negotium 0.4.2 → 0.4.4

package/dist/main.js

@@ -273,7 +273,7 @@ function resolveDefaultModel(agent, registryDefaultModel) {
 function codexAuthFilePath() {
   return process.env.NEGOTIUM_CODEX_AUTH_FILE || join(process.env.CODEX_HOME || join(homedir(), ".codex"), "auth.json");
 }
-var HOME, PROJECT_ROOT, STATE_DIR_ENV, STATE_DIR, WORKSPACE_DIR, TOPIC_WORKSPACE_DIR, SHARED_WIKI_DIR, CRON_WORKSPACE_DIR, BROWSER_DIR, BROWSER_PROFILES_DIR, BINARIES_DIR, SECRETS_DIR, DM_WORKSPACE_DIR, SESSION_WORKSPACE_DIR, CLAUDE_EXECUTABLE_ENV, CLAUDE_EXECUTABLE, DEFAULT_OUTPUT_LANGUAGE = "English", BROWSER_RS_VERSION = "v0.1.21", BROWSER_RS_MIN_SECURE_VERSION = "0.1.15", BROWSER_RS_VERSION_PROBE_TIMEOUT_MS = 15000, SNIPPETS_API_URL, BROWSER_RS_BIN, BASH_RS_VERSION = "v0.1.7", BASH_RS_BIN, PLAYWRIGHT_MCP_BIN, TSX_BIN, TSX_LOADER, TSCONFIG_PATH, SESSION_COMM_SERVER, TASK_SERVER, DECISION_SERVER, BROWSER_MCP_SSE_PROXY_SERVER, CANONICAL_MCP_PROXY_SERVER, WIKI_SERVER, TOKEN_STATS_SERVER, COMPACTION_LOG_SERVER, SYSTEM_HEALTH_SERVER, AGENT_HEALTH_SERVER, VAULT_SERVER, BG_BASH_BASE_PORT, BG_BASH_MAX_PORT, RUNTIME_MCP_SECRET, NODE_CONTROL_TOKEN, NODE_ID, VAULT_MASTER_KEY, NEGOTIUM_PORT, hostname, DATA_DIR, LOG_DIR, UPLOADS_DIR, VAULT_DIR, SESSIONS_DB, DEBUG_FILE, USERS_LOG_DIR, RUN_DIR, PROGRESS_DIR, DM_CMD_DIR, DM_RESP_DIR, SESSION_INBOX_DIR, SESSION_ASKS_DIR, BASHRS_SPILL_ROOT, PLAYWRIGHT_BASE_PORT, PLAYWRIGHT_MAX_PORT, PLAYWRIGHT_PORTS_DIR, ACTIVE_QUERY_STALE_MS, AGENTS_PROMPTS_DIR, RESOURCES_DIR, FILE_TAG_REGEX, MODEL_SONNET = "claude-sonnet-5", MODEL_OPUS = "claude-opus-5", MODEL_FABLE = "claude-fable-5", FALLBACK_AGENT, SESSION_AGENT, GATEWAY_AGENT, FALLBACK_MODEL, SESSION_MODEL, GATEWAY_MODEL, FFMPEG_BIN, FFPROBE_BIN, PYTHON_BIN, FASTER_WHISPER_WRAPPER, WHISPER_MODEL, TESSERACT_BIN, PDFTOTEXT_BIN, _envMaxTellDepth, MAX_TELL_DEPTH;
+var HOME, PROJECT_ROOT, STATE_DIR_ENV, STATE_DIR, WORKSPACE_DIR, TOPIC_WORKSPACE_DIR, SHARED_WIKI_DIR, CRON_WORKSPACE_DIR, BROWSER_DIR, BROWSER_PROFILES_DIR, BINARIES_DIR, SECRETS_DIR, DM_WORKSPACE_DIR, SESSION_WORKSPACE_DIR, CLAUDE_EXECUTABLE_ENV, CLAUDE_EXECUTABLE, DEFAULT_OUTPUT_LANGUAGE = "English", BROWSER_RS_VERSION = "v0.1.22", BROWSER_RS_MIN_SECURE_VERSION = "0.1.15", BROWSER_RS_VERSION_PROBE_TIMEOUT_MS = 15000, SNIPPETS_API_URL, BROWSER_RS_BIN, BASH_RS_VERSION = "v0.1.7", BASH_RS_BIN, PLAYWRIGHT_MCP_BIN, TSX_BIN, TSX_LOADER, TSCONFIG_PATH, SESSION_COMM_SERVER, TASK_SERVER, DECISION_SERVER, BROWSER_MCP_SSE_PROXY_SERVER, CANONICAL_MCP_PROXY_SERVER, WIKI_SERVER, TOKEN_STATS_SERVER, COMPACTION_LOG_SERVER, SYSTEM_HEALTH_SERVER, AGENT_HEALTH_SERVER, VAULT_SERVER, BG_BASH_BASE_PORT, BG_BASH_MAX_PORT, RUNTIME_MCP_SECRET, NODE_CONTROL_TOKEN, NODE_ID, VAULT_MASTER_KEY, NEGOTIUM_PORT, hostname, DATA_DIR, LOG_DIR, UPLOADS_DIR, VAULT_DIR, SESSIONS_DB, DEBUG_FILE, USERS_LOG_DIR, RUN_DIR, PROGRESS_DIR, DM_CMD_DIR, DM_RESP_DIR, SESSION_INBOX_DIR, SESSION_ASKS_DIR, BASHRS_SPILL_ROOT, PLAYWRIGHT_BASE_PORT, PLAYWRIGHT_MAX_PORT, PLAYWRIGHT_PORTS_DIR, ACTIVE_QUERY_STALE_MS, AGENTS_PROMPTS_DIR, RESOURCES_DIR, FILE_TAG_REGEX, MODEL_SONNET = "claude-sonnet-5", MODEL_OPUS = "claude-opus-5", MODEL_FABLE = "claude-fable-5", FALLBACK_AGENT, SESSION_AGENT, GATEWAY_AGENT, FALLBACK_MODEL, SESSION_MODEL, GATEWAY_MODEL, FFMPEG_BIN, FFPROBE_BIN, PYTHON_BIN, FASTER_WHISPER_WRAPPER, WHISPER_MODEL, TESSERACT_BIN, PDFTOTEXT_BIN, _envMaxTellDepth, MAX_TELL_DEPTH;
 var init_config = __esm(() => {
   init_config_helpers();
   init_logger();
@@ -1869,7 +1869,7 @@ var exports_version = {};
 __export(exports_version, {
   NEGOTIUM_VERSION: () => NEGOTIUM_VERSION
 });
-var NEGOTIUM_VERSION = "0.4.2";
+var NEGOTIUM_VERSION = "0.4.4";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 import { spawn } from "child_process";
@@ -2770,6 +2770,15 @@ function playwrightTransport(port, owner, capability, agent) {
 function longLivedHttpMcp(agent, port) {
   return agent === "codex" ? { url: `http://127.0.0.1:${port}/mcp` } : { type: "sse", url: `http://127.0.0.1:${port}/sse` };
 }
+function setCuaRsMcpPort(port) {
+  if (port !== undefined && (!Number.isInteger(port) || port < 1 || port > 65535)) {
+    throw new Error(`invalid cua-rs MCP port: ${port}`);
+  }
+  cuaRsMcpPort = port;
+}
+function cuaRsHttpMcp(port) {
+  return { type: "http", url: `http://127.0.0.1:${port}/mcp` };
+}
 function backgroundBashTransport(agent, port, userId, topic) {
   const capability = bgBashContextCapability(userId, topic);
   const headers = {
@@ -2785,11 +2794,6 @@ function backgroundBashTransport(agent, port, userId, topic) {
   }
   return { type: "sse", url: `http://127.0.0.1:${port}/sse`, headers };
 }
-function cuaRsArgs() {
-  const raw = envText("NEGOTIUM_CUA_RS_ALLOW_HID")?.trim().toLowerCase();
-  const on = raw === "1" || raw === "true" || raw === "yes";
-  return on ? ["--allow-hid"] : [];
-}
 function resolveCuaRsBinary(platform2 = process.platform) {
   if (platform2 !== "darwin")
     return null;
@@ -3050,7 +3054,7 @@ function getMcpServersForQuery(opts) {
     peerBridge: opts.peerBridge
   });
 }
-var _playwrightUnavailableNotifier, _playwrightUnavailableLastNotifiedAt, _PLAYWRIGHT_UNAVAILABLE_COOLDOWN_MS, _playwrightUnavailableThisTurn, CODEX_BROWSER_CAPABILITY_ENV = "NEGOTIUM_BROWSER_CAPABILITY", MCP_CATALOG, allForumMcpServerNames, requiredForumMcpServers, REQUIRED_FORUM_MCP_SERVERS, optionalForumMcpServers, OPTIONAL_FORUM_MCP_SERVERS, nodeMcpEntries;
+var _playwrightUnavailableNotifier, _playwrightUnavailableLastNotifiedAt, _PLAYWRIGHT_UNAVAILABLE_COOLDOWN_MS, _playwrightUnavailableThisTurn, CODEX_BROWSER_CAPABILITY_ENV = "NEGOTIUM_BROWSER_CAPABILITY", cuaRsMcpPort, MCP_CATALOG, allForumMcpServerNames, requiredForumMcpServers, REQUIRED_FORUM_MCP_SERVERS, optionalForumMcpServers, OPTIONAL_FORUM_MCP_SERVERS, nodeMcpEntries;
 var init_mcp_config = __esm(() => {
   init_canonical_bridge_config();
   init_runtime_spec();
@@ -3269,10 +3273,7 @@ var init_mcp_config = __esm(() => {
     "cua-rs": {
       ...commonRuntimeMcpPolicy("cua-rs"),
       build() {
-        const bin = resolveCuaRsBinary();
-        if (!bin)
-          return null;
-        return { command: bin, args: cuaRsArgs() };
+        return cuaRsMcpPort ? cuaRsHttpMcp(cuaRsMcpPort) : null;
       }
     }
   };
@@ -6021,15 +6022,16 @@ function withCodexMcpServerOverrides(_name, server) {
   };
 }
 function toCodexMcpServers(claudeShape) {
-  const disabledBrowserStdio = () => ({
+  const disabledStdio = () => ({
     command: process.execPath,
     args: ["-e", "process.exit(0)"],
     enabled: false
   });
   const out = {
-    playwright: disabledBrowserStdio(),
-    "browser-rs": disabledBrowserStdio(),
-    patchright: disabledBrowserStdio()
+    playwright: disabledStdio(),
+    "browser-rs": disabledStdio(),
+    patchright: disabledStdio(),
+    "cua-rs": disabledStdio()
   };
   for (const [name, srv] of Object.entries(claudeShape)) {
     if (!srv || typeof srv !== "object")
@@ -6639,7 +6641,8 @@ var init_codex_provider = __esm(async () => {
   init_logger();
   init_mcp_config();
   CODEX_MCP_SERVER_NAME_OVERRIDES = {
-    playwright: "otium_playwright"
+    playwright: "otium_playwright",
+    "cua-rs": "otium_cua_rs"
   };
   CODEX_DIFF_FILE_LIMIT = 512 * 1024;
   CODEX_DIFF_BASELINE_BYTE_LIMIT = 16 * 1024 * 1024;
@@ -23560,11 +23563,13 @@ __export(exports_node_host, {
   setNodeMcpServers: () => setNodeMcpServers,
   setGlobalAiName: () => setGlobalAiName,
   setFileHooks: () => setFileHooks,
+  setCuaRsMcpPort: () => setCuaRsMcpPort,
   setBashrsCompletionSink: () => setBashrsCompletionSink,
   saveVaultEntry: () => saveVaultEntry,
   runtimeBus: () => runtimeBus,
   runShutdown: () => runShutdown,
   runNodeRequestHandlers: () => runNodeRequestHandlers,
+  resolveCuaRsBinary: () => resolveCuaRsBinary,
   reconcilePendingAskUserQuestionGates: () => reconcilePendingAskUserQuestionGates,
   reapOrphanBrowsers: () => reapPlaywrightOrphans,
   readDecisions: () => readDecisions,
@@ -32613,7 +32618,9 @@ __export(exports_src3, {
   NODE_CONTROL_PROTOCOL_VERSION: () => NODE_CONTROL_PROTOCOL_VERSION,
   NODE_CONTROL_BASE_PATH: () => NODE_CONTROL_BASE_PATH
 });
+import { rmSync as rmSync10 } from "fs";
 import { createServer as createServer5 } from "net";
+import { join as join43 } from "path";
 async function availableLoopbackPort() {
   return new Promise((resolve24, reject) => {
     const probe = createServer5();
@@ -32633,6 +32640,13 @@ async function availableLoopbackPort() {
     });
   });
 }
+function readFixedNodePort() {
+  const raw = process.env.NEGOTIUM_NODE_PORT;
+  if (raw === undefined || raw === "")
+    return;
+  const port = Number.parseInt(raw, 10);
+  return Number.isInteger(port) && port >= 1 && port <= 65535 ? port : undefined;
+}
 async function wireNodeMcps(host2, manifest) {
   const entries = [];
   for (const spec of manifest.list()) {
@@ -32662,6 +32676,41 @@ async function wireNodeMcps(host2, manifest) {
     logger.info({ keys: entries.map((e) => e.key) }, "node mcp: manifest servers installed");
   }
 }
+async function wireCuaRsMcp() {
+  setCuaRsMcpPort(undefined);
+  const binary = resolveCuaRsBinary();
+  if (!binary)
+    return;
+  const manifestFile = join43(RUN_DIR, CUA_RS_MCP_MANIFEST_FILE);
+  rmSync10(manifestFile, { force: true });
+  const manifest = new McpManifest({ file: manifestFile });
+  const spec = {
+    key: CUA_RS_MCP_KEY,
+    transport: "http",
+    command: binary,
+    args: ["{port}"],
+    portRange: CUA_RS_MCP_PORT_RANGE,
+    scope: "node",
+    healthIntervalMs: 15000
+  };
+  manifest.add(spec);
+  const host2 = new McpHost({ manifest });
+  const stopSweeper = host2.startSweeper();
+  try {
+    const instance = await host2.ensure(CUA_RS_MCP_KEY);
+    if (!instance.port)
+      throw new Error("cua-rs started without an HTTP port");
+    setCuaRsMcpPort(instance.port);
+    logger.info({ pid: instance.pid, port: instance.port }, "cua-rs MCP server ready");
+    return { host: host2, stopSweeper };
+  } catch (error2) {
+    stopSweeper();
+    await host2.stopAll();
+    setCuaRsMcpPort(undefined);
+    logger.warn({ err: error2 }, "cua-rs MCP server unavailable");
+    return;
+  }
+}
 function startNode(opts = {}) {
   sweepStaleSubagentCards();
   setFileHooks(nodeFileStore.hooks);
@@ -32764,6 +32813,7 @@ function startNode(opts = {}) {
   const mcpHost = new McpHost;
   const manifest = new McpManifest;
   const stopSweeper = mcpHost.startSweeper();
+  const cuaRsMcp = wireCuaRsMcp();
   let resolveCompleted;
   const completed = new Promise((resolve24) => {
     resolveCompleted = resolve24;
@@ -32773,6 +32823,11 @@ function startNode(opts = {}) {
     advertised = opts.advertise ? writeNodeDaemonInfo(port, startedAt) : null;
   } catch (error2) {
     stopSweeper();
+    setCuaRsMcpPort(undefined);
+    cuaRsMcp.then(async (managed) => {
+      managed?.stopSweeper();
+      await managed?.host.stopAll();
+    });
     stopTurnRequests();
     stopInbox();
     stopBashrsCompletions();
@@ -32808,6 +32863,12 @@ function startNode(opts = {}) {
     stopSweeper();
     await mcpHost.stopAll();
   });
+  onShutdown("cua-rs-mcp-host", 50, async () => {
+    setCuaRsMcpPort(undefined);
+    const managed = await cuaRsMcp;
+    managed?.stopSweeper();
+    await managed?.host.stopAll();
+  });
   onShutdown("playwright", 50, () => killAllPlaywright());
   onShutdown("background-bash", 50, () => killAllBgBash());
   onShutdown("node-completed", -100, resolveCompleted);
@@ -32834,7 +32895,7 @@ async function startDefaultNode(opts = {}) {
     const { createCronModule: createCronModule2 } = await init_src4().then(() => exports_src2);
     modules.push(createCronModule2());
   }
-  const port = opts.port === 0 ? await availableLoopbackPort() : opts.port;
+  const port = opts.port === 0 ? readFixedNodePort() ?? await availableLoopbackPort() : opts.port;
   return startNode({ ...opts, port, modules });
 }
 async function runNodeDaemon(opts = {}) {
@@ -32848,6 +32909,7 @@ async function runNodeDaemon(opts = {}) {
   await new Promise((resolve24) => setImmediate(resolve24));
   process.exit(0);
 }
+var CUA_RS_MCP_KEY = "cua-rs", CUA_RS_MCP_MANIFEST_FILE = "cua-rs-mcp-manifest.json", CUA_RS_MCP_PORT_RANGE;
 var init_src5 = __esm(async () => {
   await init_conversation_migration();
   await init_node_host();
@@ -32857,6 +32919,7 @@ var init_src5 = __esm(async () => {
   await init_files();
   await init_control();
   await init_files();
+  CUA_RS_MCP_PORT_RANGE = { base: 9350, max: 9399 };
 });
 
 // ../../packages/adapter-sdk/src/index.ts
@@ -33893,7 +33956,7 @@ var init_context_usage = __esm(async () => {
 import { execFile as execFile3 } from "child_process";
 import { existsSync as existsSync36, readdirSync as readdirSync14, statSync as statSync19 } from "fs";
 import { homedir as homedir11 } from "os";
-import { basename as basename11, dirname as dirname21, join as join43, sep as sep3 } from "path";
+import { basename as basename11, dirname as dirname21, join as join44, sep as sep3 } from "path";
 import { promisify as promisify3 } from "util";
 function indexRecursivePaths(files) {
   const paths = [];
@@ -33994,11 +34057,11 @@ function resolveFragment(frag) {
   else if (frag === "~/")
     path = home;
   else if (frag.startsWith("~/"))
-    path = join43(home, frag.slice(2));
+    path = join44(home, frag.slice(2));
   else if (frag.startsWith("/"))
     path = frag;
   else
-    path = join43(home, frag);
+    path = join44(home, frag);
   if (frag.endsWith("/") || frag === "" || frag === "~") {
     return { dir: path, prefix: "" };
   }
@@ -34027,7 +34090,7 @@ function rankAndSlice(dir, candidates) {
   });
   return candidates.slice(0, MAX_SUGGESTIONS).map(({ relPath, isDir }) => ({
     label: `${relPath}${isDir ? "/" : ""}`,
-    value: toToken(join43(dir, relPath), isDir),
+    value: toToken(join44(dir, relPath), isDir),
     isDir
   }));
 }
@@ -34106,7 +34169,7 @@ function pathSuggestions(lineText, col) {
     let isDir = entry.isDirectory();
     if (!isDir && entry.isSymbolicLink()) {
       try {
-        isDir = statSync19(join43(dir, entry.name)).isDirectory();
+        isDir = statSync19(join44(dir, entry.name)).isDirectory();
       } catch {}
     }
     return {
@@ -34133,10 +34196,10 @@ function fragmentToAbsolutePath(frag) {
   if (frag === "~" || frag === "~/")
     return home;
   if (frag.startsWith("~/"))
-    return join43(home, frag.slice(2));
+    return join44(home, frag.slice(2));
   if (frag.startsWith("/"))
     return frag;
-  return join43(home, frag);
+  return join44(home, frag);
 }
 function fragmentResolves(frag) {
   try {
@@ -40642,7 +40705,7 @@ var init_commands2 = __esm(async () => {
 // ../../adapters/telegram/src/mapping-store.ts
 import { Database as Database2 } from "bun:sqlite";
 import { mkdirSync as mkdirSync32 } from "fs";
-import { dirname as dirname22, join as join44 } from "path";
+import { dirname as dirname22, join as join45 } from "path";
 function outboxRowToEntry(row) {
   return {
     id: row.id,
@@ -40708,7 +40771,7 @@ function migrateOutboxSchema(db4) {
   db4.run("CREATE INDEX IF NOT EXISTS idx_telegram_outbox_runtime_message ON outbox(runtime_message_id)");
 }
 function openMappingStore(path) {
-  const dbPath = path ?? join44(DATA_DIR, "adapter-telegram.db");
+  const dbPath = path ?? join45(DATA_DIR, "adapter-telegram.db");
   if (dbPath !== ":memory:")
     mkdirSync32(dirname22(dbPath), { recursive: true });
   const db4 = new Database2(dbPath);
@@ -42608,9 +42671,9 @@ function firstCell() {
     return cell;
   return null;
 }
-function attachOtiumCentralCell(join45) {
-  cells.set(join45.cellId, {
-    join: join45,
+function attachOtiumCentralCell(join46) {
+  cells.set(join46.cellId, {
+    join: join46,
     nodesCache: null,
     verifyCache: new Map,
     tokenCache: new Map
@@ -42622,10 +42685,10 @@ function detachOtiumCentralCell(cellId) {
 function attachedOtiumCells() {
   return [...cells.values()].map((cell) => cell.join);
 }
-function configureOtiumCentral(join45) {
+function configureOtiumCentral(join46) {
   cells.clear();
-  if (join45)
-    attachOtiumCentralCell(join45);
+  if (join46)
+    attachOtiumCentralCell(join46);
 }
 function isOtiumCentralConfigured() {
   return cells.size > 0;
@@ -43047,7 +43110,7 @@ import {
   openSync as openSync5,
   readFileSync as readFileSync29,
   renameSync as renameSync17,
-  rmSync as rmSync10,
+  rmSync as rmSync11,
   statSync as statSync20,
   unlinkSync as unlinkSync23,
   writeFileSync as writeFileSync25
@@ -43142,7 +43205,7 @@ function withJoinCredentialLock(operation) {
       break;
     } catch (error2) {
       if (created) {
-        rmSync10(lockPath, { recursive: true, force: true });
+        rmSync11(lockPath, { recursive: true, force: true });
         throw error2;
       }
       if (error2.code !== "EEXIST")
@@ -43168,7 +43231,7 @@ function withJoinCredentialLock(operation) {
       const stalePath = `${lockPath}.stale.${process.pid}.${randomUUID28()}`;
       try {
         renameSync17(lockPath, stalePath);
-        rmSync10(stalePath, { recursive: true, force: true });
+        rmSync11(stalePath, { recursive: true, force: true });
       } catch (staleError) {
         if (staleError.code !== "ENOENT")
           throw staleError;
@@ -43181,7 +43244,7 @@ function withJoinCredentialLock(operation) {
     try {
       const current3 = JSON.parse(readFileSync29(ownerPath, "utf8"));
       if (current3.pid === owner.pid && current3.token === owner.token) {
-        rmSync10(lockPath, { recursive: true, force: true });
+        rmSync11(lockPath, { recursive: true, force: true });
       }
     } catch {}
   }
@@ -43189,17 +43252,17 @@ function withJoinCredentialLock(operation) {
 function joinsEqual(left, right) {
   return left.central === right.central && left.relay === right.relay && left.cellId === right.cellId && left.secret === right.secret;
 }
-function normalizedJoin(join45) {
+function normalizedJoin(join46) {
   return normalizeJoin({
-    v: join45.v,
-    central: join45.central,
-    relay: join45.relay,
-    cellId: join45.cellId,
-    secret: join45.secret
+    v: join46.v,
+    central: join46.central,
+    relay: join46.relay,
+    cellId: join46.cellId,
+    secret: join46.secret
   });
 }
-function joinCredentialDigest(join45) {
-  return createHash11("sha256").update(JSON.stringify(normalizedJoin(join45))).digest("base64url");
+function joinCredentialDigest(join46) {
+  return createHash11("sha256").update(JSON.stringify(normalizedJoin(join46))).digest("base64url");
 }
 function readPersistedJoins(path = joinFilePath()) {
   if (!existsSync39(path))
@@ -43218,9 +43281,9 @@ function readPersistedJoins(path = joinFilePath()) {
     return normalizeJoin(entry);
   });
 }
-function isJoinPersisted(join45) {
+function isJoinPersisted(join46) {
   try {
-    const normalized = normalizedJoin(join45);
+    const normalized = normalizedJoin(join46);
     return readPersistedJoins().some((persisted) => joinsEqual(persisted, normalized));
   } catch {
     return false;
@@ -43264,10 +43327,10 @@ function writeJoins(joins, allowOverwrite) {
   }
   return path;
 }
-function saveJoinWhileLocked(join45, options = {}) {
+function saveJoinWhileLocked(join46, options = {}) {
   const path = joinFilePath();
   const directory = dirname23(path);
-  const normalized = normalizedJoin(join45);
+  const normalized = normalizedJoin(join46);
   mkdirSync33(directory, { recursive: true });
   if (!existsSync39(path))
     return writeJoins([normalized], false);
@@ -43297,8 +43360,8 @@ function saveJoinWhileLocked(join45, options = {}) {
   const next = conflict ? existing.map((persisted) => persisted.cellId === normalized.cellId ? normalized : persisted) : [...existing, normalized];
   return writeJoins(next, true);
 }
-function saveJoin(join45, options = {}) {
-  return withJoinCredentialLock(() => saveJoinWhileLocked(join45, options));
+function saveJoin(join46, options = {}) {
+  return withJoinCredentialLock(() => saveJoinWhileLocked(join46, options));
 }
 function removeJoin(cellId) {
   return withJoinCredentialLock(() => {
@@ -43311,7 +43374,7 @@ function removeJoin(cellId) {
     if (cellId) {
       let remaining;
       try {
-        remaining = readPersistedJoins(path).filter((join45) => join45.cellId !== cellId);
+        remaining = readPersistedJoins(path).filter((join46) => join46.cellId !== cellId);
       } catch {
         return false;
       }
@@ -43363,8 +43426,8 @@ var init_join = __esm(async () => {
 
 // ../../adapters/otium/src/peer-files.ts
 import { randomUUID as randomUUID29 } from "crypto";
-import { copyFileSync as copyFileSync5, mkdirSync as mkdirSync34, rmSync as rmSync11, statSync as statSync21 } from "fs";
-import { basename as basename13, extname as extname6, join as join45 } from "path";
+import { copyFileSync as copyFileSync5, mkdirSync as mkdirSync34, rmSync as rmSync12, statSync as statSync21 } from "fs";
+import { basename as basename13, extname as extname6, join as join46 } from "path";
 function fileType(mimeType) {
   if (mimeType.startsWith("image/"))
     return "image";
@@ -43430,7 +43493,7 @@ function recordFile(args) {
 function insertLocalFile(args) {
   const id = randomUUID29();
   mkdirSync34(PEER_FILES_DIR, { recursive: true });
-  const path = join45(PEER_FILES_DIR, `${id}-${safeFilename(args.filename)}`);
+  const path = join46(PEER_FILES_DIR, `${id}-${safeFilename(args.filename)}`);
   copyFileSync5(args.sourcePath, path);
   return recordFile({ id, path, sizeBytes: statSync21(path).size, ...args });
 }
@@ -43438,7 +43501,7 @@ function deletePeerFilesForTopic(topicId) {
   const rows = db.query("SELECT path FROM otium_peer_files WHERE topic_id = ?").all(topicId);
   db.run("DELETE FROM otium_peer_files WHERE topic_id = ?", [topicId]);
   for (const row of rows)
-    rmSync11(row.path, { force: true });
+    rmSync12(row.path, { force: true });
 }
 function installPeerFileHooks() {
   const previous = fileHooks();
@@ -43476,7 +43539,7 @@ function installPeerFileHooks() {
 var PEER_FILES_DIR;
 var init_peer_files = __esm(async () => {
   await init_src();
-  PEER_FILES_DIR = join45(DATA_DIR, "otium-peer-files");
+  PEER_FILES_DIR = join46(DATA_DIR, "otium-peer-files");
   db.exec(`
   CREATE TABLE IF NOT EXISTS otium_peer_files (
     id TEXT PRIMARY KEY,
@@ -43888,19 +43951,19 @@ function readCache() {
     return {};
   }
 }
-function cachedSurfaceScope(join46) {
-  const record = readCache()[join46.cellId];
-  if (!record || record.central !== join46.central || !record.workspaceId)
+function cachedSurfaceScope(join47) {
+  const record = readCache()[join47.cellId];
+  if (!record || record.central !== join47.central || !record.workspaceId)
     return null;
   return surfaceScopeFor(record.central, record.workspaceId);
 }
-function cacheSurfaceScope(join46, workspaceId) {
-  const scope = surfaceScopeFor(join46.central, workspaceId);
+function cacheSurfaceScope(join47, workspaceId) {
+  const scope = surfaceScopeFor(join47.central, workspaceId);
   const path = scopeCachePath();
   try {
     mkdirSync35(dirname24(path), { recursive: true });
     const cache = readCache();
-    cache[join46.cellId] = { central: join46.central, workspaceId, scope };
+    cache[join47.cellId] = { central: join47.central, workspaceId, scope };
     writeFileSync26(path, `${JSON.stringify(cache, null, 2)}
 `, { mode: 384 });
   } catch (err2) {
@@ -43908,23 +43971,23 @@ function cacheSurfaceScope(join46, workspaceId) {
   }
   return scope;
 }
-async function resolveSurfaceScope(join46) {
-  const cached = cachedSurfaceScope(join46);
+async function resolveSurfaceScope(join47) {
+  const cached = cachedSurfaceScope(join47);
   if (cached)
     return cached;
   try {
-    const workspaceId = await peerWorkspaceIdForCell(join46.cellId);
+    const workspaceId = await peerWorkspaceIdForCell(join47.cellId);
     if (!workspaceId)
       return null;
-    return cacheSurfaceScope(join46, workspaceId);
+    return cacheSurfaceScope(join47, workspaceId);
   } catch (err2) {
     logger.warn({ err: err2 }, "otium: workspace scope unresolved (will retry on the next contact)");
     return null;
   }
 }
 function surfaceScopeForCell(cellId) {
-  const join46 = attachedOtiumCells().find((candidate) => candidate.cellId === cellId);
-  return join46 ? cachedSurfaceScope(join46) : null;
+  const join47 = attachedOtiumCells().find((candidate) => candidate.cellId === cellId);
+  return join47 ? cachedSurfaceScope(join47) : null;
 }
 function unscopedRoomsAddressable() {
   return attachedOtiumCells().length < 2;
@@ -45057,13 +45120,13 @@ function replacePendingEnrollment(pending2) {
     throw error2;
   }
 }
-function recordClaimedCredential(pending2, join46) {
+function recordClaimedCredential(pending2, join47) {
   withJoinCredentialLock(() => {
     const current3 = JSON.parse(readFileSync31(pendingEnrollmentPath(), "utf8"));
     if (current3.central !== pending2.central || current3.token !== pending2.token || current3.idempotencyKey !== pending2.idempotencyKey || current3.publicKey !== pending2.publicKey) {
       throw new Error("pending Otium enrollment changed while its claim was in flight");
     }
-    const claimed = { digest: joinCredentialDigest(join46), cellId: join46.cellId };
+    const claimed = { digest: joinCredentialDigest(join47), cellId: join47.cellId };
     if (current3.claimed && (current3.claimed.digest !== claimed.digest || current3.claimed.cellId !== claimed.cellId)) {
       throw new Error("central returned different credentials for an idempotent enrollment claim");
     }
@@ -45121,30 +45184,30 @@ async function claimEnrollment(invite, nodeName) {
   const secret = openCredential(credential, pending2.privateKey);
   if (!secret.startsWith("rcs_"))
     throw new Error("central returned an invalid runtime credential");
-  const join46 = {
+  const join47 = {
     v: 2,
     central: invite.central,
     relay: String(response.relayUrl),
     cellId: String(response.cell?.id),
     secret
   };
-  if (!join46.relay || !join46.cellId || join46.cellId === "undefined") {
+  if (!join47.relay || !join47.cellId || join47.cellId === "undefined") {
     throw new Error("central returned an incomplete enrollment response");
   }
-  assertSecureRelayUrl(join46.relay);
-  recordClaimedCredential(pending2, join46);
-  return join46;
+  assertSecureRelayUrl(join47.relay);
+  recordClaimedCredential(pending2, join47);
+  return join47;
 }
-function commitEnrollment(join46, options = {}) {
+function commitEnrollment(join47, options = {}) {
   return withJoinCredentialLock(() => {
     const pendingPath = pendingEnrollmentPath();
     const pending2 = existsSync40(pendingPath) ? JSON.parse(readFileSync31(pendingPath, "utf8")) : null;
-    const digest = joinCredentialDigest(join46);
-    if (pending2 && (!pending2.claimed || pending2.claimed.digest !== digest || pending2.claimed.cellId !== join46.cellId)) {
+    const digest = joinCredentialDigest(join47);
+    if (pending2 && (!pending2.claimed || pending2.claimed.digest !== digest || pending2.claimed.cellId !== join47.cellId)) {
       throw new Error(`pending Otium enrollment at ${pendingPath} does not match these credentials`);
     }
-    const path = saveJoinWhileLocked(join46, options);
-    if (!isJoinPersisted(join46)) {
+    const path = saveJoinWhileLocked(join47, options);
+    if (!isJoinPersisted(join47)) {
       throw new Error("Otium join credentials were not durably persisted");
     }
     if (!pending2)
@@ -45738,24 +45801,24 @@ function refreshDefaultSurfaceScope() {
   setSurfaceScopeRequired(scopes.length > 1);
 }
 function startOtiumNodeRuntime(options) {
-  const { join: join46 } = options;
-  attachOtiumCentralCell(join46);
+  const { join: join47 } = options;
+  attachOtiumCentralCell(join47);
   const releaseGlobals = acquireGlobalOtiumServices();
   let stopped = false;
-  logger.info({ central: join46.central, cellId: join46.cellId }, "otium: worker mode enabled");
-  mountedScopes.set(join46.cellId, cachedSurfaceScope(join46));
+  logger.info({ central: join47.central, cellId: join47.cellId }, "otium: worker mode enabled");
+  mountedScopes.set(join47.cellId, cachedSurfaceScope(join47));
   refreshDefaultSurfaceScope();
-  selfPeerNodeForCell(join46.cellId).then((self) => {
+  selfPeerNodeForCell(join47.cellId).then((self) => {
     if (self) {
       logger.info({ nodeName: self.nodeName, baseUrl: self.baseUrl }, "otium: attached to workspace");
     }
   }).catch((err2) => {
     logger.warn({ err: err2 }, "otium: self check against central failed (will retry per request)");
   });
-  resolveSurfaceScope(join46).then((scope) => {
+  resolveSurfaceScope(join47).then((scope) => {
     if (!scope || stopped)
       return;
-    mountedScopes.set(join46.cellId, scope);
+    mountedScopes.set(join47.cellId, scope);
     refreshDefaultSurfaceScope();
     if (mountedScopes.size === 1)
       stampUnscopedOtiumTopics(scope);
@@ -45764,14 +45827,14 @@ function startOtiumNodeRuntime(options) {
   });
   return {
     name: "otium",
-    join: join46,
+    join: join47,
     stop: () => {
       if (stopped)
         return;
       stopped = true;
-      mountedScopes.delete(join46.cellId);
+      mountedScopes.delete(join47.cellId);
       refreshDefaultSurfaceScope();
-      detachOtiumCentralCell(join46.cellId);
+      detachOtiumCentralCell(join47.cellId);
       releaseGlobals();
     }
   };
@@ -45866,14 +45929,14 @@ __export(exports_node_runtime, {
 function sameCredentials(left, right) {
   return left.central === right.central && left.relay === right.relay && left.secret === right.secret;
 }
-function attachOtiumWorkspace(join46) {
-  const current3 = mounted.get(join46.cellId);
+function attachOtiumWorkspace(join47) {
+  const current3 = mounted.get(join47.cellId);
   if (current3) {
-    if (sameCredentials(current3.join, join46))
+    if (sameCredentials(current3.join, join47))
       return false;
-    detachOtiumWorkspace(join46.cellId);
+    detachOtiumWorkspace(join47.cellId);
   }
-  mounted.set(join46.cellId, startOtiumNodeRuntime({ join: join46 }));
+  mounted.set(join47.cellId, startOtiumNodeRuntime({ join: join47 }));
   return true;
 }
 function detachOtiumWorkspace(cellId) {
@@ -45888,7 +45951,7 @@ function mountedOtiumWorkspaces() {
   return [...mounted.values()].map((runtime2) => runtime2.join);
 }
 function reconcileOtiumWorkspaces(joins = loadJoins()) {
-  const wanted = new Map(joins.map((join46) => [join46.cellId, join46]));
+  const wanted = new Map(joins.map((join47) => [join47.cellId, join47]));
   const detached = [];
   for (const cellId of [...mounted.keys()]) {
     if (wanted.has(cellId))
@@ -45897,8 +45960,8 @@ function reconcileOtiumWorkspaces(joins = loadJoins()) {
     detached.push(cellId);
   }
   const attached = [];
-  for (const [cellId, join46] of wanted) {
-    if (attachOtiumWorkspace(join46))
+  for (const [cellId, join47] of wanted) {
+    if (attachOtiumWorkspace(join47))
       attached.push(cellId);
   }
   if (attached.length > 0 || detached.length > 0) {
@@ -45921,9 +45984,9 @@ async function handleOtiumAdapterControlRequest(req) {
     if (req.method === "GET") {
       return Response.json({
         ok: true,
-        workspaces: mountedOtiumWorkspaces().map((join46) => ({
-          cellId: join46.cellId,
-          central: join46.central
+        workspaces: mountedOtiumWorkspaces().map((join47) => ({
+          cellId: join47.cellId,
+          central: join47.central
         }))
       });
     }
@@ -45944,8 +46007,8 @@ function mountConfiguredOtiumNodeRuntime() {
   const joins = loadJoins();
   if (joins.length === 0)
     return null;
-  for (const join46 of joins)
-    attachOtiumWorkspace(join46);
+  for (const join47 of joins)
+    attachOtiumWorkspace(join47);
   registerNodeRequestHandler("otium-adapter-control", handleOtiumAdapterControlRequest);
   let stopped = false;
   return {
@@ -46057,11 +46120,11 @@ async function joinCommand(args) {
     process.exitCode = 1;
     return;
   }
-  let join46;
+  let join47;
   let productionEnrollment = false;
   if (args.includes("--legacy")) {
     try {
-      join46 = parseInviteCode(code);
+      join47 = parseInviteCode(code);
     } catch (err2) {
       console.error(`invalid legacy invite code: ${err2 instanceof Error ? err2.message : err2}`);
       process.exitCode = 1;
@@ -46087,7 +46150,7 @@ async function joinCommand(args) {
           return;
         }
       }
-      join46 = await claimEnrollment(invite, nodeName);
+      join47 = await claimEnrollment(invite, nodeName);
       productionEnrollment = true;
     } catch (err2) {
       console.error(`enrollment failed: ${err2 instanceof Error ? err2.message : err2}`);
@@ -46098,16 +46161,16 @@ async function joinCommand(args) {
   let path;
   try {
     const saveOptions = { replaceExisting: args.includes("--replace") };
-    path = productionEnrollment ? commitEnrollment(join46, saveOptions) : saveJoin(join46, saveOptions);
+    path = productionEnrollment ? commitEnrollment(join47, saveOptions) : saveJoin(join47, saveOptions);
   } catch (err2) {
     console.error(`could not save join credentials: ${err2 instanceof Error ? err2.message : err2}`);
     process.exitCode = 1;
     return;
   }
   console.log(`otium join credentials saved to ${path}`);
-  console.log(`  central: ${join46.central}`);
-  console.log(`  cellId:  ${join46.cellId}`);
-  configureOtiumCentral(join46);
+  console.log(`  central: ${join47.central}`);
+  console.log(`  cellId:  ${join47.cellId}`);
+  configureOtiumCentral(join47);
   try {
     const self = await selfPeerNode();
     if (self) {
@@ -46149,19 +46212,19 @@ async function statusCommand() {
       return;
     }
     configureOtiumCentral(joins[0] ?? null);
-    for (const join46 of joins.slice(1))
-      attachOtiumCentralCell(join46);
-    for (const [index, join46] of joins.entries()) {
+    for (const join47 of joins.slice(1))
+      attachOtiumCentralCell(join47);
+    for (const [index, join47] of joins.entries()) {
       if (index > 0)
         console.log("");
-      console.log(`cellId:  ${join46.cellId}`);
-      console.log(`central: ${join46.central}`);
-      if (join46.relay)
-        console.log(`relay:   ${join46.relay}`);
+      console.log(`cellId:  ${join47.cellId}`);
+      console.log(`central: ${join47.central}`);
+      if (join47.relay)
+        console.log(`relay:   ${join47.relay}`);
       try {
-        const self = await selfPeerNodeForCell(join46.cellId);
+        const self = await selfPeerNodeForCell(join47.cellId);
         if (self) {
-          console.log(`node:    ${self.nodeName ?? join46.cellId}${self.isPrimary ? " (primary)" : ""}`);
+          console.log(`node:    ${self.nodeName ?? join47.cellId}${self.isPrimary ? " (primary)" : ""}`);
           console.log(`baseUrl: ${self.baseUrl}`);
         } else {
           console.warn("  warning: central answered but this cell has no visible assignment yet \u2014 check the workspace assignment");
@@ -46197,13 +46260,13 @@ function resolveTunnelTargets(joins, relayOverride) {
   const targets = [];
   const skippedNoRelay = [];
   const envRelay = process.env.OTIUM_RELAY_URL?.trim();
-  for (const join46 of joins) {
-    const relayUrl = relayOverride?.trim() || join46.relay || envRelay;
+  for (const join47 of joins) {
+    const relayUrl = relayOverride?.trim() || join47.relay || envRelay;
     if (!relayUrl) {
-      skippedNoRelay.push(join46.cellId);
+      skippedNoRelay.push(join47.cellId);
       continue;
     }
-    targets.push({ cellId: join46.cellId, relayUrl, secret: join46.secret });
+    targets.push({ cellId: join47.cellId, relayUrl, secret: join47.secret });
   }
   return { targets, skippedNoRelay };
 }
@@ -46440,9 +46503,9 @@ async function runOtiumCli(args = process.argv.slice(2)) {
       if (joins.length === 0)
         throw new Error("not joined to an Otium workspace");
       if (!targetCellId && joins.length > 1) {
-        throw new Error(`this node is joined to ${joins.length} workspaces; name one to leave: ${joins.map((join46) => join46.cellId).join(", ")}`);
+        throw new Error(`this node is joined to ${joins.length} workspaces; name one to leave: ${joins.map((join47) => join47.cellId).join(", ")}`);
       }
-      if (targetCellId && !joins.some((join46) => join46.cellId === targetCellId)) {
+      if (targetCellId && !joins.some((join47) => join47.cellId === targetCellId)) {
         throw new Error(`not joined as ${targetCellId}`);
       }
       removeJoin2(targetCellId);
@@ -47229,4 +47292,4 @@ switch (command) {
   }
 }
 
-//# debugId=805E32726887103964756E2164756E21
+//# debugId=FB1DC2846CA4438764756E2164756E21