local-commander-agent 0.3.42 → 0.3.44

package/runtime/agent.mjs

@@ -4541,10 +4541,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path28) {
-  if (!path28)
+function getElementAtPath(obj, path29) {
+  if (!path29)
     return obj;
-  return path28.reduce((acc, key) => acc?.[key], obj);
+  return path29.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -4884,11 +4884,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path28, issues) {
+function prefixIssues(path29, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path28);
+    iss.path.unshift(path29);
     return iss;
   });
 }
@@ -5338,16 +5338,16 @@ function flattenError(error62, mapper = (issue2) => issue2.message) {
 }
 function formatError(error62, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error63, path28 = []) => {
+  const processError = (error63, path29 = []) => {
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path28, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path29, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path28, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path29, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path28, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path29, ...issue2.path]);
       } else {
-        const fullpath = [...path28, ...issue2.path];
+        const fullpath = [...path29, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -5386,17 +5386,17 @@ function formatError(error62, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error62, mapper = (issue2) => issue2.message) {
   const result2 = { errors: [] };
-  const processError = (error63, path28 = []) => {
+  const processError = (error63, path29 = []) => {
     var _a3;
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path28, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path29, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path28, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path29, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path28, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path29, ...issue2.path]);
       } else {
-        const fullpath = [...path28, ...issue2.path];
+        const fullpath = [...path29, ...issue2.path];
         if (fullpath.length === 0) {
           result2.errors.push(mapper(issue2));
           continue;
@@ -5435,8 +5435,8 @@ function treeifyError(error62, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path28 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path28) {
+  const path29 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path29) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -16905,9 +16905,9 @@ function codePointLengthVar(doc, ctx, accessor, inDoubt) {
   doc.write(`const ${v} = typeof ${accessor} === "string" && ${inDoubt} ? ${cpLen}(${accessor}) : ${accessor}.length;`);
   return v;
 }
-function numericOperand(value, label) {
+function numericOperand(value, label2) {
   if (typeof value !== "number" || !Number.isFinite(value)) {
-    throw new ZodCompileUnsupportedError(`${label} bound of type ${typeof value}`);
+    throw new ZodCompileUnsupportedError(`${label2} bound of type ${typeof value}`);
   }
   return `${value}`;
 }
@@ -22538,13 +22538,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path28 = ref.slice(1).split("/").filter(Boolean);
-  if (path28.length === 0) {
+  const path29 = ref.slice(1).split("/").filter(Boolean);
+  if (path29.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path28[0] === defsKey) {
-    const key = path28[1] === void 0 ? void 0 : decodeJSONPointerSegment(path28[1]);
+  if (path29[0] === defsKey) {
+    const key = path29[1] === void 0 ? void 0 : decodeJSONPointerSegment(path29[1]);
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -23934,9 +23934,9 @@ function encode4(input2) {
 }
 
 // ../../node_modules/jose/dist/webapi/lib/validate.js
-function assertUint8Array(input2, label) {
+function assertUint8Array(input2, label2) {
   if (!(input2 instanceof Uint8Array))
-    throw new TypeError(`${label} must be an instance of Uint8Array`);
+    throw new TypeError(`${label2} must be an instance of Uint8Array`);
 }
 function isObject2(input2) {
   if (typeof input2 != "object" || input2 === null || Object.prototype.toString.call(input2) !== "[object Object]")
@@ -23959,18 +23959,18 @@ function assertNotSet(value, name2) {
   if (value !== void 0)
     throw new TypeError(`${name2} can only be called once`);
 }
-function decodeBase64url(value, label, ErrorClass) {
+function decodeBase64url(value, label2, ErrorClass) {
   try {
     return decode3(value);
   } catch {
-    throw new ErrorClass(`Failed to base64url decode the ${label}`);
+    throw new ErrorClass(`Failed to base64url decode the ${label2}`);
   }
 }
-function encodeBase64url(value, label, ErrorClass) {
+function encodeBase64url(value, label2, ErrorClass) {
   try {
     return encode3(value);
   } catch {
-    throw new ErrorClass(`The ${label} is not a valid base64url string`);
+    throw new ErrorClass(`The ${label2} is not a valid base64url string`);
   }
 }
 function parseJoseHeader(b64, ErrorClass, message2) {
@@ -24323,9 +24323,9 @@ function secs(str) {
   const value = parseFloat(matched[2]), numericDate2 = Math.round(value * multipliers[matched[3][0].toLowerCase()]);
   return Number.isFinite(numericDate2) || invalidDuration(), matched[1] === "-" || matched[4] === "ago" ? -numericDate2 : numericDate2;
 }
-function validateInput(label, input2) {
+function validateInput(label2, input2) {
   if (!Number.isFinite(input2))
-    throw new TypeError(`Invalid ${label} input`);
+    throw new TypeError(`Invalid ${label2} input`);
   return input2;
 }
 var normalizeTyp = (value) => {
@@ -25164,7 +25164,7 @@ async function openNetworkPanel(binaryDirectory, identity) {
 }
 
 // agent/src/main.ts
-import path27 from "node:path";
+import path28 from "node:path";
 import os7 from "node:os";
 
 // agent/src/posix-store.ts
@@ -25583,7 +25583,7 @@ async function acquirePosixJournalGuard(directory, helper) {
 }
 
 // agent/src/main.ts
-import { mkdir as mkdir14, open as open13, readFile as readFile10, realpath as realpath10, rm as rm9 } from "node:fs/promises";
+import { mkdir as mkdir14, open as open13, readFile as readFile11, realpath as realpath10, rm as rm9 } from "node:fs/promises";
 import { fileURLToPath } from "node:url";
 
 // packages/operations/src/crypto.ts
@@ -25629,8 +25629,129 @@ var SecretBox = class {
 
 // agent/src/journal.ts
 import { constants as constants2 } from "node:fs";
-import { lstat as lstat2, mkdir as mkdir3, open as open3, readdir as readdir2, readFile as readFile2, realpath as realpath2, rename, rm as rm2 } from "node:fs/promises";
-import path5 from "node:path";
+
+// agent/src/linux-containment.ts
+import { execFile } from "node:child_process";
+import { readFile as readFile2, statfs } from "node:fs/promises";
+import path4 from "node:path";
+import { promisify } from "node:util";
+import { setTimeout as delay } from "node:timers/promises";
+var uuid5 = "[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}";
+var unitName = new RegExp("^lc-command-" + uuid5 + "\\.service$");
+var bootId = new RegExp("^" + uuid5 + "$");
+function validLinuxContainment(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const v = value;
+  return Object.keys(v).length === 5 && Number.isInteger(v.uid) && v.uid > 0 && v.uid <= 4294967295 && typeof v.unit === "string" && unitName.test(v.unit) && typeof v.bootId === "string" && bootId.test(v.bootId) && typeof v.invocationId === "string" && /^[0-9a-f]{32}$/.test(v.invocationId) && !/^0+$/.test(v.invocationId) && typeof v.cgroup === "string" && v.cgroup.length <= 2048 && !v.cgroup.includes("\0") && v.cgroup.startsWith("/user.slice/user-" + v.uid + ".slice/user@" + v.uid + ".service/") && path4.posix.normalize(v.cgroup) === v.cgroup && path4.posix.basename(v.cgroup) === v.unit;
+}
+var exec = promisify(execFile);
+async function linuxSupervisorLiveness(pids, records = []) {
+  if (process.platform !== "linux" || !process.getuid?.() || process.getuid() !== process.geteuid?.()) return null;
+  const remaining = new Set(pids), uid = process.getuid(), deadline = Date.now() + 1e4;
+  const env = buildChildEnvironment(process.env);
+  env.XDG_RUNTIME_DIR = "/run/user/" + uid;
+  env.DBUS_SESSION_BUS_ADDRESS = "unix:path=" + env.XDG_RUNTIME_DIR + "/bus";
+  try {
+    if ((await statfs("/sys/fs/cgroup")).type !== 1667723888) return null;
+    const boot = (await readFile2("/proc/sys/kernel/random/boot_id", "utf8")).trim();
+    const control = (unit, args) => exec(
+      "/usr/bin/systemctl",
+      ["--user", "--no-ask-password", ...args, unit],
+      { env, timeout: Math.max(1, Math.min(2e3, deadline - Date.now())), maxBuffer: 8192, encoding: "utf8", windowsHide: true }
+    );
+    const show = async (unit) => {
+      const properties = ["Id", "LoadState", "ActiveState", "ControlGroup", "InvocationID", "Transient", "Restart", "KillMode"];
+      const result2 = await control(unit, ["show", ...properties.map((p) => "--property=" + p)]).catch((e) => {
+        if (e.code !== 4 || typeof e.stdout !== "string") throw e;
+        return { stdout: e.stdout };
+      });
+      const fields = {};
+      for (const line of result2.stdout.trim().split("\n")) {
+        const at = line.indexOf("="), key = line.slice(0, at);
+        if (at < 1 || !properties.includes(key) || key in fields) throw Error("LINUX_CONTAINMENT_INVALID");
+        fields[key] = line.slice(at + 1);
+      }
+      if (fields.Id !== unit || !fields.LoadState || !fields.ActiveState) throw Error("LINUX_CONTAINMENT_INVALID");
+      return fields;
+    };
+    for (const pid of remaining) {
+      if (Date.now() >= deadline) break;
+      const matches2 = records.filter((r) => r.pid === pid);
+      if (matches2.length !== 1) continue;
+      const proof2 = matches2[0].containment;
+      if (!validLinuxContainment(proof2) || proof2.uid !== uid || proof2.bootId !== boot) continue;
+      try {
+        let stopped2 = false;
+        while (Date.now() < deadline) {
+          const fields = await show(proof2.unit);
+          const absent2 = fields.LoadState === "not-found" && fields.ActiveState === "inactive" && !fields.ControlGroup && !fields.InvocationID;
+          if (!absent2 && (fields.LoadState !== "loaded" || fields.ControlGroup !== proof2.cgroup || fields.InvocationID !== proof2.invocationId || fields.Transient !== "yes" || fields.Restart !== "no" || fields.KillMode !== "control-group")) break;
+          if (absent2 || fields.ActiveState === "inactive" || fields.ActiveState === "failed") {
+            const empty = await readFile2("/sys/fs/cgroup" + proof2.cgroup + "/cgroup.events", "utf8").then((text3) => /(?:^|\n)populated 0(?:\n|$)/.test(text3), (e) => e.code === "ENOENT");
+            if (empty) remaining.delete(pid);
+            break;
+          }
+          if (!stopped2) {
+            await control(proof2.unit, ["stop"]).catch(() => {
+            });
+            stopped2 = true;
+          } else await delay(50);
+        }
+      } catch {
+      }
+    }
+    return remaining;
+  } catch {
+    return null;
+  }
+}
+
+// agent/src/darwin-containment.ts
+import { execFile as execFile2 } from "node:child_process";
+import { promisify as promisify2 } from "node:util";
+var label = /^app\.localcmd\.command\.[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+var bootSession = /^[0-9A-Fa-f]{8}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{12}$/;
+function validDarwinContainment(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const v = value;
+  return Object.keys(v).length === 4 && Number.isInteger(v.uid) && v.uid > 0 && v.uid <= 4294967295 && typeof v.label === "string" && label.test(v.label) && typeof v.bootSession === "string" && bootSession.test(v.bootSession) && typeof v.coalition === "string" && /^[1-9][0-9]{0,17}$/.test(v.coalition) && v.coalition !== "1";
+}
+var exec2 = promisify2(execFile2);
+async function darwinSupervisorLiveness(helper, pids, records = []) {
+  if (process.platform !== "darwin" || !process.getuid?.() || process.getuid() !== process.geteuid?.()) return null;
+  const remaining = new Set(pids), uid = process.getuid(), deadline = Date.now() + 1e4, env = buildChildEnvironment(process.env);
+  const run = (file2, args) => exec2(
+    file2,
+    args,
+    { env, timeout: Math.max(1, Math.min(7e3, deadline - Date.now())), maxBuffer: 8192, encoding: "utf8", windowsHide: true }
+  );
+  try {
+    const boot = (await run("/usr/sbin/sysctl", ["-n", "kern.bootsessionuuid"])).stdout.trim();
+    if (!bootSession.test(boot)) return null;
+    for (const pid of remaining) {
+      if (Date.now() >= deadline) break;
+      const matches2 = records.filter((r) => r.pid === pid);
+      if (matches2.length !== 1) continue;
+      const proof2 = matches2[0].containment;
+      if (!validDarwinContainment(proof2) || proof2.uid !== uid || proof2.bootSession !== boot) continue;
+      try {
+        await run(helper, ["--reap", proof2.coalition]);
+        if ((await run(helper, ["--count", proof2.coalition])).stdout.trim() !== "0") continue;
+        await run("/bin/launchctl", ["bootout", "gui/" + uid + "/" + proof2.label]).catch(() => {
+        });
+        remaining.delete(pid);
+      } catch {
+      }
+    }
+    return remaining;
+  } catch {
+    return null;
+  }
+}
+
+// agent/src/journal.ts
+import { lstat as lstat2, mkdir as mkdir3, open as open3, readdir as readdir2, readFile as readFile3, realpath as realpath2, rename, rm as rm2 } from "node:fs/promises";
+import path6 from "node:path";
 import { createHash as createHash7, randomBytes as randomBytes4, randomUUID as randomUUID4 } from "node:crypto";
 
 // src/output-buffer.ts
@@ -25864,7 +25985,7 @@ import { createHash as createHash6, createPublicKey as createPublicKey3, KeyObje
 
 // packages/contracts/src/agent-policy.ts
 var agentPolicyProtocolVersion = 1;
-var uuid5 = external_exports.string().uuid().toLowerCase();
+var uuid8 = external_exports.string().uuid().toLowerCase();
 var utcDateTime = external_exports.iso.datetime({ offset: false }).refine(
   (value) => /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,9})?Z$/.test(value),
   "Expected UTC timestamp with seconds"
@@ -26009,11 +26130,11 @@ var AdapterActionInputSchema = external_exports.object({
 });
 var TrustedActionBindingSchema = external_exports.object({
   bindingSource: external_exports.enum(["server", "endpoint-attestation"]),
-  tenantId: uuid5,
-  accountId: uuid5,
-  grantId: uuid5.optional(),
-  deviceId: uuid5.optional(),
-  executionSessionId: uuid5.optional(),
+  tenantId: uuid8,
+  accountId: uuid8,
+  grantId: uuid8.optional(),
+  deviceId: uuid8.optional(),
+  executionSessionId: uuid8.optional(),
   authenticatedAt: utcDateTime,
   expiresAt: utcDateTime
 }).strict().refine((value) => Date.parse(value.authenticatedAt) < Date.parse(value.expiresAt), {
@@ -26022,7 +26143,7 @@ var TrustedActionBindingSchema = external_exports.object({
 });
 var BoundActionRequestSchema = external_exports.object({
   protocolVersion: external_exports.literal(agentPolicyProtocolVersion),
-  requestId: uuid5,
+  requestId: uuid8,
   input: AdapterActionInputSchema,
   binding: TrustedActionBindingSchema
 }).strict().superRefine((value, ctx) => {
@@ -26056,8 +26177,8 @@ var TransformSpecSchema = external_exports.object({
 }).strict();
 var PolicyDecisionSchema = external_exports.object({
   protocolVersion: external_exports.literal(agentPolicyProtocolVersion),
-  decisionId: uuid5,
-  requestId: uuid5,
+  decisionId: uuid8,
+  requestId: uuid8,
   policyId: slug,
   policyVersion: external_exports.string().trim().min(1).max(64),
   decidedAt: utcDateTime,
@@ -26090,15 +26211,15 @@ var ContentEvidenceSchema = external_exports.discriminatedUnion("mode", [
   external_exports.object({ mode: external_exports.literal("none") }).strict(),
   external_exports.object({
     mode: external_exports.literal("encrypted-opt-in"),
-    objectId: uuid5,
+    objectId: uuid8,
     keyFingerprint: sha256
   }).strict()
 ]);
 var ActionEvidenceSchema = external_exports.object({
   protocolVersion: external_exports.literal(agentPolicyProtocolVersion),
-  evidenceId: uuid5,
-  requestId: uuid5,
-  decisionId: uuid5,
+  evidenceId: uuid8,
+  requestId: uuid8,
+  decisionId: uuid8,
   occurredAt: utcDateTime,
   mediation: external_exports.enum(["mediated", "observed-only", "unknown"]),
   phase: external_exports.enum(["request", "decision", "dispatch", "result"]),
@@ -26122,7 +26243,7 @@ function projectRelativePath(value) {
   if (normalized.split("/").some((part) => !part || part === "." || part === ".." || /[. ]$/u.test(part) || /^(?:con|prn|aux|nul|clock\$|conin\$|conout\$|com[1-9¹²³]|lpt[1-9¹²³])(?:\.|$)/iu.test(part))) throw new TypeError("Invalid relativePath");
   return normalized;
 }
-var uuid8 = external_exports.string().uuid().toLowerCase();
+var uuid9 = external_exports.string().uuid().toLowerCase();
 var hash2 = external_exports.string().regex(/^[a-f0-9]{64}$/);
 var ProjectRelativePathSchema = external_exports.string().transform((value, ctx) => {
   try {
@@ -26133,8 +26254,8 @@ var ProjectRelativePathSchema = external_exports.string().transform((value, ctx)
   }
 });
 var ProjectTargetBindingSchema = external_exports.object({
-  projectId: uuid8,
-  targetId: uuid8,
+  projectId: uuid9,
+  targetId: uuid9,
   environment: external_exports.enum(["dev", "staging", "prod"]),
   relativePath: ProjectRelativePathSchema,
   repositoryFingerprint: hash2,
@@ -26167,7 +26288,7 @@ function repositoryFingerprint(remote) {
 var protocolVersion = 1;
 var MAX_FILE_WRITE_BYTES = 1024 * 1024;
 var MAX_RELAY_FRAME_BYTES = 8 * 1024 * 1024;
-var uuid9 = external_exports.string().uuid().toLowerCase();
+var uuid10 = external_exports.string().uuid().toLowerCase();
 var nonEmpty = external_exports.string().trim().min(1);
 var utcDateTime2 = external_exports.iso.datetime({ offset: false }).refine((value) => /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,9})?Z$/.test(value), "Expected UTC timestamp with seconds");
 var units = external_exports.number().int().min(0).max(1e9);
@@ -26223,27 +26344,27 @@ var ErrorCodeSchema = external_exports.enum([
 var LedgerEventKindSchema = external_exports.enum(["reserve", "charge", "release", "credit"]);
 var TrustedPrincipalSchema = external_exports.object({
   protocolVersion: external_exports.literal(protocolVersion),
-  accountId: uuid9,
-  tenantId: uuid9,
-  grantId: uuid9,
+  accountId: uuid10,
+  tenantId: uuid10,
+  grantId: uuid10,
   scopes: external_exports.array(PermissionScopeSchema).min(1).max(32),
   authenticatedAt: utcDateTime2,
   expiresAt: utcDateTime2
 }).strict().refine((value) => Date.parse(value.authenticatedAt) < Date.parse(value.expiresAt), { path: ["expiresAt"], message: "Expiry must follow authentication" });
 var ExecutionSessionSchema = external_exports.object({
   protocolVersion: external_exports.literal(protocolVersion),
-  executionSessionId: uuid9,
-  tenantId: uuid9,
-  grantId: uuid9,
-  deviceId: uuid9,
-  workspaceGrantId: uuid9.optional(),
+  executionSessionId: uuid10,
+  tenantId: uuid10,
+  grantId: uuid10,
+  deviceId: uuid10,
+  workspaceGrantId: uuid10.optional(),
   policyVersion: external_exports.string().trim().min(1).max(64),
   openedAt: utcDateTime2,
   expiresAt: utcDateTime2,
   state: external_exports.enum(["open", "closing", "closed", "expired"])
 }).strict().refine((value) => Date.parse(value.openedAt) < Date.parse(value.expiresAt), { path: ["expiresAt"], message: "Expiry must follow session creation" });
 var ChildCommandSchema = external_exports.object({
-  childExecutionId: uuid9,
+  childExecutionId: uuid10,
   executable: nonEmpty.max(260),
   argv: external_exports.array(external_exports.string().max(8192)).max(128).default([]),
   cwd: external_exports.string().trim().min(1).max(2048).optional(),
@@ -26251,8 +26372,8 @@ var ChildCommandSchema = external_exports.object({
 }).strict();
 var ClientCommandRequestSchema = external_exports.object({
   protocolVersion: external_exports.literal(protocolVersion),
-  executionSessionId: uuid9,
-  operationId: uuid9,
+  executionSessionId: uuid10,
+  operationId: uuid10,
   idempotencyKey: external_exports.string().trim().min(8).max(128),
   children: external_exports.array(ChildCommandSchema).min(2).max(32)
 }).strict().superRefine((value, ctx) => {
@@ -26266,25 +26387,25 @@ var ClientCommandRequestSchema = external_exports.object({
 });
 var ControlOperationSchema = external_exports.object({
   protocolVersion: external_exports.literal(protocolVersion),
-  executionSessionId: uuid9,
-  operationId: uuid9,
+  executionSessionId: uuid10,
+  operationId: uuid10,
   kind: external_exports.enum(["status", "output", "cancel"]),
   cursor: external_exports.string().trim().min(1).max(512).optional()
 }).strict();
 var LedgerEventSchema = external_exports.object({
   protocolVersion: external_exports.literal(protocolVersion),
-  tenantId: uuid9,
-  executionId: uuid9,
+  tenantId: uuid10,
+  executionId: uuid10,
   eventKind: LedgerEventKindSchema,
   units: external_exports.literal(1),
   periodStartUtc: utcDateTime2,
   periodEndUtc: utcDateTime2,
   occurredAt: utcDateTime2,
-  adjustmentId: uuid9.optional()
+  adjustmentId: uuid10.optional()
 }).strict().refine(validUsagePeriod, { path: ["periodEndUtc"], message: "Expected one UTC calendar month" }).refine((value) => value.eventKind !== "credit" || value.adjustmentId !== void 0, { path: ["adjustmentId"], message: "Credit requires a unique adjustment ID" });
 var UsageCountersSchema = external_exports.object({
   protocolVersion: external_exports.literal(protocolVersion),
-  tenantId: uuid9,
+  tenantId: uuid10,
   periodStartUtc: utcDateTime2,
   periodEndUtc: utcDateTime2,
   limitUnits: units,
@@ -26302,7 +26423,7 @@ var OperationErrorSchema = external_exports.object({
 }).strict();
 
 // packages/contracts/src/device-protocol.ts
-var uuid10 = external_exports.string().uuid().toLowerCase();
+var uuid11 = external_exports.string().uuid().toLowerCase();
 var hash3 = external_exports.string().regex(/^[a-f0-9]{64}$/);
 var epoch2 = external_exports.string().regex(/^[1-9]\d{0,18}$/).refine((v) => BigInt(v) <= 9223372036854775807n);
 var text = external_exports.string().max(32767).refine((v) => !v.includes("\0"));
@@ -26310,19 +26431,19 @@ var timestamp = external_exports.iso.datetime({ offset: false });
 var EfficiencyProfileSchema = external_exports.object({
   model: external_exports.string().regex(/^[A-Za-z0-9][A-Za-z0-9._:/+-]{0,79}$/)
 }).strict();
-var path4 = text.min(1);
+var path5 = text.min(1);
 var ToolCallSchema = external_exports.discriminatedUnion("name", [
   external_exports.object({ name: external_exports.literal("project_identity"), args: external_exports.object({ path: ProjectRelativePathSchema }).strict() }).strict(),
-  external_exports.object({ name: external_exports.literal("fs_list"), args: external_exports.object({ path: path4.optional(), recursive: external_exports.boolean().default(false), maxDepth: external_exports.number().int().min(0).max(8).default(3), maxEntries: external_exports.number().int().min(1).max(1e3).default(200) }).strict() }).strict(),
-  external_exports.object({ name: external_exports.literal("fs_read"), args: external_exports.object({ path: path4, startLine: external_exports.number().int().min(1).max(1e6).optional(), endLine: external_exports.number().int().min(1).max(1e6).optional() }).strict() }).strict(),
-  external_exports.object({ name: external_exports.literal("fs_search"), args: external_exports.object({ path: path4.optional(), query: external_exports.string().min(1).max(1e3), caseSensitive: external_exports.boolean().default(false), maxResults: external_exports.number().int().min(1).max(300).default(100) }).strict() }).strict(),
-  external_exports.object({ name: external_exports.literal("fs_write"), args: external_exports.object({ path: path4, content: external_exports.string().max(MAX_FILE_WRITE_BYTES).refine((value) => Buffer.byteLength(value, "utf8") <= MAX_FILE_WRITE_BYTES, "fs_write content exceeds 1 MiB UTF-8"), overwrite: external_exports.boolean().default(false), expectedSha256: hash3.optional() }).strict() }).strict(),
-  external_exports.object({ name: external_exports.literal("fs_replace"), args: external_exports.object({ path: path4, oldText: external_exports.string().min(1).max(6e4), newText: external_exports.string().max(6e4), replaceAll: external_exports.boolean().default(false), expectedSha256: hash3.optional() }).strict() }).strict(),
-  external_exports.object({ name: external_exports.literal("git_status"), args: external_exports.object({ path: path4.optional() }).strict() }).strict(),
-  external_exports.object({ name: external_exports.literal("git_diff"), args: external_exports.object({ path: path4.optional(), file: path4.optional(), staged: external_exports.boolean().default(false) }).strict() }).strict(),
-  external_exports.object({ name: external_exports.literal("git_log"), args: external_exports.object({ path: path4.optional(), limit: external_exports.number().int().min(1).max(50).default(15) }).strict() }).strict(),
-  external_exports.object({ name: external_exports.literal("project_snapshot"), args: external_exports.object({ path: path4.optional(), startup: external_exports.boolean().optional(), taskId: external_exports.string().regex(/^[A-Za-z0-9_-]{1,100}$/).optional() }).strict() }).strict(),
-  external_exports.object({ name: external_exports.literal("command_run"), args: external_exports.object({ command: external_exports.string().min(1).max(260).refine((v) => !/[\r\n\0]/.test(v)), args: external_exports.array(external_exports.string().max(8192).refine((v) => !v.includes("\0"))).max(128).default([]), cwd: path4.optional(), timeoutMs: external_exports.number().int().min(100).max(864e5).default(6e4) }).strict() }).strict(),
+  external_exports.object({ name: external_exports.literal("fs_list"), args: external_exports.object({ path: path5.optional(), recursive: external_exports.boolean().default(false), maxDepth: external_exports.number().int().min(0).max(8).default(3), maxEntries: external_exports.number().int().min(1).max(1e3).default(200) }).strict() }).strict(),
+  external_exports.object({ name: external_exports.literal("fs_read"), args: external_exports.object({ path: path5, startLine: external_exports.number().int().min(1).max(1e6).optional(), endLine: external_exports.number().int().min(1).max(1e6).optional() }).strict() }).strict(),
+  external_exports.object({ name: external_exports.literal("fs_search"), args: external_exports.object({ path: path5.optional(), query: external_exports.string().min(1).max(1e3), caseSensitive: external_exports.boolean().default(false), maxResults: external_exports.number().int().min(1).max(300).default(100) }).strict() }).strict(),
+  external_exports.object({ name: external_exports.literal("fs_write"), args: external_exports.object({ path: path5, content: external_exports.string().max(MAX_FILE_WRITE_BYTES).refine((value) => Buffer.byteLength(value, "utf8") <= MAX_FILE_WRITE_BYTES, "fs_write content exceeds 1 MiB UTF-8"), overwrite: external_exports.boolean().default(false), expectedSha256: hash3.optional() }).strict() }).strict(),
+  external_exports.object({ name: external_exports.literal("fs_replace"), args: external_exports.object({ path: path5, oldText: external_exports.string().min(1).max(6e4), newText: external_exports.string().max(6e4), replaceAll: external_exports.boolean().default(false), expectedSha256: hash3.optional() }).strict() }).strict(),
+  external_exports.object({ name: external_exports.literal("git_status"), args: external_exports.object({ path: path5.optional() }).strict() }).strict(),
+  external_exports.object({ name: external_exports.literal("git_diff"), args: external_exports.object({ path: path5.optional(), file: path5.optional(), staged: external_exports.boolean().default(false) }).strict() }).strict(),
+  external_exports.object({ name: external_exports.literal("git_log"), args: external_exports.object({ path: path5.optional(), limit: external_exports.number().int().min(1).max(50).default(15) }).strict() }).strict(),
+  external_exports.object({ name: external_exports.literal("project_snapshot"), args: external_exports.object({ path: path5.optional(), startup: external_exports.boolean().optional(), taskId: external_exports.string().regex(/^[A-Za-z0-9_-]{1,100}$/).optional() }).strict() }).strict(),
+  external_exports.object({ name: external_exports.literal("command_run"), args: external_exports.object({ command: external_exports.string().min(1).max(260).refine((v) => !/[\r\n\0]/.test(v)), args: external_exports.array(external_exports.string().max(8192).refine((v) => !v.includes("\0"))).max(128).default([]), cwd: path5.optional(), timeoutMs: external_exports.number().int().min(100).max(864e5).default(6e4) }).strict() }).strict(),
   external_exports.object({ name: external_exports.literal("localhost_request"), args: external_exports.object({ url: external_exports.string().url().max(2048), method: external_exports.enum(["GET", "HEAD", "POST", "PUT", "PATCH", "DELETE"]).default("GET"), headers: external_exports.record(external_exports.string().max(128), external_exports.string().max(2048)).optional(), body: external_exports.string().max(6e4).optional() }).strict() }).strict()
 ]);
 function scopeForTool(call) {
@@ -26330,29 +26451,29 @@ function scopeForTool(call) {
   if (call.name === "localhost_request") return "localhost:access";
   return call.name === "fs_write" || call.name === "fs_replace" ? "files:write" : "files:read";
 }
-var ExecutionBindingSchema = external_exports.object({ tenantId: uuid10, accountId: uuid10.optional(), deviceId: uuid10, grantId: uuid10, sessionId: uuid10, operationId: uuid10, executionId: uuid10, connectionEpoch: epoch2, workspaceGrantId: uuid10, policyVersion: external_exports.number().int().min(1).max(2147483647), payloadHash: hash3, deadlineAt: timestamp, projectTarget: ProjectTargetBindingSchema.optional() }).strict();
+var ExecutionBindingSchema = external_exports.object({ tenantId: uuid11, accountId: uuid11.optional(), deviceId: uuid11, grantId: uuid11, sessionId: uuid11, operationId: uuid11, executionId: uuid11, connectionEpoch: epoch2, workspaceGrantId: uuid11, policyVersion: external_exports.number().int().min(1).max(2147483647), payloadHash: hash3, deadlineAt: timestamp, projectTarget: ProjectTargetBindingSchema.optional() }).strict();
 var EfficiencyNoticeSchema = external_exports.object({ message: external_exports.string().min(1).max(160), estimatedSavedTokens: external_exports.number().int().min(1).max(1e12), savedBytes: external_exports.number().int().min(1).max(1e12), sessionCalls: external_exports.number().int().min(20).max(1e9) }).strict();
 var ResultSchema = external_exports.object({ exitCode: external_exports.number().int().min(-2147483648).max(4294967295).nullable(), timedOut: external_exports.boolean(), cancelled: external_exports.boolean(), treeTerminated: external_exports.boolean(), stdout: external_exports.string().max(196608), stderr: external_exports.string().max(196608), stdoutTruncated: external_exports.boolean(), stderrTruncated: external_exports.boolean(), resultCode: external_exports.string().regex(/^[A-Z0-9_]{1,40}$/), efficiencyNotice: EfficiencyNoticeSchema.optional() }).strict();
 var ServerFrameSchema = external_exports.discriminatedUnion("type", [
-  external_exports.object({ type: external_exports.literal("hello"), version: external_exports.literal(1), tenantId: uuid10, deviceId: uuid10, connectionEpoch: epoch2, serverTime: timestamp }).strict(),
+  external_exports.object({ type: external_exports.literal("hello"), version: external_exports.literal(1), tenantId: uuid11, deviceId: uuid11, connectionEpoch: epoch2, serverTime: timestamp }).strict(),
   external_exports.object({ type: external_exports.literal("prepare"), version: external_exports.literal(1), binding: ExecutionBindingSchema, tool: ToolCallSchema }).strict(),
   external_exports.object({ type: external_exports.literal("execute"), version: external_exports.literal(1), binding: ExecutionBindingSchema }).strict(),
-  external_exports.object({ type: external_exports.literal("control"), version: external_exports.literal(1), requestId: uuid10, binding: ExecutionBindingSchema, action: external_exports.enum(["status", "output", "cancel"]) }).strict(),
+  external_exports.object({ type: external_exports.literal("control"), version: external_exports.literal(1), requestId: uuid11, binding: ExecutionBindingSchema, action: external_exports.enum(["status", "output", "cancel"]) }).strict(),
   external_exports.object({ type: external_exports.literal("heartbeat_ack"), version: external_exports.literal(1), connectionEpoch: epoch2, leaseExpiresAt: timestamp }).strict(),
-  external_exports.object({ type: external_exports.literal("workspace_ack"), version: external_exports.literal(1), requestId: uuid10, workspaceGrantId: uuid10, accepted: external_exports.boolean(), code: external_exports.string().max(64).optional() }).strict(),
+  external_exports.object({ type: external_exports.literal("workspace_ack"), version: external_exports.literal(1), requestId: uuid11, workspaceGrantId: uuid11, accepted: external_exports.boolean(), code: external_exports.string().max(64).optional() }).strict(),
   external_exports.object({ type: external_exports.literal("revoke"), version: external_exports.literal(1), reason: external_exports.enum(["device_revoked", "account_revoked", "server_shutdown", "connection_replaced"]) }).strict()
 ]);
 var ClientFrameSchema = external_exports.discriminatedUnion("type", [
   external_exports.object({ type: external_exports.literal("ready"), version: external_exports.literal(1), safeSlots: external_exports.number().int().min(1).max(128), platform: external_exports.literal("win32"), agentVersion: external_exports.string().regex(/^[A-Za-z0-9._+-]{1,64}$/), supervisor: external_exports.boolean() }).strict(),
   external_exports.object({ type: external_exports.literal("heartbeat"), version: external_exports.literal(1), connectionEpoch: epoch2 }).strict(),
-  external_exports.object({ type: external_exports.literal("workspace_grant"), version: external_exports.literal(1), requestId: uuid10, workspaceGrantId: uuid10, rootHash: hash3, displayName: external_exports.string().min(1).max(120), policyVersion: external_exports.number().int().min(1).max(2147483647) }).strict(),
-  external_exports.object({ type: external_exports.literal("workspace_revoke"), version: external_exports.literal(1), requestId: uuid10, workspaceGrantId: uuid10 }).strict(),
+  external_exports.object({ type: external_exports.literal("workspace_grant"), version: external_exports.literal(1), requestId: uuid11, workspaceGrantId: uuid11, rootHash: hash3, displayName: external_exports.string().min(1).max(120), policyVersion: external_exports.number().int().min(1).max(2147483647) }).strict(),
+  external_exports.object({ type: external_exports.literal("workspace_revoke"), version: external_exports.literal(1), requestId: uuid11, workspaceGrantId: uuid11 }).strict(),
   external_exports.object({ type: external_exports.literal("prepared"), version: external_exports.literal(1), binding: ExecutionBindingSchema }).strict(),
   external_exports.object({ type: external_exports.literal("accepted"), version: external_exports.literal(1), binding: ExecutionBindingSchema }).strict(),
   external_exports.object({ type: external_exports.literal("running"), version: external_exports.literal(1), binding: ExecutionBindingSchema, pid: external_exports.number().int().positive().optional() }).strict(),
   external_exports.object({ type: external_exports.literal("result"), version: external_exports.literal(1), binding: ExecutionBindingSchema, result: ResultSchema }).strict(),
   external_exports.object({ type: external_exports.literal("not_accepted"), version: external_exports.literal(1), binding: ExecutionBindingSchema, code: external_exports.string().regex(/^[A-Z0-9_]{1,40}$/), provedNotStarted: external_exports.boolean() }).strict(),
-  external_exports.object({ type: external_exports.literal("control_result"), version: external_exports.literal(1), requestId: uuid10, binding: ExecutionBindingSchema, state: external_exports.enum(["prepared", "accepted", "running", "finished", "failed", "cancelled", "rejected", "unknown", "missing"]), result: ResultSchema.optional() }).strict()
+  external_exports.object({ type: external_exports.literal("control_result"), version: external_exports.literal(1), requestId: uuid11, binding: ExecutionBindingSchema, state: external_exports.enum(["prepared", "accepted", "running", "finished", "failed", "cancelled", "rejected", "unknown", "missing"]), result: ResultSchema.optional() }).strict()
 ]);
 var TerminalMetricsSchema = external_exports.object({ stdoutBytes: external_exports.number().int().min(0).max(4194304), stderrBytes: external_exports.number().int().min(0).max(4194304), outputTruncated: external_exports.boolean() }).strict();
 var TERMINAL_METRICS_CAPABILITY = "terminalMetrics";
@@ -26362,8 +26483,8 @@ var NATIVE_CAPACITY_CAPABILITY = "nativeCapacity";
 var NativeCapacitySchema = external_exports.object({ type: external_exports.literal("nativeCapacity"), protocolVersion: external_exports.literal(1), connectionEpoch: epoch2, safeSlots: external_exports.number().int().min(1).max(32), agentVersion: external_exports.string().regex(/^[A-Za-z0-9._+-]{1,64}$/) }).strict();
 var NATIVE_STATUS_CAPABILITY = "nativeStatusV1";
 var NativeStatusSchema = NativeCapacitySchema.extend({ type: external_exports.literal("nativeStatus"), active: external_exports.number().int().min(0).max(32), queued: external_exports.number().int().min(0).max(256), paused: external_exports.boolean() }).strict().refine((v) => v.active <= v.safeSlots);
-var TerminalEventSchema = external_exports.object({ type: external_exports.literal("executionResult"), protocolVersion: external_exports.literal(1), requestId: uuid10, tenantId: uuid10, deviceId: uuid10, connectionEpoch: epoch2, binding: ExecutionBindingSchema, state: external_exports.enum(["finished", "failed", "cancelled", "unknown", "rejected"]), resultCode: external_exports.string().regex(/^[A-Z0-9_]{1,40}$/), metrics: TerminalMetricsSchema.optional() }).strict();
-var TerminalEventAckSchema = external_exports.object({ type: external_exports.literal("executionResultAck"), protocolVersion: external_exports.literal(1), requestId: uuid10, ok: external_exports.boolean() }).strict();
+var TerminalEventSchema = external_exports.object({ type: external_exports.literal("executionResult"), protocolVersion: external_exports.literal(1), requestId: uuid11, tenantId: uuid11, deviceId: uuid11, connectionEpoch: epoch2, binding: ExecutionBindingSchema, state: external_exports.enum(["finished", "failed", "cancelled", "unknown", "rejected"]), resultCode: external_exports.string().regex(/^[A-Z0-9_]{1,40}$/), metrics: TerminalMetricsSchema.optional() }).strict();
+var TerminalEventAckSchema = external_exports.object({ type: external_exports.literal("executionResultAck"), protocolVersion: external_exports.literal(1), requestId: uuid11, ok: external_exports.boolean() }).strict();
 function canonicalJson(value) {
   function canonical2(v) {
     if (Array.isArray(v)) return v.map(canonical2);
@@ -26396,16 +26517,16 @@ var guardAdapter = AdapterDescriptorSchema.parse({
     detectsNativeBypass: false
   }
 });
-var uuid11 = external_exports.string().uuid().toLowerCase();
+var uuid12 = external_exports.string().uuid().toLowerCase();
 var GuardSettingsSchema = external_exports.object({
   policyId: external_exports.string().regex(/^[a-z][a-z0-9._-]{0,63}$/),
   keys: external_exports.array(external_exports.object({ keyId: external_exports.string().regex(/^[a-z][a-z0-9._-]{0,63}$/), publicKeyPem: external_exports.string().max(1024) }).strict()).min(1).max(8),
   environment: EnvironmentContextSchema
 }).strict();
 var GuardConfigurationSchema = GuardSettingsSchema.extend({
-  tenantId: uuid11,
-  deviceId: uuid11,
-  ownerAccountId: uuid11,
+  tenantId: uuid12,
+  deviceId: uuid12,
+  ownerAccountId: uuid12,
   ownerSid: external_exports.string().regex(/^S-1-(?:[0-9]+-)+[0-9]+$/).max(184)
 }).strict();
 function guardHash(value) {
@@ -26486,14 +26607,14 @@ var GuardEventSchema = external_exports.object({
   previousHash: hash4,
   hash: hash4
 }).strict();
-var uuid12 = external_exports.string().uuid().toLowerCase();
+var uuid13 = external_exports.string().uuid().toLowerCase();
 var GuardEvidenceRecordSchema = external_exports.object({
-  tenantId: uuid12,
-  deviceId: uuid12,
-  accountId: uuid12.optional(),
-  sessionId: uuid12,
-  operationId: uuid12,
-  executionId: uuid12,
+  tenantId: uuid13,
+  deviceId: uuid13,
+  accountId: uuid13.optional(),
+  sessionId: uuid13,
+  operationId: uuid13,
+  executionId: uuid13,
   state: external_exports.enum(["prepared", "accepted", "running", "finished", "failed", "cancelled", "rejected", "unknown"]),
   events: external_exports.array(GuardEventSchema).min(1).max(12)
 }).strict();
@@ -26512,8 +26633,8 @@ function appendGuardEvent(events, input2) {
 }
 var ExportSchema = external_exports.object({
   formatVersion: external_exports.literal(1),
-  tenantId: uuid12,
-  deviceId: uuid12,
+  tenantId: uuid13,
+  deviceId: uuid13,
   records: external_exports.array(GuardEvidenceRecordSchema).max(1e3)
 }).strict();
 var HeaderSchema = external_exports.object({ alg: external_exports.literal("EdDSA"), typ: external_exports.literal("lc-guard-evidence+jws"), kid: hash4 }).strict();
@@ -26560,7 +26681,7 @@ var MAX_SUPERVISORS = 8;
 function validPid(value) {
   return Number.isSafeInteger(value) && value > 0 && value <= 4294967295;
 }
-var uuid13 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+var uuid14 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
 var hash5 = /^[0-9a-f]{64}$/;
 var bindingKeys = ["executionId", "operationId", "sessionId", "tenantId", "grantId", "deviceId", "connectionEpoch", "payloadHash", "deadlineAt", "workspaceGrantId", "policyVersion", "accountId", "projectTarget"];
 var terminal = /* @__PURE__ */ new Set(["finished", "failed", "cancelled", "rejected"]);
@@ -26580,11 +26701,11 @@ function canonicalTime(value) {
 }
 function validateInput2(value) {
   if (!value || typeof value !== "object" || Object.keys(value).some((k) => !bindingKeys.includes(k))) throw failure2("JOURNAL_INPUT_INVALID");
-  for (const name2 of bindingKeys.slice(0, 6)) if (typeof value[name2] !== "string" || !uuid13.test(value[name2])) throw failure2("JOURNAL_INPUT_INVALID");
-  if (value.accountId !== void 0 && !uuid13.test(value.accountId)) throw failure2("JOURNAL_INPUT_INVALID");
+  for (const name2 of bindingKeys.slice(0, 6)) if (typeof value[name2] !== "string" || !uuid14.test(value[name2])) throw failure2("JOURNAL_INPUT_INVALID");
+  if (value.accountId !== void 0 && !uuid14.test(value.accountId)) throw failure2("JOURNAL_INPUT_INVALID");
   if (value.projectTarget !== void 0 && !ProjectTargetBindingSchema.safeParse(value.projectTarget).success) throw failure2("JOURNAL_INPUT_INVALID");
   if (typeof value.connectionEpoch !== "string" || !/^[1-9]\d{0,18}$/.test(value.connectionEpoch) || BigInt(value.connectionEpoch) > 9223372036854775807n || typeof value.payloadHash !== "string" || !hash5.test(value.payloadHash) || !canonicalTime(value.deadlineAt)) throw failure2("JOURNAL_INPUT_INVALID");
-  if (value.workspaceGrantId === void 0 !== (value.policyVersion === void 0) || value.workspaceGrantId !== void 0 && (!uuid13.test(value.workspaceGrantId) || !Number.isInteger(value.policyVersion) || value.policyVersion < 1 || value.policyVersion > 2147483647)) throw failure2("JOURNAL_INPUT_INVALID");
+  if (value.workspaceGrantId === void 0 !== (value.policyVersion === void 0) || value.workspaceGrantId !== void 0 && (!uuid14.test(value.workspaceGrantId) || !Number.isInteger(value.policyVersion) || value.policyVersion < 1 || value.policyVersion > 2147483647)) throw failure2("JOURNAL_INPUT_INVALID");
 }
 function clone2(value) {
   return structuredClone(value);
@@ -26607,7 +26728,7 @@ function boundedResult(value) {
   }
 }
 async function safeDirectory(directory) {
-  const absolute2 = path5.resolve(directory);
+  const absolute2 = path6.resolve(directory);
   let current2 = absolute2;
   for (; ; ) {
     try {
@@ -26615,7 +26736,7 @@ async function safeDirectory(directory) {
     } catch (e) {
       if (e.code !== "ENOENT") throw e;
     }
-    const parent = path5.dirname(current2);
+    const parent = path6.dirname(current2);
     if (parent === current2) break;
     current2 = parent;
   }
@@ -26645,7 +26766,7 @@ var NativeJournal = class _NativeJournal {
   static async open(directory, box, options = {}) {
     const maxEntries = options.maxEntries ?? 2e3, maxBytes = options.maxBytes ?? 64 * 1048576, retentionMs = options.retentionMs ?? 864e5;
     if (!Number.isInteger(maxEntries) || maxEntries < 1 || maxEntries > 1e4 || !Number.isInteger(maxBytes) || maxBytes < 1024 || maxBytes > 64 * 1048576 || !Number.isInteger(retentionMs) || retentionMs < 0 || retentionMs > 30 * 864e5) throw failure2("JOURNAL_LIMIT_INVALID");
-    const dir = await safeDirectory(directory), lockPath = path5.join(dir, "journal.lock"), nonce2 = randomBytes4(16).toString("hex");
+    const dir = await safeDirectory(directory), lockPath = path6.join(dir, "journal.lock"), nonce2 = randomBytes4(16).toString("hex");
     const guard = options.lockHelper ? await acquirePosixJournalGuard(dir, options.lockHelper) : void 0;
     let file2;
     try {
@@ -26665,7 +26786,7 @@ var NativeJournal = class _NativeJournal {
       await file2.close().catch(() => {
       });
       try {
-        const value = JSON.parse(await readFile2(lockPath, "utf8"));
+        const value = JSON.parse(await readFile3(lockPath, "utf8"));
         if (value.nonce === nonce2) await rm2(lockPath);
       } catch {
       }
@@ -26687,10 +26808,10 @@ var NativeJournal = class _NativeJournal {
     return next;
   }
   file(id2) {
-    return path5.join(this.dir, id2 + ".entry");
+    return path6.join(this.dir, id2 + ".entry");
   }
   need(id2) {
-    if (!uuid13.test(id2)) throw failure2("JOURNAL_INPUT_INVALID");
+    if (!uuid14.test(id2)) throw failure2("JOURNAL_INPUT_INVALID");
     const e = this.entries.get(id2);
     if (!e) throw failure2("EXECUTION_UNKNOWN");
     return clone2(e);
@@ -26713,7 +26834,7 @@ var NativeJournal = class _NativeJournal {
     for (const name2 of names) {
       if (!name2.endsWith(".entry")) continue;
       const id2 = name2.slice(0, -6);
-      if (!uuid13.test(id2)) throw failure2("JOURNAL_CORRUPT");
+      if (!uuid14.test(id2)) throw failure2("JOURNAL_CORRUPT");
       const envelope = await this.readOwned(id2);
       this.totalBytes += envelope.length;
       if (this.totalBytes > this.options.maxBytes || this.entries.size >= this.options.maxEntries) throw failure2("JOURNAL_CAPACITY_EXCEEDED");
@@ -26727,6 +26848,8 @@ var NativeJournal = class _NativeJournal {
         if (entry.resultCode !== void 0 && (typeof entry.resultCode !== "string" || !/^[A-Z0-9_]{1,40}$/.test(entry.resultCode))) throw Error();
         if (entry.reportedAt !== void 0 && (!entry.resultCode || !canonicalTime(entry.reportedAt))) throw Error();
         if (entry.supervisors !== void 0 && (!Array.isArray(entry.supervisors) || entry.supervisors.length > MAX_SUPERVISORS || !entry.supervisors.every(validPid))) throw Error();
+        if (entry.linuxSupervisors !== void 0 && (!Array.isArray(entry.linuxSupervisors) || entry.linuxSupervisors.length > MAX_SUPERVISORS || new Set(entry.linuxSupervisors.map((s) => s?.pid)).size !== entry.linuxSupervisors.length || !entry.linuxSupervisors.every((s) => s && Object.keys(s).length === 2 && validPid(s.pid) && entry.supervisors?.includes(s.pid) && validLinuxContainment(s.containment)))) throw Error();
+        if (entry.darwinSupervisors !== void 0 && (!Array.isArray(entry.darwinSupervisors) || entry.darwinSupervisors.length > MAX_SUPERVISORS || new Set(entry.darwinSupervisors.map((s) => s?.pid)).size !== entry.darwinSupervisors.length || !entry.darwinSupervisors.every((s) => s && Object.keys(s).length === 2 && validPid(s.pid) && entry.supervisors?.includes(s.pid) && !entry.linuxSupervisors?.some((l) => l.pid === s.pid) && validDarwinContainment(s.containment)))) throw Error();
         if (entry.guardEvents) {
           verifyGuardEvidence(entry.guardEvents);
           if (entry.guardEvents.some((record2) => record2.event.requestId !== id2)) throw Error();
@@ -26758,7 +26881,7 @@ var NativeJournal = class _NativeJournal {
     if (plaintext.length > 262144) throw failure2("JOURNAL_ENTRY_TOO_LARGE");
     const envelope = this.box.seal(plaintext, "execution:" + entry.executionId), oldSize = this.sizes.get(entry.executionId) ?? 0;
     if (this.totalBytes + envelope.length > this.options.maxBytes) throw failure2("JOURNAL_CAPACITY_EXCEEDED");
-    const temporary = path5.join(this.dir, entry.executionId + "." + this.lock.nonce + "." + randomBytes4(8).toString("hex") + ".tmp");
+    const temporary = path6.join(this.dir, entry.executionId + "." + this.lock.nonce + "." + randomBytes4(8).toString("hex") + ".tmp");
     const handle = await open3(temporary, constants2.O_CREAT | constants2.O_EXCL | constants2.O_WRONLY, 384);
     try {
       await handle.writeFile(envelope);
@@ -26826,13 +26949,20 @@ var NativeJournal = class _NativeJournal {
     });
   }
   /** Durably records a JobHost pid before that JobHost receives its request; a failure must stop the launch. */
-  supervisor(id2, pid) {
+  supervisor(id2, pid, containment) {
     return this.enqueue(async () => {
       const e = this.need(id2);
       if (!validPid(pid)) throw failure2("JOURNAL_INPUT_INVALID");
       if (e.state !== "running" || !e.supervisors) throw failure2("JOURNAL_STATE_INVALID");
-      if (e.supervisors.length >= MAX_SUPERVISORS) throw failure2("JOURNAL_SUPERVISOR_LIMIT");
-      e.supervisors.push(pid);
+      if (containment !== void 0) {
+        const linux = validLinuxContainment(containment), darwin = !linux && validDarwinContainment(containment);
+        if (!linux && !darwin || !e.supervisors.includes(pid) || e.linuxSupervisors?.some((s) => s.pid === pid) || e.darwinSupervisors?.some((s) => s.pid === pid)) throw failure2("JOURNAL_INPUT_INVALID");
+        if (linux) (e.linuxSupervisors ??= []).push({ pid, containment: clone2(containment) });
+        else (e.darwinSupervisors ??= []).push({ pid, containment: clone2(containment) });
+      } else {
+        if (e.supervisors.length >= MAX_SUPERVISORS) throw failure2("JOURNAL_SUPERVISOR_LIMIT");
+        e.supervisors.push(pid);
+      }
       e.updatedAt = this.now().toISOString();
       await this.persist(e);
     });
@@ -26875,7 +27005,7 @@ var NativeJournal = class _NativeJournal {
   }
   get(id2) {
     return this.enqueue(async () => {
-      if (!uuid13.test(id2)) throw failure2("JOURNAL_INPUT_INVALID");
+      if (!uuid14.test(id2)) throw failure2("JOURNAL_INPUT_INVALID");
       const e = this.entries.get(id2);
       return e ? clone2(e) : null;
     });
@@ -26933,11 +27063,13 @@ var NativeJournal = class _NativeJournal {
   recoverAfterRestart(liveness) {
     return this.enqueue(async () => {
       let count3 = 0;
-      const pids = [...new Set([...this.entries.values()].filter((e) => ["accepted", "running"].includes(e.state)).flatMap((e) => e.supervisors ?? []))];
+      const interrupted = [...this.entries.values()].filter((e) => ["accepted", "running"].includes(e.state));
+      const pids = [...new Set(interrupted.flatMap((e) => e.supervisors ?? []))];
+      const linuxSupervisors = interrupted.flatMap((e) => e.linuxSupervisors ?? []), darwinSupervisors = interrupted.flatMap((e) => e.darwinSupervisors ?? []);
       let live = /* @__PURE__ */ new Set();
       if (pids.length) {
         try {
-          live = liveness ? await liveness(pids) : null;
+          live = liveness ? await liveness(pids, linuxSupervisors, darwinSupervisors) : null;
         } catch {
           live = null;
         }
@@ -27010,7 +27142,7 @@ var NativeJournal = class _NativeJournal {
       try {
         const st = await lstat2(this.lock.path);
         if (!st.isFile() || st.isSymbolicLink() || st.size > 1024) throw failure2("JOURNAL_LOCK_LOST");
-        const value = JSON.parse(await readFile2(this.lock.path, "utf8"));
+        const value = JSON.parse(await readFile3(this.lock.path, "utf8"));
         if (value.nonce !== this.lock.nonce) throw failure2("JOURNAL_LOCK_LOST");
         await this.lock.file.close();
         await rm2(this.lock.path);
@@ -27031,25 +27163,25 @@ import { constants as constants4 } from "node:fs";
 import { openSync, closeSync } from "node:fs";
 import { isatty, ReadStream, WriteStream } from "node:tty";
 import { createInterface } from "node:readline/promises";
-import path7 from "node:path";
+import path8 from "node:path";
 
 // agent/src/owner-permissions.ts
 import { createHash as createHash8 } from "node:crypto";
 import { constants as constants3 } from "node:fs";
 import { access, lstat as lstat3, realpath as realpath3 } from "node:fs/promises";
-import path6 from "node:path";
-var uuid14 = external_exports.string().uuid().toLowerCase();
+import path7 from "node:path";
+var uuid15 = external_exports.string().uuid().toLowerCase();
 var name = external_exports.string().regex(/^[a-zA-Z0-9_.-]{1,64}$/).toLowerCase();
 var changeSchema = external_exports.discriminatedUnion("kind", [
-  external_exports.object({ workspaceGrantId: uuid14, kind: external_exports.literal("write"), enabled: external_exports.boolean() }).strict(),
-  external_exports.object({ workspaceGrantId: uuid14, kind: external_exports.literal("localhost"), enabled: external_exports.boolean(), port: external_exports.number().int().min(1).max(65535) }).strict(),
-  external_exports.object({ workspaceGrantId: uuid14, kind: external_exports.literal("command"), enabled: external_exports.boolean(), name, executable: external_exports.string().min(1).max(4096).optional() }).strict()
+  external_exports.object({ workspaceGrantId: uuid15, kind: external_exports.literal("write"), enabled: external_exports.boolean() }).strict(),
+  external_exports.object({ workspaceGrantId: uuid15, kind: external_exports.literal("localhost"), enabled: external_exports.boolean(), port: external_exports.number().int().min(1).max(65535) }).strict(),
+  external_exports.object({ workspaceGrantId: uuid15, kind: external_exports.literal("command"), enabled: external_exports.boolean(), name, executable: external_exports.string().min(1).max(4096).optional() }).strict()
 ]);
 var PERMISSION_HISTORY_LIMIT = 64;
 var PermissionHistorySchema = external_exports.array(external_exports.object({
-  id: uuid14,
+  id: uuid15,
   changedAt: external_exports.string().datetime(),
-  workspaceGrantId: uuid14,
+  workspaceGrantId: uuid15,
   kind: external_exports.enum(["write", "command", "localhost"]),
   enabled: external_exports.boolean(),
   resourceHash: external_exports.string().regex(/^[a-f0-9]{64}$/),
@@ -27111,10 +27243,10 @@ async function planPermissionChange(current2, programs, input2) {
     let executableIdentity = null;
     if (change.enabled) {
       const executable = change.executable;
-      if (!path6.isAbsolute(executable) || process.platform === "win32" && path6.extname(executable).toLowerCase() !== ".exe" || /[\u0000-\u001f\u007f-\u009f\u061c\u200b-\u200f\u2028-\u202e\u2060-\u2069\ufeff]/u.test(executable)) invalid2();
+      if (!path7.isAbsolute(executable) || process.platform === "win32" && path7.extname(executable).toLowerCase() !== ".exe" || /[\u0000-\u001f\u007f-\u009f\u061c\u200b-\u200f\u2028-\u202e\u2060-\u2069\ufeff]/u.test(executable)) invalid2();
       const stat2 = await lstat3(executable).catch(() => invalid2());
       const canonical2 = await realpath3(executable).catch(() => invalid2());
-      if (!stat2.isFile() || stat2.isSymbolicLink() || !equalPath(path6.resolve(executable), canonical2)) invalid2();
+      if (!stat2.isFile() || stat2.isSymbolicLink() || !equalPath(path7.resolve(executable), canonical2)) invalid2();
       if (process.platform !== "win32") await access(canonical2, constants3.X_OK).catch(() => invalid2());
       if (Object.hasOwn(nextPrograms, change.name) && !equalPath(nextPrograms[change.name], canonical2)) invalid2("COMMAND_CONFLICT");
       nextPrograms[change.name] = canonical2;
@@ -27192,17 +27324,17 @@ async function choosePosixFolder() {
   return terminal2(async (ask) => {
     const folder = await ask("Local Commander: enter the absolute folder to allow reading and writing files (empty cancels): ");
     if (!folder) return null;
-    if (!path7.isAbsolute(folder) || folder.length > 4096 || /[\u0000-\u001f]/.test(folder)) throw Error("WORKSPACE_INVALID");
+    if (!path8.isAbsolute(folder) || folder.length > 4096 || /[\u0000-\u001f]/.test(folder)) throw Error("WORKSPACE_INVALID");
     return await ask("Read/write folder: " + permissionLabel(folder) + "\nType APPROVE to accept: ") === "APPROVE" ? folder : null;
   }, 12e4);
 }
 async function choosePosixAccess() {
   return terminal2(async (ask) => {
-    if (process.platform === "darwin") await ask("This experimental macOS runtime supports files and localhost. Command execution and Git are unavailable pending process-cleanup qualification. Press Enter to review access: ");
+    if (process.platform === "darwin") await ask("Local Commander runs each command as its own launchd job and stops that job's processes when the command ends; work handed to other services is not stopped. Press Enter to review access: ");
     const choice = await ask("Local Commander access\n1. One folder: read and write files\n2. Full Access: account capabilities across this computer, including commands and localhost\nEnter 1 or 2 (empty cancels): ");
     if (choice !== "1" && choice !== "2") return null;
     const folder = choice === "2" ? "/" : await ask("Absolute folder path: ");
-    if (!path7.isAbsolute(folder) || folder.length > 4096 || /[\u0000-\u001f]/.test(folder)) throw Error("WORKSPACE_INVALID");
+    if (!path8.isAbsolute(folder) || folder.length > 4096 || /[\u0000-\u001f]/.test(folder)) throw Error("WORKSPACE_INVALID");
     const summary = choice === "2" ? "Full Access allows programs to use your account's capabilities across this computer. This is not an OS sandbox." : "Allow reading and writing files in " + permissionLabel(folder) + ".";
     if (await ask(summary + "\nThis replaces the previous folder/command/localhost selection and persists until revoked.\nType APPROVE to accept: ") !== "APPROVE") return null;
     return { mode: choice === "2" ? "all-drives" : "folders", paths: [folder] };
@@ -27210,14 +27342,14 @@ async function choosePosixAccess() {
 }
 
 // agent/src/private-store.ts
-import { lstat as lstat4, open as open4, readFile as readFile3, readdir as readdir3, realpath as realpath4, rename as rename2, rm as rm3, writeFile as writeFile2 } from "node:fs/promises";
-import path9 from "node:path";
+import { lstat as lstat4, open as open4, readFile as readFile4, readdir as readdir3, realpath as realpath4, rename as rename2, rm as rm3, writeFile as writeFile2 } from "node:fs/promises";
+import path10 from "node:path";
 import os2 from "node:os";
 import { createHash as createHash12, createPrivateKey as createPrivateKey2, createPublicKey as createPublicKey4, generateKeyPairSync, randomBytes as randomBytes5, randomUUID as randomUUID6 } from "node:crypto";
 import { spawn as spawn3 } from "node:child_process";
 
 // agent/src/access-selection.ts
-import path8 from "node:path";
+import path9 from "node:path";
 function parseAccessSelection(value, platform = process.platform) {
   const fail7 = () => {
     throw Error("ACCESS_SELECTION_INVALID");
@@ -27231,7 +27363,7 @@ function parseAccessSelection(value, platform = process.platform) {
   }
   if (input2.mode !== "folders" && input2.mode !== "all-drives") return fail7();
   if (input2.paths.length < 1 || input2.paths.length > (input2.mode === "folders" ? 1 : 26)) return fail7();
-  const paths = platform === "win32" ? path8.win32 : path8.posix;
+  const paths = platform === "win32" ? path9.win32 : path9.posix;
   const key = (value2) => platform === "win32" ? paths.normalize(value2).toLowerCase() : paths.normalize(value2);
   const roots = [];
   for (const candidate of input2.paths) {
@@ -27250,7 +27382,7 @@ import { createHash as createHash10, KeyObject as KeyObject2 } from "node:crypto
 // packages/policy/src/evaluator.ts
 import { createHash as createHash9 } from "node:crypto";
 import { isDeepStrictEqual } from "node:util";
-var uuid15 = external_exports.string().uuid().toLowerCase();
+var uuid16 = external_exports.string().uuid().toLowerCase();
 var slug2 = external_exports.string().regex(/^[a-z][a-z0-9._-]{0,63}$/);
 var utc = external_exports.iso.datetime({ offset: false });
 var risk = external_exports.enum(["low", "moderate", "high", "critical"]);
@@ -27275,7 +27407,7 @@ var PolicyRuleSchema = external_exports.object({
   }
 });
 var PolicySnapshotSchema = external_exports.object({
-  tenantId: uuid15,
+  tenantId: uuid16,
   policyId: slug2,
   policyVersion: external_exports.string().trim().min(1).max(64),
   issuedAt: utc,
@@ -27389,14 +27521,14 @@ async function verifySignedPolicyBundle(candidate, authority, checkpointInput, n
 
 // packages/policy/src/approvals.ts
 import { createHash as createHash11, randomUUID as randomUUID5 } from "node:crypto";
-var uuid16 = TrustedActionBindingSchema.shape.tenantId;
+var uuid17 = TrustedActionBindingSchema.shape.tenantId;
 var utc3 = TrustedActionBindingSchema.shape.expiresAt;
 var digest3 = ResourceRefSchema.shape.locatorFingerprint;
 var requirement = PolicyDecisionSchema.shape.approval.unwrap();
 var ApprovalActionSchema = external_exports.object({ request: BoundActionRequestSchema, payloadHash: digest3 }).strict();
 var ApprovalAuthoritySchema = external_exports.object({
-  tenantId: uuid16,
-  accountId: uuid16,
+  tenantId: uuid17,
+  accountId: uuid17,
   approvalClass: requirement.shape.approvalClass,
   authenticatedAt: utc3,
   expiresAt: utc3
@@ -27408,11 +27540,11 @@ var ContextSchema = external_exports.object({
   policyExpiresAt: utc3
 }).strict();
 var GrantSchema = external_exports.object({
-  approvalId: uuid16,
-  requestId: uuid16,
-  decisionId: uuid16,
+  approvalId: uuid17,
+  requestId: uuid17,
+  decisionId: uuid17,
   bindingHash: digest3,
-  approverAccountId: uuid16,
+  approverAccountId: uuid17,
   approvalClass: requirement.shape.approvalClass,
   scope: requirement.shape.scope,
   issuedAt: utc3,
@@ -27421,8 +27553,8 @@ var GrantSchema = external_exports.object({
   uses: external_exports.number().int().min(0).max(Number.MAX_SAFE_INTEGER)
 }).strict().refine((value) => Date.parse(value.issuedAt) < Date.parse(value.expiresAt) && (value.scope === "once" ? value.uses === (value.state === "consumed" ? 1 : 0) : value.state !== "consumed"));
 var ApprovalLedgerSchema = external_exports.object({
-  tenantId: uuid16,
-  deviceId: uuid16,
+  tenantId: uuid17,
+  deviceId: uuid17,
   lastChangedAt: utc3,
   grants: external_exports.array(GrantSchema).max(128)
 }).strict().refine((value) => new Set(value.grants.map((grant) => grant.approvalId)).size === value.grants.length && new Set(value.grants.map((grant) => grant.requestId)).size === value.grants.length && value.grants.every((grant) => Date.parse(grant.issuedAt) <= Date.parse(value.lastChangedAt)));
@@ -27499,7 +27631,7 @@ function issueApproval(ledgerInput, context, authorityInput, now, expiresAt) {
 }
 function consumeApproval(ledgerInput, context, approvalId, now) {
   try {
-    const ledger = current(ledgerInput, now), bound = binding(ledger, context, now), id2 = uuid16.parse(approvalId);
+    const ledger = current(ledgerInput, now), bound = binding(ledger, context, now), id2 = uuid17.parse(approvalId);
     const grant = ledger.grants.find((candidate) => candidate.approvalId === id2);
     if (!grant || grant.state !== "active" || grant.bindingHash !== bound.bindingHash || grant.uses === Number.MAX_SAFE_INTEGER || Date.parse(now) < Date.parse(grant.issuedAt) || grant.scope === "once" && (grant.requestId !== bound.request.requestId || grant.decisionId !== bound.decision.decisionId)) throw Error();
     const consumed = { ...grant, uses: grant.uses + 1, state: grant.scope === "once" ? "consumed" : "active" };
@@ -27510,7 +27642,7 @@ function consumeApproval(ledgerInput, context, approvalId, now) {
 }
 function revokeApproval(ledgerInput, approvalId, now) {
   try {
-    const ledger = current(ledgerInput, now), id2 = uuid16.parse(approvalId);
+    const ledger = current(ledgerInput, now), id2 = uuid17.parse(approvalId);
     return { ...ledger, grants: ledger.grants.map((grant) => grant.approvalId === id2 && grant.state === "active" ? { ...grant, state: "revoked" } : grant) };
   } catch {
     throw Error("APPROVAL_INVALID");
@@ -27526,11 +27658,11 @@ function fail2(code) {
   return Object.assign(new Error(code), { code });
 }
 function equalPath2(a, b) {
-  return process.platform === "win32" ? path9.resolve(a).toLowerCase() === path9.resolve(b).toLowerCase() : path9.resolve(a) === path9.resolve(b);
+  return process.platform === "win32" ? path10.resolve(a).toLowerCase() === path10.resolve(b).toLowerCase() : path10.resolve(a) === path10.resolve(b);
 }
 function under(child, parent) {
-  const rel = path9.relative(parent, child);
-  return rel !== "" && !rel.startsWith("..") && !path9.isAbsolute(rel);
+  const rel = path10.relative(parent, child);
+  return rel !== "" && !rel.startsWith("..") && !path10.isAbsolute(rel);
 }
 function canonicalPublicKey(value) {
   try {
@@ -27613,8 +27745,8 @@ function validateState(value) {
   const programs = value.programs ?? {};
   const pendingWorkspaceRevokes = value.pendingWorkspaceRevokes ?? [];
   if (!Array.isArray(pendingWorkspaceRevokes) || pendingWorkspaceRevokes.length > 32 || pendingWorkspaceRevokes.some((id2) => typeof id2 !== "string" || !UUID.test(id2) || id2 !== id2.toLowerCase()) || new Set(pendingWorkspaceRevokes).size !== pendingWorkspaceRevokes.length) throw fail2("STATE_CORRUPT");
-  if (!programs || typeof programs !== "object" || Array.isArray(programs) || Object.keys(programs).length > 32 || Object.entries(programs).some(([name2, executable]) => !/^[a-z0-9_.-]{1,64}$/.test(name2) || typeof executable !== "string" || !path9.isAbsolute(executable) || executable.length > 4096 || /[\u0000-\u001f]/.test(executable))) throw fail2("STATE_CORRUPT");
-  if (!Array.isArray(workspaces) || workspaces.length > 32 || workspaces.some((w) => !w || !UUID.test(w.workspaceGrantId) || typeof w.root !== "string" || !path9.isAbsolute(w.root) || w.root.length > 4096 || /[\u0000-\u001f]/.test(w.root) || !/^[a-f0-9]{64}$/.test(w.rootHash) || typeof w.displayName !== "string" || !w.displayName || w.displayName.length > 120 || w.policyVersion !== 1 || !w.permissions || w.permissions.readFiles !== true || typeof w.permissions.writeFiles !== "boolean" || typeof w.permissions.executeCommands !== "boolean" || typeof w.permissions.localhost !== "boolean" || !Array.isArray(w.allowedCommands) || w.allowedCommands.length > 32 || w.allowedCommands.some((name2) => typeof name2 !== "string" || !Object.hasOwn(programs, name2)) || new Set(w.allowedCommands).size !== w.allowedCommands.length || w.permissions.executeCommands !== (w.fullAccess === true || w.allowedCommands.length > 0) || !Array.isArray(w.localhostPorts) || w.localhostPorts.length > 32 || w.localhostPorts.some((port) => !Number.isInteger(port) || port < 1 || port > 65535) || new Set(w.localhostPorts).size !== w.localhostPorts.length || w.permissions.localhost !== (w.fullAccess === true || w.localhostPorts.length > 0))) throw fail2("STATE_CORRUPT");
+  if (!programs || typeof programs !== "object" || Array.isArray(programs) || Object.keys(programs).length > 32 || Object.entries(programs).some(([name2, executable]) => !/^[a-z0-9_.-]{1,64}$/.test(name2) || typeof executable !== "string" || !path10.isAbsolute(executable) || executable.length > 4096 || /[\u0000-\u001f]/.test(executable))) throw fail2("STATE_CORRUPT");
+  if (!Array.isArray(workspaces) || workspaces.length > 32 || workspaces.some((w) => !w || !UUID.test(w.workspaceGrantId) || typeof w.root !== "string" || !path10.isAbsolute(w.root) || w.root.length > 4096 || /[\u0000-\u001f]/.test(w.root) || !/^[a-f0-9]{64}$/.test(w.rootHash) || typeof w.displayName !== "string" || !w.displayName || w.displayName.length > 120 || w.policyVersion !== 1 || !w.permissions || w.permissions.readFiles !== true || typeof w.permissions.writeFiles !== "boolean" || typeof w.permissions.executeCommands !== "boolean" || typeof w.permissions.localhost !== "boolean" || !Array.isArray(w.allowedCommands) || w.allowedCommands.length > 32 || w.allowedCommands.some((name2) => typeof name2 !== "string" || !Object.hasOwn(programs, name2)) || new Set(w.allowedCommands).size !== w.allowedCommands.length || w.permissions.executeCommands !== (w.fullAccess === true || w.allowedCommands.length > 0) || !Array.isArray(w.localhostPorts) || w.localhostPorts.length > 32 || w.localhostPorts.some((port) => !Number.isInteger(port) || port < 1 || port > 65535) || new Set(w.localhostPorts).size !== w.localhostPorts.length || w.permissions.localhost !== (w.fullAccess === true || w.localhostPorts.length > 0))) throw fail2("STATE_CORRUPT");
   const audit = value.audit === void 0 ? void 0 : validateAudit(value.audit);
   if (new Set(workspaces.map((w) => w.workspaceGrantId)).size !== workspaces.length || new Set(workspaces.map((w) => w.rootHash)).size !== workspaces.length) throw fail2("STATE_CORRUPT");
   if (workspaces.some((w) => pendingWorkspaceRevokes.includes(w.workspaceGrantId))) throw fail2("STATE_CORRUPT");
@@ -27624,9 +27756,9 @@ function validateState(value) {
   return { version: 1, publicKeyPem: value.publicKeyPem, privateKeyPem: value.privateKeyPem, fingerprint: value.fingerprint, dataKey: value.dataKey, ...enrollment ? { enrollment } : {}, workspaces, programs, pendingWorkspaceRevokes, ...value.permissionHistory ? { permissionHistory: permissionHistory.data } : {}, ...policyBundle ? { policyBundle } : {}, ...approvals?.success ? { approvals: approvals.data } : {}, ...value.guardRequired ? { guardRequired: true } : {}, ...guard ? { guard } : {}, ...audit ? { audit } : {} };
 }
 async function noSymlinkChain(target) {
-  if (!path9.isAbsolute(target)) throw fail2("STORE_DIRECTORY_INVALID");
-  const absolute2 = path9.resolve(target);
-  if (absolute2 === path9.parse(absolute2).root) throw fail2("STORE_DIRECTORY_INVALID");
+  if (!path10.isAbsolute(target)) throw fail2("STORE_DIRECTORY_INVALID");
+  const absolute2 = path10.resolve(target);
+  if (absolute2 === path10.parse(absolute2).root) throw fail2("STORE_DIRECTORY_INVALID");
   const missing = [];
   let cursor = absolute2;
   for (; ; ) {
@@ -27637,7 +27769,7 @@ async function noSymlinkChain(target) {
     } catch (error62) {
       if (error62.code !== "ENOENT") throw error62;
       missing.push(cursor);
-      const parent = path9.dirname(cursor);
+      const parent = path10.dirname(cursor);
       if (parent === cursor) throw fail2("STORE_DIRECTORY_INVALID");
       cursor = parent;
     }
@@ -27647,15 +27779,15 @@ async function noSymlinkChain(target) {
   return absolute2;
 }
 function allowedDirectory(absolute2) {
-  const localAppData = process.env.LOCALAPPDATA || path9.join(os2.homedir(), "AppData", "Local");
-  const appRoot = path9.resolve(localAppData, "LocalCommander");
-  const tempRoot = path9.resolve(os2.tmpdir());
+  const localAppData = process.env.LOCALAPPDATA || path10.join(os2.homedir(), "AppData", "Local");
+  const appRoot = path10.resolve(localAppData, "LocalCommander");
+  const tempRoot = path10.resolve(os2.tmpdir());
   if (under(absolute2, appRoot)) return;
-  if (under(absolute2, tempRoot) && /^lc-private-[A-Za-z0-9_.-]+$/i.test(path9.basename(absolute2))) return;
+  if (under(absolute2, tempRoot) && /^lc-private-[A-Za-z0-9_.-]+$/i.test(path10.basename(absolute2))) return;
   throw fail2("STORE_DIRECTORY_POLICY");
 }
 async function canonicalBridge(value) {
-  if (typeof value !== "string" || !path9.isAbsolute(value) || path9.extname(value).toLowerCase() !== ".exe") throw fail2("BRIDGE_INVALID");
+  if (typeof value !== "string" || !path10.isAbsolute(value) || path10.extname(value).toLowerCase() !== ".exe") throw fail2("BRIDGE_INVALID");
   const stat2 = await lstat4(value).catch(() => {
     throw fail2("BRIDGE_INVALID");
   });
@@ -27699,28 +27831,28 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
     const memoryFile = (name2) => name2 === "host-memory.json" || /^host-memory\.json\.[1-9][0-9]{0,9}\.tmp$/.test(name2);
     if (names.some((name2) => !approved.has(name2) && !memoryFile(name2))) throw fail2("STORE_DIRECTORY_UNKNOWN");
     for (const name2 of names.filter(memoryFile)) {
-      const stat2 = await lstat4(path9.join(absolute2, name2));
+      const stat2 = await lstat4(path10.join(absolute2, name2));
       if (!stat2.isFile() || stat2.isSymbolicLink() || stat2.size > 32768) throw fail2("STORE_DIRECTORY_INVALID");
     }
     for (const name2 of ["agent-process.json", "optimization", ".local-commander"]) {
       if (!names.includes(name2)) continue;
-      const filename = path9.join(absolute2, name2), stat2 = await lstat4(filename);
+      const filename = path10.join(absolute2, name2), stat2 = await lstat4(filename);
       if (stat2.isSymbolicLink() || (name2 !== "agent-process.json" ? !stat2.isDirectory() : !stat2.isFile() || stat2.size < 1 || stat2.size > 8192)) throw fail2("STORE_DIRECTORY_INVALID");
       if (name2 === "agent-process.json") {
         let value;
         try {
-          value = JSON.parse(await readFile3(filename, "utf8"));
+          value = JSON.parse(await readFile4(filename, "utf8"));
         } catch {
           throw fail2("STORE_DIRECTORY_INVALID");
         }
-        if (!value || !Number.isSafeInteger(value.pid) || value.pid <= 0 || typeof value.runtimeDir !== "string" || !path9.isAbsolute(value.runtimeDir) || value.runtimeDir.length > 4096 || /[\u0000-\u001f]/.test(value.runtimeDir) || typeof value.version !== "string" || !/^[0-9]+\.[0-9]+\.[0-9]+(?:[-+][A-Za-z0-9.-]+)?$/.test(value.version) || typeof value.startedAt !== "string" || !Number.isFinite(Date.parse(value.startedAt))) throw fail2("STORE_DIRECTORY_INVALID");
+        if (!value || !Number.isSafeInteger(value.pid) || value.pid <= 0 || typeof value.runtimeDir !== "string" || !path10.isAbsolute(value.runtimeDir) || value.runtimeDir.length > 4096 || /[\u0000-\u001f]/.test(value.runtimeDir) || typeof value.version !== "string" || !/^[0-9]+\.[0-9]+\.[0-9]+(?:[-+][A-Za-z0-9.-]+)?$/.test(value.version) || typeof value.startedAt !== "string" || !Number.isFinite(Date.parse(value.startedAt))) throw fail2("STORE_DIRECTORY_INVALID");
       }
     }
     const posix = process.platform !== "win32" ? await PosixProtection.open(absolute2, bridge) : void 0;
     if (!posix) await _WindowsPrivateStore.invoke(bridge, "init-directory", { path: absolute2 }, 5e3, false);
     const canonical2 = await realpath4(absolute2);
     if (!equalPath2(absolute2, canonical2) || (await lstat4(canonical2)).isSymbolicLink()) throw fail2("STORE_DIRECTORY_INVALID");
-    const markerPath = path9.join(canonical2, MARKER);
+    const markerPath = path10.join(canonical2, MARKER);
     try {
       await writeFile2(markerPath, "LocalCommander private state\n", { flag: "wx", mode: 384 });
     } catch (error62) {
@@ -27738,10 +27870,10 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
     return result2;
   }
   statePath() {
-    return path9.join(this.dir, "owner-state.dat");
+    return path10.join(this.dir, "owner-state.dat");
   }
   lockPath() {
-    return path9.join(this.dir, "owner-state.lock");
+    return path10.join(this.dir, "owner-state.lock");
   }
   static invoke(bridge, arg, body, timeoutMs2, interactive, signal) {
     return new Promise((resolve, reject) => {
@@ -27832,7 +27964,7 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
       await handle.close().catch(() => {
       });
       try {
-        const current2 = await readFile3(this.lockPath(), "utf8");
+        const current2 = await readFile4(this.lockPath(), "utf8");
         if (current2 === nonce2) await rm3(this.lockPath());
       } catch {
       }
@@ -27854,7 +27986,7 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
     try {
       const stat2 = await lstat4(this.statePath());
       if (!stat2.isFile() || stat2.isSymbolicLink() || stat2.size < 1 || stat2.size > MAX_STATE_BYTES * 4) throw fail2("STATE_CORRUPT");
-      const encrypted = this.posix ? await privateRead(this.statePath(), MAX_STATE_BYTES * 4) : await readFile3(this.statePath());
+      const encrypted = this.posix ? await privateRead(this.statePath(), MAX_STATE_BYTES * 4) : await readFile4(this.statePath());
       const plaintext = await this.unprotect(encrypted);
       if (plaintext.length > MAX_STATE_BYTES) throw fail2("STATE_CORRUPT");
       return validateState(JSON.parse(plaintext.toString("utf8")));
@@ -27868,7 +28000,7 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
     try {
       const stat2 = await lstat4(this.statePath());
       if (!stat2.isFile() || stat2.isSymbolicLink() || stat2.size > MAX_STATE_BYTES * 4) throw fail2("STATE_CORRUPT");
-      return createHash12("sha256").update(this.posix ? await privateRead(this.statePath(), MAX_STATE_BYTES * 4) : await readFile3(this.statePath())).digest("hex");
+      return createHash12("sha256").update(this.posix ? await privateRead(this.statePath(), MAX_STATE_BYTES * 4) : await readFile4(this.statePath())).digest("hex");
     } catch (error62) {
       if (error62.code === "ENOENT") return null;
       throw error62;
@@ -27879,7 +28011,7 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
     const plaintext = Buffer.from(JSON.stringify(validateState(state)), "utf8");
     if (plaintext.length > MAX_STATE_BYTES) throw fail2("STATE_TOO_LARGE");
     const encrypted = await this.protect(plaintext);
-    const temp = path9.join(this.dir, "owner-state." + randomBytes5(8).toString("hex") + ".tmp");
+    const temp = path10.join(this.dir, "owner-state." + randomBytes5(8).toString("hex") + ".tmp");
     const handle = await open4(temp, constants4.O_CREAT | constants4.O_EXCL | constants4.O_WRONLY, 384);
     let closed = false;
     try {
@@ -28238,11 +28370,14 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
   }
   /** Replace scope only after an explicit local dialog; updates never call this implicitly. */
   async configureAccess() {
+    let account = "";
     const expected = await this.run(() => this.withLock(async () => {
-      if (!(await this.readState())?.enrollment) throw fail2("ENROLLMENT_REQUIRED");
+      const enrollment = (await this.readState())?.enrollment;
+      if (!enrollment) throw fail2("ENROLLMENT_REQUIRED");
+      account = enrollment.accountEmail;
       return this.rawHash();
     }));
-    const decision = await this.chooseAccess();
+    const decision = await this.chooseAccess(account);
     if (decision === null) return null;
     const selected = parseAccessSelection(decision);
     if (!selected) return null;
@@ -28251,7 +28386,7 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
       const stat2 = await lstat4(chosen);
       if (!stat2.isDirectory() || stat2.isSymbolicLink()) throw fail2("WORKSPACE_INVALID");
       const root = await realpath4(chosen);
-      const isDrive = equalPath2(root, path9.parse(root).root);
+      const isDrive = equalPath2(root, path10.parse(root).root);
       if (!equalPath2(root, chosen) || (selected.mode === "all-drives" ? !isDrive : isDrive) || equalPath2(root, this.dir) || under(root, this.dir) || selected.mode === "folders" && under(this.dir, root)) throw fail2("WORKSPACE_INVALID");
       roots.push(root);
     }
@@ -28266,7 +28401,7 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
           workspaceGrantId: existing?.workspaceGrantId ?? randomUUID6(),
           root,
           rootHash,
-          displayName: (path9.basename(root) || root).slice(0, 120),
+          displayName: (path10.basename(root) || root).slice(0, 120),
           policyVersion: 1,
           ...selected.mode === "all-drives" ? { fullAccess: true } : {},
           permissions: { readFiles: true, writeFiles: true, executeCommands: selected.mode === "all-drives", localhost: selected.mode === "all-drives" },
@@ -28285,9 +28420,9 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
       return structuredClone(workspaces);
     }));
   }
-  chooseAccess() {
+  chooseAccess(account) {
     if (this.posix) return this.run(() => choosePosixAccess());
-    return this.run(async () => parseAccessSelection(await _WindowsPrivateStore.invoke(this.bridge, "choose-access", {}, 24e4, true)));
+    return this.run(async () => parseAccessSelection(await _WindowsPrivateStore.invoke(this.bridge, "choose-access", { data: Buffer.from(account, "utf8").toString("base64") }, 24e4, true)));
   }
   loadPermissionHistory() {
     return this.run(async () => structuredClone((await this.readState())?.permissionHistory ?? []));
@@ -28298,7 +28433,7 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
     const stat2 = await lstat4(chosen);
     if (!stat2.isDirectory() || stat2.isSymbolicLink()) throw fail2("WORKSPACE_INVALID");
     const root = await realpath4(chosen);
-    if (!equalPath2(root, chosen) || equalPath2(root, path9.parse(root).root) || equalPath2(root, this.dir) || under(this.dir, root)) throw fail2("WORKSPACE_INVALID");
+    if (!equalPath2(root, chosen) || equalPath2(root, path10.parse(root).root) || equalPath2(root, this.dir) || under(this.dir, root)) throw fail2("WORKSPACE_INVALID");
     const rootHash = createHash12("sha256").update(process.platform === "win32" ? root.toLowerCase() : root).digest("hex");
     return this.run(() => this.withLock(async () => {
       const state = await this.readState();
@@ -28307,7 +28442,7 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
       if (existing) return existing;
       if ((state.workspaces?.length ?? 0) >= 32) throw fail2("WORKSPACE_LIMIT");
       const before = await this.rawHash();
-      const workspace2 = { workspaceGrantId: randomUUID6(), root, rootHash, displayName: path9.basename(root).slice(0, 120), policyVersion: 1, permissions: { readFiles: true, writeFiles: true, executeCommands: false, localhost: false }, allowedCommands: [], localhostPorts: [] };
+      const workspace2 = { workspaceGrantId: randomUUID6(), root, rootHash, displayName: path10.basename(root).slice(0, 120), policyVersion: 1, permissions: { readFiles: true, writeFiles: true, executeCommands: false, localhost: false }, allowedCommands: [], localhostPorts: [] };
       state.workspaces = [...state.workspaces ?? [], workspace2];
       await this.writeState(state, before);
       return workspace2;
@@ -28318,7 +28453,7 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
     return this.run(async () => {
       const result2 = await _WindowsPrivateStore.invoke(this.bridge, "choose-folder", {}, 12e4, true);
       if (result2.path === null) return null;
-      if (typeof result2.path !== "string" || !path9.isAbsolute(result2.path) || result2.path.length > 4096 || /[\u0000-\u001f]/.test(result2.path)) throw fail2("BRIDGE_OUTPUT_INVALID");
+      if (typeof result2.path !== "string" || !path10.isAbsolute(result2.path) || result2.path.length > 4096 || /[\u0000-\u001f]/.test(result2.path)) throw fail2("BRIDGE_OUTPUT_INVALID");
       return result2.path;
     });
   }
@@ -28326,10 +28461,10 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
 
 // src/host-memory.ts
 import os3 from "node:os";
-import path11 from "node:path";
+import path12 from "node:path";
 import { createHash as createHash13 } from "node:crypto";
 import { accessSync, constants as constants5, statSync as statSync2 } from "node:fs";
-import { lstat as lstat5, readFile as readFile4, mkdir as mkdir5, open as open5, rename as rename3, rm as rm4 } from "node:fs/promises";
+import { lstat as lstat5, readFile as readFile5, mkdir as mkdir5, open as open5, rename as rename3, rm as rm4 } from "node:fs/promises";
 
 // packages/agent-cli/bin/monitor-context.mjs
 var AGENT_NAMES = Object.freeze([
@@ -28513,7 +28648,7 @@ function commandPreview(tool, meta3 = {}) {
 
 // src/process.ts
 import { statSync } from "node:fs";
-import path10 from "node:path";
+import path11 from "node:path";
 var WINDOWS_LAUNCH_EXTENSIONS = [".com", ".exe", ".bat", ".cmd"];
 function envValue(env, name2) {
   const key = Object.keys(env).find((k) => k.toUpperCase() === name2.toUpperCase());
@@ -28523,9 +28658,9 @@ function resolveWindowsLauncher(commandName, env = process.env) {
   const extensions = (envValue(env, "PATHEXT") || ".COM;.EXE;.BAT;.CMD").split(";").map((ext) => ext.trim().toLowerCase()).filter((ext) => WINDOWS_LAUNCH_EXTENSIONS.includes(ext));
   for (const entry of (envValue(env, "PATH") ?? "").split(";")) {
     const dir = entry.trim().replace(/^"(.*)"$/, "$1");
-    if (!path10.win32.isAbsolute(dir)) continue;
+    if (!path11.win32.isAbsolute(dir)) continue;
     for (const ext of extensions) {
-      const file2 = path10.win32.join(dir, commandName + ext);
+      const file2 = path11.win32.join(dir, commandName + ext);
       try {
         if (statSync(file2).isFile()) return { file: file2, shell: ext === ".bat" || ext === ".cmd" };
       } catch {
@@ -28566,7 +28701,7 @@ var HostMemory = class {
       try {
         const stat2 = await lstat5(this.file);
         if (!stat2.isFile() || stat2.isSymbolicLink() || stat2.size > 32768) throw Error("HOST_MEMORY_INVALID");
-        const data = State.parse(JSON.parse(await readFile4(this.file, "utf8")));
+        const data = State.parse(JSON.parse(await readFile5(this.file, "utf8")));
         if (data.platform === process.platform) this.entries = data.entries.filter((e) => e.at <= Date.now() && Date.now() - e.at < 30 * 864e5);
       } catch (error62) {
         if (error62.code !== "ENOENT") this.errors++;
@@ -28580,16 +28715,16 @@ var HostMemory = class {
       if (this.programs) {
         try {
           const executable = this.programs[command];
-          available = !!executable && path11.isAbsolute(executable) && statSync2(executable).isFile();
+          available = !!executable && path12.isAbsolute(executable) && statSync2(executable).isFile();
         } catch {
           available = false;
         }
       }
       if (!this.programs && !available && process.platform === "win32") available = !!resolveWindowsLauncher(command);
-      else if (!this.programs && !available) available = (process.env.PATH ?? "").split(path11.delimiter).some((dir) => {
-        if (!path11.isAbsolute(dir)) return false;
+      else if (!this.programs && !available) available = (process.env.PATH ?? "").split(path12.delimiter).some((dir) => {
+        if (!path12.isAbsolute(dir)) return false;
         try {
-          const file2 = path11.join(dir, command);
+          const file2 = path12.join(dir, command);
           accessSync(file2, constants5.X_OK);
           return statSync2(file2).isFile();
         } catch {
@@ -28647,7 +28782,7 @@ var HostMemory = class {
     this.entries = this.entries.slice(-32);
     const encoded = JSON.stringify({ version: 1, platform: process.platform, entries: this.entries }) + "\n";
     this.writing = this.writing.then(async () => {
-      const directory2 = path11.dirname(this.file), temp = this.file + "." + process.pid + ".tmp";
+      const directory2 = path12.dirname(this.file), temp = this.file + "." + process.pid + ".tmp";
       await mkdir5(directory2, { recursive: true, mode: 448 });
       const stat2 = await lstat5(directory2);
       if (!stat2.isDirectory() || stat2.isSymbolicLink()) throw Error("HOST_MEMORY_DIRECTORY_INVALID");
@@ -28671,12 +28806,12 @@ var HostMemory = class {
 // agent/src/tools.ts
 import { constants as constants7 } from "node:fs";
 import { lstat as lstat7, open as open6, readdir as readdir4, realpath as realpath7, rename as rename4, rm as rm5 } from "node:fs/promises";
-import path16 from "node:path";
+import path17 from "node:path";
 import { createHash as createHash14, randomUUID as randomUUID7 } from "node:crypto";
 
 // src/guard.ts
 import { lstat as lstat6, realpath as realpath5 } from "node:fs/promises";
-import path12 from "node:path";
+import path13 from "node:path";
 var SENSITIVE_NAMES = /* @__PURE__ */ new Set([
   ".npmrc",
   ".pypirc",
@@ -28713,12 +28848,12 @@ function comparePath(value) {
   return process.platform === "win32" ? value.toLowerCase() : value;
 }
 function isInside(root, candidate) {
-  const relative = path12.relative(root, candidate);
-  return relative === "" || !path12.isAbsolute(relative) && relative !== ".." && !relative.startsWith(`..${path12.sep}`);
+  const relative = path13.relative(root, candidate);
+  return relative === "" || !path13.isAbsolute(relative) && relative !== ".." && !relative.startsWith(`..${path13.sep}`);
 }
 function splitPathSegments(filePath) {
-  const parsed = path12.parse(path12.resolve(filePath));
-  return path12.relative(parsed.root, path12.resolve(filePath)).split(path12.sep).filter((segment) => segment.length > 0);
+  const parsed = path13.parse(path13.resolve(filePath));
+  return path13.relative(parsed.root, path13.resolve(filePath)).split(path13.sep).filter((segment) => segment.length > 0);
 }
 function isProtectedAuditFile(base) {
   return base === ".local-commander-audit.jsonl" || base.startsWith(".local-commander-audit.jsonl.");
@@ -28733,24 +28868,24 @@ function looksProtected(filePath) {
   return false;
 }
 function looksSensitive(filePath) {
-  const base = path12.basename(filePath).toLowerCase();
+  const base = path13.basename(filePath).toLowerCase();
   if (base === ".env" || base.startsWith(".env.") && base !== ".env.example") return true;
   if (SENSITIVE_NAMES.has(base)) return true;
-  if (SENSITIVE_EXTENSIONS.has(path12.extname(base))) return true;
+  if (SENSITIVE_EXTENSIONS.has(path13.extname(base))) return true;
   const segments = splitPathSegments(filePath).map((segment) => segment.toLowerCase());
   if (segments.slice(0, -1).some((segment) => SENSITIVE_DIRECTORIES.has(segment))) return true;
   const parent = segments.at(-2);
   return SENSITIVE_IN_DIRECTORY.some(([directory, name2]) => directory === parent && name2 === base);
 }
 async function canonicalizePossiblyMissing(inputPath, base) {
-  const absolute2 = path12.isAbsolute(inputPath) ? path12.resolve(inputPath) : path12.resolve(base, inputPath);
-  const parsed = path12.parse(absolute2);
+  const absolute2 = path13.isAbsolute(inputPath) ? path13.resolve(inputPath) : path13.resolve(base, inputPath);
+  const parsed = path13.parse(absolute2);
   let current2 = absolute2;
   const missing = [];
   while (current2 !== parsed.root) {
     try {
       const resolved = await realpath5(current2);
-      return path12.join(resolved, ...missing.reverse());
+      return path13.join(resolved, ...missing.reverse());
     } catch (error62) {
       if (error62.code !== "ENOENT") throw error62;
       let exists = false;
@@ -28761,12 +28896,12 @@ async function canonicalizePossiblyMissing(inputPath, base) {
         if (statError.code !== "ENOENT") throw statError;
       }
       if (exists) throw error62;
-      missing.push(path12.basename(current2));
-      current2 = path12.dirname(current2);
+      missing.push(path13.basename(current2));
+      current2 = path13.dirname(current2);
     }
   }
   const root = await realpath5(parsed.root);
-  return path12.join(root, ...missing.reverse());
+  return path13.join(root, ...missing.reverse());
 }
 var PathGuard = class _PathGuard {
   constructor(roots, allowSensitiveFiles, protectedPaths) {
@@ -28782,7 +28917,7 @@ var PathGuard = class _PathGuard {
     for (const root of roots) {
       let resolved;
       try {
-        resolved = await realpath5(path12.resolve(root));
+        resolved = await realpath5(path13.resolve(root));
       } catch {
         throw new Error(`Configured root does not exist: ${root}`);
       }
@@ -28795,8 +28930,8 @@ var PathGuard = class _PathGuard {
     if (canonical2.length === 0) throw new Error("At least one allowed root is required");
     const protectedPaths = [];
     for (const protectedPath of options.protectedPaths ?? []) {
-      const base = path12.isAbsolute(protectedPath) ? path12.parse(path12.resolve(protectedPath)).root : canonical2[0];
-      const absolute2 = path12.resolve(base, protectedPath);
+      const base = path13.isAbsolute(protectedPath) ? path13.parse(path13.resolve(protectedPath)).root : canonical2[0];
+      const absolute2 = path13.resolve(base, protectedPath);
       if (!protectedPaths.some((existing) => comparePath(existing) === comparePath(absolute2))) protectedPaths.push(absolute2);
       const resolved = await canonicalizePossiblyMissing(protectedPath, base);
       if (!protectedPaths.some((existing) => comparePath(existing) === comparePath(resolved))) {
@@ -28812,7 +28947,7 @@ var PathGuard = class _PathGuard {
   }
   assertNotProtected(candidate) {
     if (looksProtected(candidate)) {
-      throw new Error(`Local Commander protected state is blocked: ${path12.basename(candidate)}`);
+      throw new Error(`Local Commander protected state is blocked: ${path13.basename(candidate)}`);
     }
     const normalizedCandidate = comparePath(candidate);
     for (const protectedPath of this.protectedPaths) {
@@ -28825,13 +28960,13 @@ var PathGuard = class _PathGuard {
     this.assertNotProtected(filePath);
     if (!this.allowSensitiveFiles && looksSensitive(filePath)) {
       throw new Error(
-        `Sensitive file access is blocked by default: ${path12.basename(filePath)}. Enable files.allowSensitiveFiles only if you really need it.`
+        `Sensitive file access is blocked by default: ${path13.basename(filePath)}. Enable files.allowSensitiveFiles only if you really need it.`
       );
     }
   }
   async resolveExisting(inputPath, cwd) {
     const base = cwd ? await this.resolveExisting(cwd) : this.roots[0];
-    const candidate = path12.isAbsolute(inputPath) ? path12.resolve(inputPath) : path12.resolve(base, inputPath);
+    const candidate = path13.isAbsolute(inputPath) ? path13.resolve(inputPath) : path13.resolve(base, inputPath);
     this.assertNotProtected(candidate);
     const resolved = await realpath5(candidate);
     this.assertWithinRoots(resolved);
@@ -28846,7 +28981,7 @@ var PathGuard = class _PathGuard {
   }
   async resolveForWrite(inputPath, cwd) {
     const base = cwd ? await this.resolveDirectory(cwd) : this.roots[0];
-    const candidate = path12.isAbsolute(inputPath) ? path12.resolve(inputPath) : path12.resolve(base, inputPath);
+    const candidate = path13.isAbsolute(inputPath) ? path13.resolve(inputPath) : path13.resolve(base, inputPath);
     this.assertNotProtected(candidate);
     let existing;
     try {
@@ -28868,11 +29003,11 @@ var PathGuard = class _PathGuard {
       this.assertSafeFile(existing);
       return existing;
     }
-    const parent = await realpath5(path12.dirname(candidate));
+    const parent = await realpath5(path13.dirname(candidate));
     this.assertWithinRoots(parent);
     this.assertNotProtected(parent);
     this.assertSafeFile(candidate);
-    const target = path12.join(parent, path12.basename(candidate));
+    const target = path13.join(parent, path13.basename(candidate));
     this.assertSafeFile(target);
     return target;
   }
@@ -28882,8 +29017,8 @@ var PathGuard = class _PathGuard {
 };
 
 // src/windows-file-read.ts
-import { execFile } from "node:child_process";
-import path13 from "node:path";
+import { execFile as execFile3 } from "node:child_process";
+import path14 from "node:path";
 function readWindowsFile(bridge, file2, maxBytes, signal) {
   return invokeRead(bridge, file2, maxBytes, false, signal);
 }
@@ -28899,13 +29034,52 @@ async function readWindowsFilePrefix(bridge, file2, maxBytes, signal) {
     throw new Error("FILE_READ_FAILED");
   }
 }
+function readWindowsFiles(bridge, files, maxBytes, maxTotalBytes, signal) {
+  const input2 = JSON.stringify({ paths: files });
+  if (process.platform !== "win32" || !path14.isAbsolute(bridge) || files.length < 1 || files.length > 64 || files.some((file2) => !path14.isAbsolute(file2)) || Buffer.byteLength(input2) > 3e5 || !Number.isSafeInteger(maxBytes) || maxBytes < 1 || maxBytes > 1048576 || !Number.isSafeInteger(maxTotalBytes) || maxTotalBytes < 1 || maxTotalBytes > 16777216) {
+    return Promise.reject(new Error("FILE_READ_ARGUMENT_INVALID"));
+  }
+  if (signal?.aborted) return Promise.reject(new Error("CANCELLED"));
+  return new Promise((resolve, reject) => {
+    const child = execFile3(bridge, ["read-files", String(maxBytes), String(maxTotalBytes)], {
+      encoding: "buffer",
+      timeout: 3e4,
+      maxBuffer: Math.ceil(maxTotalBytes / 3) * 4 + files.length * 64 + 512,
+      windowsHide: true,
+      shell: false,
+      env: buildChildEnvironment(process.env, "win32"),
+      signal
+    }, (error62, stdout) => {
+      if (error62) return reject(new Error(signal?.aborted ? "CANCELLED" : "FILE_READ_FAILED"));
+      try {
+        const lines = stdout.toString("utf8").split("\n");
+        if (lines.pop() !== "" || lines.length !== files.length) throw Error();
+        let total = 0;
+        resolve(lines.map((line) => {
+          const value = JSON.parse(line);
+          if (!value || Object.keys(value).length !== 1) throw Error();
+          if (/^(ENOENT|FILE_CHANGED|FILE_UNSUPPORTED_OR_TOO_LARGE|PATH_INVALID|ACCESS_DENIED|IO_FAILED)$/.test(value.error)) return { code: value.error };
+          if (typeof value.data !== "string") throw Error();
+          const data = Buffer.from(value.data, "base64");
+          if (data.toString("base64") !== value.data || data.length > maxBytes || (total += data.length) > maxTotalBytes) throw Error();
+          return { data };
+        }));
+      } catch {
+        reject(new Error("FILE_READ_FAILED"));
+      }
+    });
+    child.stdin.on("error", () => {
+    });
+    child.stdin.end(input2);
+  });
+}
 function invokeRead(bridge, file2, maxBytes, prefix, signal) {
-  if (process.platform !== "win32" || !path13.isAbsolute(bridge) || !path13.isAbsolute(file2) || !Number.isSafeInteger(maxBytes) || maxBytes < 1 || maxBytes > (prefix ? 16777216 : 1048576)) {
+  if (process.platform !== "win32" || !path14.isAbsolute(bridge) || !path14.isAbsolute(file2) || !Number.isSafeInteger(maxBytes) || maxBytes < 1 || maxBytes > (prefix ? 16777216 : 1048576)) {
     return Promise.reject(new Error("FILE_READ_ARGUMENT_INVALID"));
   }
   if (signal?.aborted) return Promise.reject(new Error("CANCELLED"));
   return new Promise((resolve, reject) => {
-    const child = execFile(bridge, prefix ? ["read-prefix", String(maxBytes)] : ["read-file"], {
+    const child = execFile3(bridge, prefix ? ["read-prefix", String(maxBytes)] : ["read-file"], {
       encoding: "buffer",
       timeout: 1e4,
       maxBuffer: prefix ? Math.ceil(maxBytes / 3) * 4 + 512 : 1048576,
@@ -28930,10 +29104,10 @@ function invokeRead(bridge, file2, maxBytes, prefix, signal) {
 // agent/src/posix-platform.ts
 import { constants as constants6 } from "node:fs";
 import { access as access2, realpath as realpath6, stat } from "node:fs/promises";
-import path14 from "node:path";
+import path15 from "node:path";
 async function resolvePosixExecutable(command, searchPath = process.env.PATH ?? "") {
   if (!command || /[\u0000-\u001f]/.test(command)) return null;
-  const candidates = path14.posix.isAbsolute(command) ? [command] : /^[\w.-]+$/.test(command) ? searchPath.split(":").filter((directory) => path14.posix.isAbsolute(directory)).map((directory) => path14.posix.join(directory, command)) : [];
+  const candidates = path15.posix.isAbsolute(command) ? [command] : /^[\w.-]+$/.test(command) ? searchPath.split(":").filter((directory) => path15.posix.isAbsolute(directory)).map((directory) => path15.posix.join(directory, command)) : [];
   for (const candidate of candidates) {
     try {
       const canonical2 = await realpath6(candidate);
@@ -28949,12 +29123,12 @@ async function resolvePosixExecutable(command, searchPath = process.env.PATH ??
 
 // agent/src/job-supervisor.ts
 import { spawn as spawn4 } from "node:child_process";
-import path15 from "node:path";
+import path16 from "node:path";
 function absolute(value) {
-  return typeof value === "string" && value.length > 0 && value.length < 32767 && !value.includes("\0") && path15.isAbsolute(value) && path15.resolve(value) === value;
+  return typeof value === "string" && value.length > 0 && value.length < 32767 && !value.includes("\0") && path16.isAbsolute(value) && path16.resolve(value) === value;
 }
 async function runSupervised(helper, request, options = {}) {
-  if (process.platform !== "win32" && process.platform !== "linux") throw Error("SUPERVISOR_PLATFORM_UNSUPPORTED");
+  if (process.platform !== "win32" && process.platform !== "linux" && process.platform !== "darwin") throw Error("SUPERVISOR_PLATFORM_UNSUPPORTED");
   if (!absolute(helper) || !absolute(request.executable) || !absolute(request.cwd)) throw new TypeError("INVALID_SUPERVISOR_PATH");
   const args = request.args ?? [], timeoutMs2 = request.timeoutMs ?? 6e4, maxProcesses = request.maxProcesses ?? 16, maxBytes = options.maxOutputBytes ?? 98304;
   if (!Array.isArray(args) || args.length > 128 || args.some((v) => typeof v !== "string" || v.length > 8192 || v.includes("\0"))) throw new TypeError("INVALID_SUPERVISOR_ARGS");
@@ -28966,8 +29140,9 @@ async function runSupervised(helper, request, options = {}) {
     const stdout = new Utf8OutputTailBuffer(maxBytes, options.encoding), stderr = new Utf8OutputTailBuffer(maxBytes, options.encoding);
     let pid = null, outcome = null;
     let buffer = "", failure6 = null, closed = false, cancelSent = false;
+    let containmentReceived = false, containmentSaved = process.platform === "win32";
     let killTimer, hardTimer;
-    const child = spawn4(process.platform === "linux" ? process.execPath : helper, process.platform === "linux" ? [helper] : [], { cwd: path15.dirname(helper), stdio: ["pipe", "pipe", "pipe"], windowsHide: true, shell: false, env: buildChildEnvironment(process.env) });
+    const child = spawn4(process.platform === "win32" ? helper : process.execPath, process.platform === "win32" ? [] : [helper], { cwd: path16.dirname(helper), stdio: ["pipe", "pipe", "pipe"], windowsHide: true, shell: false, env: buildChildEnvironment(process.env) });
     const cancel = () => {
       if (closed || cancelSent) return;
       cancelSent = true;
@@ -29005,7 +29180,20 @@ async function runSupervised(helper, request, options = {}) {
         try {
           const m = JSON.parse(line);
           if (!m || typeof m !== "object" || Array.isArray(m) || outcome) throw Error();
-          if (m.type === "started") {
+          if (m.type === "containment") {
+            const containment = m.containment;
+            const valid = (value) => process.platform === "linux" ? validLinuxContainment(value) : process.platform === "darwin" && validDarwinContainment(value);
+            if (!valid(containment) || containmentReceived || pid !== null || child.pid === void 0 || containment.uid !== process.getuid?.()) throw Error();
+            containmentReceived = true;
+            Promise.resolve().then(() => options.onSupervisor?.(child.pid, containment)).then(() => {
+              if (failure6 || closed || cancelSent) return;
+              containmentSaved = true;
+              child.stdin.write("continue\n", (error62) => {
+                if (error62) fail7("SUPERVISOR_CONTROL_CLOSED");
+              });
+            }, () => fail7("SUPERVISOR_START_FAILED"));
+          } else if (m.type === "started") {
+            if (!containmentSaved) throw Error();
             if (pid !== null || !Number.isSafeInteger(m.pid) || m.pid <= 0) throw Error();
             pid = m.pid;
             options.onStarted?.(pid);
@@ -29147,24 +29335,33 @@ function encodeText(text3, encoding) {
   const bytes3 = Buffer.from("\uFEFF" + text3.replace(/[\ud800-\udbff](?![\udc00-\udfff])|(?<![\ud800-\udbff])[\udc00-\udfff]/g, "\uFFFD"), "utf16le");
   return encoding === "utf16be" ? bytes3.swap16() : bytes3;
 }
-var delay = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+var delay2 = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 var NativeTools = class {
   constructor(options) {
     this.options = options;
     this.options = structuredClone(options);
-    this.memory = new HostMemory(path16.join(options.stateDirectory, "host-memory.json"), Object.keys(options.programs), Object.fromEntries(Object.entries(options.programs).map(([name2, program]) => [name2, program.executable])));
+    this.memory = new HostMemory(path17.join(options.stateDirectory, "host-memory.json"), Object.keys(options.programs), Object.fromEntries(Object.entries(options.programs).map(([name2, program]) => [name2, program.executable])));
   }
   options;
   memory;
   async readFile(file2, maxBytes, signal) {
     try {
-      return await readBoundedFile(file2, maxBytes, this.options.ownerBridgePath ?? path16.join(path16.dirname(this.options.helperPath), "OwnerBridge.exe"), signal);
+      return await readBoundedFile(file2, maxBytes, this.options.ownerBridgePath ?? path17.join(path17.dirname(this.options.helperPath), "OwnerBridge.exe"), signal);
     } catch (error62) {
       if (error62.code === "ENOENT") throw error62;
       if (error62 instanceof Error && /^[A-Z_]{1,40}$/.test(error62.message)) fail3(error62.message);
       throw error62;
     }
   }
+  /** Windows only: up to 64 files of at most 1 MiB in one bridge process, each with its own result. */
+  async readFiles(files, maxTotalBytes, signal) {
+    try {
+      return await readWindowsFiles(this.options.ownerBridgePath ?? path17.join(path17.dirname(this.options.helperPath), "OwnerBridge.exe"), files, 1048576, maxTotalBytes, signal);
+    } catch (error62) {
+      if (error62 instanceof Error && /^[A-Z_]{1,40}$/.test(error62.message)) fail3(error62.message);
+      throw error62;
+    }
+  }
   async prepare(workspace2, candidate, selection) {
     let prepared;
     try {
@@ -29176,14 +29373,14 @@ var NativeTools = class {
         const proof2 = JSON.parse((await identity.run(AbortSignal.timeout(15e3))).stdout);
         if (!proof2.repositoryFingerprint) fail3("PROJECT_IDENTITY_UNKNOWN");
         if (proof2.repositoryFingerprint !== target.repositoryFingerprint) fail3("PROJECT_IDENTITY_MISMATCH");
-        projectRoot = path16.resolve(workspace2.root, target.relativePath);
+        projectRoot = path17.resolve(workspace2.root, target.relativePath);
         const common = identity.claims.find((claim2) => claim2.namespace === "git")?.path;
         if (common) workspace2 = { ...workspace2, gitCommonDir: common };
       }
       prepared = await this.prepareTool(workspace2, candidate, projectRoot);
     } catch (error62) {
       const parsed = ToolCallSchema.safeParse(candidate);
-      if (parsed.success && parsed.data.name === "command_run") await this.memory.record({ ...parsed.data.args, cwd: path16.resolve(workspace2.root, parsed.data.args.cwd ?? ".") }, void 0, error62).catch(() => {
+      if (parsed.success && parsed.data.name === "command_run") await this.memory.record({ ...parsed.data.args, cwd: path17.resolve(workspace2.root, parsed.data.args.cwd ?? ".") }, void 0, error62).catch(() => {
       });
       throw error62;
     }
@@ -29203,17 +29400,17 @@ var NativeTools = class {
     try {
       const canonical2 = await realpath7(workspace2.root);
       if (!equalPath3(canonical2, workspace2.root) || hash6(process.platform === "win32" ? canonical2.toLowerCase() : canonical2) !== workspace2.rootHash) fail3("WORKSPACE_CHANGED");
-      const runtimeDirectory = path16.dirname(this.options.helperPath);
+      const runtimeDirectory = path17.dirname(this.options.helperPath);
       const protectedPaths = [
         this.options.stateDirectory,
         this.options.helperPath,
-        ...["agent.mjs", "node.exe", "OwnerBridge.exe", "LocalCommanderAgent.exe", "node", "owner-store", "posix-host", "job-host.mjs", "lifecycle.mjs", "manifest.json"].map((name2) => path16.join(runtimeDirectory, name2))
+        ...["agent.mjs", "node.exe", "OwnerBridge.exe", "LocalCommanderAgent.exe", "node", "owner-store", "posix-host", "job-host.mjs", "lifecycle.mjs", "manifest.json"].map((name2) => path17.join(runtimeDirectory, name2))
       ];
       if (this.options.ownerBridgePath) protectedPaths.push(this.options.ownerBridgePath);
-      if (process.platform === "win32" && process.env.LOCALAPPDATA && path16.isAbsolute(process.env.LOCALAPPDATA)) {
-        protectedPaths.push(path16.join(process.env.LOCALAPPDATA, "LocalCommander"));
+      if (process.platform === "win32" && process.env.LOCALAPPDATA && path17.isAbsolute(process.env.LOCALAPPDATA)) {
+        protectedPaths.push(path17.join(process.env.LOCALAPPDATA, "LocalCommander"));
       }
-      if (process.platform !== "win32") protectedPaths.push(path16.join(process.env.LC_AGENT_DATA_DIR || posixDataHome(), "LocalCommander"));
+      if (process.platform !== "win32") protectedPaths.push(path17.join(process.env.LC_AGENT_DATA_DIR || posixDataHome(), "LocalCommander"));
       guard = await PathGuard.create([canonical2], false, { protectedPaths });
       if (projectRoot) {
         const selected = await guard.resolveDirectory(projectRoot);
@@ -29302,7 +29499,7 @@ var NativeTools = class {
         }
         if (taken === first - 1 && first <= end) fail3("OUTPUT_LIMIT_EXCEEDED");
         const remaining = lines.length - (lines.length > 1 && lines.at(-1) === "" ? 1 : 0);
-        return result({ path: path16.relative(workspace2.root, filename), sha256: hash6(bytes3), startLine: first, endLine: Math.min(taken === first - 1 ? last : taken, lines.length), totalLines: lines.length, content: lines.slice(first - 1, taken).join("\n"), truncated: taken < remaining });
+        return result({ path: path17.relative(workspace2.root, filename), sha256: hash6(bytes3), startLine: first, endLine: Math.min(taken === first - 1 ? last : taken, lines.length), totalLines: lines.length, content: lines.slice(first - 1, taken).join("\n"), truncated: taken < remaining });
       } };
     }
     if (call.name === "fs_write" || call.name === "fs_replace") {
@@ -29345,7 +29542,7 @@ var NativeTools = class {
           bytes3 = encodeText(pieces.join(newText), original.encoding);
         }
         if (bytes3.length > MAX_FILE_WRITE_BYTES) fail3("FILE_WRITE_LIMIT");
-        const temp = path16.join(path16.dirname(target), ".lc-write-" + randomUUID7() + ".tmp");
+        const temp = path17.join(path17.dirname(target), ".lc-write-" + randomUUID7() + ".tmp");
         const handle = await open6(temp, constants7.O_CREAT | constants7.O_EXCL | constants7.O_WRONLY, 384);
         try {
           await handle.writeFile(bytes3);
@@ -29363,7 +29560,7 @@ var NativeTools = class {
               } catch (error62) {
                 if (process.platform !== "win32" || !["EPERM", "EBUSY", "EACCES"].includes(error62.code ?? "")) throw error62;
                 if (attempt === 4) fail3((await lstat7(target)).mode & 128 ? "FILE_IN_USE" : "FILE_READ_ONLY");
-                await delay(50 << attempt);
+                await delay2(50 << attempt);
                 stopped(signal);
               }
             }
@@ -29380,11 +29577,11 @@ var NativeTools = class {
                 await rm5(temp);
                 break;
               } catch {
-                await delay(100);
+                await delay2(100);
               }
             }
           }
-          return result({ path: path16.relative(workspace2.root, target), bytes: bytes3.length, sha256: hash6(bytes3), ...call.name === "fs_replace" ? { replacements } : {} });
+          return result({ path: path17.relative(workspace2.root, target), bytes: bytes3.length, sha256: hash6(bytes3), ...call.name === "fs_replace" ? { replacements } : {} });
         } catch (e) {
           await handle.close().catch(() => {
           });
@@ -29400,34 +29597,80 @@ var NativeTools = class {
         const listing = await this.list(guard, base, 8, 1e3, signal), matches2 = [];
         const query = call.args.caseSensitive ? call.args.query : call.args.query.toLowerCase();
         let scanned = 0, scannedBytes = 0, room = RESULT_ITEMS_BUDGET, incomplete = false;
+        const done = () => matches2.length >= call.args.maxResults || scanned >= 300 || room < 0;
+        const skipped = (error62) => {
+          if (error62 instanceof NativeToolError && ["FILE_READ_FAILED", "CANCELLED"].includes(error62.code)) throw error62;
+          if (error62 instanceof NativeToolError && error62.code === "FILE_UNSUPPORTED_OR_TOO_LARGE") incomplete = true;
+        };
+        const searchFile = (filename, bytes3) => {
+          scannedBytes += bytes3.length;
+          const lines = decodeText(bytes3).text.split(/\r?\n/);
+          scanned++;
+          for (let i = 0; i < lines.length && matches2.length < call.args.maxResults; i++) if ((call.args.caseSensitive ? lines[i] : lines[i].toLowerCase()).includes(query)) {
+            const match = { path: path17.relative(workspace2.root, filename), line: i + 1, text: lines[i].slice(0, 500) };
+            if ((room -= Buffer.byteLength(JSON.stringify(match)) + 1) < 0) {
+              incomplete = true;
+              break;
+            }
+            matches2.push(match);
+          }
+        };
+        const batched = process.platform === "win32", pending = [];
+        let pendingBytes = 0, pendingInput = 0;
+        const flush = async () => {
+          if (!pending.length) return;
+          const files = pending.splice(0);
+          pendingBytes = 0;
+          pendingInput = 0;
+          const results2 = await this.readFiles(files, Math.max(1, 16777216 - scannedBytes), signal);
+          for (let i = 0; i < files.length && !done(); i++) {
+            const read = results2[i];
+            if ("code" in read) {
+              if (read.code === "FILE_UNSUPPORTED_OR_TOO_LARGE") incomplete = true;
+              continue;
+            }
+            try {
+              searchFile(files[i], read.data);
+            } catch (error62) {
+              skipped(error62);
+            }
+          }
+        };
         for (const entry of listing.entries) {
           if (entry.type !== "file") continue;
           stopped(signal);
-          if (matches2.length >= call.args.maxResults || scanned >= 300 || room < 0) break;
-          if ((entry.size ?? 0) > 1048576 || scannedBytes + (entry.size ?? 0) > 16777216) {
+          if (done()) break;
+          const size = entry.size ?? 0;
+          if (pending.length && size <= 1048576 && scannedBytes + pendingBytes + size > 16777216) {
+            await flush();
+            if (done()) break;
+          }
+          if (size > 1048576 || scannedBytes + pendingBytes + size > 16777216) {
             incomplete = true;
             continue;
           }
           try {
-            const filename = await guard.resolveExisting(path16.join(base, entry.path));
+            const filename = await guard.resolveExisting(path17.join(base, entry.path));
             guard.assertSafeFile(filename);
-            const bytes3 = await this.readFile(filename, 1048576, signal);
-            scannedBytes += bytes3.length;
-            const lines = decodeText(bytes3).text.split(/\r?\n/);
-            scanned++;
-            for (let i = 0; i < lines.length && matches2.length < call.args.maxResults; i++) if ((call.args.caseSensitive ? lines[i] : lines[i].toLowerCase()).includes(query)) {
-              const match = { path: path16.relative(workspace2.root, filename), line: i + 1, text: lines[i].slice(0, 500) };
-              if ((room -= Buffer.byteLength(JSON.stringify(match)) + 1) < 0) {
-                incomplete = true;
-                break;
-              }
-              matches2.push(match);
+            if (!batched) {
+              searchFile(filename, await this.readFile(filename, 1048576, signal));
+              continue;
             }
+            const input2 = Buffer.byteLength(JSON.stringify(filename)) + 1;
+            if (pending.length && pendingInput + input2 > 25e4) await flush();
+            pending.push(filename);
+            pendingBytes += size;
+            pendingInput += input2;
           } catch (error62) {
-            if (error62 instanceof NativeToolError && ["FILE_READ_FAILED", "CANCELLED"].includes(error62.code)) throw error62;
-            if (error62 instanceof NativeToolError && error62.code === "FILE_UNSUPPORTED_OR_TOO_LARGE") incomplete = true;
+            skipped(error62);
+            continue;
+          }
+          if (pending.length >= Math.min(64, 300 - scanned) || pendingBytes >= 4194304) {
+            await flush();
+            if (done()) break;
           }
         }
+        if (!done()) await flush();
         return result({ matches: matches2, scannedFiles: scanned, truncated: listing.truncated || incomplete || matches2.length >= call.args.maxResults || scanned >= 300 });
       } };
     }
@@ -29473,7 +29716,7 @@ var NativeTools = class {
       } };
     }
     if (call.name === "command_run") {
-      if (process.platform !== "win32" && process.platform !== "linux") fail3("COMMAND_NOT_ALLOWED");
+      if (!["win32", "linux", "darwin"].includes(process.platform)) fail3("COMMAND_NOT_ALLOWED");
       const cwd2 = await resolve(call.args.cwd, true), program = await this.resolveProgram(call.args.command, workspace2, call.args.args);
       const claims2 = writeClaim(cwd2);
       return { call, claims: claims2, execution: { ...program, cwd: cwd2 }, run: async (signal, onStarted, onOutput, onSupervisor) => {
@@ -29501,9 +29744,9 @@ var NativeTools = class {
     else if (call.name === "git_diff") {
       argv = ["diff", "--no-ext-diff", "--no-textconv", ...call.args.staged ? ["--cached"] : []];
       if (call.args.file) {
-        const file2 = await resolve(path16.resolve(cwd, call.args.file));
-        const relative = path16.relative(cwd, file2);
-        if (relative.startsWith(".." + path16.sep) || relative === ".." || path16.isAbsolute(relative)) fail3("PATH_NOT_ALLOWED");
+        const file2 = await resolve(path17.resolve(cwd, call.args.file));
+        const relative = path17.relative(cwd, file2);
+        if (relative.startsWith(".." + path17.sep) || relative === ".." || path17.isAbsolute(relative)) fail3("PATH_NOT_ALLOWED");
         argv.push("--", relative);
       } else argv.push("--stat");
     } else fail3("TOOL_MISSING");
@@ -29514,7 +29757,7 @@ var NativeTools = class {
         const listing = await this.list(guard, cwd, 1, call.args.startup ? 20 : 150, signal);
         let packageInfo = null;
         try {
-          const name2 = await guard.resolveExisting(path16.join(cwd, "package.json"));
+          const name2 = await guard.resolveExisting(path17.join(cwd, "package.json"));
           guard.assertSafeFile(name2);
           const value = JSON.parse(utf8(await this.readFile(name2, 64e3, signal)));
           packageInfo = { name: typeof value.name === "string" ? value.name : null, version: typeof value.version === "string" ? value.version : null, scripts: value.scripts && typeof value.scripts === "object" ? Object.keys(value.scripts).slice(0, 100) : [] };
@@ -29534,7 +29777,7 @@ var NativeTools = class {
           }
           const contextFile = async (relative, limit, optional2 = false) => {
             try {
-              const file2 = await guard.resolveExisting(path16.join(primary, relative));
+              const file2 = await guard.resolveExisting(path17.join(primary, relative));
               guard.assertSafeFile(file2);
               return utf8(await this.readFile(file2, limit, signal));
             } catch (error62) {
@@ -29567,17 +29810,17 @@ var NativeTools = class {
     } };
   }
   async resolveProgram(name2, workspace2, args) {
-    const entry = Object.entries(this.options.programs).find(([key, value]) => equalPath3(key, name2) || path16.isAbsolute(name2) && equalPath3(value.executable, path16.resolve(name2)));
+    const entry = Object.entries(this.options.programs).find(([key, value]) => equalPath3(key, name2) || path17.isAbsolute(name2) && equalPath3(value.executable, path17.resolve(name2)));
     if (workspace2.fullAccess) {
-      const commandKey = (value) => process.platform === "win32" ? path16.basename(value).toLowerCase().replace(/\.(exe|com|cmd|bat)$/i, "") : path16.basename(value);
+      const commandKey = (value) => process.platform === "win32" ? path17.basename(value).toLowerCase().replace(/\.(exe|com|cmd|bat)$/i, "") : path17.basename(value);
       const denied = new Set((workspace2.deniedCommands ?? []).map(commandKey));
       if (denied.has(commandKey(name2)) || entry && denied.has(commandKey(entry[0]))) fail3("COMMAND_NOT_ALLOWED");
-      const extension2 = path16.extname(name2).toLowerCase();
-      const candidate = entry?.[1].executable ?? (process.platform !== "win32" ? await resolvePosixExecutable(name2) : path16.isAbsolute(name2) ? name2 : /^[\w.-]+$/.test(name2) ? resolveWindowsLauncher(
+      const extension2 = path17.extname(name2).toLowerCase();
+      const candidate = entry?.[1].executable ?? (process.platform !== "win32" ? await resolvePosixExecutable(name2) : path17.isAbsolute(name2) ? name2 : /^[\w.-]+$/.test(name2) ? resolveWindowsLauncher(
         commandKey(name2),
         [".exe", ".com", ".cmd", ".bat"].includes(extension2) ? { ...process.env, PATHEXT: extension2 } : process.env
       )?.file : void 0);
-      if (!candidate || !path16.isAbsolute(candidate)) fail3("COMMAND_NOT_FOUND");
+      if (!candidate || !path17.isAbsolute(candidate)) fail3("COMMAND_NOT_FOUND");
       const executable = await realpath7(candidate).catch(() => fail3("COMMAND_NOT_FOUND"));
       if (!(await lstat7(executable)).isFile()) fail3("COMMAND_NOT_FOUND");
       if (denied.has(commandKey(executable))) fail3("COMMAND_NOT_ALLOWED");
@@ -29592,7 +29835,7 @@ var NativeTools = class {
       if (/\.(cmd|bat)$/i.test(executable)) {
         if ([executable, ...args].some((value) => /[&|<>^%!"\r\n]/.test(value))) fail3("INVALID_SCRIPT_ARGUMENTS");
         const literal2 = (value) => "'" + value.replaceAll("'", "''") + "'";
-        const shell = path16.join(process.env.SystemRoot ?? "C:\\Windows", "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
+        const shell = path17.join(process.env.SystemRoot ?? "C:\\Windows", "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
         if (denied.has("powershell") || denied.has("cmd")) fail3("COMMAND_NOT_ALLOWED");
         const script = "& " + literal2(executable) + " @(" + args.map(literal2).join(",") + "); exit $LASTEXITCODE";
         return { executable: shell, args: ["-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")] };
@@ -29600,7 +29843,7 @@ var NativeTools = class {
       if (!/\.(exe|com)$/i.test(executable)) fail3("COMMAND_NOT_ALLOWED");
       return { executable, args: [...entry?.[1].prefixArgs ?? [], ...args] };
     }
-    if (!entry || !workspace2.allowedCommands.some((v) => equalPath3(v, entry[0])) || !path16.isAbsolute(entry[1].executable)) fail3("COMMAND_NOT_ALLOWED");
+    if (!entry || !workspace2.allowedCommands.some((v) => equalPath3(v, entry[0])) || !path17.isAbsolute(entry[1].executable)) fail3("COMMAND_NOT_ALLOWED");
     return { executable: entry[1].executable, args: [...entry[1].prefixArgs ?? [], ...args] };
   }
   async memoryContext(workspace2) {
@@ -29613,11 +29856,11 @@ var NativeTools = class {
     })) } };
   }
   async gitExecution(cwd, args) {
-    if (process.platform !== "win32" && process.platform !== "linux") fail3("COMMAND_NOT_ALLOWED");
+    if (!["win32", "linux", "darwin"].includes(process.platform)) fail3("COMMAND_NOT_ALLOWED");
     const configured = this.options.programs.git;
-    const candidates = configured ? [configured.executable] : process.platform === "win32" ? [[process.env.ProgramFiles, "Git"], [process.env["ProgramFiles(x86)"], "Git"], [process.env.LOCALAPPDATA, "Programs/Git"]].filter(([root]) => root && path16.isAbsolute(root)).map(([root, suffix]) => path16.join(root, suffix, "cmd", "git.exe")) : ["/usr/bin/git", "/usr/local/bin/git", "/opt/homebrew/bin/git"];
+    const candidates = configured ? [configured.executable] : process.platform === "win32" ? [[process.env.ProgramFiles, "Git"], [process.env["ProgramFiles(x86)"], "Git"], [process.env.LOCALAPPDATA, "Programs/Git"]].filter(([root]) => root && path17.isAbsolute(root)).map(([root, suffix]) => path17.join(root, suffix, "cmd", "git.exe")) : ["/usr/bin/git", "/usr/local/bin/git", "/opt/homebrew/bin/git"];
     for (const source of candidates) {
-      if (!path16.isAbsolute(source)) continue;
+      if (!path17.isAbsolute(source)) continue;
       const candidate = process.platform === "win32" ? source : await resolvePosixExecutable(source);
       if (!candidate) continue;
       try {
@@ -29651,7 +29894,7 @@ var NativeTools = class {
           break;
         }
         if (item.isSymbolicLink() || excluded.has(item.name.toLowerCase())) continue;
-        const candidate = path16.join(current2.path, item.name);
+        const candidate = path17.join(current2.path, item.name);
         let resolved;
         try {
           resolved = await guard.resolveExisting(candidate);
@@ -29661,11 +29904,11 @@ var NativeTools = class {
         }
         if (!equalPath3(candidate, resolved)) continue;
         if (item.isDirectory()) {
-          entries.push({ path: path16.relative(root, resolved), type: "directory" });
+          entries.push({ path: path17.relative(root, resolved), type: "directory" });
           if (current2.level < depth) queue.push({ path: resolved, level: current2.level + 1 });
         } else if (item.isFile()) {
           const stat2 = await lstat7(resolved).catch(() => null);
-          if (stat2) entries.push({ path: path16.relative(root, resolved), type: "file", size: stat2.size });
+          if (stat2) entries.push({ path: path17.relative(root, resolved), type: "file", size: stat2.size });
         }
       }
       if (truncated) break;
@@ -29675,7 +29918,7 @@ var NativeTools = class {
   async gitCommonDir(cwd, workspace2, guard) {
     let directory = cwd;
     while (guard.isWithin(directory, workspace2.root)) {
-      const dotGit = path16.join(directory, ".git");
+      const dotGit = path17.join(directory, ".git");
       try {
         const stat2 = await lstat7(dotGit);
         if (stat2.isSymbolicLink()) fail3("GIT_METADATA_CHANGED");
@@ -29684,14 +29927,14 @@ var NativeTools = class {
         else {
           const content = utf8(await this.readFile(dotGit, 4096)).trim();
           if (!content.startsWith("gitdir: ")) fail3("GIT_METADATA_CHANGED");
-          gitDir = await realpath7(path16.resolve(directory, content.slice(8)));
+          gitDir = await realpath7(path17.resolve(directory, content.slice(8)));
         }
         if (guard.isWithin(gitDir, this.options.stateDirectory) || !guard.isWithin(gitDir, workspace2.root) && (!workspace2.gitCommonDir || !guard.isWithin(gitDir, workspace2.gitCommonDir))) fail3("GIT_COMMON_DIRECTORY_NOT_APPROVED");
         let common = gitDir;
         try {
-          const content = utf8(await this.readFile(path16.join(gitDir, "commondir"), 4096)).trim();
+          const content = utf8(await this.readFile(path17.join(gitDir, "commondir"), 4096)).trim();
           if (!content) fail3("GIT_METADATA_CHANGED");
-          common = await realpath7(path16.resolve(gitDir, content));
+          common = await realpath7(path17.resolve(gitDir, content));
         } catch (e) {
           if (e.code !== "ENOENT") throw e;
         }
@@ -29702,22 +29945,22 @@ var NativeTools = class {
         if (e.code !== "ENOENT") throw e;
       }
       if (equalPath3(directory, workspace2.root)) break;
-      directory = path16.dirname(directory);
+      directory = path17.dirname(directory);
     }
     return null;
   }
 };
 
 // agent/src/scheduler.ts
-import path17 from "node:path";
+import path18 from "node:path";
 import os4 from "node:os";
 function canonical(value) {
-  const p = path17.resolve(value);
+  const p = path18.resolve(value);
   return process.platform === "win32" ? p.toLowerCase() : p;
 }
 function ancestor(a, b) {
-  const relative = path17.relative(a, b);
-  return relative === "" || !path17.isAbsolute(relative) && relative !== ".." && !relative.startsWith(".." + path17.sep);
+  const relative = path18.relative(a, b);
+  return relative === "" || !path18.isAbsolute(relative) && relative !== ".." && !relative.startsWith(".." + path18.sep);
 }
 function claimsConflict(a, b) {
   return a.some((x) => b.some((y) => (x.namespace ?? "filesystem") === (y.namespace ?? "filesystem") && (x.mode === "write" || y.mode === "write") && (ancestor(x.path, y.path) || ancestor(y.path, x.path))));
@@ -29746,7 +29989,7 @@ var NativeScheduler = class {
   schedule(id2, claims, deadlineAt, run, signal) {
     if (!this.accepting) return Promise.reject(Error("AGENT_PAUSED"));
     if (!id2 || id2.length > 100 || this.active.has(id2) || this.waiting.some((j) => j.id === id2)) return Promise.reject(Error("DUPLICATE_SCHEDULED_EXECUTION"));
-    if (!Array.isArray(claims) || !claims.length || claims.length > 32 || claims.some((c) => !c || !path17.isAbsolute(c.path) || !["read", "write"].includes(c.mode))) return Promise.reject(Error("INVALID_RESOURCE_CLAIM"));
+    if (!Array.isArray(claims) || !claims.length || claims.length > 32 || claims.some((c) => !c || !path18.isAbsolute(c.path) || !["read", "write"].includes(c.mode))) return Promise.reject(Error("INVALID_RESOURCE_CLAIM"));
     const deadline = deadlineAt.getTime();
     if (!Number.isFinite(deadline) || deadline <= Date.now()) return Promise.reject(Error("ADMISSION_DEADLINE_EXPIRED"));
     if (signal?.aborted) return Promise.reject(Error("CANCELLED_BEFORE_ACCEPTANCE"));
@@ -30253,17 +30496,17 @@ function unshapedResultTelemetry(result2) {
 
 // packages/optimization/src/live-telemetry.ts
 var LIVE_EFFICIENCY_EVENT_VERSION = 1;
-var uuid17 = external_exports.string().uuid().toLowerCase();
+var uuid18 = external_exports.string().uuid().toLowerCase();
 var bytes2 = external_exports.number().int().min(0).max(1e9);
 var utc4 = external_exports.iso.datetime({ offset: false });
 var LiveEfficiencyEventSchema = external_exports.object({
   version: external_exports.literal(LIVE_EFFICIENCY_EVENT_VERSION),
   occurredAt: utc4,
-  tenantId: uuid17,
-  accountId: uuid17.nullable(),
-  sessionId: uuid17,
-  operationId: uuid17,
-  executionId: uuid17,
+  tenantId: uuid18,
+  accountId: uuid18.nullable(),
+  sessionId: uuid18,
+  operationId: uuid18,
+  executionId: uuid18,
   toolName: external_exports.string().trim().min(1).max(120),
   outcome: external_exports.enum(["success", "failed", "timed_out", "cancelled", "unknown"]),
   parserId: external_exports.string().trim().min(1).max(120).nullable(),
@@ -30647,7 +30890,7 @@ var NativeRuntime = class {
           this.send({ type: "running", version: 1, binding: binding2, pid });
         }, (stream, bytes3) => {
           (stream === "stdout" ? context.stdout : context.stderr).append(bytes3);
-        }, (pid) => this.options.journal.supervisor(binding2.executionId, pid));
+        }, (pid, containment) => this.options.journal.supervisor(binding2.executionId, pid, containment));
         const checked = ResultSchema.parse(output2);
         const { resultCode, ...journalOutput } = checked;
         if (context.guardPermit) await this.options.guard.result(context.guardPermit, checked);
@@ -30858,9 +31101,9 @@ var NativeRelayBridge = class {
 
 // agent/src/local-direct.ts
 import net from "node:net";
-import path18 from "node:path";
+import path19 from "node:path";
 import { createHmac as createHmac2, hkdfSync, randomBytes as randomBytes6, randomUUID as randomUUID8, timingSafeEqual as timingSafeEqual3 } from "node:crypto";
-import { mkdir as mkdir7, readFile as readFile6, rename as rename5, rm as rm6, writeFile as writeFile3 } from "node:fs/promises";
+import { mkdir as mkdir7, readFile as readFile7, rename as rename5, rm as rm6, writeFile as writeFile3 } from "node:fs/promises";
 var LocalDirectError = class extends Error {
   constructor(code) {
     super(code);
@@ -30878,11 +31121,11 @@ var ADMISSION_MS = 6e4;
 var MAX_IN_FLIGHT = 16;
 var MAX_CONNECTIONS = 32;
 function localDirectDirectory(appData) {
-  return path18.join(appData, "LocalCommander", "LocalMcp");
+  return path19.join(appData, "LocalCommander", "LocalMcp");
 }
 async function localDirectEnabled(directory) {
   try {
-    return JSON.parse(await readFile6(path18.join(directory, "settings.json"), "utf8"))?.enabled === true;
+    return JSON.parse(await readFile7(path19.join(directory, "settings.json"), "utf8"))?.enabled === true;
   } catch {
     return false;
   }
@@ -30955,7 +31198,7 @@ var Lines = class {
 async function readEndpoint(directory) {
   let value;
   try {
-    value = JSON.parse(await readFile6(path18.join(directory, "endpoint.json"), "utf8"));
+    value = JSON.parse(await readFile7(path19.join(directory, "endpoint.json"), "utf8"));
   } catch {
     fail4("LOCAL_AGENT_NOT_RUNNING");
   }
@@ -30972,7 +31215,7 @@ var LocalDirectServer = class _LocalDirectServer {
   sockets = /* @__PURE__ */ new Set();
   /** Listens only while the owner has enabled direct local access; null otherwise. */
   static async start(options) {
-    const endpointFile = path18.join(options.directory, "endpoint.json");
+    const endpointFile = path19.join(options.directory, "endpoint.json");
     if (!await localDirectEnabled(options.directory)) {
       await rm6(endpointFile, { force: true }).catch(() => {
       });
@@ -31000,7 +31243,7 @@ var LocalDirectServer = class _LocalDirectServer {
     for (const socket of this.sockets) socket.destroy();
     await new Promise((resolve) => this.server.close(() => resolve()));
     try {
-      if ((await readEndpoint(this.options.directory)).pid === process.pid) await rm6(path18.join(this.options.directory, "endpoint.json"), { force: true });
+      if ((await readEndpoint(this.options.directory)).pid === process.pid) await rm6(path19.join(this.options.directory, "endpoint.json"), { force: true });
     } catch {
     }
   }
@@ -34855,9 +35098,9 @@ var rev2026Codec = {
     });
     const parsed = buildSchemas2026().RequestMetaEnvelopeSchema.safeParse(meta3);
     if (!parsed.success) for (const issue2 of parsed.error.issues) {
-      const path28 = issue2.path.map(String);
-      const key = path28.length > 0 ? path28.join(".") : "_meta";
-      if (path28.length === 1 && issues.some((existing) => existing.key === key && existing.problem === "missing")) continue;
+      const path29 = issue2.path.map(String);
+      const key = path29.length > 0 ? path29.join(".") : "_meta";
+      if (path29.length === 1 && issues.some((existing) => existing.key === key && existing.problem === "missing")) continue;
       issues.push({
         key,
         problem: issue2.message
@@ -35159,29 +35402,29 @@ var PERMITTED_X_MCP_HEADER_TYPES = /* @__PURE__ */ new Set([
 function scanXMcpHeaderDeclarations(inputSchema) {
   const declarations = [];
   const seenLower = /* @__PURE__ */ new Map();
-  const visit2 = (node2, path28, reachable) => {
+  const visit2 = (node2, path29, reachable) => {
     if (node2 === null || typeof node2 !== "object") return void 0;
     const schema = node2;
     if (X_MCP_HEADER_KEY in schema) {
-      if (!reachable || path28.length === 0) return `${pathName(path28)}: x-mcp-header is only permitted on properties statically reachable via a chain of 'properties' keys (not under items, additionalProperties, oneOf/anyOf/allOf/not, if/then/else, or $ref)`;
+      if (!reachable || path29.length === 0) return `${pathName(path29)}: x-mcp-header is only permitted on properties statically reachable via a chain of 'properties' keys (not under items, additionalProperties, oneOf/anyOf/allOf/not, if/then/else, or $ref)`;
       const raw = schema[X_MCP_HEADER_KEY];
-      if (typeof raw !== "string" || raw.length === 0) return `${pathName(path28)}: x-mcp-header MUST be a non-empty string`;
-      if (!RFC9110_TOKEN.test(raw)) return `${pathName(path28)}: x-mcp-header '${raw}' is not a valid RFC 9110 token (no spaces, control characters or HTTP delimiters)`;
+      if (typeof raw !== "string" || raw.length === 0) return `${pathName(path29)}: x-mcp-header MUST be a non-empty string`;
+      if (!RFC9110_TOKEN.test(raw)) return `${pathName(path29)}: x-mcp-header '${raw}' is not a valid RFC 9110 token (no spaces, control characters or HTTP delimiters)`;
       const type = typeof schema.type === "string" ? schema.type : void 0;
-      if (type === void 0 || !PERMITTED_X_MCP_HEADER_TYPES.has(type)) return `${pathName(path28)}: x-mcp-header is only permitted on primitive-typed properties (string, integer, boolean); got ${type ?? "<none>"}`;
+      if (type === void 0 || !PERMITTED_X_MCP_HEADER_TYPES.has(type)) return `${pathName(path29)}: x-mcp-header is only permitted on primitive-typed properties (string, integer, boolean); got ${type ?? "<none>"}`;
       const lower = raw.toLowerCase();
       const prior = seenLower.get(lower);
       if (prior !== void 0) return `x-mcp-header '${raw}' is not case-insensitively unique (also declared as '${prior}')`;
       seenLower.set(lower, raw);
       declarations.push({
-        path: path28,
+        path: path29,
         headerName: raw,
         type
       });
     }
     const properties = schema.properties;
     if (properties !== null && typeof properties === "object") for (const [key, child] of Object.entries(properties)) {
-      const fault$1 = visit2(child, [...path28, key], reachable);
+      const fault$1 = visit2(child, [...path29, key], reachable);
       if (fault$1 !== void 0) return fault$1;
     }
     for (const k of NON_REACHABLE_SUBSCHEMA_KEYWORDS) {
@@ -35189,7 +35432,7 @@ function scanXMcpHeaderDeclarations(inputSchema) {
       if (sub === void 0) continue;
       const branches = Array.isArray(sub) ? sub : sub !== null && typeof sub === "object" && OBJECT_VALUED_SUBSCHEMA_KEYWORDS.has(k) ? Object.values(sub) : [sub];
       for (const branch of branches) {
-        const fault$1 = visit2(branch, [...path28, `<${k}>`], false);
+        const fault$1 = visit2(branch, [...path29, `<${k}>`], false);
         if (fault$1 !== void 0) return fault$1;
       }
     }
@@ -35229,8 +35472,8 @@ var OBJECT_VALUED_SUBSCHEMA_KEYWORDS = /* @__PURE__ */ new Set([
   "$defs",
   "definitions"
 ]);
-function pathName(path28) {
-  return path28.length === 0 ? "<root>" : path28.join(".");
+function pathName(path29) {
+  return path29.length === 0 ? "<root>" : path29.join(".");
 }
 var HEADER_MISMATCH_ERROR_CODE = -32020;
 var INBOUND_VALIDATION_LADDER = [
@@ -35480,7 +35723,7 @@ var PROPERTY_KEYS_BY_TYPE = {
   array: shapeKeys([UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema])
 };
 var SUPPORTED_STRING_FORMATS = new Set(StringSchemaSchema.shape.format.unwrap().options);
-function walkProperty(node2, path28, vendor, unsupported) {
+function walkProperty(node2, path29, vendor, unsupported) {
   if (!isJsonObject(node2)) return node2;
   const allowedKeys = typeof node2.type === "string" && Object.hasOwn(PROPERTY_KEYS_BY_TYPE, node2.type) ? PROPERTY_KEYS_BY_TYPE[node2.type] : void 0;
   if (allowedKeys === void 0) return node2;
@@ -35488,8 +35731,8 @@ function walkProperty(node2, path28, vendor, unsupported) {
   for (const [key, value] of Object.entries(node2)) if (allowedKeys.has(key) || isAnnotationOnlyJsonSchemaKeyword(key)) pruned[key] = value;
   else if (key === "pattern" && node2.type === "string" && typeof node2.format === "string") {
     if (!SUPPORTED_STRING_FORMATS.has(node2.format)) pruned[key] = value;
-    else if (typeof value !== "string" || !isLibraryFormatPattern(node2.format, value, vendor)) unsupported.push(`${path28}.${key}`);
-  } else unsupported.push(`${path28}.${key}`);
+    else if (typeof value !== "string" || !isLibraryFormatPattern(node2.format, value, vendor)) unsupported.push(`${path29}.${key}`);
+  } else unsupported.push(`${path29}.${key}`);
   return pruned;
 }
 function walkRequestedSchema(converted, vendor) {
@@ -35506,11 +35749,11 @@ function describeUnsupportedProperties(pruned, fallback) {
   const offenders = Object.entries(pruned.properties).filter(([, node2]) => !parseSchema(PrimitiveSchemaDefinitionSchema, node2).success).map(([name2]) => `properties.${name2}`);
   return offenders.length > 0 ? offenders.join(", ") : fallback;
 }
-function findDroppedConstraintPaths(original, parsed, path28 = "") {
-  if (Array.isArray(original) && Array.isArray(parsed)) return original.flatMap((item, index) => findDroppedConstraintPaths(item, parsed[index], `${path28}[${index}]`));
+function findDroppedConstraintPaths(original, parsed, path29 = "") {
+  if (Array.isArray(original) && Array.isArray(parsed)) return original.flatMap((item, index) => findDroppedConstraintPaths(item, parsed[index], `${path29}[${index}]`));
   if (!isJsonObject(original) || !isJsonObject(parsed)) return [];
   return Object.entries(original).flatMap(([key, value]) => {
-    const childPath = path28 ? `${path28}.${key}` : key;
+    const childPath = path29 ? `${path29}.${key}` : key;
     if (!Object.prototype.hasOwnProperty.call(parsed, key)) return isAnnotationOnlyJsonSchemaKeyword(key) ? [] : [childPath];
     return findDroppedConstraintPaths(value, parsed[key], childPath);
   });
@@ -37221,9 +37464,9 @@ var require_codegen = /* @__PURE__ */ __commonJSMin(((exports) => {
     }
   };
   var Label = class extends Node {
-    constructor(label) {
+    constructor(label2) {
       super();
-      this.label = label;
+      this.label = label2;
       this.names = {};
     }
     render({ _n }) {
@@ -37231,9 +37474,9 @@ var require_codegen = /* @__PURE__ */ __commonJSMin(((exports) => {
     }
   };
   var Break = class extends Node {
-    constructor(label) {
+    constructor(label2) {
       super();
-      this.label = label;
+      this.label = label2;
       this.names = {};
     }
     render({ _n }) {
@@ -37598,11 +37841,11 @@ var require_codegen = /* @__PURE__ */ __commonJSMin(((exports) => {
     endFor() {
       return this._endBlockNode(For);
     }
-    label(label) {
-      return this._leafNode(new Label(label));
+    label(label2) {
+      return this._leafNode(new Label(label2));
     }
-    break(label) {
-      return this._leafNode(new Break(label));
+    break(label2) {
+      return this._leafNode(new Break(label2));
     }
     return(value) {
       const node2 = new Return();
@@ -39586,8 +39829,8 @@ var require_utils = /* @__PURE__ */ __commonJSMin(((exports, module) => {
     for (let i = 0; i < str.length; i++) if (str[i] === token) ind++;
     return ind;
   }
-  function removeDotSegments(path28) {
-    let input2 = path28;
+  function removeDotSegments(path29) {
+    let input2 = path29;
     const output2 = [];
     let nextSlash = -1;
     let len = 0;
@@ -39740,8 +39983,8 @@ var require_schemes = /* @__PURE__ */ __commonJSMin(((exports, module) => {
       wsComponent.secure = void 0;
     }
     if (wsComponent.resourceName) {
-      const [path28, query] = wsComponent.resourceName.split("?");
-      wsComponent.path = path28 && path28 !== "/" ? path28 : void 0;
+      const [path29, query] = wsComponent.resourceName.split("?");
+      wsComponent.path = path29 && path29 !== "/" ? path29 : void 0;
       wsComponent.query = query;
       wsComponent.resourceName = void 0;
     }
@@ -45382,10 +45625,10 @@ import { createHash as createHash15, createPrivateKey as createPrivateKey3, rand
 
 // agent/src/native-incident-producer.ts
 import { randomUUID as randomUUID9 } from "node:crypto";
-var uuid18 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var uuid19 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var results = /* @__PURE__ */ new Set(["accepted", "duplicate", "invalid", "stale", "unconfirmed", "capacity", "retry", "disabled", "busy"]);
 function nativeIncidentAck(candidate) {
-  if (candidate.type !== "incidentBatchAck" || candidate.protocolVersion !== 1 || Object.keys(candidate).some((key) => !["type", "protocolVersion", "batchId", "result"].includes(key)) || typeof candidate.result !== "string" || !results.has(candidate.result) || candidate.batchId !== void 0 && (typeof candidate.batchId !== "string" || !uuid18.test(candidate.batchId))) return;
+  if (candidate.type !== "incidentBatchAck" || candidate.protocolVersion !== 1 || Object.keys(candidate).some((key) => !["type", "protocolVersion", "batchId", "result"].includes(key)) || typeof candidate.result !== "string" || !results.has(candidate.result) || candidate.batchId !== void 0 && (typeof candidate.batchId !== "string" || !uuid19.test(candidate.batchId))) return;
   return { result: candidate.result, ...candidate.batchId ? { batchId: String(candidate.batchId).toLowerCase() } : {} };
 }
 var NativeIncidentProducer = class {
@@ -45451,12 +45694,12 @@ var NativeIncidentProducer = class {
   classify(event, occurrences) {
     const incident = event.incident;
     if (!incident) return;
-    const executionId = incident.executionId && uuid18.test(incident.executionId) ? incident.executionId.toLowerCase() : void 0;
+    const executionId = incident.executionId && uuid19.test(incident.executionId) ? incident.executionId.toLowerCase() : void 0;
     let refs = {};
     try {
       const confirmed = executionId && this.references?.(executionId);
-      if (confirmed && confirmed.executionId === executionId && uuid18.test(confirmed.workerId)) {
-        refs = { workerId: confirmed.workerId.toLowerCase(), ...confirmed.taskId && uuid18.test(confirmed.taskId) ? { taskId: confirmed.taskId.toLowerCase() } : {} };
+      if (confirmed && confirmed.executionId === executionId && uuid19.test(confirmed.workerId)) {
+        refs = { workerId: confirmed.workerId.toLowerCase(), ...confirmed.taskId && uuid19.test(confirmed.taskId) ? { taskId: confirmed.taskId.toLowerCase() } : {} };
       }
     } catch {
     }
@@ -45569,7 +45812,7 @@ function relayUrlFromEnrollment(enrollment) {
   url2.pathname = "/api/agent/relay";
   return url2.toString();
 }
-function uuid19(value, code) {
+function uuid20(value, code) {
   if (typeof value !== "string" || !UUID2.test(value)) fail5(code);
   return value.toLowerCase();
 }
@@ -45699,11 +45942,11 @@ function sendJson(socket, value, maxBytes) {
 function validateChallenge(frame, expectedProtocol) {
   if (frame.type !== "challenge") fail5("RELAY_HANDSHAKE_INVALID");
   protocol(frame.protocolVersion, expectedProtocol);
-  uuid19(frame.gatewayId, "RELAY_HANDSHAKE_INVALID");
+  uuid20(frame.gatewayId, "RELAY_HANDSHAKE_INVALID");
   if (typeof frame.nonce !== "string" || frame.nonce.length < 32 || frame.nonce.length > 512 || /[\u0000-\u001f\u007f]/u.test(frame.nonce)) fail5("RELAY_HANDSHAKE_INVALID");
   if (typeof frame.expiresAt !== "string" || !Number.isFinite(Date.parse(frame.expiresAt)) || Date.parse(frame.expiresAt) <= Date.now()) fail5("RELAY_HANDSHAKE_INVALID");
   return {
-    challengeId: uuid19(frame.challengeId, "RELAY_HANDSHAKE_INVALID"),
+    challengeId: uuid20(frame.challengeId, "RELAY_HANDSHAKE_INVALID"),
     nonce: frame.nonce,
     // Older servers offer no capabilities and verify only the v1 proof.
     machineIdentity: Array.isArray(frame.capabilities) && frame.capabilities.includes(MACHINE_IDENTITY_CAPABILITY)
@@ -45712,27 +45955,27 @@ function validateChallenge(frame, expectedProtocol) {
 function validateReady(frame, enrollment, expectedProtocol) {
   if (frame.type !== "connected") fail5("RELAY_HANDSHAKE_INVALID");
   protocol(frame.protocolVersion, expectedProtocol);
-  if (uuid19(frame.tenantId, "RELAY_HANDSHAKE_INVALID") !== enrollment.tenantId.toLowerCase()) fail5("RELAY_ID_MISMATCH");
-  if (uuid19(frame.deviceId, "RELAY_HANDSHAKE_INVALID") !== enrollment.deviceId.toLowerCase()) fail5("RELAY_ID_MISMATCH");
+  if (uuid20(frame.tenantId, "RELAY_HANDSHAKE_INVALID") !== enrollment.tenantId.toLowerCase()) fail5("RELAY_ID_MISMATCH");
+  if (uuid20(frame.deviceId, "RELAY_HANDSHAKE_INVALID") !== enrollment.deviceId.toLowerCase()) fail5("RELAY_ID_MISMATCH");
   const terminalMetrics2 = Array.isArray(frame.capabilities) && frame.capabilities.includes(TERMINAL_METRICS_CAPABILITY);
   return { connectionEpoch: epoch3(frame.connectionEpoch), terminalMetrics: terminalMetrics2 };
 }
 function validateRequest(frame, enrollment, expectedProtocol, connectionEpoch) {
   if (frame.type !== "relayFrame") fail5("RELAY_REQUEST_INVALID");
   protocol(frame.protocolVersion, expectedProtocol);
-  const tenantId = uuid19(frame.tenantId, "RELAY_REQUEST_INVALID");
-  const deviceId = uuid19(frame.deviceId, "RELAY_REQUEST_INVALID");
+  const tenantId = uuid20(frame.tenantId, "RELAY_REQUEST_INVALID");
+  const deviceId = uuid20(frame.deviceId, "RELAY_REQUEST_INVALID");
   if (tenantId !== enrollment.tenantId.toLowerCase() || deviceId !== enrollment.deviceId.toLowerCase()) fail5("RELAY_ID_MISMATCH");
   if (epoch3(frame.connectionEpoch) !== connectionEpoch) fail5("RELAY_EPOCH_MISMATCH");
   const kind = frame.kind;
   if (typeof kind !== "string" || !REQUEST_KINDS.has(kind)) fail5("RELAY_REQUEST_INVALID");
   return {
-    requestId: uuid19(frame.requestId, "RELAY_REQUEST_INVALID"),
+    requestId: uuid20(frame.requestId, "RELAY_REQUEST_INVALID"),
     tenantId,
     deviceId,
     connectionEpoch,
-    operationId: uuid19(frame.operationId, "RELAY_REQUEST_INVALID"),
-    executionId: uuid19(frame.executionId, "RELAY_REQUEST_INVALID"),
+    operationId: uuid20(frame.operationId, "RELAY_REQUEST_INVALID"),
+    executionId: uuid20(frame.executionId, "RELAY_REQUEST_INVALID"),
     kind,
     payload: frame.payload,
     deadlineAt: isoDate(frame.deadlineAt),
@@ -45774,8 +46017,8 @@ async function connectOnce(options) {
   const identity = await options.store.load();
   if (!identity || !identity.enrollment) fail5("ENROLLMENT_MISSING");
   const enrollment = identity.enrollment;
-  const tenantId = uuid19(enrollment.tenantId, "ENROLLMENT_INVALID");
-  const deviceId = uuid19(enrollment.deviceId, "ENROLLMENT_INVALID");
+  const tenantId = uuid20(enrollment.tenantId, "ENROLLMENT_INVALID");
+  const deviceId = uuid20(enrollment.deviceId, "ENROLLMENT_INVALID");
   const url2 = relayUrlFromEnrollment(enrollment);
   const socket = new wrapper_default(url2, [], {
     followRedirects: false,
@@ -46074,7 +46317,7 @@ import { createHash as createHash16 } from "node:crypto";
 import os5 from "node:os";
 import { open as open7 } from "node:fs/promises";
 import { constants as constants8 } from "node:fs";
-import path19 from "node:path";
+import path20 from "node:path";
 var MACHINE_GUID = /^\s*MachineGuid\s+REG_SZ\s+([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})\s*$/m;
 async function readMachineGuid(timeoutMs2 = 5e3) {
   if (process.platform === "linux") {
@@ -46095,7 +46338,7 @@ async function readMachineGuid(timeoutMs2 = 5e3) {
     }
   }
   if (!["win32", "darwin"].includes(process.platform)) return null;
-  const reg = process.platform === "darwin" ? "/usr/sbin/ioreg" : path19.join(process.env.SystemRoot || "C:\\Windows", "System32", "reg.exe");
+  const reg = process.platform === "darwin" ? "/usr/sbin/ioreg" : path20.join(process.env.SystemRoot || "C:\\Windows", "System32", "reg.exe");
   const args = process.platform === "darwin" ? ["-rd1", "-c", "IOPlatformExpertDevice"] : ["query", "HKLM\\SOFTWARE\\Microsoft\\Cryptography", "/v", "MachineGuid", "/reg:64"];
   const pattern = process.platform === "darwin" ? /"IOPlatformUUID"\s*=\s*"([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})"/ : MACHINE_GUID;
   return new Promise((resolve) => {
@@ -46165,10 +46408,10 @@ function canonicalOrigin2(value) {
     fail6("ORIGIN_INVALID");
   }
 }
-function endpoint(origin, path28) {
-  return origin + path28;
+function endpoint(origin, path29) {
+  return origin + path29;
 }
-function uuid20(value, code) {
+function uuid21(value, code) {
   if (typeof value !== "string" || !UUID3.test(value)) fail6(code);
   return value.toLowerCase();
 }
@@ -46288,7 +46531,7 @@ var PairingClient = class {
       publicKey: identity.publicKeyPem,
       agentVersion: this.version
     }));
-    const pairingId = uuid20(response.pairingId, "PAIRING_RESPONSE_INVALID");
+    const pairingId = uuid21(response.pairingId, "PAIRING_RESPONSE_INVALID");
     const expiresAt = parseDate(response.expiresAt, "PAIRING_RESPONSE_INVALID");
     const now = this.nowMs();
     if (expiresAt.getTime() <= now || expiresAt.getTime() - now > 30 * 6e4) fail6("PAIRING_RESPONSE_INVALID");
@@ -46322,7 +46565,7 @@ var PairingClient = class {
   }
   async completeOnce(beginResult, approved, displayNameValue) {
     const pairing = this.validateBeginResult(beginResult);
-    const tenantId = uuid20(approved.tenantId, "PAIRING_RESPONSE_INVALID");
+    const tenantId = uuid21(approved.tenantId, "PAIRING_RESPONSE_INVALID");
     const email3 = accountEmail(approved.accountEmail);
     const name2 = displayName(displayNameValue);
     const identity = await this.currentIdentity();
@@ -46336,15 +46579,15 @@ var PairingClient = class {
       displayName: name2,
       agentVersion: this.version
     }));
-    const completedTenant = uuid20(response.tenantId, "PAIRING_RESPONSE_INVALID");
+    const completedTenant = uuid21(response.tenantId, "PAIRING_RESPONSE_INVALID");
     if (completedTenant !== tenantId) fail6("PAIRING_RESPONSE_INVALID");
-    const deviceId = uuid20(response.deviceId, "PAIRING_RESPONSE_INVALID");
+    const deviceId = uuid21(response.deviceId, "PAIRING_RESPONSE_INVALID");
     const enrollment = {
       tenantId,
       deviceId,
       serverOrigin: this.origin,
       accountEmail: email3,
-      ...response.accountId !== void 0 ? { accountId: uuid20(response.accountId, "PAIRING_RESPONSE_INVALID") } : {}
+      ...response.accountId !== void 0 ? { accountId: uuid21(response.accountId, "PAIRING_RESPONSE_INVALID") } : {}
     };
     await this.store.saveEnrollment(enrollment);
     return { ...enrollment };
@@ -46358,7 +46601,7 @@ var PairingClient = class {
       state: response.state,
       expiresAt: parseDate(response.expiresAt, "PAIRING_RESPONSE_INVALID")
     };
-    if (response.tenantId !== void 0) result2.tenantId = uuid20(response.tenantId, "PAIRING_RESPONSE_INVALID");
+    if (response.tenantId !== void 0) result2.tenantId = uuid21(response.tenantId, "PAIRING_RESPONSE_INVALID");
     if (response.accountEmail !== void 0) result2.accountEmail = accountEmail(response.accountEmail);
     return result2;
   }
@@ -46370,10 +46613,10 @@ var PairingClient = class {
   }
   validateBeginResult(value) {
     return {
-      pairingId: uuid20(value.pairingId, "PAIRING_INVALID"),
+      pairingId: uuid21(value.pairingId, "PAIRING_INVALID"),
       pairingSecret: pairingSecret(value.pairingSecret),
       confirmationCode: confirmationCode(value.confirmationCode),
-      approvalUrl: approvalUrl(value.approvalUrl, this.origin, uuid20(value.pairingId, "PAIRING_INVALID")),
+      approvalUrl: approvalUrl(value.approvalUrl, this.origin, uuid21(value.pairingId, "PAIRING_INVALID")),
       expiresAt: value.expiresAt instanceof Date ? new Date(value.expiresAt.getTime()) : parseDate(value.expiresAt, "PAIRING_INVALID"),
       keyFingerprint: fingerprint2(value.keyFingerprint)
     };
@@ -46668,15 +46911,15 @@ async function deliverGuardEvidence(target, packet, options = {}) {
 
 // agent/src/optimization-ledger.ts
 import { constants as constants9 } from "node:fs";
-import { lstat as lstat8, mkdir as mkdir8, open as open8, readFile as readFile7, realpath as realpath8 } from "node:fs/promises";
-import path20 from "node:path";
+import { lstat as lstat8, mkdir as mkdir8, open as open8, readFile as readFile8, realpath as realpath8 } from "node:fs/promises";
+import path21 from "node:path";
 var MAX_LEDGER_BYTES = 64 * 1024 * 1024;
 var MAX_NOTICE_LEDGER_BYTES = 8 * 1024 * 1024;
 function failure5(code) {
   return Object.assign(new Error(code), { code });
 }
 async function safeDirectory2(directory) {
-  const absolute2 = path20.resolve(directory);
+  const absolute2 = path21.resolve(directory);
   let current2 = absolute2;
   for (; ; ) {
     try {
@@ -46684,7 +46927,7 @@ async function safeDirectory2(directory) {
     } catch (error62) {
       if (error62.code !== "ENOENT") throw error62;
     }
-    const parent = path20.dirname(current2);
+    const parent = path21.dirname(current2);
     if (parent === current2) break;
     current2 = parent;
   }
@@ -46719,15 +46962,15 @@ var OptimizationLedger = class _OptimizationLedger {
   closed = false;
   static async open(directory) {
     const dir = await safeDirectory2(directory);
-    const filename = path20.join(dir, "live-efficiency.v1.jsonl");
-    const noticesFilename = path20.join(dir, "live-efficiency-notices.v1.jsonl");
+    const filename = path21.join(dir, "live-efficiency.v1.jsonl");
+    const noticesFilename = path21.join(dir, "live-efficiency-notices.v1.jsonl");
     let existing = "";
     try {
       const stat2 = await lstat8(filename);
       if (!stat2.isFile() || stat2.isSymbolicLink() || stat2.size > MAX_LEDGER_BYTES) {
         throw failure5("OPTIMIZATION_LEDGER_INVALID");
       }
-      existing = await readFile7(filename, "utf8");
+      existing = await readFile8(filename, "utf8");
     } catch (error62) {
       if (error62.code !== "ENOENT") throw error62;
     }
@@ -46741,7 +46984,7 @@ var OptimizationLedger = class _OptimizationLedger {
       try {
         const noticeStat = await lstat8(noticesFilename);
         if (!noticeStat.isFile() || noticeStat.isSymbolicLink() || noticeStat.size > MAX_NOTICE_LEDGER_BYTES) throw failure5("OPTIMIZATION_NOTICE_LEDGER_INVALID");
-        const notices = await readFile7(noticesFilename, "utf8");
+        const notices = await readFile8(noticesFilename, "utf8");
         for (const line of notices.split("\n")) {
           if (!line) continue;
           const parsed = JSON.parse(line);
@@ -46870,7 +47113,7 @@ var OptimizationLedger = class _OptimizationLedger {
 // agent/src/monitor.ts
 import { createHash as createHash17, randomUUID as randomUUID12 } from "node:crypto";
 import { lstat as lstat9, mkdir as mkdir9, open as open9, rename as rename6, rm as rm7 } from "node:fs/promises";
-import path21 from "node:path";
+import path22 from "node:path";
 import os6 from "node:os";
 
 // packages/agent-cli/bin/monitor-savings.mjs
@@ -46893,7 +47136,7 @@ function lifetimeSavingsView(raw) {
 // agent/src/monitor.ts
 function commandSummary2(tool) {
   if (tool.name !== "command_run") return { name: tool.name, command: tool.name };
-  const candidate = path21.win32.basename(tool.args.command).replace(/\.(exe|cmd|bat|com)$/i, "").toLowerCase();
+  const candidate = path22.win32.basename(tool.args.command).replace(/\.(exe|cmd|bat|com)$/i, "").toLowerCase();
   const name2 = ["node", "npm", "npx", "git", "rg", "powershell", "pwsh", "cmd", "tsc", "python", "dotnet"].includes(candidate) ? candidate : "command";
   let command = name2;
   if (name2 === "node" && tool.args.args.includes("--test") && !tool.args.args.some((arg) => ["-e", "--eval", "-p", "--print"].includes(arg))) command += " --test";
@@ -46906,9 +47149,9 @@ function commandSummary2(tool) {
 var ProductionMonitor = class {
   constructor(directory, stateDirectory, agentVersion3) {
     this.agentVersion = agentVersion3;
-    const key = createHash17("sha256").update(path21.resolve(stateDirectory).toLowerCase()).digest("hex");
-    this.file = path21.join(directory, key + ".json");
-    this.transportFile = path21.join(directory, key + ".transport");
+    const key = createHash17("sha256").update(path22.resolve(stateDirectory).toLowerCase()).digest("hex");
+    this.file = path22.join(directory, key + ".json");
+    this.transportFile = path22.join(directory, key + ".transport");
   }
   agentVersion;
   instanceId = randomUUID12();
@@ -47100,7 +47343,7 @@ var ProductionMonitor = class {
       schemaVersion: 1,
       instanceId: this.instanceId,
       pid: process.pid,
-      savingsSourceId: path21.basename(this.file, ".json"),
+      savingsSourceId: path22.basename(this.file, ".json"),
       lifetimeSavings: this.lifetimeSavings && { ...this.lifetimeSavings },
       computer: this.computer,
       processName: "lc-agent",
@@ -47134,7 +47377,7 @@ var ProductionMonitor = class {
     return this.writing;
   }
   async write(file2, contents) {
-    const directory = path21.dirname(file2);
+    const directory = path22.dirname(file2);
     await mkdir9(directory, { recursive: true, mode: 448 });
     const stat2 = await lstat9(directory);
     if (!stat2.isDirectory() || stat2.isSymbolicLink()) throw Error("MONITOR_DIRECTORY_INVALID");
@@ -47440,7 +47683,7 @@ var NativeEventSupervisor = class {
 };
 
 // agent/src/native-fabric-observer.ts
-var uuid21 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var uuid22 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var NativeFabricObserver = class {
   constructor(supervisor, source) {
     this.supervisor = supervisor;
@@ -47462,7 +47705,7 @@ var NativeFabricObserver = class {
   unsubscribe;
   connected(authenticatedDeviceId) {
     this.disconnected();
-    if (uuid21.test(authenticatedDeviceId)) this.deviceId = authenticatedDeviceId.toLowerCase();
+    if (uuid22.test(authenticatedDeviceId)) this.deviceId = authenticatedDeviceId.toLowerCase();
     this.activity();
   }
   disconnected() {
@@ -47497,17 +47740,17 @@ var NativeFabricObserver = class {
     void Promise.resolve().then(() => this.source.mailbox.snapshot()).then((state) => {
       if (this.closed || expired || generation !== this.generation) return;
       if (state.workers.length > 64 || state.assignments.length > 256 || state.messages.length > 1024) throw Error("FABRIC_BOUND_INVALID");
-      const workers = new Set(state.workers.filter((w) => w.device?.deviceId.toLowerCase() === deviceId && uuid21.test(w.workerId)).map((w) => w.workerId));
+      const workers = new Set(state.workers.filter((w) => w.device?.deviceId.toLowerCase() === deviceId && uuid22.test(w.workerId)).map((w) => w.workerId));
       const assignments = new Map(state.assignments.filter((a) => workers.has(a.workerId)).map((a) => [a.assignmentId, a]));
       const refs = /* @__PURE__ */ new Map();
       for (const a of assignments.values()) {
         const id2 = a.execution?.executionId;
-        if (!id2 || !uuid21.test(id2)) continue;
+        if (!id2 || !uuid22.test(id2)) continue;
         if (refs.has(id2.toLowerCase())) throw Error("FABRIC_EXECUTION_CONFLICT");
         refs.set(id2.toLowerCase(), {
           executionId: id2.toLowerCase(),
           workerId: a.workerId.toLowerCase(),
-          ...uuid21.test(a.taskId) ? { taskId: a.taskId.toLowerCase() } : {}
+          ...uuid22.test(a.taskId) ? { taskId: a.taskId.toLowerCase() } : {}
         });
       }
       this.referencesByExecution.clear();
@@ -47559,13 +47802,13 @@ var NativeFabricObserver = class {
 };
 
 // agent/src/native-fabric-startup.ts
-import { lstat as lstat11, mkdir as mkdir12, open as open11, readFile as readFile8 } from "node:fs/promises";
-import path24 from "node:path";
+import { lstat as lstat11, mkdir as mkdir12, open as open11, readFile as readFile9 } from "node:fs/promises";
+import path25 from "node:path";
 
 // src/agent-fabric-service.ts
 import { lstat as lstat10, mkdir as mkdir11, realpath as realpath9 } from "node:fs/promises";
 import { watch } from "node:fs";
-import path23 from "node:path";
+import path24 from "node:path";
 
 // src/agent-runtime-identity.ts
 import { createHash as createHash19, randomBytes as randomBytes7, randomUUID as randomUUID14, timingSafeEqual as timingSafeEqual4 } from "node:crypto";
@@ -47573,13 +47816,13 @@ import { createHash as createHash19, randomBytes as randomBytes7, randomUUID as
 // src/agent-fabric-state.ts
 import { randomUUID as randomUUID13 } from "node:crypto";
 import { mkdir as mkdir10, open as open10, rename as rename7, unlink as unlink2 } from "node:fs/promises";
-import path22 from "node:path";
+import path23 from "node:path";
 var queues = /* @__PURE__ */ new Map();
 var FabricStateFile = class {
   constructor(file2, maxBytes, parse3) {
     this.maxBytes = maxBytes;
     this.parse = parse3;
-    this.file = path22.resolve(file2);
+    this.file = path23.resolve(file2);
   }
   maxBytes;
   parse;
@@ -47623,7 +47866,7 @@ var FabricStateFile = class {
   }
   update(fn, create) {
     return this.serial(async () => {
-      if (create) await mkdir10(path22.dirname(this.file), { recursive: true });
+      if (create) await mkdir10(path23.dirname(this.file), { recursive: true });
       const lockPath = this.file + ".lock";
       const token = randomUUID13();
       const lock = await open10(lockPath, "wx", 384).catch((error62) => {
@@ -48267,9 +48510,9 @@ var WorkerRequest = external_exports.discriminatedUnion("operation", [
 var AgentFabricService = class _AgentFabricService {
   constructor(directory, controllerId) {
     this.directory = directory;
-    this.identities = new AgentRuntimeIdentityStore(path23.join(directory, "identities.json"));
+    this.identities = new AgentRuntimeIdentityStore(path24.join(directory, "identities.json"));
     this.mailbox = new AgentWorkerMailbox(
-      path23.join(directory, "mailbox.json"),
+      path24.join(directory, "mailbox.json"),
       controllerId,
       this.identities,
       void 0,
@@ -48284,21 +48527,21 @@ var AgentFabricService = class _AgentFabricService {
   closed = false;
   static async open(directory, controllerId, device = null, initialize = true) {
     const expected = Binding.parse({ version: 1, controllerId, device, initialized: false });
-    const absolute2 = path23.resolve(directory);
-    for (let current2 = absolute2; ; current2 = path23.dirname(current2)) {
+    const absolute2 = path24.resolve(directory);
+    for (let current2 = absolute2; ; current2 = path24.dirname(current2)) {
       try {
         if ((await lstat10(current2)).isSymbolicLink()) throw Error("FABRIC_DIRECTORY_INVALID");
       } catch (error62) {
         if (error62.code !== "ENOENT") throw error62;
       }
-      if (path23.dirname(current2) === current2) break;
+      if (path24.dirname(current2) === current2) break;
     }
     if (initialize) await mkdir11(absolute2, { recursive: true, mode: 448 });
     if (!(await lstat10(absolute2)).isDirectory() || (await realpath9(absolute2)).toLowerCase() !== absolute2.toLowerCase())
       throw Error("FABRIC_DIRECTORY_INVALID");
     const present = /* @__PURE__ */ new Set();
     for (const name2 of ["binding.json", "mailbox.json", "identities.json"]) {
-      const file2 = await lstat10(path23.join(absolute2, name2)).catch((error62) => {
+      const file2 = await lstat10(path24.join(absolute2, name2)).catch((error62) => {
         if (error62.code === "ENOENT") return null;
         throw error62;
       });
@@ -48306,7 +48549,7 @@ var AgentFabricService = class _AgentFabricService {
       if (file2) present.add(name2);
     }
     if (!present.has("binding.json") && present.size) throw Error("FABRIC_BINDING_MISSING");
-    const binding2 = new FabricStateFile(path23.join(absolute2, "binding.json"), 2048, (value) => Binding.parse(value));
+    const binding2 = new FabricStateFile(path24.join(absolute2, "binding.json"), 2048, (value) => Binding.parse(value));
     const service2 = new _AgentFabricService(absolute2, controllerId);
     await binding2.update(async (state) => {
       if (state.controllerId !== expected.controllerId || JSON.stringify(state.device) !== JSON.stringify(expected.device))
@@ -48321,7 +48564,7 @@ var AgentFabricService = class _AgentFabricService {
         state.initialized = true;
       }
       const snapshot2 = await service2.mailbox.snapshot();
-      if (snapshot2.workers.some((worker) => worker.runtimeId !== null)) await lstat10(path23.join(absolute2, "identities.json"));
+      if (snapshot2.workers.some((worker) => worker.runtimeId !== null)) await lstat10(path24.join(absolute2, "identities.json"));
     }, initialize ? () => expected : void 0);
     return service2;
   }
@@ -48408,7 +48651,7 @@ var Delivery = external_exports.strictObject({ capability: external_exports.stri
 async function openNativeFabric(stateDirectory, enrollment, box, initialize = true) {
   const controllerId = "device-" + external_exports.string().uuid().parse(enrollment.deviceId).toLowerCase();
   const tenantId = external_exports.string().uuid().parse(enrollment.tenantId).toLowerCase();
-  const parent = path24.join(stateDirectory, ".local-commander"), marker = path24.join(parent, "fabric-established.json");
+  const parent = path25.join(stateDirectory, ".local-commander"), marker = path25.join(parent, "fabric-established.json");
   try {
     await mkdir12(parent, { mode: 448 });
   } catch (error62) {
@@ -48420,7 +48663,7 @@ async function openNativeFabric(stateDirectory, enrollment, box, initialize = tr
   let fresh = false;
   try {
     const info = await lstat11(marker);
-    if (!info.isFile() || info.isSymbolicLink() || info.size > 2048 || await readFile8(marker, "utf8") !== expected)
+    if (!info.isFile() || info.isSymbolicLink() || info.size > 2048 || await readFile9(marker, "utf8") !== expected)
       throw Error("FABRIC_BINDING_CHANGED");
   } catch (error62) {
     if (error62.code !== "ENOENT" || !initialize) throw error62;
@@ -48434,13 +48677,13 @@ async function openNativeFabric(stateDirectory, enrollment, box, initialize = tr
     fresh = true;
   }
   const service2 = await AgentFabricService.open(
-    path24.join(stateDirectory, ".local-commander", "fabric"),
+    path25.join(stateDirectory, ".local-commander", "fabric"),
     controllerId,
     { deviceId: enrollment.deviceId.toLowerCase(), enrollmentEvidenceRef: "enrollment-" + tenantId },
     fresh
   );
   const purpose = "native-fabric:" + tenantId + ":" + controllerId;
-  const credentialFile = (workerId) => path24.join(service2.directory, external_exports.string().uuid().parse(workerId) + ".capability");
+  const credentialFile = (workerId) => path25.join(service2.directory, external_exports.string().uuid().parse(workerId) + ".capability");
   const decode4 = (value) => {
     const credential = Credential.parse(JSON.parse(box.open(Buffer.from(value, "base64"), purpose).toString("utf8")));
     if (credential.controllerId !== controllerId) throw Error("FABRIC_WORKER_DENIED");
@@ -48449,7 +48692,7 @@ async function openNativeFabric(stateDirectory, enrollment, box, initialize = tr
   async function capability(workerId) {
     const file2 = credentialFile(workerId), info = await lstat11(file2);
     if (!info.isFile() || info.isSymbolicLink() || info.size > 4096) throw Error("FABRIC_CREDENTIAL_UNKNOWN");
-    const encoded = await readFile8(file2, "utf8");
+    const encoded = await readFile9(file2, "utf8");
     if (decode4(encoded).workerId !== workerId) throw Error("FABRIC_WORKER_DENIED");
     return encoded;
   }
@@ -48541,8 +48784,8 @@ async function readFabricRequest(input2 = process.stdin) {
 
 // agent/src/supervisor-liveness.ts
 import { spawn as spawn6 } from "node:child_process";
-import path25 from "node:path";
-import { setTimeout as delay2 } from "node:timers/promises";
+import path26 from "node:path";
+import { setTimeout as delay3 } from "node:timers/promises";
 var ROW = /^"([^"]+)","(\d{1,10})"/;
 function parseTasklist(output2, image) {
   const pids = /* @__PURE__ */ new Set();
@@ -48556,7 +48799,7 @@ function parseTasklist(output2, image) {
 }
 function listProcesses(image, timeoutMs2 = 5e3) {
   if (process.platform !== "win32" || !/^[A-Za-z0-9._-]{1,64}\.exe$/i.test(image)) return Promise.resolve(null);
-  const tasklist = path25.join(process.env.SystemRoot || "C:\\Windows", "System32", "tasklist.exe");
+  const tasklist = path26.join(process.env.SystemRoot || "C:\\Windows", "System32", "tasklist.exe");
   return new Promise((resolve) => {
     let output2 = "", settled = false;
     const finish = (value) => {
@@ -48584,7 +48827,9 @@ function listProcesses(image, timeoutMs2 = 5e3) {
   });
 }
 function supervisorLiveness(helperPath, options = {}) {
-  const image = path25.basename(helperPath), waitMs = options.waitMs ?? 1e4, pollMs = options.pollMs ?? 500, list = options.list ?? listProcesses;
+  if (process.platform === "linux" && !options.list) return linuxSupervisorLiveness;
+  if (process.platform === "darwin" && !options.list) return (pids, _linux, darwin) => darwinSupervisorLiveness(path26.join(path26.dirname(helperPath), "posix-host"), pids, darwin);
+  const image = path26.basename(helperPath), waitMs = options.waitMs ?? 1e4, pollMs = options.pollMs ?? 500, list = options.list ?? listProcesses;
   return async (pids) => {
     const deadline = Date.now() + waitMs;
     for (; ; ) {
@@ -48592,24 +48837,24 @@ function supervisorLiveness(helperPath, options = {}) {
       if (!running) return null;
       const live = new Set(pids.filter((pid) => running.has(pid)));
       if (!live.size || Date.now() >= deadline) return live;
-      await delay2(pollMs);
+      await delay3(pollMs);
     }
   };
 }
 
 // agent/src/content-audit.ts
 import { createReadStream } from "node:fs";
-import { appendFile, lstat as lstat12, mkdir as mkdir13, open as open12, readdir as readdir5, readFile as readFile9, rename as rename8, rm as rm8, writeFile as writeFile4 } from "node:fs/promises";
-import path26 from "node:path";
+import { appendFile, lstat as lstat12, mkdir as mkdir13, open as open12, readdir as readdir5, readFile as readFile10, rename as rename8, rm as rm8, writeFile as writeFile4 } from "node:fs/promises";
+import path27 from "node:path";
 import { performance as performance3 } from "node:perf_hooks";
 import { createInterface as createInterface2 } from "node:readline";
 import { randomBytes as randomBytes9 } from "node:crypto";
 
 // src/audit-crypto.ts
 import { createCipheriv as createCipheriv3, createDecipheriv as createDecipheriv3, createHash as createHash20, randomBytes as randomBytes8 } from "node:crypto";
-import { promisify } from "node:util";
+import { promisify as promisify3 } from "node:util";
 import { gunzipSync, gzip, gzipSync } from "node:zlib";
-var gzipAsync = promisify(gzip);
+var gzipAsync = promisify3(gzip);
 var AUDIT_ENCRYPTION_ALGORITHM = "A256GCM";
 var AUDIT_COMPRESSION = "gzip";
 var AUDIT_RECOVERY_KEY_PREFIX = "lca1_";
@@ -48769,7 +49014,7 @@ var FILE = /^(full|metrics)-(\d{4}-\d{2}-\d{2})\.jsonl$/;
 var PAUSED_FILE = "paused.json";
 var DAY_MS = 864e5;
 function contentAuditDirectory(stateDir) {
-  return path26.join(path26.dirname(path26.resolve(stateDir)), "Audit");
+  return path27.join(path27.dirname(path27.resolve(stateDir)), "Audit");
 }
 async function plainDirectory(dir) {
   await mkdir13(dir, { recursive: true, mode: 448 });
@@ -48788,7 +49033,7 @@ async function auditFiles(dir) {
   for (const name2 of names) {
     const match = FILE.exec(name2);
     if (!match) continue;
-    const info = await lstat12(path26.join(dir, name2));
+    const info = await lstat12(path27.join(dir, name2));
     if (info.isFile()) files.push({ name: name2, kind: match[1], day: match[2], bytes: info.size });
   }
   return files.sort((a, b) => a.name.localeCompare(b.name));
@@ -48826,7 +49071,7 @@ var ContentAudit = class _ContentAudit {
   skipped = 0;
   closed = false;
   static async open(options) {
-    const dir = path26.resolve(options.directory);
+    const dir = path27.resolve(options.directory);
     await plainDirectory(dir);
     const audit = new _ContentAudit(
       dir,
@@ -48835,7 +49080,7 @@ var ContentAudit = class _ContentAudit {
       { retentionDays: options.retentionDays ?? AUDIT_RETENTION_DAYS, maxBytes: options.maxBytes ?? AUDIT_MAX_BYTES },
       options.now ?? (() => /* @__PURE__ */ new Date())
     );
-    await rm8(path26.join(dir, PAUSED_FILE), { force: true });
+    await rm8(path27.join(dir, PAUSED_FILE), { force: true });
     await audit.rollover(audit.now());
     if (audit.usedBytes >= audit.limits.maxBytes) await audit.pause("QUOTA_EXCEEDED");
     return audit;
@@ -48905,8 +49150,8 @@ var ContentAudit = class _ContentAudit {
       await this.pause("QUOTA_EXCEEDED");
       return;
     }
-    await appendFile(path26.join(this.dir, `full-${day}.jsonl`), line, { mode: 384 });
-    await appendFile(path26.join(this.dir, `metrics-${day}.jsonl`), metrics, { mode: 384 });
+    await appendFile(path27.join(this.dir, `full-${day}.jsonl`), line, { mode: 384 });
+    await appendFile(path27.join(this.dir, `metrics-${day}.jsonl`), metrics, { mode: 384 });
     this.usedBytes += bytes3;
   }
   /** Daily retention runs on the first write of a new day; no timer or background scan. */
@@ -48915,7 +49160,7 @@ var ContentAudit = class _ContentAudit {
     const cutoff = new Date(at.getTime() - this.limits.retentionDays * DAY_MS).toISOString().slice(0, 10);
     let used = 0;
     for (const file2 of await auditFiles(this.dir)) {
-      if (file2.day <= cutoff) await rm8(path26.join(this.dir, file2.name), { force: true });
+      if (file2.day <= cutoff) await rm8(path27.join(this.dir, file2.name), { force: true });
       else used += file2.bytes;
     }
     this.usedBytes = used;
@@ -48923,7 +49168,7 @@ var ContentAudit = class _ContentAudit {
   async pause(reason) {
     if (this.paused) return;
     this.paused = reason;
-    await writeJsonAtomic(path26.join(this.dir, PAUSED_FILE), { reason, at: this.now().toISOString() });
+    await writeJsonAtomic(path27.join(this.dir, PAUSED_FILE), { reason, at: this.now().toISOString() });
   }
 };
 function percentiles(values) {
@@ -48945,13 +49190,13 @@ async function* jsonLines(file2) {
 }
 var count2 = (value) => typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : 0;
 async function summarizeContentAudit(directory, key) {
-  const dir = path26.resolve(directory);
+  const dir = path27.resolve(directory);
   const files = await auditFiles(dir);
   const days = /* @__PURE__ */ new Map();
   const sizes = [];
   const timings = [];
   for (const file2 of files.filter((f) => f.kind === "metrics")) {
-    for await (const line of jsonLines(path26.join(dir, file2.name))) {
+    for await (const line of jsonLines(path27.join(dir, file2.name))) {
       let day = days.get(file2.day);
       if (!day) {
         day = { day: file2.day, records: 0, failed: 0, rawBytes: 0, sanitizedBytes: 0, compressedBytes: 0, envelopeBytes: 0 };
@@ -48971,7 +49216,7 @@ async function summarizeContentAudit(directory, key) {
   }
   let paused = null;
   try {
-    const value = JSON.parse(await readFile9(path26.join(dir, PAUSED_FILE), "utf8"));
+    const value = JSON.parse(await readFile10(path27.join(dir, PAUSED_FILE), "utf8"));
     if (typeof value.reason === "string" && typeof value.at === "string") paused = { reason: value.reason.slice(0, 40), at: value.at.slice(0, 40) };
   } catch {
   }
@@ -48979,7 +49224,7 @@ async function summarizeContentAudit(directory, key) {
   const newest = files.filter((f) => f.kind === "full").at(-1);
   if (key && newest) {
     const tail = [];
-    for await (const line of jsonLines(path26.join(dir, newest.name))) {
+    for await (const line of jsonLines(path27.join(dir, newest.name))) {
       tail.push(line);
       if (tail.length > 5) tail.shift();
     }
@@ -49013,10 +49258,10 @@ async function summarizeContentAudit(directory, key) {
   };
 }
 async function restoreContentAudit(input2, output2, key) {
-  const handle = await open12(path26.resolve(output2), "wx", 384);
+  const handle = await open12(path27.resolve(output2), "wx", 384);
   let records = 0, failed = 0;
   try {
-    for await (const line of jsonLines(path26.resolve(input2))) {
+    for await (const line of jsonLines(path27.resolve(input2))) {
       try {
         await handle.appendFile(JSON.stringify(decryptAuditRecord(line, key)) + "\n");
         records += 1;
@@ -49031,7 +49276,7 @@ async function restoreContentAudit(input2, output2, key) {
 }
 
 // agent/src/main.ts
-var AGENT_VERSION2 = true ? "0.3.42" : "0.3.2";
+var AGENT_VERSION2 = true ? "0.3.44" : "0.3.2";
 var NETWORK_PUBLIC_KEY = true ? "-----BEGIN PUBLIC KEY-----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\nn6HK/F5May25c6oMmS3nh/NsiZopL1OvdtWKTt1L4WlRAgMBAAE=\n-----END PUBLIC KEY-----\n" : "";
 var AI_CONNECTION_SHIPPED = false;
 function processAlive(pid) {
@@ -49045,7 +49290,7 @@ function processAlive(pid) {
 }
 async function claimAgentProcess(stateDir, runtimeDir, version2) {
   await mkdir14(stateDir, { recursive: true });
-  const file2 = path27.join(stateDir, "agent-process.json");
+  const file2 = path28.join(stateDir, "agent-process.json");
   for (let attempt = 0; attempt < 2; attempt += 1) {
     try {
       const handle = await open13(file2, "wx", 384);
@@ -49056,7 +49301,7 @@ async function claimAgentProcess(stateDir, runtimeDir, version2) {
       }
       return async () => {
         try {
-          const current2 = JSON.parse(await readFile10(file2, "utf8"));
+          const current2 = JSON.parse(await readFile11(file2, "utf8"));
           if (current2.pid === process.pid) await rm9(file2, { force: true });
         } catch {
         }
@@ -49065,7 +49310,7 @@ async function claimAgentProcess(stateDir, runtimeDir, version2) {
       if (!error62 || typeof error62 !== "object" || !("code" in error62) || error62.code !== "EEXIST") throw error62;
       let stale = true;
       try {
-        const current2 = JSON.parse(await readFile10(file2, "utf8"));
+        const current2 = JSON.parse(await readFile11(file2, "utf8"));
         stale = typeof current2.pid !== "number" || !processAlive(current2.pid);
       } catch {
       }
@@ -49088,7 +49333,7 @@ function aborted2(signal, ms) {
   });
 }
 async function runAgent(options) {
-  const delay3 = options.reconnectDelayMs ?? 2e3;
+  const delay4 = options.reconnectDelayMs ?? 2e3;
   const monitor = (update) => {
     try {
       update();
@@ -49098,7 +49343,7 @@ async function runAgent(options) {
     }
   };
   try {
-    if (!Number.isInteger(delay3) || delay3 < 0 || delay3 > 3e4) throw Error("RECONNECT_DELAY_INVALID");
+    if (!Number.isInteger(delay4) || delay4 < 0 || delay4 > 3e4) throw Error("RECONNECT_DELAY_INVALID");
     const identity = await options.store.load();
     if (!identity?.enrollment) throw Error("ENROLLMENT_MISSING");
     const origin = identity.enrollment.serverOrigin;
@@ -49278,7 +49523,7 @@ async function runAgent(options) {
         await bridge.disconnected();
         connection = null;
       }
-      if (!options.signal.aborted) await aborted2(options.signal, delay3);
+      if (!options.signal.aborted) await aborted2(options.signal, delay4);
     }
   } finally {
     try {
@@ -49314,10 +49559,10 @@ async function openContentAudit(store, stateDir) {
 async function main() {
   if (!["win32", "linux", "darwin"].includes(process.platform)) throw Error("PLATFORM_UNSUPPORTED");
   const appData = process.env.LC_AGENT_DATA_DIR ?? (process.platform === "win32" ? process.env.LOCALAPPDATA : posixDataHome());
-  if (!appData || !path27.isAbsolute(appData)) throw Error("APP_DATA_MISSING");
-  const stateDir = process.env.LC_AGENT_STATE_DIR ?? path27.join(appData, "LocalCommander", "Agent");
-  const binaryDir = path27.dirname(process.platform === "win32" ? process.execPath : await realpath10(process.execPath));
-  const ownerBridgePath = process.env.LC_OWNER_BRIDGE ?? path27.join(binaryDir, process.platform === "win32" ? "OwnerBridge.exe" : "owner-store");
+  if (!appData || !path28.isAbsolute(appData)) throw Error("APP_DATA_MISSING");
+  const stateDir = process.env.LC_AGENT_STATE_DIR ?? path28.join(appData, "LocalCommander", "Agent");
+  const binaryDir = path28.dirname(process.platform === "win32" ? process.execPath : await realpath10(process.execPath));
+  const ownerBridgePath = process.env.LC_OWNER_BRIDGE ?? path28.join(binaryDir, process.platform === "win32" ? "OwnerBridge.exe" : "owner-store");
   const store = await WindowsPrivateStore.open(stateDir, ownerBridgePath);
   const command = process.argv[2] ?? "run";
   if (process.platform !== "win32" && (command.startsWith("guard-") || command.startsWith("network-"))) throw Error("FEATURE_PLATFORM_UNSUPPORTED");
@@ -49412,7 +49657,7 @@ async function main() {
   }
   if (command === "efficiency-report") {
     if (args.length) throw Error("AGENT_COMMAND_INVALID");
-    const ledger = await OptimizationLedger.open(path27.join(stateDir, "optimization"));
+    const ledger = await OptimizationLedger.open(path28.join(stateDir, "optimization"));
     try {
       process.stdout.write(JSON.stringify(await ledger.report(), null, 2) + "\n");
     } finally {
@@ -49422,7 +49667,7 @@ async function main() {
   }
   if (command === "guard-configure") {
     if (args.length !== 1) throw Error("AGENT_COMMAND_INVALID");
-    const filename = await (await import("node:fs/promises")).realpath(path27.resolve(args[0]));
+    const filename = await (await import("node:fs/promises")).realpath(path28.resolve(args[0]));
     const input2 = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(await readWindowsFile(ownerBridgePath, filename, 2e5)));
     if (!input2 || typeof input2 !== "object" || Object.keys(input2).sort().join(",") !== "compact,settings") throw Error("GUARD_CONFIGURATION_INVALID");
     await store.configureGuard(input2.settings, input2.compact);
@@ -49441,7 +49686,7 @@ async function main() {
   }
   if (command === "guard-evidence") {
     if (args.length) throw Error("AGENT_COMMAND_INVALID");
-    const journal = await NativeJournal.open(path27.join(stateDir, "journal"), new SecretBox({ "1": await store.loadDataKey() }));
+    const journal = await NativeJournal.open(path28.join(stateDir, "journal"), new SecretBox({ "1": await store.loadDataKey() }));
     try {
       process.stdout.write(JSON.stringify(await journal.guardEvidence()) + "\n");
     } finally {
@@ -49453,7 +49698,7 @@ async function main() {
     if (args.length !== (command === "guard-export" ? 0 : 1)) throw Error("AGENT_COMMAND_INVALID");
     const identity = await store.load();
     if (!identity?.enrollment) throw Error("ENROLLMENT_MISSING");
-    const journal = await NativeJournal.open(path27.join(stateDir, "journal"), new SecretBox({ "1": await store.loadDataKey() }));
+    const journal = await NativeJournal.open(path28.join(stateDir, "journal"), new SecretBox({ "1": await store.loadDataKey() }));
     try {
       const { tenantId, deviceId } = identity.enrollment;
       const records = (await journal.guardEvidence()).filter((record2) => record2.tenantId === tenantId && record2.deviceId === deviceId);
@@ -49531,27 +49776,27 @@ async function main() {
   if (args.length) throw Error("AGENT_COMMAND_INVALID");
   if (!(await store.load())?.enrollment) throw Error("ENROLLMENT_MISSING");
   const releaseProcess = await claimAgentProcess(stateDir, binaryDir, AGENT_VERSION2);
-  const monitor = new ProductionMonitor(path27.join(appData, "LocalCommander", "Monitor"), stateDir, AGENT_VERSION2);
+  const monitor = new ProductionMonitor(path28.join(appData, "LocalCommander", "Monitor"), stateDir, AGENT_VERSION2);
   const publishMonitor = () => monitor.flush().catch(() => {
     process.stderr.write("MONITOR_WRITE_FAILED\n");
   });
   await publishMonitor();
   try {
     const journal = await NativeJournal.open(
-      path27.join(stateDir, "journal"),
+      path28.join(stateDir, "journal"),
       new SecretBox({ "1": await store.loadDataKey() }),
-      process.platform === "win32" ? {} : { lockHelper: path27.join(binaryDir, "posix-host") }
+      process.platform === "win32" ? {} : { lockHelper: path28.join(binaryDir, "posix-host") }
     );
     const ledgerLoss = () => {
       process.stderr.write("OPTIMIZATION_TELEMETRY_INCOMPLETE\n");
     };
     const efficiencyLedger = await new OptionalWork(ledgerLoss, 1e3, 1).run(
-      () => OptimizationLedger.open(path27.join(stateDir, "optimization")),
+      () => OptimizationLedger.open(path28.join(stateDir, "optimization")),
       void 0,
       (ledger) => ledger.close()
     );
     try {
-      const helperPath = process.env.LC_JOB_HOST ?? path27.join(binaryDir, process.platform === "win32" ? "JobHost.exe" : "job-host.mjs");
+      const helperPath = process.env.LC_JOB_HOST ?? path28.join(binaryDir, process.platform === "win32" ? "JobHost.exe" : "job-host.mjs");
       const tools = new NativeTools({ stateDirectory: stateDir, helperPath, ownerBridgePath, programs: await store.loadPrograms() });
       const stop = new AbortController();
       process.once("SIGINT", () => stop.abort());
@@ -49622,7 +49867,7 @@ async function main() {
     await releaseProcess();
   }
 }
-var entrypoint = process.argv[1] && (process.platform === "win32" ? path27.resolve(process.argv[1]) : await realpath10(process.argv[1]).catch(() => null));
+var entrypoint = process.argv[1] && (process.platform === "win32" ? path28.resolve(process.argv[1]) : await realpath10(process.argv[1]).catch(() => null));
 if (entrypoint === fileURLToPath(import.meta.url)) {
   void main().catch((error62) => {
     const code = error62 instanceof Error && /^[A-Z0-9_]{1,64}$/.test(error62.message) ? error62.message : "AGENT_START_FAILED";