codeam-cli 2.76.21 → 2.76.23

package/dist/index.js

@@ -3802,9 +3802,9 @@ var _default = makeConfig();
 var { getConfig, ensurePluginId, addSession, removeSession, setActiveSession, getActiveSession, getActiveSessionForAgent, setDisable1mContext, setSessionAgent, setSquadAuto, getSquadAuto, clearAll, saveCliConfig, loadCliConfig } = _default;
 
 // src/commands/pair-auto.ts
-var fs66 = __toESM(require("fs"));
-var os48 = __toESM(require("os"));
-var path74 = __toESM(require("path"));
+var fs67 = __toESM(require("fs"));
+var os49 = __toESM(require("os"));
+var path75 = __toESM(require("path"));
 var import_crypto4 = require("crypto");
 
 // src/services/telemetry.service.ts
@@ -10617,7 +10617,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.76.21" : "0.0.0-dev",
+    cliVersion: true ? "2.76.23" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -10866,7 +10866,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.76.21",
+  version: "2.76.23",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -11145,7 +11145,7 @@ async function postAiResult(input) {
 async function fetchNamedPreviewTunnel(input) {
   const res = await _transport.postJsonAuthed(
     `${API_BASE}/api/preview/tunnel`,
-    { pluginId: input.pluginId },
+    { sessionId: input.sessionId, pluginId: input.pluginId },
     input.pluginAuthToken
   );
   const body = res;
@@ -12229,7 +12229,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.76.21" ? { ideVersion: "2.76.21" } : {}
+      ..."2.76.23" ? { ideVersion: "2.76.23" } : {}
     };
     try {
       const res = await _postJson(`${API_BASE2}/api/plugin/heartbeat`, body, this.pollSecretHeader());
@@ -13710,12 +13710,54 @@ function closeAllTerminals() {
 }
 
 // src/commands/start/handlers.ts
-var fs65 = __toESM(require("fs"));
-var os47 = __toESM(require("os"));
-var path73 = __toESM(require("path"));
+var fs66 = __toESM(require("fs"));
+var os48 = __toESM(require("os"));
+var path74 = __toESM(require("path"));
 var import_crypto3 = require("crypto");
 var import_child_process25 = require("child_process");
 
+// src/services/turn-marker.ts
+var fs6 = __toESM(require("fs"));
+var os6 = __toESM(require("os"));
+var path7 = __toESM(require("path"));
+var depth = 0;
+function codeamHome() {
+  return path7.join(os6.homedir(), ".codeam");
+}
+function turnMarkerPath(pid = process.pid, home = codeamHome()) {
+  return path7.join(home, "turns", String(pid));
+}
+function mark() {
+  try {
+    const file = turnMarkerPath();
+    fs6.mkdirSync(path7.dirname(file), { recursive: true });
+    fs6.writeFileSync(file, String(Date.now()));
+  } catch {
+  }
+}
+function clear() {
+  try {
+    fs6.rmSync(turnMarkerPath(), { force: true });
+  } catch {
+  }
+}
+async function withTurnMarker(fn) {
+  if (depth++ === 0) mark();
+  try {
+    return await fn();
+  } finally {
+    if (--depth === 0) clear();
+  }
+}
+function isProcessMidTurn(pid, home) {
+  if (!pid) return false;
+  try {
+    return fs6.existsSync(turnMarkerPath(pid, home));
+  } catch {
+    return false;
+  }
+}
+
 // src/lib/payload.ts
 var import_zod2 = require("zod");
 var fileEntrySchema = import_zod2.z.object({
@@ -13933,8 +13975,8 @@ function parsePayload2(schema, raw) {
 }
 
 // src/services/file-ops.service.ts
-var fs6 = __toESM(require("fs/promises"));
-var path7 = __toESM(require("path"));
+var fs7 = __toESM(require("fs/promises"));
+var path8 = __toESM(require("path"));
 var MAX_FILE_BYTES = 5 * 1024 * 1024;
 var MAX_WALK_DEPTH = 6;
 var MAX_VISITED_DIRS = 5e3;
@@ -13969,12 +14011,12 @@ var SUBDIR_IGNORE = /* @__PURE__ */ new Set([
   "__pycache__"
 ]);
 function isUnder(parent, candidate) {
-  const rel = path7.relative(parent, candidate);
-  return rel === "" || !rel.startsWith("..") && !path7.isAbsolute(rel);
+  const rel = path8.relative(parent, candidate);
+  return rel === "" || !rel.startsWith("..") && !path8.isAbsolute(rel);
 }
 async function isExistingFile(absPath) {
   try {
-    const stat3 = await fs6.stat(absPath);
+    const stat3 = await fs7.stat(absPath);
     return stat3.isFile();
   } catch {
     return false;
@@ -13987,13 +14029,13 @@ async function walkForSuffix(dir, needleVariants, depth2, ctx) {
   ctx.visited++;
   let entries2 = [];
   try {
-    entries2 = await fs6.readdir(dir, { withFileTypes: true });
+    entries2 = await fs7.readdir(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const e of entries2) {
     if (!e.isFile()) continue;
-    const full = path7.join(dir, e.name);
+    const full = path8.join(dir, e.name);
     if (needleVariants.some((needle) => full.endsWith(needle))) {
       ctx.matches.push(full);
       if (ctx.matches.length >= ctx.cap) return;
@@ -14003,21 +14045,21 @@ async function walkForSuffix(dir, needleVariants, depth2, ctx) {
     if (!e.isDirectory()) continue;
     if (SUBDIR_IGNORE.has(e.name)) continue;
     if (e.name.startsWith(".") && SUBDIR_IGNORE.has(e.name)) continue;
-    await walkForSuffix(path7.join(dir, e.name), needleVariants, depth2 + 1, ctx);
+    await walkForSuffix(path8.join(dir, e.name), needleVariants, depth2 + 1, ctx);
     if (ctx.matches.length >= ctx.cap) return;
   }
 }
 async function findFile(rawPath) {
   const cwd = process.cwd();
-  if (path7.isAbsolute(rawPath)) {
-    const abs = path7.normalize(rawPath);
+  if (path8.isAbsolute(rawPath)) {
+    const abs = path8.normalize(rawPath);
     if (isUnder(cwd, abs) && await isExistingFile(abs)) return abs;
   }
-  const direct = path7.resolve(cwd, rawPath);
+  const direct = path8.resolve(cwd, rawPath);
   if (isUnder(cwd, direct) && await isExistingFile(direct)) return direct;
-  const normalized = path7.normalize(rawPath).replace(/^[./\\]+/, "");
+  const normalized = path8.normalize(rawPath).replace(/^[./\\]+/, "");
   const needles = [
-    `${path7.sep}${normalized}`,
+    `${path8.sep}${normalized}`,
     `/${normalized}`
   ].filter((v, i, a) => a.indexOf(v) === i);
   const ctx = { visited: 0, matches: [], cap: 16 };
@@ -14031,7 +14073,7 @@ async function findWriteTarget(rawPath) {
   const found = await findFile(rawPath);
   if (found) return found;
   const cwd = process.cwd();
-  const fallback = path7.isAbsolute(rawPath) ? path7.normalize(rawPath) : path7.resolve(cwd, rawPath);
+  const fallback = path8.isAbsolute(rawPath) ? path8.normalize(rawPath) : path8.resolve(cwd, rawPath);
   if (!isUnder(cwd, fallback)) return null;
   return fallback;
 }
@@ -14048,11 +14090,11 @@ async function readProjectFile(rawPath) {
     if (!abs) {
       return { error: `File not found in the project tree: ${rawPath}` };
     }
-    const stat3 = await fs6.stat(abs);
+    const stat3 = await fs7.stat(abs);
     if (stat3.size > MAX_FILE_BYTES) {
       return { error: `File too large (${(stat3.size / 1024 / 1024).toFixed(1)} MB > ${MAX_FILE_BYTES / 1024 / 1024} MB).` };
     }
-    const buf = await fs6.readFile(abs);
+    const buf = await fs7.readFile(abs);
     if (looksBinary(buf)) {
       return { error: "Binary file \u2014 refusing to open in a code editor." };
     }
@@ -14071,8 +14113,8 @@ async function writeProjectFile(rawPath, content) {
     if (Buffer.byteLength(content, "utf-8") > MAX_FILE_BYTES) {
       return { error: "Content too large." };
     }
-    await fs6.mkdir(path7.dirname(abs), { recursive: true });
-    await fs6.writeFile(abs, content, "utf-8");
+    await fs7.mkdir(path8.dirname(abs), { recursive: true });
+    await fs7.writeFile(abs, content, "utf-8");
     return { ok: true };
   } catch (e) {
     const msg = e instanceof Error ? e.message : "Write failed";
@@ -14083,8 +14125,8 @@ async function writeProjectFile(rawPath, content) {
 // src/services/project-ops.service.ts
 var import_child_process5 = require("child_process");
 var import_util = require("util");
-var fs7 = __toESM(require("fs/promises"));
-var path8 = __toESM(require("path"));
+var fs8 = __toESM(require("fs/promises"));
+var path9 = __toESM(require("path"));
 var execFileP = (0, import_util.promisify)(import_child_process5.execFile);
 var PROJECT_IGNORE = /* @__PURE__ */ new Set([
   "node_modules",
@@ -14138,7 +14180,7 @@ async function listProjectFiles(opts = {}) {
     }
     let entries2 = [];
     try {
-      entries2 = await fs7.readdir(dir, { withFileTypes: true });
+      entries2 = await fs8.readdir(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -14148,18 +14190,18 @@ async function listProjectFiles(opts = {}) {
         return;
       }
       if (isProjectIgnored(e.name)) continue;
-      const full = path8.join(dir, e.name);
+      const full = path9.join(dir, e.name);
       if (e.isDirectory()) {
         if (depth2 >= 12) continue;
         await walk2(full, depth2 + 1);
       } else if (e.isFile()) {
-        const rel = path8.relative(root, full);
+        const rel = path9.relative(root, full);
         if (q2 && !rel.toLowerCase().includes(q2) && !e.name.toLowerCase().includes(q2)) {
           continue;
         }
         let size = 0;
         try {
-          const st3 = await fs7.stat(full);
+          const st3 = await fs8.stat(full);
           size = st3.size;
         } catch {
         }
@@ -14261,8 +14303,8 @@ async function gitStatus(cwd) {
   let hasMergeInProgress = false;
   try {
     const gitDir = (await git(["rev-parse", "--git-dir"], root)).stdout.trim();
-    const mergeHead = path8.isAbsolute(gitDir) ? path8.join(gitDir, "MERGE_HEAD") : path8.join(root, gitDir, "MERGE_HEAD");
-    await fs7.access(mergeHead);
+    const mergeHead = path9.isAbsolute(gitDir) ? path9.join(gitDir, "MERGE_HEAD") : path9.join(root, gitDir, "MERGE_HEAD");
+    await fs8.access(mergeHead);
     hasMergeInProgress = true;
   } catch {
   }
@@ -14408,7 +14450,7 @@ async function jsSearchFiles(opts, cwd, cap) {
     }
     let content = "";
     try {
-      content = await fs7.readFile(path8.join(cwd, f.path), "utf8");
+      content = await fs8.readFile(path9.join(cwd, f.path), "utf8");
     } catch {
       continue;
     }
@@ -14485,14 +14527,14 @@ function formatRemaining(expiresAt) {
 
 // src/services/apply-file-review.service.ts
 var import_child_process6 = require("child_process");
-var fs8 = __toESM(require("fs"));
-var path9 = __toESM(require("path"));
+var fs9 = __toESM(require("fs"));
+var path10 = __toESM(require("path"));
 async function applyFileReview(workingDir, filePath, action) {
-  if (filePath.includes("..") || path9.isAbsolute(filePath)) {
+  if (filePath.includes("..") || path10.isAbsolute(filePath)) {
     return { ok: false, action, filePath, error: "invalid file path" };
   }
-  const absFile = path9.resolve(workingDir, filePath);
-  const repoRoot = findGitRoot2(path9.dirname(absFile));
+  const absFile = path10.resolve(workingDir, filePath);
+  const repoRoot = findGitRoot2(path10.dirname(absFile));
   if (!repoRoot) {
     return {
       ok: false,
@@ -14501,7 +14543,7 @@ async function applyFileReview(workingDir, filePath, action) {
       error: `no enclosing git repo for ${filePath}`
     };
   }
-  const relInRepo = path9.relative(repoRoot, absFile);
+  const relInRepo = path10.relative(repoRoot, absFile);
   if (!relInRepo || relInRepo.startsWith("..")) {
     return { ok: false, action, filePath, error: "path escapes repo root" };
   }
@@ -14550,17 +14592,17 @@ function runGit2(cwd, args2) {
   });
 }
 function findGitRoot2(startDir) {
-  let dir = path9.resolve(startDir);
+  let dir = path10.resolve(startDir);
   const seen2 = /* @__PURE__ */ new Set();
   for (let i = 0; i < 256; i++) {
     if (seen2.has(dir)) return null;
     seen2.add(dir);
     try {
-      const stat3 = fs8.statSync(path9.join(dir, ".git"), { throwIfNoEntry: false });
+      const stat3 = fs9.statSync(path10.join(dir, ".git"), { throwIfNoEntry: false });
       if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
     } catch {
     }
-    const parent = path9.dirname(dir);
+    const parent = path10.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -14569,8 +14611,8 @@ function findGitRoot2(startDir) {
 
 // src/commands/link.ts
 var import_node_crypto9 = require("crypto");
-var fs31 = __toESM(require("fs"));
-var path38 = __toESM(require("path"));
+var fs32 = __toESM(require("fs"));
+var path39 = __toESM(require("path"));
 var import_chokidar = __toESM(require("chokidar"));
 var import_picocolors2 = __toESM(require("picocolors"));
 
@@ -16644,19 +16686,19 @@ function parseFrame(frame, dispatch) {
 }
 
 // src/os/posix.ts
-var fs10 = __toESM(require("fs"));
-var os7 = __toESM(require("os"));
-var path12 = __toESM(require("path"));
+var fs11 = __toESM(require("fs"));
+var os8 = __toESM(require("os"));
+var path13 = __toESM(require("path"));
 var import_node_crypto2 = require("crypto");
 
 // src/os/strategy.ts
-var path10 = __toESM(require("path"));
+var path11 = __toESM(require("path"));
 function findInPathFor(name, opts) {
-  const dirs = (process.env.PATH ?? "").split(path10.delimiter).filter(Boolean);
+  const dirs = (process.env.PATH ?? "").split(path11.delimiter).filter(Boolean);
   const candidates = opts.candidates(name);
   for (const dir of dirs) {
     for (const candidate of candidates) {
-      const full = path10.join(dir, candidate);
+      const full = path11.join(dir, candidate);
       try {
         opts.accessSync(full, opts.accessFlag);
         return full;
@@ -16669,9 +16711,9 @@ function findInPathFor(name, opts) {
 
 // src/services/pty/unix.strategy.ts
 var import_child_process7 = require("child_process");
-var fs9 = __toESM(require("fs"));
-var os6 = __toESM(require("os"));
-var path11 = __toESM(require("path"));
+var fs10 = __toESM(require("fs"));
+var os7 = __toESM(require("os"));
+var path12 = __toESM(require("path"));
 
 // src/services/pty/types.ts
 function findInPath(name) {
@@ -16767,8 +16809,8 @@ var UnixPtyStrategy = class {
     }
     const cols = process.stdout.columns || 220;
     const rows = process.stdout.rows || 50;
-    this.helperPath = path11.join(os6.tmpdir(), "codeam-pty-helper.py");
-    fs9.writeFileSync(this.helperPath, PYTHON_PTY_HELPER, { mode: 420 });
+    this.helperPath = path12.join(os7.tmpdir(), "codeam-pty-helper.py");
+    fs10.writeFileSync(this.helperPath, PYTHON_PTY_HELPER, { mode: 420 });
     this.proc = (0, import_child_process7.spawn)(python, [this.helperPath, cmd, ...args2], {
       stdio: ["pipe", "pipe", "inherit"],
       cwd,
@@ -16936,11 +16978,11 @@ var UnixPtyStrategy = class {
 // src/os/posix.ts
 var PosixOsStrategy = class {
   homeDir() {
-    return os7.homedir();
+    return os8.homedir();
   }
   scratchPath(prefix) {
     const tag = `${process.pid}-${(0, import_node_crypto2.randomBytes)(4).toString("hex")}`;
-    return path12.join(os7.tmpdir(), `${prefix}-${tag}`);
+    return path13.join(os8.tmpdir(), `${prefix}-${tag}`);
   }
   devNull() {
     return "/dev/null";
@@ -16948,8 +16990,8 @@ var PosixOsStrategy = class {
   findInPath(name) {
     return findInPathFor(name, {
       candidates: () => [name],
-      accessFlag: fs10.constants.X_OK,
-      accessSync: fs10.accessSync
+      accessFlag: fs11.constants.X_OK,
+      accessSync: fs11.accessSync
     });
   }
   augmentPath(dirs) {
@@ -16994,15 +17036,15 @@ var LinuxOsStrategy = class extends PosixOsStrategy {
 };
 
 // src/os/win32.ts
-var fs11 = __toESM(require("fs"));
-var os8 = __toESM(require("os"));
-var path14 = __toESM(require("path"));
+var fs12 = __toESM(require("fs"));
+var os9 = __toESM(require("os"));
+var path15 = __toESM(require("path"));
 var import_node_crypto3 = require("crypto");
 
 // src/services/pty/windows-conpty.strategy.ts
-var path13 = __toESM(require("path"));
+var path14 = __toESM(require("path"));
 function loadNodePty2() {
-  const vendoredPath = path13.join(__dirname, "vendor", "node-pty");
+  const vendoredPath = path14.join(__dirname, "vendor", "node-pty");
   try {
     return require(vendoredPath);
   } catch (vendorErr) {
@@ -17194,25 +17236,25 @@ var WINDOWS_EXEC_EXTS = [".exe", ".cmd", ".bat", ".ps1"];
 var Win32OsStrategy = class {
   id = "win32";
   homeDir() {
-    return os8.homedir();
+    return os9.homedir();
   }
   scratchPath(prefix) {
     const tag = `${process.pid}-${(0, import_node_crypto3.randomBytes)(4).toString("hex")}`;
-    return path14.join(os8.tmpdir(), `${prefix}-${tag}`);
+    return path15.join(os9.tmpdir(), `${prefix}-${tag}`);
   }
   devNull() {
     return "NUL";
   }
   findInPath(name) {
-    const hasExt = path14.extname(name).length > 0;
+    const hasExt = path15.extname(name).length > 0;
     return findInPathFor(name, {
       candidates: (n) => hasExt ? [n] : [...WINDOWS_EXEC_EXTS.map((ext) => `${n}${ext}`), n],
       // Windows has no Unix execute bit; presence + matching extension
       // IS the executability check. X_OK on Windows is a no-op alias
       // for F_OK at the libuv layer anyway, but F_OK makes intent
       // explicit.
-      accessFlag: fs11.constants.F_OK,
-      accessSync: fs11.accessSync
+      accessFlag: fs12.constants.F_OK,
+      accessSync: fs12.accessSync
     });
   }
   augmentPath(dirs) {
@@ -17249,7 +17291,7 @@ var Win32OsStrategy = class {
     return `"${escaped.replace(/[&|^<>()%!]/g, "^$&")}"`;
   }
   buildLaunch(binaryPath, extraArgs = []) {
-    const ext = path14.extname(binaryPath).toLowerCase();
+    const ext = path15.extname(binaryPath).toLowerCase();
     if (ext === ".cmd" || ext === ".bat") {
       return { cmd: "cmd.exe", args: ["/c", binaryPath, ...extraArgs] };
     }
@@ -17325,20 +17367,20 @@ function buildClaudeLaunch(extraArgs = [], os74 = createOsStrategy()) {
 
 // src/agents/claude/installer.ts
 var import_child_process9 = require("child_process");
-var path15 = __toESM(require("path"));
-var os9 = __toESM(require("os"));
+var path16 = __toESM(require("path"));
+var os10 = __toESM(require("os"));
 function probeInstallDirs() {
-  const home = os9.homedir();
+  const home = os10.homedir();
   if (process.platform === "win32") {
     return [
-      path15.join(home, ".claude", "local"),
-      path15.join(home, "AppData", "Local", "AnthropicClaude"),
-      path15.join(home, "AppData", "Local", "Programs", "AnthropicClaude")
+      path16.join(home, ".claude", "local"),
+      path16.join(home, "AppData", "Local", "AnthropicClaude"),
+      path16.join(home, "AppData", "Local", "Programs", "AnthropicClaude")
     ];
   }
   return [
-    path15.join(home, ".local", "bin"),
-    path15.join(home, ".claude", "local"),
+    path16.join(home, ".local", "bin"),
+    path16.join(home, ".claude", "local"),
     "/usr/local/bin"
   ];
 }
@@ -17347,7 +17389,7 @@ function isAvailable() {
 }
 function augmentPath() {
   const dirs = probeInstallDirs();
-  const sep8 = path15.delimiter;
+  const sep8 = path16.delimiter;
   const current2 = process.env.PATH ?? "";
   const existing = new Set(current2.split(sep8).filter(Boolean));
   const additions = dirs.filter((d3) => !existing.has(d3));
@@ -17438,9 +17480,9 @@ var import_node_child_process3 = require("child_process");
 
 // src/agents/claude/local-token.ts
 var import_node_child_process2 = require("child_process");
-var fs12 = __toESM(require("fs"));
-var os10 = __toESM(require("os"));
-var path16 = __toESM(require("path"));
+var fs13 = __toESM(require("fs"));
+var os11 = __toESM(require("os"));
+var path17 = __toESM(require("path"));
 var import_node_util4 = require("util");
 var execFileP2 = (0, import_node_util4.promisify)(import_node_child_process2.execFile);
 var KEYCHAIN_SERVICE_NAMES = [
@@ -17450,17 +17492,17 @@ var KEYCHAIN_SERVICE_NAMES = [
   "Anthropic Claude"
 ];
 function claudeCredentialsPaths() {
-  const home = os10.homedir();
+  const home = os11.homedir();
   return [
-    path16.join(home, ".claude", ".credentials.json"),
-    path16.join(home, ".config", "claude", ".credentials.json")
+    path17.join(home, ".claude", ".credentials.json"),
+    path17.join(home, ".config", "claude", ".credentials.json")
   ];
 }
 async function extractLocalClaudeToken() {
   const agentState = readClaudeAgentState();
   for (const flat of claudeCredentialsPaths()) {
-    if (!fs12.existsSync(flat)) continue;
-    const credential = fs12.readFileSync(flat, "utf8").trim();
+    if (!fs13.existsSync(flat)) continue;
+    const credential = fs13.readFileSync(flat, "utf8").trim();
     if (credential.length > 0) {
       return { method: "oauth", credential, source: "flat-file", agentState };
     }
@@ -17485,10 +17527,10 @@ async function extractLocalClaudeToken() {
 }
 function readClaudeAgentState() {
   const STATE_MAX_BYTES = 256 * 1024;
-  const candidate = path16.join(os10.homedir(), ".claude.json");
+  const candidate = path17.join(os11.homedir(), ".claude.json");
   try {
-    if (!fs12.existsSync(candidate)) return void 0;
-    const buf = fs12.readFileSync(candidate);
+    if (!fs13.existsSync(candidate)) return void 0;
+    const buf = fs13.readFileSync(candidate);
     if (buf.length === 0 || buf.length > STATE_MAX_BYTES) return void 0;
     const text = buf.toString("utf8").trim();
     return text.length > 0 ? text : void 0;
@@ -17577,9 +17619,9 @@ function claudeLoginLauncher() {
 }
 
 // src/agents/claude/quota.ts
-var fs13 = __toESM(require("fs"));
-var os11 = __toESM(require("os"));
-var path17 = __toESM(require("path"));
+var fs14 = __toESM(require("fs"));
+var os12 = __toESM(require("os"));
+var path18 = __toESM(require("path"));
 var import_child_process10 = require("child_process");
 var HELPER_SCRIPT = `import os,pty,sys,select,signal,struct,fcntl,termios,errno
 m,s=pty.openpty()
@@ -17642,8 +17684,8 @@ async function fetchClaudeQuota() {
       resolve13(null);
       return;
     }
-    const helperPath = path17.join(os11.tmpdir(), "codeam-quota-helper.py");
-    fs13.writeFileSync(helperPath, HELPER_SCRIPT, { mode: 420 });
+    const helperPath = path18.join(os12.tmpdir(), "codeam-quota-helper.py");
+    fs14.writeFileSync(helperPath, HELPER_SCRIPT, { mode: 420 });
     const python = findInPath("python3") ?? findInPath("python");
     if (!python) {
       resolve13(null);
@@ -17670,7 +17712,7 @@ async function fetchClaudeQuota() {
         } catch {
         }
         try {
-          fs13.unlinkSync(helperPath);
+          fs14.unlinkSync(helperPath);
         } catch {
         }
         resolve13(result);
@@ -17805,37 +17847,37 @@ function readOneShotConversations(cwd, homeDir2) {
 }
 
 // src/agents/claude/history.ts
-var fs15 = __toESM(require("fs"));
+var fs16 = __toESM(require("fs"));
 
 // src/agents/claude-memory-file.ts
-var os13 = __toESM(require("os"));
-var path19 = __toESM(require("path"));
+var os14 = __toESM(require("os"));
+var path20 = __toESM(require("path"));
 function claudeMemoryFile(homeDir2, env = process.env) {
-  if (homeDir2) return path19.join(homeDir2, ".claude", "CLAUDE.md");
-  return path19.join(claudeConfigDir(env), "CLAUDE.md");
+  if (homeDir2) return path20.join(homeDir2, ".claude", "CLAUDE.md");
+  return path20.join(claudeConfigDir(env), "CLAUDE.md");
 }
 function claudeConfigDir(env = currentAgentEnv()) {
   const configDir = env.CLAUDE_CONFIG_DIR?.trim();
-  return configDir ? configDir : path19.join(os13.homedir(), ".claude");
+  return configDir ? configDir : path20.join(os14.homedir(), ".claude");
 }
 
 // src/agents/claude/history.ts
-var path20 = __toESM(require("path"));
+var path21 = __toESM(require("path"));
 function encodeCwd(cwd) {
   return cwd.replace(/[\\/:_.]/g, "-");
 }
 function resolveHistoryDir(cwd, projectsRoot) {
-  const root = projectsRoot ?? path20.join(claudeConfigDir(), "projects");
-  const primary = path20.join(root, encodeCwd(cwd));
-  if (fs15.existsSync(primary)) return primary;
+  const root = projectsRoot ?? path21.join(claudeConfigDir(), "projects");
+  const primary = path21.join(root, encodeCwd(cwd));
+  if (fs16.existsSync(primary)) return primary;
   try {
-    const entries2 = fs15.readdirSync(root, { withFileTypes: true });
+    const entries2 = fs16.readdirSync(root, { withFileTypes: true });
     const wanted = encodeCwd(cwd);
     for (const e of entries2) {
       if (!e.isDirectory()) continue;
       const candidate = e.name.replace(/-+/g, "-");
       if (candidate === wanted.replace(/-+/g, "-")) {
-        return path20.join(root, e.name);
+        return path21.join(root, e.name);
       }
     }
   } catch {
@@ -17845,31 +17887,31 @@ function resolveHistoryDir(cwd, projectsRoot) {
 function resolveHistoryFile(cwd, sessionId, projectsRoot) {
   const dir = resolveHistoryDir(cwd, projectsRoot);
   if (!dir) return null;
-  const filePath = path20.join(dir, `${sessionId}.jsonl`);
-  return fs15.existsSync(filePath) ? filePath : null;
+  const filePath = path21.join(dir, `${sessionId}.jsonl`);
+  return fs16.existsSync(filePath) ? filePath : null;
 }
 function getCurrentUsage(historyDir, bootTimeMs = 0) {
   const GRACE_MS = 5e3;
   const cutoff = bootTimeMs > 0 ? bootTimeMs - GRACE_MS : 0;
   let entries2;
   try {
-    entries2 = fs15.readdirSync(historyDir, { withFileTypes: true });
+    entries2 = fs16.readdirSync(historyDir, { withFileTypes: true });
   } catch {
     return null;
   }
   const files = entries2.filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
     try {
-      const stat3 = fs15.statSync(path20.join(historyDir, e.name));
+      const stat3 = fs16.statSync(path21.join(historyDir, e.name));
       return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
     } catch {
       return { name: e.name, mtime: 0, birthtime: 0 };
     }
   }).filter((f) => f.birthtime >= cutoff).sort((a, b) => b.mtime - a.mtime);
   if (files.length === 0) return null;
-  const filePath = path20.join(historyDir, files[0].name);
+  const filePath = path21.join(historyDir, files[0].name);
   let raw;
   try {
-    raw = fs15.readFileSync(filePath, "utf8");
+    raw = fs16.readFileSync(filePath, "utf8");
   } catch {
     return null;
   }
@@ -17937,7 +17979,7 @@ function parseHistoryFile(filePath) {
   const exitPlanIds = /* @__PURE__ */ new Set();
   let raw;
   try {
-    raw = fs15.readFileSync(filePath, "utf8");
+    raw = fs16.readFileSync(filePath, "utf8");
   } catch {
     return out2;
   }
@@ -17983,7 +18025,7 @@ function listResumableSessions(cwd) {
   if (!dir) return [];
   let entries2;
   try {
-    entries2 = fs15.readdirSync(dir, { withFileTypes: true });
+    entries2 = fs16.readdirSync(dir, { withFileTypes: true });
   } catch {
     return [];
   }
@@ -17991,15 +18033,15 @@ function listResumableSessions(cwd) {
   for (const entry of entries2) {
     if (!entry.isFile() || !entry.name.endsWith(".jsonl")) continue;
     const id = entry.name.slice(0, -".jsonl".length);
-    const filePath = path20.join(dir, entry.name);
+    const filePath = path21.join(dir, entry.name);
     let timestamp = Date.now();
     try {
-      timestamp = fs15.statSync(filePath).mtimeMs;
+      timestamp = fs16.statSync(filePath).mtimeMs;
     } catch {
     }
     let summary = "";
     try {
-      const raw = fs15.readFileSync(filePath, "utf8");
+      const raw = fs16.readFileSync(filePath, "utf8");
       for (const line of raw.split("\n")) {
         if (!line.trim()) continue;
         try {
@@ -18030,19 +18072,19 @@ var SWITCH_PROBE_BYTES = 256 * 1024;
 function isClearedConversationFile(filePath) {
   let fd;
   try {
-    fd = fs15.openSync(filePath, "r");
+    fd = fs16.openSync(filePath, "r");
   } catch {
     return false;
   }
   let raw;
   try {
     const buf = Buffer.alloc(SWITCH_PROBE_BYTES);
-    const n = fs15.readSync(fd, buf, 0, SWITCH_PROBE_BYTES, 0);
+    const n = fs16.readSync(fd, buf, 0, SWITCH_PROBE_BYTES, 0);
     raw = buf.toString("utf8", 0, n);
   } catch {
     return false;
   } finally {
-    fs15.closeSync(fd);
+    fs16.closeSync(fd);
   }
   if (!raw.includes(CLEAR_COMMAND_ECHO) && !raw.includes("SessionStart:clear")) return false;
   for (const line of raw.split("\n")) {
@@ -18069,16 +18111,16 @@ function isClearedConversationFile(filePath) {
 function appendedTailHasResumeMarker(filePath, fromOffset) {
   let fd;
   try {
-    fd = fs15.openSync(filePath, "r");
+    fd = fs16.openSync(filePath, "r");
   } catch {
     return false;
   }
   try {
-    const size = fs15.fstatSync(fd).size;
+    const size = fs16.fstatSync(fd).size;
     const len = Math.min(Math.max(size - fromOffset, 0), SWITCH_PROBE_BYTES);
     if (len <= 0) return false;
     const buf = Buffer.alloc(len);
-    const n = fs15.readSync(fd, buf, 0, len, fromOffset);
+    const n = fs16.readSync(fd, buf, 0, len, fromOffset);
     const raw = buf.toString("utf8", 0, n);
     if (!raw.includes('"last-prompt"')) return false;
     for (const line of raw.split("\n")) {
@@ -18092,11 +18134,11 @@ function appendedTailHasResumeMarker(filePath, fromOffset) {
   } catch {
     return false;
   } finally {
-    fs15.closeSync(fd);
+    fs16.closeSync(fd);
   }
 }
 function watchConversationSwitch(cwd, opts, onSwitch, projectsRoot) {
-  const root = projectsRoot ?? path20.join(claudeConfigDir(), "projects");
+  const root = projectsRoot ?? path21.join(claudeConfigDir(), "projects");
   let currentId = opts.currentId;
   const baseline = /* @__PURE__ */ new Map();
   const unclassified = /* @__PURE__ */ new Map();
@@ -18105,13 +18147,13 @@ function watchConversationSwitch(cwd, opts, onSwitch, projectsRoot) {
   let closed = false;
   const fileSize = (file) => {
     try {
-      return fs15.statSync(file).size;
+      return fs16.statSync(file).size;
     } catch {
       return null;
     }
   };
   const switchTo = (dir, id, kind) => {
-    const leaving = fileSize(path20.join(dir, `${currentId}.jsonl`));
+    const leaving = fileSize(path21.join(dir, `${currentId}.jsonl`));
     if (leaving !== null) baseline.set(currentId, leaving);
     baseline.delete(id);
     unclassified.delete(id);
@@ -18122,7 +18164,7 @@ function watchConversationSwitch(cwd, opts, onSwitch, projectsRoot) {
     if (closed) return;
     let entries2;
     try {
-      entries2 = fs15.readdirSync(dir);
+      entries2 = fs16.readdirSync(dir);
     } catch {
       return;
     }
@@ -18130,7 +18172,7 @@ function watchConversationSwitch(cwd, opts, onSwitch, projectsRoot) {
       if (!name.endsWith(".jsonl")) continue;
       const id = name.slice(0, -".jsonl".length);
       if (id === currentId) continue;
-      const file = path20.join(dir, name);
+      const file = path21.join(dir, name);
       const size = fileSize(file);
       if (size === null) continue;
       const known = baseline.get(id);
@@ -18156,18 +18198,18 @@ function watchConversationSwitch(cwd, opts, onSwitch, projectsRoot) {
     rootWatcher = null;
     if (initial) {
       try {
-        for (const name of fs15.readdirSync(dir)) {
+        for (const name of fs16.readdirSync(dir)) {
           if (!name.endsWith(".jsonl")) continue;
           const id = name.slice(0, -".jsonl".length);
           if (id === currentId) continue;
-          const size = fileSize(path20.join(dir, name));
+          const size = fileSize(path21.join(dir, name));
           if (size !== null) baseline.set(id, size);
         }
       } catch {
       }
     }
     try {
-      dirWatcher = fs15.watch(dir, { persistent: false }, () => scan(dir));
+      dirWatcher = fs16.watch(dir, { persistent: false }, () => scan(dir));
     } catch {
       return false;
     }
@@ -18176,8 +18218,8 @@ function watchConversationSwitch(cwd, opts, onSwitch, projectsRoot) {
   };
   if (!attachDir(true)) {
     try {
-      fs15.mkdirSync(root, { recursive: true });
-      rootWatcher = fs15.watch(root, { persistent: false }, () => {
+      fs16.mkdirSync(root, { recursive: true });
+      rootWatcher = fs16.watch(root, { persistent: false }, () => {
         if (!closed && !dirWatcher) attachDir(false);
       });
     } catch {
@@ -18352,24 +18394,24 @@ var ClaudeRuntimeStrategy = class {
 };
 
 // src/agents/claude/deploy.ts
-var fs17 = __toESM(require("fs"));
-var os15 = __toESM(require("os"));
-var path22 = __toESM(require("path"));
+var fs18 = __toESM(require("fs"));
+var os16 = __toESM(require("os"));
+var path23 = __toESM(require("path"));
 
 // src/agents/claude/credentials.ts
 var import_child_process12 = require("child_process");
-var fs16 = __toESM(require("fs"));
-var os14 = __toESM(require("os"));
-var path21 = __toESM(require("path"));
+var fs17 = __toESM(require("fs"));
+var os15 = __toESM(require("os"));
+var path22 = __toESM(require("path"));
 var import_util2 = require("util");
 var execFileP3 = (0, import_util2.promisify)(import_child_process12.execFile);
 async function detectLocalClaudeCredentials() {
-  const localClaudeDir = path21.join(os14.homedir(), ".claude");
-  const flat = path21.join(localClaudeDir, ".credentials.json");
-  if (fs16.existsSync(flat)) {
+  const localClaudeDir = path22.join(os15.homedir(), ".claude");
+  const flat = path22.join(localClaudeDir, ".credentials.json");
+  if (fs17.existsSync(flat)) {
     return { source: "flat-file", description: "~/.claude/.credentials.json" };
   }
-  if (os14.platform() === "darwin") {
+  if (os15.platform() === "darwin") {
     try {
       await execFileP3(
         "security",
@@ -18384,9 +18426,9 @@ async function detectLocalClaudeCredentials() {
   return { source: "none", description: "" };
 }
 async function bridgeClaudeCredentials(provider, workspaceId) {
-  const localClaudeDir = path21.join(os14.homedir(), ".claude");
-  const fileBased = path21.join(localClaudeDir, ".credentials.json");
-  if (fs16.existsSync(fileBased)) {
+  const localClaudeDir = path22.join(os15.homedir(), ".claude");
+  const fileBased = path22.join(localClaudeDir, ".credentials.json");
+  if (fs17.existsSync(fileBased)) {
     return { source: "flat-file", description: "~/.claude/.credentials.json" };
   }
   if (process.platform === "darwin") {
@@ -18478,8 +18520,8 @@ var ClaudeDeployStrategy = class {
       process.exit(1);
     }
     claudeStep.stop("\u2713 Claude CLI installed");
-    const localClaudeDir = path22.join(os15.homedir(), ".claude");
-    const haveLocalClaude = fs17.existsSync(localClaudeDir) && fs17.statSync(localClaudeDir).isDirectory();
+    const localClaudeDir = path23.join(os16.homedir(), ".claude");
+    const haveLocalClaude = fs18.existsSync(localClaudeDir) && fs18.statSync(localClaudeDir).isDirectory();
     if (haveLocalClaude) {
       const copyStep = fe();
       copyStep.start("Copying local Claude config to workspace\u2026");
@@ -18533,10 +18575,10 @@ var ClaudeDeployStrategy = class {
       }
     }
     if (opts.bridged !== "none") {
-      const localClaudeJson = path22.join(os15.homedir(), ".claude.json");
-      if (fs17.existsSync(localClaudeJson)) {
+      const localClaudeJson = path23.join(os16.homedir(), ".claude.json");
+      if (fs18.existsSync(localClaudeJson)) {
         try {
-          const contents = fs17.readFileSync(localClaudeJson);
+          const contents = fs18.readFileSync(localClaudeJson);
           await provider.uploadFile(
             workspaceId,
             "/home/codespace/.claude.json",
@@ -18569,7 +18611,7 @@ var ClaudeDeployStrategy = class {
 
 // src/agents/codex/runtime.ts
 var import_node_child_process5 = require("child_process");
-var path26 = __toESM(require("path"));
+var path27 = __toESM(require("path"));
 
 // src/agents/codex/history.ts
 var import_node_fs4 = __toESM(require("fs"));
@@ -18577,9 +18619,9 @@ var import_node_path4 = __toESM(require("path"));
 var import_node_os2 = __toESM(require("os"));
 
 // src/agents/acp/squad-roster.ts
-var fs18 = __toESM(require("fs"));
-var os16 = __toESM(require("os"));
-var path23 = __toESM(require("path"));
+var fs19 = __toESM(require("fs"));
+var os17 = __toESM(require("os"));
+var path24 = __toESM(require("path"));
 var PROMPT_MAX = 500;
 var REPLY_SUMMARY_MAX = 1e3;
 var PREAMBLE_MAX = 2e3;
@@ -18598,11 +18640,11 @@ function defaultMember() {
   };
 }
 function journalPathFor(homeDir2, sessionId) {
-  return path23.join(homeDir2, ".codeam", `squad-journal-${sessionId}.json`);
+  return path24.join(homeDir2, ".codeam", `squad-journal-${sessionId}.json`);
 }
 function loadJournal(journalPath) {
   try {
-    const raw = JSON.parse(fs18.readFileSync(journalPath, "utf-8"));
+    const raw = JSON.parse(fs19.readFileSync(journalPath, "utf-8"));
     return Array.isArray(raw.turns) ? raw.turns : [];
   } catch {
     return [];
@@ -18630,7 +18672,7 @@ var SquadState = class {
   turns;
   members = /* @__PURE__ */ new Map();
   constructor(opts) {
-    this.journalPath = journalPathFor(opts.homeDir ?? os16.homedir(), opts.sessionId);
+    this.journalPath = journalPathFor(opts.homeDir ?? os17.homedir(), opts.sessionId);
     this.turns = loadJournal(this.journalPath);
     if (opts.auto) this.setAuto(opts.auto);
   }
@@ -18717,8 +18759,8 @@ var SquadState = class {
   }
   persist() {
     try {
-      fs18.mkdirSync(path23.dirname(this.journalPath), { recursive: true, mode: 448 });
-      fs18.writeFileSync(this.journalPath, JSON.stringify({ turns: this.turns }), { mode: 384 });
+      fs19.mkdirSync(path24.dirname(this.journalPath), { recursive: true, mode: 448 });
+      fs19.writeFileSync(this.journalPath, JSON.stringify({ turns: this.turns }), { mode: 384 });
     } catch {
     }
   }
@@ -19234,16 +19276,16 @@ function getCurrentUsage2(historyDir) {
 var import_node_child_process4 = require("child_process");
 
 // src/agents/codex/local-token.ts
-var fs20 = __toESM(require("fs"));
-var os18 = __toESM(require("os"));
-var path25 = __toESM(require("path"));
+var fs21 = __toESM(require("fs"));
+var os19 = __toESM(require("os"));
+var path26 = __toESM(require("path"));
 function codexCredentialsPath() {
-  return path25.join(os18.homedir(), ".codex", "auth.json");
+  return path26.join(os19.homedir(), ".codex", "auth.json");
 }
 async function extractLocalCodexToken() {
   const file = codexCredentialsPath();
-  if (!fs20.existsSync(file)) return null;
-  const credential = fs20.readFileSync(file, "utf8").trim();
+  if (!fs21.existsSync(file)) return null;
+  const credential = fs21.readFileSync(file, "utf8").trim();
   if (credential.length === 0) return null;
   return { method: "oauth", credential, source: "flat-file" };
 }
@@ -19484,7 +19526,7 @@ function augmentNpmGlobalBin(os74) {
     if (result.status !== 0) return;
     const prefix = result.stdout.toString().trim();
     if (!prefix) return;
-    const binDir = os74.id === "win32" ? prefix : path26.join(prefix, "bin");
+    const binDir = os74.id === "win32" ? prefix : path27.join(prefix, "bin");
     os74.augmentPath([binDir]);
   } catch {
   }
@@ -19569,7 +19611,7 @@ var import_node_child_process9 = require("child_process");
 // src/agents/coderabbit/installer.ts
 var import_node_child_process7 = require("child_process");
 var import_node_fs6 = require("fs");
-var path28 = __toESM(require("path"));
+var path29 = __toESM(require("path"));
 
 // src/commands/host/os-packages.ts
 var import_node_child_process6 = require("child_process");
@@ -19683,7 +19725,7 @@ function writeUnzipShim(os74, runner) {
   const python = ["python3", "python"].find((p2) => runner.which(p2));
   if (!python) return null;
   const dir = os74.scratchPath("codeam-cr-prereq");
-  const shim = path28.join(dir, "unzip");
+  const shim = path29.join(dir, "unzip");
   const script = `#!/bin/sh
 set -e
 archive=""
@@ -19833,9 +19875,9 @@ async function ensureCoderabbitInstalled(os74, deps = {}) {
 
 // src/agents/coderabbit/link.ts
 var import_node_child_process8 = require("child_process");
-var fs22 = __toESM(require("fs"));
-var os20 = __toESM(require("os"));
-var path29 = __toESM(require("path"));
+var fs23 = __toESM(require("fs"));
+var os21 = __toESM(require("os"));
+var path30 = __toESM(require("path"));
 
 // src/agents/strategy.ts
 function validateNonEmptyCredential(token) {
@@ -19844,12 +19886,12 @@ function validateNonEmptyCredential(token) {
 
 // src/agents/coderabbit/link.ts
 function authPath() {
-  return path29.join(os20.homedir(), ".coderabbit", "auth.json");
+  return path30.join(os21.homedir(), ".coderabbit", "auth.json");
 }
 async function extractLocalCoderabbitToken() {
   const file = authPath();
-  if (!fs22.existsSync(file)) return null;
-  const credential = fs22.readFileSync(file, "utf8").trim();
+  if (!fs23.existsSync(file)) return null;
+  const credential = fs23.readFileSync(file, "utf8").trim();
   if (credential.length === 0) return null;
   return { method: "oauth", credential, source: "flat-file" };
 }
@@ -20193,39 +20235,39 @@ CodeRabbit review timed out after ${Math.round(
 };
 
 // src/agents/cursor/history.ts
-var fs23 = __toESM(require("fs"));
-var os21 = __toESM(require("os"));
-var path30 = __toESM(require("path"));
+var fs24 = __toESM(require("fs"));
+var os22 = __toESM(require("os"));
+var path31 = __toESM(require("path"));
 var import_node_crypto6 = require("crypto");
-var HISTORY_ROOT = path30.join(os21.homedir(), ".cursor", "projects");
-var CURSOR_HOME = path30.join(os21.homedir(), ".cursor");
+var HISTORY_ROOT = path31.join(os22.homedir(), ".cursor", "projects");
+var CURSOR_HOME = path31.join(os22.homedir(), ".cursor");
 var STORE_FILES = ["store.db", "store.db-wal", "store.db-shm"];
 function acpSessionDir(sessionId) {
-  return path30.join(CURSOR_HOME, "acp-sessions", sessionId);
+  return path31.join(CURSOR_HOME, "acp-sessions", sessionId);
 }
 function nativeStoreDir(cwd, sessionId) {
-  const chatsRoot = path30.join(CURSOR_HOME, "chats");
+  const chatsRoot = path31.join(CURSOR_HOME, "chats");
   let buckets = [];
   try {
-    buckets = fs23.readdirSync(chatsRoot);
+    buckets = fs24.readdirSync(chatsRoot);
   } catch {
   }
   for (const b of buckets) {
-    const candidate = path30.join(chatsRoot, b, sessionId);
-    if (fs23.existsSync(path30.join(candidate, "store.db"))) return candidate;
+    const candidate = path31.join(chatsRoot, b, sessionId);
+    if (fs24.existsSync(path31.join(candidate, "store.db"))) return candidate;
   }
-  const computed = path30.join(chatsRoot, (0, import_node_crypto6.createHash)("md5").update(cwd).digest("hex"), sessionId);
-  return fs23.existsSync(computed) ? computed : null;
+  const computed = path31.join(chatsRoot, (0, import_node_crypto6.createHash)("md5").update(cwd).digest("hex"), sessionId);
+  return fs24.existsSync(computed) ? computed : null;
 }
 function copyStoreFiles(srcDir, dstDir) {
-  fs23.mkdirSync(dstDir, { recursive: true });
+  fs24.mkdirSync(dstDir, { recursive: true });
   for (const f of STORE_FILES) {
-    const dst = path30.join(dstDir, f);
-    if (fs23.existsSync(dst)) fs23.rmSync(dst, { force: true });
+    const dst = path31.join(dstDir, f);
+    if (fs24.existsSync(dst)) fs24.rmSync(dst, { force: true });
   }
   for (const f of STORE_FILES) {
-    const src = path30.join(srcDir, f);
-    if (fs23.existsSync(src)) fs23.copyFileSync(src, path30.join(dstDir, f));
+    const src = path31.join(srcDir, f);
+    if (fs24.existsSync(src)) fs24.copyFileSync(src, path31.join(dstDir, f));
   }
 }
 function bridgeNativeToAcp(cwd, sessionId) {
@@ -20237,8 +20279,8 @@ function bridgeNativeToAcp(cwd, sessionId) {
     }
     const dst = acpSessionDir(sessionId);
     copyStoreFiles(src, dst);
-    fs23.writeFileSync(
-      path30.join(dst, "meta.json"),
+    fs24.writeFileSync(
+      path31.join(dst, "meta.json"),
       JSON.stringify({ schemaVersion: 1, cwd })
     );
     log.info("cursor", `baton bridge native\u2192acp ok (${sessionId.slice(0, 8)})`);
@@ -20249,11 +20291,11 @@ function bridgeNativeToAcp(cwd, sessionId) {
 function bridgeAcpToNative(cwd, sessionId) {
   try {
     const src = acpSessionDir(sessionId);
-    if (!fs23.existsSync(path30.join(src, "store.db"))) {
+    if (!fs24.existsSync(path31.join(src, "store.db"))) {
       log.warn("cursor", `baton bridge: no acp store for ${sessionId.slice(0, 8)} \u2014 skip`);
       return;
     }
-    const dst = nativeStoreDir(cwd, sessionId) ?? path30.join(CURSOR_HOME, "chats", (0, import_node_crypto6.createHash)("md5").update(cwd).digest("hex"), sessionId);
+    const dst = nativeStoreDir(cwd, sessionId) ?? path31.join(CURSOR_HOME, "chats", (0, import_node_crypto6.createHash)("md5").update(cwd).digest("hex"), sessionId);
     copyStoreFiles(src, dst);
     log.info("cursor", `baton bridge acp\u2192native ok (${sessionId.slice(0, 8)})`);
   } catch (err) {
@@ -20264,26 +20306,26 @@ function encodeCursorCwd(cwd) {
   return cwd.replace(/^[/\\]+/, "").replace(/[/\\:]/g, "-");
 }
 function resolveHistoryFile3(cwd, sessionId, root = HISTORY_ROOT) {
-  const rel = path30.join("agent-transcripts", sessionId, `${sessionId}.jsonl`);
-  const primary = path30.join(root, encodeCursorCwd(cwd), rel);
-  if (fs23.existsSync(primary)) return primary;
+  const rel = path31.join("agent-transcripts", sessionId, `${sessionId}.jsonl`);
+  const primary = path31.join(root, encodeCursorCwd(cwd), rel);
+  if (fs24.existsSync(primary)) return primary;
   let entries2;
   try {
-    entries2 = fs23.readdirSync(root, { withFileTypes: true });
+    entries2 = fs24.readdirSync(root, { withFileTypes: true });
   } catch {
     return null;
   }
   for (const e of entries2) {
     if (!e.isDirectory()) continue;
-    const candidate = path30.join(root, e.name, rel);
-    if (fs23.existsSync(candidate)) return candidate;
+    const candidate = path31.join(root, e.name, rel);
+    if (fs24.existsSync(candidate)) return candidate;
   }
   return null;
 }
 function resolveHistoryDir3(cwd) {
-  if (!fs23.existsSync(HISTORY_ROOT)) return null;
-  const dir = path30.join(HISTORY_ROOT, encodeCursorCwd(cwd));
-  return fs23.existsSync(dir) ? dir : null;
+  if (!fs24.existsSync(HISTORY_ROOT)) return null;
+  const dir = path31.join(HISTORY_ROOT, encodeCursorCwd(cwd));
+  return fs24.existsSync(dir) ? dir : null;
 }
 function extractText2(content) {
   if (!Array.isArray(content)) return "";
@@ -20296,7 +20338,7 @@ function unwrapUserQuery(text) {
 function parseHistoryFile3(filePath) {
   let raw;
   try {
-    raw = fs23.readFileSync(filePath, "utf8");
+    raw = fs24.readFileSync(filePath, "utf8");
   } catch {
     return [];
   }
@@ -20334,16 +20376,16 @@ function getCurrentUsage3(_historyDir) {
 var import_node_child_process10 = require("child_process");
 
 // src/agents/cursor/local-token.ts
-var fs24 = __toESM(require("fs"));
-var os22 = __toESM(require("os"));
-var path31 = __toESM(require("path"));
+var fs25 = __toESM(require("fs"));
+var os23 = __toESM(require("os"));
+var path32 = __toESM(require("path"));
 function cursorCredentialsPath() {
-  return path31.join(os22.homedir(), ".cursor", "auth.json");
+  return path32.join(os23.homedir(), ".cursor", "auth.json");
 }
 async function extractLocalCursorToken() {
   const file = cursorCredentialsPath();
-  if (!fs24.existsSync(file)) return null;
-  const credential = fs24.readFileSync(file, "utf8").trim();
+  if (!fs25.existsSync(file)) return null;
+  const credential = fs25.readFileSync(file, "utf8").trim();
   if (credential.length === 0) return null;
   return { method: "oauth", credential, source: "flat-file" };
 }
@@ -20588,12 +20630,12 @@ var CursorRuntimeStrategy = class {
 };
 
 // src/agents/aider/history.ts
-var fs25 = __toESM(require("fs"));
-var path32 = __toESM(require("path"));
+var fs26 = __toESM(require("fs"));
+var path33 = __toESM(require("path"));
 var AIDER_HISTORY_FILE = ".aider.chat.history.md";
 function resolveHistoryDir4(cwd) {
-  const candidate = path32.join(cwd, AIDER_HISTORY_FILE);
-  return fs25.existsSync(candidate) ? cwd : null;
+  const candidate = path33.join(cwd, AIDER_HISTORY_FILE);
+  return fs26.existsSync(candidate) ? cwd : null;
 }
 function parseHistoryFile4(_filePath) {
   return [];
@@ -20606,10 +20648,10 @@ function getCurrentUsage4(_historyDir) {
 var import_node_child_process12 = require("child_process");
 
 // src/agents/aider/local-token.ts
-var fs26 = __toESM(require("fs"));
-var os23 = __toESM(require("os"));
-var path33 = __toESM(require("path"));
-var AIDER_CONF_FILE = path33.join(os23.homedir(), ".aider.conf.yml");
+var fs27 = __toESM(require("fs"));
+var os24 = __toESM(require("os"));
+var path34 = __toESM(require("path"));
+var AIDER_CONF_FILE = path34.join(os24.homedir(), ".aider.conf.yml");
 var API_KEY_ENV_VARS = [
   "ANTHROPIC_API_KEY",
   "OPENAI_API_KEY",
@@ -20624,8 +20666,8 @@ async function extractLocalAiderToken() {
       return { method: "api_key", credential: value.trim(), source: "flat-file" };
     }
   }
-  if (fs26.existsSync(AIDER_CONF_FILE)) {
-    const conf = fs26.readFileSync(AIDER_CONF_FILE, "utf8");
+  if (fs27.existsSync(AIDER_CONF_FILE)) {
+    const conf = fs27.readFileSync(AIDER_CONF_FILE, "utf8");
     const match = conf.match(/^api-key:\s*['"]?([^'"\n]+)['"]?\s*$/m);
     if (match) {
       return { method: "api_key", credential: match[1].trim(), source: "flat-file" };
@@ -21021,19 +21063,19 @@ var import_node_crypto7 = require("crypto");
 var import_node_child_process13 = require("child_process");
 
 // src/agents/gemini/local-token.ts
-var fs28 = __toESM(require("fs"));
-var os25 = __toESM(require("os"));
-var path35 = __toESM(require("path"));
+var fs29 = __toESM(require("fs"));
+var os26 = __toESM(require("os"));
+var path36 = __toESM(require("path"));
 function geminiCredentialsPath() {
-  return path35.join(os25.homedir(), ".gemini", "oauth_creds.json");
+  return path36.join(os26.homedir(), ".gemini", "oauth_creds.json");
 }
 function geminiCredentialsPaths() {
   return [geminiCredentialsPath()];
 }
 async function extractLocalGeminiToken() {
   const file = geminiCredentialsPath();
-  if (!fs28.existsSync(file)) return null;
-  const credential = fs28.readFileSync(file, "utf8").trim();
+  if (!fs29.existsSync(file)) return null;
+  const credential = fs29.readFileSync(file, "utf8").trim();
   if (credential.length === 0) return null;
   return { method: "oauth", credential, source: "flat-file" };
 }
@@ -21089,20 +21131,20 @@ function geminiLoginLauncher() {
 }
 
 // src/agents/gemini/history.ts
-var fs29 = __toESM(require("fs"));
-var os26 = __toESM(require("os"));
-var path36 = __toESM(require("path"));
-var GEMINI_ROOT = path36.join(os26.homedir(), ".gemini");
+var fs30 = __toESM(require("fs"));
+var os27 = __toESM(require("os"));
+var path37 = __toESM(require("path"));
+var GEMINI_ROOT = path37.join(os27.homedir(), ".gemini");
 function projectNameForCwd(cwd, root) {
   try {
     const parsed = JSON.parse(
-      fs29.readFileSync(path36.join(root, "projects.json"), "utf8")
+      fs30.readFileSync(path37.join(root, "projects.json"), "utf8")
     );
     const map = parsed.projects;
     if (map && typeof map === "object") {
       if (typeof map[cwd] === "string") return map[cwd];
       try {
-        const rp = fs29.realpathSync(cwd);
+        const rp = fs30.realpathSync(cwd);
         if (typeof map[rp] === "string") return map[rp];
       } catch {
       }
@@ -21111,7 +21153,7 @@ function projectNameForCwd(cwd, root) {
   } catch (err) {
     log.debug("gemini", `projects.json unreadable at ${root} \u2014 using basename fallback`, err);
   }
-  return path36.basename(cwd) || null;
+  return path37.basename(cwd) || null;
 }
 function resolveHistoryDir5(cwd, root = GEMINI_ROOT) {
   const name = projectNameForCwd(cwd, root);
@@ -21119,8 +21161,8 @@ function resolveHistoryDir5(cwd, root = GEMINI_ROOT) {
     log.warn("gemini", `resolveHistoryDir \u2014 could not derive a project name for cwd=${cwd}`);
     return null;
   }
-  const dir = path36.join(root, "tmp", name, "chats");
-  if (!fs29.existsSync(dir)) {
+  const dir = path37.join(root, "tmp", name, "chats");
+  if (!fs30.existsSync(dir)) {
     log.debug("gemini", `resolveHistoryDir \u2014 chats dir not present yet: ${dir} (project=${name})`);
     return null;
   }
@@ -21132,7 +21174,7 @@ function resolveHistoryFile4(cwd, sessionId, root = GEMINI_ROOT) {
   if (!dir) return null;
   let files;
   try {
-    files = fs29.readdirSync(dir).filter((f) => f.startsWith("session-") && f.endsWith(".jsonl"));
+    files = fs30.readdirSync(dir).filter((f) => f.startsWith("session-") && f.endsWith(".jsonl"));
   } catch (err) {
     log.warn("gemini", `resolveHistoryFile \u2014 cannot read chats dir ${dir} (id8=${id8})`, err);
     return null;
@@ -21144,12 +21186,12 @@ function resolveHistoryFile4(cwd, sessionId, root = GEMINI_ROOT) {
   const byName = files.find((f) => id8.length > 0 && f.includes(id8));
   if (byName) {
     log.info("gemini", `resolveHistoryFile \u2014 matched by filename id8=${id8}: ${byName}`);
-    return path36.join(dir, byName);
+    return path37.join(dir, byName);
   }
   for (const f of files) {
-    const full = path36.join(dir, f);
+    const full = path37.join(dir, f);
     try {
-      const firstLine = fs29.readFileSync(full, "utf8").split("\n", 1)[0] ?? "";
+      const firstLine = fs30.readFileSync(full, "utf8").split("\n", 1)[0] ?? "";
       const hdr = JSON.parse(firstLine);
       if (hdr.sessionId === sessionId) {
         log.info("gemini", `resolveHistoryFile \u2014 matched by header sessionId: ${f}`);
@@ -21162,7 +21204,7 @@ function resolveHistoryFile4(cwd, sessionId, root = GEMINI_ROOT) {
   let newest = null;
   for (const f of files) {
     try {
-      const mtime = fs29.statSync(path36.join(dir, f)).mtimeMs;
+      const mtime = fs30.statSync(path37.join(dir, f)).mtimeMs;
       if (!newest || mtime > newest.mtime) newest = { file: f, mtime };
     } catch {
     }
@@ -21171,7 +21213,7 @@ function resolveHistoryFile4(cwd, sessionId, root = GEMINI_ROOT) {
     "gemini",
     `resolveHistoryFile \u2014 no id8=${id8} match among ${files.length} file(s) in ${dir}; falling back to newest=${newest?.file ?? "none"}`
   );
-  return newest ? path36.join(dir, newest.file) : null;
+  return newest ? path37.join(dir, newest.file) : null;
 }
 function extractGeminiText(content) {
   const fromParts = (arr) => Array.isArray(arr) ? arr.map((p2) => {
@@ -21199,7 +21241,7 @@ function isSyntheticGeminiTurn(text) {
 function parseHistoryFile5(filePath) {
   let raw;
   try {
-    raw = fs29.readFileSync(filePath, "utf8");
+    raw = fs30.readFileSync(filePath, "utf8");
   } catch (err) {
     log.warn("gemini", `parseHistoryFile \u2014 cannot read ${filePath}`, err);
     return [];
@@ -21240,7 +21282,7 @@ function parseHistoryFile5(filePath) {
   }
   log.trace(
     "gemini",
-    `parseHistoryFile \u2014 ${out2.length} turn(s) from ${path36.basename(filePath)}` + (malformed > 0 ? ` (${malformed} malformed line(s) skipped)` : "")
+    `parseHistoryFile \u2014 ${out2.length} turn(s) from ${path37.basename(filePath)}` + (malformed > 0 ? ` (${malformed} malformed line(s) skipped)` : "")
   );
   return out2;
 }
@@ -21386,42 +21428,42 @@ var import_node_os4 = require("os");
 var import_node_path6 = require("path");
 
 // src/agents/kimi/history.ts
-var fs30 = __toESM(require("fs"));
-var os27 = __toESM(require("os"));
-var path37 = __toESM(require("path"));
+var fs31 = __toESM(require("fs"));
+var os28 = __toESM(require("os"));
+var path38 = __toESM(require("path"));
 var import_node_crypto8 = require("crypto");
 function kimiHome() {
-  return process.env.KIMI_CODE_HOME || path37.join(os27.homedir(), ".kimi-code");
+  return process.env.KIMI_CODE_HOME || path38.join(os28.homedir(), ".kimi-code");
 }
 function workDirKey(cwd) {
   const hash = (0, import_node_crypto8.createHash)("sha256").update(cwd).digest("hex").slice(0, 12);
-  return `wd_${path37.basename(cwd)}_${hash}`;
+  return `wd_${path38.basename(cwd)}_${hash}`;
 }
 function resolveHistoryDir6(cwd) {
-  const dir = path37.join(kimiHome(), "sessions", workDirKey(cwd));
-  if (!fs30.existsSync(dir)) {
+  const dir = path38.join(kimiHome(), "sessions", workDirKey(cwd));
+  if (!fs31.existsSync(dir)) {
     log.debug("kimi", `resolveHistoryDir \u2014 session bucket not present yet: ${dir}`);
     return null;
   }
   return dir;
 }
-var WIRE_REL = path37.join("agents", "main", "wire.jsonl");
+var WIRE_REL = path38.join("agents", "main", "wire.jsonl");
 function resolveHistoryFile5(cwd, sessionId) {
   const fromIndex = sessionDirFromIndex(sessionId);
   if (fromIndex) {
-    const p2 = path37.join(fromIndex, WIRE_REL);
-    if (fs30.existsSync(p2)) return p2;
+    const p2 = path38.join(fromIndex, WIRE_REL);
+    if (fs31.existsSync(p2)) return p2;
   }
-  const bucket = path37.join(kimiHome(), "sessions", workDirKey(cwd));
-  const computed = path37.join(bucket, sessionId, WIRE_REL);
-  if (fs30.existsSync(computed)) return computed;
+  const bucket = path38.join(kimiHome(), "sessions", workDirKey(cwd));
+  const computed = path38.join(bucket, sessionId, WIRE_REL);
+  if (fs31.existsSync(computed)) return computed;
   const scanned = scanBucketsForSession(sessionId);
   if (scanned) return scanned;
   return null;
 }
 function sessionDirFromIndex(sessionId) {
   try {
-    const raw = fs30.readFileSync(path37.join(kimiHome(), "session_index.jsonl"), "utf8");
+    const raw = fs31.readFileSync(path38.join(kimiHome(), "session_index.jsonl"), "utf8");
     for (const line of raw.split("\n")) {
       if (!line.includes(sessionId)) continue;
       try {
@@ -21437,22 +21479,22 @@ function sessionDirFromIndex(sessionId) {
   return null;
 }
 function scanBucketsForSession(sessionId) {
-  const sessionsRoot = path37.join(kimiHome(), "sessions");
+  const sessionsRoot = path38.join(kimiHome(), "sessions");
   let buckets;
   try {
-    buckets = fs30.readdirSync(sessionsRoot, { withFileTypes: true });
+    buckets = fs31.readdirSync(sessionsRoot, { withFileTypes: true });
   } catch {
     return null;
   }
   for (const b of buckets) {
     if (!b.isDirectory()) continue;
-    const candidate = path37.join(sessionsRoot, b.name, sessionId, WIRE_REL);
-    if (fs30.existsSync(candidate)) return candidate;
+    const candidate = path38.join(sessionsRoot, b.name, sessionId, WIRE_REL);
+    if (fs31.existsSync(candidate)) return candidate;
   }
   return null;
 }
 async function discoverSessionId2(cwd, opts) {
-  const bucket = path37.join(kimiHome(), "sessions", workDirKey(cwd));
+  const bucket = path38.join(kimiHome(), "sessions", workDirKey(cwd));
   const floor = opts.sinceMs - 2e3;
   const deadline = Date.now() + (opts.timeoutMs ?? 15e3);
   for (; ; ) {
@@ -21465,7 +21507,7 @@ async function discoverSessionId2(cwd, opts) {
 function newestSessionSince(bucket, floorMs) {
   let entries2;
   try {
-    entries2 = fs30.readdirSync(bucket, { withFileTypes: true });
+    entries2 = fs31.readdirSync(bucket, { withFileTypes: true });
   } catch {
     return null;
   }
@@ -21475,7 +21517,7 @@ function newestSessionSince(bucket, floorMs) {
     if (!e.isDirectory() || !e.name.startsWith("session_")) continue;
     let mtime;
     try {
-      mtime = fs30.statSync(path37.join(bucket, e.name)).mtimeMs;
+      mtime = fs31.statSync(path38.join(bucket, e.name)).mtimeMs;
     } catch {
       continue;
     }
@@ -21496,7 +21538,7 @@ function joinTextParts(parts) {
 function parseHistoryFile6(filePath) {
   let raw;
   try {
-    raw = fs30.readFileSync(filePath, "utf8");
+    raw = fs31.readFileSync(filePath, "utf8");
   } catch {
     return [];
   }
@@ -21878,7 +21920,7 @@ function parseLinkArgs(args2) {
   if (apiKeyFileArg) {
     const filePath = apiKeyFileArg.slice("--api-key-file=".length);
     try {
-      apiKey = fs31.readFileSync(path38.resolve(filePath), "utf8").trim();
+      apiKey = fs32.readFileSync(path39.resolve(filePath), "utf8").trim();
     } catch (err) {
       throw new Error(`Could not read --api-key-file ${filePath}: ${err.message}`);
     }
@@ -22005,7 +22047,7 @@ async function link(args2 = []) {
     return;
   }
   if (parsed.tokenFile) {
-    const credential = fs31.readFileSync(path38.resolve(parsed.tokenFile), "utf8").trim();
+    const credential = fs32.readFileSync(path39.resolve(parsed.tokenFile), "utf8").trim();
     if (!credential) {
       showError(`--token-file ${parsed.tokenFile} is empty.`);
       process.exit(1);
@@ -22260,13 +22302,13 @@ function makePreviewHeartbeatReaffirm(deps) {
 // src/agents/coderabbit/configure.ts
 var import_node_child_process17 = require("child_process");
 var import_node_fs7 = require("fs");
-var path40 = __toESM(require("path"));
+var path41 = __toESM(require("path"));
 
 // src/agents/coderabbit/oauth.ts
 var import_node_child_process16 = require("child_process");
-var fs32 = __toESM(require("fs"));
-var os28 = __toESM(require("os"));
-var path39 = __toESM(require("path"));
+var fs33 = __toESM(require("fs"));
+var os29 = __toESM(require("os"));
+var path40 = __toESM(require("path"));
 function parseCoderabbitAuthEvent(line) {
   const l = line.replace(/\x1b\[[0-9;?]*[A-Za-z]/g, "").trim();
   if (!l || l[0] !== "{") return null;
@@ -22315,8 +22357,8 @@ function resolvePython() {
 function spawnCoderabbitLoginProc(cmd, args2) {
   const python = resolvePython();
   if (python) {
-    const helper = path39.join(os28.tmpdir(), "codeam-cr-pty.py");
-    fs32.writeFileSync(helper, PYTHON_PTY_HELPER, { mode: 420 });
+    const helper = path40.join(os29.tmpdir(), "codeam-cr-pty.py");
+    fs33.writeFileSync(helper, PYTHON_PTY_HELPER, { mode: 420 });
     return (0, import_node_child_process16.spawn)(python, [helper, cmd, ...args2], {
       stdio: ["pipe", "pipe", "pipe"],
       env: { ...process.env, TERM: "xterm-256color", COLUMNS: "220", LINES: "50" },
@@ -22427,7 +22469,7 @@ function runCoderabbitOAuthLogin(deps) {
   });
 }
 function coderabbitDir(home) {
-  return path39.join(home ?? os28.homedir(), ".coderabbit");
+  return path40.join(home ?? os29.homedir(), ".coderabbit");
 }
 var NON_CREDENTIAL = /* @__PURE__ */ new Set(["doctor.json", "machine-id"]);
 function snapshotCredentialDir(home) {
@@ -22435,14 +22477,14 @@ function snapshotCredentialDir(home) {
   const snap = {};
   let entries2;
   try {
-    entries2 = fs32.readdirSync(dir, { withFileTypes: true });
+    entries2 = fs33.readdirSync(dir, { withFileTypes: true });
   } catch {
     return snap;
   }
   for (const e of entries2) {
     if (!e.isFile() || NON_CREDENTIAL.has(e.name)) continue;
     try {
-      const st3 = fs32.statSync(path39.join(dir, e.name));
+      const st3 = fs33.statSync(path40.join(dir, e.name));
       snap[e.name] = `${st3.mtimeMs}:${st3.size}`;
     } catch {
     }
@@ -22460,7 +22502,7 @@ function diffCapturedCredential(before, home) {
   }
   if (!best) return null;
   try {
-    return { file: best.file, contents: fs32.readFileSync(path39.join(dir, best.file), "utf8") };
+    return { file: best.file, contents: fs33.readFileSync(path40.join(dir, best.file), "utf8") };
   } catch {
     return null;
   }
@@ -22537,7 +22579,7 @@ function collectChangedFiles(cwd) {
   return [...byPath.values()];
 }
 function restoreCoderabbitOauthBlob(os74, value) {
-  const dir = path40.join(os74.homeDir(), ".coderabbit");
+  const dir = path41.join(os74.homeDir(), ".coderabbit");
   (0, import_node_fs7.mkdirSync)(dir, { recursive: true });
   let file = "auth.json";
   let contents = value.trim();
@@ -22545,13 +22587,13 @@ function restoreCoderabbitOauthBlob(os74, value) {
     try {
       const parsed = JSON.parse(contents);
       if (typeof parsed.file === "string" && typeof parsed.contents === "string") {
-        file = path40.basename(parsed.file);
+        file = path41.basename(parsed.file);
         contents = parsed.contents;
       }
     } catch {
     }
   }
-  (0, import_node_fs7.writeFileSync)(path40.join(dir, file), contents, { mode: 384 });
+  (0, import_node_fs7.writeFileSync)(path41.join(dir, file), contents, { mode: 384 });
 }
 function installFailureMessage(result) {
   return result.error ?? "CodeRabbit CLI could not be installed";
@@ -22567,10 +22609,10 @@ async function configureCoderabbit(input, deps = {}) {
   const home = os74.homeDir();
   os74.augmentPath(
     os74.id === "win32" ? [
-      path40.join(home, ".local", "bin"),
-      path40.join(process.env.APPDATA ?? path40.join(home, "AppData", "Roaming"), "npm"),
-      path40.join(home, "scoop", "shims")
-    ] : [path40.join(home, ".local", "bin"), "/opt/homebrew/bin", "/usr/local/bin"]
+      path41.join(home, ".local", "bin"),
+      path41.join(process.env.APPDATA ?? path41.join(home, "AppData", "Roaming"), "npm"),
+      path41.join(home, "scoop", "shims")
+    ] : [path41.join(home, ".local", "bin"), "/opt/homebrew/bin", "/usr/local/bin"]
   );
   const installed2 = os74.findInPath("coderabbit") !== null;
   const base = () => ({
@@ -22889,9 +22931,9 @@ var import_node_child_process22 = require("child_process");
 var import_node_util7 = require("util");
 
 // src/commands/host/workspace.ts
-var fs34 = __toESM(require("fs"));
-var os30 = __toESM(require("os"));
-var path41 = __toESM(require("path"));
+var fs35 = __toESM(require("fs"));
+var os31 = __toESM(require("os"));
+var path42 = __toESM(require("path"));
 var import_node_child_process20 = require("child_process");
 var import_node_util5 = require("util");
 
@@ -22931,18 +22973,18 @@ function restrictToOwner(filePath) {
 // src/commands/host/workspace.ts
 var execFileP4 = (0, import_node_util5.promisify)(import_node_child_process20.execFile);
 function isAbsolutePathTarget(target) {
-  return path41.isAbsolute(target);
+  return path42.isAbsolute(target);
 }
 function selfHostedWorkspaceRoot() {
-  return path41.join(os30.homedir(), ".codeam", "self-hosted");
+  return path42.join(os31.homedir(), ".codeam", "self-hosted");
 }
 function deployIdFromWorkspace(cwd) {
   if (!cwd) return null;
   const root = selfHostedWorkspaceRoot();
-  const resolved = path41.resolve(cwd);
-  const rel = path41.relative(root, resolved);
-  if (!rel || rel.startsWith("..") || path41.isAbsolute(rel)) return null;
-  const parts = rel.split(path41.sep).filter(Boolean);
+  const resolved = path42.resolve(cwd);
+  const rel = path42.relative(root, resolved);
+  if (!rel || rel.startsWith("..") || path42.isAbsolute(rel)) return null;
+  const parts = rel.split(path42.sep).filter(Boolean);
   if (parts.length !== 1) return null;
   return parts[0];
 }
@@ -23014,15 +23056,15 @@ async function configureGitCredentials(dest, repoRef, cloneToken, provider = "gi
   const isGitlab = provider === "gitlab";
   if (isGitlab ? !gitlabProjectPath(repoRef.trim()) : !githubOwnerRepo(repoRef.trim())) return;
   if (!cloneToken) return;
-  const credFile = path41.join(dest, ".git", "codeam-credentials");
+  const credFile = path42.join(dest, ".git", "codeam-credentials");
   const credLine = isGitlab ? `https://oauth2:${cloneToken}@gitlab.com
 ` : `https://x-access-token:${cloneToken}@github.com
 `;
-  fs34.writeFileSync(credFile, credLine, { mode: 384 });
+  fs35.writeFileSync(credFile, credLine, { mode: 384 });
   restrictToOwner(credFile);
   const env = nonInteractiveGitEnv();
   const git2 = (args2) => execFileP4("git", ["-C", dest, ...args2], { timeout: 3e4, env });
-  const credFilePosix = credFile.split(path41.sep).join("/");
+  const credFilePosix = credFile.split(path42.sep).join("/");
   await git2(["config", "--local", "--replace-all", "credential.helper", ""]).catch(() => {
   });
   await git2([
@@ -23055,17 +23097,17 @@ function maskToken(text, cloneToken) {
 }
 async function prepareWorkspace(repoOrPath, deployId, cloneToken, provider = "github", branch) {
   if (isAbsolutePathTarget(repoOrPath)) {
-    if (!fs34.existsSync(repoOrPath)) {
+    if (!fs35.existsSync(repoOrPath)) {
       throw new Error(`deploy target path does not exist: ${repoOrPath}`);
     }
     return repoOrPath;
   }
-  const dest = path41.join(selfHostedWorkspaceRoot(), deployId);
-  if (fs34.existsSync(path41.join(dest, ".git"))) {
+  const dest = path42.join(selfHostedWorkspaceRoot(), deployId);
+  if (fs35.existsSync(path42.join(dest, ".git"))) {
     if (cloneToken) await configureGitCredentials(dest, repoOrPath, cloneToken, provider);
     return dest;
   }
-  fs34.mkdirSync(selfHostedWorkspaceRoot(), { recursive: true, mode: 448 });
+  fs35.mkdirSync(selfHostedWorkspaceRoot(), { recursive: true, mode: 448 });
   const cloneUrl = repoCloneUrl(repoOrPath, cloneToken, provider);
   const cloneArgs = branch ? ["clone", "--depth", "1", "--branch", branch, cloneUrl, dest] : ["clone", "--depth", "1", cloneUrl, dest];
   try {
@@ -23207,21 +23249,21 @@ function buildZip(cwd, list, outFile) {
 
 // src/scratch/export-registry.ts
 var import_crypto2 = require("crypto");
-var fs38 = __toESM(require("fs"));
-var os31 = __toESM(require("os"));
-var path45 = __toESM(require("path"));
+var fs39 = __toESM(require("fs"));
+var os32 = __toESM(require("os"));
+var path46 = __toESM(require("path"));
 var entries = /* @__PURE__ */ new Map();
 var EXPORT_TTL_MS = 6e5;
 var RETRY_WINDOW_MS = 6e4;
 var EXPORT_PATH_PREFIX = "/.codeam/export/";
-var exportsBaseDir = () => path45.join(os31.homedir(), ".codeam", "exports");
-var exportDir = () => path45.join(exportsBaseDir(), String(process.pid));
+var exportsBaseDir = () => path46.join(os32.homedir(), ".codeam", "exports");
+var exportDir = () => path46.join(exportsBaseDir(), String(process.pid));
 function drop(token) {
   const e = entries.get(token);
   if (!e) return;
   clearTimeout(e.timer);
   entries.delete(token);
-  fs38.rmSync(e.file, { force: true });
+  fs39.rmSync(e.file, { force: true });
 }
 function armExpiry(token, ms) {
   const timer = setTimeout(() => {
@@ -23253,7 +23295,7 @@ function handleExportRequest(req, res) {
   if (req.method !== "GET" || !req.url?.startsWith(EXPORT_PATH_PREFIX)) return false;
   const token = req.url.slice(EXPORT_PATH_PREFIX.length).split("?")[0];
   const e = entries.get(token);
-  if (!e || e.inFlight || !fs38.existsSync(e.file)) {
+  if (!e || e.inFlight || !fs39.existsSync(e.file)) {
     res.statusCode = 404;
     res.end();
     return true;
@@ -23265,7 +23307,7 @@ function handleExportRequest(req, res) {
     "Content-Disposition": 'attachment; filename="project.zip"',
     "Cache-Control": "no-store"
   });
-  const stream = fs38.createReadStream(e.file);
+  const stream = fs39.createReadStream(e.file);
   stream.on("error", () => res.destroy());
   stream.pipe(res);
   res.on("finish", () => {
@@ -23295,16 +23337,16 @@ function purgeExports() {
   const base = exportsBaseDir();
   let names;
   try {
-    names = fs38.readdirSync(base);
+    names = fs39.readdirSync(base);
   } catch {
     return;
   }
   for (const name of names) {
-    const abs = path45.join(base, name);
+    const abs = path46.join(base, name);
     try {
-      const st3 = fs38.lstatSync(abs);
+      const st3 = fs39.lstatSync(abs);
       const stale = st3.isDirectory() && /^\d+$/.test(name) ? Number(name) === process.pid || !isPidAlive(Number(name)) : Date.now() - st3.mtimeMs > EXPORT_TTL_MS;
-      if (stale) fs38.rmSync(abs, { recursive: true, force: true });
+      if (stale) fs39.rmSync(abs, { recursive: true, force: true });
     } catch {
     }
   }
@@ -23441,16 +23483,16 @@ async function spawnNamedTunnel(bin, token, port) {
 }
 
 // src/services/preview/port-registry.ts
-var fs40 = __toESM(require("fs"));
-var os33 = __toESM(require("os"));
-var path47 = __toESM(require("path"));
+var fs41 = __toESM(require("fs"));
+var os34 = __toESM(require("os"));
+var path48 = __toESM(require("path"));
 var import_child_process15 = require("child_process");
 function registryPath2() {
-  return path47.join(os33.homedir(), ".codeam", "preview-ports.json");
+  return path48.join(os34.homedir(), ".codeam", "preview-ports.json");
 }
 function readRegistry() {
   try {
-    const raw = fs40.readFileSync(registryPath2(), "utf8");
+    const raw = fs41.readFileSync(registryPath2(), "utf8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object") return parsed;
   } catch {
@@ -23460,10 +23502,10 @@ function readRegistry() {
 function writeRegistry(reg) {
   try {
     const file = registryPath2();
-    fs40.mkdirSync(path47.dirname(file), { recursive: true });
+    fs41.mkdirSync(path48.dirname(file), { recursive: true });
     const tmp = `${file}.tmp`;
-    fs40.writeFileSync(tmp, JSON.stringify(reg), "utf8");
-    fs40.renameSync(tmp, file);
+    fs41.writeFileSync(tmp, JSON.stringify(reg), "utf8");
+    fs41.renameSync(tmp, file);
   } catch (err) {
     log.warn("preview", `port-registry write failed: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -23529,7 +23571,7 @@ function reclaimOwnOrphanPort(port) {
 
 // src/services/preview/host-allow.ts
 var import_fs3 = require("fs");
-var path48 = __toESM(require("path"));
+var path49 = __toESM(require("path"));
 var NEXT_ALLOWED_ORIGINS = [
   "*.trycloudflare.com",
   "*.preview.codeagent-mobile.com",
@@ -23549,7 +23591,7 @@ var MARKER_DIR = ".codeam";
 var MARKER_FILE = "preview-host-allow.json";
 var ORIG_INFIX = ".codeam-orig";
 function markerPath(cwd) {
-  return path48.join(cwd, MARKER_DIR, MARKER_FILE);
+  return path49.join(cwd, MARKER_DIR, MARKER_FILE);
 }
 async function fileExists(p2) {
   try {
@@ -23562,13 +23604,13 @@ async function fileExists(p2) {
 async function findConfigFile(cwd, framework) {
   const base = CONFIG_BASENAMES[framework];
   for (const ext of CONFIG_EXTS) {
-    if (await fileExists(path48.join(cwd, `${base}${ext}`))) return `${base}${ext}`;
+    if (await fileExists(path49.join(cwd, `${base}${ext}`))) return `${base}${ext}`;
   }
   return null;
 }
 async function dependsOn(cwd, pkgName) {
   try {
-    const raw = await import_fs3.promises.readFile(path48.join(cwd, "package.json"), "utf8");
+    const raw = await import_fs3.promises.readFile(path49.join(cwd, "package.json"), "utf8");
     const pkg = JSON.parse(raw);
     return !!(pkg.dependencies?.[pkgName] ?? pkg.devDependencies?.[pkgName]);
   } catch {
@@ -23576,11 +23618,11 @@ async function dependsOn(cwd, pkgName) {
   }
 }
 async function isEsmConfig(cwd, configFile) {
-  const ext = path48.extname(configFile);
+  const ext = path49.extname(configFile);
   if (ext === ".mjs" || ext === ".mts" || ext === ".ts") return true;
   if (ext === ".cjs") return false;
   try {
-    const raw = await import_fs3.promises.readFile(path48.join(cwd, "package.json"), "utf8");
+    const raw = await import_fs3.promises.readFile(path49.join(cwd, "package.json"), "utf8");
     return JSON.parse(raw).type === "module";
   } catch {
     return false;
@@ -23671,7 +23713,7 @@ async function isOurShim(abs) {
   }
 }
 async function writeMarker(cwd, marker) {
-  await import_fs3.promises.mkdir(path48.join(cwd, MARKER_DIR), { recursive: true });
+  await import_fs3.promises.mkdir(path49.join(cwd, MARKER_DIR), { recursive: true });
   await import_fs3.promises.writeFile(markerPath(cwd), JSON.stringify(marker, null, 2), "utf8");
 }
 async function readMarker(cwd) {
@@ -23686,9 +23728,9 @@ async function restorePreviewHostAllow(cwd) {
   const marker = await readMarker(cwd);
   if (!marker) return;
   try {
-    const configAbs = path48.join(cwd, marker.configFile);
+    const configAbs = path49.join(cwd, marker.configFile);
     if (marker.backupFile) {
-      const backupAbs = path48.join(cwd, marker.backupFile);
+      const backupAbs = path49.join(cwd, marker.backupFile);
       if (await fileExists(backupAbs)) {
         await import_fs3.promises.rm(configAbs, { force: true });
         await import_fs3.promises.rename(backupAbs, configAbs);
@@ -23721,26 +23763,26 @@ async function applyPreviewHostAllow(cwd) {
     }
     if (!framework) return;
     if (existing) {
-      const ext = path48.extname(existing);
+      const ext = path49.extname(existing);
       const origBasename = `${CONFIG_BASENAMES[framework]}${ORIG_INFIX}${ext}`;
-      if (await isOurShim(path48.join(cwd, existing))) {
-        const origAbs = path48.join(cwd, origBasename);
+      if (await isOurShim(path49.join(cwd, existing))) {
+        const origAbs = path49.join(cwd, origBasename);
         if (!await fileExists(origAbs) || await isOurShim(origAbs)) {
           log.warn("preview", `host-allow: ${existing} is a leftover shim with no original \u2014 skipped`);
           return;
         }
-        await import_fs3.promises.rm(path48.join(cwd, existing), { force: true });
-        await import_fs3.promises.rename(origAbs, path48.join(cwd, existing));
+        await import_fs3.promises.rm(path49.join(cwd, existing), { force: true });
+        await import_fs3.promises.rename(origAbs, path49.join(cwd, existing));
         log.info("preview", `host-allow: restored ${existing} from a leftover ${origBasename}`);
       }
       const esm = await isEsmConfig(cwd, existing);
-      await import_fs3.promises.rename(path48.join(cwd, existing), path48.join(cwd, origBasename));
-      await import_fs3.promises.writeFile(path48.join(cwd, existing), shimFor(framework, origBasename, esm), "utf8");
+      await import_fs3.promises.rename(path49.join(cwd, existing), path49.join(cwd, origBasename));
+      await import_fs3.promises.writeFile(path49.join(cwd, existing), shimFor(framework, origBasename, esm), "utf8");
       await writeMarker(cwd, { framework, configFile: existing, backupFile: origBasename });
       log.info("preview", `host-allow: wrapped ${existing} (${framework}) for tunnel access`);
     } else {
       const configFile = `${CONFIG_BASENAMES[framework]}.mjs`;
-      await import_fs3.promises.writeFile(path48.join(cwd, configFile), shimFor(framework, null, true), "utf8");
+      await import_fs3.promises.writeFile(path49.join(cwd, configFile), shimFor(framework, null, true), "utf8");
       await writeMarker(cwd, { framework, configFile, backupFile: null });
       log.info("preview", `host-allow: created ${configFile} (${framework}) for tunnel access`);
     }
@@ -23750,8 +23792,8 @@ async function applyPreviewHostAllow(cwd) {
 }
 
 // src/services/preview/build-heal.ts
-var fs42 = __toESM(require("fs"));
-var path49 = __toESM(require("path"));
+var fs43 = __toESM(require("fs"));
+var path50 = __toESM(require("path"));
 var BUILD_MARKER_NAME = "BUILD_ID";
 var DEFAULT_DEBOUNCE_MS = 1500;
 var DEFAULT_MAX_RESTARTS = 3;
@@ -23760,7 +23802,7 @@ function isBuildHealSupported(framework) {
 }
 function defaultWatchDir(dir, onEvent) {
   try {
-    const w3 = fs42.watch(dir, { persistent: false }, (_eventType, filename) => onEvent(filename));
+    const w3 = fs43.watch(dir, { persistent: false }, (_eventType, filename) => onEvent(filename));
     w3.on("error", () => {
       try {
         w3.close();
@@ -23783,7 +23825,7 @@ function resetBuildHealState(sessionId) {
 }
 function readMarker2(markerPath5) {
   try {
-    return fs42.readFileSync(markerPath5, "utf8").trim();
+    return fs43.readFileSync(markerPath5, "utf8").trim();
   } catch {
     return null;
   }
@@ -23792,8 +23834,8 @@ function watchForBuildClobber(deps) {
   const watchDir = deps.watchDir ?? defaultWatchDir;
   const debounceMs = deps.debounceMs ?? DEFAULT_DEBOUNCE_MS;
   const maxRestarts = deps.maxRestarts ?? DEFAULT_MAX_RESTARTS;
-  const nextDir = path49.join(deps.cwd, ".next");
-  const markerPath5 = path49.join(nextDir, BUILD_MARKER_NAME);
+  const nextDir = path50.join(deps.cwd, ".next");
+  const markerPath5 = path50.join(nextDir, BUILD_MARKER_NAME);
   let stopped = false;
   let debounceTimer = null;
   let dirUnwatch = null;
@@ -23815,6 +23857,7 @@ function watchForBuildClobber(deps) {
     if (stopped) return;
     const current2 = readMarker2(markerPath5);
     if (current2 === lastKnownMarker) return;
+    if (current2 === null) return;
     lastKnownMarker = current2;
     const count = (healRestartCounts.get(deps.sessionId) ?? 0) + 1;
     healRestartCounts.set(deps.sessionId, count);
@@ -23851,12 +23894,12 @@ function watchForBuildClobber(deps) {
       if (filename === null || filename === BUILD_MARKER_NAME) onMarkerTouched();
     });
   };
-  if (fs42.existsSync(nextDir)) {
+  if (fs43.existsSync(nextDir)) {
     attachDirWatch();
   } else {
     cwdUnwatch = watchDir(deps.cwd, (filename) => {
       if (stopped || dirUnwatch) return;
-      if ((filename === ".next" || filename === null) && fs42.existsSync(nextDir)) {
+      if ((filename === ".next" || filename === null) && fs43.existsSync(nextDir)) {
         cwdUnwatch?.();
         cwdUnwatch = null;
         attachDirWatch();
@@ -23956,7 +23999,7 @@ function quoteIfNeeded(value) {
 
 // src/services/preview/expo.ts
 var http6 = __toESM(require("http"));
-var path51 = __toESM(require("path"));
+var path52 = __toESM(require("path"));
 var EXPO_PACKAGER_PROXY_URL_ENV = "EXPO_PACKAGER_PROXY_URL";
 function stripExpoTunnelFlag(args2) {
   return args2.filter((a) => a !== "--tunnel" && !a.startsWith("--tunnel="));
@@ -23965,7 +24008,7 @@ function ensureExpoPortArg(command2, args2, port) {
   const hasPort = args2.some((a) => a === "--port" || a.startsWith("--port="));
   if (hasPort) return [...args2];
   const out2 = [...args2];
-  if (path51.basename(command2) === "npm" && !out2.includes("--")) out2.push("--");
+  if (path52.basename(command2) === "npm" && !out2.includes("--")) out2.push("--");
   out2.push("--port", String(port));
   return out2;
 }
@@ -24593,8 +24636,8 @@ function isJsInstallCommand(cmd, args2) {
 }
 
 // src/services/preview/script-candidates.ts
-var fs46 = __toESM(require("fs"));
-var path54 = __toESM(require("path"));
+var fs47 = __toESM(require("fs"));
+var path55 = __toESM(require("path"));
 var EXCLUDE_RE = /(^|:)(deploy|publish|release|build|test|e2e|lint|format|typecheck|type-check|clean|prebuild|postinstall|preinstall|prepare|install|migrate|seed|db|prisma|codegen|storybook-build)(:|$)/i;
 var EXCLUDE_BODY_RE = /\b(run:android|run:ios|gradlew|fastlane|xcodebuild|eas build|eas submit)\b/i;
 var MAX_APPS = 40;
@@ -24612,7 +24655,7 @@ function frameworkFor(pkg, body) {
 }
 function readPkg(file) {
   try {
-    return JSON.parse(fs46.readFileSync(file, "utf8"));
+    return JSON.parse(fs47.readFileSync(file, "utf8"));
   } catch {
     return null;
   }
@@ -24622,7 +24665,7 @@ function expandGlob(root, pattern) {
   if (!clean.endsWith("/*")) return [clean];
   const base = clean.slice(0, -2);
   try {
-    return fs46.readdirSync(path54.join(root, base), { withFileTypes: true }).filter((d3) => d3.isDirectory() && !d3.name.startsWith(".") && d3.name !== "node_modules").map((d3) => path54.join(base, d3.name));
+    return fs47.readdirSync(path55.join(root, base), { withFileTypes: true }).filter((d3) => d3.isDirectory() && !d3.name.startsWith(".") && d3.name !== "node_modules").map((d3) => path55.join(base, d3.name));
   } catch {
     return [];
   }
@@ -24631,7 +24674,7 @@ function workspaceDirs(root, rootPkg) {
   const ws = rootPkg?.workspaces;
   const patterns = Array.isArray(ws) ? ws : ws?.packages ?? [];
   try {
-    const pnpm = fs46.readFileSync(path54.join(root, "pnpm-workspace.yaml"), "utf8");
+    const pnpm = fs47.readFileSync(path55.join(root, "pnpm-workspace.yaml"), "utf8");
     for (const m of pnpm.matchAll(/^\s*-\s*['"]?([^'"\n]+)['"]?\s*$/gm)) patterns.push(m[1]);
   } catch {
   }
@@ -24642,14 +24685,14 @@ function workspaceDirs(root, rootPkg) {
 }
 function listScriptCandidates(root) {
   const out2 = [];
-  const rootPkg = readPkg(path54.join(root, "package.json"));
+  const rootPkg = readPkg(path55.join(root, "package.json"));
   const add = (pkg, appDir) => {
     for (const [script, body] of Object.entries(pkg.scripts ?? {})) {
       if (out2.length >= MAX_CANDIDATES) return;
       if (EXCLUDE_RE.test(script) || EXCLUDE_BODY_RE.test(body)) continue;
       const fw = frameworkFor(pkg, body);
       out2.push({
-        app: pkg.name ?? (appDir === "." ? path54.basename(root) : appDir),
+        app: pkg.name ?? (appDir === "." ? path55.basename(root) : appDir),
         appDir,
         script,
         body,
@@ -24663,8 +24706,8 @@ function listScriptCandidates(root) {
   };
   if (rootPkg) add(rootPkg, ".");
   for (const dir of workspaceDirs(root, rootPkg)) {
-    const pkg = readPkg(path54.join(root, dir, "package.json"));
-    if (pkg) add(pkg, dir.split(path54.sep).join("/"));
+    const pkg = readPkg(path55.join(root, dir, "package.json"));
+    if (pkg) add(pkg, dir.split(path55.sep).join("/"));
   }
   return out2;
 }
@@ -24896,7 +24939,7 @@ function acquire(inst) {
 async function setupStandalone(ctx, rec) {
   const named = await resolveNamedTunnel(
     { sessionId: ctx.sessionId, pluginId: ctx.pluginId, pluginAuthToken: ctx.pluginAuthToken ?? "" },
-    (c2) => fetchNamedPreviewTunnel({ pluginId: c2.pluginId, pluginAuthToken: c2.pluginAuthToken })
+    fetchNamedPreviewTunnel
   );
   if (!named || rec.cancelled) throw new Error("EXPORT_TUNNEL_UNAVAILABLE");
   const server = http8.createServer((req, res) => {
@@ -25416,31 +25459,31 @@ async function readActivePreviewMarker(cwd, homeDir2) {
 }
 
 // src/agents/acp/guardrail-config.ts
-var fs51 = __toESM(require("fs"));
-var path59 = __toESM(require("path"));
-var os36 = __toESM(require("os"));
+var fs52 = __toESM(require("fs"));
+var path60 = __toESM(require("path"));
+var os37 = __toESM(require("os"));
 var current = null;
-function guardrailConfigPath(homeDir2 = os36.homedir()) {
-  return path59.join(homeDir2, ".codeam", "guardrails.json");
+function guardrailConfigPath(homeDir2 = os37.homedir()) {
+  return path60.join(homeDir2, ".codeam", "guardrails.json");
 }
-function loadGuardrailPolicy(homeDir2 = os36.homedir()) {
+function loadGuardrailPolicy(homeDir2 = os37.homedir()) {
   try {
-    current = normalizeGuardrailPolicy(JSON.parse(fs51.readFileSync(guardrailConfigPath(homeDir2), "utf8")));
+    current = normalizeGuardrailPolicy(JSON.parse(fs52.readFileSync(guardrailConfigPath(homeDir2), "utf8")));
   } catch {
     current = { ...DEFAULT_GUARDRAIL_POLICY };
   }
   return current;
 }
-function getGuardrailPolicy(homeDir2 = os36.homedir()) {
+function getGuardrailPolicy(homeDir2 = os37.homedir()) {
   return current ?? loadGuardrailPolicy(homeDir2);
 }
-function setGuardrailPolicy(raw, homeDir2 = os36.homedir()) {
+function setGuardrailPolicy(raw, homeDir2 = os37.homedir()) {
   const next = normalizeGuardrailPolicy(raw);
   current = next;
   try {
     const p2 = guardrailConfigPath(homeDir2);
-    fs51.mkdirSync(path59.dirname(p2), { recursive: true });
-    fs51.writeFileSync(p2, JSON.stringify(next, null, 2));
+    fs52.mkdirSync(path60.dirname(p2), { recursive: true });
+    fs52.writeFileSync(p2, JSON.stringify(next, null, 2));
   } catch {
   }
   return next;
@@ -25456,22 +25499,22 @@ function shouldOfferOneMRecovery(opts) {
 }
 
 // src/commands/host/house-proxy-config.ts
-var fs52 = __toESM(require("fs"));
-var os37 = __toESM(require("os"));
-var path60 = __toESM(require("path"));
+var fs53 = __toESM(require("fs"));
+var os38 = __toESM(require("os"));
+var path61 = __toESM(require("path"));
 function houseProxyConfigPath() {
-  return path60.join(os37.homedir(), ".codeam", "house-proxy.json");
+  return path61.join(os38.homedir(), ".codeam", "house-proxy.json");
 }
 var DEPLOY_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
 function deployHouseProxyConfigPath(deployId) {
   if (!DEPLOY_ID_RE.test(deployId) || deployId.includes("..")) return null;
-  return path60.join(os37.homedir(), ".codeam", "house-proxy", `${deployId}.json`);
+  return path61.join(os38.homedir(), ".codeam", "house-proxy", `${deployId}.json`);
 }
 function writeJson0600(file, value) {
-  fs52.mkdirSync(path60.dirname(file), { recursive: true, mode: 448 });
+  fs53.mkdirSync(path61.dirname(file), { recursive: true, mode: 448 });
   const tmp = `${file}.tmp-${process.pid}`;
-  fs52.writeFileSync(tmp, JSON.stringify(value, null, 2), { encoding: "utf8", mode: 384 });
-  fs52.renameSync(tmp, file);
+  fs53.writeFileSync(tmp, JSON.stringify(value, null, 2), { encoding: "utf8", mode: 384 });
+  fs53.renameSync(tmp, file);
   restrictToOwner(file);
 }
 function persistHouseProxyConfig(config, deployId) {
@@ -25488,7 +25531,7 @@ function persistHouseProxyConfig(config, deployId) {
 }
 function clearHouseProxyConfig(deployId) {
   try {
-    fs52.rmSync(houseProxyConfigPath(), { force: true });
+    fs53.rmSync(houseProxyConfigPath(), { force: true });
     const perDeploy = deployId ? deployHouseProxyConfigPath(deployId) : null;
     if (perDeploy) writeJson0600(perDeploy, { none: true });
   } catch {
@@ -25511,12 +25554,12 @@ function houseProxyTokenExpiring(token, nowSec, windowSec = HOUSE_PROXY_REFRESH_
 }
 function persistedConfigFile(deployId) {
   const perDeploy = deployId ? deployHouseProxyConfigPath(deployId) : null;
-  const file = perDeploy && fs52.existsSync(perDeploy) ? perDeploy : houseProxyConfigPath();
-  return fs52.existsSync(file) ? file : null;
+  const file = perDeploy && fs53.existsSync(perDeploy) ? perDeploy : houseProxyConfigPath();
+  return fs53.existsSync(file) ? file : null;
 }
 function readConfigObject(file) {
   try {
-    const parsed = JSON.parse(fs52.readFileSync(file, "utf8"));
+    const parsed = JSON.parse(fs53.readFileSync(file, "utf8"));
     return typeof parsed === "object" && parsed !== null ? parsed : null;
   } catch {
     return null;
@@ -25549,8 +25592,8 @@ function rewriteHouseProxyToken(deployId, freshToken) {
 function readHouseProxyChildEnv(deployId) {
   try {
     const perDeploy = deployId ? deployHouseProxyConfigPath(deployId) : null;
-    const file = perDeploy && fs52.existsSync(perDeploy) ? perDeploy : houseProxyConfigPath();
-    const raw = fs52.readFileSync(file, "utf8");
+    const file = perDeploy && fs53.existsSync(perDeploy) ? perDeploy : houseProxyConfigPath();
+    const raw = fs53.readFileSync(file, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed !== "object" || parsed === null) return {};
     const o = parsed;
@@ -25660,9 +25703,9 @@ function pickHouseProxyEnv(env) {
 }
 
 // src/lib/provider-routing.ts
-var fs53 = __toESM(require("fs"));
-var os38 = __toESM(require("os"));
-var path61 = __toESM(require("path"));
+var fs54 = __toESM(require("fs"));
+var os39 = __toESM(require("os"));
+var path62 = __toESM(require("path"));
 var PROVIDER_BASE_URL_ENV_KEYS = [
   "ANTHROPIC_BASE_URL",
   "OPENAI_BASE_URL",
@@ -25684,15 +25727,15 @@ function redactUrlToOrigin(raw) {
   }
 }
 function readOpencodeProviderOrigins(opts = {}) {
-  const home = opts.homeDir ?? os38.homedir();
-  const readFile8 = opts.readFile ?? ((f) => fs53.readFileSync(f, "utf8"));
+  const home = opts.homeDir ?? os39.homedir();
+  const readFile8 = opts.readFile ?? ((f) => fs54.readFileSync(f, "utf8"));
   const candidates = [];
   if (opts.cwd) {
-    candidates.push(path61.join(opts.cwd, "opencode.json"), path61.join(opts.cwd, "opencode.jsonc"));
+    candidates.push(path62.join(opts.cwd, "opencode.json"), path62.join(opts.cwd, "opencode.jsonc"));
   }
   candidates.push(
-    path61.join(home, ".config", "opencode", "opencode.json"),
-    path61.join(home, ".config", "opencode", "opencode.jsonc")
+    path62.join(home, ".config", "opencode", "opencode.json"),
+    path62.join(home, ".config", "opencode", "opencode.jsonc")
   );
   const out2 = [];
   const seen2 = /* @__PURE__ */ new Set();
@@ -26027,19 +26070,19 @@ function adapterExitMessage(opts) {
 
 // src/services/preview/start-orchestrator.ts
 var import_child_process20 = require("child_process");
-var fs56 = __toESM(require("fs"));
-var path64 = __toESM(require("path"));
+var fs57 = __toESM(require("fs"));
+var path65 = __toESM(require("path"));
 var import_which3 = __toESM(require("which"));
 
 // src/services/project-env/index.ts
 var import_fs6 = require("fs");
-var path63 = __toESM(require("path"));
+var path64 = __toESM(require("path"));
 
 // src/beads/project-key.ts
 var import_child_process19 = require("child_process");
 var crypto2 = __toESM(require("crypto"));
-var fs54 = __toESM(require("fs"));
-var path62 = __toESM(require("path"));
+var fs55 = __toESM(require("fs"));
+var path63 = __toESM(require("path"));
 function normalizeOrigin(raw) {
   const trimmed = raw.trim();
   if (!trimmed) return null;
@@ -26065,17 +26108,17 @@ function normalizeOrigin(raw) {
   return `${host2}/${pathPart}`;
 }
 function findRepoRoot(cwd) {
-  let dir = path62.resolve(cwd);
+  let dir = path63.resolve(cwd);
   const seen2 = /* @__PURE__ */ new Set();
   for (let i = 0; i < 256; i++) {
     if (seen2.has(dir)) return null;
     seen2.add(dir);
     try {
-      const stat3 = fs54.statSync(path62.join(dir, ".git"), { throwIfNoEntry: false });
+      const stat3 = fs55.statSync(path63.join(dir, ".git"), { throwIfNoEntry: false });
       if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
     } catch {
     }
-    const parent = path62.dirname(dir);
+    const parent = path63.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -26086,7 +26129,7 @@ var _execSeam3 = {
     const out2 = (0, import_child_process19.execFileSync)(file, args2, opts);
     return typeof out2 === "string" ? out2 : out2.toString("utf8");
   },
-  realpath: (p2) => fs54.realpathSync(p2)
+  realpath: (p2) => fs55.realpathSync(p2)
 };
 function readOrigin(cwd) {
   try {
@@ -26115,7 +26158,7 @@ function deriveProjectIdentity(cwd = process.cwd()) {
   } catch {
   }
   const hash = crypto2.createHash("sha256").update(real).digest("hex");
-  return { projectKey: `path:${hash}`, projectLabel: path62.basename(real) || "project" };
+  return { projectKey: `path:${hash}`, projectLabel: path63.basename(real) || "project" };
 }
 
 // src/services/project-env/index.ts
@@ -26128,7 +26171,7 @@ async function readIfExists(p2) {
 }
 async function syncProjectEnvUp(cwd, ctx) {
   if (!ctx.pluginAuthToken) return;
-  const content = await readIfExists(path63.join(cwd, ".env"));
+  const content = await readIfExists(path64.join(cwd, ".env"));
   if (content == null) return;
   try {
     const { projectKey, projectLabel } = deriveProjectIdentity(cwd);
@@ -26150,7 +26193,7 @@ async function syncProjectEnvUp(cwd, ctx) {
 }
 async function restoreProjectEnvIfMissing(cwd, ctx) {
   if (!ctx.pluginAuthToken) return false;
-  const envPath = path63.join(cwd, ".env");
+  const envPath = path64.join(cwd, ".env");
   if (await readIfExists(envPath) != null) return false;
   try {
     const { projectKey, projectLabel } = deriveProjectIdentity(cwd);
@@ -26161,7 +26204,7 @@ async function restoreProjectEnvIfMissing(cwd, ctx) {
       projectKey
     });
     if (!stored) return false;
-    const tmp = path63.join(cwd, ".env.codeam-restore.tmp");
+    const tmp = path64.join(cwd, ".env.codeam-restore.tmp");
     await import_fs6.promises.writeFile(tmp, stored.content, { encoding: "utf8", mode: 384 });
     await import_fs6.promises.rename(tmp, envPath);
     log.info("project-env", `restored .env (${stored.keyCount} vars) for ${projectLabel}`);
@@ -26925,8 +26968,8 @@ function normalizeDetectionForSpawn(detection, cwd) {
   if (args2.length === 0) return detection;
   const binName = args2[0];
   if (binName.startsWith("-")) return detection;
-  const binPath = path64.join(cwd, "node_modules", ".bin", binName);
-  if (!fs56.existsSync(binPath)) return detection;
+  const binPath = path65.join(cwd, "node_modules", ".bin", binName);
+  if (!fs57.existsSync(binPath)) return detection;
   return {
     ...detection,
     command: binPath,
@@ -27273,7 +27316,7 @@ async function bringUpPublicUrl(ctx, tunnelPort) {
       pluginId: ctx.projectEnvAuth?.pluginId ?? "",
       pluginAuthToken: ctx.projectEnvAuth?.pluginAuthToken ?? ""
     },
-    (c2) => fetchNamedPreviewTunnel({ pluginId: c2.pluginId, pluginAuthToken: c2.pluginAuthToken })
+    fetchNamedPreviewTunnel
   );
   const namedToken = named?.token;
   const namedHostname = named?.hostname;
@@ -27339,9 +27382,9 @@ async function bringUpPublicUrl(ctx, tunnelPort) {
 
 // src/beads/bd-adapter.ts
 var import_child_process21 = require("child_process");
-var fs57 = __toESM(require("fs"));
-var os39 = __toESM(require("os"));
-var path65 = __toESM(require("path"));
+var fs58 = __toESM(require("fs"));
+var os40 = __toESM(require("os"));
+var path66 = __toESM(require("path"));
 var BD_PACKAGE = "@beads/bd";
 function resolveBundledBdBinary() {
   return _resolveSeam.resolveBundled();
@@ -27353,11 +27396,11 @@ function _defaultResolveBundled() {
   } catch {
     return null;
   }
-  const binDir = path65.join(path65.dirname(pkgJsonPath), "bin");
+  const binDir = path66.join(path66.dirname(pkgJsonPath), "bin");
   const binaryName = process.platform === "win32" ? "bd.exe" : "bd";
-  const binaryPath = path65.join(binDir, binaryName);
+  const binaryPath = path66.join(binDir, binaryName);
   try {
-    fs57.accessSync(binaryPath, fs57.constants.F_OK);
+    fs58.accessSync(binaryPath, fs58.constants.F_OK);
     return binaryPath;
   } catch {
     return null;
@@ -27367,13 +27410,13 @@ function resolveBdOnPath() {
   return _resolveSeam.resolveOnPath();
 }
 function _defaultResolveOnPath() {
-  const dirs = (process.env.PATH ?? "").split(path65.delimiter).filter(Boolean);
+  const dirs = (process.env.PATH ?? "").split(path66.delimiter).filter(Boolean);
   const candidates = process.platform === "win32" ? ["bd.exe", "bd.cmd", "bd"] : ["bd"];
   for (const dir of dirs) {
     for (const candidate of candidates) {
-      const full = path65.join(dir, candidate);
+      const full = path66.join(dir, candidate);
       try {
-        fs57.accessSync(full, fs57.constants.F_OK);
+        fs58.accessSync(full, fs58.constants.F_OK);
         return full;
       } catch {
       }
@@ -27458,7 +27501,7 @@ var BdAdapter = class {
     const env = { ...process.env };
     if (!env.HOME) {
       try {
-        const home = os39.homedir();
+        const home = os40.homedir();
         if (home) env.HOME = home;
       } catch {
       }
@@ -27548,9 +27591,9 @@ function coerceIssue(row, projectKey) {
 
 // src/beads/provisioner.ts
 var import_child_process24 = require("child_process");
-var fs59 = __toESM(require("fs"));
-var os41 = __toESM(require("os"));
-var path67 = __toESM(require("path"));
+var fs60 = __toESM(require("fs"));
+var os42 = __toESM(require("os"));
+var path68 = __toESM(require("path"));
 
 // src/beads/install-bd.ts
 var import_child_process22 = require("child_process");
@@ -27615,9 +27658,9 @@ async function installBd(platform3 = process.platform) {
 
 // src/beads/install-dolt.ts
 var import_child_process23 = require("child_process");
-var fs58 = __toESM(require("fs"));
-var os40 = __toESM(require("os"));
-var path66 = __toESM(require("path"));
+var fs59 = __toESM(require("fs"));
+var os41 = __toESM(require("os"));
+var path67 = __toESM(require("path"));
 var DOLT_INSTALL_SH_URL = "https://github.com/dolthub/dolt/releases/latest/download/install.sh";
 var DOLT_MSI_URL = "https://github.com/dolthub/dolt/releases/latest/download/dolt-windows-amd64.msi";
 function resolveDoltInstallStrategy(platform3) {
@@ -27706,14 +27749,14 @@ async function installDoltToDir(targetDir, platform3 = process.platform, arch2 =
   return result;
 }
 var _doltPathSeam = {
-  homedir: () => os40.homedir(),
+  homedir: () => os41.homedir(),
   getPath: () => process.env.PATH ?? "",
   setPath: (p2) => {
     process.env.PATH = p2;
   },
   exists: (p2) => {
     try {
-      fs58.accessSync(p2, fs58.constants.F_OK);
+      fs59.accessSync(p2, fs59.constants.F_OK);
       return true;
     } catch {
       return false;
@@ -27724,7 +27767,7 @@ function doltBinaryNames(platform3) {
   return platform3 === "win32" ? ["dolt.exe", "dolt.cmd", "dolt"] : ["dolt"];
 }
 function knownDoltDirs(platform3) {
-  const P3 = platform3 === "win32" ? path66.win32 : path66.posix;
+  const P3 = platform3 === "win32" ? path67.win32 : path67.posix;
   const home = _doltPathSeam.homedir();
   if (platform3 === "win32") {
     return [
@@ -27740,7 +27783,7 @@ function knownDoltDirs(platform3) {
   ].filter(Boolean);
 }
 function ensureDoltResolvable(platform3 = process.platform) {
-  const P3 = platform3 === "win32" ? path66.win32 : path66.posix;
+  const P3 = platform3 === "win32" ? path67.win32 : path67.posix;
   const delim = platform3 === "win32" ? ";" : ":";
   const names = doltBinaryNames(platform3);
   const pathDirs = _doltPathSeam.getPath().split(delim).filter(Boolean);
@@ -27917,10 +27960,10 @@ var _provisionSeam = {
   /** Does the project's git remote carry Dolt data (`refs/dolt/data`)? */
   remoteHasDoltData,
   /** Throwaway cwd for a user-level-only `bd setup` (see GLOBAL_ONLY_RECIPES). */
-  makeSetupCwd: () => fs59.mkdtempSync(path67.join(os41.tmpdir(), "codeam-bd-setup-")),
+  makeSetupCwd: () => fs60.mkdtempSync(path68.join(os42.tmpdir(), "codeam-bd-setup-")),
   removeSetupCwd: (dir) => {
     try {
-      fs59.rmSync(dir, { recursive: true, force: true });
+      fs60.rmSync(dir, { recursive: true, force: true });
     } catch {
     }
   }
@@ -27942,17 +27985,17 @@ function remoteHasDoltData(cwd) {
 }
 var _linkSeam = {
   platform: () => process.platform,
-  homedir: () => os41.homedir(),
+  homedir: () => os42.homedir(),
   isWritableDir: (dir) => {
     try {
-      fs59.accessSync(dir, fs59.constants.W_OK);
+      fs60.accessSync(dir, fs60.constants.W_OK);
       return true;
     } catch {
       return false;
     }
   },
   ensureDir: (dir) => {
-    fs59.mkdirSync(dir, { recursive: true });
+    fs60.mkdirSync(dir, { recursive: true });
   },
   /**
    * A directory to symlink `bd` into so the AGENT's shell + Claude Code's
@@ -27973,9 +28016,9 @@ var _linkSeam = {
    * which `linkBdOntoPath` creates if missing.
    */
   cliBinDir: () => {
-    const pathDirs = (process.env.PATH ?? "").split(path67.delimiter).filter(Boolean);
+    const pathDirs = (process.env.PATH ?? "").split(path68.delimiter).filter(Boolean);
     const home = _linkSeam.homedir();
-    const localBin = home ? path67.join(home, ".local", "bin") : null;
+    const localBin = home ? path68.join(home, ".local", "bin") : null;
     if (localBin) {
       try {
         _linkSeam.ensureDir(localBin);
@@ -27985,16 +28028,16 @@ var _linkSeam = {
     const candidates = [];
     if (localBin) candidates.push(localBin);
     try {
-      candidates.push(path67.dirname(process.execPath));
+      candidates.push(path68.dirname(process.execPath));
     } catch {
     }
     candidates.push("/usr/local/bin");
     const entry = process.argv[1];
     if (entry) {
       try {
-        candidates.push(path67.dirname(fs59.realpathSync(entry)));
+        candidates.push(path68.dirname(fs60.realpathSync(entry)));
       } catch {
-        candidates.push(path67.dirname(entry));
+        candidates.push(path68.dirname(entry));
       }
     }
     const onPathWritable = candidates.find(
@@ -28006,20 +28049,20 @@ var _linkSeam = {
   /** Current symlink target at `linkPath`, or null when absent / not a link. */
   readlink: (linkPath) => {
     try {
-      return fs59.readlinkSync(linkPath);
+      return fs60.readlinkSync(linkPath);
     } catch {
       return null;
     }
   },
-  unlink: (linkPath) => fs59.unlinkSync(linkPath),
-  symlink: (target, linkPath) => fs59.symlinkSync(target, linkPath)
+  unlink: (linkPath) => fs60.unlinkSync(linkPath),
+  symlink: (target, linkPath) => fs60.symlinkSync(target, linkPath)
 };
 function linkBdOntoPath(binaryPath) {
   if (_linkSeam.platform() === "win32") return;
   const binDir = _linkSeam.cliBinDir();
   if (!binDir) return;
   _linkSeam.ensureDir(binDir);
-  const linkPath = path67.join(binDir, "bd");
+  const linkPath = path68.join(binDir, "bd");
   if (linkPath === binaryPath) return;
   const current2 = _linkSeam.readlink(linkPath);
   if (current2 === binaryPath) return;
@@ -28238,16 +28281,16 @@ function dedupeRecipes(agents) {
 }
 function ensureLocalGitExclude(cwd, patterns) {
   try {
-    const gitDir = path67.join(cwd, ".git");
-    if (!fs59.statSync(gitDir).isDirectory()) return;
-    const file = path67.join(gitDir, "info", "exclude");
-    fs59.mkdirSync(path67.dirname(file), { recursive: true });
-    const current2 = fs59.existsSync(file) ? fs59.readFileSync(file, "utf8") : "";
+    const gitDir = path68.join(cwd, ".git");
+    if (!fs60.statSync(gitDir).isDirectory()) return;
+    const file = path68.join(gitDir, "info", "exclude");
+    fs60.mkdirSync(path68.dirname(file), { recursive: true });
+    const current2 = fs60.existsSync(file) ? fs60.readFileSync(file, "utf8") : "";
     const have = new Set(current2.split(/\r?\n/).map((l) => l.trim()));
     const missing = patterns.filter((p2) => !have.has(p2));
     if (missing.length === 0) return;
     const prefix = current2.length > 0 && !current2.endsWith("\n") ? "\n" : "";
-    fs59.appendFileSync(file, `${prefix}# CodeAgent: beads state stays local
+    fs60.appendFileSync(file, `${prefix}# CodeAgent: beads state stays local
 ${missing.join("\n")}
 `);
   } catch {
@@ -28256,7 +28299,7 @@ ${missing.join("\n")}
 
 // src/beads/watcher.ts
 var crypto4 = __toESM(require("crypto"));
-var path68 = __toESM(require("path"));
+var path69 = __toESM(require("path"));
 var API_BASE5 = resolveApiBaseUrl();
 var DEBOUNCE_MS2 = 400;
 var ZERO_SUMMARY = {
@@ -28280,7 +28323,7 @@ var BeadsWatcher = class {
   constructor(opts) {
     this.opts = opts;
     this.bd = opts.adapter ?? new BdAdapter({ cwd: opts.cwd, beadsDir: opts.beadsDir });
-    this.feedPath = opts.feedPath ?? path68.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
+    this.feedPath = opts.feedPath ?? path69.join(opts.cwd ?? process.cwd(), ".beads", "last-touched");
     this.apiBase = opts.apiBaseUrl ?? API_BASE5;
   }
   opts;
@@ -28925,8 +28968,8 @@ function cleanupAttachmentTempFiles() {
 function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
-    const tmpPath = path73.join(os47.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
-    fs65.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
+    const tmpPath = path74.join(os48.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
+    fs66.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     pendingAttachmentFiles.add(tmpPath);
     return tmpPath;
   });
@@ -29172,10 +29215,10 @@ var listFiles = async (ctx, cmd, parsed) => {
   await ctx.relay.sendResult(cmd.id, "completed", result);
 };
 var envReadH = async (ctx, cmd) => {
-  const envPath = path73.join(process.cwd(), ".env");
+  const envPath = path74.join(process.cwd(), ".env");
   await restoreProjectEnvIfMissing(process.cwd(), ctx);
   try {
-    const raw = await fs65.promises.readFile(envPath, "utf8");
+    const raw = await fs66.promises.readFile(envPath, "utf8");
     await ctx.relay.sendResult(cmd.id, "completed", {
       exists: true,
       vars: parseDotenv(raw)
@@ -29204,7 +29247,7 @@ var envParseH = async (ctx, cmd, parsed) => {
   const existing = /* @__PURE__ */ new Map();
   if (!replace) {
     try {
-      const raw = await fs65.promises.readFile(path73.join(process.cwd(), ".env"), "utf8");
+      const raw = await fs66.promises.readFile(path74.join(process.cwd(), ".env"), "utf8");
       for (const v of parseDotenv(raw)) existing.set(v.key, v.value);
     } catch {
     }
@@ -29244,15 +29287,15 @@ var envWriteH = async (ctx, cmd, parsed) => {
     }
     seen2.add(v.key);
   }
-  const envPath = path73.join(process.cwd(), ".env");
-  const tmpPath = path73.join(process.cwd(), ".env.codeam.tmp");
+  const envPath = path74.join(process.cwd(), ".env");
+  const tmpPath = path74.join(process.cwd(), ".env.codeam.tmp");
   try {
-    await fs65.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
-    await fs65.promises.rename(tmpPath, envPath);
+    await fs66.promises.writeFile(tmpPath, serializeDotenv(vars), "utf8");
+    await fs66.promises.rename(tmpPath, envPath);
     await ctx.relay.sendResult(cmd.id, "completed", { ok: true, count: vars.length });
     void syncProjectEnvUp(process.cwd(), ctx);
   } catch (err) {
-    await fs65.promises.rm(tmpPath, { force: true }).catch(() => void 0);
+    await fs66.promises.rm(tmpPath, { force: true }).catch(() => void 0);
     await ctx.relay.sendResult(cmd.id, "failed", { error: err.message });
   }
 };
@@ -29601,9 +29644,9 @@ var CLI_UPDATE_MAX_ATTEMPTS = 3;
 function buildNpmInstallInvocation(opts) {
   const entryScript = opts?.entryScript ?? process.argv[1] ?? "";
   const execPath = opts?.execPath ?? process.execPath;
-  const exists2 = opts?.existsSync ?? fs65.existsSync;
+  const exists2 = opts?.existsSync ?? fs66.existsSync;
   const platform3 = opts?.platform ?? process.platform;
-  const p2 = platform3 === "win32" ? path73.win32 : path73.posix;
+  const p2 = platform3 === "win32" ? path74.win32 : path74.posix;
   const normalized = entryScript.split(/[\\/]/).join("/");
   const marker = "/lib/node_modules/codeam-cli/";
   const markerIdx = normalized.indexOf(marker);
@@ -29622,7 +29665,7 @@ function isPermissionError(stderr) {
 function resolveGlobalNodeModulesDir(opts) {
   const entryScript = opts?.entryScript ?? process.argv[1] ?? "";
   const platform3 = opts?.platform ?? process.platform;
-  const p2 = platform3 === "win32" ? path73.win32 : path73.posix;
+  const p2 = platform3 === "win32" ? path74.win32 : path74.posix;
   const marker = "/lib/node_modules/codeam-cli/";
   const markerIdx = entryScript.split(/[\\/]/).join("/").indexOf(marker);
   if (markerIdx <= 0) return null;
@@ -29632,9 +29675,9 @@ function resolveGlobalNodeModulesDir(opts) {
 var STALE_STAGING_AGE_MS = CLI_UPDATE_INSTALL_TIMEOUT_MS;
 function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
   if (!nodeModulesDir) return 0;
-  const readdirSync18 = deps?.readdirSync ?? fs65.readdirSync;
-  const statSync17 = deps?.statSync ?? fs65.statSync;
-  const rmSync15 = deps?.rmSync ?? fs65.rmSync;
+  const readdirSync18 = deps?.readdirSync ?? fs66.readdirSync;
+  const statSync17 = deps?.statSync ?? fs66.statSync;
+  const rmSync15 = deps?.rmSync ?? fs66.rmSync;
   let removed = 0;
   let entries2;
   try {
@@ -29644,7 +29687,7 @@ function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
   }
   for (const name of entries2) {
     if (!/^\.codeam-cli-/.test(name)) continue;
-    const full = path73.join(nodeModulesDir, name);
+    const full = path74.join(nodeModulesDir, name);
     try {
       const st3 = statSync17(full);
       if (now - st3.mtimeMs < STALE_STAGING_AGE_MS) continue;
@@ -30049,7 +30092,7 @@ ${stdout}`);
   }
 }
 function originPayload(payload, origin) {
-  if (origin !== "agent") return payload;
+  if (origin === void 0 || origin === "user") return payload;
   return { ...payload ?? {}, origin };
 }
 async function resolvePreviewDetection(args2) {
@@ -30271,7 +30314,7 @@ async function restorePreviewAfterRestart(ctx, pluginAuthToken, deps = {}) {
     `restoring the preview that was serving before the restart (${detection.framework})`
   );
   void (deps.start ?? startPreviewFromDetection)(ctx, detection, pluginAuthToken, {
-    origin: "user"
+    origin: "auto"
   });
   return true;
 }
@@ -30303,17 +30346,19 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken, opts = {}) {
       void offerScratchSaveOnce(ctx, pluginAuthToken);
     }
   };
-  return runPreviewStart({
-    sessionId: ctx.sessionId,
-    detection,
-    cwd: process.cwd(),
-    emit: emit2,
-    // Auth for the per-repo `.env` vault restore, performed INSIDE the bring-up
-    // (provisionDeps stage, after the reuse short-circuit) so a fresh session of
-    // this repo picks up its saved `.env` before the dev server spawns. Optional
-    // — a caller without a token just skips the restore.
-    projectEnvAuth: { pluginId: ctx.pluginId, pluginAuthToken }
-  }).then(() => maybeAttachBuildHeal(ctx, pluginAuthToken)).catch((err) => {
+  return withTurnMarker(
+    () => runPreviewStart({
+      sessionId: ctx.sessionId,
+      detection,
+      cwd: process.cwd(),
+      emit: emit2,
+      // Auth for the per-repo `.env` vault restore, performed INSIDE the bring-up
+      // (provisionDeps stage, after the reuse short-circuit) so a fresh session of
+      // this repo picks up its saved `.env` before the dev server spawns. Optional
+      // — a caller without a token just skips the restore.
+      projectEnvAuth: { pluginId: ctx.pluginId, pluginAuthToken }
+    })
+  ).then(() => maybeAttachBuildHeal(ctx, pluginAuthToken)).catch((err) => {
     const message = err instanceof Error ? err.message : String(err);
     log.warn("preview", `start crashed before ready: ${message}`);
     emit2(USER_EVENTS.PREVIEW_ERROR, {
@@ -30334,7 +30379,9 @@ function maybeAttachBuildHeal(ctx, pluginAuthToken) {
         if (!activePreviews.has(ctx.sessionId)) return;
         await killPreview(ctx.sessionId);
         await new Promise((r) => setTimeout(r, 150));
-        void startPreviewFromDetection(ctx, preview.detection, pluginAuthToken);
+        void startPreviewFromDetection(ctx, preview.detection, pluginAuthToken, {
+          origin: "auto"
+        });
       })();
     },
     notify: (message) => {
@@ -30789,7 +30836,7 @@ function resolveTokenValue(args2) {
   if (fileFlag) {
     const path115 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs66.readFileSync(path115, "utf8").trim();
+      const content = fs67.readFileSync(path115, "utf8").trim();
       if (content.length === 0) fail(`--token-file ${path115} is empty`);
       rmIfExistsQuiet(path115);
       return content;
@@ -30883,12 +30930,12 @@ async function claim(token, pluginId, pluginSecretHash) {
   }
 }
 function pairAutoLockPath() {
-  return path74.join(os48.homedir(), ".codeam", "pair-auto.lock");
+  return path75.join(os49.homedir(), ".codeam", "pair-auto.lock");
 }
 var procRoot = "/proc";
 function readProcFile(rel) {
   try {
-    return fs66.readFileSync(path74.join(procRoot, rel), "utf8");
+    return fs67.readFileSync(path75.join(procRoot, rel), "utf8");
   } catch {
     return void 0;
   }
@@ -30909,7 +30956,7 @@ function currentBootId() {
 function readLockRecord(lockPath) {
   let raw;
   try {
-    raw = fs66.readFileSync(lockPath, "utf8");
+    raw = fs67.readFileSync(lockPath, "utf8");
   } catch {
     return void 0;
   }
@@ -30958,7 +31005,7 @@ function isLiveLockHolder(rec) {
 }
 function releaseOwnLock(lockPath) {
   try {
-    if (readLockRecord(lockPath)?.pid === process.pid) fs66.unlinkSync(lockPath);
+    if (readLockRecord(lockPath)?.pid === process.pid) fs67.unlinkSync(lockPath);
   } catch {
   }
 }
@@ -30982,7 +31029,7 @@ function snapshotProcessTree(root) {
   const children = /* @__PURE__ */ new Map();
   let entries2 = [];
   try {
-    entries2 = fs66.readdirSync(procRoot).filter((e) => /^\d+$/.test(e));
+    entries2 = fs67.readdirSync(procRoot).filter((e) => /^\d+$/.test(e));
   } catch {
   }
   for (const e of entries2) {
@@ -31017,18 +31064,18 @@ function signalProcessTree(refs, signal) {
 }
 function daemonLockPath(sessionId) {
   const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
-  return path74.join(os48.homedir(), ".codeam", `daemon-${safe}.lock`);
+  return path75.join(os49.homedir(), ".codeam", `daemon-${safe}.lock`);
 }
 function acquireDaemonLock(sessionId) {
   const lockPath = daemonLockPath(sessionId);
   try {
-    fs66.mkdirSync(path74.dirname(lockPath), { recursive: true });
+    fs67.mkdirSync(path75.dirname(lockPath), { recursive: true });
     try {
-      fs66.writeFileSync(lockPath, ownLockBody(), { flag: "wx" });
+      fs67.writeFileSync(lockPath, ownLockBody(), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
       if (isLiveLockHolder(readLockRecord(lockPath))) return false;
-      fs66.writeFileSync(lockPath, ownLockBody());
+      fs67.writeFileSync(lockPath, ownLockBody());
     }
     const release3 = () => releaseOwnLock(lockPath);
     process.once("exit", release3);
@@ -31048,13 +31095,13 @@ function acquireDaemonLock(sessionId) {
 function acquireSingletonLock() {
   const lockPath = pairAutoLockPath();
   try {
-    fs66.mkdirSync(path74.dirname(lockPath), { recursive: true });
+    fs67.mkdirSync(path75.dirname(lockPath), { recursive: true });
     try {
-      fs66.writeFileSync(lockPath, ownLockBody(), { flag: "wx" });
+      fs67.writeFileSync(lockPath, ownLockBody(), { flag: "wx" });
     } catch (e) {
       if (e.code !== "EEXIST") throw e;
       if (isLiveLockHolder(readLockRecord(lockPath))) return false;
-      fs66.writeFileSync(lockPath, ownLockBody());
+      fs67.writeFileSync(lockPath, ownLockBody());
     }
     process.once("exit", () => releaseOwnLock(lockPath));
     return true;
@@ -31480,7 +31527,7 @@ var AgentService = class _AgentService {
 };
 
 // src/agents/acp/adapters.ts
-var path75 = __toESM(require("path"));
+var path76 = __toESM(require("path"));
 
 // src/agents/kimi/installer.ts
 var import_node_child_process26 = require("child_process");
@@ -31600,13 +31647,13 @@ function resolveBin(pkgName, binName) {
   try {
     const manifestPath = require_.resolve(`${pkgName}/package.json`);
     const manifest = require_(`${pkgName}/package.json`);
-    const pkgDir = path75.dirname(manifestPath);
+    const pkgDir = path76.dirname(manifestPath);
     const bin = manifest.bin;
     if (!bin) return null;
-    if (typeof bin === "string") return path75.resolve(pkgDir, bin);
+    if (typeof bin === "string") return path76.resolve(pkgDir, bin);
     const target = binName ?? Object.keys(bin)[0];
     if (!target || !bin[target]) return null;
-    return path75.resolve(pkgDir, bin[target]);
+    return path76.resolve(pkgDir, bin[target]);
   } catch {
     return null;
   }
@@ -31621,7 +31668,7 @@ function npmAdapterPackageDir(agent) {
   const pkg = NPM_ADAPTER_PACKAGES[agent];
   if (!pkg) return null;
   try {
-    return path75.dirname(require_.resolve(`${pkg}/package.json`));
+    return path76.dirname(require_.resolve(`${pkg}/package.json`));
   } catch {
     return null;
   }
@@ -31801,8 +31848,8 @@ async function resolveAcpAdapterWithRetry(agent, opts = {}) {
 }
 
 // src/agents/acp/prefetch-module-graph.ts
-var fs67 = __toESM(require("fs"));
-var path76 = __toESM(require("path"));
+var fs68 = __toESM(require("fs"));
+var path77 = __toESM(require("path"));
 var LOADABLE_EXT = /* @__PURE__ */ new Set([".js", ".mjs", ".cjs", ".json", ".node"]);
 var DEFAULT_MODULE_GRAPH_LIMITS = {
   maxFiles: 2e3,
@@ -31811,23 +31858,23 @@ var DEFAULT_MODULE_GRAPH_LIMITS = {
   concurrency: 16
 };
 var realFs = {
-  readdir: (dir) => fs67.promises.readdir(dir, { withFileTypes: true }),
-  readFile: (file) => fs67.promises.readFile(file),
-  stat: (file) => fs67.promises.stat(file)
+  readdir: (dir) => fs68.promises.readdir(dir, { withFileTypes: true }),
+  readFile: (file) => fs68.promises.readFile(file),
+  stat: (file) => fs68.promises.stat(file)
 };
 function findPackageDir(dep, fromDir) {
   let dir = fromDir;
   for (; ; ) {
-    const candidate = path76.join(dir, "node_modules", dep);
-    if (fs67.existsSync(path76.join(candidate, "package.json"))) return candidate;
-    const parent = path76.dirname(dir);
+    const candidate = path77.join(dir, "node_modules", dep);
+    if (fs68.existsSync(path77.join(candidate, "package.json"))) return candidate;
+    const parent = path77.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
 }
 function runtimeDependencies(pkgDir) {
   try {
-    const manifest = JSON.parse(fs67.readFileSync(path76.join(pkgDir, "package.json"), "utf8"));
+    const manifest = JSON.parse(fs68.readFileSync(path77.join(pkgDir, "package.json"), "utf8"));
     return Object.keys(manifest.dependencies ?? {});
   } catch {
     return [];
@@ -31846,14 +31893,14 @@ async function packageFiles(pkgDir, fsd, out2, maxFiles) {
     for (const entry of entries2) {
       if (out2.length >= maxFiles) return;
       if (entry.name.startsWith(".")) continue;
-      const full = path76.join(dir, entry.name);
+      const full = path77.join(dir, entry.name);
       if (entry.isDirectory()) {
         if (entry.name !== "node_modules") stack.push(full);
         continue;
       }
       if (!entry.isFile()) continue;
       if (entry.name.endsWith(".d.ts") || entry.name.endsWith(".map")) continue;
-      if (LOADABLE_EXT.has(path76.extname(entry.name))) out2.push(full);
+      if (LOADABLE_EXT.has(path77.extname(entry.name))) out2.push(full);
     }
   }
 }
@@ -31863,7 +31910,7 @@ async function collectModuleGraphFiles(rootPkgDir, limits = DEFAULT_MODULE_GRAPH
   const queue = [rootPkgDir];
   while (queue.length > 0 && files.length < limits.maxFiles) {
     const pkgDir = queue.shift();
-    const key = fs67.existsSync(pkgDir) ? fs67.realpathSync(pkgDir) : pkgDir;
+    const key = fs68.existsSync(pkgDir) ? fs68.realpathSync(pkgDir) : pkgDir;
     if (seen2.has(key)) continue;
     seen2.add(key);
     await packageFiles(pkgDir, fsd, files, limits.maxFiles);
@@ -32009,8 +32056,8 @@ function noteProviderBillingSignal(opts) {
 }
 
 // src/services/history.service.ts
-var fs69 = __toESM(require("fs"));
-var path78 = __toESM(require("path"));
+var fs70 = __toESM(require("fs"));
+var path79 = __toESM(require("path"));
 var https6 = __toESM(require("https"));
 var http10 = __toESM(require("http"));
 var import_zod3 = require("zod");
@@ -32071,7 +32118,7 @@ function parseJsonl(filePath) {
   const messages = [];
   let raw;
   try {
-    raw = fs69.readFileSync(filePath, "utf8");
+    raw = fs70.readFileSync(filePath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       log.warn("history:parseJsonl", `read failed for ${filePath}`, err);
@@ -32231,7 +32278,7 @@ var HistoryService = class _HistoryService {
     // session-start upload answered false, the active-conversation pointer was
     // never re-pointed after a Box wake, and the app opened an empty "New
     // conversation" over the resumed one (QA box, 2026-09-29).
-    path78.join(claudeConfigDir(), "projects", encodeCwd(this.cwd));
+    path79.join(claudeConfigDir(), "projects", encodeCwd(this.cwd));
   }
   /** Set the current Claude conversation ID (extracted from /cost command or session start) */
   setCurrentConversationId(id) {
@@ -32243,7 +32290,7 @@ var HistoryService = class _HistoryService {
   /** Return the current message count in the active conversation. */
   getCurrentMessageCount() {
     if (!this.currentConversationId) return 0;
-    const filePath = path78.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+    const filePath = path79.join(this.projectDir, `${this.currentConversationId}.jsonl`);
     return parseJsonl(filePath).length;
   }
   /**
@@ -32254,7 +32301,7 @@ var HistoryService = class _HistoryService {
     const deadline = Date.now() + timeoutMs;
     while (Date.now() < deadline) {
       if (!this.currentConversationId) return null;
-      const filePath = path78.join(this.projectDir, `${this.currentConversationId}.jsonl`);
+      const filePath = path79.join(this.projectDir, `${this.currentConversationId}.jsonl`);
       const messages = parseJsonl(filePath);
       if (messages.length > previousCount) {
         for (let i = messages.length - 1; i >= previousCount; i--) {
@@ -32281,18 +32328,18 @@ var HistoryService = class _HistoryService {
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     const oneShots = readOneShotConversations(this.cwd);
     try {
-      const files = fs69.readdirSync(dir, { withFileTypes: true }).filter(
-        (e) => e.isFile() && e.name.endsWith(".jsonl") && !oneShots.has(path78.basename(e.name, ".jsonl"))
+      const files = fs70.readdirSync(dir, { withFileTypes: true }).filter(
+        (e) => e.isFile() && e.name.endsWith(".jsonl") && !oneShots.has(path79.basename(e.name, ".jsonl"))
       ).map((e) => {
         try {
-          const stat3 = fs69.statSync(path78.join(dir, e.name));
+          const stat3 = fs70.statSync(path79.join(dir, e.name));
           return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
         } catch {
           return { name: e.name, mtime: 0, birthtime: 0 };
         }
       }).filter((f) => f.birthtime >= cutoff).sort((a, b) => b.mtime - a.mtime);
       if (files.length > 0) {
-        this.currentConversationId = path78.basename(files[0].name, ".jsonl");
+        this.currentConversationId = path79.basename(files[0].name, ".jsonl");
       }
     } catch {
     }
@@ -32326,13 +32373,13 @@ var HistoryService = class _HistoryService {
     const cutoff = this.bootTimeMs - _HistoryService.BIRTHTIME_GRACE_MS;
     let entries2;
     try {
-      entries2 = fs69.readdirSync(dir, { withFileTypes: true });
+      entries2 = fs70.readdirSync(dir, { withFileTypes: true });
     } catch {
       return null;
     }
     const files = entries2.filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => {
       try {
-        const stat3 = fs69.statSync(path78.join(dir, e.name));
+        const stat3 = fs70.statSync(path79.join(dir, e.name));
         return { name: e.name, mtime: stat3.mtimeMs, birthtime: stat3.birthtimeMs };
       } catch {
         return { name: e.name, mtime: 0, birthtime: 0 };
@@ -32341,12 +32388,12 @@ var HistoryService = class _HistoryService {
     if (files.length === 0) return null;
     const targetFile = this.currentConversationId ? `${this.currentConversationId}.jsonl` : files[0].name;
     if (!files.some((f) => f.name === targetFile)) return null;
-    return this.extractUsageFromFile(path78.join(dir, targetFile));
+    return this.extractUsageFromFile(path79.join(dir, targetFile));
   }
   extractUsageFromFile(filePath) {
     let raw;
     try {
-      raw = fs69.readFileSync(filePath, "utf8");
+      raw = fs70.readFileSync(filePath, "utf8");
     } catch {
       return null;
     }
@@ -32398,9 +32445,9 @@ var HistoryService = class _HistoryService {
     let totalCost = 0;
     let files;
     try {
-      files = fs69.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
+      files = fs70.readdirSync(projectDir).filter((f) => f.endsWith(".jsonl")).filter((f) => {
         try {
-          return fs69.statSync(path78.join(projectDir, f)).mtimeMs >= monthStartMs;
+          return fs70.statSync(path79.join(projectDir, f)).mtimeMs >= monthStartMs;
         } catch {
           return false;
         }
@@ -32411,7 +32458,7 @@ var HistoryService = class _HistoryService {
     for (const file of files) {
       let raw;
       try {
-        raw = fs69.readFileSync(path78.join(projectDir, file), "utf8");
+        raw = fs70.readFileSync(path79.join(projectDir, file), "utf8");
       } catch {
         continue;
       }
@@ -32490,7 +32537,7 @@ var HistoryService = class _HistoryService {
     if (this.runtime.resolveHistoryFile) {
       return this.runtime.resolveHistoryFile(this.cwd, sessionId);
     }
-    return path78.join(this.projectDir, `${sessionId}.jsonl`);
+    return path79.join(this.projectDir, `${sessionId}.jsonl`);
   }
   /**
    * Parse a conversation's messages from disk, agent-aware. Claude uses the
@@ -32528,7 +32575,7 @@ var HistoryService = class _HistoryService {
         };
       });
     }
-    return parseJsonl(path78.join(this.projectDir, `${sessionId}.jsonl`));
+    return parseJsonl(path79.join(this.projectDir, `${sessionId}.jsonl`));
   }
   /** One in-flight full upload per conversation — the baton mirror and a
    *  `get_conversation` used to upload the same transcript concurrently. */
@@ -32610,7 +32657,7 @@ var HistoryService = class _HistoryService {
     if (!filePath) return false;
     let mtimeMs;
     try {
-      mtimeMs = fs69.statSync(filePath).mtimeMs;
+      mtimeMs = fs70.statSync(filePath).mtimeMs;
     } catch {
       return false;
     }
@@ -32685,10 +32732,10 @@ var HistoryService = class _HistoryService {
 
 // src/agents/acp/client.ts
 var import_node_child_process28 = require("child_process");
-var fs70 = __toESM(require("fs/promises"));
+var fs71 = __toESM(require("fs/promises"));
 var fsSync = __toESM(require("fs"));
-var os51 = __toESM(require("os"));
-var path80 = __toESM(require("path"));
+var os52 = __toESM(require("os"));
+var path81 = __toESM(require("path"));
 var import_node_stream = require("stream");
 
 // ../../node_modules/@agentclientprotocol/sdk/dist/schema/index.js
@@ -36714,8 +36761,8 @@ function createIdleTimeout(idleMs, makeError, activeIdleMs = idleMs) {
 }
 
 // src/agents/acp/internal-paths.ts
-var path79 = __toESM(require("path"));
-var os50 = __toESM(require("os"));
+var path80 = __toESM(require("path"));
+var os51 = __toESM(require("os"));
 var INTERNAL_TOKENS = [".codeam", "house-claude"];
 var PROSE_ONLY_TOOL_KINDS = /* @__PURE__ */ new Set(["think", "switch_mode"]);
 function isProseOnlyToolKind(kind) {
@@ -36727,13 +36774,13 @@ function textReferencesInternal(text) {
   const scrubbed = text.replace(SELF_HOSTED_WORKSPACE_RE, " ");
   return INTERNAL_TOKENS.some((t2) => scrubbed.includes(t2));
 }
-function pathIsInternal(p2, homeDir2 = os50.homedir()) {
+function pathIsInternal(p2, homeDir2 = os51.homedir()) {
   if (!p2) return false;
-  const abs = path79.resolve(p2);
-  const home = path79.resolve(homeDir2);
-  const within = (root) => abs === root || abs.startsWith(root + path79.sep);
-  if (within(path79.join(home, ".codeam", "self-hosted"))) return false;
-  return within(path79.join(home, ".codeam")) || within(path79.join(home, ".beads")) || abs === path79.join(home, ".codeam-host.log") || abs.includes(`${path79.sep}house-claude${path79.sep}`) || abs.endsWith(`${path79.sep}house-claude`);
+  const abs = path80.resolve(p2);
+  const home = path80.resolve(homeDir2);
+  const within = (root) => abs === root || abs.startsWith(root + path80.sep);
+  if (within(path80.join(home, ".codeam", "self-hosted"))) return false;
+  return within(path80.join(home, ".codeam")) || within(path80.join(home, ".beads")) || abs === path80.join(home, ".codeam-host.log") || abs.includes(`${path80.sep}house-claude${path80.sep}`) || abs.endsWith(`${path80.sep}house-claude`);
 }
 function toolCallReferencesInternal(call, homeDir2) {
   if (call.locations?.some((l) => pathIsInternal(l.path, homeDir2))) return true;
@@ -36881,6 +36928,7 @@ var PROTOCOL_VERSION3 = 1;
 var FATAL_STARTUP_RE = /IneligibleTierError|UNSUPPORTED_CLIENT|no longer supported for Gemini Code Assist|not eligible for Gemini Code Assist|Error authenticating|ProjectIdRequiredError/i;
 var NEWSESSION_TIMEOUT_MS = 12e4;
 var MCP_STARTUP_TIMEOUT_MS = NEWSESSION_TIMEOUT_MS - 3e4;
+var AGENT_ENV_WITHHELD = ["PREVIEW_TUNNEL_TOKEN", "PREVIEW_TUNNEL_HOSTNAME"];
 var LOADSESSION_TIMEOUT_MS = 6e4;
 var PROMPT_IDLE_TIMEOUT_MS = 9e4;
 var PROMPT_ACTIVE_IDLE_TIMEOUT_MS = 6e5;
@@ -37066,6 +37114,7 @@ var AcpClient = class {
       ...this.opts.extraEnv ?? {},
       PATH: augmentedPath
     };
+    for (const key of AGENT_ENV_WITHHELD) delete childEnv[key];
     log.info(
       "acpClient",
       `provider routing ${formatProviderRouting(describeProviderRouting(childEnv, { cwd }), adapter.command)}`
@@ -37865,7 +37914,7 @@ var AcpClient = class {
           throw new RequestError(-32002, GUARDRAIL_SECRET_READ_BLOCK_REASON, { uri: params.path });
         }
         try {
-          const content = await fs70.readFile(params.path, "utf8");
+          const content = await fs71.readFile(params.path, "utf8");
           return applyLineRange(content, params.line ?? null, params.limit ?? null);
         } catch (err) {
           const code = err.code;
@@ -37886,7 +37935,7 @@ var AcpClient = class {
           throw new RequestError(-32002, INTERNAL_BLOCK_REASON, { uri: params.path });
         }
         try {
-          await fs70.writeFile(params.path, params.content, "utf8");
+          await fs71.writeFile(params.path, params.content, "utf8");
           return {};
         } catch (err) {
           const code = err.code;
@@ -37974,30 +38023,30 @@ function applyLineRange(content, line, limit) {
   return { content: lines.slice(start2, end).join("\n") };
 }
 function knownAgentBinaryDirs() {
-  const home = os51.homedir();
+  const home = os52.homedir();
   const out2 = [];
   out2.push("/tmp/codeam-node20/bin");
   for (const root of [
     "/usr/local/share/nvm/versions/node",
-    path80.join(home, ".nvm/versions/node")
+    path81.join(home, ".nvm/versions/node")
   ]) {
     try {
       for (const child of fsSync.readdirSync(root)) {
-        out2.push(path80.join(root, child, "bin"));
+        out2.push(path81.join(root, child, "bin"));
       }
     } catch {
     }
   }
-  out2.push(path80.join(home, ".volta/bin"));
+  out2.push(path81.join(home, ".volta/bin"));
   out2.push("/usr/local/bin");
   out2.push("/usr/bin");
-  out2.push(path80.join(home, ".local/bin"));
-  out2.push(path80.join(home, "bin"));
+  out2.push(path81.join(home, ".local/bin"));
+  out2.push(path81.join(home, "bin"));
   out2.push(...agentInstallBinDirs());
   if (process.platform === "win32") {
     const { LOCALAPPDATA, APPDATA } = process.env;
-    if (LOCALAPPDATA) out2.push(path80.join(LOCALAPPDATA, "cursor-agent"));
-    if (APPDATA) out2.push(path80.join(APPDATA, "npm"));
+    if (LOCALAPPDATA) out2.push(path81.join(LOCALAPPDATA, "cursor-agent"));
+    if (APPDATA) out2.push(path81.join(APPDATA, "npm"));
   }
   return out2.filter((p2) => {
     try {
@@ -38008,7 +38057,7 @@ function knownAgentBinaryDirs() {
   });
 }
 function expandPathForAgentBinaries(existingPath) {
-  const existing = new Set(existingPath.split(path80.delimiter).filter((p2) => p2.length > 0));
+  const existing = new Set(existingPath.split(path81.delimiter).filter((p2) => p2.length > 0));
   const additions = [];
   for (const dir of knownAgentBinaryDirs()) {
     if (!existing.has(dir)) {
@@ -38017,17 +38066,17 @@ function expandPathForAgentBinaries(existingPath) {
     }
   }
   if (additions.length === 0) return existingPath;
-  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path80.delimiter);
+  return [...additions, existingPath].filter((p2) => p2.length > 0).join(path81.delimiter);
 }
 
 // src/commands/host/agent-install.ts
 var import_child_process27 = require("child_process");
-var os52 = __toESM(require("os"));
+var os53 = __toESM(require("os"));
 function runAgentInstallScript(script, opts = {}) {
   const timeoutMs = opts.timeoutMs ?? 18e4;
   const scope = opts.logScope ?? "agent-install";
   return new Promise((resolve13) => {
-    const home = process.env.HOME || os52.homedir();
+    const home = process.env.HOME || os53.homedir();
     const child = (0, import_child_process27.spawn)("sh", ["-c", script], {
       env: { ...process.env, HOME: home },
       stdio: ["ignore", "pipe", "pipe"]
@@ -38289,9 +38338,9 @@ async function performAgentSwitch(deps, rawAgentId, fastPath = {}) {
 }
 
 // src/commands/host/agent-provisioning.ts
-var fs71 = __toESM(require("fs"));
-var os53 = __toESM(require("os"));
-var path81 = __toESM(require("path"));
+var fs72 = __toESM(require("fs"));
+var os54 = __toESM(require("os"));
+var path82 = __toESM(require("path"));
 var PUBLIC_TO_INTERNAL_AGENT = {
   claude_code: "claude",
   claude: "claude",
@@ -38308,22 +38357,22 @@ function toInternalAgentId(publicAgentId) {
   return PUBLIC_TO_INTERNAL_AGENT[publicAgentId] ?? null;
 }
 function ensureDir(dir) {
-  fs71.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs72.mkdirSync(dir, { recursive: true, mode: 448 });
 }
 function writeFile0600(filePath, contents) {
-  ensureDir(path81.dirname(filePath));
-  fs71.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
+  ensureDir(path82.dirname(filePath));
+  fs72.writeFileSync(filePath, contents, { encoding: "utf8", mode: 384 });
   restrictToOwner(filePath);
 }
 function rmIfExists(filePath) {
   try {
-    fs71.rmSync(filePath, { force: true });
+    fs72.rmSync(filePath, { force: true });
   } catch {
   }
 }
 var claudeProvisioner = {
   write(auth, home) {
-    const credentialsJson = path81.join(home, ".claude", ".credentials.json");
+    const credentialsJson = path82.join(home, ".claude", ".credentials.json");
     if (auth.kind === "api_key") {
       rmIfExists(credentialsJson);
       return { ANTHROPIC_API_KEY: auth.value };
@@ -38335,8 +38384,8 @@ var claudeProvisioner = {
     } else {
       rmIfExists(credentialsJson);
     }
-    const claudeJson = path81.join(home, ".claude.json");
-    if (!fs71.existsSync(claudeJson)) {
+    const claudeJson = path82.join(home, ".claude.json");
+    if (!fs72.existsSync(claudeJson)) {
       writeFile0600(
         claudeJson,
         JSON.stringify({ hasCompletedOnboarding: true, customApiKeyResponses: { approved: [] } })
@@ -38347,7 +38396,7 @@ var claudeProvisioner = {
 };
 var codexProvisioner = {
   write(auth, home) {
-    const authJson = path81.join(home, ".codex", "auth.json");
+    const authJson = path82.join(home, ".codex", "auth.json");
     if (auth.kind === "api_key") {
       writeFile0600(authJson, JSON.stringify({ auth_mode: "apikey", OPENAI_API_KEY: auth.value }));
       return { OPENAI_API_KEY: auth.value };
@@ -38370,7 +38419,7 @@ function codexLoginStamp(raw) {
 function keepsFresherCodexLogin(authJsonPath, incoming) {
   let onDisk;
   try {
-    onDisk = fs71.readFileSync(authJsonPath, "utf8");
+    onDisk = fs72.readFileSync(authJsonPath, "utf8");
   } catch {
     return false;
   }
@@ -38381,8 +38430,8 @@ function keepsFresherCodexLogin(authJsonPath, incoming) {
 }
 var geminiProvisioner = {
   write(auth, home) {
-    const settingsJson = path81.join(home, ".gemini", "settings.json");
-    const oauthCreds = path81.join(home, ".gemini", "oauth_creds.json");
+    const settingsJson = path82.join(home, ".gemini", "settings.json");
+    const oauthCreds = path82.join(home, ".gemini", "oauth_creds.json");
     if (auth.kind === "api_key") {
       rmIfExists(oauthCreds);
       writeFile0600(settingsJson, '{"security":{"auth":{"selectedType":"gemini-api-key"}}}');
@@ -38395,7 +38444,7 @@ var geminiProvisioner = {
 };
 var cursorProvisioner = {
   write(auth, home) {
-    const authJson = path81.join(home, ".config", "cursor", "auth.json");
+    const authJson = path82.join(home, ".config", "cursor", "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { CURSOR_API_KEY: auth.value };
@@ -38437,22 +38486,22 @@ max_context_size = 262144
 var kimiProvisioner = {
   write(auth, home) {
     const credentialsFiles = [
-      path81.join(home, ".kimi", "credentials", "kimi-code.json"),
-      path81.join(home, ".kimi-code", "credentials", "kimi-code.json")
+      path82.join(home, ".kimi", "credentials", "kimi-code.json"),
+      path82.join(home, ".kimi-code", "credentials", "kimi-code.json")
     ];
     if (auth.kind === "api_key") {
       credentialsFiles.forEach(rmIfExists);
       return { KIMI_API_KEY: auth.value };
     }
     credentialsFiles.forEach((f) => writeFile0600(f, auth.value));
-    writeFile0600(path81.join(home, ".kimi-code", "config.toml"), KIMI_MANAGED_CONFIG_TOML);
+    writeFile0600(path82.join(home, ".kimi-code", "config.toml"), KIMI_MANAGED_CONFIG_TOML);
     return {};
   }
 };
 var coderabbitProvisioner = {
   write(auth, home) {
-    const dir = path81.join(home, ".coderabbit");
-    const authJson = path81.join(dir, "auth.json");
+    const dir = path82.join(home, ".coderabbit");
+    const authJson = path82.join(dir, "auth.json");
     if (auth.kind === "api_key") {
       rmIfExists(authJson);
       return { CODERABBIT_API_KEY: auth.value };
@@ -38464,13 +38513,13 @@ var coderabbitProvisioner = {
       try {
         const parsed = JSON.parse(value);
         if (typeof parsed.file === "string" && typeof parsed.contents === "string") {
-          file = path81.basename(parsed.file);
+          file = path82.basename(parsed.file);
           contents = parsed.contents;
         }
       } catch {
       }
     }
-    writeFile0600(path81.join(dir, file), contents);
+    writeFile0600(path82.join(dir, file), contents);
     return {};
   }
 };
@@ -38502,7 +38551,7 @@ var UnsupportedAgentError = class extends Error {
     this.agentId = agentId;
   }
 };
-function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os53.homedir()) {
+function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os54.homedir()) {
   const internal = toInternalAgentId(publicAgentId);
   if (!internal) throw new UnsupportedAgentError(publicAgentId);
   const provisioner = PROVISIONERS[internal];
@@ -38511,8 +38560,8 @@ function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os53.homedir(
 }
 
 // src/beads/workflow-hint.ts
-var fs72 = __toESM(require("fs"));
-var path82 = __toESM(require("path"));
+var fs73 = __toESM(require("fs"));
+var path83 = __toESM(require("path"));
 var BEADS_HINT_MARKER = "<!-- codeam:beads-workflow -->";
 var BEADS_HINT = `${BEADS_HINT_MARKER}
 # Beads (bd) \u2014 task tracking + persistent memory (ALWAYS use it)
@@ -38539,11 +38588,11 @@ function ensureBeadsWorkflowHint(homeDir2, file = claudeMemoryFile(homeDir2)) {
   try {
     let existing = "";
     try {
-      existing = fs72.readFileSync(file, "utf8");
+      existing = fs73.readFileSync(file, "utf8");
     } catch {
     }
     if (existing.includes(BEADS_HINT)) return;
-    fs72.mkdirSync(path82.dirname(file), { recursive: true });
+    fs73.mkdirSync(path83.dirname(file), { recursive: true });
     let next;
     const open = existing.indexOf(BEADS_HINT_MARKER);
     const close = open === -1 ? -1 : existing.indexOf(BEADS_HINT_MARKER, open + BEADS_HINT_MARKER.length);
@@ -38556,40 +38605,40 @@ ${BEADS_HINT}
 ` : `${BEADS_HINT}
 `;
     }
-    fs72.writeFileSync(file, next);
+    fs73.writeFileSync(file, next);
   } catch {
   }
 }
 
 // src/agents/agent-standard.ts
-var fs73 = __toESM(require("fs"));
-var path83 = __toESM(require("path"));
-var os54 = __toESM(require("os"));
+var fs74 = __toESM(require("fs"));
+var path84 = __toESM(require("path"));
+var os55 = __toESM(require("os"));
 function ensureAgentStandard(homeDir2, file = claudeMemoryFile(homeDir2)) {
   try {
     let existing = "";
     try {
-      existing = fs73.readFileSync(file, "utf8");
+      existing = fs74.readFileSync(file, "utf8");
     } catch {
     }
     if (existing.includes(AGENT_STANDARD_MARKER)) return;
-    fs73.mkdirSync(path83.dirname(file), { recursive: true });
+    fs74.mkdirSync(path84.dirname(file), { recursive: true });
     const next = existing.trim() ? `${existing.trimEnd()}
 
 ${AGENT_STANDARD_BLOCK}
 ` : `${AGENT_STANDARD_BLOCK}
 `;
-    fs73.writeFileSync(file, next);
+    fs74.writeFileSync(file, next);
   } catch {
   }
 }
 var _agentStandardSeam = {
   isLocalSession: () => isLocalSession(),
-  markerPath: (sessionId) => path83.join(os54.homedir(), ".codeam", "agent-standard", `${sessionId}.done`),
-  exists: (p2) => fs73.existsSync(p2),
+  markerPath: (sessionId) => path84.join(os55.homedir(), ".codeam", "agent-standard", `${sessionId}.done`),
+  exists: (p2) => fs74.existsSync(p2),
   write: (p2) => {
-    fs73.mkdirSync(path83.dirname(p2), { recursive: true });
-    fs73.writeFileSync(p2, "");
+    fs74.mkdirSync(path84.dirname(p2), { recursive: true });
+    fs74.writeFileSync(p2, "");
   }
 };
 function isClaude(agent) {
@@ -39324,15 +39373,15 @@ function withholdTrailingPartialFenceMarker(text) {
 
 // src/agents/acp/onboarding.ts
 var import_child_process28 = require("child_process");
-var fs75 = __toESM(require("fs"));
-var os55 = __toESM(require("os"));
-var path85 = __toESM(require("path"));
+var fs76 = __toESM(require("fs"));
+var os56 = __toESM(require("os"));
+var path86 = __toESM(require("path"));
 var _onboardingSeam = {
-  markerPath: (sessionId) => path85.join(os55.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
-  exists: (p2) => fs75.existsSync(p2),
+  markerPath: (sessionId) => path86.join(os56.homedir(), ".codeam", "welcomed", `${sessionId}.done`),
+  exists: (p2) => fs76.existsSync(p2),
   write: (p2) => {
-    fs75.mkdirSync(path85.dirname(p2), { recursive: true });
-    fs75.writeFileSync(p2, "");
+    fs76.mkdirSync(path86.dirname(p2), { recursive: true });
+    fs76.writeFileSync(p2, "");
   },
   disabled: () => {
     const v = process.env.CODEAM_ONBOARDING_DISABLED;
@@ -39369,7 +39418,7 @@ function resolveRepoName(cwd) {
       if (name) return name;
     }
   }
-  const base = path85.basename(cwd || "");
+  const base = path86.basename(cwd || "");
   if (base && !isUuid(base)) return base;
   return "this project";
 }
@@ -39383,14 +39432,11 @@ function buildOnboardingWelcome(cwd) {
     "- **Smart Composer** \u2014 help crafting and structuring your prompts.",
     "- **Team Spaces** \u2014 share this session with your team, or hand it off to someone else.",
     "",
-    "Found a bug or have feedback? Reach us at:",
-    // EXPLICIT markdown links, not bare URLs. Relying on the app's autolinker
-    // rendered the GitHub bullet as an EMPTY link (the label was consumed, the
-    // href never attached) — a labelled link renders correctly everywhere and
-    // reads better than a raw URL on a phone-width bubble.
-    "- [GitHub issues](https://github.com/edgar-durand/codeagent-mobile-clients/issues)",
-    "- [Discord community](https://discord.gg/Np2pbMrV9f)",
-    "",
+    // ⚠️ No support links here. The first message a new user reads is the
+    // invitation to start; "Found a bug? GitHub issues / Discord" pointed a
+    // non-developer at a developer bug tracker before they had sent a single
+    // task (replay 2026-10-04, PRO user in Malaysia, bead codeagent-sak0).
+    // Help lives in the app (Profile › Help → FAQ + Contact support).
     `Ready when you are \u2014 try **"explain ${repo}"** or **"what should I work on first?"**`
   ].join("\n");
 }
@@ -39772,14 +39818,14 @@ var import_crypto5 = require("crypto");
 
 // src/services/turn-files/git-changeset.ts
 var import_child_process29 = require("child_process");
-var fs77 = __toESM(require("fs/promises"));
+var fs78 = __toESM(require("fs/promises"));
 var import_fs10 = require("fs");
-var path87 = __toESM(require("path"));
+var path88 = __toESM(require("path"));
 
 // src/services/turn-files/review-ignore.ts
 var import_ignore2 = __toESM(require("ignore"));
-var fs76 = __toESM(require("fs"));
-var path86 = __toESM(require("path"));
+var fs77 = __toESM(require("fs"));
+var path87 = __toESM(require("path"));
 var CURATED_REVIEW_IGNORE = [
   // Google Cloud SDK (the incident) — installs a huge python tree.
   "google-cloud-sdk/",
@@ -39823,7 +39869,7 @@ var CURATED_REVIEW_IGNORE = [
 function makeReviewIgnore(repoRoot) {
   const ig = (0, import_ignore2.default)().add(CURATED_REVIEW_IGNORE);
   try {
-    const custom = fs76.readFileSync(path86.join(repoRoot, ".codeam", "reviewignore"), "utf8");
+    const custom = fs77.readFileSync(path87.join(repoRoot, ".codeam", "reviewignore"), "utf8");
     ig.add(custom);
   } catch {
   }
@@ -39858,7 +39904,7 @@ async function collectRepoChangeset(opts) {
   const rows = parseStatus(status2).filter(
     (row) => !isIgnoredFilePath(row.filePath) && !reviewIgnore(row.filePath) && // A socket, FIFO or device node is never a change to review (a
     // `cc-socks/1522.sock` reached the Files tab).
-    isReviewablePath(path87.join(opts.repoRoot, row.filePath))
+    isReviewablePath(path88.join(opts.repoRoot, row.filePath))
   );
   const MAX_CHANGESET_FILES = Math.max(1, Number(process.env.CODEAM_MAX_CHANGESET_FILES ?? 500));
   const truncated = rows.length > MAX_CHANGESET_FILES;
@@ -39875,7 +39921,7 @@ async function collectRepoChangeset(opts) {
     let stats;
     if (!truncated && row.fileStatus === "added" && numstatEntry === void 0) {
       const lineCount = await readUntrackedLineCount(
-        path87.join(opts.repoRoot, row.filePath)
+        path88.join(opts.repoRoot, row.filePath)
       );
       stats = { added: lineCount, removed: 0 };
     } else {
@@ -39906,7 +39952,7 @@ function readUntrackedLineCount(absPath) {
 }
 async function defaultReadUntrackedLineCount(absPath) {
   try {
-    const content = await fs77.readFile(absPath, "utf8");
+    const content = await fs78.readFile(absPath, "utf8");
     let count = 0;
     let pos = -1;
     while ((pos = content.indexOf("\n", pos + 1)) !== -1) {
@@ -40017,8 +40063,8 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (hasGit) {
       out2.push({
         repoRoot: dir,
-        repoPath: path87.relative(workingDir, dir),
-        repoName: path87.basename(dir)
+        repoPath: path88.relative(workingDir, dir),
+        repoName: path88.basename(dir)
       });
       return;
     }
@@ -40026,7 +40072,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
       if (!entry.isDirectory) continue;
       if (entry.name === "node_modules") continue;
       if (entry.name === "dist" || entry.name === "build") continue;
-      await walk2(path87.join(dir, entry.name), depth2 + 1);
+      await walk2(path88.join(dir, entry.name), depth2 + 1);
     }
   }
 }
@@ -40040,8 +40086,8 @@ function isReviewablePath(absPath) {
 }
 
 // src/services/turn-files/files-outbox.ts
-var fs78 = __toESM(require("fs/promises"));
-var path88 = __toESM(require("path"));
+var fs79 = __toESM(require("fs/promises"));
+var path89 = __toESM(require("path"));
 var import_os14 = require("os");
 var HOME_OUTBOX_DIR = ".codeam/outbox";
 var MAX_AGE_MS = 24 * 60 * 60 * 1e3;
@@ -40074,16 +40120,16 @@ var FilesOutbox = class {
   backoffIndex = 0;
   stopped = false;
   constructor(opts) {
-    const base = opts.baseDir ?? path88.join(homeDir(), HOME_OUTBOX_DIR);
-    this.filePath = path88.join(base, `${opts.sessionId}.jsonl`);
+    const base = opts.baseDir ?? path89.join(homeDir(), HOME_OUTBOX_DIR);
+    this.filePath = path89.join(base, `${opts.sessionId}.jsonl`);
     this.post = opts.post;
     this.autoSchedule = opts.autoSchedule !== false;
   }
   /** Persist the entry to disk and trigger a flush. Returns once the
    *  line is durable on disk (not once the POST succeeds). */
   async enqueue(entry) {
-    await fs78.mkdir(path88.dirname(this.filePath), { recursive: true });
-    await fs78.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
+    await fs79.mkdir(path89.dirname(this.filePath), { recursive: true });
+    await fs79.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
     this.backoffIndex = 0;
     if (this.autoSchedule) this.scheduleFlush(0);
   }
@@ -40174,7 +40220,7 @@ var FilesOutbox = class {
   async readAll() {
     let raw = "";
     try {
-      raw = await fs78.readFile(this.filePath, "utf8");
+      raw = await fs79.readFile(this.filePath, "utf8");
     } catch {
       return [];
     }
@@ -40198,12 +40244,12 @@ var FilesOutbox = class {
   async rewrite(entries2) {
     const tmpPath = `${this.filePath}.${process.pid}.tmp`;
     if (entries2.length === 0) {
-      await fs78.unlink(this.filePath).catch(() => void 0);
+      await fs79.unlink(this.filePath).catch(() => void 0);
       return;
     }
     const payload = entries2.map((e) => JSON.stringify(e)).join("\n") + "\n";
-    await fs78.writeFile(tmpPath, payload, "utf8");
-    await fs78.rename(tmpPath, this.filePath);
+    await fs79.writeFile(tmpPath, payload, "utf8");
+    await fs79.rename(tmpPath, this.filePath);
   }
 };
 function applyJitter(ms) {
@@ -40550,48 +40596,6 @@ async function readActiveConversationMarker(cwd, homeDir2) {
   }
 }
 
-// src/services/turn-marker.ts
-var fs80 = __toESM(require("fs"));
-var os57 = __toESM(require("os"));
-var path90 = __toESM(require("path"));
-var depth = 0;
-function codeamHome() {
-  return path90.join(os57.homedir(), ".codeam");
-}
-function turnMarkerPath(pid = process.pid, home = codeamHome()) {
-  return path90.join(home, "turns", String(pid));
-}
-function mark() {
-  try {
-    const file = turnMarkerPath();
-    fs80.mkdirSync(path90.dirname(file), { recursive: true });
-    fs80.writeFileSync(file, String(Date.now()));
-  } catch {
-  }
-}
-function clear() {
-  try {
-    fs80.rmSync(turnMarkerPath(), { force: true });
-  } catch {
-  }
-}
-async function withTurnMarker(fn) {
-  if (depth++ === 0) mark();
-  try {
-    return await fn();
-  } finally {
-    if (--depth === 0) clear();
-  }
-}
-function isProcessMidTurn(pid, home) {
-  if (!pid) return false;
-  try {
-    return fs80.existsSync(turnMarkerPath(pid, home));
-  } catch {
-    return false;
-  }
-}
-
 // src/packs/gates.ts
 var import_node_child_process29 = require("child_process");
 var fs81 = __toESM(require("fs"));
@@ -41822,7 +41826,7 @@ var SHORT_TIMEOUT_MS = 2e4;
 var PREVIEW_TOOLS = [
   {
     name: "start_preview",
-    description: "Open this project's live Preview in the user's CodeAgent app \u2014 the same thing as their Preview button: it installs dependencies if needed, starts the dev server, publishes it on a public URL and switches the user's screen to it. Use it after you change anything visual (UI, styles, layout, copy) so you and the user can check the result, or whenever the user asks to see the app. Returns the public URL (you can curl it) or the exact error. Reuses a preview that is already running. Usually leave the arguments out: the project is detected automatically. Pass command/args/port only if you know the exact dev command.",
+    description: `Open this project's live Preview in the user's CodeAgent app \u2014 the same thing as their Preview button: it installs dependencies if needed, starts the dev server, publishes it on a public URL and switches the user's screen to it. Use it after you change anything visual (UI, styles, layout, copy) so you and the user can check the result, or whenever the user asks to see the app. Returns the public URL (you can curl it) or the exact error. Only give the user a preview link when this tool says the preview is live \u2014 after an error or a "still starting" answer there is NO working link. Reuses a preview that is already running (code changes hot-reload; never stop and start it to refresh). Usually leave the arguments out: the project is detected automatically. Pass command/args/port only if you know the exact dev command.`,
     inputSchema: {
       type: "object",
       properties: {
@@ -41859,7 +41863,7 @@ var PREVIEW_TOOLS = [
   },
   {
     name: "stop_preview",
-    description: "Stop the Preview (dev server + public URL). Only when the user asks, or to restart it cleanly.",
+    description: "Stop the Preview (dev server + public URL). Only when the user asks. Never to apply code changes \u2014 the dev server hot-reloads them; to run a different dev command, call start_preview with that command instead.",
     inputSchema: { type: "object", properties: {}, additionalProperties: false }
   }
 ];
@@ -41919,12 +41923,17 @@ function describeResult(raw) {
       };
     }
     case "starting":
-      return { text: String(r.message ?? "The preview is starting."), isError: false };
+      return {
+        text: `${String(r.message ?? "The preview is starting.")} It is not serving yet, so there is no link to give the user until preview_status says it is running.`,
+        isError: false
+      };
     case "idle":
       return { text: "No preview is running.", isError: false };
     case "error":
       return {
-        text: `Preview failed at ${String(r.stage)}: ${String(r.message)}`,
+        // The agent once answered a failed spawn with "the preview is open, here
+        // is the link" (2026-10-05). Say plainly that nothing is serving.
+        text: `Preview failed at ${String(r.stage)}: ${String(r.message)}. The preview is NOT running \u2014 do not give the user a preview link; tell them what failed.`,
         isError: true
       };
     default:
@@ -42253,6 +42262,8 @@ function mergeWithLocalMcpServers(integrationServers) {
 var http12 = __toESM(require("http"));
 var import_node_crypto14 = require("crypto");
 var START_WAIT_MS = 24e4;
+var MAX_AGENT_RESTARTS = 3;
+var AGENT_RESTART_WINDOW_MS = 10 * 6e4;
 var MAX_SELECTOR = 500;
 var MAX_LABEL = 80;
 var AgentPreviewBridge = class {
@@ -42264,6 +42275,12 @@ var AgentPreviewBridge = class {
   inflight = null;
   lastError = null;
   bound = null;
+  /** When the agent tore the preview down, per session (see MAX_AGENT_RESTARTS). */
+  restarts = /* @__PURE__ */ new Map();
+  now;
+  constructor(opts = {}) {
+    this.now = opts.now ?? Date.now;
+  }
   /** Start the loopback server once. `null` when it could not bind — the
    *  preview tools are then simply absent, never a failed session. */
   listen() {
@@ -42390,6 +42407,7 @@ var AgentPreviewBridge = class {
     const ctx = this.ctx;
     if (!ctx?.pluginAuthToken) return { ok: false, message: "The session is still starting." };
     if (!activePreviews.has(ctx.sessionId)) return { ok: true, message: "No preview was running." };
+    if (!this.takeRestart(ctx.sessionId)) return { ok: false, message: RESTART_CAPPED_MESSAGE };
     await killPreview(ctx.sessionId);
     resetBuildHealState(ctx.sessionId);
     await postPreviewEvent({
@@ -42411,7 +42429,15 @@ var AgentPreviewBridge = class {
   // ─── Internals ─────────────────────────────────────────────────────────
   async launch(ctx, pluginAuthToken, override) {
     this.lastError = null;
-    const already = serving(ctx.sessionId);
+    let already = serving(ctx.sessionId);
+    const wanted = override && detectionFromOverride(override);
+    if (already && wanted && !sameCommand(already.detection, wanted)) {
+      if (!this.takeRestart(ctx.sessionId)) {
+        return { status: "error", stage: "restart_limit", message: RESTART_CAPPED_MESSAGE };
+      }
+      await killPreview(ctx.sessionId);
+      already = null;
+    }
     if (already) {
       await postPreviewEvent({
         sessionId: ctx.sessionId,
@@ -42458,6 +42484,21 @@ var AgentPreviewBridge = class {
     this.lastError = err;
     return { status: "error", ...err };
   }
+  /** Records one agent-driven teardown; false once the window's cap is spent. */
+  takeRestart(sessionId) {
+    const now = this.now();
+    const recent = (this.restarts.get(sessionId) ?? []).filter(
+      (t2) => now - t2 < AGENT_RESTART_WINDOW_MS
+    );
+    if (recent.length >= MAX_AGENT_RESTARTS) {
+      this.restarts.set(sessionId, recent);
+      log.info("agent-preview", `restart cap reached for session=${sessionId}`);
+      return false;
+    }
+    recent.push(now);
+    this.restarts.set(sessionId, recent);
+    return true;
+  }
   async handle(req, res) {
     const reply = (code, body) => {
       res.writeHead(code, { "content-type": "application/json" });
@@ -42500,6 +42541,10 @@ function running(active2, reused) {
     inspector: Boolean(active2.inspector)
   };
 }
+var RESTART_CAPPED_MESSAGE = `The preview was already restarted ${MAX_AGENT_RESTARTS} times in the last ${AGENT_RESTART_WINDOW_MS / 6e4} minutes, so it stays as it is. Dev servers hot-reload: your code changes show up without a restart. If it is genuinely broken, tell the user what you saw.`;
+function sameCommand(a, b) {
+  return a.command === b.command && a.port === b.port && JSON.stringify(a.args ?? []) === JSON.stringify(b.args ?? []);
+}
 function detectionFromOverride(o) {
   if (!o.command || !Number.isInteger(o.port) || o.port <= 0 || o.port > 65535) return null;
   return {
@@ -51224,7 +51269,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.76.21" : null;
+  const current2 = true ? "2.76.23" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -51241,7 +51286,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.76.21" : null;
+  const current2 = true ? "2.76.23" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -51518,12 +51563,13 @@ var path109 = __toESM(require("path"));
 var SELF_UPDATE_PKG = "codeam-cli";
 var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_STARTUP_DELAY_MS = 5e3;
+var SELF_UPDATE_BOOT_QUIET_MS = 10 * 6e4;
 var SELF_UPDATE_DEFER_MAX_MS = 24 * 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
 function currentCliVersion() {
-  return true ? "2.76.21" : null;
+  return true ? "2.76.23" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -51734,7 +51780,7 @@ function signalHostReady(send = process.send?.bind(process)) {
 }
 function defaultDeps() {
   return {
-    ownVersion: true ? "2.76.21" : null,
+    ownVersion: true ? "2.76.23" : null,
     root: cliVersionsRoot(),
     args: process.argv.slice(3),
     execPath: process.execPath,
@@ -52279,6 +52325,8 @@ var HostAgentSupervisor = class {
   /** epoch ms when the CURRENT pending restart was first owed — the ceiling
    *  in {@link SELF_UPDATE_DEFER_MAX_MS} is measured from here. */
   pendingRestartSince = null;
+  /** epoch ms of `start()`; null until then. See {@link SELF_UPDATE_BOOT_QUIET_MS}. */
+  startedAt = null;
   /** Guards the one-shot 'connected' telemetry on the first heartbeat. */
   reportedConnected = false;
   /** Live-metrics collector — stateful across beats (CPU delta + latency). */
@@ -52340,6 +52388,7 @@ var HostAgentSupervisor = class {
   }
   /** Open the control channel (reusing the relay) + start heartbeats. */
   start() {
+    this.startedAt = this.now();
     if (process.env.CODESPACES === "true") {
       log.info("keep-awake", "skipped (codespace \u2014 no physical sleep to prevent)");
     } else if (this.isContainerEnv()) {
@@ -52515,6 +52564,13 @@ var HostAgentSupervisor = class {
   maybeRestartForUpdate(version3) {
     const midTurn = [...this.children.values()].some((c2) => this.isChildMidTurn(c2.proc.pid));
     const fleetBusy = this.fleetLanes.size > 0;
+    if (this.justBootedWithSessions()) {
+      log.info(
+        "host-agent",
+        `self-update: ${version3} installed but sessions resumed by this boot are being served \u2014 deferring restart to the next idle tick (or the next boot)`
+      );
+      return false;
+    }
     if (midTurn || fleetBusy) {
       const since = this.pendingRestartSince ?? this.now();
       const waited = this.now() - since;
@@ -52533,6 +52589,12 @@ var HostAgentSupervisor = class {
     this.onUpdated(version3);
     return true;
   }
+  /** Inside the post-boot quiet window AND serving (or still resuming) a session. */
+  justBootedWithSessions() {
+    if (this.startedAt === null) return false;
+    if (this.now() - this.startedAt >= SELF_UPDATE_BOOT_QUIET_MS) return false;
+    return this.children.size > 0 || this.pendingOrphanReplacements > 0 || [...this.resumeStates.values()].some((st3) => st3.timer !== null);
+  }
   /** Number of live children — for tests + diagnostics. */
   childCount() {
     return this.children.size;
@@ -54245,7 +54307,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.76.21" : "0.0.0-dev";
+  const cliVersion = true ? "2.76.23" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto17.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -54781,7 +54843,7 @@ async function mcpWarm(argv = [], opts = {}) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.76.21" : "unknown";
+  const v = true ? "2.76.23" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }