codeam-cli 2.76.10 → 2.76.11

package/dist/index.js

@@ -90,11 +90,11 @@ var require_src = __commonJS({
 });
 
 // src/integrations/stdio-proxy.ts
-var import_node_child_process36, import_node_readline3, RESTART_CHECK_INTERVAL_MS, SIGKILL_ESCALATION_MS, TOOL_CALL_TIMEOUT_MS, REPLAY_INIT_ID, RestartableStdioProxy;
+var import_node_child_process37, import_node_readline3, RESTART_CHECK_INTERVAL_MS, SIGKILL_ESCALATION_MS, TOOL_CALL_TIMEOUT_MS, REPLAY_INIT_ID, RestartableStdioProxy;
 var init_stdio_proxy = __esm({
   "src/integrations/stdio-proxy.ts"() {
     "use strict";
-    import_node_child_process36 = require("child_process");
+    import_node_child_process37 = require("child_process");
     import_node_readline3 = __toESM(require("readline"));
     RESTART_CHECK_INTERVAL_MS = 3e4;
     SIGKILL_ESCALATION_MS = 2e3;
@@ -128,11 +128,11 @@ var init_stdio_proxy = __esm({
         rl.on("close", () => this.child?.stdin?.end());
         const timer = setInterval(() => this.checkRestart(stdout), RESTART_CHECK_INTERVAL_MS);
         timer.unref();
-        return new Promise((resolve12) => {
+        return new Promise((resolve14) => {
           this.ended = (code) => {
             clearInterval(timer);
             process.exitCode = code;
-            resolve12();
+            resolve14();
           };
         });
       }
@@ -271,7 +271,7 @@ var init_stdio_proxy = __esm({
       }
       async spawnChild(stdout, preResolved) {
         const spec = preResolved ?? await this.opts.spawnSpec();
-        const spawn46 = this.opts.spawnImpl ?? import_node_child_process36.spawn;
+        const spawn46 = this.opts.spawnImpl ?? import_node_child_process37.spawn;
         const child = spawn46(spec.command, spec.args, {
           env: { ...process.env, ...spec.env },
           // env only — never argv
@@ -313,18 +313,18 @@ function deploymentNameFromKey(key) {
   return null;
 }
 function defaultSpawn(timeoutMs) {
-  return (cmd, args2, opts) => new Promise((resolve12) => {
+  return (cmd, args2, opts) => new Promise((resolve14) => {
     let out2 = "";
     let err = "";
     let done = false;
     const finish = (code) => {
       if (done) return;
       done = true;
-      resolve12({ code, stdout: out2, stderr: err });
+      resolve14({ code, stdout: out2, stderr: err });
     };
     let child;
     try {
-      child = (0, import_node_child_process37.spawn)(cmd, args2, { cwd: opts.cwd, env: opts.env, stdio: ["ignore", "pipe", "pipe"] });
+      child = (0, import_node_child_process38.spawn)(cmd, args2, { cwd: opts.cwd, env: opts.env, stdio: ["ignore", "pipe", "pipe"] });
     } catch (e) {
       finish(1);
       err = e instanceof Error ? e.message : String(e);
@@ -357,8 +357,8 @@ function defaultSpawn(timeoutMs) {
   });
 }
 function resolveConvexBin(cwd) {
-  const local = path107.join(cwd, "node_modules", ".bin", process.platform === "win32" ? "convex.cmd" : "convex");
-  if (fs93.existsSync(local)) return { cmd: local, args: [] };
+  const local = path110.join(cwd, "node_modules", ".bin", process.platform === "win32" ? "convex.cmd" : "convex");
+  if (fs96.existsSync(local)) return { cmd: local, args: [] };
   return { cmd: "npx", args: ["--yes", "convex"] };
 }
 function redact(text, key) {
@@ -489,13 +489,13 @@ async function runConvexAdminMcp(client3, id) {
   });
   await server.connect(new StdioServerTransport());
 }
-var import_node_child_process37, fs93, path107, TOOLS;
+var import_node_child_process38, fs96, path110, TOOLS;
 var init_convex_admin_mcp = __esm({
   "src/integrations/convex-admin-mcp.ts"() {
     "use strict";
-    import_node_child_process37 = require("child_process");
-    fs93 = __toESM(require("fs"));
-    path107 = __toESM(require("path"));
+    import_node_child_process38 = require("child_process");
+    fs96 = __toESM(require("fs"));
+    path110 = __toESM(require("path"));
     TOOLS = [
       {
         name: "tables",
@@ -656,7 +656,7 @@ async function runHttpRelay(delivery, client3, id) {
     requestInit: { headers: buildHttpHeaders(delivery.httpHeaders, token) }
   });
   const stdioTransport = new StdioServerTransport();
-  await new Promise((resolve12, reject) => {
+  await new Promise((resolve14, reject) => {
     let done = false;
     const watchdog = createToolCallWatchdog({
       timeoutMs: TOOL_CALL_TIMEOUT_MS,
@@ -670,7 +670,7 @@ async function runHttpRelay(delivery, client3, id) {
       void httpTransport.close().catch(() => void 0);
       void stdioTransport.close().catch(() => void 0);
       if (err) reject(err);
-      else resolve12();
+      else resolve14();
     };
     stdioTransport.onmessage = (msg) => {
       watchdog.onClientMessage(msg);
@@ -3595,11 +3595,11 @@ function quiet(fn) {
     log.debug(TAG, "ignored sync error", err);
   }
 }
-function rmIfExistsQuiet(path109) {
+function rmIfExistsQuiet(path112) {
   try {
-    fs2.rmSync(path109, { force: true });
+    fs2.rmSync(path112, { force: true });
   } catch (err) {
-    log.debug(TAG, `rmIfExists failed for ${path109}`, err);
+    log.debug(TAG, `rmIfExists failed for ${path112}`, err);
   }
 }
 function killQuiet(target, signal = "SIGTERM") {
@@ -3803,8 +3803,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? (0, import_pat
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path109) {
-  return path109.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path112) {
+  return path112.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 
 // ../../node_modules/@posthog/core/dist/error-tracking/index.mjs
@@ -4726,11 +4726,11 @@ async function raceWithTimeout(promise, timeoutMs, onTimeout) {
   try {
     return await Promise.race([
       promise,
-      new Promise((resolve12, reject) => {
+      new Promise((resolve14, reject) => {
         timeoutHandle = safeSetTimeout(() => {
           try {
             onTimeout?.();
-            resolve12();
+            resolve14();
           } catch (error) {
             reject(error);
           }
@@ -6537,13 +6537,13 @@ var PostHogCoreStateless = class {
       sentFromRoute += batchMessages.length;
     }
   }
-  async _sendOtlpBatch({ path: path109, payload }) {
+  async _sendOtlpBatch({ path: path112, payload }) {
     if (this.disabled) return {
       kind: "fatal",
       error: new Error("The client is disabled")
     };
     const serialized = JSON.stringify(payload);
-    const url2 = `${this.host}/i/v1/${path109}?token=${encodeURIComponent(this.apiKey)}`;
+    const url2 = `${this.host}/i/v1/${path112}?token=${encodeURIComponent(this.apiKey)}`;
     const gzippedPayload = this.disableCompression ? null : await this.compressPayload(serialized);
     const fetchOptions = {
       method: "POST",
@@ -7783,14 +7783,14 @@ async function addSourceContext(frames, openSourceFile = import_promises.open, l
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-async function openRegularSourceFile(path109, openSourceFile, logger) {
+async function openRegularSourceFile(path112, openSourceFile, logger) {
   let fileHandle;
   let isValid = false;
   try {
-    fileHandle = await openSourceFile(path109, import_node_fs.constants.O_RDONLY | import_node_fs.constants.O_NONBLOCK);
+    fileHandle = await openSourceFile(path112, import_node_fs.constants.O_RDONLY | import_node_fs.constants.O_NONBLOCK);
     const fileStat = await fileHandle.stat();
     if (!fileStat.isFile()) return;
-    if (fileStat.size > MAX_CONTEXTLINES_FILE_SIZE) return void logger?.debug(`Skipping source context for oversized file ${path109}: ${fileStat.size} bytes exceeds ${MAX_CONTEXTLINES_FILE_SIZE}`);
+    if (fileStat.size > MAX_CONTEXTLINES_FILE_SIZE) return void logger?.debug(`Skipping source context for oversized file ${path112}: ${fileStat.size} bytes exceeds ${MAX_CONTEXTLINES_FILE_SIZE}`);
     isValid = true;
     return fileHandle;
   } catch {
@@ -7800,17 +7800,17 @@ async function openRegularSourceFile(path109, openSourceFile, logger) {
     });
   }
 }
-async function getContextLinesFromFile(path109, ranges, output, cacheKey, openSourceFile, logger) {
-  const fileHandle = await openRegularSourceFile(path109, openSourceFile, logger);
+async function getContextLinesFromFile(path112, ranges, output, cacheKey, openSourceFile, logger) {
+  const fileHandle = await openRegularSourceFile(path112, openSourceFile, logger);
   if (void 0 === fileHandle) return void LRU_FILE_CONTENTS_FS_READ_FAILED.set(cacheKey, 1);
   const openedFileHandle = fileHandle;
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     let finished = false;
     function destroyStreamAndResolve(stream2) {
       if (finished) return;
       finished = true;
       stream2?.destroy();
-      openedFileHandle.close().then(resolve12, resolve12);
+      openedFileHandle.close().then(resolve14, resolve14);
     }
     let stream;
     try {
@@ -7903,22 +7903,22 @@ function clearLineContext(frame) {
   delete frame.context_line;
   delete frame.post_context;
 }
-function shouldSkipContextLinesForFile(path109) {
-  return path109.startsWith("node:") || path109.endsWith(".min.js") || path109.endsWith(".min.cjs") || path109.endsWith(".min.mjs") || path109.startsWith("data:");
+function shouldSkipContextLinesForFile(path112) {
+  return path112.startsWith("node:") || path112.endsWith(".min.js") || path112.endsWith(".min.cjs") || path112.endsWith(".min.mjs") || path112.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame) {
   if (void 0 !== frame.lineno && frame.lineno > MAX_CONTEXTLINES_LINENO) return true;
   if (void 0 !== frame.colno && frame.colno > MAX_CONTEXTLINES_COLNO) return true;
   return false;
 }
-function makeSourceCacheKey(path109, basePath) {
-  if ((0, import_node_path.isAbsolute)(path109)) return JSON.stringify([
+function makeSourceCacheKey(path112, basePath) {
+  if ((0, import_node_path.isAbsolute)(path112)) return JSON.stringify([
     null,
-    path109
+    path112
   ]);
   return void 0 === basePath ? void 0 : JSON.stringify([
     basePath,
-    path109
+    path112
   ]);
 }
 function rangeExistsInContentCache(cacheKey, range) {
@@ -8999,7 +8999,7 @@ var V1CaptureSender = class {
     this.fetchFn = hooks.fetch;
     this.onError = hooks.onError;
     this.now = hooks.now ?? Date.now;
-    this.sleep = hooks.sleep ?? ((ms) => new Promise((resolve12) => safeSetTimeout(resolve12, ms)));
+    this.sleep = hooks.sleep ?? ((ms) => new Promise((resolve14) => safeSetTimeout(resolve14, ms)));
     this.generateRequestId = hooks.generateRequestId ?? uuidv7;
     this.compress = hooks.compress ?? gzipCompress;
   }
@@ -9363,9 +9363,9 @@ var PostHogBackendClient = class extends PostHogCoreStateless {
     if (!waitUntil) return;
     if (this.disabled || this.optedOut) return;
     if (!this._waitUntilCycle) {
-      let resolve12;
+      let resolve14;
       const promise = new Promise((r) => {
-        resolve12 = r;
+        resolve14 = r;
       });
       try {
         waitUntil(promise);
@@ -9373,7 +9373,7 @@ var PostHogBackendClient = class extends PostHogCoreStateless {
         return;
       }
       this._waitUntilCycle = {
-        resolve: resolve12,
+        resolve: resolve14,
         startedAt: Date.now(),
         timer: void 0
       };
@@ -9397,12 +9397,12 @@ var PostHogBackendClient = class extends PostHogCoreStateless {
     return cycle?.resolve;
   }
   async resolveWaitUntilFlush() {
-    const resolve12 = this._consumeWaitUntilCycle();
+    const resolve14 = this._consumeWaitUntilCycle();
     try {
       await this.flushWithPendingPromises();
     } catch {
     } finally {
-      resolve12?.();
+      resolve14?.();
     }
   }
   getPersistedProperty(key) {
@@ -9660,15 +9660,15 @@ var PostHogBackendClient = class extends PostHogCoreStateless {
   async waitForLocalEvaluationReady(timeoutMs = THIRTY_SECONDS) {
     if (this.isLocalEvaluationReady()) return true;
     if (void 0 === this.featureFlagsPoller) return false;
-    return new Promise((resolve12) => {
+    return new Promise((resolve14) => {
       const timeout = setTimeout(() => {
         cleanup();
-        resolve12(false);
+        resolve14(false);
       }, timeoutMs);
       const cleanup = this._events.on("localEvaluationFlagsLoaded", (count) => {
         clearTimeout(timeout);
         cleanup();
-        resolve12(count > 0);
+        resolve14(count > 0);
       });
     });
   }
@@ -10172,7 +10172,7 @@ var PostHogBackendClient = class extends PostHogCoreStateless {
   }
   async _shutdown(shutdownTimeoutMs) {
     const shutdownDeadlineMs = Date.now() + (shutdownTimeoutMs ?? 3e4);
-    const resolve12 = this._consumeWaitUntilCycle();
+    const resolve14 = this._consumeWaitUntilCycle();
     await this.featureFlagsPoller?.stopPoller(shutdownTimeoutMs);
     this.errorTracking.shutdown();
     if (this._metrics) {
@@ -10184,7 +10184,7 @@ var PostHogBackendClient = class extends PostHogCoreStateless {
       return await super._shutdown(Math.max(0, shutdownDeadlineMs - Date.now()));
     } finally {
       this.distinctIdHasSentFlagCalls = {};
-      resolve12?.();
+      resolve14?.();
     }
   }
   async _requestRemoteConfigPayload(flagKey) {
@@ -10579,7 +10579,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.76.10" : "0.0.0-dev",
+    cliVersion: true ? "2.76.11" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -10726,10 +10726,10 @@ var _execSeam = {
   }
 };
 var _execSeamAsync = {
-  exec: (file, args2, opts) => new Promise((resolve12, reject) => {
+  exec: (file, args2, opts) => new Promise((resolve14, reject) => {
     (0, import_child_process.execFile)(file, args2, opts, (err, stdout) => {
       if (err) reject(err);
-      else resolve12(typeof stdout === "string" ? stdout : stdout.toString("utf8"));
+      else resolve14(typeof stdout === "string" ? stdout : stdout.toString("utf8"));
     });
   })
 };
@@ -10824,7 +10824,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.76.10",
+  version: "2.76.11",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -10958,8 +10958,8 @@ async function requestCode(pluginId, pluginSecretHash) {
     });
     let timer;
     const timeoutSentinel = /* @__PURE__ */ Symbol("request-code-timeout");
-    const timeoutPromise = new Promise((resolve12) => {
-      timer = setTimeout(() => resolve12(timeoutSentinel), REQUEST_CODE_TIMEOUT_MS);
+    const timeoutPromise = new Promise((resolve14) => {
+      timer = setTimeout(() => resolve14(timeoutSentinel), REQUEST_CODE_TIMEOUT_MS);
     });
     const result = await Promise.race([post3, timeoutPromise]);
     clearTimeout(timer);
@@ -11413,7 +11413,7 @@ async function postBeadsProvisioning(input) {
   }
 }
 async function _postJsonAuthed(url2, body, pluginAuthToken) {
-  return new Promise((resolve12, reject) => {
+  return new Promise((resolve14, reject) => {
     const data = JSON.stringify(body);
     const u2 = new URL(url2);
     const transport = u2.protocol === "https:" ? https : http;
@@ -11443,9 +11443,9 @@ async function _postJsonAuthed(url2, body, pluginAuthToken) {
             return;
           }
           try {
-            resolve12(JSON.parse(responseBody));
+            resolve14(JSON.parse(responseBody));
           } catch {
-            resolve12(null);
+            resolve14(null);
           }
         });
       }
@@ -11471,7 +11471,7 @@ function makeHttpError(statusCode, retryAfterHeader, responseBody) {
   return err;
 }
 async function _postJson(url2, body, extraHeaders) {
-  return new Promise((resolve12, reject) => {
+  return new Promise((resolve14, reject) => {
     const data = JSON.stringify(body);
     const u2 = new URL(url2);
     const transport = u2.protocol === "https:" ? https : http;
@@ -11501,9 +11501,9 @@ async function _postJson(url2, body, extraHeaders) {
             return;
           }
           try {
-            resolve12(JSON.parse(body2));
+            resolve14(JSON.parse(body2));
           } catch {
-            resolve12(null);
+            resolve14(null);
           }
         });
       }
@@ -11518,7 +11518,7 @@ async function _postJson(url2, body, extraHeaders) {
   });
 }
 async function _getJson(url2, extraHeaders) {
-  return new Promise((resolve12, reject) => {
+  return new Promise((resolve14, reject) => {
     const u2 = new URL(url2);
     const transport = u2.protocol === "https:" ? https : http;
     const req = transport.request(
@@ -11542,9 +11542,9 @@ async function _getJson(url2, extraHeaders) {
             return;
           }
           try {
-            resolve12(JSON.parse(body));
+            resolve14(JSON.parse(body));
           } catch {
-            resolve12(null);
+            resolve14(null);
           }
         });
       }
@@ -12160,7 +12160,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.76.10" ? { ideVersion: "2.76.10" } : {}
+      ..."2.76.11" ? { ideVersion: "2.76.11" } : {}
     };
     try {
       const res = await _postJson(`${API_BASE2}/api/plugin/heartbeat`, body);
@@ -12305,8 +12305,8 @@ async function stopRelayWithGoodbye(relay, timeoutMs = RELAY_GOODBYE_TIMEOUT_MS)
   try {
     await Promise.race([
       relay.stopAndFlush(),
-      new Promise((resolve12) => {
-        timer = setTimeout(resolve12, timeoutMs);
+      new Promise((resolve14) => {
+        timer = setTimeout(resolve14, timeoutMs);
       })
     ]);
   } catch {
@@ -12415,7 +12415,7 @@ var _transport2 = {
   post: _post
 };
 function _post(url2, headers, payload) {
-  return new Promise((resolve12, reject) => {
+  return new Promise((resolve14, reject) => {
     let settled = false;
     const u2 = new URL(url2);
     const lib = u2.protocol === "https:" ? https3 : http3;
@@ -12440,7 +12440,7 @@ function _post(url2, headers, payload) {
         res.on("end", () => {
           if (settled) return;
           settled = true;
-          resolve12({ statusCode: res.statusCode ?? 0, body });
+          resolve14({ statusCode: res.statusCode ?? 0, body });
         });
       }
     );
@@ -12478,10 +12478,10 @@ var WINDOWS_LEGACY_JUNCTIONS = [
   /[\\/]Start Menu([\\/]|$)/i,
   /[\\/]Templates([\\/]|$)/i
 ];
-function isUnsafeWindowsWatchRoot(dir, homedir52) {
+function isUnsafeWindowsWatchRoot(dir, homedir54) {
   const norm = (p2) => p2.replace(/\//g, "\\").replace(/\\+$/, "").toLowerCase();
   const cwd = norm(dir);
-  const home = norm(homedir52);
+  const home = norm(homedir54);
   if (cwd === home) return true;
   if (/^[a-z]:$/.test(cwd)) return true;
   const sysRoots = [
@@ -13139,12 +13139,12 @@ var _gitSeam = {
   run: _runGitImpl
 };
 async function _runGitImpl(cwd, args2, opts = {}) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     let proc;
     try {
       proc = (0, import_child_process3.spawn)("git", args2, { cwd, env: process.env });
     } catch {
-      resolve12(null);
+      resolve14(null);
       return;
     }
     let stdout = "";
@@ -13155,13 +13155,13 @@ async function _runGitImpl(cwd, args2, opts = {}) {
     proc.stderr?.on("data", (c2) => {
       stderr += c2.toString();
     });
-    proc.on("error", () => resolve12(null));
+    proc.on("error", () => resolve14(null));
     proc.on("close", (code) => {
       if (code === 0 || opts.allowNonZeroExit) {
-        resolve12(stdout);
+        resolve14(stdout);
       } else {
         log.trace("fileWatcher", `git ${args2.join(" ")} exited ${code} stderr=${stderr.slice(0, 200)}`);
-        resolve12(null);
+        resolve14(null);
       }
     });
   });
@@ -13247,7 +13247,7 @@ var ChunkEmitter = class {
     if (this.pairingInvalid) {
       return Promise.resolve({ dead: true });
     }
-    return new Promise((resolve12) => {
+    return new Promise((resolve14) => {
       let refreshedOnce = false;
       const attempt = (attemptsLeft) => {
         _transport3.post(this.url, this.headers, payload).then(({ statusCode, body: resBody }) => {
@@ -13255,13 +13255,13 @@ var ChunkEmitter = class {
           if (statusCode === 410 || statusCode === 404 && /SESSION_NOT_FOUND|SESSION_GONE/.test(resBody)) {
             process.stderr.write("[codeam] session was deleted/disconnected \u2014 stopping output stream.\n");
             log.info("chunkEmitter", `dead status=${statusCode} took=${tookMs}ms`);
-            resolve12({ dead: true });
+            resolve14({ dead: true });
             return;
           }
           if (statusCode === 401 || statusCode === 403) {
             if (refreshedOnce) {
               this.markPairingInvalid(statusCode, tookMs);
-              resolve12({ dead: true });
+              resolve14({ dead: true });
               return;
             }
             log.warn("chunkEmitter", `auth ${statusCode} took=${tookMs}ms \u2014 attempting silent refresh`);
@@ -13277,10 +13277,10 @@ var ChunkEmitter = class {
               }
               if (refresh.kind === "gone") {
                 this.markPairingInvalid(statusCode, tookMs);
-                resolve12({ dead: true });
+                resolve14({ dead: true });
                 return;
               }
-              resolve12({ dead: false });
+              resolve14({ dead: false });
             })();
             return;
           }
@@ -13291,7 +13291,7 @@ var ChunkEmitter = class {
           } else {
             log.info("chunkEmitter", `ok status=${statusCode} took=${tookMs}ms`);
           }
-          resolve12({ dead: false });
+          resolve14({ dead: false });
         }).catch((err) => {
           log.warn(
             "chunkEmitter",
@@ -13302,7 +13302,7 @@ var ChunkEmitter = class {
             const delay = 200 * (maxRetries - attemptsLeft + 1);
             setTimeout(() => attempt(attemptsLeft - 1), delay);
           } else {
-            resolve12({ dead: false });
+            resolve14({ dead: false });
           }
         });
       };
@@ -13325,7 +13325,7 @@ var _transport3 = {
   post: _post2
 };
 function _post2(url2, headers, payload) {
-  return new Promise((resolve12, reject) => {
+  return new Promise((resolve14, reject) => {
     let settled = false;
     const u2 = new URL(url2);
     const transport = u2.protocol === "https:" ? https4 : http4;
@@ -13349,7 +13349,7 @@ function _post2(url2, headers, payload) {
         res.on("end", () => {
           if (settled) return;
           settled = true;
-          resolve12({ statusCode: res.statusCode ?? 0, body: resData });
+          resolve14({ statusCode: res.statusCode ?? 0, body: resData });
         });
       }
     );
@@ -14443,12 +14443,12 @@ async function applyFileReview(workingDir, filePath, action) {
   return { ok: true, action, filePath, repoRoot };
 }
 function runGit2(cwd, args2) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     let proc;
     try {
       proc = (0, import_child_process6.spawn)("git", args2, { cwd, env: process.env });
     } catch (err) {
-      resolve12({ ok: false, code: -1, stdout: "", stderr: err.message });
+      resolve14({ ok: false, code: -1, stdout: "", stderr: err.message });
       return;
     }
     let stdout = "";
@@ -14461,11 +14461,11 @@ function runGit2(cwd, args2) {
     });
     proc.on(
       "error",
-      (err) => resolve12({ ok: false, code: -1, stdout, stderr: stderr + err.message })
+      (err) => resolve14({ ok: false, code: -1, stdout, stderr: stderr + err.message })
     );
     proc.on(
       "close",
-      (code) => resolve12({ ok: code === 0, code: code ?? -1, stdout, stderr })
+      (code) => resolve14({ ok: code === 0, code: code ?? -1, stdout, stderr })
     );
   });
 }
@@ -16804,13 +16804,13 @@ var UnixPtyStrategy = class {
     this.proc = null;
     if (proc) {
       proc.removeAllListeners("exit");
-      const exited = new Promise((resolve12) => {
-        if (proc.exitCode !== null || proc.signalCode !== null) return resolve12();
-        proc.once("exit", () => resolve12());
+      const exited = new Promise((resolve14) => {
+        if (proc.exitCode !== null || proc.signalCode !== null) return resolve14();
+        proc.once("exit", () => resolve14());
       });
       proc.kill("SIGTERM");
-      const timer = new Promise((resolve12) => {
-        const t2 = setTimeout(() => resolve12("timeout"), timeoutMs);
+      const timer = new Promise((resolve14) => {
+        const t2 = setTimeout(() => resolve14("timeout"), timeoutMs);
         void exited.then(() => clearTimeout(t2));
       });
       if (await Promise.race([exited, timer]) === "timeout") {
@@ -17237,10 +17237,10 @@ function buildForPlatform(platform3) {
 var import_node_crypto5 = require("crypto");
 
