codeam-cli 2.76.13 → 2.76.15

package/dist/index.js

@@ -128,11 +128,11 @@ var init_stdio_proxy = __esm({
         rl.on("close", () => this.child?.stdin?.end());
         const timer = setInterval(() => this.checkRestart(stdout), RESTART_CHECK_INTERVAL_MS);
         timer.unref();
-        return new Promise((resolve14) => {
+        return new Promise((resolve13) => {
           this.ended = (code) => {
             clearInterval(timer);
             process.exitCode = code;
-            resolve14();
+            resolve13();
           };
         });
       }
@@ -313,14 +313,14 @@ function deploymentNameFromKey(key) {
   return null;
 }
 function defaultSpawn(timeoutMs) {
-  return (cmd, args2, opts) => new Promise((resolve14) => {
+  return (cmd, args2, opts) => new Promise((resolve13) => {
     let out2 = "";
     let err = "";
     let done = false;
     const finish = (code) => {
       if (done) return;
       done = true;
-      resolve14({ code, stdout: out2, stderr: err });
+      resolve13({ code, stdout: out2, stderr: err });
     };
     let child;
     try {
@@ -358,7 +358,7 @@ function defaultSpawn(timeoutMs) {
 }
 function resolveConvexBin(cwd) {
   const local = path112.join(cwd, "node_modules", ".bin", process.platform === "win32" ? "convex.cmd" : "convex");
-  if (fs98.existsSync(local)) return { cmd: local, args: [] };
+  if (fs99.existsSync(local)) return { cmd: local, args: [] };
   return { cmd: "npx", args: ["--yes", "convex"] };
 }
 function redact(text, key) {
@@ -489,12 +489,12 @@ async function runConvexAdminMcp(client3, id) {
   });
   await server.connect(new StdioServerTransport());
 }
-var import_node_child_process38, fs98, path112, TOOLS;
+var import_node_child_process38, fs99, path112, TOOLS;
 var init_convex_admin_mcp = __esm({
   "src/integrations/convex-admin-mcp.ts"() {
     "use strict";
     import_node_child_process38 = require("child_process");
-    fs98 = __toESM(require("fs"));
+    fs99 = __toESM(require("fs"));
     path112 = __toESM(require("path"));
     TOOLS = [
       {
@@ -656,7 +656,7 @@ async function runHttpRelay(delivery, client3, id) {
     requestInit: { headers: buildHttpHeaders(delivery.httpHeaders, token) }
   });
   const stdioTransport = new StdioServerTransport();
-  await new Promise((resolve14, reject) => {
+  await new Promise((resolve13, reject) => {
     let done = false;
     const watchdog = createToolCallWatchdog({
       timeoutMs: TOOL_CALL_TIMEOUT_MS,
@@ -670,7 +670,7 @@ async function runHttpRelay(delivery, client3, id) {
       void httpTransport.close().catch(() => void 0);
       void stdioTransport.close().catch(() => void 0);
       if (err) reject(err);
-      else resolve14();
+      else resolve13();
     };
     stdioTransport.onmessage = (msg) => {
       watchdog.onClientMessage(msg);
@@ -3765,7 +3765,7 @@ var _default = makeConfig();
 var { getConfig, ensurePluginId, addSession, removeSession, setActiveSession, getActiveSession, getActiveSessionForAgent, setDisable1mContext, setSessionAgent, setSquadAuto, getSquadAuto, clearAll, saveCliConfig, loadCliConfig } = _default;
 
 // src/commands/pair-auto.ts
-var fs65 = __toESM(require("fs"));
+var fs66 = __toESM(require("fs"));
 var os48 = __toESM(require("os"));
 var path74 = __toESM(require("path"));
 var import_crypto4 = require("crypto");
@@ -4726,11 +4726,11 @@ async function raceWithTimeout(promise, timeoutMs, onTimeout) {
   try {
     return await Promise.race([
       promise,
-      new Promise((resolve14, reject) => {
+      new Promise((resolve13, reject) => {
         timeoutHandle = safeSetTimeout(() => {
           try {
             onTimeout?.();
-            resolve14();
+            resolve13();
           } catch (error) {
             reject(error);
           }
@@ -7804,13 +7804,13 @@ async function getContextLinesFromFile(path114, ranges, output, cacheKey, openSo
   const fileHandle = await openRegularSourceFile(path114, openSourceFile, logger);
   if (void 0 === fileHandle) return void LRU_FILE_CONTENTS_FS_READ_FAILED.set(cacheKey, 1);
   const openedFileHandle = fileHandle;
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     let finished = false;
     function destroyStreamAndResolve(stream2) {
       if (finished) return;
       finished = true;
       stream2?.destroy();
-      openedFileHandle.close().then(resolve14, resolve14);
+      openedFileHandle.close().then(resolve13, resolve13);
     }
     let stream;
     try {
@@ -8999,7 +8999,7 @@ var V1CaptureSender = class {
     this.fetchFn = hooks.fetch;
     this.onError = hooks.onError;
     this.now = hooks.now ?? Date.now;
-    this.sleep = hooks.sleep ?? ((ms) => new Promise((resolve14) => safeSetTimeout(resolve14, ms)));
+    this.sleep = hooks.sleep ?? ((ms) => new Promise((resolve13) => safeSetTimeout(resolve13, ms)));
     this.generateRequestId = hooks.generateRequestId ?? uuidv7;
     this.compress = hooks.compress ?? gzipCompress;
   }
@@ -9363,9 +9363,9 @@ var PostHogBackendClient = class extends PostHogCoreStateless {
     if (!waitUntil) return;
     if (this.disabled || this.optedOut) return;
     if (!this._waitUntilCycle) {
-      let resolve14;
+      let resolve13;
       const promise = new Promise((r) => {
-        resolve14 = r;
+        resolve13 = r;
       });
       try {
         waitUntil(promise);
@@ -9373,7 +9373,7 @@ var PostHogBackendClient = class extends PostHogCoreStateless {
         return;
       }
       this._waitUntilCycle = {
-        resolve: resolve14,
+        resolve: resolve13,
         startedAt: Date.now(),
         timer: void 0
       };
@@ -9397,12 +9397,12 @@ var PostHogBackendClient = class extends PostHogCoreStateless {
     return cycle?.resolve;
   }
   async resolveWaitUntilFlush() {
-    const resolve14 = this._consumeWaitUntilCycle();
+    const resolve13 = this._consumeWaitUntilCycle();
     try {
       await this.flushWithPendingPromises();
     } catch {
     } finally {
-      resolve14?.();
+      resolve13?.();
     }
   }
   getPersistedProperty(key) {
@@ -9660,15 +9660,15 @@ var PostHogBackendClient = class extends PostHogCoreStateless {
   async waitForLocalEvaluationReady(timeoutMs = THIRTY_SECONDS) {
     if (this.isLocalEvaluationReady()) return true;
     if (void 0 === this.featureFlagsPoller) return false;
-    return new Promise((resolve14) => {
+    return new Promise((resolve13) => {
       const timeout = setTimeout(() => {
         cleanup();
-        resolve14(false);
+        resolve13(false);
       }, timeoutMs);
       const cleanup = this._events.on("localEvaluationFlagsLoaded", (count) => {
         clearTimeout(timeout);
         cleanup();
-        resolve14(count > 0);
+        resolve13(count > 0);
       });
     });
   }
@@ -10172,7 +10172,7 @@ var PostHogBackendClient = class extends PostHogCoreStateless {
   }
   async _shutdown(shutdownTimeoutMs) {
     const shutdownDeadlineMs = Date.now() + (shutdownTimeoutMs ?? 3e4);
-    const resolve14 = this._consumeWaitUntilCycle();
+    const resolve13 = this._consumeWaitUntilCycle();
     await this.featureFlagsPoller?.stopPoller(shutdownTimeoutMs);
     this.errorTracking.shutdown();
     if (this._metrics) {
@@ -10184,7 +10184,7 @@ var PostHogBackendClient = class extends PostHogCoreStateless {
       return await super._shutdown(Math.max(0, shutdownDeadlineMs - Date.now()));
     } finally {
       this.distinctIdHasSentFlagCalls = {};
-      resolve14?.();
+      resolve13?.();
     }
   }
   async _requestRemoteConfigPayload(flagKey) {
@@ -10579,7 +10579,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.76.13" : "0.0.0-dev",
+    cliVersion: true ? "2.76.15" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -10726,10 +10726,10 @@ var _execSeam = {
   }
 };
 var _execSeamAsync = {
-  exec: (file, args2, opts) => new Promise((resolve14, reject) => {
+  exec: (file, args2, opts) => new Promise((resolve13, reject) => {
     (0, import_child_process.execFile)(file, args2, opts, (err, stdout) => {
       if (err) reject(err);
-      else resolve14(typeof stdout === "string" ? stdout : stdout.toString("utf8"));
+      else resolve13(typeof stdout === "string" ? stdout : stdout.toString("utf8"));
     });
   })
 };
@@ -10824,7 +10824,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.76.13",
+  version: "2.76.15",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -10958,8 +10958,8 @@ async function requestCode(pluginId, pluginSecretHash) {
     });
     let timer;
     const timeoutSentinel = /* @__PURE__ */ Symbol("request-code-timeout");
-    const timeoutPromise = new Promise((resolve14) => {
-      timer = setTimeout(() => resolve14(timeoutSentinel), REQUEST_CODE_TIMEOUT_MS);
+    const timeoutPromise = new Promise((resolve13) => {
+      timer = setTimeout(() => resolve13(timeoutSentinel), REQUEST_CODE_TIMEOUT_MS);
     });
     const result = await Promise.race([post3, timeoutPromise]);
     clearTimeout(timer);
@@ -11413,7 +11413,7 @@ async function postBeadsProvisioning(input) {
   }
 }
 async function _postJsonAuthed(url2, body, pluginAuthToken) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve13, reject) => {
     const data = JSON.stringify(body);
     const u2 = new URL(url2);
     const transport = u2.protocol === "https:" ? https : http;
@@ -11443,9 +11443,9 @@ async function _postJsonAuthed(url2, body, pluginAuthToken) {
             return;
           }
           try {
-            resolve14(JSON.parse(responseBody));
+            resolve13(JSON.parse(responseBody));
           } catch {
-            resolve14(null);
+            resolve13(null);
           }
         });
       }
@@ -11471,7 +11471,7 @@ function makeHttpError(statusCode, retryAfterHeader, responseBody) {
   return err;
 }
 async function _postJson(url2, body, extraHeaders) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve13, reject) => {
     const data = JSON.stringify(body);
     const u2 = new URL(url2);
     const transport = u2.protocol === "https:" ? https : http;
@@ -11501,9 +11501,9 @@ async function _postJson(url2, body, extraHeaders) {
             return;
           }
           try {
-            resolve14(JSON.parse(body2));
+            resolve13(JSON.parse(body2));
           } catch {
-            resolve14(null);
+            resolve13(null);
           }
         });
       }
@@ -11518,7 +11518,7 @@ async function _postJson(url2, body, extraHeaders) {
   });
 }
 async function _getJson(url2, extraHeaders) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve13, reject) => {
     const u2 = new URL(url2);
     const transport = u2.protocol === "https:" ? https : http;
     const req = transport.request(
@@ -11542,9 +11542,9 @@ async function _getJson(url2, extraHeaders) {
             return;
           }
           try {
-            resolve14(JSON.parse(body));
+            resolve13(JSON.parse(body));
           } catch {
-            resolve14(null);
+            resolve13(null);
           }
         });
       }
@@ -12160,7 +12160,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.76.13" ? { ideVersion: "2.76.13" } : {}
+      ..."2.76.15" ? { ideVersion: "2.76.15" } : {}
     };
     try {
       const res = await _postJson(`${API_BASE2}/api/plugin/heartbeat`, body);
@@ -12305,8 +12305,8 @@ async function stopRelayWithGoodbye(relay, timeoutMs = RELAY_GOODBYE_TIMEOUT_MS)
   try {
     await Promise.race([
       relay.stopAndFlush(),
-      new Promise((resolve14) => {
-        timer = setTimeout(resolve14, timeoutMs);
+      new Promise((resolve13) => {
+        timer = setTimeout(resolve13, timeoutMs);
       })
     ]);
   } catch {
@@ -12415,7 +12415,7 @@ var _transport2 = {
   post: _post
 };
 function _post(url2, headers, payload) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve13, reject) => {
     let settled = false;
     const u2 = new URL(url2);
     const lib = u2.protocol === "https:" ? https3 : http3;
@@ -12440,7 +12440,7 @@ function _post(url2, headers, payload) {
         res.on("end", () => {
           if (settled) return;
           settled = true;
-          resolve14({ statusCode: res.statusCode ?? 0, body });
+          resolve13({ statusCode: res.statusCode ?? 0, body });
         });
       }
     );
@@ -13139,12 +13139,12 @@ var _gitSeam = {
   run: _runGitImpl
 };
 async function _runGitImpl(cwd, args2, opts = {}) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     let proc;
     try {
       proc = (0, import_child_process3.spawn)("git", args2, { cwd, env: process.env });
     } catch {
-      resolve14(null);
+      resolve13(null);
       return;
     }
     let stdout = "";
@@ -13155,13 +13155,13 @@ async function _runGitImpl(cwd, args2, opts = {}) {
     proc.stderr?.on("data", (c2) => {
       stderr += c2.toString();
     });
-    proc.on("error", () => resolve14(null));
+    proc.on("error", () => resolve13(null));
     proc.on("close", (code) => {
       if (code === 0 || opts.allowNonZeroExit) {
-        resolve14(stdout);
+        resolve13(stdout);
       } else {
         log.trace("fileWatcher", `git ${args2.join(" ")} exited ${code} stderr=${stderr.slice(0, 200)}`);
-        resolve14(null);
+        resolve13(null);
       }
     });
   });
@@ -13247,7 +13247,7 @@ var ChunkEmitter = class {
     if (this.pairingInvalid) {
       return Promise.resolve({ dead: true });
     }
-    return new Promise((resolve14) => {
+    return new Promise((resolve13) => {
       let refreshedOnce = false;
       const attempt = (attemptsLeft) => {
         _transport3.post(this.url, this.headers, payload).then(({ statusCode, body: resBody }) => {
@@ -13255,13 +13255,13 @@ var ChunkEmitter = class {
           if (statusCode === 410 || statusCode === 404 && /SESSION_NOT_FOUND|SESSION_GONE/.test(resBody)) {
             process.stderr.write("[codeam] session was deleted/disconnected \u2014 stopping output stream.\n");
             log.info("chunkEmitter", `dead status=${statusCode} took=${tookMs}ms`);
-            resolve14({ dead: true });
+            resolve13({ dead: true });
             return;
           }
           if (statusCode === 401 || statusCode === 403) {
             if (refreshedOnce) {
               this.markPairingInvalid(statusCode, tookMs);
-              resolve14({ dead: true });
+              resolve13({ dead: true });
               return;
             }
             log.warn("chunkEmitter", `auth ${statusCode} took=${tookMs}ms \u2014 attempting silent refresh`);
@@ -13277,10 +13277,10 @@ var ChunkEmitter = class {
               }
               if (refresh.kind === "gone") {
                 this.markPairingInvalid(statusCode, tookMs);
-                resolve14({ dead: true });
+                resolve13({ dead: true });
                 return;
               }
-              resolve14({ dead: false });
+              resolve13({ dead: false });
             })();
             return;
           }
@@ -13291,7 +13291,7 @@ var ChunkEmitter = class {
           } else {
             log.info("chunkEmitter", `ok status=${statusCode} took=${tookMs}ms`);
           }
-          resolve14({ dead: false });
+          resolve13({ dead: false });
         }).catch((err) => {
           log.warn(
             "chunkEmitter",
@@ -13302,7 +13302,7 @@ var ChunkEmitter = class {
             const delay = 200 * (maxRetries - attemptsLeft + 1);
             setTimeout(() => attempt(attemptsLeft - 1), delay);
           } else {
-            resolve14({ dead: false });
+            resolve13({ dead: false });
           }
         });
       };
@@ -13325,7 +13325,7 @@ var _transport3 = {
   post: _post2
 };
 function _post2(url2, headers, payload) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve13, reject) => {
     let settled = false;
     const u2 = new URL(url2);
     const transport = u2.protocol === "https:" ? https4 : http4;
@@ -13349,7 +13349,7 @@ function _post2(url2, headers, payload) {
         res.on("end", () => {
           if (settled) return;
           settled = true;
-          resolve14({ statusCode: res.statusCode ?? 0, body: resData });
+          resolve13({ statusCode: res.statusCode ?? 0, body: resData });
         });
       }
     );
@@ -13636,7 +13636,7 @@ function closeAllTerminals() {
 }
 
