid = Number(m[1]);
     if (pid === process.pid || pidAlive(pid)) continue;
     try {
-      fs68.unlinkSync(path79.join(dir, name));
+      fs69.unlinkSync(path80.join(dir, name));
     } catch {
     }
   }
 }
 function writeMcpSecrets(vars, file) {
   try {
-    const dir = path79.dirname(file);
-    fs68.mkdirSync(dir, { recursive: true, mode: 448 });
+    const dir = path80.dirname(file);
+    fs69.mkdirSync(dir, { recursive: true, mode: 448 });
     pruneStale(dir);
     const tmp = `${file}.${process.pid}.tmp`;
-    fs68.writeFileSync(tmp, JSON.stringify(vars), { mode: 384 });
-    fs68.renameSync(tmp, file);
-    fs68.chmodSync(file, 384);
+    fs69.writeFileSync(tmp, JSON.stringify(vars), { mode: 384 });
+    fs69.renameSync(tmp, file);
+    fs69.chmodSync(file, 384);
     if (!registeredForCleanup.has(file)) {
       registeredForCleanup.add(file);
       process.once("exit", () => {
         try {
-          fs68.unlinkSync(file);
+          fs69.unlinkSync(file);
         } catch {
         }
       });
@@ -39925,11 +39992,11 @@ function previewMcpServer(bridge) {
   };
 }
 function httpCall(baseUrl, token) {
-  return async (path97, method, body, timeoutMs) => {
+  return async (path98, method, body, timeoutMs) => {
     const ac = new AbortController();
     const timer = setTimeout(() => ac.abort(), timeoutMs);
     try {
-      const res = await fetch(`${baseUrl}${path97}`, {
+      const res = await fetch(`${baseUrl}${path98}`, {
         method,
         headers: { authorization: `Bearer ${token}`, "content-type": "application/json" },
         ...method === "POST" ? { body: JSON.stringify(body ?? {}) } : {},
@@ -41700,8 +41767,8 @@ var ACP_COMMAND_HANDLERS = {
   integrations_sync: integrationsSyncH,
   integrations_detect: integrationsDetectH,
   beads_action: beadsActionH,
-  start_task: startTaskH,
-  group_mention_task: groupMentionTaskH,
+  start_task: (ctx) => withTurnMarker(() => startTaskH(ctx)),
+  group_mention_task: (ctx) => withTurnMarker(() => groupMentionTaskH(ctx)),
   stop_task: stopTaskH,
   escape_key: stopTaskH,
   get_conversation: getConversationH,
@@ -41713,7 +41780,7 @@ var ACP_COMMAND_HANDLERS = {
   select_option: selectOptionH,
   provide_input: provideInputH,
   resume_session: resumeSessionH,
-  switch_agent: switchAgentH,
+  switch_agent: (ctx) => withTurnMarker(() => switchAgentH(ctx)),
   change_model: changeModelH,
   summarize: summarizeH,
   session_terminated: sessionShutdownH,
@@ -42825,17 +42892,17 @@ async function runAcpSession(opts) {
       switchCredentialEnv = provisionAgentCredentials(agentId, auth);
     },
     provisionHouseProxy: ({ baseUrl, token, model, managedAgentId }) => {
-      const claudeConfigDir = path82.join(
-        os55.homedir(),
+      const claudeConfigDir = path83.join(
+        os56.homedir(),
         ".codeam",
         "house-claude",
         `switch-${opts.pluginId}`
       );
       try {
-        fs71.mkdirSync(claudeConfigDir, { recursive: true, mode: 448 });
+        fs72.mkdirSync(claudeConfigDir, { recursive: true, mode: 448 });
       } catch {
       }
-      const memoryFile = path82.join(claudeConfigDir, "CLAUDE.md");
+      const memoryFile = path83.join(claudeConfigDir, "CLAUDE.md");
       ensureBeadsWorkflowHint(void 0, memoryFile);
       ensureAgentStandard(void 0, memoryFile);
       const cfg = {
@@ -42858,6 +42925,11 @@ async function runAcpSession(opts) {
       relay.reannounceAgents();
     }
   };
+  relay.setLinkedAgentIdProvider(() => {
+    if (houseActive) return isManagedProviderId(houseWireId) ? houseWireId : null;
+    return internalToPublic(opts.agent);
+  });
+  relay.reannounceAgents();
   const switchAgentForSession = async (rawAgentId) => {
     const result = await performAgentSwitch(switchDeps, rawAgentId);
     if (result.ok) refreshSquadRoster();
@@ -44058,9 +44130,9 @@ function pickPinnedSession(pinnedId, listSessions2) {
 }
 
 // src/agents/retired-proxy-cleanup.ts
-var fs72 = __toESM(require("fs"));
-var path83 = __toESM(require("path"));
-var os56 = __toESM(require("os"));
+var fs73 = __toESM(require("fs"));
+var path84 = __toESM(require("path"));
+var os57 = __toESM(require("os"));
 var RETIRED_PROXY_RE = /^https?:\/\/(?:127\.0\.0\.1|localhost|\[::1\]):8787(?:[/?#]|$)/i;
 var HEADROOM_CMD_RE = /(^|[\s/"'])headroom(\s|$)/i;
 var MARKETPLACE_KEY = "headroom-marketplace";
@@ -44069,12 +44141,12 @@ function isHeadroomHook(group) {
     (h) => typeof h?.command === "string" && HEADROOM_CMD_RE.test(h.command)
   );
 }
-function sanitizeRetiredProxyConfig(homeDir2 = os56.homedir()) {
+function sanitizeRetiredProxyConfig(homeDir2 = os57.homedir()) {
   const out2 = { inspected: false, changed: false, removed: [] };
-  const file = path83.join(homeDir2, ".claude", "settings.json");
+  const file = path84.join(homeDir2, ".claude", "settings.json");
   let parsed;
   try {
-    parsed = JSON.parse(fs72.readFileSync(file, "utf8"));
+    parsed = JSON.parse(fs73.readFileSync(file, "utf8"));
   } catch {
     return out2;
   }
@@ -44116,9 +44188,9 @@ function sanitizeRetiredProxyConfig(homeDir2 = os56.homedir()) {
   if (!out2.changed) return out2;
   try {
     const tmp = `${file}.codeam.tmp`;
-    fs72.writeFileSync(tmp, `${JSON.stringify(parsed, null, 2)}
+    fs73.writeFileSync(tmp, `${JSON.stringify(parsed, null, 2)}
 `, { mode: 384 });
-    fs72.renameSync(tmp, file);
+    fs73.renameSync(tmp, file);
   } catch {
     out2.changed = false;
   }
@@ -44650,7 +44722,7 @@ var AcpDriver = class {
 };
 
 // src/baton/transcript-mirror.ts
-var fs73 = __toESM(require("fs"));
+var fs74 = __toESM(require("fs"));
 var TranscriptMirror = class {
   constructor(deps) {
     this.deps = deps;
@@ -44744,7 +44816,7 @@ var TranscriptMirror = class {
   }
 };
 function defaultWatch(file, onChange) {
-  const w3 = fs73.watch(file, { persistent: false }, () => onChange());
+  const w3 = fs74.watch(file, { persistent: false }, () => onChange());
   return () => w3.close();
 }
 
@@ -45090,16 +45162,16 @@ function keepDeviceAwake(deps = {}) {
 }
 
 // src/agents/claude/onboarding.ts
-var fs74 = __toESM(require("fs"));
-var os58 = __toESM(require("os"));
-var path84 = __toESM(require("path"));
+var fs75 = __toESM(require("fs"));
+var os59 = __toESM(require("os"));
+var path85 = __toESM(require("path"));
 var ONBOARDING_VERSION_SENTINEL = "9999.0.0";
 function ensureClaudeOnboarded(cwd) {
   try {
-    const file = path84.join(os58.homedir(), ".claude.json");
+    const file = path85.join(os59.homedir(), ".claude.json");
     let config = {};
     try {
-      config = JSON.parse(fs74.readFileSync(file, "utf8"));
+      config = JSON.parse(fs75.readFileSync(file, "utf8"));
     } catch {
     }
     let changed = false;
@@ -45124,8 +45196,8 @@ function ensureClaudeOnboarded(cwd) {
       }
     }
     if (!changed) return;
-    fs74.mkdirSync(path84.dirname(file), { recursive: true });
-    fs74.writeFileSync(file, JSON.stringify(config, null, 2));
+    fs75.mkdirSync(path85.dirname(file), { recursive: true });
+    fs75.writeFileSync(file, JSON.stringify(config, null, 2));
     log.info(
       "claude",
       `pre-completed Claude onboarding${cwd ? ` + trusted workspace ${cwd}` : ""}`
@@ -45902,7 +45974,7 @@ var import_picocolors10 = __toESM(require("picocolors"));
 var import_child_process30 = require("child_process");
 var import_util4 = require("util");
 var import_picocolors8 = __toESM(require("picocolors"));
-var path85 = __toESM(require("path"));
+var path86 = __toESM(require("path"));
 var execFileP6 = (0, import_util4.promisify)(import_child_process30.execFile);
 var MAX_BUFFER = 8 * 1024 * 1024;
 function resetStdinForChild() {
@@ -46391,7 +46463,7 @@ var GitHubCodespacesProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path85.posix.dirname(remotePath);
+    const remoteDir = path86.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote(remoteDir)}`,
       `cat > ${shellQuote(remotePath)}`
@@ -46461,7 +46533,7 @@ function shellQuote(s) {
 // src/services/providers/gitpod.ts
 var import_child_process31 = require("child_process");
 var import_util5 = require("util");
-var path86 = __toESM(require("path"));
+var path87 = __toESM(require("path"));
 var import_picocolors9 = __toESM(require("picocolors"));
 var execFileP7 = (0, import_util5.promisify)(import_child_process31.execFile);
 var MAX_BUFFER2 = 8 * 1024 * 1024;
@@ -46701,7 +46773,7 @@ var GitpodProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path86.posix.dirname(remotePath);
+    const remoteDir = path87.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote2(remoteDir)}`,
       `cat > ${shellQuote2(remotePath)}`
@@ -46737,7 +46809,7 @@ function shellQuote2(s) {
 // src/services/providers/gitlab-workspaces.ts
 var import_child_process32 = require("child_process");
 var import_util6 = require("util");
-var path87 = __toESM(require("path"));
+var path88 = __toESM(require("path"));
 var execFileP8 = (0, import_util6.promisify)(import_child_process32.execFile);
 var MAX_BUFFER3 = 8 * 1024 * 1024;
 var GITLAB_API_BASE = process.env.CODEAM_GITLAB_API_URL ?? "https://gitlab.com/api/v4";
@@ -46997,7 +47069,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
-    const remoteDir = path87.posix.dirname(remotePath);
+    const remoteDir = path88.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote3(remoteDir)}`, `cat > ${shellQuote3(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote3(remotePath)}`);
@@ -47065,7 +47137,7 @@ function shellQuote3(s) {
 // src/services/providers/railway.ts
 var import_child_process33 = require("child_process");
 var import_util7 = require("util");
-var path88 = __toESM(require("path"));
+var path89 = __toESM(require("path"));
 var execFileP9 = (0, import_util7.promisify)(import_child_process33.execFile);
 var MAX_BUFFER4 = 8 * 1024 * 1024;
 function resetStdinForChild4() {
@@ -47301,7 +47373,7 @@ var RailwayProvider = class {
     if (!projectId || !serviceId) {
       throw new Error("Invalid Railway workspace id (expected projectId/serviceId).");
     }
-    const remoteDir = path88.posix.dirname(remotePath);
+    const remoteDir = path89.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote4(remoteDir)}`, `cat > ${shellQuote4(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote4(remotePath)}`);
@@ -47841,34 +47913,35 @@ async function stopWorkspaceFromLocal(target) {
 }
 
 // src/commands/host/host-client.ts
-var fs75 = __toESM(require("fs"));
-var os59 = __toESM(require("os"));
-var path89 = __toESM(require("path"));
+var fs76 = __toESM(require("fs"));
+var os60 = __toESM(require("os"));
+var path90 = __toESM(require("path"));
 var import_node_crypto12 = require("crypto");
 function sampleCpuTimes() {
   let idle = 0;
   let total = 0;
-  for (const cpu of os59.cpus()) {
+  for (const cpu of os60.cpus()) {
     const t2 = cpu.times;
     idle += t2.idle;
     total += t2.user + t2.nice + t2.sys + t2.idle + t2.irq;
   }
   return { idle, total };
 }
+var MAX_REPORTED_LATENCY_MS = 6e4;
 var MetricsCollector = class {
   prevCpu = null;
   lastLatencyMs = 0;
   /** Record the measured round-trip of the heartbeat just sent. */
   recordLatency(latencyMs) {
-    this.lastLatencyMs = Math.max(0, Math.round(latencyMs));
+    this.lastLatencyMs = Math.min(MAX_REPORTED_LATENCY_MS, Math.max(0, Math.round(latencyMs)));
   }
   cpuPct() {
     const current2 = sampleCpuTimes();
     const prev = this.prevCpu;
     this.prevCpu = current2;
     if (!prev) {
-      const cores = os59.cpus().length || 1;
-      const proxy = os59.loadavg()[0] / cores * 100;
+      const cores = os60.cpus().length || 1;
+      const proxy = os60.loadavg()[0] / cores * 100;
       return Math.min(100, Math.max(0, Math.round(proxy)));
     }
     const idleDelta = current2.idle - prev.idle;
@@ -47881,8 +47954,8 @@ var MetricsCollector = class {
   collect() {
     return {
       cpuPct: this.cpuPct(),
-      ramUsedMb: Math.round((os59.totalmem() - os59.freemem()) / 1048576),
-      ramTotalMb: Math.round(os59.totalmem() / 1048576),
+      ramUsedMb: Math.round((os60.totalmem() - os60.freemem()) / 1048576),
+      ramTotalMb: Math.round(os60.totalmem() / 1048576),
       latencyMs: this.lastLatencyMs
     };
   }
@@ -47891,19 +47964,19 @@ function apiBase() {
   return process.env.CODEAM_API_URL ?? resolveApiBaseUrl();
 }
 function hostIdentityPath() {
-  return path89.join(os59.homedir(), ".codeam", "host-agent.json");
+  return path90.join(os60.homedir(), ".codeam", "host-agent.json");
 }
 function collectOsInfo() {
   return {
-    distro: os59.platform(),
-    arch: os59.arch(),
-    kernel: os59.release(),
+    distro: os60.platform(),
+    arch: os60.arch(),
+    kernel: os60.release(),
     nodeVersion: process.versions.node
   };
 }
 function loadHostIdentity() {
   try {
-    const raw = fs75.readFileSync(hostIdentityPath(), "utf8");
+    const raw = fs76.readFileSync(hostIdentityPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null && typeof parsed.hostId === "string" && typeof parsed.hostToken === "string" && typeof parsed.controlPluginId === "string") {
       const p2 = parsed;
@@ -47931,8 +48004,8 @@ function ensureControlPollSecret(identity, save = saveHostIdentity) {
 }
 function saveHostIdentity(identity) {
   const file = hostIdentityPath();
-  fs75.mkdirSync(path89.dirname(file), { recursive: true, mode: 448 });
-  fs75.writeFileSync(file, JSON.stringify(identity, null, 2), {
+  fs76.mkdirSync(path90.dirname(file), { recursive: true, mode: 448 });
+  fs76.writeFileSync(file, JSON.stringify(identity, null, 2), {
     encoding: "utf8",
     mode: 384
   });
@@ -47977,7 +48050,7 @@ function isTerminalEnrollError(err) {
 }
 function deleteHostIdentity() {
   try {
-    fs75.rmSync(hostIdentityPath(), { force: true });
+    fs76.rmSync(hostIdentityPath(), { force: true });
   } catch {
   }
 }
@@ -48001,7 +48074,7 @@ async function postJson(pathname, body) {
 function resolveHostLabel(label) {
   const explicit = label?.trim();
   const envLabel = process.env.CODEAM_HOST_LABEL?.trim();
-  const resolved = explicit || envLabel || os59.hostname();
+  const resolved = explicit || envLabel || os60.hostname();
   return resolved.slice(0, 80);
 }
 async function redeemEnrollToken(token, label) {
@@ -48194,9 +48267,9 @@ async function host(args2) {
 
 // src/commands/host-agent.ts
 var import_node_child_process30 = require("child_process");
-var os63 = __toESM(require("os"));
-var fs79 = __toESM(require("fs"));
-var path93 = __toESM(require("path"));
+var os64 = __toESM(require("os"));
+var fs80 = __toESM(require("fs"));
+var path94 = __toESM(require("path"));
 
 // src/skills/persist-from-payload.ts
 function persistOrClearSkillsFromPayload(skills) {
@@ -48205,13 +48278,13 @@ function persistOrClearSkillsFromPayload(skills) {
 }
 
 // src/commands/host/session-state.ts
-var fs76 = __toESM(require("fs"));
-var os60 = __toESM(require("os"));
-var path90 = __toESM(require("path"));
+var fs77 = __toESM(require("fs"));
+var os61 = __toESM(require("os"));
+var path91 = __toESM(require("path"));
 function hostSessionStatePath(env = process.env) {
   const override = env.CODEAM_HOST_SESSION_STATE_FILE;
   if (override && override.trim()) return override.trim();
-  return path90.join(os60.homedir(), ".codeam", "host-agent-sessions.json");
+  return path91.join(os61.homedir(), ".codeam", "host-agent-sessions.json");
 }
 function isRecord5(v) {
   if (typeof v !== "object" || v === null) return false;
@@ -48222,7 +48295,7 @@ function fileSessionChildStore(file = hostSessionStatePath()) {
   return {
     load() {
       try {
-        const raw = JSON.parse(fs76.readFileSync(file, "utf8"));
+        const raw = JSON.parse(fs77.readFileSync(file, "utf8"));
         return Array.isArray(raw?.sessions) ? raw.sessions.filter(isRecord5) : [];
       } catch {
         return [];
@@ -48230,18 +48303,18 @@ function fileSessionChildStore(file = hostSessionStatePath()) {
     },
     save(list) {
       try {
-        fs76.mkdirSync(path90.dirname(file), { recursive: true, mode: 448 });
+        fs77.mkdirSync(path91.dirname(file), { recursive: true, mode: 448 });
         const tmp = `${file}.${process.pid}.tmp`;
-        fs76.writeFileSync(tmp, JSON.stringify({ version: 1, sessions: list }, null, 2), {
+        fs77.writeFileSync(tmp, JSON.stringify({ version: 1, sessions: list }, null, 2), {
           mode: 384
         });
-        fs76.renameSync(tmp, file);
+        fs77.renameSync(tmp, file);
       } catch {
       }
     },
     clear() {
       try {
-        fs76.rmSync(file, { force: true });
+        fs77.rmSync(file, { force: true });
       } catch {
       }
     }
@@ -48264,10 +48337,10 @@ function planSessionResume(records, max) {
   return { resume: ordered.slice(0, bound), dropped: ordered.slice(bound) };
 }
 function pickSavedSessionForWorkspace(sessions3, cwd, deployId) {
-  const target = path90.resolve(cwd);
+  const target = path91.resolve(cwd);
   const reconnectable = (s) => !!s.pluginId && !!s.pollSecret && !!s.agent;
   const matches = sessions3.filter(
-    (s) => !!s.cwd && path90.resolve(s.cwd) === target && reconnectable(s)
+    (s) => !!s.cwd && path91.resolve(s.cwd) === target && reconnectable(s)
   );
   if (matches.length > 0) {
     matches.sort((a, b) => b.pairedAt - a.pairedAt);
@@ -48279,11 +48352,11 @@ function pickSavedSessionForWorkspace(sessions3, cwd, deployId) {
 
 // src/commands/host/git-tooling.ts
 var import_node_child_process26 = require("child_process");
-var fs77 = __toESM(require("fs"));
-var os61 = __toESM(require("os"));
-var path91 = __toESM(require("path"));
+var fs78 = __toESM(require("fs"));
+var os62 = __toESM(require("os"));
+var path92 = __toESM(require("path"));
 function codeamBinDir() {
-  return process.env.CODEAM_BIN_DIR ?? path91.join(os61.homedir(), ".codeam", "bin");
+  return process.env.CODEAM_BIN_DIR ?? path92.join(os62.homedir(), ".codeam", "bin");
 }
 var FALLBACK_GH_VERSION = "2.62.0";
 var RELEASE_API = "https://api.github.com/repos/cli/cli/releases/latest";
@@ -48315,7 +48388,7 @@ async function download(url2, dest) {
     const res = await fetch(url2, { headers: { "User-Agent": "codeam-cli" } });
     if (!res.ok || !res.body) return false;
     const buf = Buffer.from(await res.arrayBuffer());
-    fs77.writeFileSync(dest, buf);
+    fs78.writeFileSync(dest, buf);
     return true;
   } catch {
     return false;
@@ -48338,8 +48411,8 @@ async function ensureGhCli(runner, token, deps = {}) {
     const version3 = await resolveVersionFn(token);
     const asset = `gh_${version3}_${osToken}_${arch2}`;
     const url2 = `https://github.com/cli/cli/releases/download/v${version3}/${asset}.${ext}`;
-    const tmpRoot = fs77.mkdtempSync(path91.join(os61.tmpdir(), "codeam-gh-"));
-    const archive = path91.join(tmpRoot, `${asset}.${ext}`);
+    const tmpRoot = fs78.mkdtempSync(path92.join(os62.tmpdir(), "codeam-gh-"));
+    const archive = path92.join(tmpRoot, `${asset}.${ext}`);
     if (!await downloadFn(url2, archive)) {
       log.warn("host-agent", "gh download failed \u2014 skipping (git pull/push still work via the credential helper)");
       return null;
@@ -48349,16 +48422,16 @@ async function ensureGhCli(runner, token, deps = {}) {
       log.warn("host-agent", `gh archive extraction failed (code=${String(extract.code)}) \u2014 skipping`);
       return null;
     }
-    const extractedBin = path91.join(tmpRoot, asset, "bin", binaryName);
-    if (!fs77.existsSync(extractedBin)) {
+    const extractedBin = path92.join(tmpRoot, asset, "bin", binaryName);
+    if (!fs78.existsSync(extractedBin)) {
       log.warn("host-agent", "gh binary not found in the extracted archive \u2014 skipping");
       return null;
     }
     const binDir = codeamBinDir();
-    fs77.mkdirSync(binDir, { recursive: true });
-    const target = path91.join(binDir, binaryName);
-    fs77.copyFileSync(extractedBin, target);
-    fs77.chmodSync(target, 493);
+    fs78.mkdirSync(binDir, { recursive: true });
+    const target = path92.join(binDir, binaryName);
+    fs78.copyFileSync(extractedBin, target);
+    fs78.chmodSync(target, 493);
     log.info("host-agent", `gh installed to ${target} (v${version3})`);
     return target;
   } catch (e) {
@@ -48395,19 +48468,19 @@ async function ensureGhAuth(runner, ghCmd, token) {
 }
 function ghConfigDir() {
   if (process.env.GH_CONFIG_DIR) return process.env.GH_CONFIG_DIR;
-  if (process.env.XDG_CONFIG_HOME) return path91.join(process.env.XDG_CONFIG_HOME, "gh");
+  if (process.env.XDG_CONFIG_HOME) return path92.join(process.env.XDG_CONFIG_HOME, "gh");
   if (process.platform === "win32" && process.env.APPDATA) {
-    return path91.join(process.env.APPDATA, "GitHub CLI");
+    return path92.join(process.env.APPDATA, "GitHub CLI");
   }
-  return path91.join(os61.homedir(), ".config", "gh");
+  return path92.join(os62.homedir(), ".config", "gh");
 }
 function writeGhHostsToken(token) {
   try {
     const dir = ghConfigDir();
-    const file = path91.join(dir, "hosts.yml");
-    if (fs77.existsSync(file)) return false;
-    fs77.mkdirSync(dir, { recursive: true, mode: 448 });
-    fs77.writeFileSync(
+    const file = path92.join(dir, "hosts.yml");
+    if (fs78.existsSync(file)) return false;
+    fs78.mkdirSync(dir, { recursive: true, mode: 448 });
+    fs78.writeFileSync(
       file,
       `github.com:
     oauth_token: ${token}
@@ -48450,8 +48523,8 @@ async function ensureGlabCli(runner, deps = {}) {
     const version3 = await resolveLatestGlabVersion();
     const asset = `glab_${version3}_${osToken}_${arch2}`;
     const url2 = `https://gitlab.com/gitlab-org/cli/-/releases/v${version3}/downloads/${asset}.${ext}`;
-    const tmpRoot = fs77.mkdtempSync(path91.join(os61.tmpdir(), "codeam-glab-"));
-    const archive = path91.join(tmpRoot, `${asset}.${ext}`);
+    const tmpRoot = fs78.mkdtempSync(path92.join(os62.tmpdir(), "codeam-glab-"));
+    const archive = path92.join(tmpRoot, `${asset}.${ext}`);
     if (!await downloadFn(url2, archive)) {
       log.warn("host-agent", "glab download failed \u2014 skipping (git push/pull still work)");
       return null;
@@ -48462,20 +48535,20 @@ async function ensureGlabCli(runner, deps = {}) {
       return null;
     }
     const candidates = [
-      path91.join(tmpRoot, "bin", binaryName),
-      path91.join(tmpRoot, asset, "bin", binaryName),
-      path91.join(tmpRoot, binaryName)
+      path92.join(tmpRoot, "bin", binaryName),
+      path92.join(tmpRoot, asset, "bin", binaryName),
+      path92.join(tmpRoot, binaryName)
     ];
-    const extractedBin = candidates.find((c2) => fs77.existsSync(c2));
+    const extractedBin = candidates.find((c2) => fs78.existsSync(c2));
     if (!extractedBin) {
       log.warn("host-agent", "glab binary not found in the extracted archive \u2014 skipping");
       return null;
     }
     const binDir = codeamBinDir();
-    fs77.mkdirSync(binDir, { recursive: true });
-    const target = path91.join(binDir, binaryName);
-    fs77.copyFileSync(extractedBin, target);
-    fs77.chmodSync(target, 493);
+    fs78.mkdirSync(binDir, { recursive: true });
+    const target = path92.join(binDir, binaryName);
+    fs78.copyFileSync(extractedBin, target);
+    fs78.chmodSync(target, 493);
     log.info("host-agent", `glab installed to ${target} (v${version3})`);
     return target;
   } catch (e) {
@@ -48557,9 +48630,9 @@ var defaultGitToolingRunner = {
 var import_node_child_process28 = require("child_process");
 
 // src/lib/updateNotifier.ts
-var fs78 = __toESM(require("fs"));
-var os62 = __toESM(require("os"));
-var path92 = __toESM(require("path"));
+var fs79 = __toESM(require("fs"));
+var os63 = __toESM(require("os"));
+var path93 = __toESM(require("path"));
 var https8 = __toESM(require("https"));
 var import_node_child_process27 = require("child_process");
 var import_picocolors12 = __toESM(require("picocolors"));
@@ -48568,12 +48641,12 @@ var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
 var TTL_MS = 24 * 60 * 60 * 1e3;
 var REQUEST_TIMEOUT_MS = 1500;
 function cachePath() {
-  const dir = path92.join(os62.homedir(), ".codeam");
-  return path92.join(dir, "update-check.json");
+  const dir = path93.join(os63.homedir(), ".codeam");
+  return path93.join(dir, "update-check.json");
 }
 function readCache() {
   try {
-    const raw = fs78.readFileSync(cachePath(), "utf8");
+    const raw = fs79.readFileSync(cachePath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.fetchedAt !== "number" || typeof parsed.latest !== "string") return null;
     return parsed;
@@ -48584,10 +48657,10 @@ function readCache() {
 function writeCache(cache) {
   try {
     const file = cachePath();
-    fs78.mkdirSync(path92.dirname(file), { recursive: true });
+    fs79.mkdirSync(path93.dirname(file), { recursive: true });
     const tmp = `${file}.${process.pid}.tmp`;
-    fs78.writeFileSync(tmp, JSON.stringify(cache));
-    fs78.renameSync(tmp, file);
+    fs79.writeFileSync(tmp, JSON.stringify(cache));
+    fs79.renameSync(tmp, file);
   } catch {
   }
 }
@@ -48661,8 +48734,8 @@ function isLinkedInstall() {
       timeout: 2e3
     }).trim();
     if (!root) return false;
-    const pkgPath = path92.join(root, PKG_NAME);
-    return fs78.lstatSync(pkgPath).isSymbolicLink();
+    const pkgPath = path93.join(root, PKG_NAME);
+    return fs79.lstatSync(pkgPath).isSymbolicLink();
   } catch {
     return false;
   }
@@ -48698,7 +48771,7 @@ function maybeAutoUpdate(currentVersion, latest) {
     return;
   }
   try {
-    fs78.unlinkSync(cachePath());
+    fs79.unlinkSync(cachePath());
   } catch {
   }
   process.stderr.write(`  ${import_picocolors12.default.green("\u2713")} Updated. Resuming session...
@@ -48714,7 +48787,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.75.34" : null;
+  const current2 = true ? "2.75.36" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -48731,7 +48804,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.75.34" : null;
+  const current2 = true ? "2.75.36" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -48754,7 +48827,7 @@ var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
 var SUDO_PREFLIGHT_TIMEOUT_MS = 5e3;
 function currentCliVersion() {
-  return true ? "2.75.34" : null;
+  return true ? "2.75.36" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -49113,6 +49186,7 @@ var HostAgentSupervisor = class {
     this.selfUpdate = deps.selfUpdate ?? runSelfUpdate;
     this.now = deps.now ?? (() => Date.now());
     this.onUpdated = deps.onUpdated ?? defaultOnUpdated;
+    this.isChildMidTurn = deps.isChildMidTurn ?? ((pid) => isProcessMidTurn(pid));
     this.docker = deps.docker ?? defaultDockerRunner;
     this.postResumeFailure = deps.postResumeFailure ?? postSessionErrorBubble;
   }
@@ -49129,6 +49203,7 @@ var HostAgentSupervisor = class {
   /** Self-update check + install (injectable; defaults to runSelfUpdate). */
   selfUpdate;
   now;
+  isChildMidTurn;
   /** Restart action after a successful self-update (defaults to process.exit). */
   onUpdated;
   /** Guards against overlapping self-update ticks (a slow npm install). */
@@ -49332,19 +49407,20 @@ var HostAgentSupervisor = class {
    * idle tick) rather than yank an active turn.
    */
   maybeRestartForUpdate(version3) {
-    if (this.children.size > 0) {
+    const midTurn = [...this.children.values()].some((c2) => this.isChildMidTurn(c2.proc.pid));
+    if (midTurn) {
       const since = this.pendingRestartSince ?? this.now();
       const waited = this.now() - since;
       if (waited < SELF_UPDATE_DEFER_MAX_MS) {
         log.info(
           "host-agent",
-          `self-update: ${version3} installed but ${this.children.size} child(ren) busy \u2014 deferring restart`
+          `self-update: ${version3} installed but a session is mid-turn \u2014 deferring restart`
         );
         return false;
       }
       log.warn(
         "host-agent",
-        `self-update: ${version3} has been owed for ${Math.round(waited / 36e5)}h with ${this.children.size} child(ren) still running \u2014 restarting anyway rather than staying on old code`
+        `self-update: ${version3} has been owed for ${Math.round(waited / 36e5)}h with a session still mid-turn \u2014 restarting anyway rather than staying on old code`
       );
     }
     this.onUpdated(version3);
@@ -49495,13 +49571,13 @@ var HostAgentSupervisor = class {
     const relay = this.relay;
     if (!relay) return;
     const raw = cmd.payload?.path;
-    const target = typeof raw === "string" && raw.trim() ? path93.resolve(raw.trim()) : os63.homedir();
+    const target = typeof raw === "string" && raw.trim() ? path94.resolve(raw.trim()) : os64.homedir();
     try {
-      const dirents = await fs79.promises.readdir(target, { withFileTypes: true });
+      const dirents = await fs80.promises.readdir(target, { withFileTypes: true });
       const entries = dirents.filter((d3) => !d3.name.startsWith(".")).map((d3) => ({ name: d3.name, isDir: d3.isDirectory() })).sort(
         (a, b) => a.isDir === b.isDir ? a.name.localeCompare(b.name) : a.isDir ? -1 : 1
       );
-      const parent = path93.dirname(target);
+      const parent = path94.dirname(target);
       await relay.sendResult(cmd.id, "completed", {
         path: target,
         // null at the filesystem root so the UI can hide the ".." affordance.
@@ -49848,14 +49924,14 @@ var HostAgentSupervisor = class {
           ...buildHouseProxyChildEnv({ baseUrl, token, openRouter: openRouter === true }),
           CODEAM_AUTO_TOKEN: payload.autoPairToken
         };
-        const houseConfigDir = path93.join(
-          os63.homedir(),
+        const houseConfigDir = path94.join(
+          os64.homedir(),
           ".codeam",
           "house-claude",
           payload.deployId
         );
         try {
-          fs79.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
+          fs80.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
         } catch {
         }
         childEnv.CLAUDE_CONFIG_DIR = houseConfigDir;
@@ -49881,7 +49957,7 @@ var HostAgentSupervisor = class {
         report("installing", "installing agent CLI");
         await this.runAgentInstall(payload.agentInstallScript);
       }
-      const home = process.env.HOME || os63.homedir();
+      const home = process.env.HOME || os64.homedir();
       childEnv.PATH = `${home}/.local/bin:${process.env.PATH ?? ""}`;
       if (payload.cloneToken) {
         try {
@@ -49889,13 +49965,13 @@ var HostAgentSupervisor = class {
           if ((payload.repoProvider ?? "github") === "gitlab") {
             const glabCmd = await ensureGlabCli(defaultGitToolingRunner);
             if (glabCmd) {
-              childEnv.PATH = `${codeamBinDir()}${path93.delimiter}${childEnv.PATH}`;
+              childEnv.PATH = `${codeamBinDir()}${path94.delimiter}${childEnv.PATH}`;
               await ensureGlabAuth(defaultGitToolingRunner, glabCmd, payload.cloneToken);
             }
           } else {
             const ghCmd = await ensureGhCli(defaultGitToolingRunner, payload.cloneToken);
             if (ghCmd) {
-              childEnv.PATH = `${codeamBinDir()}${path93.delimiter}${childEnv.PATH}`;
+              childEnv.PATH = `${codeamBinDir()}${path94.delimiter}${childEnv.PATH}`;
               await ensureGhAuth(defaultGitToolingRunner, ghCmd, payload.cloneToken);
             }
           }
@@ -49923,9 +49999,9 @@ var HostAgentSupervisor = class {
       );
       if (!payload.suppressOnboardingWelcome) {
         try {
-          const cfgDir = childEnv.CLAUDE_CONFIG_DIR || path93.join(os63.homedir(), ".claude");
-          const projectDir = path93.join(cfgDir, "projects", encodeCwd(cwd));
-          const hasPriorConversation = fs79.existsSync(projectDir) && fs79.readdirSync(projectDir).some((f) => f.endsWith(".jsonl"));
+          const cfgDir = childEnv.CLAUDE_CONFIG_DIR || path94.join(os64.homedir(), ".claude");
+          const projectDir = path94.join(cfgDir, "projects", encodeCwd(cwd));
+          const hasPriorConversation = fs80.existsSync(projectDir) && fs80.readdirSync(projectDir).some((f) => f.endsWith(".jsonl"));
           if (hasPriorConversation) {
             childEnv.CODEAM_RESUME_LATEST = "1";
             log.info(
@@ -50076,7 +50152,7 @@ var HostAgentSupervisor = class {
   fallbackResumeTarget() {
     const session = getActiveSession();
     if (!session || !session.pluginId || !session.pollSecret || !session.agent) return null;
-    const cwd = session.cwd && fs79.existsSync(session.cwd) ? session.cwd : process.cwd();
+    const cwd = session.cwd && fs80.existsSync(session.cwd) ? session.cwd : process.cwd();
     const deployId = deployIdFromWorkspace(session.cwd) ?? session.id;
     return { deployId, cwd, session };
   }
@@ -50109,7 +50185,7 @@ var HostAgentSupervisor = class {
       log.warn("host-agent", `self_hosted_resume ${sessionId.slice(0, 8)}: no saved pairing on this box`);
       return;
     }
-    if (!session.cwd || !fs79.existsSync(session.cwd)) {
+    if (!session.cwd || !fs80.existsSync(session.cwd)) {
       log.warn("host-agent", `self_hosted_resume ${sessionId.slice(0, 8)}: workspace is gone`);
       return;
     }
@@ -50151,7 +50227,7 @@ var HostAgentSupervisor = class {
       const persisted = new Map(this.sessionStore.load().map((r) => [r.deployId, r.agent]));
       for (const c2 of this.children.values()) persisted.set(c2.deployId, c2.agent);
       return this.listSavedSessions().map((s) => ({ s, deployId: deployIdFromWorkspace(s.cwd) })).filter(
-        (x) => x.deployId !== null && !!x.s.cwd && fs79.existsSync(x.s.cwd)
+        (x) => x.deployId !== null && !!x.s.cwd && fs80.existsSync(x.s.cwd)
       ).map(({ s, deployId }) => {
         const agent = persisted.get(deployId);
         return { deployId, sessionId: s.id, ...agent ? { agent } : {} };
@@ -50166,7 +50242,7 @@ var HostAgentSupervisor = class {
     if (this.children.has(deployId)) return;
     const st3 = this.resumeStateFor(target);
     try {
-      const cwd = fs79.existsSync(target.cwd) ? target.cwd : process.cwd();
+      const cwd = fs80.existsSync(target.cwd) ? target.cwd : process.cwd();
       const proc = this.resumeSpawner(
         { ...readHouseProxyChildEnv(deployId), CODEAM_RESUME_SESSION_ID: session.id },
         cwd
@@ -50193,7 +50269,7 @@ var HostAgentSupervisor = class {
           return;
         }
         if (tracked && signal) {
-          this.onResumeChildExit(target, 128 + (os63.constants.signals[signal] ?? 9), `signal ${signal}`);
+          this.onResumeChildExit(target, 128 + (os64.constants.signals[signal] ?? 9), `signal ${signal}`);
           return;
         }
         log.warn(
@@ -50236,7 +50312,7 @@ var HostAgentSupervisor = class {
     if (Date.now() - child.startedAt < CRASH_RESPAWN_MIN_UPTIME_MS) return false;
     const session = pickSavedSessionForWorkspace(this.listSavedSessions(), child.cwd);
     if (!session) return false;
-    const exitCode = typeof code === "number" ? code : 128 + (signal ? os63.constants.signals[signal] ?? 9 : 9);
+    const exitCode = typeof code === "number" ? code : 128 + (signal ? os64.constants.signals[signal] ?? 9 : 9);
     log.warn(
       "host-agent",
       `session deploy=${child.deployId.slice(0, 8)} died (${signal ?? code}) after ${Math.round((Date.now() - child.startedAt) / 1e3)}s \u2014 respawning it (resume)`
@@ -50385,12 +50461,12 @@ var HostAgentSupervisor = class {
       this.untrackChild(deployId);
     }
     const dirs = [
-      path93.join(selfHostedWorkspaceRoot(), deployId),
-      path93.join(os63.homedir(), ".codeam", "house-claude", deployId)
+      path94.join(selfHostedWorkspaceRoot(), deployId),
+      path94.join(os64.homedir(), ".codeam", "house-claude", deployId)
     ];
     for (const dir of dirs) {
       try {
-        fs79.rmSync(dir, { recursive: true, force: true });
+        fs80.rmSync(dir, { recursive: true, force: true });
       } catch (err) {
         log.warn(
           "host-agent",
@@ -50550,8 +50626,8 @@ async function invite() {
 var import_node_dns = require("dns");
 var import_node_util6 = require("util");
 var import_node_crypto13 = require("crypto");
-var fs80 = __toESM(require("fs"));
-var path94 = __toESM(require("path"));
+var fs81 = __toESM(require("fs"));
+var path95 = __toESM(require("path"));
 var import_picocolors14 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util6.promisify)(import_node_dns.resolve);
 async function checkDns(apiBase2) {
@@ -50607,13 +50683,13 @@ async function checkHealth(apiBase2) {
   }
 }
 function checkConfigDir() {
-  const dir = path94.join(require("os").homedir(), ".codeam");
+  const dir = path95.join(require("os").homedir(), ".codeam");
   try {
-    fs80.mkdirSync(dir, { recursive: true, mode: 448 });
-    const probe = path94.join(dir, ".doctor-probe");
-    fs80.writeFileSync(probe, "ok", { mode: 384 });
-    const read = fs80.readFileSync(probe, "utf8");
-    fs80.unlinkSync(probe);
+    fs81.mkdirSync(dir, { recursive: true, mode: 448 });
+    const probe = path95.join(dir, ".doctor-probe");
+    fs81.writeFileSync(probe, "ok", { mode: 384 });
+    const read = fs81.readFileSync(probe, "utf8");
+    fs81.unlinkSync(probe);
     if (read !== "ok") throw new Error("write/read round-trip mismatch");
     return {
       id: "config-dir",
@@ -50653,9 +50729,9 @@ function checkSessions() {
   }
 }
 function checkAgentBinaries() {
-  const os66 = createOsStrategy();
+  const os67 = createOsStrategy();
   return getEnabledAgents().map((meta) => {
-    const found = os66.findInPath(meta.binaryName);
+    const found = os67.findInPath(meta.binaryName);
     return {
       id: `agent-${meta.id}`,
       label: `Agent binary: ${meta.displayName} (${meta.binaryName})`,
@@ -50677,7 +50753,7 @@ function checkNodePty() {
       detail: "not required on this platform"
     };
   }
-  const vendoredPath = path94.join(__dirname, "vendor", "node-pty");
+  const vendoredPath = path95.join(__dirname, "vendor", "node-pty");
   for (const target of [vendoredPath, "node-pty"]) {
     try {
       require(target);
@@ -50719,7 +50795,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.75.34" : "0.0.0-dev";
+  const cliVersion = true ? "2.75.36" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -50781,8 +50857,8 @@ ${import_picocolors14.default.bold("  codeam doctor")}
 `);
   out2.write("\n");
   for (const c2 of r.checks) {
-    const mark = c2.ok ? import_picocolors14.default.green("\u2713") : c2.optional ? import_picocolors14.default.yellow("!") : import_picocolors14.default.red("\u2717");
-    out2.write(`  ${mark} ${c2.label}${import_picocolors14.default.dim(` \u2014 ${c2.detail}`)}
+    const mark2 = c2.ok ? import_picocolors14.default.green("\u2713") : c2.optional ? import_picocolors14.default.yellow("!") : import_picocolors14.default.red("\u2717");
+    out2.write(`  ${mark2} ${c2.label}${import_picocolors14.default.dim(` \u2014 ${c2.detail}`)}
 `);
     if (!c2.ok && c2.hint) {
       for (const line of c2.hint.split("\n")) {
@@ -51243,7 +51319,7 @@ async function mcpWarm(argv = [], opts = {}) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.75.34" : "unknown";
+  const v = true ? "2.75.36" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 
@@ -51392,10 +51468,10 @@ var EXIT_CODE_NAMES = {
 };
 
 // src/index.ts
-var os65 = __toESM(require("os"));
+var os66 = __toESM(require("os"));
 if (!process.env.HOME) {
   try {
-    const home = os65.homedir();
+    const home = os66.homedir();
     if (home) process.env.HOME = home;
   } catch {
   }