 // src/agents/claude/resolver.ts
-function buildClaudeLaunch(extraArgs = [], os70 = createOsStrategy()) {
-  const found = os70.findInPath("claude") ?? os70.findInPath("claude-code");
+function buildClaudeLaunch(extraArgs = [], os72 = createOsStrategy()) {
+  const found = os72.findInPath("claude") ?? os72.findInPath("claude-code");
   if (!found) return null;
-  return os70.buildLaunch(found, extraArgs);
+  return os72.buildLaunch(found, extraArgs);
 }
 
 // src/agents/claude/installer.ts
@@ -17267,12 +17267,12 @@ function isAvailable() {
 }
 function augmentPath() {
   const dirs = probeInstallDirs();
-  const sep7 = path15.delimiter;
+  const sep8 = path15.delimiter;
   const current2 = process.env.PATH ?? "";
-  const existing = new Set(current2.split(sep7).filter(Boolean));
+  const existing = new Set(current2.split(sep8).filter(Boolean));
   const additions = dirs.filter((d3) => !existing.has(d3));
   if (additions.length === 0) return;
-  process.env.PATH = additions.join(sep7) + sep7 + current2;
+  process.env.PATH = additions.join(sep8) + sep8 + current2;
 }
 function runInstaller() {
   const isWindows = process.platform === "win32";
@@ -17284,15 +17284,15 @@ function runInstaller() {
     "-Command",
     "irm https://claude.ai/install.ps1 | iex"
   ] : ["-c", "curl -fsSL https://claude.ai/install.sh | bash"];
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     const proc = (0, import_child_process9.spawn)(cmd, args2, { stdio: "inherit" });
     proc.on("error", (err) => {
       console.error(`
   \u2717 Installer failed to launch: ${err.message}`);
-      resolve12(false);
+      resolve14(false);
     });
     proc.on("exit", (code) => {
-      resolve12(code === 0);
+      resolve14(code === 0);
     });
   });
 }
@@ -17427,7 +17427,7 @@ function extractSetupTokenFromOutput(output) {
   return m ? m[0] : null;
 }
 function captureClaudeSetupToken() {
-  return new Promise((resolve12, reject) => {
+  return new Promise((resolve14, reject) => {
     const child = (0, import_node_child_process2.spawn)("claude", ["setup-token"], {
       stdio: ["inherit", "pipe", "inherit"]
     });
@@ -17441,7 +17441,7 @@ function captureClaudeSetupToken() {
     child.on("exit", (code) => {
       const token = extractSetupTokenFromOutput(out2);
       if (token) {
-        resolve12({ method: "setup_token", credential: token, source: "setup-token" });
+        resolve14({ method: "setup_token", credential: token, source: "setup-token" });
         return;
       }
       reject(
@@ -17527,17 +17527,17 @@ function parseUsageOutput(raw) {
   return { percent, resetAt };
 }
 async function fetchClaudeQuota() {
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     const claudeCmd = findInPath("claude") ? "claude" : "claude-code";
     if (!claudeCmd) {
-      resolve12(null);
+      resolve14(null);
       return;
     }
     const helperPath = path17.join(os11.tmpdir(), "codeam-quota-helper.py");
     fs13.writeFileSync(helperPath, HELPER_SCRIPT, { mode: 420 });
     const python = findInPath("python3") ?? findInPath("python");
     if (!python) {
-      resolve12(null);
+      resolve14(null);
       return;
     }
     const proc = (0, import_child_process10.spawn)(python, [helperPath, claudeCmd, "--tools", ""], {
@@ -17564,13 +17564,13 @@ async function fetchClaudeQuota() {
           fs13.unlinkSync(helperPath);
         } catch {
         }
-        resolve12(result);
+        resolve14(result);
       }, 5e3);
     }, 8e3);
     setTimeout(() => {
       if (!resolved) {
         resolved = true;
-        resolve12(null);
+        resolve14(null);
       }
       try {
         proc.kill();
@@ -17609,12 +17609,12 @@ function killActiveSpawnAndCaptureChildren() {
 }
 async function spawnAndCapture(cmd, args2, opts = {}) {
   const timeoutMs = opts.timeoutMs ?? 6e4;
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     let settled = false;
     const settle = (value) => {
       if (settled) return;
       settled = true;
-      resolve12(value);
+      resolve14(value);
     };
     let child;
     try {
@@ -18066,8 +18066,8 @@ var ClaudeRuntimeStrategy = class {
   meta = getAgent("claude");
   mode = "interactive";
   os;
-  constructor(os70) {
-    this.os = os70;
+  constructor(os72) {
+    this.os = os72;
   }
   /**
    * Claude Code's react-ink TUI enables bracketed-paste mode at
@@ -19065,7 +19065,7 @@ function newestRolloutIdSince(sessionsRoot, resolvedCwd, floorMs) {
   return bestId;
 }
 function sleep2(ms) {
-  return new Promise((resolve12) => setTimeout(resolve12, ms));
+  return new Promise((resolve14) => setTimeout(resolve14, ms));
 }
 function getCurrentUsage2(historyDir) {
   if (!import_node_fs4.default.existsSync(historyDir)) return null;
@@ -19167,8 +19167,8 @@ function codexCredentialLocator() {
 function codexLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os70 = createOsStrategy();
-      return os70.findInPath("codex") !== null;
+      const os72 = createOsStrategy();
+      return os72.findInPath("codex") !== null;
     },
     launch() {
       return (0, import_node_child_process3.spawn)("codex", ["login"], { stdio: "inherit" });
@@ -19191,8 +19191,8 @@ var CodexRuntimeStrategy = class {
   meta = getAgent("codex");
   mode = "interactive";
   os;
-  constructor(os70) {
-    this.os = os70;
+  constructor(os72) {
+    this.os = os72;
   }
   async prepareLaunch() {
     let binary = this.os.findInPath("codex");
@@ -19303,16 +19303,16 @@ var CodexRuntimeStrategy = class {
     });
   }
 };
-function resolveNpm(os70) {
-  return os70.id === "win32" ? "npm.cmd" : "npm";
+function resolveNpm(os72) {
+  return os72.id === "win32" ? "npm.cmd" : "npm";
 }
-async function installCodexViaNpm(os70) {
-  return new Promise((resolve12, reject) => {
-    const proc = (0, import_node_child_process4.spawn)(resolveNpm(os70), ["install", "-g", "@openai/codex"], {
+async function installCodexViaNpm(os72) {
+  return new Promise((resolve14, reject) => {
+    const proc = (0, import_node_child_process4.spawn)(resolveNpm(os72), ["install", "-g", "@openai/codex"], {
       stdio: "inherit"
     });
     proc.on("close", (code) => {
-      if (code === 0) resolve12();
+      if (code === 0) resolve14();
       else reject(new Error(`npm install -g @openai/codex exited ${code}`));
     });
     proc.on("error", (err) => {
@@ -19325,16 +19325,16 @@ async function installCodexViaNpm(os70) {
     });
   });
 }
-function augmentNpmGlobalBin(os70) {
+function augmentNpmGlobalBin(os72) {
   try {
-    const result = (0, import_node_child_process4.spawnSync)(resolveNpm(os70), ["prefix", "-g"], {
+    const result = (0, import_node_child_process4.spawnSync)(resolveNpm(os72), ["prefix", "-g"], {
       stdio: ["ignore", "pipe", "ignore"]
     });
     if (result.status !== 0) return;
     const prefix = result.stdout.toString().trim();
     if (!prefix) return;
-    const binDir = os70.id === "win32" ? prefix : path26.join(prefix, "bin");
-    os70.augmentPath([binDir]);
+    const binDir = os72.id === "win32" ? prefix : path26.join(prefix, "bin");
+    os72.augmentPath([binDir]);
   } catch {
   }
 }
@@ -19432,7 +19432,7 @@ var defaultOsRunner = {
     }
   },
   run(cmd, args2, opts = {}) {
-    return new Promise((resolve12) => {
+    return new Promise((resolve14) => {
       const spawnEnv = opts.env ?? process.env;
       const child = (0, import_node_child_process5.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"], env: spawnEnv });
       let stderrBuf = "";
@@ -19441,7 +19441,7 @@ var defaultOsRunner = {
       const done = (code) => {
         if (settled) return;
         settled = true;
-        resolve12({ code, stderr: stderrBuf, stdout: stdoutBuf });
+        resolve14({ code, stderr: stderrBuf, stdout: stdoutBuf });
       };
       child.stdout?.on("data", (b) => {
         const chunk = b.toString();
@@ -19528,10 +19528,10 @@ function manualInstallHint(runner, tools) {
   const argv = osPackageInstallArgv(detectPackageManager(runner), [...tools]);
   return argv ? `\`sudo ${argv.join(" ")}\`` : `your package manager (e.g. \`${pkgs}\`)`;
 }
-function writeUnzipShim(os70, runner) {
+function writeUnzipShim(os72, runner) {
   const python = ["python3", "python"].find((p2) => runner.which(p2));
   if (!python) return null;
-  const dir = os70.scratchPath("codeam-cr-prereq");
+  const dir = os72.scratchPath("codeam-cr-prereq");
   const shim = path28.join(dir, "unzip");
   const script = `#!/bin/sh
 set -e
@@ -19553,9 +19553,9 @@ exec ${python} -m zipfile -e "$archive" "$dest"
   (0, import_node_fs6.chmodSync)(shim, 448);
   return dir;
 }
-async function ensureInstallPrerequisites(os70, deps = {}) {
+async function ensureInstallPrerequisites(os72, deps = {}) {
   const runner = deps.runner ?? defaultOsRunner;
-  const missing = REQUIRED_TOOLS.filter((t2) => os70.findInPath(t2) === null);
+  const missing = REQUIRED_TOOLS.filter((t2) => os72.findInPath(t2) === null);
   if (missing.length === 0) return { ok: true, extraPath: [] };
   log.info(
     "coderabbit",
@@ -19574,10 +19574,10 @@ async function ensureInstallPrerequisites(os70, deps = {}) {
       );
     }
   }
-  const stillMissing = REQUIRED_TOOLS.filter((t2) => os70.findInPath(t2) === null);
+  const stillMissing = REQUIRED_TOOLS.filter((t2) => os72.findInPath(t2) === null);
   if (stillMissing.length === 0) return { ok: true, extraPath: [] };
   if (stillMissing.length === 1 && stillMissing[0] === "unzip") {
-    const shimDir = writeUnzipShim(os70, runner);
+    const shimDir = writeUnzipShim(os72, runner);
     if (shimDir) {
       log.info("coderabbit", "unzip is unavailable \u2014 using a scoped python zipfile shim");
       return { ok: true, extraPath: [shimDir] };
@@ -19590,7 +19590,7 @@ async function ensureInstallPrerequisites(os70, deps = {}) {
   };
 }
 function defaultRunInstallScript(env) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     const proc = (0, import_node_child_process6.spawn)(
       "sh",
       ["-c", `curl -fsSL --connect-timeout 15 --max-time 120 ${INSTALL_URL} | sh`],
@@ -19602,7 +19602,7 @@ function defaultRunInstallScript(env) {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
-      resolve12({ code, output });
+      resolve14({ code, output });
     };
     const onData = (b) => {
       const chunk = b.toString();
@@ -19640,15 +19640,15 @@ function summarizeInstallFailure(output) {
   }
   return lines.length > 0 ? lines[lines.length - 1] : null;
 }
-async function ensureCoderabbitInstalled(os70, deps = {}) {
-  if (os70.findInPath("coderabbit")) return { ok: true };
-  if (os70.id === "win32") {
+async function ensureCoderabbitInstalled(os72, deps = {}) {
+  if (os72.findInPath("coderabbit")) return { ok: true };
+  if (os72.id === "win32") {
     return {
       ok: false,
       error: "CodeRabbit on Windows requires WSL. Install the CLI inside your WSL distribution (curl -fsSL https://cli.coderabbit.ai/install.sh | sh), then try again."
     };
   }
-  const prereq = await ensureInstallPrerequisites(os70, deps);
+  const prereq = await ensureInstallPrerequisites(os72, deps);
   if (!prereq.ok) return { ok: false, error: prereq.error };
   const env = { ...process.env };
   if (prereq.extraPath.length > 0) {
@@ -19657,8 +19657,8 @@ async function ensureCoderabbitInstalled(os70, deps = {}) {
   log.info("coderabbit", "CodeRabbit CLI not found \u2014 installing via the official script");
   const run3 = deps.runInstallScript ?? defaultRunInstallScript;
   const { code, output } = await run3(env);
-  os70.augmentPath([`${os70.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
-  const binary = os70.findInPath("coderabbit");
+  os72.augmentPath([`${os72.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
+  const binary = os72.findInPath("coderabbit");
   const detail = summarizeInstallFailure(output);
   if (binary !== null) {
     if (code === 0) return { ok: true };
@@ -19712,10 +19712,10 @@ function coderabbitCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function coderabbitLoginLauncher(os70) {
+function coderabbitLoginLauncher(os72) {
   return {
     async ensureInstalled() {
-      const result = await ensureCoderabbitInstalled(os70);
+      const result = await ensureCoderabbitInstalled(os72);
       if (!result.ok && result.error) console.error(`
   \u2717 ${result.error}
 `);
@@ -19775,8 +19775,8 @@ function pickLine(obj) {
 function toHunk(raw, groupSeverity) {
   if (!raw || typeof raw !== "object") return null;
   const o = raw;
-  const path109 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
-  if (!path109) return null;
+  const path112 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
+  if (!path112) return null;
   const message = asString(
     pick(o, [
       "comment",
@@ -19793,7 +19793,7 @@ function toHunk(raw, groupSeverity) {
   const severity = normSeverity(pick(o, ["severity", "level", "priority", "impact"])) ?? normSeverity(groupSeverity);
   const locObj = pick(o, ["location"]) ?? o;
   return {
-    path: path109.trim(),
+    path: path112.trim(),
     line: pickLine(o) ?? pickLine(locObj),
     severity,
     message: (title && message ? `${title}: ${message}` : title || message).trim() || "(no message)"
@@ -19876,10 +19876,10 @@ function parsePlain(stdout) {
   for (const line of stdout.split(/\r?\n/)) {
     const m = line.match(HUNK_LINE_RE);
     if (!m) continue;
-    const [, path109, lineNo, sevToken, message] = m;
-    if (!path109 || !lineNo || !message) continue;
+    const [, path112, lineNo, sevToken, message] = m;
+    if (!path112 || !lineNo || !message) continue;
     hunks.push({
-      path: path109.trim(),
+      path: path112.trim(),
       line: Number(lineNo),
       severity: sevToken ? SEVERITY_MAP[sevToken.toLowerCase()] : void 0,
       message: message.trim().replace(/^[*-]\s+/, "")
@@ -19939,8 +19939,8 @@ var CoderabbitRuntimeStrategy = class {
   meta = getAgent("coderabbit");
   mode = "batch";
   os;
-  constructor(os70) {
-    this.os = os70;
+  constructor(os72) {
+    this.os = os72;
   }
   getDefaultArgs() {
     return ["review", "--agent"];
@@ -19976,7 +19976,7 @@ var CoderabbitRuntimeStrategy = class {
   }
   async runOneShot(input) {
     const launch = await this.prepareInvocation(input);
-    return new Promise((resolve12, reject) => {
+    return new Promise((resolve14, reject) => {
       const stdoutBuf = [];
       const stderrBuf = [];
       const proc = (0, import_node_child_process8.spawn)(launch.cmd, launch.args, {
@@ -19988,7 +19988,7 @@ var CoderabbitRuntimeStrategy = class {
         if (settled) return;
         settled = true;
         clearTimeout(timer);
-        resolve12(out2);
+        resolve14(out2);
       };
       const timer = setTimeout(() => {
         if (settled) return;
@@ -20211,10 +20211,10 @@ function cursorCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function cursorLoginLauncher(os70) {
+function cursorLoginLauncher(os72) {
   return {
     async ensureInstalled() {
-      if (os70.findInPath("cursor-agent")) return true;
+      if (os72.findInPath("cursor-agent")) return true;
       console.error(
         "\n  \u2717 cursor-agent binary not on PATH.\n    Install Cursor (https://cursor.com/) and ensure the CLI\n    plugin is enabled, then re-run `codeam link cursor`.\n"
       );
@@ -20278,8 +20278,8 @@ var CursorRuntimeStrategy = class {
   meta = getAgent("cursor");
   mode = "interactive";
   os;
-  constructor(os70) {
-    this.os = os70;
+  constructor(os72) {
+    this.os = os72;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("cursor-agent");
@@ -20497,10 +20497,10 @@ function aiderCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function aiderLoginLauncher(os70) {
+function aiderLoginLauncher(os72) {
   return {
     async ensureInstalled() {
-      if (os70.findInPath("aider")) return true;
+      if (os72.findInPath("aider")) return true;
       console.error(
         "\n  \u2717 aider binary not on PATH.\n    Install Aider:\n      pip install aider-chat\n    then re-run `codeam link aider`.\n"
       );
@@ -20510,7 +20510,7 @@ function aiderLoginLauncher(os70) {
       console.error(
         "\n  Aider has no interactive login flow.\n    Set ANTHROPIC_API_KEY or OPENAI_API_KEY in your shell,\n    or re-run `codeam link aider --api-key=<your-key>`.\n"
       );
-      return (0, import_node_child_process11.spawn)(os70.id === "win32" ? "cmd.exe" : "sh", os70.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
+      return (0, import_node_child_process11.spawn)(os72.id === "win32" ? "cmd.exe" : "sh", os72.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
         stdio: "ignore"
       });
     }
@@ -20599,16 +20599,16 @@ function defaultSdkDir() {
   return resolveSdkDirViaRequire();
 }
 function resolveClaudeNativeBinary(deps = {}) {
-  const existsSync33 = deps.existsSync ?? import_fs.default.existsSync;
+  const existsSync35 = deps.existsSync ?? import_fs.default.existsSync;
   const platformKey = deps.platformKey ?? currentPlatformKey();
   const sdkDir = deps.sdkDir !== void 0 ? deps.sdkDir : defaultSdkDir();
   if (!sdkDir) return null;
   const scopeDir = import_path4.default.dirname(sdkDir);
   const binName = platformKey.startsWith("win32-") ? "claude.exe" : "claude";
   const candidate = import_path4.default.join(scopeDir, `claude-agent-sdk-${platformKey}`, binName);
-  return existsSync33(candidate) ? candidate : null;
+  return existsSync35(candidate) ? candidate : null;
 }
-var realSleep = (ms) => new Promise((resolve12) => setTimeout(resolve12, ms));
+var realSleep = (ms) => new Promise((resolve14) => setTimeout(resolve14, ms));
 async function waitForClaudeNativeBinary(opts = {}) {
   const timeoutMs = opts.timeoutMs ?? 18e4;
   const pollMs = opts.pollMs ?? 500;
@@ -20688,18 +20688,18 @@ function augmentUserLocalBinPaths(deps = {}) {
   env.PATH = [...additions, ...parts].join(p2.delimiter);
 }
 function resolveCursorAgentBinary(deps = {}) {
-  const existsSync33 = deps.existsSync ?? import_fs.default.existsSync;
+  const existsSync35 = deps.existsSync ?? import_fs.default.existsSync;
   const platform3 = deps.platform ?? process.platform;
   const env = deps.env ?? process.env;
   if (platform3 === "win32") {
     const localAppData = env.LOCALAPPDATA;
     if (!localAppData) return null;
     const exe = import_path4.default.win32.join(localAppData, "cursor-agent", "cursor-agent.exe");
-    return existsSync33(exe) ? exe : null;
+    return existsSync35(exe) ? exe : null;
   }
   const home = deps.homedir ?? import_os4.default.homedir();
   const unix = import_path4.default.posix.join(home, ".local", "bin", "cursor-agent");
-  return existsSync33(unix) ? unix : null;
+  return existsSync35(unix) ? unix : null;
 }
 async function waitForCursorAgent(opts = {}) {
   const timeoutMs = opts.timeoutMs ?? 18e4;
@@ -20720,7 +20720,7 @@ var PERMANENT_ADAPTER_STARTUP_RE = /IneligibleTierError|UNSUPPORTED_CLIENT|no lo
 function probeAdapterModuleGraph(command2, args2, opts = {}) {
   const livenessMs = opts.livenessMs ?? 400;
   const spawnFn = opts.spawnFn ?? import_child_process13.spawn;
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     let settled = false;
     let stderr = "";
     let timer;
@@ -20733,12 +20733,12 @@ function probeAdapterModuleGraph(command2, args2, opts = {}) {
         child?.kill("SIGKILL");
       } catch {
       }
-      resolve12(r);
+      resolve14(r);
     };
     try {
       child = spawnFn(command2, [...args2], { stdio: ["pipe", "ignore", "pipe"] });
     } catch {
-      resolve12("ok");
+      resolve14("ok");
       return;
     }
     child.stderr?.on("data", (d3) => {
@@ -20785,8 +20785,8 @@ var AiderRuntimeStrategy = class {
   meta = getAgent("aider");
   mode = "interactive";
   os;
-  constructor(os70) {
-    this.os = os70;
+  constructor(os72) {
+    this.os = os72;
   }
   async prepareLaunch() {
     augmentUserLocalBinPaths();
@@ -20919,8 +20919,8 @@ function geminiCredentialLocator() {
 function geminiLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os70 = createOsStrategy();
-      return os70.findInPath("gemini") !== null;
+      const os72 = createOsStrategy();
+      return os72.findInPath("gemini") !== null;
     },
     launch() {
       return (0, import_node_child_process12.spawn)("gemini", ["auth", "login"], { stdio: "inherit" });
@@ -21110,8 +21110,8 @@ var GeminiRuntimeStrategy = class {
   meta = getAgent("gemini");
   mode = "interactive";
   os;
-  constructor(os70) {
-    this.os = os70;
+  constructor(os72) {
+    this.os = os72;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("gemini");
@@ -21327,7 +21327,7 @@ function newestSessionSince(bucket, floorMs) {
   return bestId;
 }
 function sleep3(ms) {
-  return new Promise((resolve12) => setTimeout(resolve12, ms));
+  return new Promise((resolve14) => setTimeout(resolve14, ms));
 }
 function joinTextParts(parts) {
   if (!Array.isArray(parts)) return "";
@@ -21404,8 +21404,8 @@ var KimiRuntimeStrategy = class {
   meta = getAgent("kimi");
   mode = "interactive";
   os;
-  constructor(os70) {
-    this.os = os70;
+  constructor(os72) {
+    this.os = os72;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("kimi");
@@ -21549,8 +21549,8 @@ var OpencodeRuntimeStrategy = class {
   meta = getAgent("opencode");
   mode = "interactive";
   os;
-  constructor(os70) {
-    this.os = os70;
+  constructor(os72) {
+    this.os = os72;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("opencode");
@@ -21636,20 +21636,20 @@ var OpencodeRuntimeStrategy = class {
 
 // src/agents/registry.ts
 var runtimeBuilders = {
-  claude: (os70) => new ClaudeRuntimeStrategy(os70),
-  codex: (os70) => new CodexRuntimeStrategy(os70),
-  coderabbit: (os70) => new CoderabbitRuntimeStrategy(os70),
-  cursor: (os70) => new CursorRuntimeStrategy(os70),
-  aider: (os70) => new AiderRuntimeStrategy(os70),
-  gemini: (os70) => new GeminiRuntimeStrategy(os70),
-  kimi: (os70) => new KimiRuntimeStrategy(os70),
-  opencode: (os70) => new OpencodeRuntimeStrategy(os70)
+  claude: (os72) => new ClaudeRuntimeStrategy(os72),
+  codex: (os72) => new CodexRuntimeStrategy(os72),
+  coderabbit: (os72) => new CoderabbitRuntimeStrategy(os72),
+  cursor: (os72) => new CursorRuntimeStrategy(os72),
+  aider: (os72) => new AiderRuntimeStrategy(os72),
+  gemini: (os72) => new GeminiRuntimeStrategy(os72),
+  kimi: (os72) => new KimiRuntimeStrategy(os72),
+  opencode: (os72) => new OpencodeRuntimeStrategy(os72)
 };
 var deployBuilders = {
   claude: () => new ClaudeDeployStrategy(),
   codex: () => new CodexDeployStrategy()
 };
-function createAgentStrategy(agent, os70 = createOsStrategy()) {
+function createAgentStrategy(agent, os72 = createOsStrategy()) {
   if (!AGENT_REGISTRY[agent]?.enabled) {
     throw new Error(
       `Agent "${agent}" is not supported in this codeam-cli version. Upgrade with 'npm i -g codeam-cli@latest'.`
@@ -21659,10 +21659,10 @@ function createAgentStrategy(agent, os70 = createOsStrategy()) {
   if (!build) {
     throw new Error(`No runtime strategy registered for agent "${agent}"`);
   }
-  return build(os70);
+  return build(os72);
 }
-function createInteractiveAgentStrategy(agent, os70 = createOsStrategy()) {
-  const s = createAgentStrategy(agent, os70);
+function createInteractiveAgentStrategy(agent, os72 = createOsStrategy()) {
+  const s = createAgentStrategy(agent, os72);
   if (s.mode !== "interactive") {
     throw new Error(
       `Agent "${agent}" is a batch agent; use createAgentStrategy + .runOneShot for one-shot reviews.`
@@ -21778,7 +21778,7 @@ async function link(args2 = []) {
   waitSpin.start(waitMsg());
   const countdown = setInterval(() => waitSpin.message(waitMsg()), 1e3);
   countdown.unref?.();
-  const paired = await new Promise((resolve12, reject) => {
+  const paired = await new Promise((resolve14, reject) => {
     let stopPoll = null;
     const sigint = () => {
       clearInterval(countdown);
@@ -21791,7 +21791,7 @@ async function link(args2 = []) {
         process.removeListener("SIGINT", sigint);
         clearInterval(countdown);
         waitSpin.stop("Paired");
-        resolve12(info);
+        resolve14(info);
       },
       () => {
         clearInterval(countdown);
@@ -21949,14 +21949,14 @@ async function captureFreshCredentials(ctx) {
     }
   };
   try {
-    const token = await new Promise((resolve12, reject) => {
+    const token = await new Promise((resolve14, reject) => {
       let settled = false;
       const tryExtract = async () => {
         if (settled) return;
         const t2 = await ctx.locator.extract();
         if (t2 && !settled) {
           settled = true;
-          resolve12(t2);
+          resolve14(t2);
         }
       };
       watcher.on("add", () => void tryExtract());
@@ -22200,7 +22200,7 @@ function deliverPendingCoderabbitCallback(callbackUrl) {
 function runCoderabbitOAuthLogin(deps) {
   const timeoutMs = deps.timeoutMs ?? 18e4;
   const spawnProc = deps.spawn ?? spawnCoderabbitLoginProc;
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     let settled = false;
     let stdout = "";
     let last = null;
@@ -22213,13 +22213,13 @@ function runCoderabbitOAuthLogin(deps) {
         child.kill("SIGKILL");
       } catch {
       }
-      resolve12(r);
+      resolve14(r);
     };
     let child;
     try {
       child = spawnProc("coderabbit", ["auth", "login", "--agent"]);
     } catch (err) {
-      resolve12({ ok: false, error: err instanceof Error ? err.message : "spawn failed" });
+      resolve14({ ok: false, error: err instanceof Error ? err.message : "spawn failed" });
       return;
     }
     const timer = setTimeout(
@@ -22376,8 +22376,8 @@ function collectChangedFiles(cwd) {
   }
   return [...byPath.values()];
 }
-function restoreCoderabbitOauthBlob(os70, value) {
-  const dir = path40.join(os70.homeDir(), ".coderabbit");
+function restoreCoderabbitOauthBlob(os72, value) {
+  const dir = path40.join(os72.homeDir(), ".coderabbit");
   (0, import_node_fs7.mkdirSync)(dir, { recursive: true });
   let file = "auth.json";
   let contents = value.trim();
@@ -22397,26 +22397,26 @@ function installFailureMessage(result) {
   return result.error ?? "CodeRabbit CLI could not be installed";
 }
 async function configureCoderabbit(input, deps = {}) {
-  const os70 = deps.os ?? createOsStrategy();
+  const os72 = deps.os ?? createOsStrategy();
   const ensureInstalled = deps.ensureInstalled ?? ensureCoderabbitInstalled;
   const isLoggedIn = deps.isLoggedIn ?? defaultIsLoggedIn;
   const runOAuth = deps.runOAuthLogin ?? runCoderabbitOAuthLogin;
   const snapshot = deps.snapshotDir ?? (() => snapshotCredentialDir());
   const capture2 = deps.captureCredential ?? ((b) => diffCapturedCredential(b));
   const loginWithApiKey = deps.loginWithApiKey ?? defaultLoginWithApiKey;
-  const home = os70.homeDir();
-  os70.augmentPath(
-    os70.id === "win32" ? [
+  const home = os72.homeDir();
+  os72.augmentPath(
+    os72.id === "win32" ? [
       path40.join(home, ".local", "bin"),
       path40.join(process.env.APPDATA ?? path40.join(home, "AppData", "Roaming"), "npm"),
       path40.join(home, "scoop", "shims")
     ] : [path40.join(home, ".local", "bin"), "/opt/homebrew/bin", "/usr/local/bin"]
   );
-  const installed2 = os70.findInPath("coderabbit") !== null;
+  const installed2 = os72.findInPath("coderabbit") !== null;
   const base = () => ({
     action: input.action,
     supported: true,
-    installed: os70.findInPath("coderabbit") !== null,
+    installed: os72.findInPath("coderabbit") !== null,
     loggedIn: false
   });
   if (input.action === "status") {
@@ -22430,7 +22430,7 @@ async function configureCoderabbit(input, deps = {}) {
     const key = (input.apiKey ?? "").trim();
     if (!key) return { ...res2, error: "No API key provided" };
     if (!res2.installed) {
-      const inst = await ensureInstalled(os70);
+      const inst = await ensureInstalled(os72);
       res2.installed = inst.ok;
       if (!inst.ok) return { ...res2, error: installFailureMessage(inst) };
     }
@@ -22454,7 +22454,7 @@ async function configureCoderabbit(input, deps = {}) {
     }
     if (!res2.installed) {
       deps.onEvent?.({ kind: "installing" });
-      const inst = await ensureInstalled(os70);
+      const inst = await ensureInstalled(os72);
       res2.installed = inst.ok;
       if (!inst.ok) return { ...res2, error: installFailureMessage(inst) };
     }
@@ -22471,7 +22471,7 @@ async function configureCoderabbit(input, deps = {}) {
       return { ...res2, loggedIn: true, linked: true };
     }
     try {
-      restoreCoderabbitOauthBlob(os70, cred.credential);
+      restoreCoderabbitOauthBlob(os72, cred.credential);
     } catch (err) {
       return {
         ...res2,
@@ -22495,7 +22495,7 @@ async function configureCoderabbit(input, deps = {}) {
     const res2 = base();
     if (!installed2) {
       deps.onEvent?.({ kind: "installing" });
-      const inst = await ensureInstalled(os70);
+      const inst = await ensureInstalled(os72);
       res2.installed = inst.ok;
       if (!inst.ok) return { ...res2, error: installFailureMessage(inst) };
     }
@@ -22535,7 +22535,7 @@ async function configureCoderabbit(input, deps = {}) {
   }
   const res = base();
   if (!res.installed) {
-    const inst = await ensureInstalled(os70);
+    const inst = await ensureInstalled(os72);
     res.installed = inst.ok;
     if (!inst.ok) return { ...res, error: installFailureMessage(inst) };
   }
@@ -22692,23 +22692,23 @@ async function reviewPullRequest(params, deps) {
   return report;
 }
 function defaultRunGh(args2) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     const stdout = [];
     const stderr = [];
     let proc;
     try {
       proc = (0, import_node_child_process17.spawn)("gh", args2, { stdio: ["ignore", "pipe", "pipe"] });
     } catch (err) {
-      resolve12({ code: -1, stdout: "", stderr: err instanceof Error ? err.message : String(err) });
+      resolve14({ code: -1, stdout: "", stderr: err instanceof Error ? err.message : String(err) });
       return;
     }
     proc.stdout?.on("data", (b) => stdout.push(b));
     proc.stderr?.on("data", (b) => stderr.push(b));
     proc.on("error", (err) => {
-      resolve12({ code: -1, stdout: "", stderr: err.message });
+      resolve14({ code: -1, stdout: "", stderr: err.message });
     });
     proc.on("close", (code) => {
-      resolve12({
+      resolve14({
         code: code ?? 0,
         stdout: Buffer.concat(stdout).toString("utf8"),
         stderr: Buffer.concat(stderr).toString("utf8")
@@ -23028,7 +23028,7 @@ var import_node_fs11 = __toESM(require("fs"));
 var import_node_path9 = __toESM(require("path"));
 var import_yazl = require("yazl");
 function buildZip(cwd, list, outFile) {
-  return new Promise((resolve12, reject) => {
+  return new Promise((resolve14, reject) => {
     const zip = new import_yazl.ZipFile();
     for (const f of list.files) {
       const abs = import_node_path9.default.join(cwd, f.rel);
@@ -23038,7 +23038,7 @@ function buildZip(cwd, list, outFile) {
     if (list.envExample) zip.addBuffer(Buffer.from(list.envExample), ".env.example");
     const out2 = import_node_fs11.default.createWriteStream(outFile, { mode: 384 });
     zip.outputStream.pipe(out2);
-    out2.on("close", () => resolve12(import_node_fs11.default.statSync(outFile).size));
+    out2.on("close", () => resolve14(import_node_fs11.default.statSync(outFile).size));
     out2.on("error", reject);
     zip.outputStream.on("error", reject);
     zip.end();
@@ -23230,12 +23230,12 @@ async function isExecutableBinary(p2) {
   }
 }
 function extractTgz(tgzPath, destDir) {
-  return new Promise((resolve12, reject) => {
+  return new Promise((resolve14, reject) => {
     const child = (0, import_child_process14.spawn)("tar", ["-xzf", tgzPath, "-C", destDir], { stdio: "ignore" });
     child.on("error", (err) => reject(err));
     child.on(
       "exit",
-      (code) => code === 0 ? resolve12() : reject(new Error(`tar exited with code ${code} while extracting cloudflared`))
+      (code) => code === 0 ? resolve14() : reject(new Error(`tar exited with code ${code} while extracting cloudflared`))
     );
   });
 }
@@ -23816,17 +23816,17 @@ function expoGoDeepLink(publicUrl) {
   return `exps://${new URL(publicUrl).host}`;
 }
 function isExpoManifestServed(port, host2 = "127.0.0.1") {
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     const req = http6.get(
       { host: host2, port, path: "/", headers: { "expo-platform": "ios" }, timeout: 1500 },
       (res) => {
         const ok = res.statusCode !== void 0 && res.statusCode >= 200 && res.statusCode < 300;
         res.resume();
-        resolve12(ok);
+        resolve14(ok);
       }
     );
     req.once("timeout", () => req.destroy());
-    req.once("error", () => resolve12(false));
+    req.once("error", () => resolve14(false));
   });
 }
 async function waitForExpoManifest(port, opts) {
@@ -23974,12 +23974,12 @@ function describeDetectionFailure(raw) {
 // src/services/preview/port-ready.ts
 var net = __toESM(require("net"));
 function isPortListening(port, host2 = "127.0.0.1") {
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     const socket = new net.Socket();
     const done = (result) => {
       socket.removeAllListeners();
       socket.destroy();
-      resolve12(result);
+      resolve14(result);
     };
     socket.setTimeout(1e3);
     socket.once("connect", () => done(true));
@@ -24017,14 +24017,14 @@ const { PGLiteSocketServer } = require('@electric-sql/pglite-socket');
 })().catch((e) => { console.error(String(e && e.message)); process.exit(1); });
 `;
 function isListening(port) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     const s = net2.connect({ host: "127.0.0.1", port }, () => {
       s.destroy();
-      resolve12(true);
-    }).on("error", () => resolve12(false));
+      resolve14(true);
+    }).on("error", () => resolve14(false));
     s.setTimeout(1e3, () => {
       s.destroy();
-      resolve12(false);
+      resolve14(false);
     });
   });
 }
@@ -24072,7 +24072,7 @@ function stopChild(child) {
 // src/services/preview/run-setup.ts
 var import_child_process18 = require("child_process");
 function runSetupCommand(cmd, args2, cwd, env, opts) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     const child = (0, import_child_process18.spawn)(cmd, args2, {
       cwd,
       env: { ...process.env, ...env ?? {} },
@@ -24092,20 +24092,20 @@ function runSetupCommand(cmd, args2, cwd, env, opts) {
       settled = true;
       log.info("preview", `${tag}: timed out after ${opts.timeoutMs}ms \u2014 killing`);
       killQuiet(child);
-      resolve12({ status: "timeout", code: null });
+      resolve14({ status: "timeout", code: null });
     }, opts.timeoutMs);
     child.once("exit", (code) => {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
-      if (code === 0) resolve12({ status: "ok", code: 0 });
-      else resolve12({ status: "failed", code });
+      if (code === 0) resolve14({ status: "ok", code: 0 });
+      else resolve14({ status: "failed", code });
     });
     child.once("error", () => {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
-      resolve12({ status: "failed", code: null });
+      resolve14({ status: "failed", code: null });
     });
   });
 }
@@ -24561,23 +24561,23 @@ async function awaitTunnelRegistered(candidate, hostname3, deadlineMs) {
     ac.signal.addEventListener("abort", detach, { once: true });
   };
   try {
-    return await new Promise((resolve12) => {
+    return await new Promise((resolve14) => {
       const onChunk = (chunk) => {
         const s = chunk.toString();
         if (!url2) url2 = parseCloudflaredUrl(s);
         if (TUNNEL_REGISTERED_RE.test(s)) registered = true;
         const trimmed = s.replace(/\n+$/g, "");
         if (trimmed.length > 0) log.info("preview", `cloudflared: ${trimmed}`);
-        if (url2 && registered) resolve12({ kind: "registered", url: url2 });
+        if (url2 && registered) resolve14({ kind: "registered", url: url2 });
       };
       const onExit = (code) => {
-        resolve12({ kind: "exited", sawUrl: url2 != null, code });
+        resolve14({ kind: "exited", sawUrl: url2 != null, code });
       };
       const { stdout, stderr } = candidate;
       if (stdout) scoped(() => stdout.on("data", onChunk), () => stdout.off("data", onChunk));
       if (stderr) scoped(() => stderr.on("data", onChunk), () => stderr.off("data", onChunk));
       scoped(() => candidate.on("exit", onExit), () => candidate.off("exit", onExit));
-      timer = setTimeout(() => resolve12({ kind: "timeout", sawUrl: url2 != null }), deadlineMs);
+      timer = setTimeout(() => resolve14({ kind: "timeout", sawUrl: url2 != null }), deadlineMs);
     });
   } finally {
     ac.abort();
@@ -24600,7 +24600,7 @@ function verdictFor(res) {
   }
   return { adopt: true };
 }
-var probePort = (port) => new Promise((resolve12) => {
+var probePort = (port) => new Promise((resolve14) => {
   const req = http7.get(
     { host: "127.0.0.1", port, path: "/", timeout: PROBE_TIMEOUT_MS },
     (res) => {
@@ -24611,16 +24611,16 @@ var probePort = (port) => new Promise((resolve12) => {
       });
       res.on(
         "end",
-        () => resolve12({ contentType: res.headers["content-type"], bodyStart: body })
+        () => resolve14({ contentType: res.headers["content-type"], bodyStart: body })
       );
-      res.on("error", () => resolve12(null));
+      res.on("error", () => resolve14(null));
     }
   );
   req.on("timeout", () => {
     req.destroy();
-    resolve12(null);
+    resolve14(null);
   });
-  req.on("error", () => resolve12(null));
+  req.on("error", () => resolve14(null));
 });
 async function canAdoptPort(port, probe = probePort) {
   try {
@@ -26035,18 +26035,18 @@ async function startInspectorProxy(opts) {
     clientSocket.on("error", drop2);
     clientSocket.on("close", drop2);
   });
-  await new Promise((resolve12, reject) => {
+  await new Promise((resolve14, reject) => {
     server.once("error", reject);
-    server.listen(0, "127.0.0.1", () => resolve12());
+    server.listen(0, "127.0.0.1", () => resolve14());
   });
   const port = server.address().port;
   return {
     port,
-    close: () => new Promise((resolve12) => {
+    close: () => new Promise((resolve14) => {
       for (const socket of upgraded) socket.destroy();
       upgraded.clear();
       server.closeAllConnections?.();
-      server.close(() => resolve12());
+      server.close(() => resolve14());
     })
   };
 }
@@ -27130,12 +27130,12 @@ var _spawnSeam = {
   run: _defaultSpawn
 };
 function _defaultSpawn(binaryPath, args2, opts) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     let proc;
     try {
       proc = (0, import_child_process21.spawn)(binaryPath, args2, { cwd: opts.cwd, env: opts.env });
     } catch (err) {
-      resolve12({ code: -1, stdout: "", stderr: err.message });
+      resolve14({ code: -1, stdout: "", stderr: err.message });
       return;
     }
     let stdout = "";
@@ -27146,8 +27146,8 @@ function _defaultSpawn(binaryPath, args2, opts) {
     proc.stderr?.on("data", (c2) => {
       stderr += c2.toString();
     });
-    proc.on("error", (err) => resolve12({ code: -1, stdout, stderr: err.message }));
-    proc.on("close", (code) => resolve12({ code: code ?? -1, stdout, stderr }));
+    proc.on("error", (err) => resolve14({ code: -1, stdout, stderr: err.message }));
+    proc.on("close", (code) => resolve14({ code: code ?? -1, stdout, stderr }));
   });
 }
 var _adapterSeam = {
@@ -27324,22 +27324,22 @@ var _installSpawnSeam = {
   run: _defaultInstallSpawn
 };
 function _defaultInstallSpawn(strategy) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     let proc;
     try {
       proc = (0, import_child_process22.spawn)(strategy.command, strategy.args, { env: process.env });
     } catch (err) {
-      resolve12({ ok: false, code: -1, stderr: err.message });
+      resolve14({ ok: false, code: -1, stderr: err.message });
       return;
     }
     let stderr = "";
     proc.stderr?.on("data", (c2) => {
       stderr += c2.toString();
     });
-    proc.on("error", (err) => resolve12({ ok: false, code: -1, stderr: err.message }));
+    proc.on("error", (err) => resolve14({ ok: false, code: -1, stderr: err.message }));
     proc.on(
       "close",
-      (code) => resolve12({ ok: code === 0, code: code ?? -1, stderr })
+      (code) => resolve14({ ok: code === 0, code: code ?? -1, stderr })
     );
   });
 }
@@ -27400,11 +27400,11 @@ function resolveDoltInstallStrategy(platform3) {
 }
 var DOLT_RELEASE_BASE = "https://github.com/dolthub/dolt/releases/latest/download";
 function doltPlatformTuple(platform3, arch2) {
-  const os70 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
+  const os72 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
   const a = arch2 === "x64" ? "amd64" : arch2 === "arm64" ? "arm64" : null;
   if (!a) return null;
-  if (os70 === "windows" && a !== "amd64") return null;
-  return `${os70}-${a}`;
+  if (os72 === "windows" && a !== "amd64") return null;
+  return `${os72}-${a}`;
 }
 function resolveDoltTarballStrategy(targetDir, platform3, arch2) {
   const tuple = doltPlatformTuple(platform3, arch2);
@@ -27508,14 +27508,14 @@ var _doltInstallSpawnSeam = {
 };
 var DOLT_INSTALL_TIMEOUT_MS = 12e4;
 function _defaultDoltInstallSpawn(strategy) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     let settled = false;
     let timer;
     const finish = (r) => {
       if (settled) return;
       settled = true;
       if (timer) clearTimeout(timer);
-      resolve12(r);
+      resolve14(r);
     };
     let proc;
     try {
@@ -29102,7 +29102,7 @@ var vcsAgentReviewH = async (ctx, cmd, parsed) => {
   });
   const token = ctx.pluginAuthToken;
   void (async () => {
-    const os70 = createOsStrategy();
+    const os72 = createOsStrategy();
     try {
       const report = await reviewPullRequest(
         {
@@ -29111,7 +29111,7 @@ var vcsAgentReviewH = async (ctx, cmd, parsed) => {
           baseBranch: parsed.baseBranch
         },
         {
-          runReview: (input) => new CoderabbitRuntimeStrategy(os70).runOneShot(input),
+          runReview: (input) => new CoderabbitRuntimeStrategy(os72).runOneShot(input),
           runGh: (args2) => defaultRunGh(args2),
           postReport: async (r) => {
             if (!token) return;
@@ -29256,13 +29256,13 @@ function resolveGlobalNodeModulesDir(opts) {
 var STALE_STAGING_AGE_MS = CLI_UPDATE_INSTALL_TIMEOUT_MS;
 function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
   if (!nodeModulesDir) return 0;
-  const readdirSync17 = deps?.readdirSync ?? fs63.readdirSync;
-  const statSync16 = deps?.statSync ?? fs63.statSync;
-  const rmSync11 = deps?.rmSync ?? fs63.rmSync;
+  const readdirSync18 = deps?.readdirSync ?? fs63.readdirSync;
+  const statSync17 = deps?.statSync ?? fs63.statSync;
+  const rmSync14 = deps?.rmSync ?? fs63.rmSync;
   let removed = 0;
   let entries2;
   try {
-    entries2 = readdirSync17(nodeModulesDir);
+    entries2 = readdirSync18(nodeModulesDir);
   } catch {
     return 0;
   }
@@ -29270,9 +29270,9 @@ function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
     if (!/^\.codeam-cli-/.test(name)) continue;
     const full = path72.join(nodeModulesDir, name);
     try {
-      const st3 = statSync16(full);
+      const st3 = statSync17(full);
       if (now - st3.mtimeMs < STALE_STAGING_AGE_MS) continue;
-      rmSync11(full, { recursive: true, force: true });
+      rmSync14(full, { recursive: true, force: true });
       removed++;
     } catch {
     }
@@ -29293,16 +29293,16 @@ async function runNpmInstallLatest() {
     const invocation = buildNpmInstallInvocation({ sudo: useSudo });
     const useShell = process.platform === "win32";
     const command2 = useShell && invocation.command.includes(" ") ? `"${invocation.command}"` : invocation.command;
-    const result = await new Promise((resolve12) => {
+    const result = await new Promise((resolve14) => {
       (0, import_child_process25.execFile)(
         command2,
         invocation.args,
         { timeout: CLI_UPDATE_INSTALL_TIMEOUT_MS, shell: useShell },
         (err, _stdout, stderr) => {
           if (!err) {
-            resolve12({ ok: true });
+            resolve14({ ok: true });
           } else {
-            resolve12({ ok: false, error: (stderr || err.message).slice(0, 300) });
+            resolve14({ ok: false, error: (stderr || err.message).slice(0, 300) });
           }
         }
       );
@@ -29655,8 +29655,8 @@ async function runDetectOneShot(generate, timeoutMs = PREVIEW_DETECT_TIMEOUT_MS)
   };
   const onFailedOutput = (stdout) => onStderr(`
 ${stdout}`);
-  const deadline = new Promise((resolve12) => {
-    timer = setTimeout(() => resolve12({ raw: null, timedOut: true, stderr }), timeoutMs);
+  const deadline = new Promise((resolve14) => {
+    timer = setTimeout(() => resolve14({ raw: null, timedOut: true, stderr }), timeoutMs);
     timer.unref?.();
   });
   const oneShot = generate(PREVIEW_DETECT_PROMPT, { timeoutMs, onStderr, onFailedOutput }).then(
@@ -30124,7 +30124,7 @@ function buildKeepAlive(ctx) {
   let timer = null;
   async function setIdleTimeout(minutes) {
     if (!ctx.inCodespace || !ctx.codespaceName) return;
-    await new Promise((resolve12) => {
+    await new Promise((resolve14) => {
       const proc = (0, import_child_process26.spawn)(
         "gh",
         [
@@ -30138,8 +30138,8 @@ function buildKeepAlive(ctx) {
         { stdio: "ignore", detached: true }
       );
       proc.unref();
-      proc.on("exit", () => resolve12());
-      proc.on("error", () => resolve12());
+      proc.on("exit", () => resolve14());
+      proc.on("error", () => resolve14());
     });
   }
   return {
@@ -30391,11 +30391,11 @@ function resolveTokenValue(args2) {
   }
   const fileFlag = args2.find((a) => a.startsWith("--token-file="));
   if (fileFlag) {
-    const path109 = fileFlag.slice("--token-file=".length);
+    const path112 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs64.readFileSync(path109, "utf8").trim();
-      if (content.length === 0) fail(`--token-file ${path109} is empty`);
-      rmIfExistsQuiet(path109);
+      const content = fs64.readFileSync(path112, "utf8").trim();
+      if (content.length === 0) fail(`--token-file ${path112} is empty`);
+      rmIfExistsQuiet(path112);
       return content;
     } catch (err) {
       fail(`Could not read --token-file: ${err.message}`);
@@ -31096,10 +31096,10 @@ function augmentKimiPath() {
 }
 var augmentPath2 = augmentKimiPath;
 async function runInstaller2() {
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     const proc = (0, import_node_child_process25.spawn)("sh", ["-c", `curl -fsSL ${INSTALL_URL2} | bash`], { stdio: "inherit" });
-    proc.on("close", (code) => resolve12(code === 0));
-    proc.on("error", () => resolve12(false));
+    proc.on("close", (code) => resolve14(code === 0));
+    proc.on("error", () => resolve14(false));
   });
 }
 async function ensureKimiInstalled() {
@@ -31149,10 +31149,10 @@ function augmentOpencodePath() {
 }
 var augmentPath3 = augmentOpencodePath;
 async function runInstaller3() {
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     const proc = (0, import_node_child_process26.spawn)("sh", ["-c", `curl -fsSL ${INSTALL_URL3} | bash`], { stdio: "inherit" });
-    proc.on("close", (code) => resolve12(code === 0));
-    proc.on("error", () => resolve12(false));
+    proc.on("close", (code) => resolve14(code === 0));
+    proc.on("error", () => resolve14(false));
   });
 }
 async function ensureOpencodeInstalled() {
@@ -31360,11 +31360,11 @@ async function resolveAcpAdapterWithRetry(agent, opts = {}) {
   const timeoutMs = opts.timeoutMs ?? DEFAULT_ADAPTER_RETRY_TIMEOUT_MS;
   const pollMs = opts.pollMs ?? DEFAULT_ADAPTER_RETRY_POLL_MS;
   const now = opts.now ?? Date.now;
-  const sleep5 = opts.sleep ?? ((ms) => new Promise((resolve13) => setTimeout(resolve13, ms)));
-  const resolve12 = opts.resolve ?? getAcpAdapter;
+  const sleep5 = opts.sleep ?? ((ms) => new Promise((resolve15) => setTimeout(resolve15, ms)));
+  const resolve14 = opts.resolve ?? getAcpAdapter;
   const attempt = () => {
     try {
-      return resolve12(agent);
+      return resolve14(agent);
     } catch {
       return null;
     }
@@ -31519,7 +31519,7 @@ function parseJsonl(filePath) {
   return messages;
 }
 function postWithStatus(endpoint, body, pluginAuthToken) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     const payload = JSON.stringify(body);
     const u2 = new URL(`${API_BASE7}${endpoint}`);
     const transport = u2.protocol === "https:" ? https6 : http10;
@@ -31550,17 +31550,17 @@ function postWithStatus(endpoint, body, pluginAuthToken) {
           const ra = Number(res.headers["retry-after"]);
           retryAfterMs = Number.isFinite(ra) && ra > 0 ? ra * 1e3 : 2e4;
         }
-        resolve12({ ok, status: status2, retryAfterMs });
+        resolve14({ ok, status: status2, retryAfterMs });
       }
     );
     req.on("error", (err) => {
       log.warn("history:post", `${endpoint} network error`, err);
-      resolve12({ ok: false, status: null, retryAfterMs: null });
+      resolve14({ ok: false, status: null, retryAfterMs: null });
     });
     req.on("timeout", () => {
       log.warn("history:post", `${endpoint} timeout after 15s`);
       req.destroy();
-      resolve12({ ok: false, status: null, retryAfterMs: null });
+      resolve14({ ok: false, status: null, retryAfterMs: null });
     });
     req.write(payload);
     req.end();
@@ -34134,12 +34134,12 @@ var Connection = class {
     const id = this.nextRequestId++;
     let cancel = () => {
     };
-    const responsePromise = new Promise((resolve12, reject) => {
+    const responsePromise = new Promise((resolve14, reject) => {
       const pendingResponse = {
         resolve: (response) => {
           try {
             const value = mapResponse ? mapResponse(response) : response;
-            resolve12(value);
+            resolve14(value);
           } catch (error) {
             reject(error);
           }
@@ -34217,8 +34217,8 @@ var Connection = class {
   initialize(stream, handlers2) {
     this.stream = stream;
     this.staticHandlers = handlers2;
-    this.closedPromise = new Promise((resolve12) => {
-      this.abortController.signal.addEventListener("abort", () => resolve12());
+    this.closedPromise = new Promise((resolve14) => {
+      this.abortController.signal.addEventListener("abort", () => resolve14());
     });
     void this.receive();
   }
@@ -35006,8 +35006,8 @@ var AsyncQueue = class {
     if (this.failed) {
       return Promise.reject(this.failure);
     }
-    return new Promise((resolve12, reject) => {
-      this.waiters.push({ resolve: resolve12, reject });
+    return new Promise((resolve14, reject) => {
+      this.waiters.push({ resolve: resolve14, reject });
     });
   }
 };
@@ -36699,7 +36699,7 @@ var AcpClient = class {
     this.pendingToolCalls.clear();
     try {
       const result = await Promise.race([send, idle.promise]);
-      await new Promise((resolve12) => setImmediate(resolve12));
+      await new Promise((resolve14) => setImmediate(resolve14));
       log.info(
         "acpClient",
         `prompt \u2190 ok stopReason=${result.stopReason ?? "?"} elapsedMs=${Date.now() - t0}`
@@ -36915,8 +36915,8 @@ var AcpClient = class {
     if (!this.connection || !this.sessionId) return "deferred";
     this.mcpReprovisionPending = servers;
     if (this.mcpDebounceTimer) clearTimeout(this.mcpDebounceTimer);
-    const settled = new Promise((resolve12) => {
-      this.mcpDebounceWaiters.push(resolve12);
+    const settled = new Promise((resolve14) => {
+      this.mcpDebounceWaiters.push(resolve14);
     });
     this.mcpDebounceTimer = setTimeout(() => {
       this.mcpDebounceTimer = null;
@@ -37160,15 +37160,15 @@ var AcpClient = class {
       } else {
         child.kill("SIGTERM");
       }
-      const grace = new Promise((resolve12) => {
+      const grace = new Promise((resolve14) => {
         const t2 = setTimeout(() => {
           if (process.platform !== "win32" && pid) killQuiet(-pid, "SIGKILL");
           else killQuiet(child, "SIGKILL");
-          resolve12();
+          resolve14();
         }, 2e3);
         child.once("exit", () => {
           clearTimeout(t2);
-          resolve12();
+          resolve14();
         });
       });
       await grace;
@@ -37397,7 +37397,7 @@ var os50 = __toESM(require("os"));
 function runAgentInstallScript(script, opts = {}) {
   const timeoutMs = opts.timeoutMs ?? 18e4;
   const scope = opts.logScope ?? "agent-install";
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     const home = process.env.HOME || os50.homedir();
     const child = (0, import_child_process27.spawn)("sh", ["-c", script], {
       env: { ...process.env, HOME: home },
@@ -37413,7 +37413,7 @@ function runAgentInstallScript(script, opts = {}) {
     const done = (result) => {
       if (settled) return;
       settled = true;
-      resolve12(result);
+      resolve14(result);
     };
     const timer = setTimeout(() => {
       log.warn(scope, `agent install timed out (${Math.round(timeoutMs / 1e3)}s)`);
@@ -38026,7 +38026,7 @@ var _transport4 = {
   get: _get
 };
 function _post3(url2, headers, payload) {
-  return new Promise((resolve12, reject) => {
+  return new Promise((resolve14, reject) => {
     let settled = false;
     const u2 = new URL(url2);
     const lib = u2.protocol === "https:" ? https7 : http11;
@@ -38051,7 +38051,7 @@ function _post3(url2, headers, payload) {
         res.on("end", () => {
           if (settled) return;
           settled = true;
-          resolve12({ statusCode: res.statusCode ?? 0, body });
+          resolve14({ statusCode: res.statusCode ?? 0, body });
         });
       }
     );
@@ -38068,7 +38068,7 @@ function _post3(url2, headers, payload) {
   });
 }
 function _get(url2, headers) {
-  return new Promise((resolve12, reject) => {
+  return new Promise((resolve14, reject) => {
     let settled = false;
     const u2 = new URL(url2);
     const lib = u2.protocol === "https:" ? https7 : http11;
@@ -38092,7 +38092,7 @@ function _get(url2, headers) {
         res.on("end", () => {
           if (settled) return;
           settled = true;
-          resolve12({ statusCode: res.statusCode ?? 0, body });
+          resolve14({ statusCode: res.statusCode ?? 0, body });
         });
       }
     );
@@ -39323,12 +39323,12 @@ function runGit3(cwd, args2) {
   return _runGitImpl2.run(cwd, args2);
 }
 function defaultRunGit(cwd, args2) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     let proc;
     try {
       proc = (0, import_child_process29.spawn)("git", args2, { cwd, env: process.env });
     } catch {
-      resolve12(null);
+      resolve14(null);
       return;
     }
     let stdout = "";
@@ -39339,22 +39339,22 @@ function defaultRunGit(cwd, args2) {
     proc.stderr?.on("data", (c2) => {
       stderr += c2.toString();
     });
-    proc.on("error", () => resolve12(null));
+    proc.on("error", () => resolve14(null));
     proc.on("close", (code) => {
       if (code === 0) {
-        resolve12(stdout);
+        resolve14(stdout);
       } else {
         log.trace(
           "turnFiles",
           `git ${args2.join(" ")} exited ${code} stderr=${stderr.slice(0, 200)}`
         );
-        resolve12(null);
+        resolve14(null);
       }
     });
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs94 = await import("fs/promises");
+  const fs97 = await import("fs/promises");
   const out2 = [];
   await walk2(workingDir, 0);
   return out2;
@@ -39362,7 +39362,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (depth2 > maxDepth) return;
     let entries2 = [];
     try {
-      const dirents = await fs94.readdir(dir, { withFileTypes: true });
+      const dirents = await fs97.readdir(dir, { withFileTypes: true });
       entries2 = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -39765,25 +39765,25 @@ function baselineKey(entry) {
 
 // src/agents/acp/withTimeout.ts
 function withTimeout(p2, ms) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     let settled = false;
     const timer = setTimeout(() => {
       if (settled) return;
       settled = true;
-      resolve12(void 0);
+      resolve14(void 0);
     }, ms);
     p2.then(
       (v) => {
         if (settled) return;
         settled = true;
         clearTimeout(timer);
-        resolve12(v);
+        resolve14(v);
       },
       () => {
         if (settled) return;
         settled = true;
         clearTimeout(timer);
-        resolve12(void 0);
+        resolve14(void 0);
       }
     );
   });
@@ -39952,7 +39952,7 @@ function isProcessMidTurn(pid, home) {
 var import_node_child_process28 = require("child_process");
 var fs77 = __toESM(require("fs"));
 var path88 = __toESM(require("path"));
-var defaultCommandRunner = (file, args2, cwd, timeoutMs, env) => new Promise((resolve12) => {
+var defaultCommandRunner = (file, args2, cwd, timeoutMs, env) => new Promise((resolve14) => {
   (0, import_node_child_process28.execFile)(
     file,
     args2,
@@ -39968,7 +39968,7 @@ var defaultCommandRunner = (file, args2, cwd, timeoutMs, env) => new Promise((re
         const rawCode = err.code;
         code = typeof rawCode === "number" ? rawCode : 1;
       }
-      resolve12({ code, stdout: stdout ?? "", stderr: stderr ?? "" });
+      resolve14({ code, stdout: stdout ?? "", stderr: stderr ?? "" });
     }
   );
 });
@@ -41218,11 +41218,11 @@ function previewMcpServer(bridge) {
   };
 }
 function httpCall(baseUrl, token) {
-  return async (path109, method, body, timeoutMs) => {
+  return async (path112, method, body, timeoutMs) => {
     const ac = new AbortController();
     const timer = setTimeout(() => ac.abort(), timeoutMs);
     try {
-      const res = await fetch(`${baseUrl}${path109}`, {
+      const res = await fetch(`${baseUrl}${path112}`, {
         method,
         headers: { authorization: `Bearer ${token}`, "content-type": "application/json" },
         ...method === "POST" ? { body: JSON.stringify(body ?? {}) } : {},
@@ -41350,11 +41350,11 @@ function scratchMcpServer(bridge) {
   };
 }
 function httpCall2(baseUrl, token) {
-  return async (path109, method, body, timeoutMs) => {
+  return async (path112, method, body, timeoutMs) => {
     const ac = new AbortController();
     const timer = setTimeout(() => ac.abort(), timeoutMs);
     try {
-      const res = await fetch(`${baseUrl}${path109}`, {
+      const res = await fetch(`${baseUrl}${path112}`, {
         method,
         headers: { authorization: `Bearer ${token}`, "content-type": "application/json" },
         ...method === "POST" ? { body: JSON.stringify(body ?? {}) } : {},
@@ -41610,24 +41610,24 @@ var AgentPreviewBridge = class {
    *  preview tools are then simply absent, never a failed session. */
   listen() {
     if (this.listening) return this.listening;
-    this.listening = new Promise((resolve12) => {
+    this.listening = new Promise((resolve14) => {
       const server = http12.createServer((req, res) => {
         void this.handle(req, res);
       });
       server.on("error", (err) => {
         log.warn("agent-preview", `bridge failed to listen: ${String(err)}`);
-        resolve12(null);
+        resolve14(null);
       });
       server.listen(0, "127.0.0.1", () => {
         const addr = server.address();
         if (!addr || typeof addr === "string") {
-          resolve12(null);
+          resolve14(null);
           return;
         }
         server.unref();
         this.server = server;
         this.bound = { url: `http://127.0.0.1:${addr.port}`, token: this.token };
-        resolve12(this.bound);
+        resolve14(this.bound);
       });
     });
     return this.listening;
@@ -41664,9 +41664,9 @@ var AgentPreviewBridge = class {
     }
     const inflight = this.inflight;
     let timer;
-    const pending2 = new Promise((resolve12) => {
+    const pending2 = new Promise((resolve14) => {
       timer = setTimeout(
-        () => resolve12({
+        () => resolve14({
           status: "starting",
           message: "The preview is still coming up (dependencies or a slow dev server). It keeps going in the background \u2014 call preview_status in a minute."
         }),
@@ -41869,7 +41869,7 @@ function authorized(header, token) {
   return presented.length === expected.length && (0, import_node_crypto14.timingSafeEqual)(presented, expected);
 }
 function readJson(req) {
-  return new Promise((resolve12, reject) => {
+  return new Promise((resolve14, reject) => {
     let raw = "";
     req.setEncoding("utf8");
     req.on("data", (chunk) => {
@@ -41880,10 +41880,10 @@ function readJson(req) {
       }
     });
     req.on("end", () => {
-      if (!raw) return resolve12({});
+      if (!raw) return resolve14({});
       try {
         const parsed = JSON.parse(raw);
-        resolve12(parsed && typeof parsed === "object" ? parsed : {});
+        resolve14(parsed && typeof parsed === "object" ? parsed : {});
       } catch {
         reject(new Error("invalid JSON"));
       }
@@ -43010,15 +43010,15 @@ async function prewarmNewMcpEntries(manifest, previousIds) {
   );
   await Promise.all(
     fresh.map(
-      (e) => new Promise((resolve12) => {
+      (e) => new Promise((resolve14) => {
         const mcp = e.delivery.mcp;
         const child = (0, import_node_child_process29.execFile)(
           mcp.command,
           [...mcp.args, "--help"],
           { timeout: 9e4 },
-          () => resolve12()
+          () => resolve14()
         );
-        child.on("error", () => resolve12());
+        child.on("error", () => resolve14());
       })
     )
   );
@@ -43285,7 +43285,7 @@ var StreamingState = class {
    * protested "J'ai rien refusé". The line is the user's evidence.
    */
   registerPermission(args2) {
-    return new Promise((resolve12) => {
+    return new Promise((resolve14) => {
       const timeoutTimer = setTimeout(() => {
         if (this.pending?.kind === "permission" && this.pending.questionId === args2.questionId) {
           log.warn(
@@ -43298,14 +43298,14 @@ var StreamingState = class {
             content: permissionExpiredNotice(),
             done: true
           });
-          resolve12({ outcome: { outcome: "cancelled" } });
+          resolve14({ outcome: { outcome: "cancelled" } });
         }
       }, PERMISSION_TIMEOUT_MS);
       this.setPending({
         kind: "permission",
         questionId: args2.questionId,
         options: args2.options,
-        resolve: resolve12,
+        resolve: resolve14,
         timeoutTimer
       });
     });
@@ -43342,14 +43342,14 @@ var StreamingState = class {
       const byId = optionId ? this.pending.options.find((o) => o.optionId === optionId) : void 0;
       const picked = byId ?? this.pending.options[index];
       clearTimeout(this.pending.timeoutTimer);
-      const resolve12 = this.pending.resolve;
+      const resolve14 = this.pending.resolve;
       this.setPending(null);
       if (!picked) {
         log.warn("acpRunner", `select_option index=${index} out of bounds \u2014 cancel`);
-        resolve12({ outcome: { outcome: "cancelled" } });
+        resolve14({ outcome: { outcome: "cancelled" } });
         return { kind: "resolved", optionId: null };
       }
-      resolve12({ outcome: { outcome: "selected", optionId: picked.optionId } });
+      resolve14({ outcome: { outcome: "selected", optionId: picked.optionId } });
       return { kind: "resolved", optionId: picked.optionId };
     }
     const text = this.pending.options[index];
@@ -45948,10 +45948,10 @@ var NativeTuiDriver = class _NativeTuiDriver {
     this.lastOutput = this.now();
   }
   whenSafeToYield() {
-    return new Promise((resolve12) => {
+    return new Promise((resolve14) => {
       const tick = () => {
         const quietFor = this.now() - this.lastOutput;
-        if (quietFor >= this.idleMs) resolve12();
+        if (quietFor >= this.idleMs) resolve14();
         else setTimeout(tick, this.idleMs - quietFor);
       };
       tick();
@@ -46014,10 +46014,10 @@ var AcpDriver = class {
    * one ever is, assume resumable so behaviour is unchanged.
    */
   hasTranscript(conversationId) {
-    const resolve12 = this.deps.runtime.resolveHistoryFile;
-    if (typeof resolve12 !== "function") return true;
+    const resolve14 = this.deps.runtime.resolveHistoryFile;
+    if (typeof resolve14 !== "function") return true;
     try {
-      return resolve12.call(this.deps.runtime, this.deps.opts.cwd, conversationId) !== null;
+      return resolve14.call(this.deps.runtime, this.deps.opts.cwd, conversationId) !== null;
     } catch {
       return true;
     }
@@ -46081,11 +46081,11 @@ var AcpDriver = class {
     this.turnActive = false;
     const waiters = this.waiters;
     this.waiters = [];
-    waiters.forEach((resolve12) => resolve12());
+    waiters.forEach((resolve14) => resolve14());
   }
   whenSafeToYield() {
     if (!this.turnActive) return Promise.resolve();
-    return new Promise((resolve12) => this.waiters.push(resolve12));
+    return new Promise((resolve14) => this.waiters.push(resolve14));
   }
 };
 
@@ -46739,8 +46739,8 @@ async function start(requestedAgent, presetSession) {
     let gateTimer;
     await Promise.race([
       Promise.all([depsReady, agentBinaryReady]),
-      new Promise((resolve12) => {
-        gateTimer = setTimeout(resolve12, GATE_TIMEOUT_MS);
+      new Promise((resolve14) => {
+        gateTimer = setTimeout(resolve14, GATE_TIMEOUT_MS);
       })
     ]);
     if (gateTimer) clearTimeout(gateTimer);
@@ -47121,7 +47121,7 @@ async function pair(args2 = []) {
     waitSpin.message(waitMessage());
   }, 1e3);
   countdownInterval.unref?.();
-  await new Promise((resolve12) => {
+  await new Promise((resolve14) => {
     let stopPolling = null;
     function sigintHandler() {
       clearInterval(countdownInterval);
@@ -47172,7 +47172,7 @@ async function pair(args2 = []) {
             pluginAuthToken: info.pluginAuthToken
           });
         }
-        resolve12();
+        resolve14();
       },
       () => {
         clearInterval(countdownInterval);
@@ -47401,12 +47401,12 @@ var GitHubCodespacesProvider = class {
     }
     if (!isAuthed) {
       resetStdinForChild();
-      await new Promise((resolve12, reject) => {
+      await new Promise((resolve14, reject) => {
         const proc = (0, import_child_process30.spawn)("gh", ["auth", "login", "-s", "codespace,repo,read:user"], {
           stdio: "inherit"
         });
         proc.on("exit", (code) => {
-          if (code === 0) resolve12();
+          if (code === 0) resolve14();
           else reject(new Error("gh auth login failed."));
         });
         proc.on("error", reject);
@@ -47435,13 +47435,13 @@ var GitHubCodespacesProvider = class {
       }
       wt(noteLines.join("\n"), "One more permission needed");
       resetStdinForChild();
-      const refreshCode = await new Promise((resolve12, reject) => {
+      const refreshCode = await new Promise((resolve14, reject) => {
         const proc = (0, import_child_process30.spawn)(
           "gh",
           ["auth", "refresh", "-h", "github.com", "-s", "codespace"],
           { stdio: "inherit" }
         );
-        proc.on("exit", (code) => resolve12(code ?? 1));
+        proc.on("exit", (code) => resolve14(code ?? 1));
         proc.on("error", reject);
       });
       if (refreshCode !== 0) {
@@ -47585,10 +47585,10 @@ var GitHubCodespacesProvider = class {
     if (q(proceed) || !proceed) return;
     O2.step(`Installing gh via ${installCmd.describe}\u2026`);
     resetStdinForChild();
-    const ok = await new Promise((resolve12) => {
+    const ok = await new Promise((resolve14) => {
       const proc = (0, import_child_process30.spawn)(installCmd.exe, installCmd.args, { stdio: "inherit" });
-      proc.on("exit", (code) => resolve12(code === 0));
-      proc.on("error", () => resolve12(false));
+      proc.on("exit", (code) => resolve14(code === 0));
+      proc.on("error", () => resolve14(false));
     });
     if (ok) O2.success("gh installed");
     else O2.error("gh install failed");
@@ -47612,14 +47612,14 @@ var GitHubCodespacesProvider = class {
       "Expanding GitHub scopes"
     );
     resetStdinForChild();
-    await new Promise((resolve12, reject) => {
+    await new Promise((resolve14, reject) => {
       const proc = (0, import_child_process30.spawn)(
         "gh",
         ["auth", "refresh", "-h", "github.com", "-s", "repo,read:org"],
         { stdio: "inherit" }
       );
       proc.on("exit", (code) => {
-        if (code === 0) resolve12();
+        if (code === 0) resolve14();
         else reject(new Error(
           "gh auth refresh failed. Re-run `gh auth refresh -h github.com -s repo,read:org` manually."
         ));
@@ -47790,13 +47790,13 @@ var GitHubCodespacesProvider = class {
   }
   async streamCommand(workspaceId, command2) {
     resetStdinForChild();
-    return new Promise((resolve12, reject) => {
+    return new Promise((resolve14, reject) => {
       const proc = (0, import_child_process30.spawn)(
         "gh",
         ["codespace", "ssh", "-c", workspaceId, "--", "-tt", command2],
         { stdio: "inherit" }
       );
-      proc.on("exit", (code) => resolve12({ code: code ?? 0 }));
+      proc.on("exit", (code) => resolve14({ code: code ?? 0 }));
       proc.on("error", reject);
     });
   }
@@ -47817,7 +47817,7 @@ var GitHubCodespacesProvider = class {
       "--",
       `mkdir -p ${shellQuote(remoteDir)} && tar -xzf - -C ${shellQuote(remoteDir)}`
     ];
-    await new Promise((resolve12, reject) => {
+    await new Promise((resolve14, reject) => {
       const tar = (0, import_child_process30.spawn)("tar", tarArgs, {
         stdio: ["ignore", "pipe", "pipe"],
         env: tarEnv
@@ -47837,7 +47837,7 @@ var GitHubCodespacesProvider = class {
       ssh.on("error", reject);
       ssh.on("exit", (code) => {
         if (code === 0) {
-          resolve12();
+          resolve14();
         } else {
           const reason = (sshErr || tarErr || `exit ${code}`).trim().slice(0, 500);
           reject(new Error(`Remote tar failed: ${reason}`));
@@ -47855,7 +47855,7 @@ var GitHubCodespacesProvider = class {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote(remotePath)}`);
     }
     const cmd = parts.join(" && ");
-    await new Promise((resolve12, reject) => {
+    await new Promise((resolve14, reject) => {
       const proc = (0, import_child_process30.spawn)(
         "gh",
         ["codespace", "ssh", "-c", workspaceId, "--", cmd],
@@ -47867,7 +47867,7 @@ var GitHubCodespacesProvider = class {
       });
       proc.on("error", reject);
       proc.on("exit", (code) => {
-        if (code === 0) resolve12();
+        if (code === 0) resolve14();
         else reject(new Error(`Remote write failed: ${(stderr || `exit ${code}`).trim().slice(0, 500)}`));
       });
       proc.stdin?.write(contents);
@@ -47957,10 +47957,10 @@ var GitpodProvider = class {
       "Authenticating Gitpod"
     );
     resetStdinForChild2();
-    await new Promise((resolve12, reject) => {
+    await new Promise((resolve14, reject) => {
       const proc = (0, import_child_process31.spawn)("gitpod", ["login"], { stdio: "inherit" });
       proc.on("exit", (code) => {
-        if (code === 0) resolve12();
+        if (code === 0) resolve14();
         else reject(new Error("gitpod login failed."));
       });
       proc.on("error", reject);
@@ -48109,13 +48109,13 @@ var GitpodProvider = class {
   }
   async streamCommand(workspaceId, command2) {
     resetStdinForChild2();
-    return new Promise((resolve12, reject) => {
+    return new Promise((resolve14, reject) => {
       const proc = (0, import_child_process31.spawn)(
         "gitpod",
         ["workspace", "ssh", workspaceId, "--", "-tt", command2],
         { stdio: "inherit" }
       );
-      proc.on("exit", (code) => resolve12({ code: code ?? 0 }));
+      proc.on("exit", (code) => resolve14({ code: code ?? 0 }));
       proc.on("error", reject);
     });
   }
@@ -48129,7 +48129,7 @@ var GitpodProvider = class {
     tarArgs.push(".");
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote2(remoteDir)} && tar -xzf - -C ${shellQuote2(remoteDir)}`;
-    await new Promise((resolve12, reject) => {
+    await new Promise((resolve14, reject) => {
       const tar = (0, import_child_process31.spawn)("tar", tarArgs, {
         stdio: ["ignore", "pipe", "pipe"],
         env: tarEnv
@@ -48150,7 +48150,7 @@ var GitpodProvider = class {
       tar.on("error", reject);
       ssh.on("error", reject);
       ssh.on("exit", (code) => {
-        if (code === 0) resolve12();
+        if (code === 0) resolve14();
         else reject(new Error(`Remote tar failed: ${(sshErr || tarErr || `exit ${code}`).trim().slice(0, 500)}`));
       });
     });
@@ -48165,7 +48165,7 @@ var GitpodProvider = class {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote2(remotePath)}`);
     }
     const cmd = parts.join(" && ");
-    await new Promise((resolve12, reject) => {
+    await new Promise((resolve14, reject) => {
       const proc = (0, import_child_process31.spawn)(
         "gitpod",
         ["workspace", "ssh", workspaceId, "--", cmd],
@@ -48177,7 +48177,7 @@ var GitpodProvider = class {
       });
       proc.on("error", reject);
       proc.on("exit", (code) => {
-        if (code === 0) resolve12();
+        if (code === 0) resolve14();
         else reject(new Error(`Remote write failed: ${(stderr || `exit ${code}`).trim().slice(0, 500)}`));
       });
       proc.stdin?.write(contents);
@@ -48234,14 +48234,14 @@ var GitLabWorkspacesProvider = class {
       "Authenticating GitLab"
     );
     resetStdinForChild3();
-    await new Promise((resolve12, reject) => {
+    await new Promise((resolve14, reject) => {
       const proc = (0, import_child_process32.spawn)(
         "glab",
         ["auth", "login", "--scopes", "api,read_user,read_repository"],
         { stdio: "inherit" }
       );
       proc.on("exit", (code) => {
-        if (code === 0) resolve12();
+        if (code === 0) resolve14();
         else reject(new Error("glab auth login failed."));
       });
       proc.on("error", reject);
@@ -48406,13 +48406,13 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
   async streamCommand(workspaceId, command2) {
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
     resetStdinForChild3();
-    return new Promise((resolve12, reject) => {
+    return new Promise((resolve14, reject) => {
       const proc = (0, import_child_process32.spawn)(
         "ssh",
         ["-tt", "-o", "StrictHostKeyChecking=accept-new", `${workspaceId}@${sshHost}`, command2],
         { stdio: "inherit" }
       );
-      proc.on("exit", (code) => resolve12({ code: code ?? 0 }));
+      proc.on("exit", (code) => resolve14({ code: code ?? 0 }));
       proc.on("error", reject);
     });
   }
@@ -48427,7 +48427,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
     tarArgs.push(".");
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote3(remoteDir)} && tar -xzf - -C ${shellQuote3(remoteDir)}`;
-    await new Promise((resolve12, reject) => {
+    await new Promise((resolve14, reject) => {
       const tar = (0, import_child_process32.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
       const ssh = (0, import_child_process32.spawn)(
         "ssh",
@@ -48445,7 +48445,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
       tar.on("error", reject);
       ssh.on("error", reject);
       ssh.on("exit", (code) => {
-        if (code === 0) resolve12();
+        if (code === 0) resolve14();
         else reject(new Error(`Remote tar failed: ${(sshErr || tarErr || `exit ${code}`).trim().slice(0, 500)}`));
       });
     });
@@ -48458,7 +48458,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote3(remotePath)}`);
     }
     const cmd = parts.join(" && ");
-    await new Promise((resolve12, reject) => {
+    await new Promise((resolve14, reject) => {
       const proc = (0, import_child_process32.spawn)(
         "ssh",
         ["-o", "StrictHostKeyChecking=accept-new", `${workspaceId}@${sshHost}`, cmd],
@@ -48470,7 +48470,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
       });
       proc.on("error", reject);
       proc.on("exit", (code) => {
-        if (code === 0) resolve12();
+        if (code === 0) resolve14();
         else reject(new Error(`Remote write failed: ${(stderr || `exit ${code}`).trim().slice(0, 500)}`));
       });
       proc.stdin?.write(contents);
@@ -48561,10 +48561,10 @@ var RailwayProvider = class {
       "Authenticating Railway"
     );
     resetStdinForChild4();
-    await new Promise((resolve12, reject) => {
+    await new Promise((resolve14, reject) => {
       const proc = (0, import_child_process33.spawn)("railway", ["login"], { stdio: "inherit" });
       proc.on("exit", (code) => {
-        if (code === 0) resolve12();
+        if (code === 0) resolve14();
         else reject(new Error("railway login failed."));
       });
       proc.on("error", reject);
@@ -48704,13 +48704,13 @@ var RailwayProvider = class {
       throw new Error("Invalid Railway workspace id (expected projectId/serviceId).");
     }
     resetStdinForChild4();
-    return new Promise((resolve12, reject) => {
+    return new Promise((resolve14, reject) => {
       const proc = (0, import_child_process33.spawn)(
         "railway",
         ["shell", "--project", projectId, "--service", serviceId, "--command", command2],
         { stdio: "inherit" }
       );
-      proc.on("exit", (code) => resolve12({ code: code ?? 0 }));
+      proc.on("exit", (code) => resolve14({ code: code ?? 0 }));
       proc.on("error", reject);
     });
   }
@@ -48728,7 +48728,7 @@ var RailwayProvider = class {
     tarArgs.push(".");
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote4(remoteDir)} && tar -xzf - -C ${shellQuote4(remoteDir)}`;
-    await new Promise((resolve12, reject) => {
+    await new Promise((resolve14, reject) => {
       const tar = (0, import_child_process33.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
       const sh = (0, import_child_process33.spawn)(
         "railway",
@@ -48746,7 +48746,7 @@ var RailwayProvider = class {
       tar.on("error", reject);
       sh.on("error", reject);
       sh.on("exit", (code) => {
-        if (code === 0) resolve12();
+        if (code === 0) resolve14();
         else reject(new Error(`Remote tar failed: ${(shErr || tarErr || `exit ${code}`).trim().slice(0, 500)}`));
       });
     });
@@ -48762,7 +48762,7 @@ var RailwayProvider = class {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote4(remotePath)}`);
     }
     const cmd = parts.join(" && ");
-    await new Promise((resolve12, reject) => {
+    await new Promise((resolve14, reject) => {
       const proc = (0, import_child_process33.spawn)(
         "railway",
         ["shell", "--project", projectId, "--service", serviceId, "--command", cmd],
@@ -48774,7 +48774,7 @@ var RailwayProvider = class {
       });
       proc.on("error", reject);
       proc.on("exit", (code) => {
-        if (code === 0) resolve12();
+        if (code === 0) resolve14();
         else reject(new Error(`Remote write failed: ${(stderr || `exit ${code}`).trim().slice(0, 500)}`));
       });
       proc.stdin?.write(contents);
@@ -49649,10 +49649,10 @@ async function host(args2) {
 }
 
 // src/commands/host-agent.ts
-var import_node_child_process35 = require("child_process");
-var os67 = __toESM(require("os"));
-var fs91 = __toESM(require("fs"));
-var path105 = __toESM(require("path"));
+var import_node_child_process36 = require("child_process");
+var os69 = __toESM(require("os"));
+var fs94 = __toESM(require("fs"));
+var path108 = __toESM(require("path"));
 
 // src/skills/persist-from-payload.ts
 function persistOrClearSkillsFromPayload(skills) {
@@ -49973,7 +49973,7 @@ var defaultGitToolingRunner = {
     }
   },
   run(cmd, args2, opts = {}) {
-    return new Promise((resolve12) => {
+    return new Promise((resolve14) => {
       const child = (0, import_node_child_process31.spawn)(cmd, args2, {
         stdio: [opts.input !== void 0 ? "pipe" : "ignore", "ignore", "pipe"]
       });
@@ -49982,7 +49982,7 @@ var defaultGitToolingRunner = {
       const done = (code) => {
         if (settled) return;
         settled = true;
-        resolve12({ code, stderr });
+        resolve14({ code, stderr });
       };
       child.stderr?.on("data", (b) => {
         stderr += b.toString();
@@ -50009,8 +50009,10 @@ var defaultGitToolingRunner = {
   }
 };
 
-// src/commands/host/self-update.ts
-var import_node_child_process33 = require("child_process");
+// src/lib/cli-versions.ts
+var fs91 = __toESM(require("fs"));
+var os67 = __toESM(require("os"));
+var path105 = __toESM(require("path"));
 
 // src/lib/updateNotifier.ts
 var fs90 = __toESM(require("fs"));
@@ -50061,14 +50063,14 @@ function compareSemver(a, b) {
   return 0;
 }
 function fetchLatest() {
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     const req = https8.get(
       REGISTRY_URL,
       { headers: { Accept: "application/json" }, timeout: REQUEST_TIMEOUT_MS },
       (res) => {
         if (res.statusCode !== 200) {
           res.resume();
-          resolve12(null);
+          resolve14(null);
           return;
         }
         let buf = "";
@@ -50080,21 +50082,21 @@ function fetchLatest() {
           try {
             const json = JSON.parse(buf);
             if (typeof json.version === "string") {
-              resolve12(json.version);
+              resolve14(json.version);
             } else {
-              resolve12(null);
+              resolve14(null);
             }
           } catch {
-            resolve12(null);
+            resolve14(null);
           }
         });
       }
     );
     req.on("timeout", () => {
       req.destroy();
-      resolve12(null);
+      resolve14(null);
     });
-    req.on("error", () => resolve12(null));
+    req.on("error", () => resolve14(null));
   });
 }
 function notifyIfStale(currentVersion, latest) {
@@ -50170,7 +50172,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.76.10" : null;
+  const current2 = true ? "2.76.11" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -50187,7 +50189,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.76.10" : null;
+  const current2 = true ? "2.76.11" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -50201,16 +50203,264 @@ function checkForUpdates() {
   });
 }
 
+// src/lib/cli-versions.ts
+var CLI_PKG = "codeam-cli";
+var SEMVER_DIR = /^\d+\.\d+\.\d+(?:[-+][\w.-]+)?$/;
+var GC_KEEP_NEWEST = 3;
+var LOCK_STALE_MS = 15 * 6e4;
+function versionedModeSupported(platform3 = process.platform) {
+  return platform3 !== "win32";
+}
+function cliVersionsRoot(env = process.env) {
+  return env.CODEAM_CLI_VERSIONS_DIR || path105.join(os67.homedir(), ".codeam", "cli");
+}
+function packageDirOf(versionDir) {
+  return path105.join(versionDir, "node_modules", CLI_PKG);
+}
+function isRecord6(v) {
+  return typeof v === "object" && v !== null;
+}
+function readPkg2(versionDir) {
+  try {
+    const raw = JSON.parse(
+      fs91.readFileSync(path105.join(packageDirOf(versionDir), "package.json"), "utf8")
+    );
+    return isRecord6(raw) ? raw : null;
+  } catch {
+    return null;
+  }
+}
+function entryOf(versionDir) {
+  const pkg = readPkg2(versionDir);
+  if (!pkg) return null;
+  const bin = pkg.bin;
+  const named = isRecord6(bin) ? bin.codeam : void 0;
+  const rel = typeof bin === "string" ? bin : typeof named === "string" ? named : "dist/index.js";
+  const entry = path105.join(packageDirOf(versionDir), rel);
+  return fs91.existsSync(entry) ? entry : null;
+}
+function launcherOf(versionDir) {
+  const entry = entryOf(versionDir);
+  if (!entry) return null;
+  const bin = path105.join(versionDir, "node_modules", ".bin", "codeam");
+  try {
+    return fs91.realpathSync(bin) === fs91.realpathSync(entry) ? bin : entry;
+  } catch {
+    return entry;
+  }
+}
+function versionOf(versionDir) {
+  const v = readPkg2(versionDir)?.version;
+  return typeof v === "string" ? v : null;
+}
+var BAD_MARKER_TTL_MS = 24 * 60 * 6e4;
+var PRE_READY_WINDOW_MS = 60 * 6e4;
+function isBad(versionDir, now = Date.now()) {
+  try {
+    return now - fs91.statSync(path105.join(versionDir, ".bad")).mtimeMs < BAD_MARKER_TTL_MS;
+  } catch {
+    return false;
+  }
+}
+function recordPreReadyFailure(versionDir, now = Date.now()) {
+  const file = path105.join(versionDir, ".prefail");
+  let count = 0;
+  try {
+    const [n, at3] = fs91.readFileSync(file, "utf8").trim().split(" ").map(Number);
+    if (Number.isFinite(n) && Number.isFinite(at3) && now - at3 < PRE_READY_WINDOW_MS) {
+      count = n;
+    }
+  } catch {
+  }
+  count += 1;
+  try {
+    fs91.writeFileSync(file, `${count} ${now}`);
+  } catch {
+  }
+  return count;
+}
+function clearPreReadyFailures(versionDir) {
+  fs91.rmSync(path105.join(versionDir, ".prefail"), { force: true });
+}
+function markBad(versionDir, reason) {
+  try {
+    fs91.writeFileSync(path105.join(versionDir, ".bad"), `${(/* @__PURE__ */ new Date()).toISOString()} ${reason}
+`);
+  } catch {
+  }
+}
+function pointerTarget(root, name) {
+  try {
+    return fs91.realpathSync(path105.join(root, name));
+  } catch {
+    return null;
+  }
+}
+function atomicPoint(root, name, targetDir) {
+  const tmp = path105.join(root, `.${name}.tmp-${process.pid}-${Date.now()}`);
+  fs91.symlinkSync(path105.relative(root, targetDir), tmp, "dir");
+  try {
+    fs91.renameSync(tmp, path105.join(root, name));
+  } catch (err) {
+    fs91.rmSync(tmp, { force: true });
+    throw err;
+  }
+}
+function switchCurrent(root, versionDir) {
+  const old = pointerTarget(root, "current");
+  if (old && path105.resolve(old) !== path105.resolve(versionDir)) atomicPoint(root, "previous", old);
+  atomicPoint(root, "current", versionDir);
+}
+function validCurrent(root) {
+  const dir = pointerTarget(root, "current");
+  if (!dir || isBad(dir)) return null;
+  const version3 = versionOf(dir);
+  const entry = launcherOf(dir);
+  return version3 && entry ? { dir, version: version3, entry } : null;
+}
+function rollbackCurrent(root) {
+  const prev = pointerTarget(root, "previous");
+  if (!prev || isBad(prev) || !entryOf(prev)) return null;
+  const cur = pointerTarget(root, "current");
+  if (cur && path105.resolve(cur) !== path105.resolve(prev)) atomicPoint(root, "previous", cur);
+  atomicPoint(root, "current", prev);
+  return versionOf(prev);
+}
+function hostEntry(root, ownVersion, fallback, platform3 = process.platform) {
+  if (!versionedModeSupported(platform3) || !ownVersion) return fallback;
+  const cur = validCurrent(root);
+  return cur && compareSemver(cur.version, ownVersion) >= 0 ? cur.entry : fallback;
+}
+function versionDirContaining(root, file) {
+  if (!file) return null;
+  let real;
+  let realRoot;
+  try {
+    real = fs91.realpathSync(file);
+    realRoot = fs91.realpathSync(root);
+  } catch {
+    return null;
+  }
+  const rel = path105.relative(realRoot, real);
+  if (rel.startsWith("..") || path105.isAbsolute(rel)) return null;
+  const first = rel.split(path105.sep)[0];
+  return first && SEMVER_DIR.test(first) ? path105.join(realRoot, first) : null;
+}
+function pidAlive3(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (err) {
+    return err.code === "EPERM";
+  }
+}
+function livePids(versionDir) {
+  let names;
+  try {
+    names = fs91.readdirSync(path105.join(versionDir, ".pids"));
+  } catch {
+    return [];
+  }
+  return names.map(Number).filter((pid) => Number.isInteger(pid) && pid > 0 && pidAlive3(pid));
+}
+function registerRunningVersion(root = cliVersionsRoot(), entry = process.argv[1]) {
+  const dir = versionDirContaining(root, entry);
+  if (!dir) return;
+  const file = path105.join(dir, ".pids", String(process.pid));
+  try {
+    fs91.mkdirSync(path105.dirname(file), { recursive: true });
+    fs91.writeFileSync(file, "");
+    process.once("exit", () => fs91.rmSync(file, { force: true }));
+  } catch {
+  }
+}
+function gcVersions(root) {
+  const removed = [];
+  let names;
+  try {
+    names = fs91.readdirSync(root).filter((n) => SEMVER_DIR.test(n));
+  } catch {
+    return removed;
+  }
+  const keep = new Set(
+    [...names].sort((a, b) => compareSemver(b, a)).slice(0, GC_KEEP_NEWEST)
+  );
+  for (const p2 of [pointerTarget(root, "current"), pointerTarget(root, "previous")]) {
+    if (p2) keep.add(path105.basename(p2));
+  }
+  for (const name of names) {
+    const dir = path105.join(root, name);
+    if (keep.has(name) || livePids(dir).length > 0) continue;
+    try {
+      fs91.rmSync(dir, { recursive: true, force: true });
+      removed.push(name);
+    } catch {
+    }
+  }
+  return removed;
+}
+function acquireInstallLock(root) {
+  const lock = path105.join(root, ".install.lock");
+  for (let attempt = 0; attempt < 2; attempt++) {
+    try {
+      const fd = fs91.openSync(lock, "wx");
+      fs91.writeSync(fd, String(process.pid));
+      fs91.closeSync(fd);
+      return () => fs91.rmSync(lock, { force: true });
+    } catch (err) {
+      if (err.code !== "EEXIST") return null;
+      let stale = false;
+      try {
+        const owner = Number(fs91.readFileSync(lock, "utf8"));
+        const age = Date.now() - fs91.statSync(lock).mtimeMs;
+        stale = !Number.isInteger(owner) || !pidAlive3(owner) || age > LOCK_STALE_MS;
+      } catch {
+        stale = true;
+      }
+      if (!stale) return null;
+      fs91.rmSync(lock, { force: true });
+    }
+  }
+  return null;
+}
+
+// src/commands/host/host-launch.ts
+var import_node_child_process34 = require("child_process");
+var fs93 = __toESM(require("fs"));
+var os68 = __toESM(require("os"));
+var path107 = __toESM(require("path"));
+
+// src/exit-codes.ts
+var EXIT_OK = 0;
+var EXIT_FAILURE = 1;
+var EXIT_USAGE = 2;
+var EXIT_NEEDS_PAIRING = 3;
+var EXIT_HOST_NOT_ENROLLED = 78;
+var EXIT_SIGINT = 130;
+var EXIT_SIGTERM = 143;
+var EXIT_CODE_NAMES = {
+  [EXIT_OK]: "ok",
+  [EXIT_FAILURE]: "failure",
+  [EXIT_USAGE]: "usage_error",
+  [EXIT_NEEDS_PAIRING]: "needs_pairing",
+  [EXIT_HOST_NOT_ENROLLED]: "host_not_enrolled",
+  [EXIT_SIGINT]: "sigint",
+  [EXIT_SIGTERM]: "sigterm"
+};
+
 // src/commands/host/self-update.ts
+var import_node_child_process33 = require("child_process");
+var fs92 = __toESM(require("fs"));
+var path106 = __toESM(require("path"));
 var SELF_UPDATE_PKG = "codeam-cli";
 var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
+var SELF_UPDATE_STARTUP_DELAY_MS = 5e3;
 var SELF_UPDATE_DEFER_MAX_MS = 24 * 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
-var SUDO_PREFLIGHT_TIMEOUT_MS = 5e3;
 function currentCliVersion() {
-  return true ? "2.76.10" : null;
+  return true ? "2.76.11" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -50226,10 +50476,10 @@ async function installedVersion(deps) {
   }
 }
 function runCmd(cmd, args2, timeoutMs) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve14) => {
     (0, import_node_child_process33.execFile)(cmd, args2, { timeout: timeoutMs }, (err, stdout, stderr) => {
       const code = err && typeof err.code === "number" ? err.code : err ? null : 0;
-      resolve12({ code, stdout: stdout ?? "", stderr: stderr ?? "" });
+      resolve14({ code, stdout: stdout ?? "", stderr: stderr ?? "" });
     });
   });
 }
@@ -50237,7 +50487,11 @@ async function runSelfUpdate() {
   return runSelfUpdateWith({
     run: runCmd,
     currentVersion: currentCliVersion,
-    isRoot: () => process.getuid?.() === 0
+    isRoot: () => process.getuid?.() === 0,
+    versionsRoot: cliVersionsRoot(),
+    runningEntry: process.argv[1],
+    nodePath: process.execPath,
+    platform: process.platform
   });
 }
 async function runSelfUpdateWith(deps) {
@@ -50247,6 +50501,15 @@ async function runSelfUpdateWith(deps) {
       log.trace("host-agent", "self-update: no __CLI_VERSION__ \u2014 skipping");
       return { status: "skipped" };
     }
+    const root = deps.versionsRoot ?? cliVersionsRoot();
+    const versioned = versionedModeSupported(deps.platform) ? validCurrent(root) : null;
+    if (versioned && compareSemver(versioned.version, current2) > 0) {
+      log.info(
+        "host-agent",
+        `self-update: ${versioned.version} already current in ${root} (running ${current2}) \u2014 restarting onto it`
+      );
+      return { status: "updated", version: versioned.version };
+    }
     const onDisk = await installedVersion(deps);
     if (onDisk && compareSemver(onDisk, current2) > 0) {
       log.info(
@@ -50272,49 +50535,299 @@ async function runSelfUpdateWith(deps) {
     if (compareSemver(latest, current2) <= 0) {
       return { status: "current" };
     }
-    log.info("host-agent", `self-update: ${current2} \u2192 ${latest} available \u2014 installing`);
-    const installArgs = ["install", "-g", `${SELF_UPDATE_PKG}@latest`];
-    let install = await deps.run("npm", installArgs, SELF_UPDATE_INSTALL_TIMEOUT_MS);
-    if (install.code !== 0 && !deps.isRoot() && /EACCES/i.test(install.stderr)) {
-      const canSudo = await deps.run("sudo", ["-n", "true"], SUDO_PREFLIGHT_TIMEOUT_MS);
-      if (canSudo.code === 0) {
-        log.info("host-agent", "self-update: install hit EACCES \u2014 retrying with sudo");
-        install = await deps.run("sudo", ["npm", ...installArgs], SELF_UPDATE_INSTALL_TIMEOUT_MS);
-      } else {
+    if (!versionedModeSupported(deps.platform)) {
+      log.info("host-agent", `self-update: ${current2} \u2192 ${latest} available \u2014 installing (global)`);
+      return await installGlobalLegacy(deps, latest, current2);
+    }
+    log.info("host-agent", `self-update: ${current2} \u2192 ${latest} available \u2014 installing side-by-side`);
+    return await installVersioned(deps, root, latest, current2);
+  } catch (err) {
+    log.warn(
+      "host-agent",
+      `self-update: unexpected error: ${err instanceof Error ? err.message : String(err)}`
+    );
+    return { status: "skipped" };
+  }
+}
+var VERIFY_TIMEOUT_MS = 3e4;
+async function installVersioned(deps, root, latest, running2) {
+  const node = deps.nodePath ?? process.execPath;
+  const target = path106.join(root, latest);
+  try {
+    fs92.mkdirSync(root, { recursive: true });
+  } catch {
+    return { status: "skipped" };
+  }
+  if (isBad(target)) {
+    log.warn("host-agent", `self-update: ${latest} is marked bad (crashed before ready) \u2014 not reinstalling`);
+    return { status: "skipped" };
+  }
+  const release3 = acquireInstallLock(root);
+  if (!release3) {
+    log.info("host-agent", "self-update: another install holds the lock \u2014 skipping this tick");
+    return { status: "skipped" };
+  }
+  try {
+    const runningDir = versionDirContaining(root, deps.runningEntry);
+    const reusable = entryOf(target) && versionOf(target) === latest;
+    if (!reusable) {
+      if (runningDir && path106.resolve(runningDir) === path106.resolve(target)) {
+        return { status: "skipped" };
+      }
+      fs92.rmSync(target, { recursive: true, force: true });
+      const install = await deps.run(
+        "npm",
+        [
+          "install",
+          "--prefix",
+          target,
+          "--no-audit",
+          "--no-fund",
+          "--loglevel=error",
+          `${SELF_UPDATE_PKG}@${latest}`
+        ],
+        SELF_UPDATE_INSTALL_TIMEOUT_MS
+      );
+      if (install.code !== 0) {
+        fs92.rmSync(target, { recursive: true, force: true });
         log.warn(
           "host-agent",
-          "self-update: the npm global prefix is not writable by this user and passwordless sudo is unavailable \u2014 install codeam-cli under a user-writable prefix, or let a privileged agent on this host install it (this box restarts onto it automatically)"
+          `self-update: versioned install exited ${String(install.code)} \u2014 staying on ${running2}: ` + install.stderr.slice(-300)
         );
+        return { status: "skipped" };
       }
     }
-    if (install.code !== 0) {
+    const entry = entryOf(target);
+    const check = entry ? await deps.run(node, [entry, "--version"], VERIFY_TIMEOUT_MS) : { code: null, stdout: "", stderr: "no entry point" };
+    if (check.code !== 0 || !check.stdout.includes(latest)) {
+      fs92.rmSync(target, { recursive: true, force: true });
       log.warn(
         "host-agent",
-        `self-update: install exited ${String(install.code)} \u2014 staying on ${current2}`
+        `self-update: ${latest} failed verification (exit ${String(check.code)}: ${(check.stdout + check.stderr).trim().slice(-200)}) \u2014 staying on ${running2}`
       );
       return { status: "skipped" };
     }
-    const after = await deps.run(
-      "npm",
-      ["view", SELF_UPDATE_PKG, "version"],
-      SELF_UPDATE_VIEW_TIMEOUT_MS
+    switchCurrent(root, target);
+    const removed = gcVersions(root);
+    log.info(
+      "host-agent",
+      `self-update: ${latest} installed + verified at ${target}, now current` + (removed.length ? ` (gc: ${removed.join(", ")})` : "")
     );
-    const installed2 = after.code === 0 ? after.stdout.trim() || latest : latest;
-    return { status: "updated", version: installed2 };
+    return { status: "updated", version: latest };
   } catch (err) {
+    const cur = pointerTarget(root, "current");
+    if (!cur || path106.basename(cur) !== latest) fs92.rmSync(target, { recursive: true, force: true });
     log.warn(
       "host-agent",
-      `self-update: unexpected error: ${err instanceof Error ? err.message : String(err)}`
+      `self-update: versioned install failed: ${err instanceof Error ? err.message : String(err)}`
     );
     return { status: "skipped" };
+  } finally {
+    release3();
+  }
+}
+async function installGlobalLegacy(deps, latest, running2) {
+  const install = await deps.run(
+    "npm",
+    ["install", "-g", `${SELF_UPDATE_PKG}@latest`],
+    SELF_UPDATE_INSTALL_TIMEOUT_MS
+  );
+  if (install.code !== 0) {
+    log.warn("host-agent", `self-update: install exited ${String(install.code)} \u2014 staying on ${running2}`);
+    return { status: "skipped" };
+  }
+  return { status: "updated", version: latest };
+}
+
+// src/commands/host/host-launch.ts
+var SUPERVISED_FLAG = "--supervised";
+var READY_MESSAGE = "codeam-host-ready";
+var MAX_FAST_RESPAWNS = 5;
+var FAST_EXIT_MS = 3e4;
+var readySent = false;
+function signalHostReady(send = process.send?.bind(process)) {
+  if (readySent || !send) return;
+  readySent = true;
+  try {
+    send(READY_MESSAGE);
+  } catch {
+  }
+}
+function defaultDeps() {
+  return {
+    ownVersion: true ? "2.76.11" : null,
+    root: cliVersionsRoot(),
+    args: process.argv.slice(3),
+    execPath: process.execPath,
+    platform: process.platform,
+    now: () => Date.now(),
+    spawn: (cmd, args2) => (0, import_node_child_process34.spawn)(cmd, args2, { stdio: ["inherit", "inherit", "inherit", "ipc"] }),
+    exit: (code) => process.exit(code),
+    reraise: (signal) => {
+      process.removeAllListeners(signal);
+      process.kill(process.pid, signal);
+    },
+    warn: (msg) => process.stderr.write(`${msg}
+`),
+    stdinIsTty: Boolean(process.stdin.isTTY)
+  };
+}
+async function superviseCurrent(over = {}) {
+  const deps = { ...defaultDeps(), ...over };
+  if (!versionedModeSupported(deps.platform) || deps.args.includes(SUPERVISED_FLAG)) return "self";
+  let fastRespawns = 0;
+  for (; ; ) {
+    const cur = validCurrent(deps.root);
+    if (!cur || !deps.ownVersion || compareSemver(cur.version, deps.ownVersion) <= 0) return "self";
+    const startedAt = deps.now();
+    let ready = false;
+    let stopping = false;
+    const child = deps.spawn(deps.execPath, [cur.entry, "host-agent", SUPERVISED_FLAG, ...deps.args]);
+    child.on("message", (m) => {
+      if (m === READY_MESSAGE) {
+        ready = true;
+        clearPreReadyFailures(cur.dir);
+      }
+    });
+    const signals = deps.stdinIsTty ? ["SIGTERM", "SIGHUP"] : ["SIGTERM", "SIGHUP", "SIGINT"];
+    const forward = (sig) => () => {
+      stopping = true;
+      try {
+        child.kill(sig);
+      } catch {
+      }
+    };
+    const handlers2 = signals.map((sig) => [sig, forward(sig)]);
+    for (const [sig, h] of handlers2) process.on(sig, h);
+    const ignoreSigint = () => {
+      stopping = true;
+    };
+    if (deps.stdinIsTty) process.on("SIGINT", ignoreSigint);
+    const { code, signal } = await new Promise(
+      (resolve14) => {
+        child.once("exit", (c2, s) => resolve14({ code: c2, signal: s }));
+        child.once("error", () => resolve14({ code: 1, signal: null }));
+      }
+    );
+    for (const [sig, h] of handlers2) process.off(sig, h);
+    if (deps.stdinIsTty) process.off("SIGINT", ignoreSigint);
+    if (signal) {
+      deps.reraise(signal);
+      return "supervised";
+    }
+    if (stopping || code === EXIT_HOST_NOT_ENROLLED) {
+      deps.exit(code ?? 1);
+      return "supervised";
+    }
+    if (code === 0) {
+      fastRespawns = deps.now() - startedAt < FAST_EXIT_MS ? fastRespawns + 1 : 0;
+      if (fastRespawns > MAX_FAST_RESPAWNS) {
+        deps.warn("codeam: host-agent keeps restarting \u2014 running the launcher\u2019s own version");
+        return "self";
+      }
+      continue;
+    }
+    if (!ready) {
+      const strikes = recordPreReadyFailure(cur.dir);
+      if (strikes < 2) {
+        deps.warn(`codeam: ${cur.version} exited ${String(code)} before ready \u2014 retrying once`);
+        continue;
+      }
+      markBad(cur.dir, `host-agent exited ${String(code)} before ready (${strikes}x)`);
+      const now = rollbackCurrent(deps.root);
+      deps.warn(
+        `codeam: ${cur.version} exited ${String(code)} before ready twice \u2014 marked bad` + (now ? `, rolled back to ${now}` : "")
+      );
+      continue;
+    }
+    deps.exit(code ?? 1);
+    return "supervised";
+  }
+}
+function needsSelfRelaunch(env = process.env, pid = process.pid, ctx = {}) {
+  if (env.INVOCATION_ID || pid === 1) return false;
+  const ppid = ctx.ppid ?? process.ppid;
+  if (ppid === 1 && isOurTiniEntrypoint((ctx.pid1Cmdline ?? readPid1Cmdline)())) return false;
+  return true;
+}
+function readPid1Cmdline() {
+  try {
+    return fs93.readFileSync("/proc/1/cmdline", "utf8").split("\0").filter(Boolean);
+  } catch {
+    return [];
+  }
+}
+function isOurTiniEntrypoint(argv) {
+  return argv.some((a) => path107.basename(a) === "tini") && argv.includes("host-agent");
+}
+function relaunchArgv(execPath, argv) {
+  return ["-c", 'sleep 2; exec "$0" "$@"', execPath, ...argv.slice(1)];
+}
+function defaultRestartForUpdate(version3, supervised, io = {}) {
+  const exit = io.exit ?? ((code) => process.exit(code));
+  const relaunch = !supervised && (io.needsRelaunch ?? needsSelfRelaunch());
+  log.info(
+    "host-agent",
+    `self-update: installed ${version3}, restarting${supervised ? " (supervised)" : relaunch ? " (self-relaunch, no supervisor)" : ""}`
+  );
+  if (relaunch) {
+    const entry = io.entry ?? hostEntry(
+      io.root ?? cliVersionsRoot(),
+      io.ownVersion === void 0 ? currentCliVersion() : io.ownVersion,
+      io.argv1 ?? process.argv[1] ?? ""
+    );
+    const argv = [process.argv[0] ?? process.execPath, entry, ...process.argv.slice(2)];
+    try {
+      (io.relaunch ?? ((a) => (0, import_node_child_process34.spawn)("/bin/sh", relaunchArgv(process.execPath, a), {
+        cwd: process.cwd(),
+        env: process.env,
+        detached: true,
+        stdio: "ignore"
+      }).unref()))(argv);
+    } catch (err) {
+      log.error("host-agent", "self-update: relaunch failed \u2014 staying on the old binary", err);
+      return;
+    }
+  }
+  exit(0);
+}
+function isContainerEnvironment(existsSyncFn = fs93.existsSync, readFileSyncFn = (p2) => fs93.readFileSync(p2, "utf8")) {
+  try {
+    if (existsSyncFn("/.dockerenv")) return true;
+  } catch {
+  }
+  try {
+    const cgroup = readFileSyncFn("/proc/1/cgroup");
+    if (/docker|containerd|kubepods/.test(cgroup)) return true;
+  } catch {
   }
+  return false;
+}
+function hostAgentPidFile(home = os68.homedir()) {
+  return path107.join(home, ".codeam", "host-agent.pid");
+}
+function writeHostAgentPidFile(file = hostAgentPidFile(), pid = process.pid) {
+  try {
+    fs93.mkdirSync(path107.dirname(file), { recursive: true });
+    fs93.writeFileSync(file, String(pid));
+    process.once("exit", () => {
+      try {
+        if (fs93.readFileSync(file, "utf8").trim() === String(pid)) fs93.rmSync(file, { force: true });
+      } catch {
+      }
+    });
+  } catch {
+  }
+}
+function bindSupervisedLifecycle(proc, onOrphaned) {
+  proc.once("disconnect", onOrphaned);
 }
 
 // src/commands/host/teardown.ts
-var import_node_child_process34 = require("child_process");
+var import_node_child_process35 = require("child_process");
 var defaultDisableService = () => {
   try {
-    (0, import_node_child_process34.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
+    (0, import_node_child_process35.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
   } catch {
   }
 };
@@ -50485,8 +50998,8 @@ var DOCKER_RUN_TIMEOUT_MS = 12e4;
 var DOCKER_RUN_WITH_PULL_TIMEOUT_MS = 6e5;
 var defaultDockerRunner = {
   run(args2, opts = {}) {
-    return new Promise((resolve12) => {
-      const child = (0, import_node_child_process35.spawn)("docker", args2, {
+    return new Promise((resolve14) => {
+      const child = (0, import_node_child_process36.spawn)("docker", args2, {
         stdio: ["ignore", "pipe", "pipe"],
         env: { ...process.env, ...opts.env }
       });
@@ -50504,7 +51017,7 @@ var defaultDockerRunner = {
         if (settled) return;
         settled = true;
         clearTimeout(timer);
-        resolve12({ code, stderr: stderrBuf, stdout: stdoutBuf });
+        resolve14({ code, stderr: stderrBuf, stdout: stdoutBuf });
       };
       child.stdout?.on("data", (b) => {
         stdoutBuf += b.toString();
@@ -50531,13 +51044,16 @@ var CONTROL_AGENT_META = {
   // Synthetic control channel — capability flags are moot (no agent runs).
   acp: false
 };
-var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process35.spawn)(process.execPath, [process.argv[1], "pair-auto", ...args2], {
+function sessionEntry() {
+  return hostEntry(cliVersionsRoot(), currentCliVersion(), process.argv[1]);
+}
+var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process36.spawn)(process.execPath, [sessionEntry(), "pair-auto", ...args2], {
   cwd,
   env: { ...process.env, ...env },
   stdio: ["ignore", "pipe", "pipe"],
   detached: false
 });
-var defaultResumeSpawner = (env, cwd) => (0, import_node_child_process35.spawn)(process.execPath, [process.argv[1]], {
+var defaultResumeSpawner = (env, cwd) => (0, import_node_child_process36.spawn)(process.execPath, [sessionEntry()], {
   cwd,
   // CODEAM_AUTO_APPROVE=1 → ACP path (baton off). CODEAM_RESUME_LATEST=1 →
   // continue the user's most-recent conversation instead of opening an empty
@@ -50556,48 +51072,12 @@ var defaultOnIdentityRejected = () => {
     "host-agent",
     "host identity rejected by backend \u2014 disabled service + wiped sealed identity, exiting"
   );
-  process.exit(1);
+  process.exit(EXIT_HOST_NOT_ENROLLED);
 };
 var ORPHAN_TERM_GRACE_MS = 3e3;
 var ORPHAN_KILL_SETTLE_MS = 500;
-function needsSelfRelaunch(env = process.env, pid = process.pid) {
-  return !env.INVOCATION_ID && pid !== 1;
-}
-function isContainerEnvironment(existsSyncFn = fs91.existsSync, readFileSyncFn = (p2) => fs91.readFileSync(p2, "utf8")) {
-  try {
-    if (existsSyncFn("/.dockerenv")) return true;
-  } catch {
-  }
-  try {
-    const cgroup = readFileSyncFn("/proc/1/cgroup");
-    if (/docker|containerd|kubepods/.test(cgroup)) return true;
-  } catch {
-  }
-  return false;
-}
-function relaunchArgv(execPath, argv) {
-  return ["-c", 'sleep 2; exec "$0" "$@"', execPath, ...argv.slice(1)];
-}
 var defaultOnUpdated = (version3) => {
-  const relaunch = needsSelfRelaunch();
-  log.info(
-    "host-agent",
-    `self-update: installed ${version3}, restarting${relaunch ? " (self-relaunch, no supervisor)" : ""}`
-  );
-  if (relaunch) {
-    try {
-      (0, import_node_child_process35.spawn)("/bin/sh", relaunchArgv(process.execPath, process.argv), {
-        cwd: process.cwd(),
-        env: process.env,
-        detached: true,
-        stdio: "ignore"
-      }).unref();
-    } catch (err) {
-      log.error("host-agent", "self-update: relaunch failed \u2014 staying on the old binary", err);
-      return;
-    }
-  }
-  process.exit(0);
+  defaultRestartForUpdate(version3, process.argv.slice(3).includes(SUPERVISED_FLAG));
 };
 var HostAgentSupervisor = class {
   constructor(identity, deps = {}) {
@@ -50633,6 +51113,7 @@ var HostAgentSupervisor = class {
   heartbeatTimer = null;
   /** Periodic self-update timer (npm check + install + restart). */
   selfUpdateTimer = null;
+  selfUpdateStartupTimer = null;
   /** Self-update check + install (injectable; defaults to runSelfUpdate). */
   selfUpdate;
   now;
@@ -50726,11 +51207,17 @@ var HostAgentSupervisor = class {
     this.reportLiveSet("boot");
     const updateMs = this.selfUpdateIntervalMs();
     if (updateMs > 0) {
+      this.selfUpdateStartupTimer = setTimeout(
+        () => void this.selfUpdateTick(),
+        SELF_UPDATE_STARTUP_DELAY_MS
+      );
+      this.selfUpdateStartupTimer.unref?.();
       this.selfUpdateTimer = setInterval(() => void this.selfUpdateTick(), updateMs);
       this.selfUpdateTimer.unref?.();
     } else {
       log.info("host-agent", "self-update disabled (CODEAM_HOST_SELF_UPDATE_MS<=0)");
     }
+    (this.deps.writePidFile ?? writeHostAgentPidFile)();
     log.info("host-agent", `supervisor up host=${this.identity.hostId.slice(0, 8)}`);
   }
   /** Stop the control channel + heartbeats + kill every child. */
@@ -50752,6 +51239,10 @@ var HostAgentSupervisor = class {
       clearInterval(this.selfUpdateTimer);
       this.selfUpdateTimer = null;
     }
+    if (this.selfUpdateStartupTimer) {
+      clearTimeout(this.selfUpdateStartupTimer);
+      this.selfUpdateStartupTimer = null;
+    }
     this.relay?.stop();
     for (const child of this.children.values()) {
       killQuiet(child.proc);
@@ -50797,6 +51288,7 @@ var HostAgentSupervisor = class {
       }
       const latencyMs = await sendHostHeartbeat(this.identity, metrics);
       this.metrics.recordLatency(latencyMs);
+      signalHostReady();
       if (!this.reportedConnected) {
         this.reportedConnected = true;
         void reportProgress(
@@ -51028,13 +51520,13 @@ var HostAgentSupervisor = class {
     const relay = this.relay;
     if (!relay) return;
     const raw = cmd.payload?.path;
-    const target = typeof raw === "string" && raw.trim() ? path105.resolve(raw.trim()) : os67.homedir();
+    const target = typeof raw === "string" && raw.trim() ? path108.resolve(raw.trim()) : os69.homedir();
     try {
-      const dirents = await fs91.promises.readdir(target, { withFileTypes: true });
+      const dirents = await fs94.promises.readdir(target, { withFileTypes: true });
       const entries2 = dirents.filter((d3) => !d3.name.startsWith(".")).map((d3) => ({ name: d3.name, isDir: d3.isDirectory() })).sort(
         (a, b) => a.isDir === b.isDir ? a.name.localeCompare(b.name) : a.isDir ? -1 : 1
       );
-      const parent = path105.dirname(target);
+      const parent = path108.dirname(target);
       await relay.sendResult(cmd.id, "completed", {
         path: target,
         // null at the filesystem root so the UI can hide the ".." affordance.
@@ -51388,14 +51880,14 @@ var HostAgentSupervisor = class {
           }),
           CODEAM_AUTO_TOKEN: payload.autoPairToken
         };
-        const houseConfigDir = path105.join(
-          os67.homedir(),
+        const houseConfigDir = path108.join(
+          os69.homedir(),
           ".codeam",
           "house-claude",
           payload.deployId
         );
         try {
-          fs91.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
+          fs94.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
         } catch {
         }
         childEnv.CLAUDE_CONFIG_DIR = houseConfigDir;
@@ -51422,7 +51914,7 @@ var HostAgentSupervisor = class {
         report("installing", "installing agent CLI");
         await this.runAgentInstall(payload.agentInstallScript);
       }
-      const home = process.env.HOME || os67.homedir();
+      const home = process.env.HOME || os69.homedir();
       childEnv.PATH = `${home}/.local/bin:${process.env.PATH ?? ""}`;
       if (payload.cloneToken) {
         try {
@@ -51430,13 +51922,13 @@ var HostAgentSupervisor = class {
           if ((payload.repoProvider ?? "github") === "gitlab") {
             const glabCmd = await ensureGlabCli(defaultGitToolingRunner);
             if (glabCmd) {
-              childEnv.PATH = `${codeamBinDir()}${path105.delimiter}${childEnv.PATH}`;
+              childEnv.PATH = `${codeamBinDir()}${path108.delimiter}${childEnv.PATH}`;
               await ensureGlabAuth(defaultGitToolingRunner, glabCmd, payload.cloneToken);
             }
           } else {
             const ghCmd = await ensureGhCli(defaultGitToolingRunner, payload.cloneToken);
             if (ghCmd) {
-              childEnv.PATH = `${codeamBinDir()}${path105.delimiter}${childEnv.PATH}`;
+              childEnv.PATH = `${codeamBinDir()}${path108.delimiter}${childEnv.PATH}`;
               await ensureGhAuth(defaultGitToolingRunner, ghCmd, payload.cloneToken);
             }
           }
@@ -51464,9 +51956,9 @@ var HostAgentSupervisor = class {
       );
       if (!payload.suppressOnboardingWelcome) {
         try {
-          const cfgDir = childEnv.CLAUDE_CONFIG_DIR || path105.join(os67.homedir(), ".claude");
-          const projectDir = path105.join(cfgDir, "projects", encodeCwd(cwd));
-          const hasPriorConversation = fs91.existsSync(projectDir) && fs91.readdirSync(projectDir).some((f) => f.endsWith(".jsonl"));
+          const cfgDir = childEnv.CLAUDE_CONFIG_DIR || path108.join(os69.homedir(), ".claude");
+          const projectDir = path108.join(cfgDir, "projects", encodeCwd(cwd));
+          const hasPriorConversation = fs94.existsSync(projectDir) && fs94.readdirSync(projectDir).some((f) => f.endsWith(".jsonl"));
           if (hasPriorConversation) {
             childEnv.CODEAM_RESUME_LATEST = "1";
             log.info(
@@ -51620,7 +52112,7 @@ var HostAgentSupervisor = class {
   fallbackResumeTarget() {
     const session = getActiveSession();
     if (!session || !session.pluginId || !session.pollSecret || !session.agent) return null;
-    const cwd = session.cwd && fs91.existsSync(session.cwd) ? session.cwd : process.cwd();
+    const cwd = session.cwd && fs94.existsSync(session.cwd) ? session.cwd : process.cwd();
     if (isFilesystemRoot(cwd)) {
       log.warn(
         "host-agent",
@@ -51660,7 +52152,7 @@ var HostAgentSupervisor = class {
       log.warn("host-agent", `self_hosted_resume ${sessionId.slice(0, 8)}: no saved pairing on this box`);
       return;
     }
-    if (!session.cwd || !fs91.existsSync(session.cwd)) {
+    if (!session.cwd || !fs94.existsSync(session.cwd)) {
       log.warn("host-agent", `self_hosted_resume ${sessionId.slice(0, 8)}: workspace is gone`);
       return;
     }
@@ -51702,7 +52194,7 @@ var HostAgentSupervisor = class {
       const persisted = new Map((this.sessionStore.load() ?? []).map((r) => [r.deployId, r.agent]));
       for (const c2 of this.children.values()) persisted.set(c2.deployId, c2.agent);
       return this.listSavedSessions().map((s) => ({ s, deployId: deployIdFromWorkspace(s.cwd) })).filter(
-        (x) => x.deployId !== null && !!x.s.cwd && fs91.existsSync(x.s.cwd)
+        (x) => x.deployId !== null && !!x.s.cwd && fs94.existsSync(x.s.cwd)
       ).map(({ s, deployId }) => {
         const agent = persisted.get(deployId);
         return { deployId, sessionId: s.id, ...agent ? { agent } : {} };
@@ -51754,7 +52246,7 @@ var HostAgentSupervisor = class {
     if (this.children.has(deployId)) return;
     const st3 = this.resumeStateFor(target);
     try {
-      const cwd = fs91.existsSync(target.cwd) ? target.cwd : process.cwd();
+      const cwd = fs94.existsSync(target.cwd) ? target.cwd : process.cwd();
       const proc = this.resumeSpawner(
         { ...readHouseProxyChildEnv(deployId), CODEAM_RESUME_SESSION_ID: session.id },
         cwd
@@ -51781,7 +52273,7 @@ var HostAgentSupervisor = class {
           return;
         }
         if (tracked && signal) {
-          this.onResumeChildExit(target, 128 + (os67.constants.signals[signal] ?? 9), `signal ${signal}`);
+          this.onResumeChildExit(target, 128 + (os69.constants.signals[signal] ?? 9), `signal ${signal}`);
           return;
         }
         log.warn(
@@ -51824,7 +52316,7 @@ var HostAgentSupervisor = class {
     if (Date.now() - child.startedAt < CRASH_RESPAWN_MIN_UPTIME_MS) return false;
     const session = pickSavedSessionForWorkspace(this.listSavedSessions(), child.cwd);
     if (!session) return false;
-    const exitCode = typeof code === "number" ? code : 128 + (signal ? os67.constants.signals[signal] ?? 9 : 9);
+    const exitCode = typeof code === "number" ? code : 128 + (signal ? os69.constants.signals[signal] ?? 9 : 9);
     log.warn(
       "host-agent",
       `session deploy=${child.deployId.slice(0, 8)} died (${signal ?? code}) after ${Math.round((Date.now() - child.startedAt) / 1e3)}s \u2014 respawning it (resume)`
@@ -51973,12 +52465,12 @@ var HostAgentSupervisor = class {
       this.untrackChild(deployId);
     }
     const dirs = [
-      path105.join(selfHostedWorkspaceRoot(), deployId),
-      path105.join(os67.homedir(), ".codeam", "house-claude", deployId)
+      path108.join(selfHostedWorkspaceRoot(), deployId),
+      path108.join(os69.homedir(), ".codeam", "house-claude", deployId)
     ];
     for (const dir of dirs) {
       try {
-        fs91.rmSync(dir, { recursive: true, force: true });
+        fs94.rmSync(dir, { recursive: true, force: true });
       } catch (err) {
         log.warn(
           "host-agent",
@@ -52056,13 +52548,19 @@ async function resolveHostIdentity(enrollToken) {
 }
 async function hostAgent(args2 = []) {
   installRelayCrashGuards();
+  if (await superviseCurrent({ args: args2 }) === "supervised") return;
   const tokenArg = args2.find((a) => a.startsWith("--token="));
   const enrollToken = (tokenArg ? tokenArg.slice("--token=".length).trim() : "") || process.env.CODEAM_ENROLL_TOKEN || void 0;
   const identity = await resolveHostIdentity(enrollToken);
   if (!identity) {
-    throw new Error(
-      "host-agent: no sealed host identity and no enroll token. Re-run the installer from the app (tokens expire after 15 min)."
+    log.error(
+      "host-agent",
+      "no sealed host identity and no enroll token. Re-run the installer from the app (tokens expire after 15 min)."
     );
+    process.stderr.write(
+      "host-agent: no sealed host identity and no enroll token. Re-run the installer from the app (tokens expire after 15 min).\n"
+    );
+    process.exit(EXIT_HOST_NOT_ENROLLED);
   }
   const supervisor = new HostAgentSupervisor(identity);
   supervisor.start();
@@ -52072,6 +52570,7 @@ async function hostAgent(args2 = []) {
   };
   process.once("SIGINT", shutdown);
   process.once("SIGTERM", shutdown);
+  if (args2.includes(SUPERVISED_FLAG)) bindSupervisedLifecycle(process, shutdown);
   await new Promise(() => {
   });
 }
@@ -52138,8 +52637,8 @@ async function invite() {
 var import_node_dns = require("dns");
 var import_node_util11 = require("util");
 var import_node_crypto17 = require("crypto");
-var fs92 = __toESM(require("fs"));
-var path106 = __toESM(require("path"));
+var fs95 = __toESM(require("fs"));
+var path109 = __toESM(require("path"));
 var import_picocolors14 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util11.promisify)(import_node_dns.resolve);
 async function checkDns(apiBase2) {
@@ -52195,13 +52694,13 @@ async function checkHealth(apiBase2) {
   }
 }
 function checkConfigDir() {
-  const dir = path106.join(require("os").homedir(), ".codeam");
+  const dir = path109.join(require("os").homedir(), ".codeam");
   try {
-    fs92.mkdirSync(dir, { recursive: true, mode: 448 });
-    const probe = path106.join(dir, ".doctor-probe");
-    fs92.writeFileSync(probe, "ok", { mode: 384 });
-    const read = fs92.readFileSync(probe, "utf8");
-    fs92.unlinkSync(probe);
+    fs95.mkdirSync(dir, { recursive: true, mode: 448 });
+    const probe = path109.join(dir, ".doctor-probe");
+    fs95.writeFileSync(probe, "ok", { mode: 384 });
+    const read = fs95.readFileSync(probe, "utf8");
+    fs95.unlinkSync(probe);
     if (read !== "ok") throw new Error("write/read round-trip mismatch");
     return {
       id: "config-dir",
@@ -52241,9 +52740,9 @@ function checkSessions() {
   }
 }
 function checkAgentBinaries() {
-  const os70 = createOsStrategy();
+  const os72 = createOsStrategy();
   return getEnabledAgents().map((meta) => {
-    const found = os70.findInPath(meta.binaryName);
+    const found = os72.findInPath(meta.binaryName);
     return {
       id: `agent-${meta.id}`,
       label: `Agent binary: ${meta.displayName} (${meta.binaryName})`,
@@ -52265,7 +52764,7 @@ function checkNodePty() {
       detail: "not required on this platform"
     };
   }
-  const vendoredPath = path106.join(__dirname, "vendor", "node-pty");
+  const vendoredPath = path109.join(__dirname, "vendor", "node-pty");
   for (const target of [vendoredPath, "node-pty"]) {
     try {
       require(target);
@@ -52307,7 +52806,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.76.10" : "0.0.0-dev";
+  const cliVersion = true ? "2.76.11" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto17.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -52504,7 +53003,7 @@ async function completion(args2) {
 }
 
 // src/integrations/mcp-run.ts
-var import_node_child_process38 = require("child_process");
+var import_node_child_process39 = require("child_process");
 
 // src/integrations/launcher-env.ts
 var LAUNCHER_ENV = Object.freeze({
@@ -52588,7 +53087,7 @@ function resolveDelivery(id) {
 function commandExists(command2) {
   try {
     const probe = process.platform === "win32" ? "where" : "which";
-    (0, import_node_child_process38.execFileSync)(probe, [command2], { stdio: "ignore" });
+    (0, import_node_child_process39.execFileSync)(probe, [command2], { stdio: "ignore" });
     return true;
   } catch {
     return false;
@@ -52621,7 +53120,7 @@ function ensureCommand(command2) {
   }
   if (command2 === "uvx") {
     try {
-      (0, import_node_child_process38.execSync)("curl -LsSf https://astral.sh/uv/install.sh | sh", {
+      (0, import_node_child_process39.execSync)("curl -LsSf https://astral.sh/uv/install.sh | sh", {
         stdio: ["ignore", process.stderr, process.stderr],
         timeout: 18e4,
         env: { ...process.env, UV_NO_MODIFY_PATH: "1" }
@@ -52630,7 +53129,7 @@ function ensureCommand(command2) {
     }
     if (resolveLauncherPath(command2) !== command2) return;
     try {
-      (0, import_node_child_process38.execSync)("python3 -m pip install --user --quiet uv", {
+      (0, import_node_child_process39.execSync)("python3 -m pip install --user --quiet uv", {
         stdio: ["ignore", process.stderr, process.stderr],
         timeout: 18e4
       });
@@ -52708,7 +53207,7 @@ async function mcpRun(args2) {
 }
 
 // src/integrations/mcp-warm.ts
-var import_node_child_process39 = require("child_process");
+var import_node_child_process40 = require("child_process");
 function specOf(delivery) {
   if (!delivery.command) return null;
   const spec = (delivery.args ?? []).find((a) => !a.startsWith("-"));
@@ -52751,8 +53250,8 @@ var WARM_PACKAGE_TIMEOUT_MS = 12e4;
 var WARM_TOTAL_BUDGET_MS = 10 * 6e4;
 var WARM_CONCURRENCY = 4;
 function runCapturing(command2, args2, timeoutMs) {
-  return new Promise((resolve12) => {
-    const child = (0, import_node_child_process39.spawn)(command2, args2, {
+  return new Promise((resolve14) => {
+    const child = (0, import_node_child_process40.spawn)(command2, args2, {
       env: { ...process.env, ...LAUNCHER_ENV },
       stdio: ["ignore", "ignore", "pipe"],
       // `npx`/`uv` are `.cmd` shims on Windows; Node ≥ 20.12 refuses to spawn a
@@ -52766,15 +53265,15 @@ function runCapturing(command2, args2, timeoutMs) {
     child.stderr?.on("data", (c2) => stderr += c2);
     const timer = setTimeout(() => {
       child.kill("SIGKILL");
-      resolve12({ status: null, stderr, error: new Error(`spawn ${command2} ETIMEDOUT`) });
+      resolve14({ status: null, stderr, error: new Error(`spawn ${command2} ETIMEDOUT`) });
     }, timeoutMs);
     child.on("error", (error) => {
       clearTimeout(timer);
-      resolve12({ status: null, stderr, error });
+      resolve14({ status: null, stderr, error });
     });
     child.on("close", (status2) => {
       clearTimeout(timer);
-      resolve12({ status: status2, stderr });
+      resolve14({ status: status2, stderr });
     });
   });
 }
@@ -52831,7 +53330,7 @@ async function mcpWarm(argv = [], opts = {}) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.76.10" : "unknown";
+  const v = true ? "2.76.11" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 
@@ -52963,32 +53462,17 @@ function tryShowSubcommandHelp(cmd, args2) {
 }
 var _subcommandHelpKeys = Object.keys(HELPS);
 
-// src/exit-codes.ts
-var EXIT_OK = 0;
-var EXIT_FAILURE = 1;
-var EXIT_USAGE = 2;
-var EXIT_NEEDS_PAIRING = 3;
-var EXIT_SIGINT = 130;
-var EXIT_SIGTERM = 143;
-var EXIT_CODE_NAMES = {
-  [EXIT_OK]: "ok",
-  [EXIT_FAILURE]: "failure",
-  [EXIT_USAGE]: "usage_error",
-  [EXIT_NEEDS_PAIRING]: "needs_pairing",
-  [EXIT_SIGINT]: "sigint",
-  [EXIT_SIGTERM]: "sigterm"
-};
-
 // src/index.ts
-var os69 = __toESM(require("os"));
+var os71 = __toESM(require("os"));
 if (!process.env.HOME) {
   try {
-    const home = os69.homedir();
+    const home = os71.homedir();
     if (home) process.env.HOME = home;
   } catch {
   }
 }
 loadCodespaceEnv();
+registerRunningVersion();
 var [, , command, ...args] = process.argv;
 async function main() {
   const isMetaCommand = command === "--version" || command === "-v" || command === "version" || command === "--help" || command === "-h" || command === "help";