 // src/commands/start/handlers.ts
-var fs64 = __toESM(require("fs"));
+var fs65 = __toESM(require("fs"));
 var os47 = __toESM(require("os"));
 var path73 = __toESM(require("path"));
 var import_crypto3 = require("crypto");
@@ -14443,12 +14443,12 @@ async function applyFileReview(workingDir, filePath, action) {
   return { ok: true, action, filePath, repoRoot };
 }
 function runGit2(cwd, args2) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     let proc;
     try {
       proc = (0, import_child_process6.spawn)("git", args2, { cwd, env: process.env });
     } catch (err) {
-      resolve14({ ok: false, code: -1, stdout: "", stderr: err.message });
+      resolve13({ ok: false, code: -1, stdout: "", stderr: err.message });
       return;
     }
     let stdout = "";
@@ -14461,11 +14461,11 @@ function runGit2(cwd, args2) {
     });
     proc.on(
       "error",
-      (err) => resolve14({ ok: false, code: -1, stdout, stderr: stderr + err.message })
+      (err) => resolve13({ ok: false, code: -1, stdout, stderr: stderr + err.message })
     );
     proc.on(
       "close",
-      (code) => resolve14({ ok: code === 0, code: code ?? -1, stdout, stderr })
+      (code) => resolve13({ ok: code === 0, code: code ?? -1, stdout, stderr })
     );
   });
 }
@@ -16804,13 +16804,13 @@ var UnixPtyStrategy = class {
     this.proc = null;
     if (proc) {
       proc.removeAllListeners("exit");
-      const exited = new Promise((resolve14) => {
-        if (proc.exitCode !== null || proc.signalCode !== null) return resolve14();
-        proc.once("exit", () => resolve14());
+      const exited = new Promise((resolve13) => {
+        if (proc.exitCode !== null || proc.signalCode !== null) return resolve13();
+        proc.once("exit", () => resolve13());
       });
       proc.kill("SIGTERM");
-      const timer = new Promise((resolve14) => {
-        const t2 = setTimeout(() => resolve14("timeout"), timeoutMs);
+      const timer = new Promise((resolve13) => {
+        const t2 = setTimeout(() => resolve13("timeout"), timeoutMs);
         void exited.then(() => clearTimeout(t2));
       });
       if (await Promise.race([exited, timer]) === "timeout") {
@@ -17284,15 +17284,15 @@ function runInstaller() {
     "-Command",
     "irm https://claude.ai/install.ps1 | iex"
   ] : ["-c", "curl -fsSL https://claude.ai/install.sh | bash"];
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     const proc = (0, import_child_process9.spawn)(cmd, args2, { stdio: "inherit" });
     proc.on("error", (err) => {
       console.error(`
   \u2717 Installer failed to launch: ${err.message}`);
-      resolve14(false);
+      resolve13(false);
     });
     proc.on("exit", (code) => {
-      resolve14(code === 0);
+      resolve13(code === 0);
     });
   });
 }
@@ -17427,7 +17427,7 @@ function extractSetupTokenFromOutput(output) {
   return m ? m[0] : null;
 }
 function captureClaudeSetupToken() {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve13, reject) => {
     const child = (0, import_node_child_process2.spawn)("claude", ["setup-token"], {
       stdio: ["inherit", "pipe", "inherit"]
     });
@@ -17441,7 +17441,7 @@ function captureClaudeSetupToken() {
     child.on("exit", (code) => {
       const token = extractSetupTokenFromOutput(out2);
       if (token) {
-        resolve14({ method: "setup_token", credential: token, source: "setup-token" });
+        resolve13({ method: "setup_token", credential: token, source: "setup-token" });
         return;
       }
       reject(
@@ -17527,17 +17527,17 @@ function parseUsageOutput(raw) {
   return { percent, resetAt };
 }
 async function fetchClaudeQuota() {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     const claudeCmd = findInPath("claude") ? "claude" : "claude-code";
     if (!claudeCmd) {
-      resolve14(null);
+      resolve13(null);
       return;
     }
     const helperPath = path17.join(os11.tmpdir(), "codeam-quota-helper.py");
     fs13.writeFileSync(helperPath, HELPER_SCRIPT, { mode: 420 });
     const python = findInPath("python3") ?? findInPath("python");
     if (!python) {
-      resolve14(null);
+      resolve13(null);
       return;
     }
     const proc = (0, import_child_process10.spawn)(python, [helperPath, claudeCmd, "--tools", ""], {
@@ -17564,13 +17564,13 @@ async function fetchClaudeQuota() {
           fs13.unlinkSync(helperPath);
         } catch {
         }
-        resolve14(result);
+        resolve13(result);
       }, 5e3);
     }, 8e3);
     setTimeout(() => {
       if (!resolved) {
         resolved = true;
-        resolve14(null);
+        resolve13(null);
       }
       try {
         proc.kill();
@@ -17609,12 +17609,12 @@ function killActiveSpawnAndCaptureChildren() {
 }
 async function spawnAndCapture(cmd, args2, opts = {}) {
   const timeoutMs = opts.timeoutMs ?? 6e4;
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     let settled = false;
     const settle = (value) => {
       if (settled) return;
       settled = true;
-      resolve14(value);
+      resolve13(value);
     };
     let child;
     try {
@@ -19065,7 +19065,7 @@ function newestRolloutIdSince(sessionsRoot, resolvedCwd, floorMs) {
   return bestId;
 }
 function sleep2(ms) {
-  return new Promise((resolve14) => setTimeout(resolve14, ms));
+  return new Promise((resolve13) => setTimeout(resolve13, ms));
 }
 function getCurrentUsage2(historyDir) {
   if (!import_node_fs4.default.existsSync(historyDir)) return null;
@@ -19307,12 +19307,12 @@ function resolveNpm(os74) {
   return os74.id === "win32" ? "npm.cmd" : "npm";
 }
 async function installCodexViaNpm(os74) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve13, reject) => {
     const proc = (0, import_node_child_process4.spawn)(resolveNpm(os74), ["install", "-g", "@openai/codex"], {
       stdio: "inherit"
     });
     proc.on("close", (code) => {
-      if (code === 0) resolve14();
+      if (code === 0) resolve13();
       else reject(new Error(`npm install -g @openai/codex exited ${code}`));
     });
     proc.on("error", (err) => {
@@ -19432,7 +19432,7 @@ var defaultOsRunner = {
     }
   },
   run(cmd, args2, opts = {}) {
-    return new Promise((resolve14) => {
+    return new Promise((resolve13) => {
       const spawnEnv = opts.env ?? process.env;
       const child = (0, import_node_child_process5.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"], env: spawnEnv });
       let stderrBuf = "";
@@ -19441,7 +19441,7 @@ var defaultOsRunner = {
       const done = (code) => {
         if (settled) return;
         settled = true;
-        resolve14({ code, stderr: stderrBuf, stdout: stdoutBuf });
+        resolve13({ code, stderr: stderrBuf, stdout: stdoutBuf });
       };
       child.stdout?.on("data", (b) => {
         const chunk = b.toString();
@@ -19590,7 +19590,7 @@ async function ensureInstallPrerequisites(os74, deps = {}) {
   };
 }
 function defaultRunInstallScript(env) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     const proc = (0, import_node_child_process6.spawn)(
       "sh",
       ["-c", `curl -fsSL --connect-timeout 15 --max-time 120 ${INSTALL_URL} | sh`],
@@ -19602,7 +19602,7 @@ function defaultRunInstallScript(env) {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
-      resolve14({ code, output });
+      resolve13({ code, output });
     };
     const onData = (b) => {
       const chunk = b.toString();
@@ -19976,7 +19976,7 @@ var CoderabbitRuntimeStrategy = class {
   }
   async runOneShot(input) {
     const launch = await this.prepareInvocation(input);
-    return new Promise((resolve14, reject) => {
+    return new Promise((resolve13, reject) => {
       const stdoutBuf = [];
       const stderrBuf = [];
       const proc = (0, import_node_child_process8.spawn)(launch.cmd, launch.args, {
@@ -19988,7 +19988,7 @@ var CoderabbitRuntimeStrategy = class {
         if (settled) return;
         settled = true;
         clearTimeout(timer);
-        resolve14(out2);
+        resolve13(out2);
       };
       const timer = setTimeout(() => {
         if (settled) return;
@@ -20608,7 +20608,7 @@ function resolveClaudeNativeBinary(deps = {}) {
   const candidate = import_path4.default.join(scopeDir, `claude-agent-sdk-${platformKey}`, binName);
   return existsSync35(candidate) ? candidate : null;
 }
-var realSleep = (ms) => new Promise((resolve14) => setTimeout(resolve14, ms));
+var realSleep = (ms) => new Promise((resolve13) => setTimeout(resolve13, ms));
 async function waitForClaudeNativeBinary(opts = {}) {
   const timeoutMs = opts.timeoutMs ?? 18e4;
   const pollMs = opts.pollMs ?? 500;
@@ -20729,7 +20729,7 @@ var PERMANENT_ADAPTER_STARTUP_RE = /IneligibleTierError|UNSUPPORTED_CLIENT|no lo
 function probeAdapterModuleGraph(command2, args2, opts = {}) {
   const livenessMs = opts.livenessMs ?? 400;
   const spawnFn = opts.spawnFn ?? import_child_process13.spawn;
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     let settled = false;
     let stderr = "";
     let timer;
@@ -20742,12 +20742,12 @@ function probeAdapterModuleGraph(command2, args2, opts = {}) {
         child?.kill("SIGKILL");
       } catch {
       }
-      resolve14(r);
+      resolve13(r);
     };
     try {
       child = spawnFn(command2, [...args2], { stdio: ["pipe", "ignore", "pipe"] });
     } catch {
-      resolve14("ok");
+      resolve13("ok");
       return;
     }
     child.stderr?.on("data", (d3) => {
@@ -21336,7 +21336,7 @@ function newestSessionSince(bucket, floorMs) {
   return bestId;
 }
 function sleep3(ms) {
-  return new Promise((resolve14) => setTimeout(resolve14, ms));
+  return new Promise((resolve13) => setTimeout(resolve13, ms));
 }
 function joinTextParts(parts) {
   if (!Array.isArray(parts)) return "";
@@ -21787,7 +21787,7 @@ async function link(args2 = []) {
   waitSpin.start(waitMsg());
   const countdown = setInterval(() => waitSpin.message(waitMsg()), 1e3);
   countdown.unref?.();
-  const paired = await new Promise((resolve14, reject) => {
+  const paired = await new Promise((resolve13, reject) => {
     let stopPoll = null;
     const sigint = () => {
       clearInterval(countdown);
@@ -21800,7 +21800,7 @@ async function link(args2 = []) {
         process.removeListener("SIGINT", sigint);
         clearInterval(countdown);
         waitSpin.stop("Paired");
-        resolve14(info);
+        resolve13(info);
       },
       () => {
         clearInterval(countdown);
@@ -21958,14 +21958,14 @@ async function captureFreshCredentials(ctx) {
     }
   };
   try {
-    const token = await new Promise((resolve14, reject) => {
+    const token = await new Promise((resolve13, reject) => {
       let settled = false;
       const tryExtract = async () => {
         if (settled) return;
         const t2 = await ctx.locator.extract();
         if (t2 && !settled) {
           settled = true;
-          resolve14(t2);
+          resolve13(t2);
         }
       };
       watcher.on("add", () => void tryExtract());
@@ -22209,7 +22209,7 @@ function deliverPendingCoderabbitCallback(callbackUrl) {
 function runCoderabbitOAuthLogin(deps) {
   const timeoutMs = deps.timeoutMs ?? 18e4;
   const spawnProc = deps.spawn ?? spawnCoderabbitLoginProc;
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     let settled = false;
     let stdout = "";
     let last = null;
@@ -22222,13 +22222,13 @@ function runCoderabbitOAuthLogin(deps) {
         child.kill("SIGKILL");
       } catch {
       }
-      resolve14(r);
+      resolve13(r);
     };
     let child;
     try {
       child = spawnProc("coderabbit", ["auth", "login", "--agent"]);
     } catch (err) {
-      resolve14({ ok: false, error: err instanceof Error ? err.message : "spawn failed" });
+      resolve13({ ok: false, error: err instanceof Error ? err.message : "spawn failed" });
       return;
     }
     const timer = setTimeout(
@@ -22701,23 +22701,23 @@ async function reviewPullRequest(params, deps) {
   return report;
 }
 function defaultRunGh(args2) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     const stdout = [];
     const stderr = [];
     let proc;
     try {
       proc = (0, import_node_child_process17.spawn)("gh", args2, { stdio: ["ignore", "pipe", "pipe"] });
     } catch (err) {
-      resolve14({ code: -1, stdout: "", stderr: err instanceof Error ? err.message : String(err) });
+      resolve13({ code: -1, stdout: "", stderr: err instanceof Error ? err.message : String(err) });
       return;
     }
     proc.stdout?.on("data", (b) => stdout.push(b));
     proc.stderr?.on("data", (b) => stderr.push(b));
     proc.on("error", (err) => {
-      resolve14({ code: -1, stdout: "", stderr: err.message });
+      resolve13({ code: -1, stdout: "", stderr: err.message });
     });
     proc.on("close", (code) => {
-      resolve14({
+      resolve13({
         code: code ?? 0,
         stdout: Buffer.concat(stdout).toString("utf8"),
         stderr: Buffer.concat(stderr).toString("utf8")
@@ -23037,7 +23037,7 @@ var import_node_fs11 = __toESM(require("fs"));
 var import_node_path9 = __toESM(require("path"));
 var import_yazl = require("yazl");
 function buildZip(cwd, list, outFile) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve13, reject) => {
     const zip = new import_yazl.ZipFile();
     for (const f of list.files) {
       const abs = import_node_path9.default.join(cwd, f.rel);
@@ -23047,7 +23047,7 @@ function buildZip(cwd, list, outFile) {
     if (list.envExample) zip.addBuffer(Buffer.from(list.envExample), ".env.example");
     const out2 = import_node_fs11.default.createWriteStream(outFile, { mode: 384 });
     zip.outputStream.pipe(out2);
-    out2.on("close", () => resolve14(import_node_fs11.default.statSync(outFile).size));
+    out2.on("close", () => resolve13(import_node_fs11.default.statSync(outFile).size));
     out2.on("error", reject);
     zip.outputStream.on("error", reject);
     zip.end();
@@ -23239,12 +23239,12 @@ async function isExecutableBinary(p2) {
   }
 }
 function extractTgz(tgzPath, destDir) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve13, reject) => {
     const child = (0, import_child_process14.spawn)("tar", ["-xzf", tgzPath, "-C", destDir], { stdio: "ignore" });
     child.on("error", (err) => reject(err));
     child.on(
       "exit",
-      (code) => code === 0 ? resolve14() : reject(new Error(`tar exited with code ${code} while extracting cloudflared`))
+      (code) => code === 0 ? resolve13() : reject(new Error(`tar exited with code ${code} while extracting cloudflared`))
     );
   });
 }
@@ -23825,17 +23825,17 @@ function expoGoDeepLink(publicUrl) {
   return `exps://${new URL(publicUrl).host}`;
 }
 function isExpoManifestServed(port, host2 = "127.0.0.1") {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     const req = http6.get(
       { host: host2, port, path: "/", headers: { "expo-platform": "ios" }, timeout: 1500 },
       (res) => {
         const ok = res.statusCode !== void 0 && res.statusCode >= 200 && res.statusCode < 300;
         res.resume();
-        resolve14(ok);
+        resolve13(ok);
       }
     );
     req.once("timeout", () => req.destroy());
-    req.once("error", () => resolve14(false));
+    req.once("error", () => resolve13(false));
   });
 }
 async function waitForExpoManifest(port, opts) {
@@ -23983,12 +23983,12 @@ function describeDetectionFailure(raw) {
 // src/services/preview/port-ready.ts
 var net = __toESM(require("net"));
 function isPortListening(port, host2 = "127.0.0.1") {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     const socket = new net.Socket();
     const done = (result) => {
       socket.removeAllListeners();
       socket.destroy();
-      resolve14(result);
+      resolve13(result);
     };
     socket.setTimeout(1e3);
     socket.once("connect", () => done(true));
@@ -24026,14 +24026,14 @@ const { PGLiteSocketServer } = require('@electric-sql/pglite-socket');
 })().catch((e) => { console.error(String(e && e.message)); process.exit(1); });
 `;
 function isListening(port) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     const s = net2.connect({ host: "127.0.0.1", port }, () => {
       s.destroy();
-      resolve14(true);
-    }).on("error", () => resolve14(false));
+      resolve13(true);
+    }).on("error", () => resolve13(false));
     s.setTimeout(1e3, () => {
       s.destroy();
-      resolve14(false);
+      resolve13(false);
     });
   });
 }
@@ -24081,7 +24081,7 @@ function stopChild(child) {
 // src/services/preview/run-setup.ts
 var import_child_process18 = require("child_process");
 function runSetupCommand(cmd, args2, cwd, env, opts) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     const child = (0, import_child_process18.spawn)(cmd, args2, {
       cwd,
       env: { ...process.env, ...env ?? {} },
@@ -24101,20 +24101,20 @@ function runSetupCommand(cmd, args2, cwd, env, opts) {
       settled = true;
       log.info("preview", `${tag}: timed out after ${opts.timeoutMs}ms \u2014 killing`);
       killQuiet(child);
-      resolve14({ status: "timeout", code: null });
+      resolve13({ status: "timeout", code: null });
     }, opts.timeoutMs);
     child.once("exit", (code) => {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
-      if (code === 0) resolve14({ status: "ok", code: 0 });
-      else resolve14({ status: "failed", code });
+      if (code === 0) resolve13({ status: "ok", code: 0 });
+      else resolve13({ status: "failed", code });
     });
     child.once("error", () => {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
-      resolve14({ status: "failed", code: null });
+      resolve13({ status: "failed", code: null });
     });
   });
 }
@@ -24570,23 +24570,23 @@ async function awaitTunnelRegistered(candidate, hostname3, deadlineMs) {
     ac.signal.addEventListener("abort", detach, { once: true });
   };
   try {
-    return await new Promise((resolve14) => {
+    return await new Promise((resolve13) => {
       const onChunk = (chunk) => {
         const s = chunk.toString();
         if (!url2) url2 = parseCloudflaredUrl(s);
         if (TUNNEL_REGISTERED_RE.test(s)) registered = true;
         const trimmed = s.replace(/\n+$/g, "");
         if (trimmed.length > 0) log.info("preview", `cloudflared: ${trimmed}`);
-        if (url2 && registered) resolve14({ kind: "registered", url: url2 });
+        if (url2 && registered) resolve13({ kind: "registered", url: url2 });
       };
       const onExit = (code) => {
-        resolve14({ kind: "exited", sawUrl: url2 != null, code });
+        resolve13({ kind: "exited", sawUrl: url2 != null, code });
       };
       const { stdout, stderr } = candidate;
       if (stdout) scoped(() => stdout.on("data", onChunk), () => stdout.off("data", onChunk));
       if (stderr) scoped(() => stderr.on("data", onChunk), () => stderr.off("data", onChunk));
       scoped(() => candidate.on("exit", onExit), () => candidate.off("exit", onExit));
-      timer = setTimeout(() => resolve14({ kind: "timeout", sawUrl: url2 != null }), deadlineMs);
+      timer = setTimeout(() => resolve13({ kind: "timeout", sawUrl: url2 != null }), deadlineMs);
     });
   } finally {
     ac.abort();
@@ -24609,7 +24609,7 @@ function verdictFor(res) {
   }
   return { adopt: true };
 }
-var probePort = (port) => new Promise((resolve14) => {
+var probePort = (port) => new Promise((resolve13) => {
   const req = http7.get(
     { host: "127.0.0.1", port, path: "/", timeout: PROBE_TIMEOUT_MS },
     (res) => {
@@ -24620,16 +24620,16 @@ var probePort = (port) => new Promise((resolve14) => {
       });
       res.on(
         "end",
-        () => resolve14({ contentType: res.headers["content-type"], bodyStart: body })
+        () => resolve13({ contentType: res.headers["content-type"], bodyStart: body })
       );
-      res.on("error", () => resolve14(null));
+      res.on("error", () => resolve13(null));
     }
   );
   req.on("timeout", () => {
     req.destroy();
-    resolve14(null);
+    resolve13(null);
   });
-  req.on("error", () => resolve14(null));
+  req.on("error", () => resolve13(null));
 });
 async function canAdoptPort(port, probe = probePort) {
   try {
@@ -26044,18 +26044,18 @@ async function startInspectorProxy(opts) {
     clientSocket.on("error", drop2);
     clientSocket.on("close", drop2);
   });
-  await new Promise((resolve14, reject) => {
+  await new Promise((resolve13, reject) => {
     server.once("error", reject);
-    server.listen(0, "127.0.0.1", () => resolve14());
+    server.listen(0, "127.0.0.1", () => resolve13());
   });
   const port = server.address().port;
   return {
     port,
-    close: () => new Promise((resolve14) => {
+    close: () => new Promise((resolve13) => {
       for (const socket of upgraded) socket.destroy();
       upgraded.clear();
       server.closeAllConnections?.();
-      server.close(() => resolve14());
+      server.close(() => resolve13());
     })
   };
 }
@@ -27139,12 +27139,12 @@ var _spawnSeam = {
   run: _defaultSpawn
 };
 function _defaultSpawn(binaryPath, args2, opts) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     let proc;
     try {
       proc = (0, import_child_process21.spawn)(binaryPath, args2, { cwd: opts.cwd, env: opts.env });
     } catch (err) {
-      resolve14({ code: -1, stdout: "", stderr: err.message });
+      resolve13({ code: -1, stdout: "", stderr: err.message });
       return;
     }
     let stdout = "";
@@ -27155,8 +27155,8 @@ function _defaultSpawn(binaryPath, args2, opts) {
     proc.stderr?.on("data", (c2) => {
       stderr += c2.toString();
     });
-    proc.on("error", (err) => resolve14({ code: -1, stdout, stderr: err.message }));
-    proc.on("close", (code) => resolve14({ code: code ?? -1, stdout, stderr }));
+    proc.on("error", (err) => resolve13({ code: -1, stdout, stderr: err.message }));
+    proc.on("close", (code) => resolve13({ code: code ?? -1, stdout, stderr }));
   });
 }
 var _adapterSeam = {
@@ -27333,22 +27333,22 @@ var _installSpawnSeam = {
   run: _defaultInstallSpawn
 };
 function _defaultInstallSpawn(strategy) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     let proc;
     try {
       proc = (0, import_child_process22.spawn)(strategy.command, strategy.args, { env: process.env });
     } catch (err) {
-      resolve14({ ok: false, code: -1, stderr: err.message });
+      resolve13({ ok: false, code: -1, stderr: err.message });
       return;
     }
     let stderr = "";
     proc.stderr?.on("data", (c2) => {
       stderr += c2.toString();
     });
-    proc.on("error", (err) => resolve14({ ok: false, code: -1, stderr: err.message }));
+    proc.on("error", (err) => resolve13({ ok: false, code: -1, stderr: err.message }));
     proc.on(
       "close",
-      (code) => resolve14({ ok: code === 0, code: code ?? -1, stderr })
+      (code) => resolve13({ ok: code === 0, code: code ?? -1, stderr })
     );
   });
 }
@@ -27517,14 +27517,14 @@ var _doltInstallSpawnSeam = {
 };
 var DOLT_INSTALL_TIMEOUT_MS = 12e4;
 function _defaultDoltInstallSpawn(strategy) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     let settled = false;
     let timer;
     const finish = (r) => {
       if (settled) return;
       settled = true;
       if (timer) clearTimeout(timer);
-      resolve14(r);
+      resolve13(r);
     };
     let proc;
     try {
@@ -28295,10 +28295,12 @@ function persistBeadsConfig(cfg) {
 }
 
 // src/beads/provision-lock.ts
-var import_fs7 = __toESM(require("fs"));
+var import_fs8 = __toESM(require("fs"));
 var import_os11 = __toESM(require("os"));
 var import_path9 = __toESM(require("path"));
-var STALE_LOCK_MS = 5 * 6e4;
+
+// src/lib/process-identity.ts
+var import_fs7 = __toESM(require("fs"));
 function pidIsAlive(pid) {
   try {
     process.kill(pid, 0);
@@ -28307,32 +28309,56 @@ function pidIsAlive(pid) {
     return err.code === "EPERM";
   }
 }
+function procStartTime(pid) {
+  try {
+    const stat3 = import_fs7.default.readFileSync(`/proc/${pid}/stat`, "utf8");
+    const rest = stat3.slice(stat3.lastIndexOf(")") + 2).split(" ");
+    return rest[19] ?? "";
+  } catch {
+    return "";
+  }
+}
+function ownerRecord(pid, deps = {}) {
+  return `${pid} ${(deps.startTimeOf ?? procStartTime)(pid)}`.trim();
+}
+function ownerIsAlive(record2, deps = {}) {
+  const [pidText, recordedStart = ""] = record2.trim().split(/\s+/);
+  const pid = Number(pidText);
+  if (!Number.isInteger(pid) || pid <= 0) return false;
+  if (!(deps.isAlive ?? pidIsAlive)(pid)) return false;
+  if (!recordedStart) return true;
+  const now = (deps.startTimeOf ?? procStartTime)(pid);
+  return now === "" || now === recordedStart;
+}
+
+// src/beads/provision-lock.ts
+var STALE_LOCK_MS = 5 * 6e4;
 function tryAcquire(lockDir, deps) {
   const pid = deps.pid ?? process.pid;
   try {
-    import_fs7.default.mkdirSync(import_path9.default.dirname(lockDir), { recursive: true });
-    import_fs7.default.mkdirSync(lockDir);
-    import_fs7.default.writeFileSync(import_path9.default.join(lockDir, "pid"), String(pid));
+    import_fs8.default.mkdirSync(import_path9.default.dirname(lockDir), { recursive: true });
+    import_fs8.default.mkdirSync(lockDir);
+    import_fs8.default.writeFileSync(import_path9.default.join(lockDir, "pid"), ownerRecord(pid, deps));
     return true;
   } catch (err) {
     if (err.code !== "EEXIST") return true;
   }
   let age;
   try {
-    age = (deps.now ?? Date.now)() - import_fs7.default.statSync(lockDir).mtimeMs;
+    age = (deps.now ?? Date.now)() - import_fs8.default.statSync(lockDir).mtimeMs;
   } catch {
     return tryAcquireOnce(lockDir, deps);
   }
-  let holder = NaN;
+  let holder = "";
   try {
-    holder = Number(import_fs7.default.readFileSync(import_path9.default.join(lockDir, "pid"), "utf8"));
+    holder = import_fs8.default.readFileSync(import_path9.default.join(lockDir, "pid"), "utf8");
   } catch {
     if (age <= 1e4) return false;
   }
-  const alive = Number.isInteger(holder) && (deps.isAlive ?? pidIsAlive)(holder);
+  const alive = holder !== "" && ownerIsAlive(holder, deps);
   if (alive && age <= STALE_LOCK_MS) return false;
   try {
-    import_fs7.default.rmSync(lockDir, { recursive: true, force: true });
+    import_fs8.default.rmSync(lockDir, { recursive: true, force: true });
   } catch {
     return false;
   }
@@ -28340,8 +28366,8 @@ function tryAcquire(lockDir, deps) {
 }
 function tryAcquireOnce(lockDir, deps) {
   try {
-    import_fs7.default.mkdirSync(lockDir);
-    import_fs7.default.writeFileSync(import_path9.default.join(lockDir, "pid"), String(deps.pid ?? process.pid));
+    import_fs8.default.mkdirSync(lockDir);
+    import_fs8.default.writeFileSync(import_path9.default.join(lockDir, "pid"), ownerRecord(deps.pid ?? process.pid, deps));
     return true;
   } catch {
     return false;
@@ -28362,8 +28388,8 @@ async function withBeadsProvisionLock(fn, deps = {}) {
   } finally {
     if (held) {
       try {
-        const owner = Number(import_fs7.default.readFileSync(import_path9.default.join(lockDir, "pid"), "utf8"));
-        if (owner === (deps.pid ?? process.pid)) import_fs7.default.rmSync(lockDir, { recursive: true, force: true });
+        const owner = Number(import_fs8.default.readFileSync(import_path9.default.join(lockDir, "pid"), "utf8").trim().split(/\s+/)[0]);
+        if (owner === (deps.pid ?? process.pid)) import_fs8.default.rmSync(lockDir, { recursive: true, force: true });
       } catch {
       }
     }
@@ -28639,7 +28665,7 @@ function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
     const tmpPath = path73.join(os47.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
-    fs64.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
+    fs65.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     pendingAttachmentFiles.add(tmpPath);
     return tmpPath;
   });
@@ -28887,7 +28913,7 @@ var envReadH = async (ctx, cmd) => {
   const envPath = path73.join(process.cwd(), ".env");
   await restoreProjectEnvIfMissing(process.cwd(), ctx);
   try {
-    const raw = await fs64.promises.readFile(envPath, "utf8");
+    const raw = await fs65.promises.readFile(envPath, "utf8");
     await ctx.relay.sendResult(cmd.id, "completed", {
       exists: true,
       vars: parseDotenv(raw)
@@ -28916,7 +28942,7 @@ var envParseH = async (ctx, cmd, parsed) => {
   const existing = /* @__PURE__ */ new Map();
   if (!replace) {
     try {
-      const raw = await fs64.promises.readFile(path73.join(process.cwd(), ".env"), "utf8");
+      const raw = await fs65.promises.readFile(path73.join(process.cwd(), ".env"), "utf8");
       for (const v of parseDotenv(raw)) existing.set(v.key, v.value);
     } catch {
     }
@@ -28959,12 +28985,12 @@ var envWriteH = async (ctx, cmd, parsed) => {
   const envPath = path73.join(process.cwd(), ".env");
   const tmpPath = path73.join(process.cwd(), ".env.codeam.tmp");
   try {
-    await fs64.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
-    await fs64.promises.rename(tmpPath, envPath);
+    await fs65.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
+    await fs65.promises.rename(tmpPath, envPath);
     await ctx.relay.sendResult(cmd.id, "completed", { ok: true, count: vars.length });
     void syncProjectEnvUp(process.cwd(), ctx);
   } catch (err) {
-    await fs64.promises.rm(tmpPath, { force: true }).catch(() => void 0);
+    await fs65.promises.rm(tmpPath, { force: true }).catch(() => void 0);
     await ctx.relay.sendResult(cmd.id, "failed", { error: err.message });
   }
 };
@@ -29313,7 +29339,7 @@ var CLI_UPDATE_MAX_ATTEMPTS = 3;
 function buildNpmInstallInvocation(opts) {
   const entryScript = opts?.entryScript ?? process.argv[1] ?? "";
   const execPath = opts?.execPath ?? process.execPath;
-  const exists2 = opts?.existsSync ?? fs64.existsSync;
+  const exists2 = opts?.existsSync ?? fs65.existsSync;
   const platform3 = opts?.platform ?? process.platform;
   const p2 = platform3 === "win32" ? path73.win32 : path73.posix;
   const normalized = entryScript.split(/[\\/]/).join("/");
@@ -29344,9 +29370,9 @@ function resolveGlobalNodeModulesDir(opts) {
 var STALE_STAGING_AGE_MS = CLI_UPDATE_INSTALL_TIMEOUT_MS;
 function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
   if (!nodeModulesDir) return 0;
-  const readdirSync18 = deps?.readdirSync ?? fs64.readdirSync;
-  const statSync17 = deps?.statSync ?? fs64.statSync;
-  const rmSync14 = deps?.rmSync ?? fs64.rmSync;
+  const readdirSync18 = deps?.readdirSync ?? fs65.readdirSync;
+  const statSync17 = deps?.statSync ?? fs65.statSync;
+  const rmSync14 = deps?.rmSync ?? fs65.rmSync;
   let removed = 0;
   let entries2;
   try {
@@ -29381,16 +29407,16 @@ async function runNpmInstallLatest() {
     const invocation = buildNpmInstallInvocation({ sudo: useSudo });
     const useShell = process.platform === "win32";
     const command2 = useShell && invocation.command.includes(" ") ? `"${invocation.command}"` : invocation.command;
-    const result = await new Promise((resolve14) => {
+    const result = await new Promise((resolve13) => {
       (0, import_child_process25.execFile)(
         command2,
         invocation.args,
         { timeout: CLI_UPDATE_INSTALL_TIMEOUT_MS, shell: useShell },
         (err, _stdout, stderr) => {
           if (!err) {
-            resolve14({ ok: true });
+            resolve13({ ok: true });
           } else {
-            resolve14({ ok: false, error: (stderr || err.message).slice(0, 300) });
+            resolve13({ ok: false, error: (stderr || err.message).slice(0, 300) });
           }
         }
       );
@@ -29743,8 +29769,8 @@ async function runDetectOneShot(generate, timeoutMs = PREVIEW_DETECT_TIMEOUT_MS)
   };
   const onFailedOutput = (stdout) => onStderr(`
 ${stdout}`);
-  const deadline = new Promise((resolve14) => {
-    timer = setTimeout(() => resolve14({ raw: null, timedOut: true, stderr }), timeoutMs);
+  const deadline = new Promise((resolve13) => {
+    timer = setTimeout(() => resolve13({ raw: null, timedOut: true, stderr }), timeoutMs);
     timer.unref?.();
   });
   const oneShot = generate(PREVIEW_DETECT_PROMPT, { timeoutMs, onStderr, onFailedOutput }).then(
@@ -30212,7 +30238,7 @@ function buildKeepAlive(ctx) {
   let timer = null;
   async function setIdleTimeout(minutes) {
     if (!ctx.inCodespace || !ctx.codespaceName) return;
-    await new Promise((resolve14) => {
+    await new Promise((resolve13) => {
       const proc = (0, import_child_process26.spawn)(
         "gh",
         [
@@ -30226,8 +30252,8 @@ function buildKeepAlive(ctx) {
         { stdio: "ignore", detached: true }
       );
       proc.unref();
-      proc.on("exit", () => resolve14());
-      proc.on("error", () => resolve14());
+      proc.on("exit", () => resolve13());
+      proc.on("error", () => resolve13());
     });
   }
   return {
@@ -30481,7 +30507,7 @@ function resolveTokenValue(args2) {
   if (fileFlag) {
     const path114 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs65.readFileSync(path114, "utf8").trim();
+      const content = fs66.readFileSync(path114, "utf8").trim();
       if (content.length === 0) fail(`--token-file ${path114} is empty`);
       rmIfExistsQuiet(path114);
       return content;
@@ -30580,7 +30606,7 @@ function pairAutoLockPath() {
 var procRoot = "/proc";
 function readProcFile(rel) {
   try {
-    return fs65.readFileSync(path74.join(procRoot, rel), "utf8");
+    return fs66.readFileSync(path74.join(procRoot, rel), "utf8");
   } catch {
     return void 0;
   }
@@ -30601,7 +30627,7 @@ function currentBootId() {
 function readLockRecord(lockPath) {
   let raw;
   try {
-    raw = fs65.readFileSync(lockPath, "utf8");
+    raw = fs66.readFileSync(lockPath, "utf8");
   } catch {
     return void 0;
   }
@@ -30650,7 +30676,7 @@ function isLiveLockHolder(rec) {
 }
 function releaseOwnLock(lockPath) {
   try {
-    if (readLockRecord(lockPath)?.pid === process.pid) fs65.unlinkSync(lockPath);
+    if (readLockRecord(lockPath)?.pid === process.pid) fs66.unlinkSync(lockPath);
   } catch {
   }
 }
@@ -30674,7 +30700,7 @@ function snapshotProcessTree(root) {
   const children = /* @__PURE__ */ new Map();
   let entries2 = [];
   try {
-    entries2 = fs65.readdirSync(procRoot).filter((e) => /^\d+$/.test(e));
+    entries2 = fs66.readdirSync(procRoot).filter((e) => /^\d+$/.test(e));
   } catch {
   }
   for (const e of entries2) {
@@ -30714,13 +30740,13 @@ function daemonLockPath(sessionId) {
 function acquireDaemonLock(sessionId) {
   const lockPath = daemonLockPath(sessionId);
   try {
-    fs65.mkdirSync(path74.dirname(lockPath), { recursive: true });
+    fs66.mkdirSync(path74.dirname(lockPath), { recursive: true });
     try {
-      fs65.writeFileSync(lockPath, ownLockBody(), { flag: "wx" });
+      fs66.writeFileSync(lockPath, ownLockBody(), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
       if (isLiveLockHolder(readLockRecord(lockPath))) return false;
-      fs65.writeFileSync(lockPath, ownLockBody());
+      fs66.writeFileSync(lockPath, ownLockBody());
     }
     const release3 = () => releaseOwnLock(lockPath);
     process.once("exit", release3);
@@ -30740,13 +30766,13 @@ function acquireDaemonLock(sessionId) {
 function acquireSingletonLock() {
   const lockPath = pairAutoLockPath();
   try {
-    fs65.mkdirSync(path74.dirname(lockPath), { recursive: true });
+    fs66.mkdirSync(path74.dirname(lockPath), { recursive: true });
     try {
-      fs65.writeFileSync(lockPath, ownLockBody(), { flag: "wx" });
+      fs66.writeFileSync(lockPath, ownLockBody(), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
       if (isLiveLockHolder(readLockRecord(lockPath))) return false;
-      fs65.writeFileSync(lockPath, ownLockBody());
+      fs66.writeFileSync(lockPath, ownLockBody());
     }
     process.once("exit", () => releaseOwnLock(lockPath));
     return true;
@@ -31184,10 +31210,10 @@ function augmentKimiPath() {
 }
 var augmentPath2 = augmentKimiPath;
 async function runInstaller2() {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     const proc = (0, import_node_child_process25.spawn)("sh", ["-c", `curl -fsSL ${INSTALL_URL2} | bash`], { stdio: "inherit" });
-    proc.on("close", (code) => resolve14(code === 0));
-    proc.on("error", () => resolve14(false));
+    proc.on("close", (code) => resolve13(code === 0));
+    proc.on("error", () => resolve13(false));
   });
 }
 async function ensureKimiInstalled() {
@@ -31237,10 +31263,10 @@ function augmentOpencodePath() {
 }
 var augmentPath3 = augmentOpencodePath;
 async function runInstaller3() {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     const proc = (0, import_node_child_process26.spawn)("sh", ["-c", `curl -fsSL ${INSTALL_URL3} | bash`], { stdio: "inherit" });
-    proc.on("close", (code) => resolve14(code === 0));
-    proc.on("error", () => resolve14(false));
+    proc.on("close", (code) => resolve13(code === 0));
+    proc.on("error", () => resolve13(false));
   });
 }
 async function ensureOpencodeInstalled() {
@@ -31448,11 +31474,11 @@ async function resolveAcpAdapterWithRetry(agent, opts = {}) {
   const timeoutMs = opts.timeoutMs ?? DEFAULT_ADAPTER_RETRY_TIMEOUT_MS;
   const pollMs = opts.pollMs ?? DEFAULT_ADAPTER_RETRY_POLL_MS;
   const now = opts.now ?? Date.now;
-  const sleep5 = opts.sleep ?? ((ms) => new Promise((resolve15) => setTimeout(resolve15, ms)));
-  const resolve14 = opts.resolve ?? getAcpAdapter;
+  const sleep5 = opts.sleep ?? ((ms) => new Promise((resolve14) => setTimeout(resolve14, ms)));
+  const resolve13 = opts.resolve ?? getAcpAdapter;
   const attempt = () => {
     try {
-      return resolve14(agent);
+      return resolve13(agent);
     } catch {
       return null;
     }
@@ -31469,26 +31495,19 @@ async function resolveAcpAdapterWithRetry(agent, opts = {}) {
 }
 
 // src/commands/start/agent-startup-marks.ts
-var import_fs8 = __toESM(require("fs"));
+var import_fs9 = __toESM(require("fs"));
 var import_os13 = __toESM(require("os"));
 var import_path10 = __toESM(require("path"));
 var STALE_MARK_MS = 18e4;
 function marksDir(deps) {
   return deps.dir ?? import_path10.default.join(import_os13.default.homedir(), ".codeam", "agent-startups");
 }
-function pidIsAlive2(pid) {
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch (err) {
-    return err.code === "EPERM";
-  }
-}
 function markAgentStarting(deps = {}) {
-  const file = import_path10.default.join(marksDir(deps), String(deps.pid ?? process.pid));
+  const pid = deps.pid ?? process.pid;
+  const file = import_path10.default.join(marksDir(deps), String(pid));
   try {
-    import_fs8.default.mkdirSync(import_path10.default.dirname(file), { recursive: true });
-    import_fs8.default.writeFileSync(file, "");
+    import_fs9.default.mkdirSync(import_path10.default.dirname(file), { recursive: true });
+    import_fs9.default.writeFileSync(file, ownerRecord(pid, deps));
   } catch {
     return () => void 0;
   }
@@ -31497,7 +31516,7 @@ function markAgentStarting(deps = {}) {
     if (released) return;
     released = true;
     try {
-      import_fs8.default.rmSync(file, { force: true });
+      import_fs9.default.rmSync(file, { force: true });
     } catch {
     }
   };
@@ -31506,10 +31525,9 @@ function otherAgentsStarting(deps = {}) {
   const dir = marksDir(deps);
   const self = deps.pid ?? process.pid;
   const now = (deps.now ?? Date.now)();
-  const isAlive = deps.isAlive ?? pidIsAlive2;
   let names;
   try {
-    names = import_fs8.default.readdirSync(dir);
+    names = import_fs9.default.readdirSync(dir);
   } catch {
     return [];
   }
@@ -31518,17 +31536,23 @@ function otherAgentsStarting(deps = {}) {
     const pid = Number(name);
     if (!Number.isInteger(pid) || pid <= 0 || pid === self) continue;
     const file = import_path10.default.join(dir, name);
-    let stale = !isAlive(pid);
+    let record2 = "";
+    try {
+      record2 = import_fs9.default.readFileSync(file, "utf8");
+    } catch {
+      continue;
+    }
+    let stale = !ownerIsAlive(record2.trim() || String(pid), deps);
     if (!stale) {
       try {
-        stale = now - import_fs8.default.statSync(file).mtimeMs > STALE_MARK_MS;
+        stale = now - import_fs9.default.statSync(file).mtimeMs > STALE_MARK_MS;
       } catch {
         continue;
       }
     }
     if (stale) {
       try {
-        import_fs8.default.rmSync(file, { force: true });
+        import_fs9.default.rmSync(file, { force: true });
       } catch {
       }
       continue;
@@ -31548,7 +31572,7 @@ async function waitForNoAgentStarting(opts) {
 
 // src/agents/acp/runner.ts
 var import_node_crypto15 = require("crypto");
-var fs85 = __toESM(require("fs"));
+var fs86 = __toESM(require("fs"));
 var os61 = __toESM(require("os"));
 var path96 = __toESM(require("path"));
 
@@ -31582,7 +31606,7 @@ function noteProviderBillingSignal(opts) {
 }
 
 // src/services/history.service.ts
-var fs67 = __toESM(require("fs"));
+var fs68 = __toESM(require("fs"));
 var path77 = __toESM(require("path"));
 var https6 = __toESM(require("https"));
 var http10 = __toESM(require("http"));
@@ -31644,7 +31668,7 @@ function parseJsonl(filePath) {
   const messages = [];
   let raw;
   try {
-    raw = fs67.readFileSync(filePath, "utf8");
+    raw = fs68.readFileSync(filePath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       log.warn("history:parseJsonl", `read failed for ${filePath}`, err);
@@ -31685,7 +31709,7 @@ function parseJsonl(filePath) {
   return messages;
 }
 function postWithStatus(endpoint, body, pluginAuthToken) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     const payload = JSON.stringify(body);
     const u2 = new URL(`${API_BASE7}${endpoint}`);
     const transport = u2.protocol === "https:" ? https6 : http10;
@@ -31716,17 +31740,17 @@ function postWithStatus(endpoint, body, pluginAuthToken) {
           const ra = Number(res.headers["retry-after"]);
           retryAfterMs = Number.isFinite(ra) && ra > 0 ? ra * 1e3 : 2e4;
         }
-        resolve14({ ok, status: status2, retryAfterMs });
+        resolve13({ ok, status: status2, retryAfterMs });
       }
     );
     req.on("error", (err) => {
       log.warn("history:post", `${endpoint} network error`, err);
-      resolve14({ ok: false, status: null, retryAfterMs: null });
+      resolve13({ ok: false, status: null, retryAfterMs: null });
     });
     req.on("timeout", () => {
       log.warn("history:post", `${endpoint} timeout after 15s`);
       req.destroy();
-      resolve14({ ok: false, status: null, retryAfterMs: null });
+      resolve13({ ok: false, status: null, retryAfterMs: null });
     });
     req.write(payload);
     req.end();
@@ -31854,11 +31878,11 @@ var HistoryService = class _HistoryService {
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     const oneShots = readOneShotConversations(this.cwd);
     try {
-      const files = fs67.readdirSync(dir, { withFileTypes: true }).filter(
+      const files = fs68.readdirSync(dir, { withFileTypes: true }).filter(
         (e) => e.isFile() && e.name.endsWith(".jsonl") && !oneShots.has(path77.basename(e.name, ".jsonl"))
       ).map((e) => {
         try {
-          const stat3 = fs67.statSync(path77.join(dir, e.name));
+          const stat3 = fs68.statSync(path77.join(dir, e.name));
           return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
         } catch {
           return { name: e.name, mtime: 0, birthtime: 0 };
@@ -31899,13 +31923,13 @@ var HistoryService = class _HistoryService {
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     let entries2;
     try {
-      entries2 = fs67.readdirSync(dir, { withFileTypes: true });
+      entries2 = fs68.readdirSync(dir, { withFileTypes: true });
     } catch {
       return null;
     }
     const files = entries2.filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
       try {
-        const stat3 = fs67.statSync(path77.join(dir, e.name));
+        const stat3 = fs68.statSync(path77.join(dir, e.name));
         return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
       } catch {
         return { name: e.name, mtime: 0, birthtime: 0 };
@@ -31919,7 +31943,7 @@ var HistoryService = class _HistoryService {
   extractUsageFromFile(filePath) {
     let raw;
     try {
-      raw = fs67.readFileSync(filePath, "utf8");
+      raw = fs68.readFileSync(filePath, "utf8");
     } catch {
       return null;
     }
@@ -31971,9 +31995,9 @@ var HistoryService = class _HistoryService {
     let totalCost = 0;
     let files;
     try {
-      files = fs67.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
+      files = fs68.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
         try {
-          return fs67.statSync(path77.join(projectDir, f)).mtimeMs >= monthStartMs;
+          return fs68.statSync(path77.join(projectDir, f)).mtimeMs >= monthStartMs;
         } catch {
           return false;
         }
@@ -31984,7 +32008,7 @@ var HistoryService = class _HistoryService {
     for (const file of files) {
       let raw;
       try {
-        raw = fs67.readFileSync(path77.join(projectDir, file), "utf8");
+        raw = fs68.readFileSync(path77.join(projectDir, file), "utf8");
       } catch {
         continue;
       }
@@ -32183,7 +32207,7 @@ var HistoryService = class _HistoryService {
     if (!filePath) return false;
     let mtimeMs;
     try {
-      mtimeMs = fs67.statSync(filePath).mtimeMs;
+      mtimeMs = fs68.statSync(filePath).mtimeMs;
     } catch {
       return false;
     }
@@ -32258,7 +32282,7 @@ var HistoryService = class _HistoryService {
 
 // src/agents/acp/client.ts
 var import_node_child_process27 = require("child_process");
-var fs68 = __toESM(require("fs/promises"));
+var fs69 = __toESM(require("fs/promises"));
 var fsSync = __toESM(require("fs"));
 var os51 = __toESM(require("os"));
 var path79 = __toESM(require("path"));
@@ -34300,12 +34324,12 @@ var Connection = class {
     const id = this.nextRequestId++;
     let cancel = () => {
     };
-    const responsePromise = new Promise((resolve14, reject) => {
+    const responsePromise = new Promise((resolve13, reject) => {
       const pendingResponse = {
         resolve: (response) => {
           try {
             const value = mapResponse ? mapResponse(response) : response;
-            resolve14(value);
+            resolve13(value);
           } catch (error) {
             reject(error);
           }
@@ -34383,8 +34407,8 @@ var Connection = class {
   initialize(stream, handlers2) {
     this.stream = stream;
     this.staticHandlers = handlers2;
-    this.closedPromise = new Promise((resolve14) => {
-      this.abortController.signal.addEventListener("abort", () => resolve14());
+    this.closedPromise = new Promise((resolve13) => {
+      this.abortController.signal.addEventListener("abort", () => resolve13());
     });
     void this.receive();
   }
@@ -35172,8 +35196,8 @@ var AsyncQueue = class {
     if (this.failed) {
       return Promise.reject(this.failure);
     }
-    return new Promise((resolve14, reject) => {
-      this.waiters.push({ resolve: resolve14, reject });
+    return new Promise((resolve13, reject) => {
+      this.waiters.push({ resolve: resolve13, reject });
     });
   }
 };
@@ -36865,7 +36889,7 @@ var AcpClient = class {
     this.pendingToolCalls.clear();
     try {
       const result = await Promise.race([send, idle.promise]);
-      await new Promise((resolve14) => setImmediate(resolve14));
+      await new Promise((resolve13) => setImmediate(resolve13));
       log.info(
         "acpClient",
         `prompt \u2190 ok stopReason=${result.stopReason ?? "?"} elapsedMs=${Date.now() - t0}`
@@ -37081,8 +37105,8 @@ var AcpClient = class {
     if (!this.connection || !this.sessionId) return "deferred";
     this.mcpReprovisionPending = servers;
     if (this.mcpDebounceTimer) clearTimeout(this.mcpDebounceTimer);
-    const settled = new Promise((resolve14) => {
-      this.mcpDebounceWaiters.push(resolve14);
+    const settled = new Promise((resolve13) => {
+      this.mcpDebounceWaiters.push(resolve13);
     });
     this.mcpDebounceTimer = setTimeout(() => {
       this.mcpDebounceTimer = null;
@@ -37326,15 +37350,15 @@ var AcpClient = class {
       } else {
         child.kill("SIGTERM");
       }
-      const grace = new Promise((resolve14) => {
+      const grace = new Promise((resolve13) => {
         const t2 = setTimeout(() => {
           if (process.platform !== "win32" && pid) killQuiet(-pid, "SIGKILL");
           else killQuiet(child, "SIGKILL");
-          resolve14();
+          resolve13();
         }, 2e3);
         child.once("exit", () => {
           clearTimeout(t2);
-          resolve14();
+          resolve13();
         });
       });
       await grace;
@@ -37402,7 +37426,7 @@ var AcpClient = class {
           throw new RequestError(-32002, GUARDRAIL_SECRET_READ_BLOCK_REASON, { uri: params.path });
         }
         try {
-          const content = await fs68.readFile(params.path, "utf8");
+          const content = await fs69.readFile(params.path, "utf8");
           return applyLineRange(content, params.line ?? null, params.limit ?? null);
         } catch (err) {
           const code = err.code;
@@ -37423,7 +37447,7 @@ var AcpClient = class {
           throw new RequestError(-32002, INTERNAL_BLOCK_REASON, { uri: params.path });
         }
         try {
-          await fs68.writeFile(params.path, params.content, "utf8");
+          await fs69.writeFile(params.path, params.content, "utf8");
           return {};
         } catch (err) {
           const code = err.code;
@@ -37563,7 +37587,7 @@ var os52 = __toESM(require("os"));
 function runAgentInstallScript(script, opts = {}) {
   const timeoutMs = opts.timeoutMs ?? 18e4;
   const scope = opts.logScope ?? "agent-install";
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     const home = process.env.HOME || os52.homedir();
     const child = (0, import_child_process27.spawn)("sh", ["-c", script], {
       env: { ...process.env, HOME: home },
@@ -37579,7 +37603,7 @@ function runAgentInstallScript(script, opts = {}) {
     const done = (result) => {
       if (settled) return;
       settled = true;
-      resolve14(result);
+      resolve13(result);
     };
     const timer = setTimeout(() => {
       log.warn(scope, `agent install timed out (${Math.round(timeoutMs / 1e3)}s)`);
@@ -37826,7 +37850,7 @@ async function performAgentSwitch(deps, rawAgentId, fastPath = {}) {
 }
 
 // src/commands/host/agent-provisioning.ts
-var fs69 = __toESM(require("fs"));
+var fs70 = __toESM(require("fs"));
 var os53 = __toESM(require("os"));
 var path80 = __toESM(require("path"));
 var PUBLIC_TO_INTERNAL_AGENT = {
@@ -37845,16 +37869,16 @@ function toInternalAgentId(publicAgentId) {
   return PUBLIC_TO_INTERNAL_AGENT[publicAgentId] ?? null;
 }
 function ensureDir(dir) {
-  fs69.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs70.mkdirSync(dir, { recursive: true, mode: 448 });
 }
 function writeFile0600(filePath, contents) {
   ensureDir(path80.dirname(filePath));
-  fs69.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
+  fs70.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
   restrictToOwner(filePath);
 }
 function rmIfExists(filePath) {
   try {
-    fs69.rmSync(filePath, { force: true });
+    fs70.rmSync(filePath, { force: true });
   } catch {
   }
 }
@@ -37873,7 +37897,7 @@ var claudeProvisioner = {
       rmIfExists(credentialsJson);
     }
     const claudeJson = path80.join(home, ".claude.json");
-    if (!fs69.existsSync(claudeJson)) {
+    if (!fs70.existsSync(claudeJson)) {
       writeFile0600(
         claudeJson,
         JSON.stringify({ hasCompletedOnboarding: true, customApiKeyResponses: { approved: [] } })
@@ -37907,7 +37931,7 @@ function codexLoginStamp(raw) {
 function keepsFresherCodexLogin(authJsonPath, incoming) {
   let onDisk;
   try {
-    onDisk = fs69.readFileSync(authJsonPath, "utf8");
+    onDisk = fs70.readFileSync(authJsonPath, "utf8");
   } catch {
     return false;
   }
@@ -38044,7 +38068,7 @@ function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os53.homedir(
 }
 
 // src/beads/workflow-hint.ts
-var fs70 = __toESM(require("fs"));
+var fs71 = __toESM(require("fs"));
 var path81 = __toESM(require("path"));
 var BEADS_HINT_MARKER = "<!-- codeam:beads-workflow -->";
 var BEADS_HINT = `${BEADS_HINT_MARKER}
@@ -38072,11 +38096,11 @@ function ensureBeadsWorkflowHint(homeDir2, file = claudeMemoryFile(homeDir2)) {
   try {
     let existing = "";
     try {
-      existing = fs70.readFileSync(file, "utf8");
+      existing = fs71.readFileSync(file, "utf8");
     } catch {
     }
     if (existing.includes(BEADS_HINT)) return;
-    fs70.mkdirSync(path81.dirname(file), { recursive: true });
+    fs71.mkdirSync(path81.dirname(file), { recursive: true });
     let next;
     const open = existing.indexOf(BEADS_HINT_MARKER);
     const close = open === -1 ? -1 : existing.indexOf(BEADS_HINT_MARKER, open + BEADS_HINT_MARKER.length);
@@ -38089,40 +38113,40 @@ ${BEADS_HINT}
 ` : `${BEADS_HINT}
 `;
     }
-    fs70.writeFileSync(file, next);
+    fs71.writeFileSync(file, next);
   } catch {
   }
 }
 
 // src/agents/agent-standard.ts
-var fs71 = __toESM(require("fs"));
+var fs72 = __toESM(require("fs"));
 var path82 = __toESM(require("path"));
 var os54 = __toESM(require("os"));
 function ensureAgentStandard(homeDir2, file = claudeMemoryFile(homeDir2)) {
   try {
     let existing = "";
     try {
-      existing = fs71.readFileSync(file, "utf8");
+      existing = fs72.readFileSync(file, "utf8");
     } catch {
     }
     if (existing.includes(AGENT_STANDARD_MARKER)) return;
-    fs71.mkdirSync(path82.dirname(file), { recursive: true });
+    fs72.mkdirSync(path82.dirname(file), { recursive: true });
     const next = existing.trim() ? `${existing.trimEnd()}
 
 ${AGENT_STANDARD_BLOCK}
 ` : `${AGENT_STANDARD_BLOCK}
 `;
-    fs71.writeFileSync(file, next);
+    fs72.writeFileSync(file, next);
   } catch {
   }
 }
 var _agentStandardSeam = {
   isLocalSession: () => isLocalSession(),
   markerPath: (sessionId) => path82.join(os54.homedir(), ".codeam", "agent-standard", `${sessionId}.done`),
-  exists: (p2) => fs71.existsSync(p2),
+  exists: (p2) => fs72.existsSync(p2),
   write: (p2) => {
-    fs71.mkdirSync(path82.dirname(p2), { recursive: true });
-    fs71.writeFileSync(p2, "");
+    fs72.mkdirSync(path82.dirname(p2), { recursive: true });
+    fs72.writeFileSync(p2, "");
   }
 };
 function isClaude(agent) {
@@ -38192,7 +38216,7 @@ var _transport4 = {
   get: _get
 };
 function _post3(url2, headers, payload) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve13, reject) => {
     let settled = false;
     const u2 = new URL(url2);
     const lib = u2.protocol === "https:" ? https7 : http11;
@@ -38217,7 +38241,7 @@ function _post3(url2, headers, payload) {
         res.on("end", () => {
           if (settled) return;
           settled = true;
-          resolve14({ statusCode: res.statusCode ?? 0, body });
+          resolve13({ statusCode: res.statusCode ?? 0, body });
         });
       }
     );
@@ -38234,7 +38258,7 @@ function _post3(url2, headers, payload) {
   });
 }
 function _get(url2, headers) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve13, reject) => {
     let settled = false;
     const u2 = new URL(url2);
     const lib = u2.protocol === "https:" ? https7 : http11;
@@ -38258,7 +38282,7 @@ function _get(url2, headers) {
         res.on("end", () => {
           if (settled) return;
           settled = true;
-          resolve14({ statusCode: res.statusCode ?? 0, body });
+          resolve13({ statusCode: res.statusCode ?? 0, body });
         });
       }
     );
@@ -38857,15 +38881,15 @@ function withholdTrailingPartialFenceMarker(text) {
 
 // src/agents/acp/onboarding.ts
 var import_child_process28 = require("child_process");
-var fs73 = __toESM(require("fs"));
+var fs74 = __toESM(require("fs"));
 var os55 = __toESM(require("os"));
 var path84 = __toESM(require("path"));
 var _onboardingSeam = {
   markerPath: (sessionId) => path84.join(os55.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
-  exists: (p2) => fs73.existsSync(p2),
+  exists: (p2) => fs74.existsSync(p2),
   write: (p2) => {
-    fs73.mkdirSync(path84.dirname(p2), { recursive: true });
-    fs73.writeFileSync(p2, "");
+    fs74.mkdirSync(path84.dirname(p2), { recursive: true });
+    fs74.writeFileSync(p2, "");
   },
   disabled: () => {
     const v = process.env.CODEAM_ONBOARDING_DISABLED;
@@ -39294,13 +39318,13 @@ var import_crypto5 = require("crypto");
 
 // src/services/turn-files/git-changeset.ts
 var import_child_process29 = require("child_process");
-var fs75 = __toESM(require("fs/promises"));
-var import_fs9 = require("fs");
+var fs76 = __toESM(require("fs/promises"));
+var import_fs10 = require("fs");
 var path86 = __toESM(require("path"));
 
 // src/services/turn-files/review-ignore.ts
 var import_ignore2 = __toESM(require("ignore"));
-var fs74 = __toESM(require("fs"));
+var fs75 = __toESM(require("fs"));
 var path85 = __toESM(require("path"));
 var CURATED_REVIEW_IGNORE = [
   // Google Cloud SDK (the incident) — installs a huge python tree.
@@ -39345,7 +39369,7 @@ var CURATED_REVIEW_IGNORE = [
 function makeReviewIgnore(repoRoot) {
   const ig = (0, import_ignore2.default)().add(CURATED_REVIEW_IGNORE);
   try {
-    const custom = fs74.readFileSync(path85.join(repoRoot, ".codeam", "reviewignore"), "utf8");
+    const custom = fs75.readFileSync(path85.join(repoRoot, ".codeam", "reviewignore"), "utf8");
     ig.add(custom);
   } catch {
   }
@@ -39428,7 +39452,7 @@ function readUntrackedLineCount(absPath) {
 }
 async function defaultReadUntrackedLineCount(absPath) {
   try {
-    const content = await fs75.readFile(absPath, "utf8");
+    const content = await fs76.readFile(absPath, "utf8");
     let count = 0;
     let pos = -1;
     while ((pos = content.indexOf("\n", pos + 1)) !== -1) {
@@ -39489,12 +39513,12 @@ function runGit3(cwd, args2) {
   return _runGitImpl2.run(cwd, args2);
 }
 function defaultRunGit(cwd, args2) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     let proc;
     try {
       proc = (0, import_child_process29.spawn)("git", args2, { cwd, env: process.env });
     } catch {
-      resolve14(null);
+      resolve13(null);
       return;
     }
     let stdout = "";
@@ -39505,22 +39529,22 @@ function defaultRunGit(cwd, args2) {
     proc.stderr?.on("data", (c2) => {
       stderr += c2.toString();
     });
-    proc.on("error", () => resolve14(null));
+    proc.on("error", () => resolve13(null));
     proc.on("close", (code) => {
       if (code === 0) {
-        resolve14(stdout);
+        resolve13(stdout);
       } else {
         log.trace(
           "turnFiles",
           `git ${args2.join(" ")} exited ${code} stderr=${stderr.slice(0, 200)}`
         );
-        resolve14(null);
+        resolve13(null);
       }
     });
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs99 = await import("fs/promises");
+  const fs100 = await import("fs/promises");
   const out2 = [];
   await walk2(workingDir, 0);
   return out2;
@@ -39528,7 +39552,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (depth2 > maxDepth) return;
     let entries2 = [];
     try {
-      const dirents = await fs99.readdir(dir, { withFileTypes: true });
+      const dirents = await fs100.readdir(dir, { withFileTypes: true });
       entries2 = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -39554,7 +39578,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
 }
 function isReviewablePath(absPath) {
   try {
-    const st3 = (0, import_fs9.lstatSync)(absPath);
+    const st3 = (0, import_fs10.lstatSync)(absPath);
     return st3.isFile() || st3.isSymbolicLink();
   } catch {
     return true;
@@ -39562,7 +39586,7 @@ function isReviewablePath(absPath) {
 }
 
 // src/services/turn-files/files-outbox.ts
-var fs76 = __toESM(require("fs/promises"));
+var fs77 = __toESM(require("fs/promises"));
 var path87 = __toESM(require("path"));
 var import_os14 = require("os");
 var HOME_OUTBOX_DIR = ".codeam/outbox";
@@ -39604,8 +39628,8 @@ var FilesOutbox = class {
   /** Persist the entry to disk and trigger a flush. Returns once the
    *  line is durable on disk (not once the POST succeeds). */
   async enqueue(entry) {
-    await fs76.mkdir(path87.dirname(this.filePath), { recursive: true });
-    await fs76.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
+    await fs77.mkdir(path87.dirname(this.filePath), { recursive: true });
+    await fs77.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
     this.backoffIndex = 0;
     if (this.autoSchedule) this.scheduleFlush(0);
   }
@@ -39696,7 +39720,7 @@ var FilesOutbox = class {
   async readAll() {
     let raw = "";
     try {
-      raw = await fs76.readFile(this.filePath, "utf8");
+      raw = await fs77.readFile(this.filePath, "utf8");
     } catch {
       return [];
     }
@@ -39720,12 +39744,12 @@ var FilesOutbox = class {
   async rewrite(entries2) {
     const tmpPath = `${this.filePath}.${process.pid}.tmp`;
     if (entries2.length === 0) {
-      await fs76.unlink(this.filePath).catch(() => void 0);
+      await fs77.unlink(this.filePath).catch(() => void 0);
       return;
     }
     const payload = entries2.map((e) => JSON.stringify(e)).join("\n") + "\n";
-    await fs76.writeFile(tmpPath, payload, "utf8");
-    await fs76.rename(tmpPath, this.filePath);
+    await fs77.writeFile(tmpPath, payload, "utf8");
+    await fs77.rename(tmpPath, this.filePath);
   }
 };
 function applyJitter(ms) {
@@ -39931,25 +39955,25 @@ function baselineKey(entry) {
 
 // src/agents/acp/withTimeout.ts
 function withTimeout(p2, ms) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     let settled = false;
     const timer = setTimeout(() => {
       if (settled) return;
       settled = true;
-      resolve14(void 0);
+      resolve13(void 0);
     }, ms);
     p2.then(
       (v) => {
         if (settled) return;
         settled = true;
         clearTimeout(timer);
-        resolve14(v);
+        resolve13(v);
       },
       () => {
         if (settled) return;
         settled = true;
         clearTimeout(timer);
-        resolve14(void 0);
+        resolve13(void 0);
       }
     );
   });
@@ -40073,7 +40097,7 @@ async function readActiveConversationMarker(cwd, homeDir2) {
 }
 
 // src/services/turn-marker.ts
-var fs78 = __toESM(require("fs"));
+var fs79 = __toESM(require("fs"));
 var os57 = __toESM(require("os"));
 var path89 = __toESM(require("path"));
 var depth = 0;
@@ -40086,14 +40110,14 @@ function turnMarkerPath(pid = process.pid, home = codeamHome()) {
 function mark() {
   try {
     const file = turnMarkerPath();
-    fs78.mkdirSync(path89.dirname(file), { recursive: true });
-    fs78.writeFileSync(file, String(Date.now()));
+    fs79.mkdirSync(path89.dirname(file), { recursive: true });
+    fs79.writeFileSync(file, String(Date.now()));
   } catch {
   }
 }
 function clear() {
   try {
-    fs78.rmSync(turnMarkerPath(), { force: true });
+    fs79.rmSync(turnMarkerPath(), { force: true });
   } catch {
   }
 }
@@ -40108,7 +40132,7 @@ async function withTurnMarker(fn) {
 function isProcessMidTurn(pid, home) {
   if (!pid) return false;
   try {
-    return fs78.existsSync(turnMarkerPath(pid, home));
+    return fs79.existsSync(turnMarkerPath(pid, home));
   } catch {
     return false;
   }
@@ -40116,9 +40140,9 @@ function isProcessMidTurn(pid, home) {
 
 // src/packs/gates.ts
 var import_node_child_process28 = require("child_process");
-var fs79 = __toESM(require("fs"));
+var fs80 = __toESM(require("fs"));
 var path90 = __toESM(require("path"));
-var defaultCommandRunner = (file, args2, cwd, timeoutMs, env) => new Promise((resolve14) => {
+var defaultCommandRunner = (file, args2, cwd, timeoutMs, env) => new Promise((resolve13) => {
   (0, import_node_child_process28.execFile)(
     file,
     args2,
@@ -40134,7 +40158,7 @@ var defaultCommandRunner = (file, args2, cwd, timeoutMs, env) => new Promise((re
         const rawCode = err.code;
         code = typeof rawCode === "number" ? rawCode : 1;
       }
-      resolve14({ code, stdout: stdout ?? "", stderr: stderr ?? "" });
+      resolve13({ code, stdout: stdout ?? "", stderr: stderr ?? "" });
     }
   );
 });
@@ -40167,7 +40191,7 @@ async function changedFiles(run3, cwd, from, to) {
 }
 function readWorkspaceFile(cwd, relPath) {
   try {
-    return fs79.readFileSync(path90.join(cwd, relPath), "utf8");
+    return fs80.readFileSync(path90.join(cwd, relPath), "utf8");
   } catch {
     return null;
   }
@@ -40176,14 +40200,14 @@ var NO_TEST_PLACEHOLDER = 'echo "Error: no test specified"';
 var CHECKS_TIMEOUT_MS = 5 * 6e4;
 function detectChecksCommand(cwd) {
   try {
-    const cfg = JSON.parse(fs79.readFileSync(path90.join(cwd, ".codeam", "pack.json"), "utf8"));
+    const cfg = JSON.parse(fs80.readFileSync(path90.join(cwd, ".codeam", "pack.json"), "utf8"));
     if (typeof cfg.checksCommand === "string" && cfg.checksCommand.trim().length > 0) {
       return cfg.checksCommand.trim();
     }
   } catch {
   }
   try {
-    const pkg = JSON.parse(fs79.readFileSync(path90.join(cwd, "package.json"), "utf8"));
+    const pkg = JSON.parse(fs80.readFileSync(path90.join(cwd, "package.json"), "utf8"));
     const test = pkg.scripts?.test;
     if (typeof test === "string" && test.trim().length > 0 && !test.includes(NO_TEST_PLACEHOLDER)) {
       return "npm test";
@@ -40201,7 +40225,7 @@ ${res.stderr}`.trim();
 }
 
 // src/packs/run-store.ts
-var fs80 = __toESM(require("fs"));
+var fs81 = __toESM(require("fs"));
 var path91 = __toESM(require("path"));
 var crypto5 = __toESM(require("crypto"));
 function packsDir(cwd) {
@@ -40214,10 +40238,10 @@ function newRunId() {
   return `pk_${Date.now().toString(36)}_${crypto5.randomBytes(4).toString("hex")}`;
 }
 function writeJsonAtomic(file, value) {
-  fs80.mkdirSync(path91.dirname(file), { recursive: true });
+  fs81.mkdirSync(path91.dirname(file), { recursive: true });
   const tmp = `${file}.tmp`;
-  fs80.writeFileSync(tmp, JSON.stringify(value, null, 2));
-  fs80.renameSync(tmp, file);
+  fs81.writeFileSync(tmp, JSON.stringify(value, null, 2));
+  fs81.renameSync(tmp, file);
 }
 function saveRun(cwd, state) {
   writeJsonAtomic(path91.join(runDir(cwd, state.runId), "run.json"), state);
@@ -40229,11 +40253,11 @@ function saveStageHandoff(cwd, runId, stageIndex, role, handoff) {
 function loadLatestRun(cwd) {
   try {
     const dir = packsDir(cwd);
-    const entries2 = fs80.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name).sort();
+    const entries2 = fs81.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name).sort();
     for (let i = entries2.length - 1; i >= 0; i--) {
       const file = path91.join(dir, entries2[i], "run.json");
       try {
-        const parsed = JSON.parse(fs80.readFileSync(file, "utf8"));
+        const parsed = JSON.parse(fs81.readFileSync(file, "utf8"));
         if (parsed && typeof parsed.runId === "string") return parsed;
       } catch {
       }
@@ -40245,16 +40269,16 @@ function loadLatestRun(cwd) {
 function ensureLedgerIgnored(cwd) {
   try {
     const gitDir = path91.join(cwd, ".git");
-    if (!fs80.existsSync(gitDir)) return;
+    if (!fs81.existsSync(gitDir)) return;
     const exclude = path91.join(gitDir, "info", "exclude");
     let existing = "";
     try {
-      existing = fs80.readFileSync(exclude, "utf8");
+      existing = fs81.readFileSync(exclude, "utf8");
     } catch {
     }
     if (existing.includes(".codeam/packs/")) return;
-    fs80.mkdirSync(path91.dirname(exclude), { recursive: true });
-    fs80.writeFileSync(exclude, `${existing.trimEnd()}
+    fs81.mkdirSync(path91.dirname(exclude), { recursive: true });
+    fs81.writeFileSync(exclude, `${existing.trimEnd()}
 .codeam/packs/
 `.trimStart());
   } catch {
@@ -41235,7 +41259,7 @@ async function mcpRouter() {
 }
 
 // src/integrations/mcp-secrets.ts
-var fs82 = __toESM(require("fs"));
+var fs83 = __toESM(require("fs"));
 var os59 = __toESM(require("os"));
 var path93 = __toESM(require("path"));
 var MCP_SECRETS_FILE_ENV = "CODEAM_MCP_SECRETS_FILE";
@@ -41248,7 +41272,7 @@ function mcpSecretsPath(scope, pid = process.pid) {
 var registeredForCleanup = /* @__PURE__ */ new Set();
 function readFileVars(file) {
   try {
-    const parsed = JSON.parse(fs82.readFileSync(file, "utf8"));
+    const parsed = JSON.parse(fs83.readFileSync(file, "utf8"));
     if (!parsed || typeof parsed !== "object") return {};
     const out2 = {};
     for (const [k2, v] of Object.entries(parsed)) {
@@ -41270,7 +41294,7 @@ function pidAlive2(pid) {
 function pruneStale(dir) {
   let names = [];
   try {
-    names = fs82.readdirSync(dir);
+    names = fs83.readdirSync(dir);
   } catch {
     return;
   }
@@ -41280,7 +41304,7 @@ function pruneStale(dir) {
     const pid = Number(m[1]);
     if (pid === process.pid || pidAlive2(pid)) continue;
     try {
-      fs82.unlinkSync(path93.join(dir, name));
+      fs83.unlinkSync(path93.join(dir, name));
     } catch {
     }
   }
@@ -41288,17 +41312,17 @@ function pruneStale(dir) {
 function writeMcpSecrets(vars, file) {
   try {
     const dir = path93.dirname(file);
-    fs82.mkdirSync(dir, { recursive: true, mode: 448 });
+    fs83.mkdirSync(dir, { recursive: true, mode: 448 });
     pruneStale(dir);
     const tmp = `${file}.${process.pid}.tmp`;
-    fs82.writeFileSync(tmp, JSON.stringify(vars), { mode: 384 });
-    fs82.renameSync(tmp, file);
-    fs82.chmodSync(file, 384);
+    fs83.writeFileSync(tmp, JSON.stringify(vars), { mode: 384 });
+    fs83.renameSync(tmp, file);
+    fs83.chmodSync(file, 384);
     if (!registeredForCleanup.has(file)) {
       registeredForCleanup.add(file);
       process.once("exit", () => {
         try {
-          fs82.unlinkSync(file);
+          fs83.unlinkSync(file);
         } catch {
         }
       });
@@ -41776,24 +41800,24 @@ var AgentPreviewBridge = class {
    *  preview tools are then simply absent, never a failed session. */
   listen() {
     if (this.listening) return this.listening;
-    this.listening = new Promise((resolve14) => {
+    this.listening = new Promise((resolve13) => {
       const server = http12.createServer((req, res) => {
         void this.handle(req, res);
       });
       server.on("error", (err) => {
         log.warn("agent-preview", `bridge failed to listen: ${String(err)}`);
-        resolve14(null);
+        resolve13(null);
       });
       server.listen(0, "127.0.0.1", () => {
         const addr = server.address();
         if (!addr || typeof addr === "string") {
-          resolve14(null);
+          resolve13(null);
           return;
         }
         server.unref();
         this.server = server;
         this.bound = { url: `http://127.0.0.1:${addr.port}`, token: this.token };
-        resolve14(this.bound);
+        resolve13(this.bound);
       });
     });
     return this.listening;
@@ -41830,9 +41854,9 @@ var AgentPreviewBridge = class {
     }
     const inflight = this.inflight;
     let timer;
-    const pending2 = new Promise((resolve14) => {
+    const pending2 = new Promise((resolve13) => {
       timer = setTimeout(
-        () => resolve14({
+        () => resolve13({
           status: "starting",
           message: "The preview is still coming up (dependencies or a slow dev server). It keeps going in the background \u2014 call preview_status in a minute."
         }),
@@ -42035,7 +42059,7 @@ function authorized(header, token) {
   return presented.length === expected.length && (0, import_node_crypto14.timingSafeEqual)(presented, expected);
 }
 function readJson(req) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve13, reject) => {
     let raw = "";
     req.setEncoding("utf8");
     req.on("data", (chunk) => {
@@ -42046,10 +42070,10 @@ function readJson(req) {
       }
     });
     req.on("end", () => {
-      if (!raw) return resolve14({});
+      if (!raw) return resolve13({});
       try {
         const parsed = JSON.parse(raw);
-        resolve14(parsed && typeof parsed === "object" ? parsed : {});
+        resolve13(parsed && typeof parsed === "object" ? parsed : {});
       } catch {
         reject(new Error("invalid JSON"));
       }
@@ -43176,15 +43200,15 @@ async function prewarmNewMcpEntries(manifest, previousIds) {
   );
   await Promise.all(
     fresh.map(
-      (e) => new Promise((resolve14) => {
+      (e) => new Promise((resolve13) => {
         const mcp = e.delivery.mcp;
         const child = (0, import_node_child_process29.execFile)(
           mcp.command,
           [...mcp.args, "--help"],
           { timeout: 9e4 },
-          () => resolve14()
+          () => resolve13()
         );
-        child.on("error", () => resolve14());
+        child.on("error", () => resolve13());
       })
     )
   );
@@ -43451,7 +43475,7 @@ var StreamingState = class {
    * protested "J'ai rien refusé". The line is the user's evidence.
    */
   registerPermission(args2) {
-    return new Promise((resolve14) => {
+    return new Promise((resolve13) => {
       const timeoutTimer = setTimeout(() => {
         if (this.pending?.kind === "permission" && this.pending.questionId === args2.questionId) {
           log.warn(
@@ -43464,14 +43488,14 @@ var StreamingState = class {
             content: permissionExpiredNotice(),
             done: true
           });
-          resolve14({ outcome: { outcome: "cancelled" } });
+          resolve13({ outcome: { outcome: "cancelled" } });
         }
       }, PERMISSION_TIMEOUT_MS);
       this.setPending({
         kind: "permission",
         questionId: args2.questionId,
         options: args2.options,
-        resolve: resolve14,
+        resolve: resolve13,
         timeoutTimer
       });
     });
@@ -43508,14 +43532,14 @@ var StreamingState = class {
       const byId = optionId ? this.pending.options.find((o) => o.optionId === optionId) : void 0;
       const picked = byId ?? this.pending.options[index];
       clearTimeout(this.pending.timeoutTimer);
-      const resolve14 = this.pending.resolve;
+      const resolve13 = this.pending.resolve;
       this.setPending(null);
       if (!picked) {
         log.warn("acpRunner", `select_option index=${index} out of bounds \u2014 cancel`);
-        resolve14({ outcome: { outcome: "cancelled" } });
+        resolve13({ outcome: { outcome: "cancelled" } });
         return { kind: "resolved", optionId: null };
       }
-      resolve14({ outcome: { outcome: "selected", optionId: picked.optionId } });
+      resolve13({ outcome: { outcome: "selected", optionId: picked.optionId } });
       return { kind: "resolved", optionId: picked.optionId };
     }
     const text = this.pending.options[index];
@@ -44432,7 +44456,7 @@ async function runAcpSession(opts) {
         `switch-${opts.pluginId}`
       );
       try {
-        fs85.mkdirSync(claudeConfigDir2, { recursive: true, mode: 448 });
+        fs86.mkdirSync(claudeConfigDir2, { recursive: true, mode: 448 });
       } catch {
       }
       const memoryFile = path96.join(claudeConfigDir2, "CLAUDE.md");
@@ -45666,7 +45690,7 @@ function pickPinnedSession(pinnedId, listSessions2) {
 }
 
 // src/agents/retired-proxy-cleanup.ts
-var fs86 = __toESM(require("fs"));
+var fs87 = __toESM(require("fs"));
 var path97 = __toESM(require("path"));
 var os62 = __toESM(require("os"));
 var RETIRED_PROXY_RE = /^https?:\/\/(?:127\.0\.0\.1|localhost|\[::1\]):8787(?:[/?#]|$)/i;
@@ -45682,7 +45706,7 @@ function sanitizeRetiredProxyConfig(homeDir2 = os62.homedir()) {
   const file = path97.join(homeDir2, ".claude", "settings.json");
   let parsed;
   try {
-    parsed = JSON.parse(fs86.readFileSync(file, "utf8"));
+    parsed = JSON.parse(fs87.readFileSync(file, "utf8"));
   } catch {
     return out2;
   }
@@ -45724,9 +45748,9 @@ function sanitizeRetiredProxyConfig(homeDir2 = os62.homedir()) {
   if (!out2.changed) return out2;
   try {
     const tmp = `${file}.codeam.tmp`;
-    fs86.writeFileSync(tmp, `${JSON.stringify(parsed, null, 2)}
+    fs87.writeFileSync(tmp, `${JSON.stringify(parsed, null, 2)}
 `, { mode: 384 });
-    fs86.renameSync(tmp, file);
+    fs87.renameSync(tmp, file);
   } catch {
     out2.changed = false;
   }
@@ -46116,10 +46140,10 @@ var NativeTuiDriver = class _NativeTuiDriver {
     this.lastOutput = this.now();
   }
   whenSafeToYield() {
-    return new Promise((resolve14) => {
+    return new Promise((resolve13) => {
       const tick = () => {
         const quietFor = this.now() - this.lastOutput;
-        if (quietFor >= this.idleMs) resolve14();
+        if (quietFor >= this.idleMs) resolve13();
         else setTimeout(tick, this.idleMs - quietFor);
       };
       tick();
@@ -46182,10 +46206,10 @@ var AcpDriver = class {
    * one ever is, assume resumable so behaviour is unchanged.
    */
   hasTranscript(conversationId) {
-    const resolve14 = this.deps.runtime.resolveHistoryFile;
-    if (typeof resolve14 !== "function") return true;
+    const resolve13 = this.deps.runtime.resolveHistoryFile;
+    if (typeof resolve13 !== "function") return true;
     try {
-      return resolve14.call(this.deps.runtime, this.deps.opts.cwd, conversationId) !== null;
+      return resolve13.call(this.deps.runtime, this.deps.opts.cwd, conversationId) !== null;
     } catch {
       return true;
     }
@@ -46249,16 +46273,16 @@ var AcpDriver = class {
     this.turnActive = false;
     const waiters = this.waiters;
     this.waiters = [];
-    waiters.forEach((resolve14) => resolve14());
+    waiters.forEach((resolve13) => resolve13());
   }
   whenSafeToYield() {
     if (!this.turnActive) return Promise.resolve();
-    return new Promise((resolve14) => this.waiters.push(resolve14));
+    return new Promise((resolve13) => this.waiters.push(resolve13));
   }
 };
 
 // src/baton/transcript-mirror.ts
-var fs87 = __toESM(require("fs"));
+var fs88 = __toESM(require("fs"));
 var TranscriptMirror = class {
   constructor(deps) {
     this.deps = deps;
@@ -46352,7 +46376,7 @@ var TranscriptMirror = class {
   }
 };
 function defaultWatch(file, onChange) {
-  const w3 = fs87.watch(file, { persistent: false }, () => onChange());
+  const w3 = fs88.watch(file, { persistent: false }, () => onChange());
   return () => w3.close();
 }
 
@@ -46698,7 +46722,7 @@ function keepDeviceAwake(deps = {}) {
 }
 
 // src/agents/claude/onboarding.ts
-var fs88 = __toESM(require("fs"));
+var fs89 = __toESM(require("fs"));
 var os64 = __toESM(require("os"));
 var path98 = __toESM(require("path"));
 var ONBOARDING_VERSION_SENTINEL = "9999.0.0";
@@ -46707,7 +46731,7 @@ function ensureClaudeOnboarded(cwd) {
     const file = path98.join(os64.homedir(), ".claude.json");
     let config = {};
     try {
-      config = JSON.parse(fs88.readFileSync(file, "utf8"));
+      config = JSON.parse(fs89.readFileSync(file, "utf8"));
     } catch {
     }
     let changed = false;
@@ -46732,8 +46756,8 @@ function ensureClaudeOnboarded(cwd) {
       }
     }
     if (!changed) return;
-    fs88.mkdirSync(path98.dirname(file), { recursive: true });
-    fs88.writeFileSync(file, JSON.stringify(config, null, 2));
+    fs89.mkdirSync(path98.dirname(file), { recursive: true });
+    fs89.writeFileSync(file, JSON.stringify(config, null, 2));
     log.info(
       "claude",
       `pre-completed Claude onboarding${cwd ? ` + trusted workspace ${cwd}` : ""}`
@@ -46846,8 +46870,8 @@ async function start(requestedAgent, presetSession) {
   const releaseStartupMark = markAgentStarting();
   process.once("exit", releaseStartupMark);
   let settleOwnHandshake = () => void 0;
-  const ownHandshakeSettled = new Promise((resolve14) => {
-    settleOwnHandshake = resolve14;
+  const ownHandshakeSettled = new Promise((resolve13) => {
+    settleOwnHandshake = resolve13;
   });
   const releaseBeads = () => {
     releaseStartupMark();
@@ -46857,7 +46881,7 @@ async function start(requestedAgent, presetSession) {
     ownHandshakeSettled.then(
       () => waitForNoAgentStarting({ timeoutMs: BEADS_AFTER_HANDSHAKE_CAP_MS })
     ),
-    new Promise((resolve14) => setTimeout(resolve14, BEADS_AFTER_HANDSHAKE_CAP_MS).unref())
+    new Promise((resolve13) => setTimeout(resolve13, BEADS_AFTER_HANDSHAKE_CAP_MS).unref())
   ]);
   const beadsReady = provisionBeadsForStart({
     sessionId: session.id,
@@ -46929,8 +46953,8 @@ async function start(requestedAgent, presetSession) {
     let gateTimer;
     await Promise.race([
       Promise.all([depsReady, agentBinaryReady]),
-      new Promise((resolve14) => {
-        gateTimer = setTimeout(resolve14, GATE_TIMEOUT_MS);
+      new Promise((resolve13) => {
+        gateTimer = setTimeout(resolve13, GATE_TIMEOUT_MS);
       })
     ]);
     if (gateTimer) clearTimeout(gateTimer);
@@ -47314,7 +47338,7 @@ async function pair(args2 = []) {
     waitSpin.message(waitMessage());
   }, 1e3);
   countdownInterval.unref?.();
-  await new Promise((resolve14) => {
+  await new Promise((resolve13) => {
     let stopPolling = null;
     function sigintHandler() {
       clearInterval(countdownInterval);
@@ -47365,7 +47389,7 @@ async function pair(args2 = []) {
             pluginAuthToken: info.pluginAuthToken
           });
         }
-        resolve14();
+        resolve13();
       },
       () => {
         clearInterval(countdownInterval);
@@ -47594,12 +47618,12 @@ var GitHubCodespacesProvider = class {
     }
     if (!isAuthed) {
       resetStdinForChild();
-      await new Promise((resolve14, reject) => {
+      await new Promise((resolve13, reject) => {
         const proc = (0, import_child_process30.spawn)("gh", ["auth", "login", "-s", "codespace,repo,read:user"], {
           stdio: "inherit"
         });
         proc.on("exit", (code) => {
-          if (code === 0) resolve14();
+          if (code === 0) resolve13();
           else reject(new Error("gh auth login failed."));
         });
         proc.on("error", reject);
@@ -47628,13 +47652,13 @@ var GitHubCodespacesProvider = class {
       }
       wt(noteLines.join("\n"), "One more permission needed");
       resetStdinForChild();
-      const refreshCode = await new Promise((resolve14, reject) => {
+      const refreshCode = await new Promise((resolve13, reject) => {
         const proc = (0, import_child_process30.spawn)(
           "gh",
           ["auth", "refresh", "-h", "github.com", "-s", "codespace"],
           { stdio: "inherit" }
         );
-        proc.on("exit", (code) => resolve14(code ?? 1));
+        proc.on("exit", (code) => resolve13(code ?? 1));
         proc.on("error", reject);
       });
       if (refreshCode !== 0) {
@@ -47778,10 +47802,10 @@ var GitHubCodespacesProvider = class {
     if (q(proceed) || !proceed) return;
     O2.step(`Installing gh via ${installCmd.describe}\u2026`);
     resetStdinForChild();
-    const ok = await new Promise((resolve14) => {
+    const ok = await new Promise((resolve13) => {
       const proc = (0, import_child_process30.spawn)(installCmd.exe, installCmd.args, { stdio: "inherit" });
-      proc.on("exit", (code) => resolve14(code === 0));
-      proc.on("error", () => resolve14(false));
+      proc.on("exit", (code) => resolve13(code === 0));
+      proc.on("error", () => resolve13(false));
     });
     if (ok) O2.success("gh installed");
     else O2.error("gh install failed");
@@ -47805,14 +47829,14 @@ var GitHubCodespacesProvider = class {
       "Expanding GitHub scopes"
     );
     resetStdinForChild();
-    await new Promise((resolve14, reject) => {
+    await new Promise((resolve13, reject) => {
       const proc = (0, import_child_process30.spawn)(
         "gh",
         ["auth", "refresh", "-h", "github.com", "-s", "repo,read:org"],
         { stdio: "inherit" }
       );
       proc.on("exit", (code) => {
-        if (code === 0) resolve14();
+        if (code === 0) resolve13();
         else reject(new Error(
           "gh auth refresh failed. Re-run `gh auth refresh -h github.com -s repo,read:org` manually."
         ));
@@ -47983,13 +48007,13 @@ var GitHubCodespacesProvider = class {
   }
   async streamCommand(workspaceId, command2) {
     resetStdinForChild();
-    return new Promise((resolve14, reject) => {
+    return new Promise((resolve13, reject) => {
       const proc = (0, import_child_process30.spawn)(
         "gh",
         ["codespace", "ssh", "-c", workspaceId, "--", "-tt", command2],
         { stdio: "inherit" }
       );
-      proc.on("exit", (code) => resolve14({ code: code ?? 0 }));
+      proc.on("exit", (code) => resolve13({ code: code ?? 0 }));
       proc.on("error", reject);
     });
   }
@@ -48010,7 +48034,7 @@ var GitHubCodespacesProvider = class {
       "--",
       `mkdir -p ${shellQuote(remoteDir)} && tar -xzf - -C ${shellQuote(remoteDir)}`
     ];
-    await new Promise((resolve14, reject) => {
+    await new Promise((resolve13, reject) => {
       const tar = (0, import_child_process30.spawn)("tar", tarArgs, {
         stdio: ["ignore", "pipe", "pipe"],
         env: tarEnv
@@ -48030,7 +48054,7 @@ var GitHubCodespacesProvider = class {
       ssh.on("error", reject);
       ssh.on("exit", (code) => {
         if (code === 0) {
-          resolve14();
+          resolve13();
         } else {
           const reason = (sshErr || tarErr || `exit ${code}`).trim().slice(0, 500);
           reject(new Error(`Remote tar failed: ${reason}`));
@@ -48048,7 +48072,7 @@ var GitHubCodespacesProvider = class {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote(remotePath)}`);
     }
     const cmd = parts.join(" && ");
-    await new Promise((resolve14, reject) => {
+    await new Promise((resolve13, reject) => {
       const proc = (0, import_child_process30.spawn)(
         "gh",
         ["codespace", "ssh", "-c", workspaceId, "--", cmd],
@@ -48060,7 +48084,7 @@ var GitHubCodespacesProvider = class {
       });
       proc.on("error", reject);
       proc.on("exit", (code) => {
-        if (code === 0) resolve14();
+        if (code === 0) resolve13();
         else reject(new Error(`Remote write failed: ${(stderr || `exit ${code}`).trim().slice(0, 500)}`));
       });
       proc.stdin?.write(contents);
@@ -48150,10 +48174,10 @@ var GitpodProvider = class {
       "Authenticating Gitpod"
     );
     resetStdinForChild2();
-    await new Promise((resolve14, reject) => {
+    await new Promise((resolve13, reject) => {
       const proc = (0, import_child_process31.spawn)("gitpod", ["login"], { stdio: "inherit" });
       proc.on("exit", (code) => {
-        if (code === 0) resolve14();
+        if (code === 0) resolve13();
         else reject(new Error("gitpod login failed."));
       });
       proc.on("error", reject);
@@ -48302,13 +48326,13 @@ var GitpodProvider = class {
   }
   async streamCommand(workspaceId, command2) {
     resetStdinForChild2();
-    return new Promise((resolve14, reject) => {
+    return new Promise((resolve13, reject) => {
       const proc = (0, import_child_process31.spawn)(
         "gitpod",
         ["workspace", "ssh", workspaceId, "--", "-tt", command2],
         { stdio: "inherit" }
       );
-      proc.on("exit", (code) => resolve14({ code: code ?? 0 }));
+      proc.on("exit", (code) => resolve13({ code: code ?? 0 }));
       proc.on("error", reject);
     });
   }
@@ -48322,7 +48346,7 @@ var GitpodProvider = class {
     tarArgs.push(".");
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote2(remoteDir)} && tar -xzf - -C ${shellQuote2(remoteDir)}`;
-    await new Promise((resolve14, reject) => {
+    await new Promise((resolve13, reject) => {
       const tar = (0, import_child_process31.spawn)("tar", tarArgs, {
         stdio: ["ignore", "pipe", "pipe"],
         env: tarEnv
@@ -48343,7 +48367,7 @@ var GitpodProvider = class {
       tar.on("error", reject);
       ssh.on("error", reject);
       ssh.on("exit", (code) => {
-        if (code === 0) resolve14();
+        if (code === 0) resolve13();
         else reject(new Error(`Remote tar failed: ${(sshErr || tarErr || `exit ${code}`).trim().slice(0, 500)}`));
       });
     });
@@ -48358,7 +48382,7 @@ var GitpodProvider = class {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote2(remotePath)}`);
     }
     const cmd = parts.join(" && ");
-    await new Promise((resolve14, reject) => {
+    await new Promise((resolve13, reject) => {
       const proc = (0, import_child_process31.spawn)(
         "gitpod",
         ["workspace", "ssh", workspaceId, "--", cmd],
@@ -48370,7 +48394,7 @@ var GitpodProvider = class {
       });
       proc.on("error", reject);
       proc.on("exit", (code) => {
-        if (code === 0) resolve14();
+        if (code === 0) resolve13();
         else reject(new Error(`Remote write failed: ${(stderr || `exit ${code}`).trim().slice(0, 500)}`));
       });
       proc.stdin?.write(contents);
@@ -48427,14 +48451,14 @@ var GitLabWorkspacesProvider = class {
       "Authenticating GitLab"
     );
     resetStdinForChild3();
-    await new Promise((resolve14, reject) => {
+    await new Promise((resolve13, reject) => {
       const proc = (0, import_child_process32.spawn)(
         "glab",
         ["auth", "login", "--scopes", "api,read_user,read_repository"],
         { stdio: "inherit" }
       );
       proc.on("exit", (code) => {
-        if (code === 0) resolve14();
+        if (code === 0) resolve13();
         else reject(new Error("glab auth login failed."));
       });
       proc.on("error", reject);
@@ -48599,13 +48623,13 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
   async streamCommand(workspaceId, command2) {
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
     resetStdinForChild3();
-    return new Promise((resolve14, reject) => {
+    return new Promise((resolve13, reject) => {
       const proc = (0, import_child_process32.spawn)(
         "ssh",
         ["-tt", "-o", "StrictHostKeyChecking=accept-new", `${workspaceId}@${sshHost}`, command2],
         { stdio: "inherit" }
       );
-      proc.on("exit", (code) => resolve14({ code: code ?? 0 }));
+      proc.on("exit", (code) => resolve13({ code: code ?? 0 }));
       proc.on("error", reject);
     });
   }
@@ -48620,7 +48644,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
     tarArgs.push(".");
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote3(remoteDir)} && tar -xzf - -C ${shellQuote3(remoteDir)}`;
-    await new Promise((resolve14, reject) => {
+    await new Promise((resolve13, reject) => {
       const tar = (0, import_child_process32.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
       const ssh = (0, import_child_process32.spawn)(
         "ssh",
@@ -48638,7 +48662,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
       tar.on("error", reject);
       ssh.on("error", reject);
       ssh.on("exit", (code) => {
-        if (code === 0) resolve14();
+        if (code === 0) resolve13();
         else reject(new Error(`Remote tar failed: ${(sshErr || tarErr || `exit ${code}`).trim().slice(0, 500)}`));
       });
     });
@@ -48651,7 +48675,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote3(remotePath)}`);
     }
     const cmd = parts.join(" && ");
-    await new Promise((resolve14, reject) => {
+    await new Promise((resolve13, reject) => {
       const proc = (0, import_child_process32.spawn)(
         "ssh",
         ["-o", "StrictHostKeyChecking=accept-new", `${workspaceId}@${sshHost}`, cmd],
@@ -48663,7 +48687,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
       });
       proc.on("error", reject);
       proc.on("exit", (code) => {
-        if (code === 0) resolve14();
+        if (code === 0) resolve13();
         else reject(new Error(`Remote write failed: ${(stderr || `exit ${code}`).trim().slice(0, 500)}`));
       });
       proc.stdin?.write(contents);
@@ -48754,10 +48778,10 @@ var RailwayProvider = class {
       "Authenticating Railway"
     );
     resetStdinForChild4();
-    await new Promise((resolve14, reject) => {
+    await new Promise((resolve13, reject) => {
       const proc = (0, import_child_process33.spawn)("railway", ["login"], { stdio: "inherit" });
       proc.on("exit", (code) => {
-        if (code === 0) resolve14();
+        if (code === 0) resolve13();
         else reject(new Error("railway login failed."));
       });
       proc.on("error", reject);
@@ -48897,13 +48921,13 @@ var RailwayProvider = class {
       throw new Error("Invalid Railway workspace id (expected projectId/serviceId).");
     }
     resetStdinForChild4();
-    return new Promise((resolve14, reject) => {
+    return new Promise((resolve13, reject) => {
       const proc = (0, import_child_process33.spawn)(
         "railway",
         ["shell", "--project", projectId, "--service", serviceId, "--command", command2],
         { stdio: "inherit" }
       );
-      proc.on("exit", (code) => resolve14({ code: code ?? 0 }));
+      proc.on("exit", (code) => resolve13({ code: code ?? 0 }));
       proc.on("error", reject);
     });
   }
@@ -48921,7 +48945,7 @@ var RailwayProvider = class {
     tarArgs.push(".");
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote4(remoteDir)} && tar -xzf - -C ${shellQuote4(remoteDir)}`;
-    await new Promise((resolve14, reject) => {
+    await new Promise((resolve13, reject) => {
       const tar = (0, import_child_process33.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
       const sh = (0, import_child_process33.spawn)(
         "railway",
@@ -48939,7 +48963,7 @@ var RailwayProvider = class {
       tar.on("error", reject);
       sh.on("error", reject);
       sh.on("exit", (code) => {
-        if (code === 0) resolve14();
+        if (code === 0) resolve13();
         else reject(new Error(`Remote tar failed: ${(shErr || tarErr || `exit ${code}`).trim().slice(0, 500)}`));
       });
     });
@@ -48955,7 +48979,7 @@ var RailwayProvider = class {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote4(remotePath)}`);
     }
     const cmd = parts.join(" && ");
-    await new Promise((resolve14, reject) => {
+    await new Promise((resolve13, reject) => {
       const proc = (0, import_child_process33.spawn)(
         "railway",
         ["shell", "--project", projectId, "--service", serviceId, "--command", cmd],
@@ -48967,7 +48991,7 @@ var RailwayProvider = class {
       });
       proc.on("error", reject);
       proc.on("exit", (code) => {
-        if (code === 0) resolve14();
+        if (code === 0) resolve13();
         else reject(new Error(`Remote write failed: ${(stderr || `exit ${code}`).trim().slice(0, 500)}`));
       });
       proc.stdin?.write(contents);
@@ -49489,7 +49513,7 @@ async function stopWorkspaceFromLocal(target) {
 }
 
 // src/commands/host/host-client.ts
-var fs89 = __toESM(require("fs"));
+var fs90 = __toESM(require("fs"));
 var os65 = __toESM(require("os"));
 var path103 = __toESM(require("path"));
 var import_node_crypto16 = require("crypto");
@@ -49552,7 +49576,7 @@ function collectOsInfo() {
 }
 function loadHostIdentity() {
   try {
-    const raw = fs89.readFileSync(hostIdentityPath(), "utf8");
+    const raw = fs90.readFileSync(hostIdentityPath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null && typeof parsed.hostId === "string" && typeof parsed.hostToken === "string" && typeof parsed.controlPluginId === "string") {
       const p2 = parsed;
@@ -49580,8 +49604,8 @@ function ensureControlPollSecret(identity, save = saveHostIdentity) {
 }
 function saveHostIdentity(identity) {
   const file = hostIdentityPath();
-  fs89.mkdirSync(path103.dirname(file), { recursive: true, mode: 448 });
-  fs89.writeFileSync(file, JSON.stringify(identity, null, 2), {
+  fs90.mkdirSync(path103.dirname(file), { recursive: true, mode: 448 });
+  fs90.writeFileSync(file, JSON.stringify(identity, null, 2), {
     encoding: "utf8",
     mode: 384
   });
@@ -49626,7 +49650,7 @@ function isTerminalEnrollError(err) {
 }
 function deleteHostIdentity() {
   try {
-    fs89.rmSync(hostIdentityPath(), { force: true });
+    fs90.rmSync(hostIdentityPath(), { force: true });
   } catch {
   }
 }
@@ -49844,7 +49868,7 @@ async function host(args2) {
 // src/commands/host-agent.ts
 var import_node_child_process36 = require("child_process");
 var os71 = __toESM(require("os"));
-var fs96 = __toESM(require("fs"));
+var fs97 = __toESM(require("fs"));
 var path110 = __toESM(require("path"));
 
 // src/skills/persist-from-payload.ts
@@ -49854,7 +49878,7 @@ function persistOrClearSkillsFromPayload(skills) {
 }
 
 // src/commands/host/session-state.ts
-var fs90 = __toESM(require("fs"));
+var fs91 = __toESM(require("fs"));
 var os66 = __toESM(require("os"));
 var path104 = __toESM(require("path"));
 function hostSessionStatePath(env = process.env) {
@@ -49871,7 +49895,7 @@ function fileSessionChildStore(file = hostSessionStatePath()) {
   return {
     load() {
       try {
-        const raw = JSON.parse(fs90.readFileSync(file, "utf8"));
+        const raw = JSON.parse(fs91.readFileSync(file, "utf8"));
         return Array.isArray(raw?.sessions) ? raw.sessions.filter(isRecord5) : null;
       } catch {
         return null;
@@ -49879,18 +49903,18 @@ function fileSessionChildStore(file = hostSessionStatePath()) {
     },
     save(list) {
       try {
-        fs90.mkdirSync(path104.dirname(file), { recursive: true, mode: 448 });
+        fs91.mkdirSync(path104.dirname(file), { recursive: true, mode: 448 });
         const tmp = `${file}.${process.pid}.tmp`;
-        fs90.writeFileSync(tmp, JSON.stringify({ version: 1, sessions: list }, null, 2), {
+        fs91.writeFileSync(tmp, JSON.stringify({ version: 1, sessions: list }, null, 2), {
           mode: 384
         });
-        fs90.renameSync(tmp, file);
+        fs91.renameSync(tmp, file);
       } catch {
       }
     },
     clear() {
       try {
-        fs90.rmSync(file, { force: true });
+        fs91.rmSync(file, { force: true });
       } catch {
       }
     }
@@ -49928,7 +49952,7 @@ function pickSavedSessionForWorkspace(sessions3, cwd, deployId) {
 
 // src/commands/host/git-tooling.ts
 var import_node_child_process31 = require("child_process");
-var fs91 = __toESM(require("fs"));
+var fs92 = __toESM(require("fs"));
 var os67 = __toESM(require("os"));
 var path105 = __toESM(require("path"));
 function codeamBinDir() {
@@ -49964,7 +49988,7 @@ async function download(url2, dest) {
     const res = await fetch(url2, { headers: { "User-Agent": "codeam-cli" } });
     if (!res.ok || !res.body) return false;
     const buf = Buffer.from(await res.arrayBuffer());
-    fs91.writeFileSync(dest, buf);
+    fs92.writeFileSync(dest, buf);
     return true;
   } catch {
     return false;
@@ -49987,7 +50011,7 @@ async function ensureGhCli(runner, token, deps = {}) {
     const version3 = await resolveVersionFn(token);
     const asset = `gh_${version3}_${osToken}_${arch2}`;
     const url2 = `https://github.com/cli/cli/releases/download/v${version3}/${asset}.${ext}`;
-    const tmpRoot = fs91.mkdtempSync(path105.join(os67.tmpdir(), "codeam-gh-"));
+    const tmpRoot = fs92.mkdtempSync(path105.join(os67.tmpdir(), "codeam-gh-"));
     const archive = path105.join(tmpRoot, `${asset}.${ext}`);
     if (!await downloadFn(url2, archive)) {
       log.warn("host-agent", "gh download failed \u2014 skipping (git pull/push still work via the credential helper)");
@@ -49999,15 +50023,15 @@ async function ensureGhCli(runner, token, deps = {}) {
       return null;
     }
     const extractedBin = path105.join(tmpRoot, asset, "bin", binaryName);
-    if (!fs91.existsSync(extractedBin)) {
+    if (!fs92.existsSync(extractedBin)) {
       log.warn("host-agent", "gh binary not found in the extracted archive \u2014 skipping");
       return null;
     }
     const binDir = codeamBinDir();
-    fs91.mkdirSync(binDir, { recursive: true });
+    fs92.mkdirSync(binDir, { recursive: true });
     const target = path105.join(binDir, binaryName);
-    fs91.copyFileSync(extractedBin, target);
-    fs91.chmodSync(target, 493);
+    fs92.copyFileSync(extractedBin, target);
+    fs92.chmodSync(target, 493);
     log.info("host-agent", `gh installed to ${target} (v${version3})`);
     return target;
   } catch (e) {
@@ -50054,9 +50078,9 @@ function writeGhHostsToken(token) {
   try {
     const dir = ghConfigDir();
     const file = path105.join(dir, "hosts.yml");
-    if (fs91.existsSync(file)) return false;
-    fs91.mkdirSync(dir, { recursive: true, mode: 448 });
-    fs91.writeFileSync(
+    if (fs92.existsSync(file)) return false;
+    fs92.mkdirSync(dir, { recursive: true, mode: 448 });
+    fs92.writeFileSync(
       file,
       `github.com:
     oauth_token: ${token}
@@ -50099,7 +50123,7 @@ async function ensureGlabCli(runner, deps = {}) {
     const version3 = await resolveLatestGlabVersion();
     const asset = `glab_${version3}_${osToken}_${arch2}`;
     const url2 = `https://gitlab.com/gitlab-org/cli/-/releases/v${version3}/downloads/${asset}.${ext}`;
-    const tmpRoot = fs91.mkdtempSync(path105.join(os67.tmpdir(), "codeam-glab-"));
+    const tmpRoot = fs92.mkdtempSync(path105.join(os67.tmpdir(), "codeam-glab-"));
     const archive = path105.join(tmpRoot, `${asset}.${ext}`);
     if (!await downloadFn(url2, archive)) {
       log.warn("host-agent", "glab download failed \u2014 skipping (git push/pull still work)");
@@ -50115,16 +50139,16 @@ async function ensureGlabCli(runner, deps = {}) {
       path105.join(tmpRoot, asset, "bin", binaryName),
       path105.join(tmpRoot, binaryName)
     ];
-    const extractedBin = candidates.find((c2) => fs91.existsSync(c2));
+    const extractedBin = candidates.find((c2) => fs92.existsSync(c2));
     if (!extractedBin) {
       log.warn("host-agent", "glab binary not found in the extracted archive \u2014 skipping");
       return null;
     }
     const binDir = codeamBinDir();
-    fs91.mkdirSync(binDir, { recursive: true });
+    fs92.mkdirSync(binDir, { recursive: true });
     const target = path105.join(binDir, binaryName);
-    fs91.copyFileSync(extractedBin, target);
-    fs91.chmodSync(target, 493);
+    fs92.copyFileSync(extractedBin, target);
+    fs92.chmodSync(target, 493);
     log.info("host-agent", `glab installed to ${target} (v${version3})`);
     return target;
   } catch (e) {
@@ -50166,7 +50190,7 @@ var defaultGitToolingRunner = {
     }
   },
   run(cmd, args2, opts = {}) {
-    return new Promise((resolve14) => {
+    return new Promise((resolve13) => {
       const child = (0, import_node_child_process31.spawn)(cmd, args2, {
         stdio: [opts.input !== void 0 ? "pipe" : "ignore", "ignore", "pipe"]
       });
@@ -50175,7 +50199,7 @@ var defaultGitToolingRunner = {
       const done = (code) => {
         if (settled) return;
         settled = true;
-        resolve14({ code, stderr });
+        resolve13({ code, stderr });
       };
       child.stderr?.on("data", (b) => {
         stderr += b.toString();
@@ -50203,12 +50227,12 @@ var defaultGitToolingRunner = {
 };
 
 // src/lib/cli-versions.ts
-var fs93 = __toESM(require("fs"));
+var fs94 = __toESM(require("fs"));
 var os69 = __toESM(require("os"));
 var path107 = __toESM(require("path"));
 
 // src/lib/updateNotifier.ts
-var fs92 = __toESM(require("fs"));
+var fs93 = __toESM(require("fs"));
 var os68 = __toESM(require("os"));
 var path106 = __toESM(require("path"));
 var https8 = __toESM(require("https"));
@@ -50224,7 +50248,7 @@ function cachePath() {
 }
 function readCache() {
   try {
-    const raw = fs92.readFileSync(cachePath(), "utf8");
+    const raw = fs93.readFileSync(cachePath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.fetchedAt !== "number" || typeof parsed.latest !== "string") return null;
     return parsed;
@@ -50235,10 +50259,10 @@ function readCache() {
 function writeCache(cache) {
   try {
     const file = cachePath();
-    fs92.mkdirSync(path106.dirname(file), { recursive: true });
+    fs93.mkdirSync(path106.dirname(file), { recursive: true });
     const tmp = `${file}.${process.pid}.tmp`;
-    fs92.writeFileSync(tmp, JSON.stringify(cache));
-    fs92.renameSync(tmp, file);
+    fs93.writeFileSync(tmp, JSON.stringify(cache));
+    fs93.renameSync(tmp, file);
   } catch {
   }
 }
@@ -50256,14 +50280,14 @@ function compareSemver(a, b) {
   return 0;
 }
 function fetchLatest() {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     const req = https8.get(
       REGISTRY_URL,
       { headers: { Accept: "application/json" }, timeout: REQUEST_TIMEOUT_MS },
       (res) => {
         if (res.statusCode !== 200) {
           res.resume();
-          resolve14(null);
+          resolve13(null);
           return;
         }
         let buf = "";
@@ -50275,21 +50299,21 @@ function fetchLatest() {
           try {
             const json = JSON.parse(buf);
             if (typeof json.version === "string") {
-              resolve14(json.version);
+              resolve13(json.version);
             } else {
-              resolve14(null);
+              resolve13(null);
             }
           } catch {
-            resolve14(null);
+            resolve13(null);
           }
         });
       }
     );
     req.on("timeout", () => {
       req.destroy();
-      resolve14(null);
+      resolve13(null);
     });
-    req.on("error", () => resolve14(null));
+    req.on("error", () => resolve13(null));
   });
 }
 function notifyIfStale(currentVersion, latest) {
@@ -50313,7 +50337,7 @@ function isLinkedInstall() {
     }).trim();
     if (!root) return false;
     const pkgPath = path106.join(root, PKG_NAME);
-    return fs92.lstatSync(pkgPath).isSymbolicLink();
+    return fs93.lstatSync(pkgPath).isSymbolicLink();
   } catch {
     return false;
   }
@@ -50349,7 +50373,7 @@ function maybeAutoUpdate(currentVersion, latest) {
     return;
   }
   try {
-    fs92.unlinkSync(cachePath());
+    fs93.unlinkSync(cachePath());
   } catch {
   }
   process.stderr.write(`  ${import_picocolors12.default.green("\u2713")} Updated. Resuming session...
@@ -50365,7 +50389,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.76.13" : null;
+  const current2 = true ? "2.76.15" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -50382,7 +50406,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.76.13" : null;
+  const current2 = true ? "2.76.15" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -50416,7 +50440,7 @@ function isRecord6(v) {
 function readPkg2(versionDir) {
   try {
     const raw = JSON.parse(
-      fs93.readFileSync(path107.join(packageDirOf(versionDir), "package.json"), "utf8")
+      fs94.readFileSync(path107.join(packageDirOf(versionDir), "package.json"), "utf8")
     );
     return isRecord6(raw) ? raw : null;
   } catch {
@@ -50430,14 +50454,14 @@ function entryOf(versionDir) {
   const named = isRecord6(bin) ? bin.codeam : void 0;
   const rel = typeof bin === "string" ? bin : typeof named === "string" ? named : "dist/index.js";
   const entry = path107.join(packageDirOf(versionDir), rel);
-  return fs93.existsSync(entry) ? entry : null;
+  return fs94.existsSync(entry) ? entry : null;
 }
 function launcherOf(versionDir) {
   const entry = entryOf(versionDir);
   if (!entry) return null;
   const bin = path107.join(versionDir, "node_modules", ".bin", "codeam");
   try {
-    return fs93.realpathSync(bin) === fs93.realpathSync(entry) ? bin : entry;
+    return fs94.realpathSync(bin) === fs94.realpathSync(entry) ? bin : entry;
   } catch {
     return entry;
   }
@@ -50450,7 +50474,7 @@ var BAD_MARKER_TTL_MS = 24 * 60 * 6e4;
 var PRE_READY_WINDOW_MS = 60 * 6e4;
 function isBad(versionDir, now = Date.now()) {
   try {
-    return now - fs93.statSync(path107.join(versionDir, ".bad")).mtimeMs < BAD_MARKER_TTL_MS;
+    return now - fs94.statSync(path107.join(versionDir, ".bad")).mtimeMs < BAD_MARKER_TTL_MS;
   } catch {
     return false;
   }
@@ -50459,7 +50483,7 @@ function recordPreReadyFailure(versionDir, now = Date.now()) {
   const file = path107.join(versionDir, ".prefail");
   let count = 0;
   try {
-    const [n, at3] = fs93.readFileSync(file, "utf8").trim().split(" ").map(Number);
+    const [n, at3] = fs94.readFileSync(file, "utf8").trim().split(" ").map(Number);
     if (Number.isFinite(n) && Number.isFinite(at3) && now - at3 < PRE_READY_WINDOW_MS) {
       count = n;
     }
@@ -50467,41 +50491,52 @@ function recordPreReadyFailure(versionDir, now = Date.now()) {
   }
   count += 1;
   try {
-    fs93.writeFileSync(file, `${count} ${now}`);
+    fs94.writeFileSync(file, `${count} ${now}`);
   } catch {
   }
   return count;
 }
 function clearPreReadyFailures(versionDir) {
-  fs93.rmSync(path107.join(versionDir, ".prefail"), { force: true });
+  fs94.rmSync(path107.join(versionDir, ".prefail"), { force: true });
 }
 function markBad(versionDir, reason) {
   try {
-    fs93.writeFileSync(path107.join(versionDir, ".bad"), `${(/* @__PURE__ */ new Date()).toISOString()} ${reason}
+    fs94.writeFileSync(path107.join(versionDir, ".bad"), `${(/* @__PURE__ */ new Date()).toISOString()} ${reason}
 `);
   } catch {
   }
 }
 function pointerTarget(root, name) {
   try {
-    return fs93.realpathSync(path107.join(root, name));
+    return fs94.realpathSync(path107.join(root, name));
   } catch {
     return null;
   }
 }
 function atomicPoint(root, name, targetDir) {
-  const tmp = path107.join(root, `.${name}.tmp-${process.pid}-${Date.now()}`);
-  fs93.symlinkSync(path107.relative(root, targetDir), tmp, "dir");
+  const realRoot = fs94.realpathSync(root);
+  const tmp = path107.join(realRoot, `.${name}.tmp-${process.pid}-${Date.now()}`);
+  fs94.symlinkSync(path107.relative(realRoot, fs94.realpathSync(targetDir)), tmp, "dir");
   try {
-    fs93.renameSync(tmp, path107.join(root, name));
+    fs94.renameSync(tmp, path107.join(realRoot, name));
   } catch (err) {
-    fs93.rmSync(tmp, { force: true });
+    fs94.rmSync(tmp, { force: true });
     throw err;
   }
 }
+function samePath(a, b) {
+  const canon = (p2) => {
+    try {
+      return fs94.realpathSync(p2);
+    } catch {
+      return path107.resolve(p2);
+    }
+  };
+  return canon(a) === canon(b);
+}
 function switchCurrent(root, versionDir) {
   const old = pointerTarget(root, "current");
-  if (old && path107.resolve(old) !== path107.resolve(versionDir)) atomicPoint(root, "previous", old);
+  if (old && !samePath(old, versionDir)) atomicPoint(root, "previous", old);
   atomicPoint(root, "current", versionDir);
 }
 function validCurrent(root) {
@@ -50515,7 +50550,7 @@ function rollbackCurrent(root) {
   const prev = pointerTarget(root, "previous");
   if (!prev || isBad(prev) || !entryOf(prev)) return null;
   const cur = pointerTarget(root, "current");
-  if (cur && path107.resolve(cur) !== path107.resolve(prev)) atomicPoint(root, "previous", cur);
+  if (cur && !samePath(cur, prev)) atomicPoint(root, "previous", cur);
   atomicPoint(root, "current", prev);
   return versionOf(prev);
 }
@@ -50529,8 +50564,8 @@ function versionDirContaining(root, file) {
   let real;
   let realRoot;
   try {
-    real = fs93.realpathSync(file);
-    realRoot = fs93.realpathSync(root);
+    real = fs94.realpathSync(file);
+    realRoot = fs94.realpathSync(root);
   } catch {
     return null;
   }
@@ -50550,7 +50585,7 @@ function pidAlive3(pid) {
 function livePids(versionDir) {
   let names;
   try {
-    names = fs93.readdirSync(path107.join(versionDir, ".pids"));
+    names = fs94.readdirSync(path107.join(versionDir, ".pids"));
   } catch {
     return [];
   }
@@ -50561,9 +50596,9 @@ function registerRunningVersion(root = cliVersionsRoot(), entry = process.argv[1
   if (!dir) return;
   const file = path107.join(dir, ".pids", String(process.pid));
   try {
-    fs93.mkdirSync(path107.dirname(file), { recursive: true });
-    fs93.writeFileSync(file, "");
-    process.once("exit", () => fs93.rmSync(file, { force: true }));
+    fs94.mkdirSync(path107.dirname(file), { recursive: true });
+    fs94.writeFileSync(file, "");
+    process.once("exit", () => fs94.rmSync(file, { force: true }));
   } catch {
   }
 }
@@ -50571,7 +50606,7 @@ function gcVersions(root) {
   const removed = [];
   let names;
   try {
-    names = fs93.readdirSync(root).filter((n) => SEMVER_DIR.test(n));
+    names = fs94.readdirSync(root).filter((n) => SEMVER_DIR.test(n));
   } catch {
     return removed;
   }
@@ -50585,7 +50620,7 @@ function gcVersions(root) {
     const dir = path107.join(root, name);
     if (keep.has(name) || livePids(dir).length > 0) continue;
     try {
-      fs93.rmSync(dir, { recursive: true, force: true });
+      fs94.rmSync(dir, { recursive: true, force: true });
       removed.push(name);
     } catch {
     }
@@ -50596,22 +50631,22 @@ function acquireInstallLock(root) {
   const lock = path107.join(root, ".install.lock");
   for (let attempt = 0; attempt < 2; attempt++) {
     try {
-      const fd = fs93.openSync(lock, "wx");
-      fs93.writeSync(fd, String(process.pid));
-      fs93.closeSync(fd);
-      return () => fs93.rmSync(lock, { force: true });
+      const fd = fs94.openSync(lock, "wx");
+      fs94.writeSync(fd, String(process.pid));
+      fs94.closeSync(fd);
+      return () => fs94.rmSync(lock, { force: true });
     } catch (err) {
       if (err.code !== "EEXIST") return null;
       let stale = false;
       try {
-        const owner = Number(fs93.readFileSync(lock, "utf8"));
-        const age = Date.now() - fs93.statSync(lock).mtimeMs;
+        const owner = Number(fs94.readFileSync(lock, "utf8"));
+        const age = Date.now() - fs94.statSync(lock).mtimeMs;
         stale = !Number.isInteger(owner) || !pidAlive3(owner) || age > LOCK_STALE_MS;
       } catch {
         stale = true;
       }
       if (!stale) return null;
-      fs93.rmSync(lock, { force: true });
+      fs94.rmSync(lock, { force: true });
     }
   }
   return null;
@@ -50619,7 +50654,7 @@ function acquireInstallLock(root) {
 
 // src/commands/host/host-launch.ts
 var import_node_child_process34 = require("child_process");
-var fs95 = __toESM(require("fs"));
+var fs96 = __toESM(require("fs"));
 var os70 = __toESM(require("os"));
 var path109 = __toESM(require("path"));
 
@@ -50643,7 +50678,7 @@ var EXIT_CODE_NAMES = {
 
 // src/commands/host/self-update.ts
 var import_node_child_process33 = require("child_process");
-var fs94 = __toESM(require("fs"));
+var fs95 = __toESM(require("fs"));
 var path108 = __toESM(require("path"));
 var SELF_UPDATE_PKG = "codeam-cli";
 var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
@@ -50653,7 +50688,7 @@ var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
 function currentCliVersion() {
-  return true ? "2.76.13" : null;
+  return true ? "2.76.15" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -50669,10 +50704,10 @@ async function installedVersion(deps) {
   }
 }
 function runCmd(cmd, args2, timeoutMs) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     (0, import_node_child_process33.execFile)(cmd, args2, { timeout: timeoutMs }, (err, stdout, stderr) => {
       const code = err && typeof err.code === "number" ? err.code : err ? null : 0;
-      resolve14({ code, stdout: stdout ?? "", stderr: stderr ?? "" });
+      resolve13({ code, stdout: stdout ?? "", stderr: stderr ?? "" });
     });
   });
 }
@@ -50696,14 +50731,22 @@ async function runSelfUpdateWith(deps) {
     }
     const root = deps.versionsRoot ?? cliVersionsRoot();
     const versioned = versionedModeSupported(deps.platform) ? validCurrent(root) : null;
-    if (versioned && compareSemver(versioned.version, current2) > 0) {
+    const runningDir = versioned ? versionDirContaining(root, deps.runningEntry) : null;
+    const runningIsCurrent = versioned !== null && runningDir !== null && samePath(runningDir, versioned.dir);
+    if (runningIsCurrent && versioned && versioned.version !== current2) {
+      log.warn(
+        "host-agent",
+        `self-update: running ${current2} from ${versioned.dir}, whose package.json says ${versioned.version} \u2014 not restarting onto it (it is this same code)`
+      );
+    }
+    if (versioned && !runningIsCurrent && compareSemver(versioned.version, current2) > 0) {
       log.info(
         "host-agent",
         `self-update: ${versioned.version} already current in ${root} (running ${current2}) \u2014 restarting onto it`
       );
       return { status: "updated", version: versioned.version };
     }
-    const onDisk = await installedVersion(deps);
+    const onDisk = runningIsCurrent ? null : await installedVersion(deps);
     if (onDisk && compareSemver(onDisk, current2) > 0) {
       log.info(
         "host-agent",
@@ -50717,15 +50760,19 @@ async function runSelfUpdateWith(deps) {
       SELF_UPDATE_VIEW_TIMEOUT_MS
     );
     if (view.code !== 0) {
-      log.trace("host-agent", `self-update: npm view exited ${String(view.code)} \u2014 skipping`);
+      log.warn(
+        "host-agent",
+        `self-update: npm view ${SELF_UPDATE_PKG} exited ${String(view.code)} \u2014 cannot check, staying on ${current2}: ` + view.stderr.trim().slice(-300)
+      );
       return { status: "skipped" };
     }
     const latest = view.stdout.trim();
     if (!latest) {
-      log.trace("host-agent", "self-update: empty npm view output \u2014 skipping");
+      log.warn("host-agent", `self-update: npm view returned nothing \u2014 cannot check, staying on ${current2}`);
       return { status: "skipped" };
     }
     if (compareSemver(latest, current2) <= 0) {
+      log.info("host-agent", `self-update: running ${current2}, npm latest ${latest} \u2014 up to date`);
       return { status: "current" };
     }
     if (!versionedModeSupported(deps.platform)) {
@@ -50747,7 +50794,7 @@ async function installVersioned(deps, root, latest, running2) {
   const node = deps.nodePath ?? process.execPath;
   const target = path108.join(root, latest);
   try {
-    fs94.mkdirSync(root, { recursive: true });
+    fs95.mkdirSync(root, { recursive: true });
   } catch {
     return { status: "skipped" };
   }
@@ -50762,12 +50809,16 @@ async function installVersioned(deps, root, latest, running2) {
   }
   try {
     const runningDir = versionDirContaining(root, deps.runningEntry);
+    if (runningDir && samePath(runningDir, target)) {
+      log.warn(
+        "host-agent",
+        `self-update: already running from ${target} (reports ${running2}) \u2014 leaving it alone`
+      );
+      return { status: "skipped" };
+    }
     const reusable = entryOf(target) && versionOf(target) === latest;
     if (!reusable) {
-      if (runningDir && path108.resolve(runningDir) === path108.resolve(target)) {
-        return { status: "skipped" };
-      }
-      fs94.rmSync(target, { recursive: true, force: true });
+      fs95.rmSync(target, { recursive: true, force: true });
       const install = await deps.run(
         "npm",
         [
@@ -50782,7 +50833,7 @@ async function installVersioned(deps, root, latest, running2) {
         SELF_UPDATE_INSTALL_TIMEOUT_MS
       );
       if (install.code !== 0) {
-        fs94.rmSync(target, { recursive: true, force: true });
+        fs95.rmSync(target, { recursive: true, force: true });
         log.warn(
           "host-agent",
           `self-update: versioned install exited ${String(install.code)} \u2014 staying on ${running2}: ` + install.stderr.slice(-300)
@@ -50793,7 +50844,7 @@ async function installVersioned(deps, root, latest, running2) {
     const entry = entryOf(target);
     const check = entry ? await deps.run(node, [entry, "--version"], VERIFY_TIMEOUT_MS) : { code: null, stdout: "", stderr: "no entry point" };
     if (check.code !== 0 || !check.stdout.includes(latest)) {
-      fs94.rmSync(target, { recursive: true, force: true });
+      fs95.rmSync(target, { recursive: true, force: true });
       log.warn(
         "host-agent",
         `self-update: ${latest} failed verification (exit ${String(check.code)}: ${(check.stdout + check.stderr).trim().slice(-200)}) \u2014 staying on ${running2}`
@@ -50809,7 +50860,7 @@ async function installVersioned(deps, root, latest, running2) {
     return { status: "updated", version: latest };
   } catch (err) {
     const cur = pointerTarget(root, "current");
-    if (!cur || path108.basename(cur) !== latest) fs94.rmSync(target, { recursive: true, force: true });
+    if (!cur || path108.basename(cur) !== latest) fs95.rmSync(target, { recursive: true, force: true });
     log.warn(
       "host-agent",
       `self-update: versioned install failed: ${err instanceof Error ? err.message : String(err)}`
@@ -50848,7 +50899,7 @@ function signalHostReady(send = process.send?.bind(process)) {
 }
 function defaultDeps() {
   return {
-    ownVersion: true ? "2.76.13" : null,
+    ownVersion: true ? "2.76.15" : null,
     root: cliVersionsRoot(),
     args: process.argv.slice(3),
     execPath: process.execPath,
@@ -50897,9 +50948,9 @@ async function superviseCurrent(over = {}) {
     };
     if (deps.stdinIsTty) process.on("SIGINT", ignoreSigint);
     const { code, signal } = await new Promise(
-      (resolve14) => {
-        child.once("exit", (c2, s) => resolve14({ code: c2, signal: s }));
-        child.once("error", () => resolve14({ code: 1, signal: null }));
+      (resolve13) => {
+        child.once("exit", (c2, s) => resolve13({ code: c2, signal: s }));
+        child.once("error", () => resolve13({ code: 1, signal: null }));
       }
     );
     for (const [sig, h] of handlers2) process.off(sig, h);
@@ -50945,7 +50996,7 @@ function needsSelfRelaunch(env = process.env, pid = process.pid, ctx = {}) {
 }
 function readPid1Cmdline() {
   try {
-    return fs95.readFileSync("/proc/1/cmdline", "utf8").split("\0").filter(Boolean);
+    return fs96.readFileSync("/proc/1/cmdline", "utf8").split("\0").filter(Boolean);
   } catch {
     return [];
   }
@@ -50984,7 +51035,7 @@ function defaultRestartForUpdate(version3, supervised, io = {}) {
   }
   exit(0);
 }
-function isContainerEnvironment(existsSyncFn = fs95.existsSync, readFileSyncFn = (p2) => fs95.readFileSync(p2, "utf8")) {
+function isContainerEnvironment(existsSyncFn = fs96.existsSync, readFileSyncFn = (p2) => fs96.readFileSync(p2, "utf8")) {
   try {
     if (existsSyncFn("/.dockerenv")) return true;
   } catch {
@@ -51001,11 +51052,11 @@ function hostAgentPidFile(home = os70.homedir()) {
 }
 function writeHostAgentPidFile(file = hostAgentPidFile(), pid = process.pid) {
   try {
-    fs95.mkdirSync(path109.dirname(file), { recursive: true });
-    fs95.writeFileSync(file, String(pid));
+    fs96.mkdirSync(path109.dirname(file), { recursive: true });
+    fs96.writeFileSync(file, String(pid));
     process.once("exit", () => {
       try {
-        if (fs95.readFileSync(file, "utf8").trim() === String(pid)) fs95.rmSync(file, { force: true });
+        if (fs96.readFileSync(file, "utf8").trim() === String(pid)) fs96.rmSync(file, { force: true });
       } catch {
       }
     });
@@ -51166,6 +51217,12 @@ function fleetUserIdFromContainerName(containerName) {
 function isMissingContainerError(stderr) {
   return /no such container/i.test(stderr);
 }
+function fleetLaneKey(cmd) {
+  if (!cmd.type.startsWith("fleet_")) return null;
+  if (cmd.type === "fleet_prune_host") return "host";
+  const payload = cmd.payload;
+  return typeof payload?.containerName === "string" ? payload.containerName : cmd.type;
+}
 function isFleetPruneHostPayload(v) {
   if (typeof v !== "object" || v === null) return false;
   const p2 = v;
@@ -51241,7 +51298,7 @@ var DOCKER_RUN_WITH_PULL_TIMEOUT_MS = 6e5;
 var DOCKER_PRUNE_TIMEOUT_MS = 6e5;
 var defaultDockerRunner = {
   run(args2, opts = {}) {
-    return new Promise((resolve14) => {
+    return new Promise((resolve13) => {
       const child = (0, import_node_child_process36.spawn)("docker", args2, {
         stdio: ["ignore", "pipe", "pipe"],
         env: { ...process.env, ...opts.env }
@@ -51260,7 +51317,7 @@ var defaultDockerRunner = {
         if (settled) return;
         settled = true;
         clearTimeout(timer);
-        resolve14({ code, stderr: stderrBuf, stdout: stdoutBuf });
+        resolve13({ code, stderr: stderrBuf, stdout: stdoutBuf });
       };
       child.stdout?.on("data", (b) => {
         stdoutBuf += b.toString();
@@ -51438,7 +51495,7 @@ var HostAgentSupervisor = class {
     const make = this.deps.makeRelay ?? ((pluginId, onCommand, meta, pollSecret) => new CommandRelayService(pluginId, onCommand, meta, void 0, pollSecret));
     this.relay = make(
       this.identity.controlPluginId,
-      (cmd) => this.handleCommand(cmd),
+      (cmd) => this.dispatchRelayCommand(cmd),
       CONTROL_AGENT_META,
       this.identity.controlPollSecret
     );
@@ -51600,19 +51657,20 @@ var HostAgentSupervisor = class {
    */
   maybeRestartForUpdate(version3) {
     const midTurn = [...this.children.values()].some((c2) => this.isChildMidTurn(c2.proc.pid));
-    if (midTurn) {
+    const fleetBusy = this.fleetLanes.size > 0;
+    if (midTurn || fleetBusy) {
       const since = this.pendingRestartSince ?? this.now();
       const waited = this.now() - since;
       if (waited < SELF_UPDATE_DEFER_MAX_MS) {
         log.info(
           "host-agent",
-          `self-update: ${version3} installed but a session is mid-turn \u2014 deferring restart`
+          `self-update: ${version3} installed but ${fleetBusy ? `${this.fleetLanes.size} fleet op(s) are in flight` : "a session is mid-turn"} \u2014 deferring restart`
         );
         return false;
       }
       log.warn(
         "host-agent",
-        `self-update: ${version3} has been owed for ${Math.round(waited / 36e5)}h with a session still mid-turn \u2014 restarting anyway rather than staying on old code`
+        `self-update: ${version3} has been owed for ${Math.round(waited / 36e5)}h with ${fleetBusy ? "fleet ops still in flight" : "a session still mid-turn"} \u2014 restarting anyway rather than staying on old code`
       );
     }
     this.onUpdated(version3);
@@ -51644,6 +51702,58 @@ var HostAgentSupervisor = class {
    * arbitrary command surface).
    */
   async handleCommand(cmd) {
+    const lane = fleetLaneKey(cmd);
+    if (lane !== null) return this.runInFleetLane(lane, () => this.handleFleetCommand(cmd));
+    await this.handleNonFleetCommand(cmd);
+  }
+  /**
+   * The relay's entry point. A fleet command is NOT awaited here.
+   *
+   * The relay acks a batch the moment it arrives, then awaits each command of
+   * the batch in order. Awaiting a fleet op there let one slow op hold every
+   * command queued behind it: on 2026-10-02 the hourly sweep's
+   * `fleet_migrate_box_image` commands were each pulling the freshly released
+   * 7.7 GB image (up to 10 min apiece), a new user's scratch `fleet_create_box`
+   * sat behind three of them in the same batch (received 18:04:07, never
+   * started), the 18:06 self-update restart dropped it, and since it was already
+   * acked nothing ever redelivered it — the box failed at the 18:30
+   * provisioning sweep. Per-container lanes keep each box's ops in order; ops on
+   * different boxes no longer wait for each other.
+   */
+  dispatchRelayCommand(cmd) {
+    const work = this.handleCommand(cmd);
+    if (fleetLaneKey(cmd) === null) return work;
+    void work;
+    return Promise.resolve();
+  }
+  /** Fleet ops queued or running, keyed by container (or the host for a prune). */
+  fleetLanes = /* @__PURE__ */ new Map();
+  /** Number of fleet lanes with work queued or running — for tests + the restart gate. */
+  fleetOpsInFlight() {
+    return this.fleetLanes.size;
+  }
+  /**
+   * Run `op` after every earlier op on the same lane. Never rejects: a failed op
+   * is logged and the lane moves on. When the last lane drains and a self-update
+   * restart is owed, take it now instead of waiting for the next hourly tick.
+   */
+  runInFleetLane(key, op) {
+    const prev = this.fleetLanes.get(key) ?? Promise.resolve();
+    const next = prev.then(op).catch((err) => {
+      log.warn(
+        "host-agent",
+        `fleet op on ${key} failed: ${err instanceof Error ? err.message : String(err)}`
+      );
+    });
+    this.fleetLanes.set(key, next);
+    return next.then(() => {
+      if (this.fleetLanes.get(key) === next) this.fleetLanes.delete(key);
+      if (this.fleetLanes.size === 0 && this.pendingRestartVersion !== null) {
+        this.maybeRestartForUpdate(this.pendingRestartVersion);
+      }
+    });
+  }
+  async handleFleetCommand(cmd) {
     if (cmd.type === "fleet_create_box") {
       if (!isFleetCreateBoxPayload(cmd.payload)) {
         log.warn("host-agent", `ignoring malformed fleet_create_box id=${cmd.id}`);
@@ -51692,6 +51802,8 @@ var HostAgentSupervisor = class {
       await this.fleetPruneHost(cmd.payload);
       return;
     }
+  }
+  async handleNonFleetCommand(cmd) {
     if (cmd.type === "self_hosted_deploy") {
       if (!isDeployPayload(cmd.payload)) {
         log.warn("host-agent", `ignoring malformed self_hosted_deploy id=${cmd.id}`);
@@ -51765,7 +51877,7 @@ var HostAgentSupervisor = class {
     const raw = cmd.payload?.path;
     const target = typeof raw === "string" && raw.trim() ? path110.resolve(raw.trim()) : os71.homedir();
     try {
-      const dirents = await fs96.promises.readdir(target, { withFileTypes: true });
+      const dirents = await fs97.promises.readdir(target, { withFileTypes: true });
       const entries2 = dirents.filter((d3) => !d3.name.startsWith(".")).map((d3) => ({ name: d3.name, isDir: d3.isDirectory() })).sort(
         (a, b) => a.isDir === b.isDir ? a.name.localeCompare(b.name) : a.isDir ? -1 : 1
       );
@@ -52247,7 +52359,7 @@ var HostAgentSupervisor = class {
           payload.deployId
         );
         try {
-          fs96.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
+          fs97.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
         } catch {
         }
         childEnv.CLAUDE_CONFIG_DIR = houseConfigDir;
@@ -52318,7 +52430,7 @@ var HostAgentSupervisor = class {
         try {
           const cfgDir = childEnv.CLAUDE_CONFIG_DIR || path110.join(os71.homedir(), ".claude");
           const projectDir = path110.join(cfgDir, "projects", encodeCwd(cwd));
-          const hasPriorConversation = fs96.existsSync(projectDir) && fs96.readdirSync(projectDir).some((f) => f.endsWith(".jsonl"));
+          const hasPriorConversation = fs97.existsSync(projectDir) && fs97.readdirSync(projectDir).some((f) => f.endsWith(".jsonl"));
           if (hasPriorConversation) {
             childEnv.CODEAM_RESUME_LATEST = "1";
             log.info(
@@ -52472,7 +52584,7 @@ var HostAgentSupervisor = class {
   fallbackResumeTarget() {
     const session = getActiveSession();
     if (!session || !session.pluginId || !session.pollSecret || !session.agent) return null;
-    const cwd = session.cwd && fs96.existsSync(session.cwd) ? session.cwd : process.cwd();
+    const cwd = session.cwd && fs97.existsSync(session.cwd) ? session.cwd : process.cwd();
     if (isFilesystemRoot(cwd)) {
       log.warn(
         "host-agent",
@@ -52512,7 +52624,7 @@ var HostAgentSupervisor = class {
       log.warn("host-agent", `self_hosted_resume ${sessionId.slice(0, 8)}: no saved pairing on this box`);
       return;
     }
-    if (!session.cwd || !fs96.existsSync(session.cwd)) {
+    if (!session.cwd || !fs97.existsSync(session.cwd)) {
       log.warn("host-agent", `self_hosted_resume ${sessionId.slice(0, 8)}: workspace is gone`);
       return;
     }
@@ -52554,7 +52666,7 @@ var HostAgentSupervisor = class {
       const persisted = new Map((this.sessionStore.load() ?? []).map((r) => [r.deployId, r.agent]));
       for (const c2 of this.children.values()) persisted.set(c2.deployId, c2.agent);
       return this.listSavedSessions().map((s) => ({ s, deployId: deployIdFromWorkspace(s.cwd) })).filter(
-        (x) => x.deployId !== null && !!x.s.cwd && fs96.existsSync(x.s.cwd)
+        (x) => x.deployId !== null && !!x.s.cwd && fs97.existsSync(x.s.cwd)
       ).map(({ s, deployId }) => {
         const agent = persisted.get(deployId);
         return { deployId, sessionId: s.id, ...agent ? { agent } : {} };
@@ -52606,7 +52718,7 @@ var HostAgentSupervisor = class {
     if (this.children.has(deployId)) return;
     const st3 = this.resumeStateFor(target);
     try {
-      const cwd = fs96.existsSync(target.cwd) ? target.cwd : process.cwd();
+      const cwd = fs97.existsSync(target.cwd) ? target.cwd : process.cwd();
       const proc = this.resumeSpawner(
         { ...readHouseProxyChildEnv(deployId), CODEAM_RESUME_SESSION_ID: session.id },
         cwd
@@ -52830,7 +52942,7 @@ var HostAgentSupervisor = class {
     ];
     for (const dir of dirs) {
       try {
-        fs96.rmSync(dir, { recursive: true, force: true });
+        fs97.rmSync(dir, { recursive: true, force: true });
       } catch (err) {
         log.warn(
           "host-agent",
@@ -52997,7 +53109,7 @@ async function invite() {
 var import_node_dns = require("dns");
 var import_node_util11 = require("util");
 var import_node_crypto17 = require("crypto");
-var fs97 = __toESM(require("fs"));
+var fs98 = __toESM(require("fs"));
 var path111 = __toESM(require("path"));
 var import_picocolors14 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util11.promisify)(import_node_dns.resolve);
@@ -53056,11 +53168,11 @@ async function checkHealth(apiBase2) {
 function checkConfigDir() {
   const dir = path111.join(require("os").homedir(), ".codeam");
   try {
-    fs97.mkdirSync(dir, { recursive: true, mode: 448 });
+    fs98.mkdirSync(dir, { recursive: true, mode: 448 });
     const probe = path111.join(dir, ".doctor-probe");
-    fs97.writeFileSync(probe, "ok", { mode: 384 });
-    const read = fs97.readFileSync(probe, "utf8");
-    fs97.unlinkSync(probe);
+    fs98.writeFileSync(probe, "ok", { mode: 384 });
+    const read = fs98.readFileSync(probe, "utf8");
+    fs98.unlinkSync(probe);
     if (read !== "ok") throw new Error("write/read round-trip mismatch");
     return {
       id: "config-dir",
@@ -53166,7 +53278,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.76.13" : "0.0.0-dev";
+  const cliVersion = true ? "2.76.15" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto17.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -53610,7 +53722,7 @@ var WARM_PACKAGE_TIMEOUT_MS = 12e4;
 var WARM_TOTAL_BUDGET_MS = 10 * 6e4;
 var WARM_CONCURRENCY = 4;
 function runCapturing(command2, args2, timeoutMs) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     const child = (0, import_node_child_process40.spawn)(command2, args2, {
       env: { ...process.env, ...LAUNCHER_ENV },
       stdio: ["ignore", "ignore", "pipe"],
@@ -53625,15 +53737,15 @@ function runCapturing(command2, args2, timeoutMs) {
     child.stderr?.on("data", (c2) => stderr += c2);
     const timer = setTimeout(() => {
       child.kill("SIGKILL");
-      resolve14({ status: null, stderr, error: new Error(`spawn ${command2} ETIMEDOUT`) });
+      resolve13({ status: null, stderr, error: new Error(`spawn ${command2} ETIMEDOUT`) });
     }, timeoutMs);
     child.on("error", (error) => {
       clearTimeout(timer);
-      resolve14({ status: null, stderr, error });
+      resolve13({ status: null, stderr, error });
     });
     child.on("close", (status2) => {
       clearTimeout(timer);
-      resolve14({ status: status2, stderr });
+      resolve13({ status: status2, stderr });
     });
   });
 }
@@ -53690,7 +53802,7 @@ async function mcpWarm(argv = [], opts = {}) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.76.13" : "unknown";
+  const v = true ? "2.76.15" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }