codeam-cli 2.76.11 → 2.76.13

package/dist/index.js

@@ -357,8 +357,8 @@ function defaultSpawn(timeoutMs) {
   });
 }
 function resolveConvexBin(cwd) {
-  const local = path110.join(cwd, "node_modules", ".bin", process.platform === "win32" ? "convex.cmd" : "convex");
-  if (fs96.existsSync(local)) return { cmd: local, args: [] };
+  const local = path112.join(cwd, "node_modules", ".bin", process.platform === "win32" ? "convex.cmd" : "convex");
+  if (fs98.existsSync(local)) return { cmd: local, args: [] };
   return { cmd: "npx", args: ["--yes", "convex"] };
 }
 function redact(text, key) {
@@ -489,13 +489,13 @@ async function runConvexAdminMcp(client3, id) {
   });
   await server.connect(new StdioServerTransport());
 }
-var import_node_child_process38, fs96, path110, TOOLS;
+var import_node_child_process38, fs98, path112, TOOLS;
 var init_convex_admin_mcp = __esm({
   "src/integrations/convex-admin-mcp.ts"() {
     "use strict";
     import_node_child_process38 = require("child_process");
-    fs96 = __toESM(require("fs"));
-    path110 = __toESM(require("path"));
+    fs98 = __toESM(require("fs"));
+    path112 = __toESM(require("path"));
     TOOLS = [
       {
         name: "tables",
@@ -3595,11 +3595,11 @@ function quiet(fn) {
     log.debug(TAG, "ignored sync error", err);
   }
 }
-function rmIfExistsQuiet(path112) {
+function rmIfExistsQuiet(path114) {
   try {
-    fs2.rmSync(path112, { force: true });
+    fs2.rmSync(path114, { force: true });
   } catch (err) {
-    log.debug(TAG, `rmIfExists failed for ${path112}`, err);
+    log.debug(TAG, `rmIfExists failed for ${path114}`, err);
   }
 }
 function killQuiet(target, signal = "SIGTERM") {
@@ -3765,9 +3765,9 @@ var _default = makeConfig();
 var { getConfig, ensurePluginId, addSession, removeSession, setActiveSession, getActiveSession, getActiveSessionForAgent, setDisable1mContext, setSessionAgent, setSquadAuto, getSquadAuto, clearAll, saveCliConfig, loadCliConfig } = _default;
 
 // src/commands/pair-auto.ts
-var fs64 = __toESM(require("fs"));
-var os47 = __toESM(require("os"));
-var path73 = __toESM(require("path"));
+var fs65 = __toESM(require("fs"));
+var os48 = __toESM(require("os"));
+var path74 = __toESM(require("path"));
 var import_crypto4 = require("crypto");
 
 // src/services/telemetry.service.ts
@@ -3803,8 +3803,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? (0, import_pat
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path112) {
-  return path112.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path114) {
+  return path114.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 
 // ../../node_modules/@posthog/core/dist/error-tracking/index.mjs
@@ -6537,13 +6537,13 @@ var PostHogCoreStateless = class {
       sentFromRoute += batchMessages.length;
     }
   }
-  async _sendOtlpBatch({ path: path112, payload }) {
+  async _sendOtlpBatch({ path: path114, payload }) {
     if (this.disabled) return {
       kind: "fatal",
       error: new Error("The client is disabled")
     };
     const serialized = JSON.stringify(payload);
-    const url2 = `${this.host}/i/v1/${path112}?token=${encodeURIComponent(this.apiKey)}`;
+    const url2 = `${this.host}/i/v1/${path114}?token=${encodeURIComponent(this.apiKey)}`;
     const gzippedPayload = this.disableCompression ? null : await this.compressPayload(serialized);
     const fetchOptions = {
       method: "POST",
@@ -7783,14 +7783,14 @@ async function addSourceContext(frames, openSourceFile = import_promises.open, l
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-async function openRegularSourceFile(path112, openSourceFile, logger) {
+async function openRegularSourceFile(path114, openSourceFile, logger) {
   let fileHandle;
   let isValid = false;
   try {
-    fileHandle = await openSourceFile(path112, import_node_fs.constants.O_RDONLY | import_node_fs.constants.O_NONBLOCK);
+    fileHandle = await openSourceFile(path114, import_node_fs.constants.O_RDONLY | import_node_fs.constants.O_NONBLOCK);
     const fileStat = await fileHandle.stat();
     if (!fileStat.isFile()) return;
-    if (fileStat.size > MAX_CONTEXTLINES_FILE_SIZE) return void logger?.debug(`Skipping source context for oversized file ${path112}: ${fileStat.size} bytes exceeds ${MAX_CONTEXTLINES_FILE_SIZE}`);
+    if (fileStat.size > MAX_CONTEXTLINES_FILE_SIZE) return void logger?.debug(`Skipping source context for oversized file ${path114}: ${fileStat.size} bytes exceeds ${MAX_CONTEXTLINES_FILE_SIZE}`);
     isValid = true;
     return fileHandle;
   } catch {
@@ -7800,8 +7800,8 @@ async function openRegularSourceFile(path112, openSourceFile, logger) {
     });
   }
 }
-async function getContextLinesFromFile(path112, ranges, output, cacheKey, openSourceFile, logger) {
-  const fileHandle = await openRegularSourceFile(path112, openSourceFile, logger);
+async function getContextLinesFromFile(path114, ranges, output, cacheKey, openSourceFile, logger) {
+  const fileHandle = await openRegularSourceFile(path114, openSourceFile, logger);
   if (void 0 === fileHandle) return void LRU_FILE_CONTENTS_FS_READ_FAILED.set(cacheKey, 1);
   const openedFileHandle = fileHandle;
   return new Promise((resolve14) => {
@@ -7903,22 +7903,22 @@ function clearLineContext(frame) {
   delete frame.context_line;
   delete frame.post_context;
 }
-function shouldSkipContextLinesForFile(path112) {
-  return path112.startsWith("node:") || path112.endsWith(".min.js") || path112.endsWith(".min.cjs") || path112.endsWith(".min.mjs") || path112.startsWith("data:");
+function shouldSkipContextLinesForFile(path114) {
+  return path114.startsWith("node:") || path114.endsWith(".min.js") || path114.endsWith(".min.cjs") || path114.endsWith(".min.mjs") || path114.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame) {
   if (void 0 !== frame.lineno && frame.lineno > MAX_CONTEXTLINES_LINENO) return true;
   if (void 0 !== frame.colno && frame.colno > MAX_CONTEXTLINES_COLNO) return true;
   return false;
 }
-function makeSourceCacheKey(path112, basePath) {
-  if ((0, import_node_path.isAbsolute)(path112)) return JSON.stringify([
+function makeSourceCacheKey(path114, basePath) {
+  if ((0, import_node_path.isAbsolute)(path114)) return JSON.stringify([
     null,
-    path112
+    path114
   ]);
   return void 0 === basePath ? void 0 : JSON.stringify([
     basePath,
-    path112
+    path114
   ]);
 }
 function rangeExistsInContentCache(cacheKey, range) {
@@ -10579,7 +10579,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.76.11" : "0.0.0-dev",
+    cliVersion: true ? "2.76.13" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -10824,7 +10824,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.76.11",
+  version: "2.76.13",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -12160,7 +12160,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.76.11" ? { ideVersion: "2.76.11" } : {}
+      ..."2.76.13" ? { ideVersion: "2.76.13" } : {}
     };
     try {
       const res = await _postJson(`${API_BASE2}/api/plugin/heartbeat`, body);
@@ -13636,9 +13636,9 @@ function closeAllTerminals() {
 }
 
 // src/commands/start/handlers.ts
-var fs63 = __toESM(require("fs"));
-var os46 = __toESM(require("os"));
-var path72 = __toESM(require("path"));
+var fs64 = __toESM(require("fs"));
+var os47 = __toESM(require("os"));
+var path73 = __toESM(require("path"));
 var import_crypto3 = require("crypto");
 var import_child_process25 = require("child_process");
 
@@ -17237,10 +17237,10 @@ function buildForPlatform(platform3) {
 var import_node_crypto5 = require("crypto");
 
 // src/agents/claude/resolver.ts
-function buildClaudeLaunch(extraArgs = [], os72 = createOsStrategy()) {
-  const found = os72.findInPath("claude") ?? os72.findInPath("claude-code");
+function buildClaudeLaunch(extraArgs = [], os74 = createOsStrategy()) {
+  const found = os74.findInPath("claude") ?? os74.findInPath("claude-code");
   if (!found) return null;
-  return os72.buildLaunch(found, extraArgs);
+  return os74.buildLaunch(found, extraArgs);
 }
 
 // src/agents/claude/installer.ts
@@ -18066,8 +18066,8 @@ var ClaudeRuntimeStrategy = class {
   meta = getAgent("claude");
   mode = "interactive";
   os;
-  constructor(os72) {
-    this.os = os72;
+  constructor(os74) {
+    this.os = os74;
   }
   /**
    * Claude Code's react-ink TUI enables bracketed-paste mode at
@@ -19167,8 +19167,8 @@ function codexCredentialLocator() {
 function codexLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os72 = createOsStrategy();
-      return os72.findInPath("codex") !== null;
+      const os74 = createOsStrategy();
+      return os74.findInPath("codex") !== null;
     },
     launch() {
       return (0, import_node_child_process3.spawn)("codex", ["login"], { stdio: "inherit" });
@@ -19191,8 +19191,8 @@ var CodexRuntimeStrategy = class {
   meta = getAgent("codex");
   mode = "interactive";
   os;
-  constructor(os72) {
-    this.os = os72;
+  constructor(os74) {
+    this.os = os74;
   }
   async prepareLaunch() {
     let binary = this.os.findInPath("codex");
@@ -19303,12 +19303,12 @@ var CodexRuntimeStrategy = class {
     });
   }
 };
-function resolveNpm(os72) {
-  return os72.id === "win32" ? "npm.cmd" : "npm";
+function resolveNpm(os74) {
+  return os74.id === "win32" ? "npm.cmd" : "npm";
 }
-async function installCodexViaNpm(os72) {
+async function installCodexViaNpm(os74) {
   return new Promise((resolve14, reject) => {
-    const proc = (0, import_node_child_process4.spawn)(resolveNpm(os72), ["install", "-g", "@openai/codex"], {
+    const proc = (0, import_node_child_process4.spawn)(resolveNpm(os74), ["install", "-g", "@openai/codex"], {
       stdio: "inherit"
     });
     proc.on("close", (code) => {
@@ -19325,16 +19325,16 @@ async function installCodexViaNpm(os72) {
     });
   });
 }
-function augmentNpmGlobalBin(os72) {
+function augmentNpmGlobalBin(os74) {
   try {
-    const result = (0, import_node_child_process4.spawnSync)(resolveNpm(os72), ["prefix", "-g"], {
+    const result = (0, import_node_child_process4.spawnSync)(resolveNpm(os74), ["prefix", "-g"], {
       stdio: ["ignore", "pipe", "ignore"]
     });
     if (result.status !== 0) return;
     const prefix = result.stdout.toString().trim();
     if (!prefix) return;
-    const binDir = os72.id === "win32" ? prefix : path26.join(prefix, "bin");
-    os72.augmentPath([binDir]);
+    const binDir = os74.id === "win32" ? prefix : path26.join(prefix, "bin");
+    os74.augmentPath([binDir]);
   } catch {
   }
 }
@@ -19528,10 +19528,10 @@ function manualInstallHint(runner, tools) {
   const argv = osPackageInstallArgv(detectPackageManager(runner), [...tools]);
   return argv ? `\`sudo ${argv.join(" ")}\`` : `your package manager (e.g. \`${pkgs}\`)`;
 }
-function writeUnzipShim(os72, runner) {
+function writeUnzipShim(os74, runner) {
   const python = ["python3", "python"].find((p2) => runner.which(p2));
   if (!python) return null;
-  const dir = os72.scratchPath("codeam-cr-prereq");
+  const dir = os74.scratchPath("codeam-cr-prereq");
   const shim = path28.join(dir, "unzip");
   const script = `#!/bin/sh
 set -e
@@ -19553,9 +19553,9 @@ exec ${python} -m zipfile -e "$archive" "$dest"
   (0, import_node_fs6.chmodSync)(shim, 448);
   return dir;
 }
-async function ensureInstallPrerequisites(os72, deps = {}) {
+async function ensureInstallPrerequisites(os74, deps = {}) {
   const runner = deps.runner ?? defaultOsRunner;
-  const missing = REQUIRED_TOOLS.filter((t2) => os72.findInPath(t2) === null);
+  const missing = REQUIRED_TOOLS.filter((t2) => os74.findInPath(t2) === null);
   if (missing.length === 0) return { ok: true, extraPath: [] };
   log.info(
     "coderabbit",
@@ -19574,10 +19574,10 @@ async function ensureInstallPrerequisites(os72, deps = {}) {
       );
     }
   }
-  const stillMissing = REQUIRED_TOOLS.filter((t2) => os72.findInPath(t2) === null);
+  const stillMissing = REQUIRED_TOOLS.filter((t2) => os74.findInPath(t2) === null);
   if (stillMissing.length === 0) return { ok: true, extraPath: [] };
   if (stillMissing.length === 1 && stillMissing[0] === "unzip") {
-    const shimDir = writeUnzipShim(os72, runner);
+    const shimDir = writeUnzipShim(os74, runner);
     if (shimDir) {
       log.info("coderabbit", "unzip is unavailable \u2014 using a scoped python zipfile shim");
       return { ok: true, extraPath: [shimDir] };
@@ -19640,15 +19640,15 @@ function summarizeInstallFailure(output) {
   }
   return lines.length > 0 ? lines[lines.length - 1] : null;
 }
-async function ensureCoderabbitInstalled(os72, deps = {}) {
-  if (os72.findInPath("coderabbit")) return { ok: true };
-  if (os72.id === "win32") {
+async function ensureCoderabbitInstalled(os74, deps = {}) {
+  if (os74.findInPath("coderabbit")) return { ok: true };
+  if (os74.id === "win32") {
     return {
       ok: false,
       error: "CodeRabbit on Windows requires WSL. Install the CLI inside your WSL distribution (curl -fsSL https://cli.coderabbit.ai/install.sh | sh), then try again."
     };
   }
-  const prereq = await ensureInstallPrerequisites(os72, deps);
+  const prereq = await ensureInstallPrerequisites(os74, deps);
   if (!prereq.ok) return { ok: false, error: prereq.error };
   const env = { ...process.env };
   if (prereq.extraPath.length > 0) {
@@ -19657,8 +19657,8 @@ async function ensureCoderabbitInstalled(os72, deps = {}) {
   log.info("coderabbit", "CodeRabbit CLI not found \u2014 installing via the official script");
   const run3 = deps.runInstallScript ?? defaultRunInstallScript;
   const { code, output } = await run3(env);
-  os72.augmentPath([`${os72.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
-  const binary = os72.findInPath("coderabbit");
+  os74.augmentPath([`${os74.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
+  const binary = os74.findInPath("coderabbit");
   const detail = summarizeInstallFailure(output);
   if (binary !== null) {
     if (code === 0) return { ok: true };
@@ -19712,10 +19712,10 @@ function coderabbitCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function coderabbitLoginLauncher(os72) {
+function coderabbitLoginLauncher(os74) {
   return {
     async ensureInstalled() {
-      const result = await ensureCoderabbitInstalled(os72);
+      const result = await ensureCoderabbitInstalled(os74);
       if (!result.ok && result.error) console.error(`
   \u2717 ${result.error}
 `);
@@ -19775,8 +19775,8 @@ function pickLine(obj) {
 function toHunk(raw, groupSeverity) {
   if (!raw || typeof raw !== "object") return null;
   const o = raw;
-  const path112 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
-  if (!path112) return null;
+  const path114 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
+  if (!path114) return null;
   const message = asString(
     pick(o, [
       "comment",
@@ -19793,7 +19793,7 @@ function toHunk(raw, groupSeverity) {
   const severity = normSeverity(pick(o, ["severity", "level", "priority", "impact"])) ?? normSeverity(groupSeverity);
   const locObj = pick(o, ["location"]) ?? o;
   return {
-    path: path112.trim(),
+    path: path114.trim(),
     line: pickLine(o) ?? pickLine(locObj),
     severity,
     message: (title && message ? `${title}: ${message}` : title || message).trim() || "(no message)"
@@ -19876,10 +19876,10 @@ function parsePlain(stdout) {
   for (const line of stdout.split(/\r?\n/)) {
     const m = line.match(HUNK_LINE_RE);
     if (!m) continue;
-    const [, path112, lineNo, sevToken, message] = m;
-    if (!path112 || !lineNo || !message) continue;
+    const [, path114, lineNo, sevToken, message] = m;
+    if (!path114 || !lineNo || !message) continue;
     hunks.push({
-      path: path112.trim(),
+      path: path114.trim(),
       line: Number(lineNo),
       severity: sevToken ? SEVERITY_MAP[sevToken.toLowerCase()] : void 0,
       message: message.trim().replace(/^[*-]\s+/, "")
@@ -19939,8 +19939,8 @@ var CoderabbitRuntimeStrategy = class {
   meta = getAgent("coderabbit");
   mode = "batch";
   os;
-  constructor(os72) {
-    this.os = os72;
+  constructor(os74) {
+    this.os = os74;
   }
   getDefaultArgs() {
     return ["review", "--agent"];
@@ -20211,10 +20211,10 @@ function cursorCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function cursorLoginLauncher(os72) {
+function cursorLoginLauncher(os74) {
   return {
     async ensureInstalled() {
-      if (os72.findInPath("cursor-agent")) return true;
+      if (os74.findInPath("cursor-agent")) return true;
       console.error(
         "\n  \u2717 cursor-agent binary not on PATH.\n    Install Cursor (https://cursor.com/) and ensure the CLI\n    plugin is enabled, then re-run `codeam link cursor`.\n"
       );
@@ -20278,8 +20278,8 @@ var CursorRuntimeStrategy = class {
   meta = getAgent("cursor");
   mode = "interactive";
   os;
-  constructor(os72) {
-    this.os = os72;
+  constructor(os74) {
+    this.os = os74;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("cursor-agent");
@@ -20497,10 +20497,10 @@ function aiderCredentialLocator() {
     validate: validateNonEmptyCredential
   };
 }
-function aiderLoginLauncher(os72) {
+function aiderLoginLauncher(os74) {
   return {
     async ensureInstalled() {
-      if (os72.findInPath("aider")) return true;
+      if (os74.findInPath("aider")) return true;
       console.error(
         "\n  \u2717 aider binary not on PATH.\n    Install Aider:\n      pip install aider-chat\n    then re-run `codeam link aider`.\n"
       );
@@ -20510,7 +20510,7 @@ function aiderLoginLauncher(os72) {
       console.error(
         "\n  Aider has no interactive login flow.\n    Set ANTHROPIC_API_KEY or OPENAI_API_KEY in your shell,\n    or re-run `codeam link aider --api-key=<your-key>`.\n"
       );
-      return (0, import_node_child_process11.spawn)(os72.id === "win32" ? "cmd.exe" : "sh", os72.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
+      return (0, import_node_child_process11.spawn)(os74.id === "win32" ? "cmd.exe" : "sh", os74.id === "win32" ? ["/c", "exit", "0"] : ["-c", "exit 0"], {
         stdio: "ignore"
       });
     }
@@ -20629,6 +20629,15 @@ async function waitForClaudeNativeBinary(opts = {}) {
   }
   return resolveClaudeNativeBinary(deps);
 }
+function prefetchIntoPageCache(file, deps = {}) {
+  const createReadStream2 = deps.createReadStream ?? import_fs.default.createReadStream;
+  try {
+    const stream = createReadStream2(file, { highWaterMark: 4 * 1024 * 1024 });
+    stream.on("error", () => void 0);
+    stream.resume();
+  } catch {
+  }
+}
 function isCommandOnPath(cmd, probe = defaultWhich) {
   return probe(cmd);
 }
@@ -20785,8 +20794,8 @@ var AiderRuntimeStrategy = class {
   meta = getAgent("aider");
   mode = "interactive";
   os;
-  constructor(os72) {
-    this.os = os72;
+  constructor(os74) {
+    this.os = os74;
   }
   async prepareLaunch() {
     augmentUserLocalBinPaths();
@@ -20919,8 +20928,8 @@ function geminiCredentialLocator() {
 function geminiLoginLauncher() {
   return {
     async ensureInstalled() {
-      const os72 = createOsStrategy();
-      return os72.findInPath("gemini") !== null;
+      const os74 = createOsStrategy();
+      return os74.findInPath("gemini") !== null;
     },
     launch() {
       return (0, import_node_child_process12.spawn)("gemini", ["auth", "login"], { stdio: "inherit" });
@@ -21110,8 +21119,8 @@ var GeminiRuntimeStrategy = class {
   meta = getAgent("gemini");
   mode = "interactive";
   os;
-  constructor(os72) {
-    this.os = os72;
+  constructor(os74) {
+    this.os = os74;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("gemini");
@@ -21404,8 +21413,8 @@ var KimiRuntimeStrategy = class {
   meta = getAgent("kimi");
   mode = "interactive";
   os;
-  constructor(os72) {
-    this.os = os72;
+  constructor(os74) {
+    this.os = os74;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("kimi");
@@ -21549,8 +21558,8 @@ var OpencodeRuntimeStrategy = class {
   meta = getAgent("opencode");
   mode = "interactive";
   os;
-  constructor(os72) {
-    this.os = os72;
+  constructor(os74) {
+    this.os = os74;
   }
   async prepareLaunch() {
     const binary = this.os.findInPath("opencode");
@@ -21636,20 +21645,20 @@ var OpencodeRuntimeStrategy = class {
 
 // src/agents/registry.ts
 var runtimeBuilders = {
-  claude: (os72) => new ClaudeRuntimeStrategy(os72),
-  codex: (os72) => new CodexRuntimeStrategy(os72),
-  coderabbit: (os72) => new CoderabbitRuntimeStrategy(os72),
-  cursor: (os72) => new CursorRuntimeStrategy(os72),
-  aider: (os72) => new AiderRuntimeStrategy(os72),
-  gemini: (os72) => new GeminiRuntimeStrategy(os72),
-  kimi: (os72) => new KimiRuntimeStrategy(os72),
-  opencode: (os72) => new OpencodeRuntimeStrategy(os72)
+  claude: (os74) => new ClaudeRuntimeStrategy(os74),
+  codex: (os74) => new CodexRuntimeStrategy(os74),
+  coderabbit: (os74) => new CoderabbitRuntimeStrategy(os74),
+  cursor: (os74) => new CursorRuntimeStrategy(os74),
+  aider: (os74) => new AiderRuntimeStrategy(os74),
+  gemini: (os74) => new GeminiRuntimeStrategy(os74),
+  kimi: (os74) => new KimiRuntimeStrategy(os74),
+  opencode: (os74) => new OpencodeRuntimeStrategy(os74)
 };
 var deployBuilders = {
   claude: () => new ClaudeDeployStrategy(),
   codex: () => new CodexDeployStrategy()
 };
-function createAgentStrategy(agent, os72 = createOsStrategy()) {
+function createAgentStrategy(agent, os74 = createOsStrategy()) {
   if (!AGENT_REGISTRY[agent]?.enabled) {
     throw new Error(
       `Agent "${agent}" is not supported in this codeam-cli version. Upgrade with 'npm i -g codeam-cli@latest'.`
@@ -21659,10 +21668,10 @@ function createAgentStrategy(agent, os72 = createOsStrategy()) {
   if (!build) {
     throw new Error(`No runtime strategy registered for agent "${agent}"`);
   }
-  return build(os72);
+  return build(os74);
 }
-function createInteractiveAgentStrategy(agent, os72 = createOsStrategy()) {
-  const s = createAgentStrategy(agent, os72);
+function createInteractiveAgentStrategy(agent, os74 = createOsStrategy()) {
+  const s = createAgentStrategy(agent, os74);
   if (s.mode !== "interactive") {
     throw new Error(
       `Agent "${agent}" is a batch agent; use createAgentStrategy + .runOneShot for one-shot reviews.`
@@ -22376,8 +22385,8 @@ function collectChangedFiles(cwd) {
   }
   return [...byPath.values()];
 }
-function restoreCoderabbitOauthBlob(os72, value) {
-  const dir = path40.join(os72.homeDir(), ".coderabbit");
+function restoreCoderabbitOauthBlob(os74, value) {
+  const dir = path40.join(os74.homeDir(), ".coderabbit");
   (0, import_node_fs7.mkdirSync)(dir, { recursive: true });
   let file = "auth.json";
   let contents = value.trim();
@@ -22397,26 +22406,26 @@ function installFailureMessage(result) {
   return result.error ?? "CodeRabbit CLI could not be installed";
 }
 async function configureCoderabbit(input, deps = {}) {
-  const os72 = deps.os ?? createOsStrategy();
+  const os74 = deps.os ?? createOsStrategy();
   const ensureInstalled = deps.ensureInstalled ?? ensureCoderabbitInstalled;
   const isLoggedIn = deps.isLoggedIn ?? defaultIsLoggedIn;
   const runOAuth = deps.runOAuthLogin ?? runCoderabbitOAuthLogin;
   const snapshot = deps.snapshotDir ?? (() => snapshotCredentialDir());
   const capture2 = deps.captureCredential ?? ((b) => diffCapturedCredential(b));
   const loginWithApiKey = deps.loginWithApiKey ?? defaultLoginWithApiKey;
-  const home = os72.homeDir();
-  os72.augmentPath(
-    os72.id === "win32" ? [
+  const home = os74.homeDir();
+  os74.augmentPath(
+    os74.id === "win32" ? [
       path40.join(home, ".local", "bin"),
       path40.join(process.env.APPDATA ?? path40.join(home, "AppData", "Roaming"), "npm"),
       path40.join(home, "scoop", "shims")
     ] : [path40.join(home, ".local", "bin"), "/opt/homebrew/bin", "/usr/local/bin"]
   );
-  const installed2 = os72.findInPath("coderabbit") !== null;
+  const installed2 = os74.findInPath("coderabbit") !== null;
   const base = () => ({
     action: input.action,
     supported: true,
-    installed: os72.findInPath("coderabbit") !== null,
+    installed: os74.findInPath("coderabbit") !== null,
     loggedIn: false
   });
   if (input.action === "status") {
@@ -22430,7 +22439,7 @@ async function configureCoderabbit(input, deps = {}) {
     const key = (input.apiKey ?? "").trim();
     if (!key) return { ...res2, error: "No API key provided" };
     if (!res2.installed) {
-      const inst = await ensureInstalled(os72);
+      const inst = await ensureInstalled(os74);
       res2.installed = inst.ok;
       if (!inst.ok) return { ...res2, error: installFailureMessage(inst) };
     }
@@ -22454,7 +22463,7 @@ async function configureCoderabbit(input, deps = {}) {
     }
     if (!res2.installed) {
       deps.onEvent?.({ kind: "installing" });
-      const inst = await ensureInstalled(os72);
+      const inst = await ensureInstalled(os74);
       res2.installed = inst.ok;
       if (!inst.ok) return { ...res2, error: installFailureMessage(inst) };
     }
@@ -22471,7 +22480,7 @@ async function configureCoderabbit(input, deps = {}) {
       return { ...res2, loggedIn: true, linked: true };
     }
     try {
-      restoreCoderabbitOauthBlob(os72, cred.credential);
+      restoreCoderabbitOauthBlob(os74, cred.credential);
     } catch (err) {
       return {
         ...res2,
@@ -22495,7 +22504,7 @@ async function configureCoderabbit(input, deps = {}) {
     const res2 = base();
     if (!installed2) {
       deps.onEvent?.({ kind: "installing" });
-      const inst = await ensureInstalled(os72);
+      const inst = await ensureInstalled(os74);
       res2.installed = inst.ok;
       if (!inst.ok) return { ...res2, error: installFailureMessage(inst) };
     }
@@ -22535,7 +22544,7 @@ async function configureCoderabbit(input, deps = {}) {
   }
   const res = base();
   if (!res.installed) {
-    const inst = await ensureInstalled(os72);
+    const inst = await ensureInstalled(os74);
     res.installed = inst.ok;
     if (!inst.ok) return { ...res, error: installFailureMessage(inst) };
   }
@@ -27400,11 +27409,11 @@ function resolveDoltInstallStrategy(platform3) {
 }
 var DOLT_RELEASE_BASE = "https://github.com/dolthub/dolt/releases/latest/download";
 function doltPlatformTuple(platform3, arch2) {
-  const os72 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
+  const os74 = platform3 === "win32" ? "windows" : platform3 === "darwin" ? "darwin" : "linux";
   const a = arch2 === "x64" ? "amd64" : arch2 === "arm64" ? "arm64" : null;
   if (!a) return null;
-  if (os72 === "windows" && a !== "amd64") return null;
-  return `${os72}-${a}`;
+  if (os74 === "windows" && a !== "amd64") return null;
+  return `${os74}-${a}`;
 }
 function resolveDoltTarballStrategy(targetDir, platform3, arch2) {
   const tuple = doltPlatformTuple(platform3, arch2);
@@ -28285,6 +28294,82 @@ function persistBeadsConfig(cfg) {
   restrictToOwner(file);
 }
 
+// src/beads/provision-lock.ts
+var import_fs7 = __toESM(require("fs"));
+var import_os11 = __toESM(require("os"));
+var import_path9 = __toESM(require("path"));
+var STALE_LOCK_MS = 5 * 6e4;
+function pidIsAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (err) {
+    return err.code === "EPERM";
+  }
+}
+function tryAcquire(lockDir, deps) {
+  const pid = deps.pid ?? process.pid;
+  try {
+    import_fs7.default.mkdirSync(import_path9.default.dirname(lockDir), { recursive: true });
+    import_fs7.default.mkdirSync(lockDir);
+    import_fs7.default.writeFileSync(import_path9.default.join(lockDir, "pid"), String(pid));
+    return true;
+  } catch (err) {
+    if (err.code !== "EEXIST") return true;
+  }
+  let age;
+  try {
+    age = (deps.now ?? Date.now)() - import_fs7.default.statSync(lockDir).mtimeMs;
+  } catch {
+    return tryAcquireOnce(lockDir, deps);
+  }
+  let holder = NaN;
+  try {
+    holder = Number(import_fs7.default.readFileSync(import_path9.default.join(lockDir, "pid"), "utf8"));
+  } catch {
+    if (age <= 1e4) return false;
+  }
+  const alive = Number.isInteger(holder) && (deps.isAlive ?? pidIsAlive)(holder);
+  if (alive && age <= STALE_LOCK_MS) return false;
+  try {
+    import_fs7.default.rmSync(lockDir, { recursive: true, force: true });
+  } catch {
+    return false;
+  }
+  return tryAcquireOnce(lockDir, deps);
+}
+function tryAcquireOnce(lockDir, deps) {
+  try {
+    import_fs7.default.mkdirSync(lockDir);
+    import_fs7.default.writeFileSync(import_path9.default.join(lockDir, "pid"), String(deps.pid ?? process.pid));
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function withBeadsProvisionLock(fn, deps = {}) {
+  const lockDir = import_path9.default.join(deps.dir ?? import_path9.default.join(import_os11.default.homedir(), ".codeam"), "beads-provision.lock");
+  const now = deps.now ?? Date.now;
+  const sleep5 = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const deadline = now() + (deps.timeoutMs ?? 18e4);
+  let held = tryAcquire(lockDir, deps);
+  while (!held && now() < deadline) {
+    await sleep5(500);
+    held = tryAcquire(lockDir, deps);
+  }
+  try {
+    return await fn();
+  } finally {
+    if (held) {
+      try {
+        const owner = Number(import_fs7.default.readFileSync(import_path9.default.join(lockDir, "pid"), "utf8"));
+        if (owner === (deps.pid ?? process.pid)) import_fs7.default.rmSync(lockDir, { recursive: true, force: true });
+      } catch {
+      }
+    }
+  }
+}
+
 // src/beads/wiring.ts
 function beadsKilled() {
   const v = process.env.CODEAM_BEADS_DISABLED;
@@ -28306,15 +28391,18 @@ async function provisionBeadsForStart(ctx) {
     return null;
   }
   const pluginAuthToken = ctx.pluginAuthToken;
+  if (ctx.deferUntil) await ctx.deferUntil.catch(() => void 0);
   let started = null;
   try {
-    started = await startBeads({
-      sessionId: ctx.sessionId,
-      pluginId: ctx.pluginId,
-      pluginAuthToken,
-      cwd: ctx.cwd,
-      agents: ctx.agents
-    });
+    started = await withBeadsProvisionLock(
+      () => startBeads({
+        sessionId: ctx.sessionId,
+        pluginId: ctx.pluginId,
+        pluginAuthToken,
+        cwd: ctx.cwd,
+        agents: ctx.agents
+      })
+    );
   } catch (err) {
     log.warn("beads", "provisionBeadsForStart failed (non-fatal)", err);
     started = null;
@@ -28550,8 +28638,8 @@ function cleanupAttachmentTempFiles() {
 function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
-    const tmpPath = path72.join(os46.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
-    fs63.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
+    const tmpPath = path73.join(os47.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
+    fs64.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     pendingAttachmentFiles.add(tmpPath);
     return tmpPath;
   });
@@ -28796,10 +28884,10 @@ var listFiles = async (ctx, cmd, parsed) => {
   await ctx.relay.sendResult(cmd.id, "completed", result);
 };
 var envReadH = async (ctx, cmd) => {
-  const envPath = path72.join(process.cwd(), ".env");
+  const envPath = path73.join(process.cwd(), ".env");
   await restoreProjectEnvIfMissing(process.cwd(), ctx);
   try {
-    const raw = await fs63.promises.readFile(envPath, "utf8");
+    const raw = await fs64.promises.readFile(envPath, "utf8");
     await ctx.relay.sendResult(cmd.id, "completed", {
       exists: true,
       vars: parseDotenv(raw)
@@ -28828,7 +28916,7 @@ var envParseH = async (ctx, cmd, parsed) => {
   const existing = /* @__PURE__ */ new Map();
   if (!replace) {
     try {
-      const raw = await fs63.promises.readFile(path72.join(process.cwd(), ".env"), "utf8");
+      const raw = await fs64.promises.readFile(path73.join(process.cwd(), ".env"), "utf8");
       for (const v of parseDotenv(raw)) existing.set(v.key, v.value);
     } catch {
     }
@@ -28868,15 +28956,15 @@ var envWriteH = async (ctx, cmd, parsed) => {
     }
     seen2.add(v.key);
   }
-  const envPath = path72.join(process.cwd(), ".env");
-  const tmpPath = path72.join(process.cwd(), ".env.codeam.tmp");
+  const envPath = path73.join(process.cwd(), ".env");
+  const tmpPath = path73.join(process.cwd(), ".env.codeam.tmp");
   try {
-    await fs63.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
-    await fs63.promises.rename(tmpPath, envPath);
+    await fs64.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
+    await fs64.promises.rename(tmpPath, envPath);
     await ctx.relay.sendResult(cmd.id, "completed", { ok: true, count: vars.length });
     void syncProjectEnvUp(process.cwd(), ctx);
   } catch (err) {
-    await fs63.promises.rm(tmpPath, { force: true }).catch(() => void 0);
+    await fs64.promises.rm(tmpPath, { force: true }).catch(() => void 0);
     await ctx.relay.sendResult(cmd.id, "failed", { error: err.message });
   }
 };
@@ -29102,7 +29190,7 @@ var vcsAgentReviewH = async (ctx, cmd, parsed) => {
   });
   const token = ctx.pluginAuthToken;
   void (async () => {
-    const os72 = createOsStrategy();
+    const os74 = createOsStrategy();
     try {
       const report = await reviewPullRequest(
         {
@@ -29111,7 +29199,7 @@ var vcsAgentReviewH = async (ctx, cmd, parsed) => {
           baseBranch: parsed.baseBranch
         },
         {
-          runReview: (input) => new CoderabbitRuntimeStrategy(os72).runOneShot(input),
+          runReview: (input) => new CoderabbitRuntimeStrategy(os74).runOneShot(input),
           runGh: (args2) => defaultRunGh(args2),
           postReport: async (r) => {
             if (!token) return;
@@ -29225,9 +29313,9 @@ var CLI_UPDATE_MAX_ATTEMPTS = 3;
 function buildNpmInstallInvocation(opts) {
   const entryScript = opts?.entryScript ?? process.argv[1] ?? "";
   const execPath = opts?.execPath ?? process.execPath;
-  const exists2 = opts?.existsSync ?? fs63.existsSync;
+  const exists2 = opts?.existsSync ?? fs64.existsSync;
   const platform3 = opts?.platform ?? process.platform;
-  const p2 = platform3 === "win32" ? path72.win32 : path72.posix;
+  const p2 = platform3 === "win32" ? path73.win32 : path73.posix;
   const normalized = entryScript.split(/[\\/]/).join("/");
   const marker = "/lib/node_modules/codeam-cli/";
   const markerIdx = normalized.indexOf(marker);
@@ -29246,7 +29334,7 @@ function isPermissionError(stderr) {
 function resolveGlobalNodeModulesDir(opts) {
   const entryScript = opts?.entryScript ?? process.argv[1] ?? "";
   const platform3 = opts?.platform ?? process.platform;
-  const p2 = platform3 === "win32" ? path72.win32 : path72.posix;
+  const p2 = platform3 === "win32" ? path73.win32 : path73.posix;
   const marker = "/lib/node_modules/codeam-cli/";
   const markerIdx = entryScript.split(/[\\/]/).join("/").indexOf(marker);
   if (markerIdx <= 0) return null;
@@ -29256,9 +29344,9 @@ function resolveGlobalNodeModulesDir(opts) {
 var STALE_STAGING_AGE_MS = CLI_UPDATE_INSTALL_TIMEOUT_MS;
 function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
   if (!nodeModulesDir) return 0;
-  const readdirSync18 = deps?.readdirSync ?? fs63.readdirSync;
-  const statSync17 = deps?.statSync ?? fs63.statSync;
-  const rmSync14 = deps?.rmSync ?? fs63.rmSync;
+  const readdirSync18 = deps?.readdirSync ?? fs64.readdirSync;
+  const statSync17 = deps?.statSync ?? fs64.statSync;
+  const rmSync14 = deps?.rmSync ?? fs64.rmSync;
   let removed = 0;
   let entries2;
   try {
@@ -29268,7 +29356,7 @@ function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
   }
   for (const name of entries2) {
     if (!/^\.codeam-cli-/.test(name)) continue;
-    const full = path72.join(nodeModulesDir, name);
+    const full = path73.join(nodeModulesDir, name);
     try {
       const st3 = statSync17(full);
       if (now - st3.mtimeMs < STALE_STAGING_AGE_MS) continue;
@@ -30391,11 +30479,11 @@ function resolveTokenValue(args2) {
   }
   const fileFlag = args2.find((a) => a.startsWith("--token-file="));
   if (fileFlag) {
-    const path112 = fileFlag.slice("--token-file=".length);
+    const path114 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs64.readFileSync(path112, "utf8").trim();
-      if (content.length === 0) fail(`--token-file ${path112} is empty`);
-      rmIfExistsQuiet(path112);
+      const content = fs65.readFileSync(path114, "utf8").trim();
+      if (content.length === 0) fail(`--token-file ${path114} is empty`);
+      rmIfExistsQuiet(path114);
       return content;
     } catch (err) {
       fail(`Could not read --token-file: ${err.message}`);
@@ -30487,12 +30575,12 @@ async function claim(token, pluginId, pluginSecretHash) {
   }
 }
 function pairAutoLockPath() {
-  return path73.join(os47.homedir(), ".codeam", "pair-auto.lock");
+  return path74.join(os48.homedir(), ".codeam", "pair-auto.lock");
 }
 var procRoot = "/proc";
 function readProcFile(rel) {
   try {
-    return fs64.readFileSync(path73.join(procRoot, rel), "utf8");
+    return fs65.readFileSync(path74.join(procRoot, rel), "utf8");
   } catch {
     return void 0;
   }
@@ -30513,7 +30601,7 @@ function currentBootId() {
 function readLockRecord(lockPath) {
   let raw;
   try {
-    raw = fs64.readFileSync(lockPath, "utf8");
+    raw = fs65.readFileSync(lockPath, "utf8");
   } catch {
     return void 0;
   }
@@ -30562,7 +30650,7 @@ function isLiveLockHolder(rec) {
 }
 function releaseOwnLock(lockPath) {
   try {
-    if (readLockRecord(lockPath)?.pid === process.pid) fs64.unlinkSync(lockPath);
+    if (readLockRecord(lockPath)?.pid === process.pid) fs65.unlinkSync(lockPath);
   } catch {
   }
 }
@@ -30586,7 +30674,7 @@ function snapshotProcessTree(root) {
   const children = /* @__PURE__ */ new Map();
   let entries2 = [];
   try {
-    entries2 = fs64.readdirSync(procRoot).filter((e) => /^\d+$/.test(e));
+    entries2 = fs65.readdirSync(procRoot).filter((e) => /^\d+$/.test(e));
   } catch {
   }
   for (const e of entries2) {
@@ -30621,18 +30709,18 @@ function signalProcessTree(refs, signal) {
 }
 function daemonLockPath(sessionId) {
   const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
-  return path73.join(os47.homedir(), ".codeam", `daemon-${safe}.lock`);
+  return path74.join(os48.homedir(), ".codeam", `daemon-${safe}.lock`);
 }
 function acquireDaemonLock(sessionId) {
   const lockPath = daemonLockPath(sessionId);
   try {
-    fs64.mkdirSync(path73.dirname(lockPath), { recursive: true });
+    fs65.mkdirSync(path74.dirname(lockPath), { recursive: true });
     try {
-      fs64.writeFileSync(lockPath, ownLockBody(), { flag: "wx" });
+      fs65.writeFileSync(lockPath, ownLockBody(), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
       if (isLiveLockHolder(readLockRecord(lockPath))) return false;
-      fs64.writeFileSync(lockPath, ownLockBody());
+      fs65.writeFileSync(lockPath, ownLockBody());
     }
     const release3 = () => releaseOwnLock(lockPath);
     process.once("exit", release3);
@@ -30652,13 +30740,13 @@ function acquireDaemonLock(sessionId) {
 function acquireSingletonLock() {
   const lockPath = pairAutoLockPath();
   try {
-    fs64.mkdirSync(path73.dirname(lockPath), { recursive: true });
+    fs65.mkdirSync(path74.dirname(lockPath), { recursive: true });
     try {
-      fs64.writeFileSync(lockPath, ownLockBody(), { flag: "wx" });
+      fs65.writeFileSync(lockPath, ownLockBody(), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
       if (isLiveLockHolder(readLockRecord(lockPath))) return false;
-      fs64.writeFileSync(lockPath, ownLockBody());
+      fs65.writeFileSync(lockPath, ownLockBody());
     }
     process.once("exit", () => releaseOwnLock(lockPath));
     return true;
@@ -31075,7 +31163,7 @@ var AgentService = class _AgentService {
 };
 
 // src/agents/acp/adapters.ts
-var path74 = __toESM(require("path"));
+var path75 = __toESM(require("path"));
 
 // src/agents/kimi/installer.ts
 var import_node_child_process25 = require("child_process");
@@ -31195,13 +31283,13 @@ function resolveBin(pkgName, binName) {
   try {
     const manifestPath = require_.resolve(`${pkgName}/package.json`);
     const manifest = require_(`${pkgName}/package.json`);
-    const pkgDir = path74.dirname(manifestPath);
+    const pkgDir = path75.dirname(manifestPath);
     const bin = manifest.bin;
     if (!bin) return null;
-    if (typeof bin === "string") return path74.resolve(pkgDir, bin);
+    if (typeof bin === "string") return path75.resolve(pkgDir, bin);
     const target = binName ?? Object.keys(bin)[0];
     if (!target || !bin[target]) return null;
-    return path74.resolve(pkgDir, bin[target]);
+    return path75.resolve(pkgDir, bin[target]);
   } catch {
     return null;
   }
@@ -31380,11 +31468,89 @@ async function resolveAcpAdapterWithRetry(agent, opts = {}) {
   return null;
 }
 
+// src/commands/start/agent-startup-marks.ts
+var import_fs8 = __toESM(require("fs"));
+var import_os13 = __toESM(require("os"));
+var import_path10 = __toESM(require("path"));
+var STALE_MARK_MS = 18e4;
+function marksDir(deps) {
+  return deps.dir ?? import_path10.default.join(import_os13.default.homedir(), ".codeam", "agent-startups");
+}
+function pidIsAlive2(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (err) {
+    return err.code === "EPERM";
+  }
+}
+function markAgentStarting(deps = {}) {
+  const file = import_path10.default.join(marksDir(deps), String(deps.pid ?? process.pid));
+  try {
+    import_fs8.default.mkdirSync(import_path10.default.dirname(file), { recursive: true });
+    import_fs8.default.writeFileSync(file, "");
+  } catch {
+    return () => void 0;
+  }
+  let released = false;
+  return () => {
+    if (released) return;
+    released = true;
+    try {
+      import_fs8.default.rmSync(file, { force: true });
+    } catch {
+    }
+  };
+}
+function otherAgentsStarting(deps = {}) {
+  const dir = marksDir(deps);
+  const self = deps.pid ?? process.pid;
+  const now = (deps.now ?? Date.now)();
+  const isAlive = deps.isAlive ?? pidIsAlive2;
+  let names;
+  try {
+    names = import_fs8.default.readdirSync(dir);
+  } catch {
+    return [];
+  }
+  const live = [];
+  for (const name of names) {
+    const pid = Number(name);
+    if (!Number.isInteger(pid) || pid <= 0 || pid === self) continue;
+    const file = import_path10.default.join(dir, name);
+    let stale = !isAlive(pid);
+    if (!stale) {
+      try {
+        stale = now - import_fs8.default.statSync(file).mtimeMs > STALE_MARK_MS;
+      } catch {
+        continue;
+      }
+    }
+    if (stale) {
+      try {
+        import_fs8.default.rmSync(file, { force: true });
+      } catch {
+      }
+      continue;
+    }
+    live.push(pid);
+  }
+  return live;
+}
+async function waitForNoAgentStarting(opts) {
+  const now = opts.now ?? Date.now;
+  const sleep5 = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const deadline = now() + opts.timeoutMs;
+  while (otherAgentsStarting(opts).length > 0 && now() < deadline) {
+    await sleep5(opts.pollMs ?? 500);
+  }
+}
+
 // src/agents/acp/runner.ts
 var import_node_crypto15 = require("crypto");
-var fs83 = __toESM(require("fs"));
-var os59 = __toESM(require("os"));
-var path94 = __toESM(require("path"));
+var fs85 = __toESM(require("fs"));
+var os61 = __toESM(require("os"));
+var path96 = __toESM(require("path"));
 
 // src/agents/acp/provider-billing-signal.ts
 var seen = /* @__PURE__ */ new Set();
@@ -31416,8 +31582,8 @@ function noteProviderBillingSignal(opts) {
 }
 
 // src/services/history.service.ts
-var fs65 = __toESM(require("fs"));
-var path75 = __toESM(require("path"));
+var fs67 = __toESM(require("fs"));
+var path77 = __toESM(require("path"));
 var https6 = __toESM(require("https"));
 var http10 = __toESM(require("http"));
 var import_zod2 = require("zod");
@@ -31478,7 +31644,7 @@ function parseJsonl(filePath) {
   const messages = [];
   let raw;
   try {
-    raw = fs65.readFileSync(filePath, "utf8");
+    raw = fs67.readFileSync(filePath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       log.warn("history:parseJsonl", `read failed for ${filePath}`, err);
@@ -31638,7 +31804,7 @@ var HistoryService = class _HistoryService {
     // session-start upload answered false, the active-conversation pointer was
     // never re-pointed after a Box wake, and the app opened an empty "New
     // conversation" over the resumed one (QA box, 2026-09-29).
-    path75.join(claudeConfigDir(), "projects", encodeCwd(this.cwd));
+    path77.join(claudeConfigDir(), "projects", encodeCwd(this.cwd));
   }
   /** Set the current Claude conversation ID (extracted from /cost command or session start) */
   setCurrentConversationId(id) {
@@ -31650,7 +31816,7 @@ var HistoryService = class _HistoryService {
   /** Return the current message count in the active conversation. */
   getCurrentMessageCount() {
     if (!this.currentConversationId) return 0;
-    const filePath = path75.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+    const filePath = path77.join(this.projectDir, `${this.currentConversationId}.jsonl`);
     return parseJsonl(filePath).length;
   }
   /**
@@ -31661,7 +31827,7 @@ var HistoryService = class _HistoryService {
     const deadline = Date.now() + timeoutMs;
     while (Date.now() < deadline) {
       if (!this.currentConversationId) return null;
-      const filePath = path75.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+      const filePath = path77.join(this.projectDir, `${this.currentConversationId}.jsonl`);
       const messages = parseJsonl(filePath);
       if (messages.length > previousCount) {
         for (let i = messages.length - 1; i >= previousCount; i--) {
@@ -31688,18 +31854,18 @@ var HistoryService = class _HistoryService {
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     const oneShots = readOneShotConversations(this.cwd);
     try {
-      const files = fs65.readdirSync(dir, { withFileTypes: true }).filter(
-        (e) => e.isFile() && e.name.endsWith(".jsonl") && !oneShots.has(path75.basename(e.name, ".jsonl"))
+      const files = fs67.readdirSync(dir, { withFileTypes: true }).filter(
+        (e) => e.isFile() && e.name.endsWith(".jsonl") && !oneShots.has(path77.basename(e.name, ".jsonl"))
       ).map((e) => {
         try {
-          const stat3 = fs65.statSync(path75.join(dir, e.name));
+          const stat3 = fs67.statSync(path77.join(dir, e.name));
           return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
         } catch {
           return { name: e.name, mtime: 0, birthtime: 0 };
         }
       }).filter((f) => f.birthtime >= cutoff).sort((a, b) => b.mtime - a.mtime);
       if (files.length > 0) {
-        this.currentConversationId = path75.basename(files[0].name, ".jsonl");
+        this.currentConversationId = path77.basename(files[0].name, ".jsonl");
       }
     } catch {
     }
@@ -31733,13 +31899,13 @@ var HistoryService = class _HistoryService {
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     let entries2;
     try {
-      entries2 = fs65.readdirSync(dir, { withFileTypes: true });
+      entries2 = fs67.readdirSync(dir, { withFileTypes: true });
     } catch {
       return null;
     }
     const files = entries2.filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
       try {
-        const stat3 = fs65.statSync(path75.join(dir, e.name));
+        const stat3 = fs67.statSync(path77.join(dir, e.name));
         return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
       } catch {
         return { name: e.name, mtime: 0, birthtime: 0 };
@@ -31748,12 +31914,12 @@ var HistoryService = class _HistoryService {
     if (files.length === 0) return null;
     const targetFile = this.currentConversationId ? `${this.currentConversationId}.jsonl` : files[0].name;
     if (!files.some((f) => f.name === targetFile)) return null;
-    return this.extractUsageFromFile(path75.join(dir, targetFile));
+    return this.extractUsageFromFile(path77.join(dir, targetFile));
   }
   extractUsageFromFile(filePath) {
     let raw;
     try {
-      raw = fs65.readFileSync(filePath, "utf8");
+      raw = fs67.readFileSync(filePath, "utf8");
     } catch {
       return null;
     }
@@ -31805,9 +31971,9 @@ var HistoryService = class _HistoryService {
     let totalCost = 0;
     let files;
     try {
-      files = fs65.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
+      files = fs67.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
         try {
-          return fs65.statSync(path75.join(projectDir, f)).mtimeMs >= monthStartMs;
+          return fs67.statSync(path77.join(projectDir, f)).mtimeMs >= monthStartMs;
         } catch {
           return false;
         }
@@ -31818,7 +31984,7 @@ var HistoryService = class _HistoryService {
     for (const file of files) {
       let raw;
       try {
-        raw = fs65.readFileSync(path75.join(projectDir, file), "utf8");
+        raw = fs67.readFileSync(path77.join(projectDir, file), "utf8");
       } catch {
         continue;
       }
@@ -31897,7 +32063,7 @@ var HistoryService = class _HistoryService {
     if (this.runtime.resolveHistoryFile) {
       return this.runtime.resolveHistoryFile(this.cwd, sessionId);
     }
-    return path75.join(this.projectDir, `${sessionId}.jsonl`);
+    return path77.join(this.projectDir, `${sessionId}.jsonl`);
   }
   /**
    * Parse a conversation's messages from disk, agent-aware. Claude uses the
@@ -31935,7 +32101,7 @@ var HistoryService = class _HistoryService {
         };
       });
     }
-    return parseJsonl(path75.join(this.projectDir, `${sessionId}.jsonl`));
+    return parseJsonl(path77.join(this.projectDir, `${sessionId}.jsonl`));
   }
   /** One in-flight full upload per conversation — the baton mirror and a
    *  `get_conversation` used to upload the same transcript concurrently. */
@@ -32017,7 +32183,7 @@ var HistoryService = class _HistoryService {
     if (!filePath) return false;
     let mtimeMs;
     try {
-      mtimeMs = fs65.statSync(filePath).mtimeMs;
+      mtimeMs = fs67.statSync(filePath).mtimeMs;
     } catch {
       return false;
     }
@@ -32092,10 +32258,10 @@ var HistoryService = class _HistoryService {
 
 // src/agents/acp/client.ts
 var import_node_child_process27 = require("child_process");
-var fs66 = __toESM(require("fs/promises"));
+var fs68 = __toESM(require("fs/promises"));
 var fsSync = __toESM(require("fs"));
-var os49 = __toESM(require("os"));
-var path77 = __toESM(require("path"));
+var os51 = __toESM(require("os"));
+var path79 = __toESM(require("path"));
 var import_node_stream = require("stream");
 
 // ../../node_modules/@agentclientprotocol/sdk/dist/schema/index.js
@@ -36121,8 +36287,8 @@ function createIdleTimeout(idleMs, makeError, activeIdleMs = idleMs) {
 }
 
 // src/agents/acp/internal-paths.ts
-var path76 = __toESM(require("path"));
-var os48 = __toESM(require("os"));
+var path78 = __toESM(require("path"));
+var os50 = __toESM(require("os"));
 var INTERNAL_TOKENS = [".codeam", "house-claude"];
 var PROSE_ONLY_TOOL_KINDS = /* @__PURE__ */ new Set(["think", "switch_mode"]);
 function isProseOnlyToolKind(kind) {
@@ -36134,13 +36300,13 @@ function textReferencesInternal(text) {
   const scrubbed = text.replace(SELF_HOSTED_WORKSPACE_RE, " ");
   return INTERNAL_TOKENS.some((t2) => scrubbed.includes(t2));
 }
-function pathIsInternal(p2, homeDir2 = os48.homedir()) {
+function pathIsInternal(p2, homeDir2 = os50.homedir()) {
   if (!p2) return false;
-  const abs = path76.resolve(p2);
-  const home = path76.resolve(homeDir2);
-  const within = (root) => abs === root || abs.startsWith(root + path76.sep);
-  if (within(path76.join(home, ".codeam", "self-hosted"))) return false;
-  return within(path76.join(home, ".codeam")) || within(path76.join(home, ".beads")) || abs === path76.join(home, ".codeam-host.log") || abs.includes(`${path76.sep}house-claude${path76.sep}`) || abs.endsWith(`${path76.sep}house-claude`);
+  const abs = path78.resolve(p2);
+  const home = path78.resolve(homeDir2);
+  const within = (root) => abs === root || abs.startsWith(root + path78.sep);
+  if (within(path78.join(home, ".codeam", "self-hosted"))) return false;
+  return within(path78.join(home, ".codeam")) || within(path78.join(home, ".beads")) || abs === path78.join(home, ".codeam-host.log") || abs.includes(`${path78.sep}house-claude${path78.sep}`) || abs.endsWith(`${path78.sep}house-claude`);
 }
 function toolCallReferencesInternal(call, homeDir2) {
   if (call.locations?.some((l) => pathIsInternal(l.path, homeDir2))) return true;
@@ -37236,7 +37402,7 @@ var AcpClient = class {
           throw new RequestError(-32002, GUARDRAIL_SECRET_READ_BLOCK_REASON, { uri: params.path });
         }
         try {
-          const content = await fs66.readFile(params.path, "utf8");
+          const content = await fs68.readFile(params.path, "utf8");
           return applyLineRange(content, params.line ?? null, params.limit ?? null);
         } catch (err) {
           const code = err.code;
@@ -37257,7 +37423,7 @@ var AcpClient = class {
           throw new RequestError(-32002, INTERNAL_BLOCK_REASON, { uri: params.path });
         }
         try {
-          await fs66.writeFile(params.path, params.content, "utf8");
+          await fs68.writeFile(params.path, params.content, "utf8");
           return {};
         } catch (err) {
           const code = err.code;
@@ -37345,30 +37511,30 @@ function applyLineRange(content, line, limit) {
   return { content: lines.slice(start2, end).join("\n") };
 }
 function knownAgentBinaryDirs() {
-  const home = os49.homedir();
+  const home = os51.homedir();
   const out2 = [];
   out2.push("/tmp/codeam-node20/bin");
   for (const root of [
     "/usr/local/share/nvm/versions/node",
-    path77.join(home, ".nvm/versions/node")
+    path79.join(home, ".nvm/versions/node")
   ]) {
     try {
       for (const child of fsSync.readdirSync(root)) {
-        out2.push(path77.join(root, child, "bin"));
+        out2.push(path79.join(root, child, "bin"));
       }
     } catch {
     }
   }
-  out2.push(path77.join(home, ".volta/bin"));
+  out2.push(path79.join(home, ".volta/bin"));
   out2.push("/usr/local/bin");
   out2.push("/usr/bin");
-  out2.push(path77.join(home, ".local/bin"));
-  out2.push(path77.join(home, "bin"));
+  out2.push(path79.join(home, ".local/bin"));
+  out2.push(path79.join(home, "bin"));
   out2.push(...agentInstallBinDirs());
   if (process.platform === "win32") {
     const { LOCALAPPDATA, APPDATA } = process.env;
-    if (LOCALAPPDATA) out2.push(path77.join(LOCALAPPDATA, "cursor-agent"));
-    if (APPDATA) out2.push(path77.join(APPDATA, "npm"));
+    if (LOCALAPPDATA) out2.push(path79.join(LOCALAPPDATA, "cursor-agent"));
+    if (APPDATA) out2.push(path79.join(APPDATA, "npm"));
   }
   return out2.filter((p2) => {
     try {
@@ -37379,7 +37545,7 @@ function knownAgentBinaryDirs() {
   });
 }
 function expandPathForAgentBinaries(existingPath) {
-  const existing = new Set(existingPath.split(path77.delimiter).filter((p2) => p2.length > 0));
+  const existing = new Set(existingPath.split(path79.delimiter).filter((p2) => p2.length > 0));
   const additions = [];
   for (const dir of knownAgentBinaryDirs()) {
     if (!existing.has(dir)) {
@@ -37388,17 +37554,17 @@ function expandPathForAgentBinaries(existingPath) {
     }
   }
   if (additions.length === 0) return existingPath;
-  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path77.delimiter);
+  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path79.delimiter);
 }
 
 // src/commands/host/agent-install.ts
 var import_child_process27 = require("child_process");
-var os50 = __toESM(require("os"));
+var os52 = __toESM(require("os"));
 function runAgentInstallScript(script, opts = {}) {
   const timeoutMs = opts.timeoutMs ?? 18e4;
   const scope = opts.logScope ?? "agent-install";
   return new Promise((resolve14) => {
-    const home = process.env.HOME || os50.homedir();
+    const home = process.env.HOME || os52.homedir();
     const child = (0, import_child_process27.spawn)("sh", ["-c", script], {
       env: { ...process.env, HOME: home },
       stdio: ["ignore", "pipe", "pipe"]
@@ -37660,9 +37826,9 @@ async function performAgentSwitch(deps, rawAgentId, fastPath = {}) {
 }
 
 // src/commands/host/agent-provisioning.ts
-var fs67 = __toESM(require("fs"));
-var os51 = __toESM(require("os"));
-var path78 = __toESM(require("path"));
+var fs69 = __toESM(require("fs"));
+var os53 = __toESM(require("os"));
+var path80 = __toESM(require("path"));
 var PUBLIC_TO_INTERNAL_AGENT = {
   claude_code: "claude",
   claude: "claude",
@@ -37679,22 +37845,22 @@ function toInternalAgentId(publicAgentId) {
   return PUBLIC_TO_INTERNAL_AGENT[publicAgentId] ?? null;
 }
 function ensureDir(dir) {
-  fs67.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs69.mkdirSync(dir, { recursive: true, mode: 448 });
 }
 function writeFile0600(filePath, contents) {
-  ensureDir(path78.dirname(filePath));
-  fs67.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
+  ensureDir(path80.dirname(filePath));
+  fs69.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
   restrictToOwner(filePath);
 }
 function rmIfExists(filePath) {
   try {
-    fs67.rmSync(filePath, { force: true });
+    fs69.rmSync(filePath, { force: true });
   } catch {
   }
 }
 var claudeProvisioner = {
   write(auth, home) {
-    const credentialsJson = path78.join(home, ".claude", ".credentials.json");
+    const credentialsJson = path80.join(home, ".claude", ".credentials.json");
     if (auth.kind === "api_key") {
       rmIfExists(credentialsJson);
       return { ANTHROPIC_API_KEY: auth.value };
@@ -37706,8 +37872,8 @@ var claudeProvisioner = {
     } else {
       rmIfExists(credentialsJson);
     }
-    const claudeJson = path78.join(home, ".claude.json");
-    if (!fs67.existsSync(claudeJson)) {
+    const claudeJson = path80.join(home, ".claude.json");
+    if (!fs69.existsSync(claudeJson)) {
       writeFile0600(
         claudeJson,
         JSON.stringify({ hasCompletedOnboarding: true, customApiKeyResponses: { approved: [] } })
@@ -37718,7 +37884,7 @@ var claudeProvisioner = {
 };
 var codexProvisioner = {
   write(auth, home) {
-    const authJson = path78.join(home, ".codex", "auth.json");
+    const authJson = path80.join(home, ".codex", "auth.json");
     if (auth.kind === "api_key") {
       writeFile0600(authJson, JSON.stringify({ auth_mode: "apikey", OPENAI_API_KEY: auth.value }));
       return { OPENAI_API_KEY: auth.value };
@@ -37741,7 +37907,7 @@ function codexLoginStamp(raw) {
 function keepsFresherCodexLogin(authJsonPath, incoming) {
   let onDisk;
   try {
-    onDisk = fs67.readFileSync(authJsonPath, "utf8");
+    onDisk = fs69.readFileSync(authJsonPath, "utf8");
   } catch {
     return false;
   }
@@ -37752,8 +37918,8 @@ function keepsFresherCodexLogin(authJsonPath, incoming) {
 }
 var geminiProvisioner = {
   write(auth, home) {
-    const settingsJson = path78.join(home, ".gemini", "settings.json");
-    const oauthCreds = path78.join(home, ".gemini", "oauth_creds.json");
+    const settingsJson = path80.join(home, ".gemini", "settings.json");
+    const oauthCreds = path80.join(home, ".gemini", "oauth_creds.json");
     if (auth.kind === "api_key") {
       rmIfExists(oauthCreds);
       writeFile0600(settingsJson, '{"security":{"auth":{"selectedType":"gemini-api-key"}}}');
@@ -37766,7 +37932,7 @@ var geminiProvisioner = {
 };
 var cursorProvisioner = {
   write(auth, home) {
-    const authJson = path78.join(home, ".config", "cursor", "auth.json");
+    const authJson = path80.join(home, ".config", "cursor", "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { CURSOR_API_KEY: auth.value };
@@ -37808,22 +37974,22 @@ max_context_size = 262144
 var kimiProvisioner = {
   write(auth, home) {
     const credentialsFiles = [
-      path78.join(home, ".kimi", "credentials", "kimi-code.json"),
-      path78.join(home, ".kimi-code", "credentials", "kimi-code.json")
+      path80.join(home, ".kimi", "credentials", "kimi-code.json"),
+      path80.join(home, ".kimi-code", "credentials", "kimi-code.json")
     ];
     if (auth.kind === "api_key") {
       credentialsFiles.forEach(rmIfExists);
       return { KIMI_API_KEY: auth.value };
     }
     credentialsFiles.forEach((f) => writeFile0600(f, auth.value));
-    writeFile0600(path78.join(home, ".kimi-code", "config.toml"), KIMI_MANAGED_CONFIG_TOML);
+    writeFile0600(path80.join(home, ".kimi-code", "config.toml"), KIMI_MANAGED_CONFIG_TOML);
     return {};
   }
 };
 var coderabbitProvisioner = {
   write(auth, home) {
-    const dir = path78.join(home, ".coderabbit");
-    const authJson = path78.join(dir, "auth.json");
+    const dir = path80.join(home, ".coderabbit");
+    const authJson = path80.join(dir, "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { CODERABBIT_API_KEY: auth.value };
@@ -37835,13 +38001,13 @@ var coderabbitProvisioner = {
       try {
         const parsed = JSON.parse(value);
         if (typeof parsed.file === "string" && typeof parsed.contents === "string") {
-          file = path78.basename(parsed.file);
+          file = path80.basename(parsed.file);
           contents = parsed.contents;
         }
       } catch {
       }
     }
-    writeFile0600(path78.join(dir, file), contents);
+    writeFile0600(path80.join(dir, file), contents);
     return {};
   }
 };
@@ -37869,7 +38035,7 @@ var UnsupportedAgentError = class extends Error {
     this.agentId = agentId;
   }
 };
-function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os51.homedir()) {
+function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os53.homedir()) {
   const internal = toInternalAgentId(publicAgentId);
   if (!internal) throw new UnsupportedAgentError(publicAgentId);
   const provisioner = PROVISIONERS[internal];
@@ -37878,8 +38044,8 @@ function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os51.homedir(
 }
 
 // src/beads/workflow-hint.ts
-var fs68 = __toESM(require("fs"));
-var path79 = __toESM(require("path"));
+var fs70 = __toESM(require("fs"));
+var path81 = __toESM(require("path"));
 var BEADS_HINT_MARKER = "<!-- codeam:beads-workflow -->";
 var BEADS_HINT = `${BEADS_HINT_MARKER}
 # Beads (bd) \u2014 task tracking + persistent memory (ALWAYS use it)
@@ -37906,11 +38072,11 @@ function ensureBeadsWorkflowHint(homeDir2, file = claudeMemoryFile(homeDir2)) {
   try {
     let existing = "";
     try {
-      existing = fs68.readFileSync(file, "utf8");
+      existing = fs70.readFileSync(file, "utf8");
     } catch {
     }
     if (existing.includes(BEADS_HINT)) return;
-    fs68.mkdirSync(path79.dirname(file), { recursive: true });
+    fs70.mkdirSync(path81.dirname(file), { recursive: true });
     let next;
     const open = existing.indexOf(BEADS_HINT_MARKER);
     const close = open === -1 ? -1 : existing.indexOf(BEADS_HINT_MARKER, open + BEADS_HINT_MARKER.length);
@@ -37923,40 +38089,40 @@ ${BEADS_HINT}
 ` : `${BEADS_HINT}
 `;
     }
-    fs68.writeFileSync(file, next);
+    fs70.writeFileSync(file, next);
   } catch {
   }
 }
 
 // src/agents/agent-standard.ts
-var fs69 = __toESM(require("fs"));
-var path80 = __toESM(require("path"));
-var os52 = __toESM(require("os"));
+var fs71 = __toESM(require("fs"));
+var path82 = __toESM(require("path"));
+var os54 = __toESM(require("os"));
 function ensureAgentStandard(homeDir2, file = claudeMemoryFile(homeDir2)) {
   try {
     let existing = "";
     try {
-      existing = fs69.readFileSync(file, "utf8");
+      existing = fs71.readFileSync(file, "utf8");
     } catch {
     }
     if (existing.includes(AGENT_STANDARD_MARKER)) return;
-    fs69.mkdirSync(path80.dirname(file), { recursive: true });
+    fs71.mkdirSync(path82.dirname(file), { recursive: true });
     const next = existing.trim() ? `${existing.trimEnd()}
 
 ${AGENT_STANDARD_BLOCK}
 ` : `${AGENT_STANDARD_BLOCK}
 `;
-    fs69.writeFileSync(file, next);
+    fs71.writeFileSync(file, next);
   } catch {
   }
 }
 var _agentStandardSeam = {
   isLocalSession: () => isLocalSession(),
-  markerPath: (sessionId) => path80.join(os52.homedir(), ".codeam", "agent-standard", `${sessionId}.done`),
-  exists: (p2) => fs69.existsSync(p2),
+  markerPath: (sessionId) => path82.join(os54.homedir(), ".codeam", "agent-standard", `${sessionId}.done`),
+  exists: (p2) => fs71.existsSync(p2),
   write: (p2) => {
-    fs69.mkdirSync(path80.dirname(p2), { recursive: true });
-    fs69.writeFileSync(p2, "");
+    fs71.mkdirSync(path82.dirname(p2), { recursive: true });
+    fs71.writeFileSync(p2, "");
   }
 };
 function isClaude(agent) {
@@ -38691,15 +38857,15 @@ function withholdTrailingPartialFenceMarker(text) {
 
 // src/agents/acp/onboarding.ts
 var import_child_process28 = require("child_process");
-var fs71 = __toESM(require("fs"));
-var os53 = __toESM(require("os"));
-var path82 = __toESM(require("path"));
+var fs73 = __toESM(require("fs"));
+var os55 = __toESM(require("os"));
+var path84 = __toESM(require("path"));
 var _onboardingSeam = {
-  markerPath: (sessionId) => path82.join(os53.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
-  exists: (p2) => fs71.existsSync(p2),
+  markerPath: (sessionId) => path84.join(os55.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
+  exists: (p2) => fs73.existsSync(p2),
   write: (p2) => {
-    fs71.mkdirSync(path82.dirname(p2), { recursive: true });
-    fs71.writeFileSync(p2, "");
+    fs73.mkdirSync(path84.dirname(p2), { recursive: true });
+    fs73.writeFileSync(p2, "");
   },
   disabled: () => {
     const v = process.env.CODEAM_ONBOARDING_DISABLED;
@@ -38736,7 +38902,7 @@ function resolveRepoName(cwd) {
       if (name) return name;
     }
   }
-  const base = path82.basename(cwd || "");
+  const base = path84.basename(cwd || "");
   if (base && !isUuid(base)) return base;
   return "this project";
 }
@@ -39128,14 +39294,14 @@ var import_crypto5 = require("crypto");
 
 // src/services/turn-files/git-changeset.ts
 var import_child_process29 = require("child_process");
-var fs73 = __toESM(require("fs/promises"));
-var import_fs7 = require("fs");
-var path84 = __toESM(require("path"));
+var fs75 = __toESM(require("fs/promises"));
+var import_fs9 = require("fs");
+var path86 = __toESM(require("path"));
 
 // src/services/turn-files/review-ignore.ts
 var import_ignore2 = __toESM(require("ignore"));
-var fs72 = __toESM(require("fs"));
-var path83 = __toESM(require("path"));
+var fs74 = __toESM(require("fs"));
+var path85 = __toESM(require("path"));
 var CURATED_REVIEW_IGNORE = [
   // Google Cloud SDK (the incident) — installs a huge python tree.
   "google-cloud-sdk/",
@@ -39179,7 +39345,7 @@ var CURATED_REVIEW_IGNORE = [
 function makeReviewIgnore(repoRoot) {
   const ig = (0, import_ignore2.default)().add(CURATED_REVIEW_IGNORE);
   try {
-    const custom = fs72.readFileSync(path83.join(repoRoot, ".codeam", "reviewignore"), "utf8");
+    const custom = fs74.readFileSync(path85.join(repoRoot, ".codeam", "reviewignore"), "utf8");
     ig.add(custom);
   } catch {
   }
@@ -39214,7 +39380,7 @@ async function collectRepoChangeset(opts) {
   const rows = parseStatus(status2).filter(
     (row) => !isIgnoredFilePath(row.filePath) && !reviewIgnore(row.filePath) && // A socket, FIFO or device node is never a change to review (a
     // `cc-socks/1522.sock` reached the Files tab).
-    isReviewablePath(path84.join(opts.repoRoot, row.filePath))
+    isReviewablePath(path86.join(opts.repoRoot, row.filePath))
   );
   const MAX_CHANGESET_FILES = Math.max(1, Number(process.env.CODEAM_MAX_CHANGESET_FILES ?? 500));
   const truncated = rows.length > MAX_CHANGESET_FILES;
@@ -39231,7 +39397,7 @@ async function collectRepoChangeset(opts) {
     let stats;
     if (!truncated && row.fileStatus === "added" && numstatEntry === void 0) {
       const lineCount = await readUntrackedLineCount(
-        path84.join(opts.repoRoot, row.filePath)
+        path86.join(opts.repoRoot, row.filePath)
       );
       stats = { added: lineCount, removed: 0 };
     } else {
@@ -39262,7 +39428,7 @@ function readUntrackedLineCount(absPath) {
 }
 async function defaultReadUntrackedLineCount(absPath) {
   try {
-    const content = await fs73.readFile(absPath, "utf8");
+    const content = await fs75.readFile(absPath, "utf8");
     let count = 0;
     let pos = -1;
     while ((pos = content.indexOf("\n", pos + 1)) !== -1) {
@@ -39354,7 +39520,7 @@ function defaultRunGit(cwd, args2) {
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs97 = await import("fs/promises");
+  const fs99 = await import("fs/promises");
   const out2 = [];
   await walk2(workingDir, 0);
   return out2;
@@ -39362,7 +39528,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (depth2 > maxDepth) return;
     let entries2 = [];
     try {
-      const dirents = await fs97.readdir(dir, { withFileTypes: true });
+      const dirents = await fs99.readdir(dir, { withFileTypes: true });
       entries2 = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -39373,8 +39539,8 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (hasGit) {
       out2.push({
         repoRoot: dir,
-        repoPath: path84.relative(workingDir, dir),
-        repoName: path84.basename(dir)
+        repoPath: path86.relative(workingDir, dir),
+        repoName: path86.basename(dir)
       });
       return;
     }
@@ -39382,13 +39548,13 @@ async function discoverRepos(workingDir, maxDepth = 4) {
       if (!entry.isDirectory) continue;
       if (entry.name === "node_modules") continue;
       if (entry.name === "dist" || entry.name === "build") continue;
-      await walk2(path84.join(dir, entry.name), depth2 + 1);
+      await walk2(path86.join(dir, entry.name), depth2 + 1);
     }
   }
 }
 function isReviewablePath(absPath) {
   try {
-    const st3 = (0, import_fs7.lstatSync)(absPath);
+    const st3 = (0, import_fs9.lstatSync)(absPath);
     return st3.isFile() || st3.isSymbolicLink();
   } catch {
     return true;
@@ -39396,9 +39562,9 @@ function isReviewablePath(absPath) {
 }
 
 // src/services/turn-files/files-outbox.ts
-var fs74 = __toESM(require("fs/promises"));
-var path85 = __toESM(require("path"));
-var import_os12 = require("os");
+var fs76 = __toESM(require("fs/promises"));
+var path87 = __toESM(require("path"));
+var import_os14 = require("os");
 var HOME_OUTBOX_DIR = ".codeam/outbox";
 var MAX_AGE_MS = 24 * 60 * 60 * 1e3;
 var BACKOFF_STEPS_MS = [
@@ -39430,16 +39596,16 @@ var FilesOutbox = class {
   backoffIndex = 0;
   stopped = false;
   constructor(opts) {
-    const base = opts.baseDir ?? path85.join(homeDir(), HOME_OUTBOX_DIR);
-    this.filePath = path85.join(base, `${opts.sessionId}.jsonl`);
+    const base = opts.baseDir ?? path87.join(homeDir(), HOME_OUTBOX_DIR);
+    this.filePath = path87.join(base, `${opts.sessionId}.jsonl`);
     this.post = opts.post;
     this.autoSchedule = opts.autoSchedule !== false;
   }
   /** Persist the entry to disk and trigger a flush. Returns once the
    *  line is durable on disk (not once the POST succeeds). */
   async enqueue(entry) {
-    await fs74.mkdir(path85.dirname(this.filePath), { recursive: true });
-    await fs74.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
+    await fs76.mkdir(path87.dirname(this.filePath), { recursive: true });
+    await fs76.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
     this.backoffIndex = 0;
     if (this.autoSchedule) this.scheduleFlush(0);
   }
@@ -39530,7 +39696,7 @@ var FilesOutbox = class {
   async readAll() {
     let raw = "";
     try {
-      raw = await fs74.readFile(this.filePath, "utf8");
+      raw = await fs76.readFile(this.filePath, "utf8");
     } catch {
       return [];
     }
@@ -39554,12 +39720,12 @@ var FilesOutbox = class {
   async rewrite(entries2) {
     const tmpPath = `${this.filePath}.${process.pid}.tmp`;
     if (entries2.length === 0) {
-      await fs74.unlink(this.filePath).catch(() => void 0);
+      await fs76.unlink(this.filePath).catch(() => void 0);
       return;
     }
     const payload = entries2.map((e) => JSON.stringify(e)).join("\n") + "\n";
-    await fs74.writeFile(tmpPath, payload, "utf8");
-    await fs74.rename(tmpPath, this.filePath);
+    await fs76.writeFile(tmpPath, payload, "utf8");
+    await fs76.rename(tmpPath, this.filePath);
   }
 };
 function applyJitter(ms) {
@@ -39567,7 +39733,7 @@ function applyJitter(ms) {
   return Math.round(ms * factor);
 }
 function homeDir() {
-  return process.env.HOME ?? process.env.USERPROFILE ?? (0, import_os12.tmpdir)();
+  return process.env.HOME ?? process.env.USERPROFILE ?? (0, import_os14.tmpdir)();
 }
 
 // src/services/turn-files/turn-file-aggregator.ts
@@ -39907,27 +40073,27 @@ async function readActiveConversationMarker(cwd, homeDir2) {
 }
 
 // src/services/turn-marker.ts
-var fs76 = __toESM(require("fs"));
-var os55 = __toESM(require("os"));
-var path87 = __toESM(require("path"));
+var fs78 = __toESM(require("fs"));
+var os57 = __toESM(require("os"));
+var path89 = __toESM(require("path"));
 var depth = 0;
 function codeamHome() {
-  return path87.join(os55.homedir(), ".codeam");
+  return path89.join(os57.homedir(), ".codeam");
 }
 function turnMarkerPath(pid = process.pid, home = codeamHome()) {
-  return path87.join(home, "turns", String(pid));
+  return path89.join(home, "turns", String(pid));
 }
 function mark() {
   try {
     const file = turnMarkerPath();
-    fs76.mkdirSync(path87.dirname(file), { recursive: true });
-    fs76.writeFileSync(file, String(Date.now()));
+    fs78.mkdirSync(path89.dirname(file), { recursive: true });
+    fs78.writeFileSync(file, String(Date.now()));
   } catch {
   }
 }
 function clear() {
   try {
-    fs76.rmSync(turnMarkerPath(), { force: true });
+    fs78.rmSync(turnMarkerPath(), { force: true });
   } catch {
   }
 }
@@ -39942,7 +40108,7 @@ async function withTurnMarker(fn) {
 function isProcessMidTurn(pid, home) {
   if (!pid) return false;
   try {
-    return fs76.existsSync(turnMarkerPath(pid, home));
+    return fs78.existsSync(turnMarkerPath(pid, home));
   } catch {
     return false;
   }
@@ -39950,8 +40116,8 @@ function isProcessMidTurn(pid, home) {
 
 // src/packs/gates.ts
 var import_node_child_process28 = require("child_process");
-var fs77 = __toESM(require("fs"));
-var path88 = __toESM(require("path"));
+var fs79 = __toESM(require("fs"));
+var path90 = __toESM(require("path"));
 var defaultCommandRunner = (file, args2, cwd, timeoutMs, env) => new Promise((resolve14) => {
   (0, import_node_child_process28.execFile)(
     file,
@@ -40001,7 +40167,7 @@ async function changedFiles(run3, cwd, from, to) {
 }
 function readWorkspaceFile(cwd, relPath) {
   try {
-    return fs77.readFileSync(path88.join(cwd, relPath), "utf8");
+    return fs79.readFileSync(path90.join(cwd, relPath), "utf8");
   } catch {
     return null;
   }
@@ -40010,14 +40176,14 @@ var NO_TEST_PLACEHOLDER = 'echo "Error: no test specified"';
 var CHECKS_TIMEOUT_MS = 5 * 6e4;
 function detectChecksCommand(cwd) {
   try {
-    const cfg = JSON.parse(fs77.readFileSync(path88.join(cwd, ".codeam", "pack.json"), "utf8"));
+    const cfg = JSON.parse(fs79.readFileSync(path90.join(cwd, ".codeam", "pack.json"), "utf8"));
     if (typeof cfg.checksCommand === "string" && cfg.checksCommand.trim().length > 0) {
       return cfg.checksCommand.trim();
     }
   } catch {
   }
   try {
-    const pkg = JSON.parse(fs77.readFileSync(path88.join(cwd, "package.json"), "utf8"));
+    const pkg = JSON.parse(fs79.readFileSync(path90.join(cwd, "package.json"), "utf8"));
     const test = pkg.scripts?.test;
     if (typeof test === "string" && test.trim().length > 0 && !test.includes(NO_TEST_PLACEHOLDER)) {
       return "npm test";
@@ -40035,39 +40201,39 @@ ${res.stderr}`.trim();
 }
 
 // src/packs/run-store.ts
-var fs78 = __toESM(require("fs"));
-var path89 = __toESM(require("path"));
+var fs80 = __toESM(require("fs"));
+var path91 = __toESM(require("path"));
 var crypto5 = __toESM(require("crypto"));
 function packsDir(cwd) {
-  return path89.join(cwd, ".codeam", "packs");
+  return path91.join(cwd, ".codeam", "packs");
 }
 function runDir(cwd, runId) {
-  return path89.join(packsDir(cwd), runId);
+  return path91.join(packsDir(cwd), runId);
 }
 function newRunId() {
   return `pk_${Date.now().toString(36)}_${crypto5.randomBytes(4).toString("hex")}`;
 }
 function writeJsonAtomic(file, value) {
-  fs78.mkdirSync(path89.dirname(file), { recursive: true });
+  fs80.mkdirSync(path91.dirname(file), { recursive: true });
   const tmp = `${file}.tmp`;
-  fs78.writeFileSync(tmp, JSON.stringify(value, null, 2));
-  fs78.renameSync(tmp, file);
+  fs80.writeFileSync(tmp, JSON.stringify(value, null, 2));
+  fs80.renameSync(tmp, file);
 }
 function saveRun(cwd, state) {
-  writeJsonAtomic(path89.join(runDir(cwd, state.runId), "run.json"), state);
+  writeJsonAtomic(path91.join(runDir(cwd, state.runId), "run.json"), state);
 }
 function saveStageHandoff(cwd, runId, stageIndex, role, handoff) {
   const name = `${String(stageIndex + 1).padStart(2, "0")}-${role}.json`;
-  writeJsonAtomic(path89.join(runDir(cwd, runId), name), handoff);
+  writeJsonAtomic(path91.join(runDir(cwd, runId), name), handoff);
 }
 function loadLatestRun(cwd) {
   try {
     const dir = packsDir(cwd);
-    const entries2 = fs78.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name).sort();
+    const entries2 = fs80.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name).sort();
     for (let i = entries2.length - 1; i >= 0; i--) {
-      const file = path89.join(dir, entries2[i], "run.json");
+      const file = path91.join(dir, entries2[i], "run.json");
       try {
-        const parsed = JSON.parse(fs78.readFileSync(file, "utf8"));
+        const parsed = JSON.parse(fs80.readFileSync(file, "utf8"));
         if (parsed && typeof parsed.runId === "string") return parsed;
       } catch {
       }
@@ -40078,17 +40244,17 @@ function loadLatestRun(cwd) {
 }
 function ensureLedgerIgnored(cwd) {
   try {
-    const gitDir = path89.join(cwd, ".git");
-    if (!fs78.existsSync(gitDir)) return;
-    const exclude = path89.join(gitDir, "info", "exclude");
+    const gitDir = path91.join(cwd, ".git");
+    if (!fs80.existsSync(gitDir)) return;
+    const exclude = path91.join(gitDir, "info", "exclude");
     let existing = "";
     try {
-      existing = fs78.readFileSync(exclude, "utf8");
+      existing = fs80.readFileSync(exclude, "utf8");
     } catch {
     }
     if (existing.includes(".codeam/packs/")) return;
-    fs78.mkdirSync(path89.dirname(exclude), { recursive: true });
-    fs78.writeFileSync(exclude, `${existing.trimEnd()}
+    fs80.mkdirSync(path91.dirname(exclude), { recursive: true });
+    fs80.writeFileSync(exclude, `${existing.trimEnd()}
 .codeam/packs/
 `.trimStart());
   } catch {
@@ -41069,20 +41235,20 @@ async function mcpRouter() {
 }
 
 // src/integrations/mcp-secrets.ts
-var fs80 = __toESM(require("fs"));
-var os57 = __toESM(require("os"));
-var path91 = __toESM(require("path"));
+var fs82 = __toESM(require("fs"));
+var os59 = __toESM(require("os"));
+var path93 = __toESM(require("path"));
 var MCP_SECRETS_FILE_ENV = "CODEAM_MCP_SECRETS_FILE";
 function mcpSecretsDir() {
-  return path91.join(os57.homedir(), ".codeam", "mcp-secrets");
+  return path93.join(os59.homedir(), ".codeam", "mcp-secrets");
 }
 function mcpSecretsPath(scope, pid = process.pid) {
-  return path91.join(mcpSecretsDir(), `${pid}-${scope}.json`);
+  return path93.join(mcpSecretsDir(), `${pid}-${scope}.json`);
 }
 var registeredForCleanup = /* @__PURE__ */ new Set();
 function readFileVars(file) {
   try {
-    const parsed = JSON.parse(fs80.readFileSync(file, "utf8"));
+    const parsed = JSON.parse(fs82.readFileSync(file, "utf8"));
     if (!parsed || typeof parsed !== "object") return {};
     const out2 = {};
     for (const [k2, v] of Object.entries(parsed)) {
@@ -41104,7 +41270,7 @@ function pidAlive2(pid) {
 function pruneStale(dir) {
   let names = [];
   try {
-    names = fs80.readdirSync(dir);
+    names = fs82.readdirSync(dir);
   } catch {
     return;
   }
@@ -41114,25 +41280,25 @@ function pruneStale(dir) {
     const pid = Number(m[1]);
     if (pid === process.pid || pidAlive2(pid)) continue;
     try {
-      fs80.unlinkSync(path91.join(dir, name));
+      fs82.unlinkSync(path93.join(dir, name));
     } catch {
     }
   }
 }
 function writeMcpSecrets(vars, file) {
   try {
-    const dir = path91.dirname(file);
-    fs80.mkdirSync(dir, { recursive: true, mode: 448 });
+    const dir = path93.dirname(file);
+    fs82.mkdirSync(dir, { recursive: true, mode: 448 });
     pruneStale(dir);
     const tmp = `${file}.${process.pid}.tmp`;
-    fs80.writeFileSync(tmp, JSON.stringify(vars), { mode: 384 });
-    fs80.renameSync(tmp, file);
-    fs80.chmodSync(file, 384);
+    fs82.writeFileSync(tmp, JSON.stringify(vars), { mode: 384 });
+    fs82.renameSync(tmp, file);
+    fs82.chmodSync(file, 384);
     if (!registeredForCleanup.has(file)) {
       registeredForCleanup.add(file);
       process.once("exit", () => {
         try {
-          fs80.unlinkSync(file);
+          fs82.unlinkSync(file);
         } catch {
         }
       });
@@ -41218,11 +41384,11 @@ function previewMcpServer(bridge) {
   };
 }
 function httpCall(baseUrl, token) {
-  return async (path112, method, body, timeoutMs) => {
+  return async (path114, method, body, timeoutMs) => {
     const ac = new AbortController();
     const timer = setTimeout(() => ac.abort(), timeoutMs);
     try {
-      const res = await fetch(`${baseUrl}${path112}`, {
+      const res = await fetch(`${baseUrl}${path114}`, {
         method,
         headers: { authorization: `Bearer ${token}`, "content-type": "application/json" },
         ...method === "POST" ? { body: JSON.stringify(body ?? {}) } : {},
@@ -41350,11 +41516,11 @@ function scratchMcpServer(bridge) {
   };
 }
 function httpCall2(baseUrl, token) {
-  return async (path112, method, body, timeoutMs) => {
+  return async (path114, method, body, timeoutMs) => {
     const ac = new AbortController();
     const timer = setTimeout(() => ac.abort(), timeoutMs);
     try {
-      const res = await fetch(`${baseUrl}${path112}`, {
+      const res = await fetch(`${baseUrl}${path114}`, {
         method,
         headers: { authorization: `Bearer ${token}`, "content-type": "application/json" },
         ...method === "POST" ? { body: JSON.stringify(body ?? {}) } : {},
@@ -43939,6 +44105,7 @@ async function runAcpSession(opts) {
   try {
     handshake = await client3.start();
   } catch (startErr) {
+    opts.onHandshakeSettled?.();
     const detail = describeError(startErr);
     log.warn("acpRunner", `ACP start failed for ${opts.agent}: ${detail}`);
     await surfaceStartupFailure({
@@ -43953,6 +44120,7 @@ async function runAcpSession(opts) {
     });
     return;
   }
+  opts.onHandshakeSettled?.();
   let acpSessionId = handshake.sessionId;
   const { initialize, model: handshakeModel, tier: handshakeTier } = handshake;
   let agentCaps = initialize.agentCapabilities;
@@ -44257,17 +44425,17 @@ async function runAcpSession(opts) {
       switchCredentialEnv = provisionAgentCredentials(agentId, auth);
     },
     provisionHouseProxy: ({ baseUrl, token, model, managedAgentId }) => {
-      const claudeConfigDir2 = path94.join(
-        os59.homedir(),
+      const claudeConfigDir2 = path96.join(
+        os61.homedir(),
         ".codeam",
         "house-claude",
         `switch-${opts.pluginId}`
       );
       try {
-        fs83.mkdirSync(claudeConfigDir2, { recursive: true, mode: 448 });
+        fs85.mkdirSync(claudeConfigDir2, { recursive: true, mode: 448 });
       } catch {
       }
-      const memoryFile = path94.join(claudeConfigDir2, "CLAUDE.md");
+      const memoryFile = path96.join(claudeConfigDir2, "CLAUDE.md");
       ensureBeadsWorkflowHint(void 0, memoryFile);
       ensureAgentStandard(void 0, memoryFile);
       if (isScratchWorkspace(process.cwd())) ensureScratchWorkflowHint(void 0, memoryFile);
@@ -45498,9 +45666,9 @@ function pickPinnedSession(pinnedId, listSessions2) {
 }
 
 // src/agents/retired-proxy-cleanup.ts
-var fs84 = __toESM(require("fs"));
-var path95 = __toESM(require("path"));
-var os60 = __toESM(require("os"));
+var fs86 = __toESM(require("fs"));
+var path97 = __toESM(require("path"));
+var os62 = __toESM(require("os"));
 var RETIRED_PROXY_RE = /^https?:\/\/(?:127\.0\.0\.1|localhost|\[::1\]):8787(?:[/?#]|$)/i;
 var HEADROOM_CMD_RE = /(^|[\s/"'])headroom(\s|$)/i;
 var MARKETPLACE_KEY = "headroom-marketplace";
@@ -45509,12 +45677,12 @@ function isHeadroomHook(group) {
     (h) => typeof h?.command === "string" && HEADROOM_CMD_RE.test(h.command)
   );
 }
-function sanitizeRetiredProxyConfig(homeDir2 = os60.homedir()) {
+function sanitizeRetiredProxyConfig(homeDir2 = os62.homedir()) {
   const out2 = { inspected: false, changed: false, removed: [] };
-  const file = path95.join(homeDir2, ".claude", "settings.json");
+  const file = path97.join(homeDir2, ".claude", "settings.json");
   let parsed;
   try {
-    parsed = JSON.parse(fs84.readFileSync(file, "utf8"));
+    parsed = JSON.parse(fs86.readFileSync(file, "utf8"));
   } catch {
     return out2;
   }
@@ -45556,9 +45724,9 @@ function sanitizeRetiredProxyConfig(homeDir2 = os60.homedir()) {
   if (!out2.changed) return out2;
   try {
     const tmp = `${file}.codeam.tmp`;
-    fs84.writeFileSync(tmp, `${JSON.stringify(parsed, null, 2)}
+    fs86.writeFileSync(tmp, `${JSON.stringify(parsed, null, 2)}
 `, { mode: 384 });
-    fs84.renameSync(tmp, file);
+    fs86.renameSync(tmp, file);
   } catch {
     out2.changed = false;
   }
@@ -46090,7 +46258,7 @@ var AcpDriver = class {
 };
 
 // src/baton/transcript-mirror.ts
-var fs85 = __toESM(require("fs"));
+var fs87 = __toESM(require("fs"));
 var TranscriptMirror = class {
   constructor(deps) {
     this.deps = deps;
@@ -46184,7 +46352,7 @@ var TranscriptMirror = class {
   }
 };
 function defaultWatch(file, onChange) {
-  const w3 = fs85.watch(file, { persistent: false }, () => onChange());
+  const w3 = fs87.watch(file, { persistent: false }, () => onChange());
   return () => w3.close();
 }
 
@@ -46530,16 +46698,16 @@ function keepDeviceAwake(deps = {}) {
 }
 
 // src/agents/claude/onboarding.ts
-var fs86 = __toESM(require("fs"));
-var os62 = __toESM(require("os"));
-var path96 = __toESM(require("path"));
+var fs88 = __toESM(require("fs"));
+var os64 = __toESM(require("os"));
+var path98 = __toESM(require("path"));
 var ONBOARDING_VERSION_SENTINEL = "9999.0.0";
 function ensureClaudeOnboarded(cwd) {
   try {
-    const file = path96.join(os62.homedir(), ".claude.json");
+    const file = path98.join(os64.homedir(), ".claude.json");
     let config = {};
     try {
-      config = JSON.parse(fs86.readFileSync(file, "utf8"));
+      config = JSON.parse(fs88.readFileSync(file, "utf8"));
     } catch {
     }
     let changed = false;
@@ -46564,8 +46732,8 @@ function ensureClaudeOnboarded(cwd) {
       }
     }
     if (!changed) return;
-    fs86.mkdirSync(path96.dirname(file), { recursive: true });
-    fs86.writeFileSync(file, JSON.stringify(config, null, 2));
+    fs88.mkdirSync(path98.dirname(file), { recursive: true });
+    fs88.writeFileSync(file, JSON.stringify(config, null, 2));
     log.info(
       "claude",
       `pre-completed Claude onboarding${cwd ? ` + trusted workspace ${cwd}` : ""}`
@@ -46576,6 +46744,7 @@ function ensureClaudeOnboarded(cwd) {
 }
 
 // src/commands/start.ts
+var BEADS_AFTER_HANDSHAKE_CAP_MS = 6e4;
 async function start(requestedAgent, presetSession) {
   installRelayCrashGuards();
   showIntro();
@@ -46614,6 +46783,10 @@ async function start(requestedAgent, presetSession) {
   if (!session.agent) {
     throw new Error("Active session has no agent \u2014 re-pair with `codeam pair`.");
   }
+  if (!isLocalSession() && session.agent === "claude") {
+    const claudeBinary = resolveClaudeNativeBinary();
+    if (claudeBinary) prefetchIntoPageCache(claudeBinary);
+  }
   const pluginId = session.pluginId ?? ensurePluginId();
   showInfo(`${session.userName}  \xB7  ${import_picocolors3.default.cyan(session.plan)}`);
   showInfo(`Launching ${AGENT_REGISTRY[session.agent].displayName}...
@@ -46670,6 +46843,22 @@ async function start(requestedAgent, presetSession) {
     }
   }
   purgeExports();
+  const releaseStartupMark = markAgentStarting();
+  process.once("exit", releaseStartupMark);
+  let settleOwnHandshake = () => void 0;
+  const ownHandshakeSettled = new Promise((resolve14) => {
+    settleOwnHandshake = resolve14;
+  });
+  const releaseBeads = () => {
+    releaseStartupMark();
+    settleOwnHandshake();
+  };
+  const agentHandshakeSettled = Promise.race([
+    ownHandshakeSettled.then(
+      () => waitForNoAgentStarting({ timeoutMs: BEADS_AFTER_HANDSHAKE_CAP_MS })
+    ),
+    new Promise((resolve14) => setTimeout(resolve14, BEADS_AFTER_HANDSHAKE_CAP_MS).unref())
+  ]);
   const beadsReady = provisionBeadsForStart({
     sessionId: session.id,
     pluginId,
@@ -46677,7 +46866,8 @@ async function start(requestedAgent, presetSession) {
     cwd,
     // Wire this session's agent natively via `bd setup <recipe> --global` so
     // the agent actually uses bd (D12 — REVISED). Covers BOTH ACP and PTY.
-    agents: [session.agent]
+    agents: [session.agent],
+    deferUntil: agentHandshakeSettled
   }).then((started) => {
     beads = started;
     return started;
@@ -46746,12 +46936,13 @@ async function start(requestedAgent, presetSession) {
     if (gateTimer) clearTimeout(gateTimer);
     log.info(
       "beads",
-      `agent-spawn gate released (beads ungated, ${beads ? "already ready" : "still provisioning in background"}); project deps provisioned`
+      "agent-spawn gate released (beads waits for the agent handshake); project deps provisioned"
     );
   }
   const releaseKeepAwake = keepDeviceAwake();
   process.once("exit", releaseKeepAwake);
   if (isLocalSession() && requiresAcp(session.agent)) {
+    releaseBeads();
     const adapter = await resolveAcpAdapterWithRetry(session.agent);
     const batonCapable = runtimeSupportsBaton(createRuntimeStrategy(session.agent));
     if (batonCapable && adapter && session.pluginAuthToken) {
@@ -46815,6 +47006,7 @@ async function start(requestedAgent, presetSession) {
       adapter,
       cwd,
       getBeads,
+      onHandshakeSettled: releaseBeads,
       pollSecret: session.pollSecret,
       mcpServers,
       // AUTO mode for headless, mobile-driven sessions: no human at the box
@@ -46830,6 +47022,7 @@ async function start(requestedAgent, presetSession) {
   if (requiresAcp(session.agent)) {
     log.error("acp", `[anomaly] acp-required agent on PTY runtime (agent=${session.agent})`);
   }
+  releaseBeads();
   const runtime = createRuntimeStrategy(session.agent);
   const historySvc = new HistoryService(runtime, pluginId, cwd, {
     pluginAuthToken: session.pluginAuthToken
@@ -47357,7 +47550,7 @@ var import_picocolors10 = __toESM(require("picocolors"));
 var import_child_process30 = require("child_process");
 var import_util4 = require("util");
 var import_picocolors8 = __toESM(require("picocolors"));
-var path97 = __toESM(require("path"));
+var path99 = __toESM(require("path"));
 var execFileP6 = (0, import_util4.promisify)(import_child_process30.execFile);
 var MAX_BUFFER = 8 * 1024 * 1024;
 function resetStdinForChild() {
@@ -47846,7 +48039,7 @@ var GitHubCodespacesProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path97.posix.dirname(remotePath);
+    const remoteDir = path99.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote(remoteDir)}`,
       `cat > ${shellQuote(remotePath)}`
@@ -47916,7 +48109,7 @@ function shellQuote(s) {
 // src/services/providers/gitpod.ts
 var import_child_process31 = require("child_process");
 var import_util5 = require("util");
-var path98 = __toESM(require("path"));
+var path100 = __toESM(require("path"));
 var import_picocolors9 = __toESM(require("picocolors"));
 var execFileP7 = (0, import_util5.promisify)(import_child_process31.execFile);
 var MAX_BUFFER2 = 8 * 1024 * 1024;
@@ -48156,7 +48349,7 @@ var GitpodProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path98.posix.dirname(remotePath);
+    const remoteDir = path100.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote2(remoteDir)}`,
       `cat > ${shellQuote2(remotePath)}`
@@ -48192,7 +48385,7 @@ function shellQuote2(s) {
 // src/services/providers/gitlab-workspaces.ts
 var import_child_process32 = require("child_process");
 var import_util6 = require("util");
-var path99 = __toESM(require("path"));
+var path101 = __toESM(require("path"));
 var execFileP8 = (0, import_util6.promisify)(import_child_process32.execFile);
 var MAX_BUFFER3 = 8 * 1024 * 1024;
 var GITLAB_API_BASE = process.env.CODEAM_GITLAB_API_URL ?? "https://gitlab.com/api/v4";
@@ -48452,7 +48645,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
-    const remoteDir = path99.posix.dirname(remotePath);
+    const remoteDir = path101.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote3(remoteDir)}`, `cat > ${shellQuote3(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote3(remotePath)}`);
@@ -48520,7 +48713,7 @@ function shellQuote3(s) {
 // src/services/providers/railway.ts
 var import_child_process33 = require("child_process");
 var import_util7 = require("util");
-var path100 = __toESM(require("path"));
+var path102 = __toESM(require("path"));
 var execFileP9 = (0, import_util7.promisify)(import_child_process33.execFile);
 var MAX_BUFFER4 = 8 * 1024 * 1024;
 function resetStdinForChild4() {
@@ -48756,7 +48949,7 @@ var RailwayProvider = class {
     if (!projectId || !serviceId) {
       throw new Error("Invalid Railway workspace id (expected projectId/serviceId).");
     }
-    const remoteDir = path100.posix.dirname(remotePath);
+    const remoteDir = path102.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote4(remoteDir)}`, `cat > ${shellQuote4(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote4(remotePath)}`);
@@ -49296,14 +49489,14 @@ async function stopWorkspaceFromLocal(target) {
 }
 
 // src/commands/host/host-client.ts
-var fs87 = __toESM(require("fs"));
-var os63 = __toESM(require("os"));
-var path101 = __toESM(require("path"));
+var fs89 = __toESM(require("fs"));
+var os65 = __toESM(require("os"));
+var path103 = __toESM(require("path"));
 var import_node_crypto16 = require("crypto");
 function sampleCpuTimes() {
   let idle = 0;
   let total = 0;
-  for (const cpu of os63.cpus()) {
+  for (const cpu of os65.cpus()) {
     const t2 = cpu.times;
     idle += t2.idle;
     total += t2.user + t2.nice + t2.sys + t2.idle + t2.irq;
@@ -49323,8 +49516,8 @@ var MetricsCollector = class {
     const prev = this.prevCpu;
     this.prevCpu = current2;
     if (!prev) {
-      const cores = os63.cpus().length || 1;
-      const proxy = os63.loadavg()[0] / cores * 100;
+      const cores = os65.cpus().length || 1;
+      const proxy = os65.loadavg()[0] / cores * 100;
       return Math.min(100, Math.max(0, Math.round(proxy)));
     }
     const idleDelta = current2.idle - prev.idle;
@@ -49337,8 +49530,8 @@ var MetricsCollector = class {
   collect() {
     return {
       cpuPct: this.cpuPct(),
-      ramUsedMb: Math.round((os63.totalmem() - os63.freemem()) / 1048576),
-      ramTotalMb: Math.round(os63.totalmem() / 1048576),
+      ramUsedMb: Math.round((os65.totalmem() - os65.freemem()) / 1048576),
+      ramTotalMb: Math.round(os65.totalmem() / 1048576),
       latencyMs: this.lastLatencyMs
     };
   }
@@ -49347,19 +49540,19 @@ function apiBase() {
   return process.env.CODEAM_API_URL ?? resolveApiBaseUrl();
 }
 function hostIdentityPath() {
-  return path101.join(os63.homedir(), ".codeam", "host-agent.json");
+  return path103.join(os65.homedir(), ".codeam", "host-agent.json");
 }
 function collectOsInfo() {
   return {
-    distro: os63.platform(),
-    arch: os63.arch(),
-    kernel: os63.release(),
+    distro: os65.platform(),
+    arch: os65.arch(),
+    kernel: os65.release(),
     nodeVersion: process.versions.node
   };
 }
 function loadHostIdentity() {
   try {
-    const raw = fs87.readFileSync(hostIdentityPath(), "utf8");
+    const raw = fs89.readFileSync(hostIdentityPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null && typeof parsed.hostId === "string" && typeof parsed.hostToken === "string" && typeof parsed.controlPluginId === "string") {
       const p2 = parsed;
@@ -49387,8 +49580,8 @@ function ensureControlPollSecret(identity, save = saveHostIdentity) {
 }
 function saveHostIdentity(identity) {
   const file = hostIdentityPath();
-  fs87.mkdirSync(path101.dirname(file), { recursive: true, mode: 448 });
-  fs87.writeFileSync(file, JSON.stringify(identity, null, 2), {
+  fs89.mkdirSync(path103.dirname(file), { recursive: true, mode: 448 });
+  fs89.writeFileSync(file, JSON.stringify(identity, null, 2), {
     encoding: "utf8",
     mode: 384
   });
@@ -49433,7 +49626,7 @@ function isTerminalEnrollError(err) {
 }
 function deleteHostIdentity() {
   try {
-    fs87.rmSync(hostIdentityPath(), { force: true });
+    fs89.rmSync(hostIdentityPath(), { force: true });
   } catch {
   }
 }
@@ -49457,7 +49650,7 @@ async function postJson(pathname, body) {
 function resolveHostLabel(label) {
   const explicit = label?.trim();
   const envLabel = process.env.CODEAM_HOST_LABEL?.trim();
-  const resolved = explicit || envLabel || os63.hostname();
+  const resolved = explicit || envLabel || os65.hostname();
   return resolved.slice(0, 80);
 }
 async function redeemEnrollToken(token, label) {
@@ -49650,9 +49843,9 @@ async function host(args2) {
 
 // src/commands/host-agent.ts
 var import_node_child_process36 = require("child_process");
-var os69 = __toESM(require("os"));
-var fs94 = __toESM(require("fs"));
-var path108 = __toESM(require("path"));
+var os71 = __toESM(require("os"));
+var fs96 = __toESM(require("fs"));
+var path110 = __toESM(require("path"));
 
 // src/skills/persist-from-payload.ts
 function persistOrClearSkillsFromPayload(skills) {
@@ -49661,13 +49854,13 @@ function persistOrClearSkillsFromPayload(skills) {
 }
 
 // src/commands/host/session-state.ts
-var fs88 = __toESM(require("fs"));
-var os64 = __toESM(require("os"));
-var path102 = __toESM(require("path"));
+var fs90 = __toESM(require("fs"));
+var os66 = __toESM(require("os"));
+var path104 = __toESM(require("path"));
 function hostSessionStatePath(env = process.env) {
   const override = env.CODEAM_HOST_SESSION_STATE_FILE;
   if (override && override.trim()) return override.trim();
-  return path102.join(os64.homedir(), ".codeam", "host-agent-sessions.json");
+  return path104.join(os66.homedir(), ".codeam", "host-agent-sessions.json");
 }
 function isRecord5(v) {
   if (typeof v !== "object" || v === null) return false;
@@ -49678,7 +49871,7 @@ function fileSessionChildStore(file = hostSessionStatePath()) {
   return {
     load() {
       try {
-        const raw = JSON.parse(fs88.readFileSync(file, "utf8"));
+        const raw = JSON.parse(fs90.readFileSync(file, "utf8"));
         return Array.isArray(raw?.sessions) ? raw.sessions.filter(isRecord5) : null;
       } catch {
         return null;
@@ -49686,18 +49879,18 @@ function fileSessionChildStore(file = hostSessionStatePath()) {
     },
     save(list) {
       try {
-        fs88.mkdirSync(path102.dirname(file), { recursive: true, mode: 448 });
+        fs90.mkdirSync(path104.dirname(file), { recursive: true, mode: 448 });
         const tmp = `${file}.${process.pid}.tmp`;
-        fs88.writeFileSync(tmp, JSON.stringify({ version: 1, sessions: list }, null, 2), {
+        fs90.writeFileSync(tmp, JSON.stringify({ version: 1, sessions: list }, null, 2), {
           mode: 384
         });
-        fs88.renameSync(tmp, file);
+        fs90.renameSync(tmp, file);
       } catch {
       }
     },
     clear() {
       try {
-        fs88.rmSync(file, { force: true });
+        fs90.rmSync(file, { force: true });
       } catch {
       }
     }
@@ -49720,10 +49913,10 @@ function planSessionResume(records, max) {
   return { resume: ordered.slice(0, bound), dropped: ordered.slice(bound) };
 }
 function pickSavedSessionForWorkspace(sessions3, cwd, deployId) {
-  const target = path102.resolve(cwd);
+  const target = path104.resolve(cwd);
   const reconnectable = (s) => !!s.pluginId && !!s.pollSecret && !!s.agent;
   const matches = sessions3.filter(
-    (s) => !!s.cwd && path102.resolve(s.cwd) === target && reconnectable(s)
+    (s) => !!s.cwd && path104.resolve(s.cwd) === target && reconnectable(s)
   );
   if (matches.length > 0) {
     matches.sort((a, b) => b.pairedAt - a.pairedAt);
@@ -49735,11 +49928,11 @@ function pickSavedSessionForWorkspace(sessions3, cwd, deployId) {
 
 // src/commands/host/git-tooling.ts
 var import_node_child_process31 = require("child_process");
-var fs89 = __toESM(require("fs"));
-var os65 = __toESM(require("os"));
-var path103 = __toESM(require("path"));
+var fs91 = __toESM(require("fs"));
+var os67 = __toESM(require("os"));
+var path105 = __toESM(require("path"));
 function codeamBinDir() {
-  return process.env.CODEAM_BIN_DIR ?? path103.join(os65.homedir(), ".codeam", "bin");
+  return process.env.CODEAM_BIN_DIR ?? path105.join(os67.homedir(), ".codeam", "bin");
 }
 var FALLBACK_GH_VERSION = "2.62.0";
 var RELEASE_API = "https://api.github.com/repos/cli/cli/releases/latest";
@@ -49771,7 +49964,7 @@ async function download(url2, dest) {
     const res = await fetch(url2, { headers: { "User-Agent": "codeam-cli" } });
     if (!res.ok || !res.body) return false;
     const buf = Buffer.from(await res.arrayBuffer());
-    fs89.writeFileSync(dest, buf);
+    fs91.writeFileSync(dest, buf);
     return true;
   } catch {
     return false;
@@ -49794,8 +49987,8 @@ async function ensureGhCli(runner, token, deps = {}) {
     const version3 = await resolveVersionFn(token);
     const asset = `gh_${version3}_${osToken}_${arch2}`;
     const url2 = `https://github.com/cli/cli/releases/download/v${version3}/${asset}.${ext}`;
-    const tmpRoot = fs89.mkdtempSync(path103.join(os65.tmpdir(), "codeam-gh-"));
-    const archive = path103.join(tmpRoot, `${asset}.${ext}`);
+    const tmpRoot = fs91.mkdtempSync(path105.join(os67.tmpdir(), "codeam-gh-"));
+    const archive = path105.join(tmpRoot, `${asset}.${ext}`);
     if (!await downloadFn(url2, archive)) {
       log.warn("host-agent", "gh download failed \u2014 skipping (git pull/push still work via the credential helper)");
       return null;
@@ -49805,16 +49998,16 @@ async function ensureGhCli(runner, token, deps = {}) {
       log.warn("host-agent", `gh archive extraction failed (code=${String(extract.code)}) \u2014 skipping`);
       return null;
     }
-    const extractedBin = path103.join(tmpRoot, asset, "bin", binaryName);
-    if (!fs89.existsSync(extractedBin)) {
+    const extractedBin = path105.join(tmpRoot, asset, "bin", binaryName);
+    if (!fs91.existsSync(extractedBin)) {
       log.warn("host-agent", "gh binary not found in the extracted archive \u2014 skipping");
       return null;
     }
     const binDir = codeamBinDir();
-    fs89.mkdirSync(binDir, { recursive: true });
-    const target = path103.join(binDir, binaryName);
-    fs89.copyFileSync(extractedBin, target);
-    fs89.chmodSync(target, 493);
+    fs91.mkdirSync(binDir, { recursive: true });
+    const target = path105.join(binDir, binaryName);
+    fs91.copyFileSync(extractedBin, target);
+    fs91.chmodSync(target, 493);
     log.info("host-agent", `gh installed to ${target} (v${version3})`);
     return target;
   } catch (e) {
@@ -49851,19 +50044,19 @@ async function ensureGhAuth(runner, ghCmd, token) {
 }
 function ghConfigDir() {
   if (process.env.GH_CONFIG_DIR) return process.env.GH_CONFIG_DIR;
-  if (process.env.XDG_CONFIG_HOME) return path103.join(process.env.XDG_CONFIG_HOME, "gh");
+  if (process.env.XDG_CONFIG_HOME) return path105.join(process.env.XDG_CONFIG_HOME, "gh");
   if (process.platform === "win32" && process.env.APPDATA) {
-    return path103.join(process.env.APPDATA, "GitHub CLI");
+    return path105.join(process.env.APPDATA, "GitHub CLI");
   }
-  return path103.join(os65.homedir(), ".config", "gh");
+  return path105.join(os67.homedir(), ".config", "gh");
 }
 function writeGhHostsToken(token) {
   try {
     const dir = ghConfigDir();
-    const file = path103.join(dir, "hosts.yml");
-    if (fs89.existsSync(file)) return false;
-    fs89.mkdirSync(dir, { recursive: true, mode: 448 });
-    fs89.writeFileSync(
+    const file = path105.join(dir, "hosts.yml");
+    if (fs91.existsSync(file)) return false;
+    fs91.mkdirSync(dir, { recursive: true, mode: 448 });
+    fs91.writeFileSync(
       file,
       `github.com:
     oauth_token: ${token}
@@ -49906,8 +50099,8 @@ async function ensureGlabCli(runner, deps = {}) {
     const version3 = await resolveLatestGlabVersion();
     const asset = `glab_${version3}_${osToken}_${arch2}`;
     const url2 = `https://gitlab.com/gitlab-org/cli/-/releases/v${version3}/downloads/${asset}.${ext}`;
-    const tmpRoot = fs89.mkdtempSync(path103.join(os65.tmpdir(), "codeam-glab-"));
-    const archive = path103.join(tmpRoot, `${asset}.${ext}`);
+    const tmpRoot = fs91.mkdtempSync(path105.join(os67.tmpdir(), "codeam-glab-"));
+    const archive = path105.join(tmpRoot, `${asset}.${ext}`);
     if (!await downloadFn(url2, archive)) {
       log.warn("host-agent", "glab download failed \u2014 skipping (git push/pull still work)");
       return null;
@@ -49918,20 +50111,20 @@ async function ensureGlabCli(runner, deps = {}) {
       return null;
     }
     const candidates = [
-      path103.join(tmpRoot, "bin", binaryName),
-      path103.join(tmpRoot, asset, "bin", binaryName),
-      path103.join(tmpRoot, binaryName)
+      path105.join(tmpRoot, "bin", binaryName),
+      path105.join(tmpRoot, asset, "bin", binaryName),
+      path105.join(tmpRoot, binaryName)
     ];
-    const extractedBin = candidates.find((c2) => fs89.existsSync(c2));
+    const extractedBin = candidates.find((c2) => fs91.existsSync(c2));
     if (!extractedBin) {
       log.warn("host-agent", "glab binary not found in the extracted archive \u2014 skipping");
       return null;
     }
     const binDir = codeamBinDir();
-    fs89.mkdirSync(binDir, { recursive: true });
-    const target = path103.join(binDir, binaryName);
-    fs89.copyFileSync(extractedBin, target);
-    fs89.chmodSync(target, 493);
+    fs91.mkdirSync(binDir, { recursive: true });
+    const target = path105.join(binDir, binaryName);
+    fs91.copyFileSync(extractedBin, target);
+    fs91.chmodSync(target, 493);
     log.info("host-agent", `glab installed to ${target} (v${version3})`);
     return target;
   } catch (e) {
@@ -50010,14 +50203,14 @@ var defaultGitToolingRunner = {
 };
 
 // src/lib/cli-versions.ts
-var fs91 = __toESM(require("fs"));
-var os67 = __toESM(require("os"));
-var path105 = __toESM(require("path"));
+var fs93 = __toESM(require("fs"));
+var os69 = __toESM(require("os"));
+var path107 = __toESM(require("path"));
 
 // src/lib/updateNotifier.ts
-var fs90 = __toESM(require("fs"));
-var os66 = __toESM(require("os"));
-var path104 = __toESM(require("path"));
+var fs92 = __toESM(require("fs"));
+var os68 = __toESM(require("os"));
+var path106 = __toESM(require("path"));
 var https8 = __toESM(require("https"));
 var import_node_child_process32 = require("child_process");
 var import_picocolors12 = __toESM(require("picocolors"));
@@ -50026,12 +50219,12 @@ var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
 var TTL_MS = 24 * 60 * 60 * 1e3;
 var REQUEST_TIMEOUT_MS = 1500;
 function cachePath() {
-  const dir = path104.join(os66.homedir(), ".codeam");
-  return path104.join(dir, "update-check.json");
+  const dir = path106.join(os68.homedir(), ".codeam");
+  return path106.join(dir, "update-check.json");
 }
 function readCache() {
   try {
-    const raw = fs90.readFileSync(cachePath(), "utf8");
+    const raw = fs92.readFileSync(cachePath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.fetchedAt !== "number" || typeof parsed.latest !== "string") return null;
     return parsed;
@@ -50042,10 +50235,10 @@ function readCache() {
 function writeCache(cache) {
   try {
     const file = cachePath();
-    fs90.mkdirSync(path104.dirname(file), { recursive: true });
+    fs92.mkdirSync(path106.dirname(file), { recursive: true });
     const tmp = `${file}.${process.pid}.tmp`;
-    fs90.writeFileSync(tmp, JSON.stringify(cache));
-    fs90.renameSync(tmp, file);
+    fs92.writeFileSync(tmp, JSON.stringify(cache));
+    fs92.renameSync(tmp, file);
   } catch {
   }
 }
@@ -50119,8 +50312,8 @@ function isLinkedInstall() {
       timeout: 2e3
     }).trim();
     if (!root) return false;
-    const pkgPath = path104.join(root, PKG_NAME);
-    return fs90.lstatSync(pkgPath).isSymbolicLink();
+    const pkgPath = path106.join(root, PKG_NAME);
+    return fs92.lstatSync(pkgPath).isSymbolicLink();
   } catch {
     return false;
   }
@@ -50156,7 +50349,7 @@ function maybeAutoUpdate(currentVersion, latest) {
     return;
   }
   try {
-    fs90.unlinkSync(cachePath());
+    fs92.unlinkSync(cachePath());
   } catch {
   }
   process.stderr.write(`  ${import_picocolors12.default.green("\u2713")} Updated. Resuming session...
@@ -50172,7 +50365,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.76.11" : null;
+  const current2 = true ? "2.76.13" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -50189,7 +50382,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.76.11" : null;
+  const current2 = true ? "2.76.13" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -50212,10 +50405,10 @@ function versionedModeSupported(platform3 = process.platform) {
   return platform3 !== "win32";
 }
 function cliVersionsRoot(env = process.env) {
-  return env.CODEAM_CLI_VERSIONS_DIR || path105.join(os67.homedir(), ".codeam", "cli");
+  return env.CODEAM_CLI_VERSIONS_DIR || path107.join(os69.homedir(), ".codeam", "cli");
 }
 function packageDirOf(versionDir) {
-  return path105.join(versionDir, "node_modules", CLI_PKG);
+  return path107.join(versionDir, "node_modules", CLI_PKG);
 }
 function isRecord6(v) {
   return typeof v === "object" && v !== null;
@@ -50223,7 +50416,7 @@ function isRecord6(v) {
 function readPkg2(versionDir) {
   try {
     const raw = JSON.parse(
-      fs91.readFileSync(path105.join(packageDirOf(versionDir), "package.json"), "utf8")
+      fs93.readFileSync(path107.join(packageDirOf(versionDir), "package.json"), "utf8")
     );
     return isRecord6(raw) ? raw : null;
   } catch {
@@ -50236,15 +50429,15 @@ function entryOf(versionDir) {
   const bin = pkg.bin;
   const named = isRecord6(bin) ? bin.codeam : void 0;
   const rel = typeof bin === "string" ? bin : typeof named === "string" ? named : "dist/index.js";
-  const entry = path105.join(packageDirOf(versionDir), rel);
-  return fs91.existsSync(entry) ? entry : null;
+  const entry = path107.join(packageDirOf(versionDir), rel);
+  return fs93.existsSync(entry) ? entry : null;
 }
 function launcherOf(versionDir) {
   const entry = entryOf(versionDir);
   if (!entry) return null;
-  const bin = path105.join(versionDir, "node_modules", ".bin", "codeam");
+  const bin = path107.join(versionDir, "node_modules", ".bin", "codeam");
   try {
-    return fs91.realpathSync(bin) === fs91.realpathSync(entry) ? bin : entry;
+    return fs93.realpathSync(bin) === fs93.realpathSync(entry) ? bin : entry;
   } catch {
     return entry;
   }
@@ -50257,16 +50450,16 @@ var BAD_MARKER_TTL_MS = 24 * 60 * 6e4;
 var PRE_READY_WINDOW_MS = 60 * 6e4;
 function isBad(versionDir, now = Date.now()) {
   try {
-    return now - fs91.statSync(path105.join(versionDir, ".bad")).mtimeMs < BAD_MARKER_TTL_MS;
+    return now - fs93.statSync(path107.join(versionDir, ".bad")).mtimeMs < BAD_MARKER_TTL_MS;
   } catch {
     return false;
   }
 }
 function recordPreReadyFailure(versionDir, now = Date.now()) {
-  const file = path105.join(versionDir, ".prefail");
+  const file = path107.join(versionDir, ".prefail");
   let count = 0;
   try {
-    const [n, at3] = fs91.readFileSync(file, "utf8").trim().split(" ").map(Number);
+    const [n, at3] = fs93.readFileSync(file, "utf8").trim().split(" ").map(Number);
     if (Number.isFinite(n) && Number.isFinite(at3) && now - at3 < PRE_READY_WINDOW_MS) {
       count = n;
     }
@@ -50274,41 +50467,41 @@ function recordPreReadyFailure(versionDir, now = Date.now()) {
   }
   count += 1;
   try {
-    fs91.writeFileSync(file, `${count} ${now}`);
+    fs93.writeFileSync(file, `${count} ${now}`);
   } catch {
   }
   return count;
 }
 function clearPreReadyFailures(versionDir) {
-  fs91.rmSync(path105.join(versionDir, ".prefail"), { force: true });
+  fs93.rmSync(path107.join(versionDir, ".prefail"), { force: true });
 }
 function markBad(versionDir, reason) {
   try {
-    fs91.writeFileSync(path105.join(versionDir, ".bad"), `${(/* @__PURE__ */ new Date()).toISOString()} ${reason}
+    fs93.writeFileSync(path107.join(versionDir, ".bad"), `${(/* @__PURE__ */ new Date()).toISOString()} ${reason}
 `);
   } catch {
   }
 }
 function pointerTarget(root, name) {
   try {
-    return fs91.realpathSync(path105.join(root, name));
+    return fs93.realpathSync(path107.join(root, name));
   } catch {
     return null;
   }
 }
 function atomicPoint(root, name, targetDir) {
-  const tmp = path105.join(root, `.${name}.tmp-${process.pid}-${Date.now()}`);
-  fs91.symlinkSync(path105.relative(root, targetDir), tmp, "dir");
+  const tmp = path107.join(root, `.${name}.tmp-${process.pid}-${Date.now()}`);
+  fs93.symlinkSync(path107.relative(root, targetDir), tmp, "dir");
   try {
-    fs91.renameSync(tmp, path105.join(root, name));
+    fs93.renameSync(tmp, path107.join(root, name));
   } catch (err) {
-    fs91.rmSync(tmp, { force: true });
+    fs93.rmSync(tmp, { force: true });
     throw err;
   }
 }
 function switchCurrent(root, versionDir) {
   const old = pointerTarget(root, "current");
-  if (old && path105.resolve(old) !== path105.resolve(versionDir)) atomicPoint(root, "previous", old);
+  if (old && path107.resolve(old) !== path107.resolve(versionDir)) atomicPoint(root, "previous", old);
   atomicPoint(root, "current", versionDir);
 }
 function validCurrent(root) {
@@ -50322,7 +50515,7 @@ function rollbackCurrent(root) {
   const prev = pointerTarget(root, "previous");
   if (!prev || isBad(prev) || !entryOf(prev)) return null;
   const cur = pointerTarget(root, "current");
-  if (cur && path105.resolve(cur) !== path105.resolve(prev)) atomicPoint(root, "previous", cur);
+  if (cur && path107.resolve(cur) !== path107.resolve(prev)) atomicPoint(root, "previous", cur);
   atomicPoint(root, "current", prev);
   return versionOf(prev);
 }
@@ -50336,15 +50529,15 @@ function versionDirContaining(root, file) {
   let real;
   let realRoot;
   try {
-    real = fs91.realpathSync(file);
-    realRoot = fs91.realpathSync(root);
+    real = fs93.realpathSync(file);
+    realRoot = fs93.realpathSync(root);
   } catch {
     return null;
   }
-  const rel = path105.relative(realRoot, real);
-  if (rel.startsWith("..") || path105.isAbsolute(rel)) return null;
-  const first = rel.split(path105.sep)[0];
-  return first && SEMVER_DIR.test(first) ? path105.join(realRoot, first) : null;
+  const rel = path107.relative(realRoot, real);
+  if (rel.startsWith("..") || path107.isAbsolute(rel)) return null;
+  const first = rel.split(path107.sep)[0];
+  return first && SEMVER_DIR.test(first) ? path107.join(realRoot, first) : null;
 }
 function pidAlive3(pid) {
   try {
@@ -50357,7 +50550,7 @@ function pidAlive3(pid) {
 function livePids(versionDir) {
   let names;
   try {
-    names = fs91.readdirSync(path105.join(versionDir, ".pids"));
+    names = fs93.readdirSync(path107.join(versionDir, ".pids"));
   } catch {
     return [];
   }
@@ -50366,11 +50559,11 @@ function livePids(versionDir) {
 function registerRunningVersion(root = cliVersionsRoot(), entry = process.argv[1]) {
   const dir = versionDirContaining(root, entry);
   if (!dir) return;
-  const file = path105.join(dir, ".pids", String(process.pid));
+  const file = path107.join(dir, ".pids", String(process.pid));
   try {
-    fs91.mkdirSync(path105.dirname(file), { recursive: true });
-    fs91.writeFileSync(file, "");
-    process.once("exit", () => fs91.rmSync(file, { force: true }));
+    fs93.mkdirSync(path107.dirname(file), { recursive: true });
+    fs93.writeFileSync(file, "");
+    process.once("exit", () => fs93.rmSync(file, { force: true }));
   } catch {
   }
 }
@@ -50378,7 +50571,7 @@ function gcVersions(root) {
   const removed = [];
   let names;
   try {
-    names = fs91.readdirSync(root).filter((n) => SEMVER_DIR.test(n));
+    names = fs93.readdirSync(root).filter((n) => SEMVER_DIR.test(n));
   } catch {
     return removed;
   }
@@ -50386,13 +50579,13 @@ function gcVersions(root) {
     [...names].sort((a, b) => compareSemver(b, a)).slice(0, GC_KEEP_NEWEST)
   );
   for (const p2 of [pointerTarget(root, "current"), pointerTarget(root, "previous")]) {
-    if (p2) keep.add(path105.basename(p2));
+    if (p2) keep.add(path107.basename(p2));
   }
   for (const name of names) {
-    const dir = path105.join(root, name);
+    const dir = path107.join(root, name);
     if (keep.has(name) || livePids(dir).length > 0) continue;
     try {
-      fs91.rmSync(dir, { recursive: true, force: true });
+      fs93.rmSync(dir, { recursive: true, force: true });
       removed.push(name);
     } catch {
     }
@@ -50400,25 +50593,25 @@ function gcVersions(root) {
   return removed;
 }
 function acquireInstallLock(root) {
-  const lock = path105.join(root, ".install.lock");
+  const lock = path107.join(root, ".install.lock");
   for (let attempt = 0; attempt < 2; attempt++) {
     try {
-      const fd = fs91.openSync(lock, "wx");
-      fs91.writeSync(fd, String(process.pid));
-      fs91.closeSync(fd);
-      return () => fs91.rmSync(lock, { force: true });
+      const fd = fs93.openSync(lock, "wx");
+      fs93.writeSync(fd, String(process.pid));
+      fs93.closeSync(fd);
+      return () => fs93.rmSync(lock, { force: true });
     } catch (err) {
       if (err.code !== "EEXIST") return null;
       let stale = false;
       try {
-        const owner = Number(fs91.readFileSync(lock, "utf8"));
-        const age = Date.now() - fs91.statSync(lock).mtimeMs;
+        const owner = Number(fs93.readFileSync(lock, "utf8"));
+        const age = Date.now() - fs93.statSync(lock).mtimeMs;
         stale = !Number.isInteger(owner) || !pidAlive3(owner) || age > LOCK_STALE_MS;
       } catch {
         stale = true;
       }
       if (!stale) return null;
-      fs91.rmSync(lock, { force: true });
+      fs93.rmSync(lock, { force: true });
     }
   }
   return null;
@@ -50426,9 +50619,9 @@ function acquireInstallLock(root) {
 
 // src/commands/host/host-launch.ts
 var import_node_child_process34 = require("child_process");
-var fs93 = __toESM(require("fs"));
-var os68 = __toESM(require("os"));
-var path107 = __toESM(require("path"));
+var fs95 = __toESM(require("fs"));
+var os70 = __toESM(require("os"));
+var path109 = __toESM(require("path"));
 
 // src/exit-codes.ts
 var EXIT_OK = 0;
@@ -50450,8 +50643,8 @@ var EXIT_CODE_NAMES = {
 
 // src/commands/host/self-update.ts
 var import_node_child_process33 = require("child_process");
-var fs92 = __toESM(require("fs"));
-var path106 = __toESM(require("path"));
+var fs94 = __toESM(require("fs"));
+var path108 = __toESM(require("path"));
 var SELF_UPDATE_PKG = "codeam-cli";
 var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_STARTUP_DELAY_MS = 5e3;
@@ -50460,7 +50653,7 @@ var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
 function currentCliVersion() {
-  return true ? "2.76.11" : null;
+  return true ? "2.76.13" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -50552,9 +50745,9 @@ async function runSelfUpdateWith(deps) {
 var VERIFY_TIMEOUT_MS = 3e4;
 async function installVersioned(deps, root, latest, running2) {
   const node = deps.nodePath ?? process.execPath;
-  const target = path106.join(root, latest);
+  const target = path108.join(root, latest);
   try {
-    fs92.mkdirSync(root, { recursive: true });
+    fs94.mkdirSync(root, { recursive: true });
   } catch {
     return { status: "skipped" };
   }
@@ -50571,10 +50764,10 @@ async function installVersioned(deps, root, latest, running2) {
     const runningDir = versionDirContaining(root, deps.runningEntry);
     const reusable = entryOf(target) && versionOf(target) === latest;
     if (!reusable) {
-      if (runningDir && path106.resolve(runningDir) === path106.resolve(target)) {
+      if (runningDir && path108.resolve(runningDir) === path108.resolve(target)) {
         return { status: "skipped" };
       }
-      fs92.rmSync(target, { recursive: true, force: true });
+      fs94.rmSync(target, { recursive: true, force: true });
       const install = await deps.run(
         "npm",
         [
@@ -50589,7 +50782,7 @@ async function installVersioned(deps, root, latest, running2) {
         SELF_UPDATE_INSTALL_TIMEOUT_MS
       );
       if (install.code !== 0) {
-        fs92.rmSync(target, { recursive: true, force: true });
+        fs94.rmSync(target, { recursive: true, force: true });
         log.warn(
           "host-agent",
           `self-update: versioned install exited ${String(install.code)} \u2014 staying on ${running2}: ` + install.stderr.slice(-300)
@@ -50600,7 +50793,7 @@ async function installVersioned(deps, root, latest, running2) {
     const entry = entryOf(target);
     const check = entry ? await deps.run(node, [entry, "--version"], VERIFY_TIMEOUT_MS) : { code: null, stdout: "", stderr: "no entry point" };
     if (check.code !== 0 || !check.stdout.includes(latest)) {
-      fs92.rmSync(target, { recursive: true, force: true });
+      fs94.rmSync(target, { recursive: true, force: true });
       log.warn(
         "host-agent",
         `self-update: ${latest} failed verification (exit ${String(check.code)}: ${(check.stdout + check.stderr).trim().slice(-200)}) \u2014 staying on ${running2}`
@@ -50616,7 +50809,7 @@ async function installVersioned(deps, root, latest, running2) {
     return { status: "updated", version: latest };
   } catch (err) {
     const cur = pointerTarget(root, "current");
-    if (!cur || path106.basename(cur) !== latest) fs92.rmSync(target, { recursive: true, force: true });
+    if (!cur || path108.basename(cur) !== latest) fs94.rmSync(target, { recursive: true, force: true });
     log.warn(
       "host-agent",
       `self-update: versioned install failed: ${err instanceof Error ? err.message : String(err)}`
@@ -50655,7 +50848,7 @@ function signalHostReady(send = process.send?.bind(process)) {
 }
 function defaultDeps() {
   return {
-    ownVersion: true ? "2.76.11" : null,
+    ownVersion: true ? "2.76.13" : null,
     root: cliVersionsRoot(),
     args: process.argv.slice(3),
     execPath: process.execPath,
@@ -50752,13 +50945,13 @@ function needsSelfRelaunch(env = process.env, pid = process.pid, ctx = {}) {
 }
 function readPid1Cmdline() {
   try {
-    return fs93.readFileSync("/proc/1/cmdline", "utf8").split("\0").filter(Boolean);
+    return fs95.readFileSync("/proc/1/cmdline", "utf8").split("\0").filter(Boolean);
   } catch {
     return [];
   }
 }
 function isOurTiniEntrypoint(argv) {
-  return argv.some((a) => path107.basename(a) === "tini") && argv.includes("host-agent");
+  return argv.some((a) => path109.basename(a) === "tini") && argv.includes("host-agent");
 }
 function relaunchArgv(execPath, argv) {
   return ["-c", 'sleep 2; exec "$0" "$@"', execPath, ...argv.slice(1)];
@@ -50791,7 +50984,7 @@ function defaultRestartForUpdate(version3, supervised, io = {}) {
   }
   exit(0);
 }
-function isContainerEnvironment(existsSyncFn = fs93.existsSync, readFileSyncFn = (p2) => fs93.readFileSync(p2, "utf8")) {
+function isContainerEnvironment(existsSyncFn = fs95.existsSync, readFileSyncFn = (p2) => fs95.readFileSync(p2, "utf8")) {
   try {
     if (existsSyncFn("/.dockerenv")) return true;
   } catch {
@@ -50803,16 +50996,16 @@ function isContainerEnvironment(existsSyncFn = fs93.existsSync, readFileSyncFn =
   }
   return false;
 }
-function hostAgentPidFile(home = os68.homedir()) {
-  return path107.join(home, ".codeam", "host-agent.pid");
+function hostAgentPidFile(home = os70.homedir()) {
+  return path109.join(home, ".codeam", "host-agent.pid");
 }
 function writeHostAgentPidFile(file = hostAgentPidFile(), pid = process.pid) {
   try {
-    fs93.mkdirSync(path107.dirname(file), { recursive: true });
-    fs93.writeFileSync(file, String(pid));
+    fs95.mkdirSync(path109.dirname(file), { recursive: true });
+    fs95.writeFileSync(file, String(pid));
     process.once("exit", () => {
       try {
-        if (fs93.readFileSync(file, "utf8").trim() === String(pid)) fs93.rmSync(file, { force: true });
+        if (fs95.readFileSync(file, "utf8").trim() === String(pid)) fs95.rmSync(file, { force: true });
       } catch {
       }
     });
@@ -50832,6 +51025,55 @@ var defaultDisableService = () => {
   }
 };
 
+// src/commands/host/fleet-image-gc.ts
+var FLEET_ROLLBACK_TAG = "rollback";
+var FLEET_IMAGE_INSPECT_FORMAT = '{{.Id}}|{{.Created}}|{{join .RepoTags ","}}|{{join .RootFS.Layers ","}}';
+function repoOfImageRef(ref) {
+  const colon = ref.lastIndexOf(":");
+  return colon > ref.lastIndexOf("/") ? ref.slice(0, colon) : ref;
+}
+function parseFleetImageInspect(stdout) {
+  const out2 = [];
+  for (const line of stdout.split("\n")) {
+    const parts = line.trim().split("|");
+    if (parts.length !== 4 || !parts[0].startsWith("sha256:")) continue;
+    const [id, created, tags, layers] = parts;
+    out2.push({
+      id,
+      created,
+      repoTags: tags ? tags.split(",").filter((t2) => t2 && t2 !== "<none>:<none>") : [],
+      layers: layers ? layers.split(",") : []
+    });
+  }
+  return out2;
+}
+function planFleetBoxImageGc(input) {
+  const { images, referenced, currentId, currentRef } = input;
+  const current2 = images.find((i) => i.id === currentId);
+  if (!current2) return { removeTags: [] };
+  const currentRepo = repoOfImageRef(currentRef);
+  const boxRepos = /* @__PURE__ */ new Set([currentRepo, "codeam-box"]);
+  const boxTagsOf = (img) => img.repoTags.filter((t2) => boxRepos.has(repoOfImageRef(t2)));
+  const baseLayer = current2.layers[0];
+  const isBox = (img) => boxTagsOf(img).length > 0 || img.repoTags.length === 0 && !!baseLayer && img.layers[0] === baseLayer;
+  const previous = images.filter((i) => i.id !== currentId && isBox(i)).sort((a, b) => Date.parse(b.created) - Date.parse(a.created));
+  const rollback = previous[0];
+  const rollbackTag = `${currentRepo}:${FLEET_ROLLBACK_TAG}`;
+  const tagAs = rollback && boxTagsOf(rollback).length === 0 ? rollbackTag : void 0;
+  const removeTags = [];
+  for (const img of previous.slice(1)) {
+    if (referenced.has(img.id)) continue;
+    for (const tag of boxTagsOf(img)) {
+      if (tagAs && tag === rollbackTag) continue;
+      removeTags.push(tag);
+    }
+  }
+  return {
+    rollback: rollback ? { id: rollback.id, ...tagAs ? { tagAs } : {} } : void 0,
+    removeTags
+  };
+}
+
 // src/commands/host-agent.ts
 var HEARTBEAT_INTERVAL_MS = 2e4;
 var RESUME_RETRY_BACKOFF_MS = [15e3, 3e4, 6e4, 12e4];
@@ -50996,6 +51238,7 @@ function buildFleetBoxRunArgs(p2) {
 }
 var DOCKER_RUN_TIMEOUT_MS = 12e4;
 var DOCKER_RUN_WITH_PULL_TIMEOUT_MS = 6e5;
+var DOCKER_PRUNE_TIMEOUT_MS = 6e5;
 var defaultDockerRunner = {
   run(args2, opts = {}) {
     return new Promise((resolve14) => {
@@ -51520,13 +51763,13 @@ var HostAgentSupervisor = class {
     const relay = this.relay;
     if (!relay) return;
     const raw = cmd.payload?.path;
-    const target = typeof raw === "string" && raw.trim() ? path108.resolve(raw.trim()) : os69.homedir();
+    const target = typeof raw === "string" && raw.trim() ? path110.resolve(raw.trim()) : os71.homedir();
     try {
-      const dirents = await fs94.promises.readdir(target, { withFileTypes: true });
+      const dirents = await fs96.promises.readdir(target, { withFileTypes: true });
       const entries2 = dirents.filter((d3) => !d3.name.startsWith(".")).map((d3) => ({ name: d3.name, isDir: d3.isDirectory() })).sort(
         (a, b) => a.isDir === b.isDir ? a.name.localeCompare(b.name) : a.isDir ? -1 : 1
       );
-      const parent = path108.dirname(target);
+      const parent = path110.dirname(target);
       await relay.sendResult(cmd.id, "completed", {
         path: target,
         // null at the filesystem root so the UI can hide the ".." affordance.
@@ -51767,22 +52010,42 @@ var HostAgentSupervisor = class {
    * `fleet_prune_host` — reclaim Docker residue. Best-effort and idempotent: a
    * prune with nothing to collect exits 0 with "Total reclaimed space: 0B".
    *
-   * ⚠️ Only ever `image prune` (dangling) and `builder prune`. NEVER
-   * `container prune` (a stopped fleet container is a SLEEPING BOX) and NEVER
-   * `volume prune` (a box's volume is the user's workspace and outlives its
-   * container by design). See `FleetPruneHostPayload`.
+   * ⚠️ Only superseded Box images, `image prune` (dangling) and `builder prune`.
+   * NEVER `container prune` (a stopped fleet container is a SLEEPING BOX) and
+   * NEVER `volume prune` (a box's volume is the user's workspace and outlives
+   * its container by design). See `FleetPruneHostPayload`.
+   *
+   * ⚠️ Every step runs on the LONG docker bound. Under the 120 s one the dangling
+   * prune never finished on fleet-1: the prod and dev host-agents share one
+   * daemon and both get this command at 15:45 UTC; dev's prune was SIGTERM'd at
+   * 120 s (code=143) and prod's was refused with "a prune operation is already
+   * running" — every day, so 17 GB of dangling Box images stayed (2026-10-02).
+   * That refusal now means the other agent is doing the work, not a failure.
    */
   async fleetPruneHost(payload) {
     log.info(
       "host-agent",
       `fleet_prune_host images=${payload.images} buildCache=${payload.buildCache}`
     );
+    if (payload.images) await this.fleetCollectSupersededBoxImages();
     const steps = [];
     if (payload.images) steps.push({ label: "image", args: ["image", "prune", "-f"] });
-    if (payload.buildCache) steps.push({ label: "builder", args: ["builder", "prune", "-f"] });
+    if (payload.buildCache) {
+      steps.push({
+        label: "builder",
+        args: ["builder", "prune", "-f", "--all", "--filter", "until=72h"]
+      });
+    }
     for (const step of steps) {
-      const res = await this.docker.run(step.args);
+      const res = await this.docker.run(step.args, { timeoutMs: DOCKER_PRUNE_TIMEOUT_MS });
       if (res.code !== 0) {
+        if (/prune operation is already running/i.test(res.stderr)) {
+          log.info(
+            "host-agent",
+            `fleet_prune_host ${step.label} skipped: another prune is running on this daemon`
+          );
+          continue;
+        }
         log.warn(
           "host-agent",
           `fleet_prune_host ${step.label} failed (code=${res.code}): ${res.stderr.trim().slice(-300)}`
@@ -51796,6 +52059,103 @@ var HostAgentSupervisor = class {
       );
     }
   }
+  /**
+   * Remove superseded Box images by tag: everything but the current `:latest`,
+   * one previous release (kept, tagged `:rollback`) and any image a container
+   * uses. Fail-SAFE: if the current image, the image list or the container
+   * references cannot be read, it removes nothing.
+   */
+  async fleetCollectSupersededBoxImages() {
+    if (process.env.CODEAM_FLEET_BOX_IMAGE) return;
+    const currentRef = resolveFleetBoxImage();
+    const opts = { timeoutMs: DOCKER_PRUNE_TIMEOUT_MS };
+    const lines = (out2) => [...new Set(out2.split("\n").map((l) => l.trim()).filter(Boolean))];
+    const cur = await this.docker.run(
+      ["image", "inspect", "--format", "{{.Id}}", currentRef],
+      opts
+    );
+    const currentId = cur.stdout.trim();
+    if (cur.code !== 0 || !currentId) {
+      log.warn("host-agent", `fleet_prune_host box-images skipped: ${currentRef} not present`);
+      return;
+    }
+    const ids = await this.docker.run(["image", "ls", "-aq", "--no-trunc"], opts);
+    if (ids.code !== 0) {
+      log.warn(
+        "host-agent",
+        `fleet_prune_host box-images skipped: image ls failed (code=${ids.code})`
+      );
+      return;
+    }
+    const imageIds = lines(ids.stdout);
+    if (imageIds.length === 0) return;
+    const inspect = await this.docker.run(
+      ["image", "inspect", "--format", FLEET_IMAGE_INSPECT_FORMAT, ...imageIds],
+      opts
+    );
+    if (inspect.code !== 0) {
+      log.warn(
+        "host-agent",
+        `fleet_prune_host box-images skipped: image inspect failed (code=${inspect.code})`
+      );
+      return;
+    }
+    const containers = await this.docker.run(["ps", "-aq", "--no-trunc"], opts);
+    if (containers.code !== 0) {
+      log.warn(
+        "host-agent",
+        `fleet_prune_host box-images skipped: ps failed (code=${containers.code})`
+      );
+      return;
+    }
+    const containerIds = lines(containers.stdout);
+    const referenced = /* @__PURE__ */ new Set();
+    if (containerIds.length > 0) {
+      const refs = await this.docker.run(
+        ["inspect", "--format", "{{.Image}}", ...containerIds],
+        opts
+      );
+      if (refs.code !== 0) {
+        log.warn(
+          "host-agent",
+          `fleet_prune_host box-images skipped: container inspect failed (code=${refs.code})`
+        );
+        return;
+      }
+      for (const id of lines(refs.stdout)) referenced.add(id);
+    }
+    const plan = planFleetBoxImageGc({
+      images: parseFleetImageInspect(inspect.stdout),
+      referenced,
+      currentId,
+      currentRef
+    });
+    if (plan.rollback?.tagAs) {
+      const tag = await this.docker.run(["tag", plan.rollback.id, plan.rollback.tagAs], opts);
+      if (tag.code !== 0) {
+        log.warn(
+          "host-agent",
+          `fleet_prune_host box-images: tagging rollback failed (code=${tag.code}), removing nothing`
+        );
+        return;
+      }
+    }
+    for (const ref of plan.removeTags) {
+      const res = await this.docker.run(["rmi", ref], opts);
+      if (res.code === 0 || /no such image/i.test(res.stderr)) {
+        log.info("host-agent", `fleet_prune_host box-images removed ${ref}`);
+      } else {
+        log.warn(
+          "host-agent",
+          `fleet_prune_host box-images rmi ${ref} failed (code=${res.code}): ${res.stderr.trim().slice(-300)}`
+        );
+      }
+    }
+    log.info(
+      "host-agent",
+      `fleet_prune_host box-images current=${currentId.slice(7, 19)} rollback=${plan.rollback ? plan.rollback.id.slice(7, 19) : "none"} removed=${plan.removeTags.length}`
+    );
+  }
   async fleetStopBox(payload) {
     log.info("host-agent", `fleet_stop_box id=${payload.boxId} name=${payload.containerName}`);
     const res = await this.docker.run(["stop", payload.containerName]);
@@ -51880,14 +52240,14 @@ var HostAgentSupervisor = class {
           }),
           CODEAM_AUTO_TOKEN: payload.autoPairToken
         };
-        const houseConfigDir = path108.join(
-          os69.homedir(),
+        const houseConfigDir = path110.join(
+          os71.homedir(),
           ".codeam",
           "house-claude",
           payload.deployId
         );
         try {
-          fs94.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
+          fs96.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
         } catch {
         }
         childEnv.CLAUDE_CONFIG_DIR = houseConfigDir;
@@ -51914,7 +52274,7 @@ var HostAgentSupervisor = class {
         report("installing", "installing agent CLI");
         await this.runAgentInstall(payload.agentInstallScript);
       }
-      const home = process.env.HOME || os69.homedir();
+      const home = process.env.HOME || os71.homedir();
       childEnv.PATH = `${home}/.local/bin:${process.env.PATH ?? ""}`;
       if (payload.cloneToken) {
         try {
@@ -51922,13 +52282,13 @@ var HostAgentSupervisor = class {
           if ((payload.repoProvider ?? "github") === "gitlab") {
             const glabCmd = await ensureGlabCli(defaultGitToolingRunner);
             if (glabCmd) {
-              childEnv.PATH = `${codeamBinDir()}${path108.delimiter}${childEnv.PATH}`;
+              childEnv.PATH = `${codeamBinDir()}${path110.delimiter}${childEnv.PATH}`;
               await ensureGlabAuth(defaultGitToolingRunner, glabCmd, payload.cloneToken);
             }
           } else {
             const ghCmd = await ensureGhCli(defaultGitToolingRunner, payload.cloneToken);
             if (ghCmd) {
-              childEnv.PATH = `${codeamBinDir()}${path108.delimiter}${childEnv.PATH}`;
+              childEnv.PATH = `${codeamBinDir()}${path110.delimiter}${childEnv.PATH}`;
               await ensureGhAuth(defaultGitToolingRunner, ghCmd, payload.cloneToken);
             }
           }
@@ -51956,9 +52316,9 @@ var HostAgentSupervisor = class {
       );
       if (!payload.suppressOnboardingWelcome) {
         try {
-          const cfgDir = childEnv.CLAUDE_CONFIG_DIR || path108.join(os69.homedir(), ".claude");
-          const projectDir = path108.join(cfgDir, "projects", encodeCwd(cwd));
-          const hasPriorConversation = fs94.existsSync(projectDir) && fs94.readdirSync(projectDir).some((f) => f.endsWith(".jsonl"));
+          const cfgDir = childEnv.CLAUDE_CONFIG_DIR || path110.join(os71.homedir(), ".claude");
+          const projectDir = path110.join(cfgDir, "projects", encodeCwd(cwd));
+          const hasPriorConversation = fs96.existsSync(projectDir) && fs96.readdirSync(projectDir).some((f) => f.endsWith(".jsonl"));
           if (hasPriorConversation) {
             childEnv.CODEAM_RESUME_LATEST = "1";
             log.info(
@@ -52112,7 +52472,7 @@ var HostAgentSupervisor = class {
   fallbackResumeTarget() {
     const session = getActiveSession();
     if (!session || !session.pluginId || !session.pollSecret || !session.agent) return null;
-    const cwd = session.cwd && fs94.existsSync(session.cwd) ? session.cwd : process.cwd();
+    const cwd = session.cwd && fs96.existsSync(session.cwd) ? session.cwd : process.cwd();
     if (isFilesystemRoot(cwd)) {
       log.warn(
         "host-agent",
@@ -52152,7 +52512,7 @@ var HostAgentSupervisor = class {
       log.warn("host-agent", `self_hosted_resume ${sessionId.slice(0, 8)}: no saved pairing on this box`);
       return;
     }
-    if (!session.cwd || !fs94.existsSync(session.cwd)) {
+    if (!session.cwd || !fs96.existsSync(session.cwd)) {
       log.warn("host-agent", `self_hosted_resume ${sessionId.slice(0, 8)}: workspace is gone`);
       return;
     }
@@ -52194,7 +52554,7 @@ var HostAgentSupervisor = class {
       const persisted = new Map((this.sessionStore.load() ?? []).map((r) => [r.deployId, r.agent]));
       for (const c2 of this.children.values()) persisted.set(c2.deployId, c2.agent);
       return this.listSavedSessions().map((s) => ({ s, deployId: deployIdFromWorkspace(s.cwd) })).filter(
-        (x) => x.deployId !== null && !!x.s.cwd && fs94.existsSync(x.s.cwd)
+        (x) => x.deployId !== null && !!x.s.cwd && fs96.existsSync(x.s.cwd)
       ).map(({ s, deployId }) => {
         const agent = persisted.get(deployId);
         return { deployId, sessionId: s.id, ...agent ? { agent } : {} };
@@ -52246,7 +52606,7 @@ var HostAgentSupervisor = class {
     if (this.children.has(deployId)) return;
     const st3 = this.resumeStateFor(target);
     try {
-      const cwd = fs94.existsSync(target.cwd) ? target.cwd : process.cwd();
+      const cwd = fs96.existsSync(target.cwd) ? target.cwd : process.cwd();
       const proc = this.resumeSpawner(
         { ...readHouseProxyChildEnv(deployId), CODEAM_RESUME_SESSION_ID: session.id },
         cwd
@@ -52273,7 +52633,7 @@ var HostAgentSupervisor = class {
           return;
         }
         if (tracked && signal) {
-          this.onResumeChildExit(target, 128 + (os69.constants.signals[signal] ?? 9), `signal ${signal}`);
+          this.onResumeChildExit(target, 128 + (os71.constants.signals[signal] ?? 9), `signal ${signal}`);
           return;
         }
         log.warn(
@@ -52316,7 +52676,7 @@ var HostAgentSupervisor = class {
     if (Date.now() - child.startedAt < CRASH_RESPAWN_MIN_UPTIME_MS) return false;
     const session = pickSavedSessionForWorkspace(this.listSavedSessions(), child.cwd);
     if (!session) return false;
-    const exitCode = typeof code === "number" ? code : 128 + (signal ? os69.constants.signals[signal] ?? 9 : 9);
+    const exitCode = typeof code === "number" ? code : 128 + (signal ? os71.constants.signals[signal] ?? 9 : 9);
     log.warn(
       "host-agent",
       `session deploy=${child.deployId.slice(0, 8)} died (${signal ?? code}) after ${Math.round((Date.now() - child.startedAt) / 1e3)}s \u2014 respawning it (resume)`
@@ -52465,12 +52825,12 @@ var HostAgentSupervisor = class {
       this.untrackChild(deployId);
     }
     const dirs = [
-      path108.join(selfHostedWorkspaceRoot(), deployId),
-      path108.join(os69.homedir(), ".codeam", "house-claude", deployId)
+      path110.join(selfHostedWorkspaceRoot(), deployId),
+      path110.join(os71.homedir(), ".codeam", "house-claude", deployId)
     ];
     for (const dir of dirs) {
       try {
-        fs94.rmSync(dir, { recursive: true, force: true });
+        fs96.rmSync(dir, { recursive: true, force: true });
       } catch (err) {
         log.warn(
           "host-agent",
@@ -52637,8 +52997,8 @@ async function invite() {
 var import_node_dns = require("dns");
 var import_node_util11 = require("util");
 var import_node_crypto17 = require("crypto");
-var fs95 = __toESM(require("fs"));
-var path109 = __toESM(require("path"));
+var fs97 = __toESM(require("fs"));
+var path111 = __toESM(require("path"));
 var import_picocolors14 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util11.promisify)(import_node_dns.resolve);
 async function checkDns(apiBase2) {
@@ -52694,13 +53054,13 @@ async function checkHealth(apiBase2) {
   }
 }
 function checkConfigDir() {
-  const dir = path109.join(require("os").homedir(), ".codeam");
+  const dir = path111.join(require("os").homedir(), ".codeam");
   try {
-    fs95.mkdirSync(dir, { recursive: true, mode: 448 });
-    const probe = path109.join(dir, ".doctor-probe");
-    fs95.writeFileSync(probe, "ok", { mode: 384 });
-    const read = fs95.readFileSync(probe, "utf8");
-    fs95.unlinkSync(probe);
+    fs97.mkdirSync(dir, { recursive: true, mode: 448 });
+    const probe = path111.join(dir, ".doctor-probe");
+    fs97.writeFileSync(probe, "ok", { mode: 384 });
+    const read = fs97.readFileSync(probe, "utf8");
+    fs97.unlinkSync(probe);
     if (read !== "ok") throw new Error("write/read round-trip mismatch");
     return {
       id: "config-dir",
@@ -52740,9 +53100,9 @@ function checkSessions() {
   }
 }
 function checkAgentBinaries() {
-  const os72 = createOsStrategy();
+  const os74 = createOsStrategy();
   return getEnabledAgents().map((meta) => {
-    const found = os72.findInPath(meta.binaryName);
+    const found = os74.findInPath(meta.binaryName);
     return {
       id: `agent-${meta.id}`,
       label: `Agent binary: ${meta.displayName} (${meta.binaryName})`,
@@ -52764,7 +53124,7 @@ function checkNodePty() {
       detail: "not required on this platform"
     };
   }
-  const vendoredPath = path109.join(__dirname, "vendor", "node-pty");
+  const vendoredPath = path111.join(__dirname, "vendor", "node-pty");
   for (const target of [vendoredPath, "node-pty"]) {
     try {
       require(target);
@@ -52806,7 +53166,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.76.11" : "0.0.0-dev";
+  const cliVersion = true ? "2.76.13" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto17.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -53330,7 +53690,7 @@ async function mcpWarm(argv = [], opts = {}) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.76.11" : "unknown";
+  const v = true ? "2.76.13" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 
@@ -53463,10 +53823,10 @@ function tryShowSubcommandHelp(cmd, args2) {
 var _subcommandHelpKeys = Object.keys(HELPS);
 
 // src/index.ts
-var os71 = __toESM(require("os"));
+var os73 = __toESM(require("os"));
 if (!process.env.HOME) {
   try {
-    const home = os71.homedir();
+    const home = os73.homedir();
     if (home) process.env.HOME = home;
   } catch {
   }