open-agents-ai 0.184.37 → 0.184.38

package/dist/index.js

@@ -10679,8 +10679,8 @@ function deleteCustomToolDefinition(name, scope, repoRoot) {
   const dir = scope === "project" && repoRoot ? projectToolsDir(repoRoot) : globalToolsDir();
   const filePath = join16(dir, `${name}.json`);
   if (existsSync13(filePath)) {
-    const { unlinkSync: unlinkSync12 } = __require("node:fs");
-    unlinkSync12(filePath);
+    const { unlinkSync: unlinkSync13 } = __require("node:fs");
+    unlinkSync13(filePath);
     return true;
   }
   return false;
@@ -11855,8 +11855,8 @@ async function loadTranscribeCli() {
   const nvmBase = join19(homedir7(), ".nvm", "versions", "node");
   if (existsSync16(nvmBase)) {
     try {
-      const { readdirSync: readdirSync22 } = await import("node:fs");
-      for (const ver of readdirSync22(nvmBase)) {
+      const { readdirSync: readdirSync23 } = await import("node:fs");
+      for (const ver of readdirSync23(nvmBase)) {
         const tcPath = join19(nvmBase, ver, "lib", "node_modules", "transcribe-cli");
         if (existsSync16(join19(tcPath, "dist", "index.js"))) {
           const { createRequire: createRequire5 } = await import("node:module");
@@ -12909,13 +12909,13 @@ Justification: ${justification || "(none provided)"}`,
         }
         const snapshot = JSON.stringify(this.selfState, null, 2);
         try {
-          const { createHash: createHash6 } = await import("node:crypto");
+          const { createHash: createHash7 } = await import("node:crypto");
           const snapshotDir = join21(this.cwd, ".oa", "identity", "snapshots");
           await mkdir5(snapshotDir, { recursive: true });
           const version = this.selfState.version;
           const snapshotPath = join21(snapshotDir, `v${version}.json`);
           await writeFile9(snapshotPath, snapshot, "utf8");
-          const hash = createHash6("sha256").update(snapshot).digest("hex");
+          const hash = createHash7("sha256").update(snapshot).digest("hex");
           await writeFile9(join21(this.cwd, ".oa", "identity", "latest-hash.txt"), hash, "utf8");
           let ipfsCid = "";
           try {
@@ -13048,8 +13048,8 @@ New: ${newNarrative.slice(0, 200)}...`,
       }
       // ── Helpers ──────────────────────────────────────────────────────────────
       createDefaultState() {
-        const { createHash: createHash6 } = __require("node:crypto");
-        const machineId = createHash6("sha256").update(this.cwd).digest("hex").slice(0, 12);
+        const { createHash: createHash7 } = __require("node:crypto");
+        const machineId = createHash7("sha256").update(this.cwd).digest("hex").slice(0, 12);
         return {
           self_id: `oa-${machineId}`,
           version: 1,
@@ -13598,9 +13598,9 @@ print("${sentinel}")
         if (!this.proc || this.proc.killed) {
           return { success: false, path: "" };
         }
-        const { mkdirSync: mkdirSync28, writeFileSync: writeFileSync27 } = await import("node:fs");
+        const { mkdirSync: mkdirSync29, writeFileSync: writeFileSync28 } = await import("node:fs");
         const sessionDir = join22(this.cwd, ".oa", "rlm");
-        mkdirSync28(sessionDir, { recursive: true });
+        mkdirSync29(sessionDir, { recursive: true });
         const sessionPath = join22(sessionDir, "session.json");
         try {
           const inspectCode = `
@@ -13624,7 +13624,7 @@ print("__SESSION__" + json.dumps(_session) + "__SESSION__")
               trajectoryCount: this.trajectory.length,
               subCallCount: this.subCallCount
             };
-            writeFileSync27(sessionPath, JSON.stringify(sessionData, null, 2), "utf8");
+            writeFileSync28(sessionPath, JSON.stringify(sessionData, null, 2), "utf8");
             return { success: true, path: sessionPath };
           }
         } catch {
@@ -13636,11 +13636,11 @@ print("__SESSION__" + json.dumps(_session) + "__SESSION__")
        *  what was previously computed. */
       async loadSessionInfo() {
         try {
-          const { readFileSync: readFileSync42, existsSync: existsSync54 } = await import("node:fs");
+          const { readFileSync: readFileSync43, existsSync: existsSync55 } = await import("node:fs");
           const sessionPath = join22(this.cwd, ".oa", "rlm", "session.json");
-          if (!existsSync54(sessionPath))
+          if (!existsSync55(sessionPath))
             return null;
-          return JSON.parse(readFileSync42(sessionPath, "utf8"));
+          return JSON.parse(readFileSync43(sessionPath, "utf8"));
         } catch {
           return null;
         }
@@ -13817,10 +13817,10 @@ var init_memory_metabolism = __esm({
         const trajDir = join23(this.cwd, ".oa", "rlm-trajectories");
         let lessons = [];
         try {
-          const { readdirSync: readdirSync22, readFileSync: readFileSync42 } = await import("node:fs");
-          const files = readdirSync22(trajDir).filter((f) => f.endsWith(".jsonl")).sort().reverse().slice(0, 3);
+          const { readdirSync: readdirSync23, readFileSync: readFileSync43 } = await import("node:fs");
+          const files = readdirSync23(trajDir).filter((f) => f.endsWith(".jsonl")).sort().reverse().slice(0, 3);
           for (const file of files) {
-            const lines = readFileSync42(join23(trajDir, file), "utf8").split("\n").filter((l) => l.trim());
+            const lines = readFileSync43(join23(trajDir, file), "utf8").split("\n").filter((l) => l.trim());
             for (const line of lines) {
               try {
                 const entry = JSON.parse(line);
@@ -14204,14 +14204,14 @@ ${issues.map((i) => `  - ${i}`).join("\n")}` : "  No issues found."),
        * Optionally filter by task type for phase-aware context (FSM paper insight).
        */
       getTopMemoriesSync(k = 5, taskType) {
-        const { readFileSync: readFileSync42, existsSync: existsSync54 } = __require("node:fs");
+        const { readFileSync: readFileSync43, existsSync: existsSync55 } = __require("node:fs");
         const metaDir = join23(this.cwd, ".oa", "memory", "metabolism");
         const storeFile = join23(metaDir, "store.json");
-        if (!existsSync54(storeFile))
+        if (!existsSync55(storeFile))
           return "";
         let store = [];
         try {
-          store = JSON.parse(readFileSync42(storeFile, "utf8"));
+          store = JSON.parse(readFileSync43(storeFile, "utf8"));
         } catch {
           return "";
         }
@@ -14233,14 +14233,14 @@ ${issues.map((i) => `  - ${i}`).join("\n")}` : "  No issues found."),
       /** Update memory scores based on task outcome. Called after task completion.
        *  Memories used in successful tasks get boosted. Memories present during failures get decayed. */
       updateFromOutcomeSync(surfacedMemoryText, succeeded) {
-        const { readFileSync: readFileSync42, writeFileSync: writeFileSync27, existsSync: existsSync54, mkdirSync: mkdirSync28 } = __require("node:fs");
+        const { readFileSync: readFileSync43, writeFileSync: writeFileSync28, existsSync: existsSync55, mkdirSync: mkdirSync29 } = __require("node:fs");
         const metaDir = join23(this.cwd, ".oa", "memory", "metabolism");
         const storeFile = join23(metaDir, "store.json");
-        if (!existsSync54(storeFile))
+        if (!existsSync55(storeFile))
           return;
         let store = [];
         try {
-          store = JSON.parse(readFileSync42(storeFile, "utf8"));
+          store = JSON.parse(readFileSync43(storeFile, "utf8"));
         } catch {
           return;
         }
@@ -14264,8 +14264,8 @@ ${issues.map((i) => `  - ${i}`).join("\n")}` : "  No issues found."),
           updated = true;
         }
         if (updated) {
-          mkdirSync28(metaDir, { recursive: true });
-          writeFileSync27(storeFile, JSON.stringify(store, null, 2));
+          mkdirSync29(metaDir, { recursive: true });
+          writeFileSync28(storeFile, JSON.stringify(store, null, 2));
         }
       }
       // ── Storage ──────────────────────────────────────────────────────────
@@ -14687,13 +14687,13 @@ Recommendation: Strategy ${scored[0].index + 1} scores highest.`;
       // Per EvoSkill (arXiv:2603.02766): retrieve relevant strategies from archive.
       /** Retrieve top-K strategies for context injection. Returns "" if none. */
       getRelevantStrategiesSync(k = 3, taskType) {
-        const { readFileSync: readFileSync42, existsSync: existsSync54 } = __require("node:fs");
+        const { readFileSync: readFileSync43, existsSync: existsSync55 } = __require("node:fs");
         const archiveFile = join25(this.cwd, ".oa", "arche", "variants.json");
-        if (!existsSync54(archiveFile))
+        if (!existsSync55(archiveFile))
           return "";
         let variants = [];
         try {
-          variants = JSON.parse(readFileSync42(archiveFile, "utf8"));
+          variants = JSON.parse(readFileSync43(archiveFile, "utf8"));
         } catch {
           return "";
         }
@@ -14711,13 +14711,13 @@ Recommendation: Strategy ${scored[0].index + 1} scores highest.`;
       }
       /** Archive a strategy variant synchronously (for task completion path) */
       archiveVariantSync(strategy, outcome, tags = []) {
-        const { readFileSync: readFileSync42, writeFileSync: writeFileSync27, existsSync: existsSync54, mkdirSync: mkdirSync28 } = __require("node:fs");
+        const { readFileSync: readFileSync43, writeFileSync: writeFileSync28, existsSync: existsSync55, mkdirSync: mkdirSync29 } = __require("node:fs");
         const dir = join25(this.cwd, ".oa", "arche");
         const archiveFile = join25(dir, "variants.json");
         let variants = [];
         try {
-          if (existsSync54(archiveFile))
-            variants = JSON.parse(readFileSync42(archiveFile, "utf8"));
+          if (existsSync55(archiveFile))
+            variants = JSON.parse(readFileSync43(archiveFile, "utf8"));
         } catch {
         }
         variants.push({
@@ -14732,8 +14732,8 @@ Recommendation: Strategy ${scored[0].index + 1} scores highest.`;
         });
         if (variants.length > 50)
           variants = variants.slice(-50);
-        mkdirSync28(dir, { recursive: true });
-        writeFileSync27(archiveFile, JSON.stringify(variants, null, 2));
+        mkdirSync29(dir, { recursive: true });
+        writeFileSync28(archiveFile, JSON.stringify(variants, null, 2));
       }
       async saveArchive(variants) {
         const dir = join25(this.cwd, ".oa", "arche");
@@ -27091,10 +27091,10 @@ ${marker}` : marker);
         if (!this._workingDirectory)
           return;
         try {
-          const { mkdirSync: mkdirSync28, writeFileSync: writeFileSync27 } = __require("node:fs");
-          const { join: join74 } = __require("node:path");
-          const sessionDir = join74(this._workingDirectory, ".oa", "session", this._sessionId);
-          mkdirSync28(sessionDir, { recursive: true });
+          const { mkdirSync: mkdirSync29, writeFileSync: writeFileSync28 } = __require("node:fs");
+          const { join: join75 } = __require("node:path");
+          const sessionDir = join75(this._workingDirectory, ".oa", "session", this._sessionId);
+          mkdirSync29(sessionDir, { recursive: true });
           const checkpoint = {
             timestamp: (/* @__PURE__ */ new Date()).toISOString(),
             sessionId: this._sessionId,
@@ -27106,7 +27106,7 @@ ${marker}` : marker);
             memexEntryCount: this._memexArchive.size,
             fileRegistrySize: this._fileRegistry.size
           };
-          writeFileSync27(join74(sessionDir, "checkpoint.json"), JSON.stringify(checkpoint, null, 2));
+          writeFileSync28(join75(sessionDir, "checkpoint.json"), JSON.stringify(checkpoint, null, 2));
         } catch {
         }
       }
@@ -30061,8 +30061,8 @@ var init_listen = __esm({
         const nvmBase = join48(homedir11(), ".nvm", "versions", "node");
         if (existsSync32(nvmBase)) {
           try {
-            const { readdirSync: readdirSync22 } = await import("node:fs");
-            for (const ver of readdirSync22(nvmBase)) {
+            const { readdirSync: readdirSync23 } = await import("node:fs");
+            for (const ver of readdirSync23(nvmBase)) {
               const tcPath = join48(nvmBase, ver, "lib", "node_modules", "transcribe-cli");
               if (existsSync32(join48(tcPath, "dist", "index.js"))) {
                 const { createRequire: createRequire5 } = await import("node:module");
@@ -32600,7 +32600,7 @@ var require_websocket = __commonJS({
     var http2 = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes17, createHash: createHash6 } = __require("crypto");
+    var { randomBytes: randomBytes18, createHash: createHash7 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL3 } = __require("url");
     var PerMessageDeflate = require_permessage_deflate();
@@ -33130,7 +33130,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes17(16).toString("base64");
+      const key = randomBytes18(16).toString("base64");
       const request2 = isSecure ? https.request : http2.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -33260,7 +33260,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash6("sha1").update(key + GUID).digest("base64");
+        const digest = createHash7("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -33627,7 +33627,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter7 = __require("events");
     var http2 = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash6 } = __require("crypto");
+    var { createHash: createHash7 } = __require("crypto");
     var extension = require_extension();
     var PerMessageDeflate = require_permessage_deflate();
     var subprotocol = require_subprotocol();
@@ -33928,7 +33928,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash6("sha1").update(key + GUID).digest("base64");
+        const digest = createHash7("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -38470,26 +38470,26 @@ async function fetchOpenAIModels(baseUrl, apiKey) {
 async function fetchPeerModels(peerId, authKey) {
   try {
     const { NexusTool: NexusTool2 } = await Promise.resolve().then(() => (init_dist2(), dist_exports));
-    const { existsSync: existsSync54, readFileSync: readFileSync42 } = await import("node:fs");
-    const { join: join74 } = await import("node:path");
+    const { existsSync: existsSync55, readFileSync: readFileSync43 } = await import("node:fs");
+    const { join: join75 } = await import("node:path");
     const cwd4 = process.cwd();
     const nexusTool = new NexusTool2(cwd4);
     const nexusDir = nexusTool.getNexusDir();
     let isLocalPeer = false;
     try {
-      const statusPath = join74(nexusDir, "status.json");
-      if (existsSync54(statusPath)) {
-        const status = JSON.parse(readFileSync42(statusPath, "utf8"));
+      const statusPath = join75(nexusDir, "status.json");
+      if (existsSync55(statusPath)) {
+        const status = JSON.parse(readFileSync43(statusPath, "utf8"));
         if (status.peerId === peerId)
           isLocalPeer = true;
       }
     } catch {
     }
     if (isLocalPeer) {
-      const pricingPath = join74(nexusDir, "pricing.json");
-      if (existsSync54(pricingPath)) {
+      const pricingPath = join75(nexusDir, "pricing.json");
+      if (existsSync55(pricingPath)) {
         try {
-          const pricing = JSON.parse(readFileSync42(pricingPath, "utf8"));
+          const pricing = JSON.parse(readFileSync43(pricingPath, "utf8"));
           const localModels = (pricing.models || []).map((m) => ({
             name: m.model || "unknown",
             size: m.parameterSize || "",
@@ -38503,10 +38503,10 @@ async function fetchPeerModels(peerId, authKey) {
         }
       }
     }
-    const cachePath = join74(nexusDir, "peer-models-cache.json");
-    if (existsSync54(cachePath)) {
+    const cachePath = join75(nexusDir, "peer-models-cache.json");
+    if (existsSync55(cachePath)) {
       try {
-        const cache4 = JSON.parse(readFileSync42(cachePath, "utf8"));
+        const cache4 = JSON.parse(readFileSync43(cachePath, "utf8"));
         if (cache4.peerId === peerId && cache4.models?.length > 0) {
           const age = Date.now() - new Date(cache4.cachedAt).getTime();
           if (age < 5 * 60 * 1e3) {
@@ -38621,10 +38621,10 @@ async function fetchPeerModels(peerId, authKey) {
     } catch {
     }
     if (isLocalPeer) {
-      const pricingPath = join74(nexusDir, "pricing.json");
-      if (existsSync54(pricingPath)) {
+      const pricingPath = join75(nexusDir, "pricing.json");
+      if (existsSync55(pricingPath)) {
         try {
-          const pricing = JSON.parse(readFileSync42(pricingPath, "utf8"));
+          const pricing = JSON.parse(readFileSync43(pricingPath, "utf8"));
           return (pricing.models || []).map((m) => ({
             name: m.model || "unknown",
             size: m.parameterSize || "",
@@ -46928,9 +46928,9 @@ async function handleSlashCommand(input, ctx) {
           renderInfo("No wallet configured. Ask the agent to create one via the nexus tool.");
         }
       } else if (sub === "name") {
-        const { homedir: homedir19 } = __require("node:os");
+        const { homedir: homedir20 } = __require("node:os");
         const { existsSync: ex, readFileSync: rf, writeFileSync: wf, mkdirSync: mkd } = __require("node:fs");
-        const namePath = __require("node:path").join(homedir19(), ".open-agents", "agent-name");
+        const namePath = __require("node:path").join(homedir20(), ".open-agents", "agent-name");
         if (rest2) {
           const customName = rest2.replace(/[^a-zA-Z0-9_\-.\s]/g, "").trim().slice(0, 40);
           if (!customName) {
@@ -48240,8 +48240,8 @@ async function handleSlashCommand(input, ctx) {
           let sponsorName = (config.header.message || "").replace(/^\/+/, "").trim();
           if (!sponsorName || sponsorName.length < 2) {
             try {
-              const { homedir: homedir19 } = __require("os");
-              const namePath = __require("path").join(homedir19(), ".open-agents", "agent-name");
+              const { homedir: homedir20 } = __require("os");
+              const namePath = __require("path").join(homedir20(), ".open-agents", "agent-name");
               if (existsSync42(namePath))
                 sponsorName = readFileSync31(namePath, "utf8").trim();
             } catch {
@@ -49621,12 +49621,12 @@ async function handleVoiceMenu(ctx, save, hasLocal) {
               continue;
             }
             const { basename: basename18, join: pathJoin } = await import("node:path");
-            const { copyFileSync: copyFileSync2, mkdirSync: mkdirSync28, existsSync: exists } = await import("node:fs");
-            const { homedir: homedir19 } = await import("node:os");
+            const { copyFileSync: copyFileSync2, mkdirSync: mkdirSync29, existsSync: exists } = await import("node:fs");
+            const { homedir: homedir20 } = await import("node:os");
             const modelName = basename18(onnxDrop.path, ".onnx").replace(/[^a-zA-Z0-9_-]/g, "-");
-            const destDir = pathJoin(homedir19(), ".open-agents", "voice", "models", modelName);
+            const destDir = pathJoin(homedir20(), ".open-agents", "voice", "models", modelName);
             if (!exists(destDir))
-              mkdirSync28(destDir, { recursive: true });
+              mkdirSync29(destDir, { recursive: true });
             copyFileSync2(onnxDrop.path, pathJoin(destDir, "model.onnx"));
             copyFileSync2(jsonDrop.path, pathJoin(destDir, "config.json"));
             const { registerCustomOnnxModel: registerCustomOnnxModel2 } = await Promise.resolve().then(() => (init_voice(), voice_exports));
@@ -50304,11 +50304,11 @@ async function handlePeerEndpoint(peerId, authKey, ctx, local) {
     const models = await fetchModels(peerUrl, authKey);
     if (models.length > 0) {
       try {
-        const { writeFileSync: writeFileSync27, mkdirSync: mkdirSync28 } = await import("node:fs");
-        const { join: join74, dirname: dirname23 } = await import("node:path");
-        const cachePath = join74(ctx.repoRoot || process.cwd(), ".oa", "nexus", "peer-models-cache.json");
-        mkdirSync28(dirname23(cachePath), { recursive: true });
-        writeFileSync27(cachePath, JSON.stringify({
+        const { writeFileSync: writeFileSync28, mkdirSync: mkdirSync29 } = await import("node:fs");
+        const { join: join75, dirname: dirname23 } = await import("node:path");
+        const cachePath = join75(ctx.repoRoot || process.cwd(), ".oa", "nexus", "peer-models-cache.json");
+        mkdirSync29(dirname23(cachePath), { recursive: true });
+        writeFileSync28(cachePath, JSON.stringify({
           peerId,
           cachedAt: (/* @__PURE__ */ new Date()).toISOString(),
           models: models.map((m) => ({ name: m.name, size: m.size, parameterSize: m.parameterSize }))
@@ -50507,17 +50507,17 @@ async function handleUpdate(subcommand, ctx) {
   try {
     const { createRequire: createRequire5 } = await import("node:module");
     const { fileURLToPath: fileURLToPath15 } = await import("node:url");
-    const { dirname: dirname23, join: join74 } = await import("node:path");
-    const { existsSync: existsSync54 } = await import("node:fs");
+    const { dirname: dirname23, join: join75 } = await import("node:path");
+    const { existsSync: existsSync55 } = await import("node:fs");
     const req = createRequire5(import.meta.url);
     const thisDir = dirname23(fileURLToPath15(import.meta.url));
     const candidates = [
-      join74(thisDir, "..", "package.json"),
-      join74(thisDir, "..", "..", "package.json"),
-      join74(thisDir, "..", "..", "..", "package.json")
+      join75(thisDir, "..", "package.json"),
+      join75(thisDir, "..", "..", "package.json"),
+      join75(thisDir, "..", "..", "..", "package.json")
     ];
     for (const pkgPath of candidates) {
-      if (existsSync54(pkgPath)) {
+      if (existsSync55(pkgPath)) {
         const pkg = req(pkgPath);
         if (pkg.name === "open-agents-ai" || pkg.name === "@open-agents/cli") {
           currentVersion = pkg.version ?? "0.0.0";
@@ -61592,6 +61592,173 @@ var init_mouse_filter = __esm({
   }
 });
 
+// packages/cli/dist/api/profiles.js
+import { existsSync as existsSync50, readFileSync as readFileSync39, writeFileSync as writeFileSync23, mkdirSync as mkdirSync24, readdirSync as readdirSync19, unlinkSync as unlinkSync12 } from "node:fs";
+import { join as join67 } from "node:path";
+import { homedir as homedir17 } from "node:os";
+import { createCipheriv as createCipheriv3, createDecipheriv as createDecipheriv3, randomBytes as randomBytes15, scryptSync as scryptSync3, createHash as createHash5 } from "node:crypto";
+function globalProfileDir() {
+  return join67(homedir17(), ".open-agents", "profiles");
+}
+function projectProfileDir(projectDir) {
+  return join67(projectDir || process.cwd(), ".oa", "profiles");
+}
+function listProfiles(projectDir) {
+  const result = [];
+  const seen = /* @__PURE__ */ new Set();
+  const projDir = projectProfileDir(projectDir);
+  if (existsSync50(projDir)) {
+    for (const f of readdirSync19(projDir).filter((f2) => f2.endsWith(".json"))) {
+      try {
+        const raw = JSON.parse(readFileSync39(join67(projDir, f), "utf8"));
+        const name = f.replace(".json", "");
+        seen.add(name);
+        result.push({
+          name,
+          description: raw.description || "",
+          encrypted: raw.encrypted === true,
+          source: "project"
+        });
+      } catch {
+      }
+    }
+  }
+  const globDir = globalProfileDir();
+  if (existsSync50(globDir)) {
+    for (const f of readdirSync19(globDir).filter((f2) => f2.endsWith(".json"))) {
+      const name = f.replace(".json", "");
+      if (seen.has(name))
+        continue;
+      try {
+        const raw = JSON.parse(readFileSync39(join67(globDir, f), "utf8"));
+        result.push({
+          name,
+          description: raw.description || "",
+          encrypted: raw.encrypted === true,
+          source: "global"
+        });
+      } catch {
+      }
+    }
+  }
+  return result;
+}
+function loadProfile(name, password, projectDir) {
+  const sanitized = name.replace(/[^a-zA-Z0-9_-]/g, "");
+  const projPath = join67(projectProfileDir(projectDir), `${sanitized}.json`);
+  const globPath = join67(globalProfileDir(), `${sanitized}.json`);
+  const filePath = existsSync50(projPath) ? projPath : existsSync50(globPath) ? globPath : null;
+  if (!filePath)
+    return null;
+  const raw = JSON.parse(readFileSync39(filePath, "utf8"));
+  if (raw.encrypted === true) {
+    if (!password)
+      return null;
+    return decryptProfile(raw, password);
+  }
+  return raw;
+}
+function saveProfile(profile, password, scope = "global", projectDir) {
+  const dir = scope === "project" ? projectProfileDir(projectDir) : globalProfileDir();
+  mkdirSync24(dir, { recursive: true });
+  const sanitized = profile.name.replace(/[^a-zA-Z0-9_-]/g, "");
+  const filePath = join67(dir, `${sanitized}.json`);
+  profile.modified = (/* @__PURE__ */ new Date()).toISOString();
+  if (password) {
+    const encrypted = encryptProfile(profile, password);
+    writeFileSync23(filePath, JSON.stringify(encrypted, null, 2), { mode: 384 });
+  } else {
+    profile.encrypted = false;
+    writeFileSync23(filePath, JSON.stringify(profile, null, 2), { mode: 420 });
+  }
+}
+function deleteProfile(name, scope = "global", projectDir) {
+  const sanitized = name.replace(/[^a-zA-Z0-9_-]/g, "");
+  const dir = scope === "project" ? projectProfileDir(projectDir) : globalProfileDir();
+  const filePath = join67(dir, `${sanitized}.json`);
+  if (existsSync50(filePath)) {
+    unlinkSync12(filePath);
+    return true;
+  }
+  return false;
+}
+function encryptProfile(profile, password) {
+  const salt = randomBytes15(32);
+  const key = scryptSync3(password, salt, 32);
+  const iv = randomBytes15(16);
+  const cipher = createCipheriv3("aes-256-gcm", key, iv);
+  const plaintext = JSON.stringify(profile);
+  const encrypted = Buffer.concat([cipher.update(plaintext, "utf8"), cipher.final()]);
+  const tag = cipher.getAuthTag();
+  return {
+    encrypted: true,
+    iv: iv.toString("hex"),
+    salt: salt.toString("hex"),
+    data: encrypted.toString("hex"),
+    tag: tag.toString("hex"),
+    name: profile.name,
+    description: profile.description
+  };
+}
+function decryptProfile(enc, password) {
+  try {
+    const salt = Buffer.from(enc.salt, "hex");
+    const key = scryptSync3(password, salt, 32);
+    const iv = Buffer.from(enc.iv, "hex");
+    const decipher = createDecipheriv3("aes-256-gcm", key, iv);
+    decipher.setAuthTag(Buffer.from(enc.tag, "hex"));
+    const decrypted = Buffer.concat([
+      decipher.update(Buffer.from(enc.data, "hex")),
+      decipher.final()
+    ]);
+    return JSON.parse(decrypted.toString("utf8"));
+  } catch {
+    return null;
+  }
+}
+var PRESET_PROFILES;
+var init_profiles = __esm({
+  "packages/cli/dist/api/profiles.js"() {
+    "use strict";
+    PRESET_PROFILES = {
+      "readonly": {
+        name: "readonly",
+        description: "Read-only \u2014 no file writes, no shell mutations",
+        tools: {
+          deny: ["file_write", "file_edit", "file_patch", "batch_edit", "shell"],
+          shell_deny: ["rm", "sudo", "chmod", "chown", "mv", "cp", "mkdir", "rmdir", "touch"]
+        },
+        commands: { deny: ["destroy", "update", "sponsor", "expose"] },
+        limits: { max_turns: 10, timeout_s: 300 },
+        encrypted: false,
+        created: "2026-03-25T00:00:00Z"
+      },
+      "ci-safe": {
+        name: "ci-safe",
+        description: "CI/CD \u2014 can read, test, lint, but not write production files",
+        tools: {
+          allow: ["file_read", "grep_search", "glob_find", "list_directory", "shell", "task_complete"],
+          shell_allow: ["npm test", "npm run", "npx tsc", "npx eslint", "cat", "grep", "find", "wc", "head", "tail"],
+          shell_deny: ["rm -rf", "sudo", "chmod", "dd", "mkfs", "curl", "wget"]
+        },
+        commands: { allow: ["help", "stats", "tools", "config"] },
+        limits: { max_turns: 15, timeout_s: 600 },
+        encrypted: false,
+        created: "2026-03-25T00:00:00Z"
+      },
+      "full": {
+        name: "full",
+        description: "Full access \u2014 no restrictions",
+        tools: {},
+        commands: {},
+        limits: {},
+        encrypted: false,
+        created: "2026-03-25T00:00:00Z"
+      }
+    };
+  }
+});
+
 // packages/cli/dist/api/serve.js
 var serve_exports = {};
 __export(serve_exports, {
@@ -61601,14 +61768,14 @@ __export(serve_exports, {
 import * as http from "node:http";
 import { createRequire as createRequire2 } from "node:module";
 import { fileURLToPath as fileURLToPath12 } from "node:url";
-import { dirname as dirname20, join as join67, resolve as resolve31 } from "node:path";
+import { dirname as dirname20, join as join68, resolve as resolve31 } from "node:path";
 import { spawn as spawn20 } from "node:child_process";
-import { mkdirSync as mkdirSync24, writeFileSync as writeFileSync23, readFileSync as readFileSync39, readdirSync as readdirSync19, existsSync as existsSync50 } from "node:fs";
-import { randomBytes as randomBytes15 } from "node:crypto";
+import { mkdirSync as mkdirSync25, writeFileSync as writeFileSync24, readFileSync as readFileSync40, readdirSync as readdirSync20, existsSync as existsSync51 } from "node:fs";
+import { randomBytes as randomBytes16 } from "node:crypto";
 function getVersion3() {
   try {
     const require2 = createRequire2(import.meta.url);
-    const pkgPath = join67(dirname20(fileURLToPath12(import.meta.url)), "..", "..", "package.json");
+    const pkgPath = join68(dirname20(fileURLToPath12(import.meta.url)), "..", "..", "package.json");
     const pkg = require2(pkgPath);
     return pkg.version;
   } catch {
@@ -61738,29 +61905,29 @@ function ollamaStream(ollamaUrl, path, method, body, onData, onEnd, onError) {
 }
 function jobsDir() {
   const root = resolve31(process.cwd());
-  const dir = join67(root, ".oa", "jobs");
-  mkdirSync24(dir, { recursive: true });
+  const dir = join68(root, ".oa", "jobs");
+  mkdirSync25(dir, { recursive: true });
   return dir;
 }
 function loadJob(id) {
-  const file = join67(jobsDir(), `${id}.json`);
-  if (!existsSync50(file))
+  const file = join68(jobsDir(), `${id}.json`);
+  if (!existsSync51(file))
     return null;
   try {
-    return JSON.parse(readFileSync39(file, "utf-8"));
+    return JSON.parse(readFileSync40(file, "utf-8"));
   } catch {
     return null;
   }
 }
 function listJobs() {
   const dir = jobsDir();
-  if (!existsSync50(dir))
+  if (!existsSync51(dir))
     return [];
-  const files = readdirSync19(dir).filter((f) => f.endsWith(".json")).sort();
+  const files = readdirSync20(dir).filter((f) => f.endsWith(".json")).sort();
   const jobs = [];
   for (const file of files) {
     try {
-      jobs.push(JSON.parse(readFileSync39(join67(dir, file), "utf-8")));
+      jobs.push(JSON.parse(readFileSync40(join68(dir, file), "utf-8")));
     } catch {
     }
   }
@@ -61887,7 +62054,7 @@ async function handleV1ChatCompletions(req, res, ollamaUrl) {
       "Access-Control-Allow-Methods": "GET, POST, PUT, PATCH, DELETE, OPTIONS",
       "Access-Control-Allow-Headers": "Content-Type, Authorization"
     });
-    const chatId = `chatcmpl-${randomBytes15(12).toString("hex")}`;
+    const chatId = `chatcmpl-${randomBytes16(12).toString("hex")}`;
     let buffer = "";
     ollamaStream(ollamaUrl, "/api/chat", "POST", ollamaPayload, (chunk) => {
       buffer += chunk;
@@ -61992,7 +62159,7 @@ async function handleV1ChatCompletions(req, res, ollamaUrl) {
         metrics.totalTokensOut += ollamaResp.eval_count;
       if (ollamaResp.prompt_eval_count)
         metrics.totalTokensIn += ollamaResp.prompt_eval_count;
-      const chatId = `chatcmpl-${randomBytes15(12).toString("hex")}`;
+      const chatId = `chatcmpl-${randomBytes16(12).toString("hex")}`;
       const openaiResponse = {
         id: chatId,
         object: "chat.completion",
@@ -62075,7 +62242,7 @@ async function handleV1Run(req, res) {
     jsonResponse(res, 400, { error: "Missing required field: task" });
     return;
   }
-  const id = `job-${randomBytes15(3).toString("hex")}`;
+  const id = `job-${randomBytes16(3).toString("hex")}`;
   const dir = jobsDir();
   const workingDir = requestBody["working_directory"] || req.headers["x-working-directory"];
   const isolate = requestBody["isolate"] === true;
@@ -62083,8 +62250,8 @@ async function handleV1Run(req, res) {
   if (workingDir) {
     cwd4 = resolve31(workingDir);
   } else if (isolate) {
-    const wsDir = join67(dir, "..", "workspaces", id);
-    mkdirSync24(wsDir, { recursive: true });
+    const wsDir = join68(dir, "..", "workspaces", id);
+    mkdirSync25(wsDir, { recursive: true });
     cwd4 = wsDir;
   } else {
     cwd4 = resolve31(process.cwd());
@@ -62113,6 +62280,23 @@ async function handleV1Run(req, res) {
   const timeout = requestBody["timeout_s"];
   if (timeout && timeout > 0)
     args.push("--timeout", String(timeout));
+  const profileName = requestBody["profile"] || req.headers["x-tool-profile"] || void 0;
+  let activeProfile = null;
+  if (profileName) {
+    const profilePassword = req.headers["x-profile-password"];
+    activeProfile = PRESET_PROFILES[profileName] || loadProfile(profileName, profilePassword);
+    if (!activeProfile) {
+      jsonResponse(res, 400, { error: "Profile not found or wrong password", profile: profileName });
+      return;
+    }
+    if (activeProfile.limits.max_turns && !requestBody["max_turns"]) {
+      args.push("--max-turns", String(activeProfile.limits.max_turns));
+    }
+    if (activeProfile.limits.timeout_s && !requestBody["timeout_s"]) {
+      args.push("--timeout", String(activeProfile.limits.timeout_s));
+    }
+  }
+  job.profile = profileName || null;
   const runEnv = {
     ...process.env,
     OA_JOB_ID: id,
@@ -62120,6 +62304,9 @@ async function handleV1Run(req, res) {
     OA_RUN_USER: authUser,
     OA_RUN_SCOPE: authScope
   };
+  if (activeProfile) {
+    runEnv["OA_TOOL_PROFILE"] = JSON.stringify(activeProfile);
+  }
   const customEnv = requestBody["env"];
   if (customEnv && typeof customEnv === "object") {
     for (const [k, v] of Object.entries(customEnv)) {
@@ -62136,7 +62323,7 @@ async function handleV1Run(req, res) {
   });
   child.unref();
   job.pid = child.pid ?? 0;
-  writeFileSync23(join67(dir, `${id}.json`), JSON.stringify(job, null, 2));
+  writeFileSync24(join68(dir, `${id}.json`), JSON.stringify(job, null, 2));
   runningProcesses.set(id, child);
   if (streamMode) {
     res.writeHead(200, {
@@ -62166,7 +62353,7 @@ async function handleV1Run(req, res) {
       job.status = code === 0 ? "completed" : "failed";
       job.completedAt = (/* @__PURE__ */ new Date()).toISOString();
       try {
-        writeFileSync23(join67(dir, `${id}.json`), JSON.stringify(job, null, 2));
+        writeFileSync24(join68(dir, `${id}.json`), JSON.stringify(job, null, 2));
       } catch {
       }
       runningProcesses.delete(id);
@@ -62197,7 +62384,7 @@ async function handleV1Run(req, res) {
         job.completedAt = (/* @__PURE__ */ new Date()).toISOString();
       }
       try {
-        writeFileSync23(join67(dir, `${id}.json`), JSON.stringify(job, null, 2));
+        writeFileSync24(join68(dir, `${id}.json`), JSON.stringify(job, null, 2));
       } catch {
       }
       runningProcesses.delete(id);
@@ -62238,7 +62425,7 @@ function handleV1RunsDelete(res, id) {
     job.error = "Aborted via API";
     const dir = jobsDir();
     try {
-      writeFileSync23(join67(dir, `${id}.json`), JSON.stringify(job, null, 2));
+      writeFileSync24(join68(dir, `${id}.json`), JSON.stringify(job, null, 2));
     } catch {
     }
     runningProcesses.delete(id);
@@ -62486,6 +62673,74 @@ async function handleRequest(req, res, ollamaUrl, verbose) {
       await handlePostCommand(res, cmd);
       return;
     }
+    if (pathname === "/v1/profiles" && method === "GET") {
+      const profiles = listProfiles();
+      const presets = Object.values(PRESET_PROFILES).map((p) => ({ name: p.name, description: p.description, encrypted: false, source: "preset" }));
+      jsonResponse(res, 200, { profiles: [...presets, ...profiles] });
+      return;
+    }
+    const profileGetMatch = pathname.match(/^\/v1\/profiles\/([a-zA-Z0-9_-]+)$/);
+    if (profileGetMatch && method === "GET") {
+      const name = profileGetMatch[1];
+      const password = req.headers["x-profile-password"];
+      if (PRESET_PROFILES[name]) {
+        jsonResponse(res, 200, { profile: PRESET_PROFILES[name] });
+        return;
+      }
+      const profile = loadProfile(name, password);
+      if (profile) {
+        jsonResponse(res, 200, { profile });
+      } else {
+        jsonResponse(res, 404, { error: "Profile not found or wrong password", name });
+      }
+      return;
+    }
+    if (pathname === "/v1/profiles" && method === "POST") {
+      if (!checkAuth(req, res, "admin")) {
+        status = 403;
+        return;
+      }
+      const body = await parseJsonBody(req);
+      if (!body || typeof body !== "object") {
+        jsonResponse(res, 400, { error: "Invalid JSON body" });
+        return;
+      }
+      const b = body;
+      const name = b["name"];
+      if (!name || typeof name !== "string") {
+        jsonResponse(res, 400, { error: "Profile 'name' required" });
+        return;
+      }
+      const profile = {
+        name: name.replace(/[^a-zA-Z0-9_-]/g, ""),
+        description: b["description"] || "",
+        tools: b["tools"] || {},
+        commands: b["commands"] || {},
+        limits: b["limits"] || {},
+        encrypted: false,
+        created: (/* @__PURE__ */ new Date()).toISOString()
+      };
+      const password = b["password"] || req.headers["x-profile-password"] || void 0;
+      const scope = b["scope"] || "global";
+      saveProfile(profile, password, scope);
+      jsonResponse(res, 201, { status: "created", name: profile.name, encrypted: !!password, scope });
+      return;
+    }
+    const profileDelMatch = pathname.match(/^\/v1\/profiles\/([a-zA-Z0-9_-]+)$/);
+    if (profileDelMatch && method === "DELETE") {
+      if (!checkAuth(req, res, "admin")) {
+        status = 403;
+        return;
+      }
+      const name = profileDelMatch[1];
+      if (PRESET_PROFILES[name]) {
+        jsonResponse(res, 400, { error: "Cannot delete preset profiles" });
+        return;
+      }
+      const deleted = deleteProfile(name, "global") || deleteProfile(name, "project");
+      jsonResponse(res, deleted ? 200 : 404, deleted ? { status: "deleted", name } : { error: "Profile not found", name });
+      return;
+    }
     status = 404;
     jsonResponse(res, 404, { error: "Not found", path: pathname });
   } catch (err) {
@@ -62600,6 +62855,7 @@ var init_serve = __esm({
     init_config();
     init_oa_directory();
     init_render();
+    init_profiles();
     metrics = {
       requests: /* @__PURE__ */ new Map(),
       totalTokensIn: 0,
@@ -62615,13 +62871,13 @@ var init_serve = __esm({
 import * as readline2 from "node:readline";
 import { Writable } from "node:stream";
 import { cwd } from "node:process";
-import { resolve as resolve32, join as join68, dirname as dirname21, extname as extname11 } from "node:path";
+import { resolve as resolve32, join as join69, dirname as dirname21, extname as extname11 } from "node:path";
 import { createRequire as createRequire3 } from "node:module";
 import { fileURLToPath as fileURLToPath13 } from "node:url";
-import { readFileSync as readFileSync40, writeFileSync as writeFileSync24, appendFileSync as appendFileSync4, rmSync as rmSync3, readdirSync as readdirSync20, mkdirSync as mkdirSync25 } from "node:fs";
-import { existsSync as existsSync51 } from "node:fs";
+import { readFileSync as readFileSync41, writeFileSync as writeFileSync25, appendFileSync as appendFileSync4, rmSync as rmSync3, readdirSync as readdirSync21, mkdirSync as mkdirSync26 } from "node:fs";
+import { existsSync as existsSync52 } from "node:fs";
 import { execSync as execSync33 } from "node:child_process";
-import { homedir as homedir17 } from "node:os";
+import { homedir as homedir18 } from "node:os";
 function formatTimeAgo(date) {
   const seconds = Math.floor((Date.now() - date.getTime()) / 1e3);
   if (seconds < 60)
@@ -62640,12 +62896,12 @@ function getVersion4() {
     const require2 = createRequire3(import.meta.url);
     const thisDir = dirname21(fileURLToPath13(import.meta.url));
     const candidates = [
-      join68(thisDir, "..", "package.json"),
-      join68(thisDir, "..", "..", "package.json"),
-      join68(thisDir, "..", "..", "..", "package.json")
+      join69(thisDir, "..", "package.json"),
+      join69(thisDir, "..", "..", "package.json"),
+      join69(thisDir, "..", "..", "..", "package.json")
     ];
     for (const pkgPath of candidates) {
-      if (existsSync51(pkgPath)) {
+      if (existsSync52(pkgPath)) {
         const pkg = require2(pkgPath);
         if (pkg.name === "open-agents-ai" || pkg.name === "@open-agents/cli") {
           return pkg.version ?? "0.0.0";
@@ -62880,15 +63136,15 @@ Use task_status("${taskId}") or task_output("${taskId}") to check progress.`
 function gatherMemorySnippets(root) {
   const snippets = [];
   const dirs = [
-    join68(root, ".oa", "memory"),
-    join68(root, ".open-agents", "memory")
+    join69(root, ".oa", "memory"),
+    join69(root, ".open-agents", "memory")
   ];
   for (const dir of dirs) {
-    if (!existsSync51(dir))
+    if (!existsSync52(dir))
       continue;
     try {
-      for (const f of readdirSync20(dir).filter((f2) => f2.endsWith(".json"))) {
-        const data = JSON.parse(readFileSync40(join68(dir, f), "utf-8"));
+      for (const f of readdirSync21(dir).filter((f2) => f2.endsWith(".json"))) {
+        const data = JSON.parse(readFileSync41(join69(dir, f), "utf-8"));
         for (const val of Object.values(data)) {
           const v = typeof val === "object" && val !== null && "value" in val ? String(val.value) : String(val);
           if (v.length > 10)
@@ -63045,9 +63301,9 @@ ${metabolismMemories}
   } catch {
   }
   try {
-    const archeFile = join68(repoRoot, ".oa", "arche", "variants.json");
-    if (existsSync51(archeFile)) {
-      const variants = JSON.parse(readFileSync40(archeFile, "utf8"));
+    const archeFile = join69(repoRoot, ".oa", "arche", "variants.json");
+    if (existsSync52(archeFile)) {
+      const variants = JSON.parse(readFileSync41(archeFile, "utf8"));
       if (variants.length > 0) {
         let filtered = variants;
         if (taskType) {
@@ -63184,9 +63440,9 @@ ${lines.join("\n")}
   const compactionThreshold = modelTier === "small" ? 12e3 : modelTier === "medium" ? 24e3 : 4e4;
   let identityInjection = "";
   try {
-    const ikStateFile = join68(repoRoot, ".oa", "identity", "self-state.json");
-    if (existsSync51(ikStateFile)) {
-      const selfState = JSON.parse(readFileSync40(ikStateFile, "utf8"));
+    const ikStateFile = join69(repoRoot, ".oa", "identity", "self-state.json");
+    if (existsSync52(ikStateFile)) {
+      const selfState = JSON.parse(readFileSync41(ikStateFile, "utf8"));
       const lines = [
         `[Identity State v${selfState.version}]`,
         `Self: ${selfState.narrative_summary}`,
@@ -63827,13 +64083,13 @@ When done, either call task_complete with your answer, or use FINAL_VAR(variable
           });
         }
         try {
-          const ikDir = join68(repoRoot, ".oa", "identity");
-          const ikFile = join68(ikDir, "self-state.json");
+          const ikDir = join69(repoRoot, ".oa", "identity");
+          const ikFile = join69(ikDir, "self-state.json");
           let ikState;
-          if (existsSync51(ikFile)) {
-            ikState = JSON.parse(readFileSync40(ikFile, "utf8"));
+          if (existsSync52(ikFile)) {
+            ikState = JSON.parse(readFileSync41(ikFile, "utf8"));
           } else {
-            mkdirSync25(ikDir, { recursive: true });
+            mkdirSync26(ikDir, { recursive: true });
             const machineId = Date.now().toString(36) + Math.random().toString(36).slice(2, 8);
             ikState = {
               self_id: `oa-${machineId}`,
@@ -63859,7 +64115,7 @@ When done, either call task_complete with your answer, or use FINAL_VAR(variable
           }
           ikState.session_count = (ikState.session_count || 0) + 1;
           ikState.updated_at = (/* @__PURE__ */ new Date()).toISOString();
-          writeFileSync24(ikFile, JSON.stringify(ikState, null, 2));
+          writeFileSync25(ikFile, JSON.stringify(ikState, null, 2));
         } catch (ikErr) {
           try {
             console.error("[IK-OBSERVE]", ikErr);
@@ -63874,14 +64130,14 @@ When done, either call task_complete with your answer, or use FINAL_VAR(variable
       } else {
         renderTaskIncomplete(result.turns, result.toolCalls, result.durationMs, tokens);
         try {
-          const ikFile = join68(repoRoot, ".oa", "identity", "self-state.json");
-          if (existsSync51(ikFile)) {
-            const ikState = JSON.parse(readFileSync40(ikFile, "utf8"));
+          const ikFile = join69(repoRoot, ".oa", "identity", "self-state.json");
+          if (existsSync52(ikFile)) {
+            const ikState = JSON.parse(readFileSync41(ikFile, "utf8"));
             ikState.homeostasis.uncertainty = Math.min(1, ikState.homeostasis.uncertainty + 0.1);
             ikState.homeostasis.coherence = Math.max(0, ikState.homeostasis.coherence - 0.05);
             ikState.session_count = (ikState.session_count || 0) + 1;
             ikState.updated_at = (/* @__PURE__ */ new Date()).toISOString();
-            writeFileSync24(ikFile, JSON.stringify(ikState, null, 2));
+            writeFileSync25(ikFile, JSON.stringify(ikState, null, 2));
           }
         } catch {
         }
@@ -64224,7 +64480,7 @@ Review its full output in the [${id}] tab or via full_sub_agent(action='output',
   let p2pGateway = null;
   let peerMesh = null;
   let inferenceRouter = null;
-  const secretVault = new SecretVault(join68(repoRoot, ".oa", "vault.enc"));
+  const secretVault = new SecretVault(join69(repoRoot, ".oa", "vault.enc"));
   let adminSessionKey = null;
   const callSubAgents = /* @__PURE__ */ new Map();
   const streamRenderer = new StreamRenderer();
@@ -64445,13 +64701,13 @@ Rationale: ${proposal.rationale}${provenanceNote}`;
     const hits = allCompletions.filter((c3) => c3.toLowerCase().startsWith(lower));
     return [hits, line];
   }
-  const HISTORY_DIR = join68(homedir17(), ".open-agents");
-  const HISTORY_FILE = join68(HISTORY_DIR, "repl-history");
+  const HISTORY_DIR = join69(homedir18(), ".open-agents");
+  const HISTORY_FILE = join69(HISTORY_DIR, "repl-history");
   const MAX_HISTORY_LINES = 500;
   let savedHistory = [];
   try {
-    if (existsSync51(HISTORY_FILE)) {
-      const raw = readFileSync40(HISTORY_FILE, "utf8").trim();
+    if (existsSync52(HISTORY_FILE)) {
+      const raw = readFileSync41(HISTORY_FILE, "utf8").trim();
       if (raw)
         savedHistory = raw.split("\n").reverse();
     }
@@ -64531,12 +64787,12 @@ Rationale: ${proposal.rationale}${provenanceNote}`;
     if (!line.trim())
       return;
     try {
-      mkdirSync25(HISTORY_DIR, { recursive: true });
+      mkdirSync26(HISTORY_DIR, { recursive: true });
       appendFileSync4(HISTORY_FILE, line + "\n", "utf8");
       if (Math.random() < 0.02) {
-        const all = readFileSync40(HISTORY_FILE, "utf8").trim().split("\n");
+        const all = readFileSync41(HISTORY_FILE, "utf8").trim().split("\n");
         if (all.length > MAX_HISTORY_LINES) {
-          writeFileSync24(HISTORY_FILE, all.slice(-MAX_HISTORY_LINES).join("\n") + "\n", "utf8");
+          writeFileSync25(HISTORY_FILE, all.slice(-MAX_HISTORY_LINES).join("\n") + "\n", "utf8");
         }
       }
     } catch {
@@ -64712,7 +64968,7 @@ Rationale: ${proposal.rationale}${provenanceNote}`;
     } catch {
     }
     try {
-      const oaDir = join68(repoRoot, ".oa");
+      const oaDir = join69(repoRoot, ".oa");
       const reconnected = await ExposeGateway.checkAndReconnect(oaDir, {
         onInfo: (msg) => writeContent(() => renderInfo(msg)),
         onError: (msg) => writeContent(() => renderWarning(msg))
@@ -64744,7 +65000,7 @@ Rationale: ${proposal.rationale}${provenanceNote}`;
     } catch {
     }
     try {
-      const oaDir = join68(repoRoot, ".oa");
+      const oaDir = join69(repoRoot, ".oa");
       const reconnectedP2P = await ExposeP2PGateway.checkAndReconnect(oaDir, new NexusTool(repoRoot), {
         onInfo: (msg) => writeContent(() => renderInfo(msg)),
         onError: (msg) => writeContent(() => renderWarning(msg))
@@ -64814,11 +65070,11 @@ Rationale: ${proposal.rationale}${provenanceNote}`;
     }
     try {
       const { homedir: _hd } = await import("node:os");
-      const globalNamePath = join68(_hd(), ".open-agents", "agent-name");
+      const globalNamePath = join69(_hd(), ".open-agents", "agent-name");
       let agName = "oa-node";
       try {
-        if (existsSync51(globalNamePath))
-          agName = readFileSync40(globalNamePath, "utf8").trim() || agName;
+        if (existsSync52(globalNamePath))
+          agName = readFileSync41(globalNamePath, "utf8").trim() || agName;
       } catch {
       }
       fetch("https://openagents.nexus/api/v1/directory", {
@@ -65711,7 +65967,7 @@ Respond concisely and safely. Remember: you are talking to the general public.`;
           kind,
           targetUrl,
           authKey,
-          stateDir: join68(repoRoot, ".oa"),
+          stateDir: join69(repoRoot, ".oa"),
           passthrough: passthrough ?? false,
           loadbalance: loadbalance ?? false,
           endpointAuth: passthrough ? currentConfig.apiKey : void 0,
@@ -65759,7 +66015,7 @@ Respond concisely and safely. Remember: you are talking to the general public.`;
         await tunnelGateway.stop();
         tunnelGateway = null;
       }
-      const newTunnel = new ExposeGateway({ kind, targetUrl, authKey, fullAccess, stateDir: join68(repoRoot, ".oa") });
+      const newTunnel = new ExposeGateway({ kind, targetUrl, authKey, fullAccess, stateDir: join69(repoRoot, ".oa") });
       newTunnel.on("stats", (stats) => {
         statusBar.setExposeStatus({
           status: stats.status,
@@ -66031,10 +66287,10 @@ Respond concisely and safely. Remember: you are talking to the general public.`;
         writeContent(() => renderInfo(`Killed ${bgKilled} background task(s).`));
       }
       try {
-        const nexusDir = join68(repoRoot, OA_DIR, "nexus");
-        const pidFile = join68(nexusDir, "daemon.pid");
-        if (existsSync51(pidFile)) {
-          const pid = parseInt(readFileSync40(pidFile, "utf8").trim(), 10);
+        const nexusDir = join69(repoRoot, OA_DIR, "nexus");
+        const pidFile = join69(nexusDir, "daemon.pid");
+        if (existsSync52(pidFile)) {
+          const pid = parseInt(readFileSync41(pidFile, "utf8").trim(), 10);
           if (pid > 0) {
             try {
               if (process.platform === "win32") {
@@ -66056,13 +66312,13 @@ Respond concisely and safely. Remember: you are talking to the general public.`;
       } catch {
       }
       try {
-        const voiceDir2 = join68(homedir17(), ".open-agents", "voice");
+        const voiceDir2 = join69(homedir18(), ".open-agents", "voice");
         const voicePidFiles = ["luxtts-daemon.pid", "piper-daemon.pid"];
         for (const pf of voicePidFiles) {
-          const pidPath = join68(voiceDir2, pf);
-          if (existsSync51(pidPath)) {
+          const pidPath = join69(voiceDir2, pf);
+          if (existsSync52(pidPath)) {
             try {
-              const pid = parseInt(readFileSync40(pidPath, "utf8").trim(), 10);
+              const pid = parseInt(readFileSync41(pidPath, "utf8").trim(), 10);
               if (pid > 0) {
                 if (process.platform === "win32") {
                   try {
@@ -66086,8 +66342,8 @@ Respond concisely and safely. Remember: you are talking to the general public.`;
         execSync33(process.platform === "win32" ? "timeout /t 1 /nobreak >nul" : "sleep 0.5", { timeout: 3e3, stdio: "ignore" });
       } catch {
       }
-      const oaPath = join68(repoRoot, OA_DIR);
-      if (existsSync51(oaPath)) {
+      const oaPath = join69(repoRoot, OA_DIR);
+      if (existsSync52(oaPath)) {
         let deleted = false;
         for (let attempt = 0; attempt < 3; attempt++) {
           try {
@@ -66468,8 +66724,8 @@ Execute this skill now. Follow the behavioral guidance above.`;
       }
     }
     const cleanPath = input.replace(/^['"]|['"]$/g, "").trim();
-    const isImage = isImagePath(cleanPath) && existsSync51(resolve32(repoRoot, cleanPath));
-    const isMedia = !isImage && isTranscribablePath(cleanPath) && existsSync51(resolve32(repoRoot, cleanPath));
+    const isImage = isImagePath(cleanPath) && existsSync52(resolve32(repoRoot, cleanPath));
+    const isMedia = !isImage && isTranscribablePath(cleanPath) && existsSync52(resolve32(repoRoot, cleanPath));
     if (activeTask) {
       if (activeTask.runner.isPaused) {
         activeTask.runner.resume();
@@ -66478,7 +66734,7 @@ Execute this skill now. Follow the behavioral guidance above.`;
       if (isImage) {
         try {
           const imgPath = resolve32(repoRoot, cleanPath);
-          const imgBuffer = readFileSync40(imgPath);
+          const imgBuffer = readFileSync41(imgPath);
           const base64 = imgBuffer.toString("base64");
           const ext = extname11(cleanPath).toLowerCase();
           const mime = ext === ".png" ? "image/png" : ext === ".gif" ? "image/gif" : ext === ".webp" ? "image/webp" : "image/jpeg";
@@ -66715,13 +66971,13 @@ NEW TASK: ${fullInput}`;
       writeContent(() => renderError(errMsg));
       if (failureStore) {
         try {
-          const { createHash: createHash6 } = await import("node:crypto");
+          const { createHash: createHash7 } = await import("node:crypto");
           failureStore.insert({
             taskId: "",
             sessionId: `${Date.now()}`,
             repoRoot,
             failureType: "runtime-error",
-            fingerprint: createHash6("sha256").update(errMsg.slice(0, 200)).digest("hex").slice(0, 16),
+            fingerprint: createHash7("sha256").update(errMsg.slice(0, 200)).digest("hex").slice(0, 16),
             filePath: null,
             errorMessage: errMsg.slice(0, 500),
             context: null,
@@ -66977,13 +67233,13 @@ async function runWithTUI(task, config, repoPath) {
     const handle = startTask(task, config, repoRoot);
     await handle.promise;
     try {
-      const ikDir = join68(repoRoot, ".oa", "identity");
-      const ikFile = join68(ikDir, "self-state.json");
+      const ikDir = join69(repoRoot, ".oa", "identity");
+      const ikFile = join69(ikDir, "self-state.json");
       let ikState;
-      if (existsSync51(ikFile)) {
-        ikState = JSON.parse(readFileSync40(ikFile, "utf8"));
+      if (existsSync52(ikFile)) {
+        ikState = JSON.parse(readFileSync41(ikFile, "utf8"));
       } else {
-        mkdirSync25(ikDir, { recursive: true });
+        mkdirSync26(ikDir, { recursive: true });
         ikState = {
           self_id: `oa-${Date.now().toString(36)}`,
           version: 1,
@@ -67005,7 +67261,7 @@ async function runWithTUI(task, config, repoPath) {
       ikState.homeostasis.coherence = Math.min(1, ikState.homeostasis.coherence + 0.05);
       ikState.session_count = (ikState.session_count || 0) + 1;
       ikState.updated_at = (/* @__PURE__ */ new Date()).toISOString();
-      writeFileSync24(ikFile, JSON.stringify(ikState, null, 2));
+      writeFileSync25(ikFile, JSON.stringify(ikState, null, 2));
     } catch (ikErr) {
     }
     try {
@@ -67014,12 +67270,12 @@ async function runWithTUI(task, config, repoPath) {
       ec.archiveVariantSync(`Task: ${task.slice(0, 200)}`, "success \u2014 completed", ["general"]);
     } catch {
       try {
-        const archeDir = join68(repoRoot, ".oa", "arche");
-        const archeFile = join68(archeDir, "variants.json");
+        const archeDir = join69(repoRoot, ".oa", "arche");
+        const archeFile = join69(archeDir, "variants.json");
         let variants = [];
         try {
-          if (existsSync51(archeFile))
-            variants = JSON.parse(readFileSync40(archeFile, "utf8"));
+          if (existsSync52(archeFile))
+            variants = JSON.parse(readFileSync41(archeFile, "utf8"));
         } catch {
         }
         variants.push({
@@ -67034,15 +67290,15 @@ async function runWithTUI(task, config, repoPath) {
         });
         if (variants.length > 50)
           variants = variants.slice(-50);
-        mkdirSync25(archeDir, { recursive: true });
-        writeFileSync24(archeFile, JSON.stringify(variants, null, 2));
+        mkdirSync26(archeDir, { recursive: true });
+        writeFileSync25(archeFile, JSON.stringify(variants, null, 2));
       } catch {
       }
     }
     try {
-      const metaFile = join68(repoRoot, ".oa", "memory", "metabolism", "store.json");
-      if (existsSync51(metaFile)) {
-        const store = JSON.parse(readFileSync40(metaFile, "utf8"));
+      const metaFile = join69(repoRoot, ".oa", "memory", "metabolism", "store.json");
+      if (existsSync52(metaFile)) {
+        const store = JSON.parse(readFileSync41(metaFile, "utf8"));
         const surfaced = store.filter((m) => m.type !== "quarantine" && m.scores?.confidence > 0.15).sort((a, b) => b.scores.utility * b.scores.confidence - a.scores.utility * a.scores.confidence).slice(0, 5);
         let updated = false;
         for (const item of surfaced) {
@@ -67053,7 +67309,7 @@ async function runWithTUI(task, config, repoPath) {
           updated = true;
         }
         if (updated) {
-          writeFileSync24(metaFile, JSON.stringify(store, null, 2));
+          writeFileSync25(metaFile, JSON.stringify(store, null, 2));
         }
       }
     } catch {
@@ -67106,9 +67362,9 @@ Rules:
           try {
             const { initDb: initDb2 } = __require("@open-agents/memory");
             const { ProceduralMemoryStore: ProceduralMemoryStore2 } = __require("@open-agents/memory");
-            const dbDir = join68(repoRoot, ".oa", "memory");
-            mkdirSync25(dbDir, { recursive: true });
-            const db = initDb2(join68(dbDir, "structured.db"));
+            const dbDir = join69(repoRoot, ".oa", "memory");
+            mkdirSync26(dbDir, { recursive: true });
+            const db = initDb2(join69(dbDir, "structured.db"));
             const memStore = new ProceduralMemoryStore2(db);
             memStore.createWithEmbedding({
               content: content.slice(0, 600),
@@ -67123,12 +67379,12 @@ Rules:
             db.close();
           } catch {
           }
-          const metaDir = join68(repoRoot, ".oa", "memory", "metabolism");
-          const storeFile = join68(metaDir, "store.json");
+          const metaDir = join69(repoRoot, ".oa", "memory", "metabolism");
+          const storeFile = join69(metaDir, "store.json");
           let store = [];
           try {
-            if (existsSync51(storeFile))
-              store = JSON.parse(readFileSync40(storeFile, "utf8"));
+            if (existsSync52(storeFile))
+              store = JSON.parse(readFileSync41(storeFile, "utf8"));
           } catch {
           }
           store.push({
@@ -67144,26 +67400,26 @@ Rules:
           });
           if (store.length > 100)
             store = store.slice(-100);
-          mkdirSync25(metaDir, { recursive: true });
-          writeFileSync24(storeFile, JSON.stringify(store, null, 2));
+          mkdirSync26(metaDir, { recursive: true });
+          writeFileSync25(storeFile, JSON.stringify(store, null, 2));
         }
       }
     } catch {
     }
     try {
-      const cohereSettingsFile = join68(repoRoot, ".oa", "settings.json");
+      const cohereSettingsFile = join69(repoRoot, ".oa", "settings.json");
       let cohereActive = false;
       try {
-        if (existsSync51(cohereSettingsFile)) {
-          const settings = JSON.parse(readFileSync40(cohereSettingsFile, "utf8"));
+        if (existsSync52(cohereSettingsFile)) {
+          const settings = JSON.parse(readFileSync41(cohereSettingsFile, "utf8"));
           cohereActive = settings.cohere === true;
         }
       } catch {
       }
       if (cohereActive) {
-        const metaFile = join68(repoRoot, ".oa", "memory", "metabolism", "store.json");
-        if (existsSync51(metaFile)) {
-          const store = JSON.parse(readFileSync40(metaFile, "utf8"));
+        const metaFile = join69(repoRoot, ".oa", "memory", "metabolism", "store.json");
+        if (existsSync52(metaFile)) {
+          const store = JSON.parse(readFileSync41(metaFile, "utf8"));
           const latest = store.filter((m) => m.sourceTrace === "trajectory-extraction" || m.sourceTrace === "llm-trajectory-extraction").slice(-1)[0];
           if (latest && latest.scores?.confidence >= 0.6) {
             try {
@@ -67188,18 +67444,18 @@ Rules:
     }
   } catch (err) {
     try {
-      const ikFile = join68(repoRoot, ".oa", "identity", "self-state.json");
-      if (existsSync51(ikFile)) {
-        const ikState = JSON.parse(readFileSync40(ikFile, "utf8"));
+      const ikFile = join69(repoRoot, ".oa", "identity", "self-state.json");
+      if (existsSync52(ikFile)) {
+        const ikState = JSON.parse(readFileSync41(ikFile, "utf8"));
         ikState.homeostasis.uncertainty = Math.min(1, ikState.homeostasis.uncertainty + 0.1);
         ikState.homeostasis.coherence = Math.max(0, ikState.homeostasis.coherence - 0.05);
         ikState.session_count = (ikState.session_count || 0) + 1;
         ikState.updated_at = (/* @__PURE__ */ new Date()).toISOString();
-        writeFileSync24(ikFile, JSON.stringify(ikState, null, 2));
+        writeFileSync25(ikFile, JSON.stringify(ikState, null, 2));
       }
-      const metaFile = join68(repoRoot, ".oa", "memory", "metabolism", "store.json");
-      if (existsSync51(metaFile)) {
-        const store = JSON.parse(readFileSync40(metaFile, "utf8"));
+      const metaFile = join69(repoRoot, ".oa", "memory", "metabolism", "store.json");
+      if (existsSync52(metaFile)) {
+        const store = JSON.parse(readFileSync41(metaFile, "utf8"));
         const surfaced = store.filter((m) => m.type !== "quarantine" && m.scores?.confidence > 0.15).sort((a, b) => b.scores.utility * b.scores.confidence - a.scores.utility * a.scores.confidence).slice(0, 5);
         for (const item of surfaced) {
           item.accessCount = (item.accessCount || 0) + 1;
@@ -67207,15 +67463,15 @@ Rules:
           item.scores.utility = Math.max(0, (item.scores.utility || 0.5) - 0.05);
           item.scores.confidence = Math.max(0, (item.scores.confidence || 0.5) - 0.02);
         }
-        writeFileSync24(metaFile, JSON.stringify(store, null, 2));
+        writeFileSync25(metaFile, JSON.stringify(store, null, 2));
       }
       try {
-        const archeDir = join68(repoRoot, ".oa", "arche");
-        const archeFile = join68(archeDir, "variants.json");
+        const archeDir = join69(repoRoot, ".oa", "arche");
+        const archeFile = join69(archeDir, "variants.json");
         let variants = [];
         try {
-          if (existsSync51(archeFile))
-            variants = JSON.parse(readFileSync40(archeFile, "utf8"));
+          if (existsSync52(archeFile))
+            variants = JSON.parse(readFileSync41(archeFile, "utf8"));
         } catch {
         }
         variants.push({
@@ -67230,8 +67486,8 @@ Rules:
         });
         if (variants.length > 50)
           variants = variants.slice(-50);
-        mkdirSync25(archeDir, { recursive: true });
-        writeFileSync24(archeFile, JSON.stringify(variants, null, 2));
+        mkdirSync26(archeDir, { recursive: true });
+        writeFileSync25(archeFile, JSON.stringify(variants, null, 2));
       } catch {
       }
     } catch {
@@ -67298,13 +67554,13 @@ __export(run_exports, {
 });
 import { resolve as resolve33 } from "node:path";
 import { spawn as spawn21 } from "node:child_process";
-import { mkdirSync as mkdirSync26, writeFileSync as writeFileSync25, readFileSync as readFileSync41, readdirSync as readdirSync21, existsSync as existsSync52 } from "node:fs";
-import { randomBytes as randomBytes16 } from "node:crypto";
-import { join as join69 } from "node:path";
+import { mkdirSync as mkdirSync27, writeFileSync as writeFileSync26, readFileSync as readFileSync42, readdirSync as readdirSync22, existsSync as existsSync53 } from "node:fs";
+import { randomBytes as randomBytes17 } from "node:crypto";
+import { join as join70 } from "node:path";
 function jobsDir2(repoPath) {
   const root = resolve33(repoPath ?? process.cwd());
-  const dir = join69(root, ".oa", "jobs");
-  mkdirSync26(dir, { recursive: true });
+  const dir = join70(root, ".oa", "jobs");
+  mkdirSync27(dir, { recursive: true });
   return dir;
 }
 async function runCommand(opts, config) {
@@ -67367,7 +67623,7 @@ function extractSummary(captured) {
   return lines.slice(-3).join(" ").slice(0, 200);
 }
 async function runBackground(task, config, opts) {
-  const id = `job-${randomBytes16(3).toString("hex")}`;
+  const id = `job-${randomBytes17(3).toString("hex")}`;
   const dir = jobsDir2(opts.repoPath);
   const repoRoot = resolve33(opts.repoPath ?? process.cwd());
   const job = {
@@ -67389,7 +67645,7 @@ async function runBackground(task, config, opts) {
   });
   child.unref();
   job.pid = child.pid ?? 0;
-  writeFileSync25(join69(dir, `${id}.json`), JSON.stringify(job, null, 2));
+  writeFileSync26(join70(dir, `${id}.json`), JSON.stringify(job, null, 2));
   let output = "";
   child.stdout?.on("data", (chunk) => {
     output += chunk.toString();
@@ -67405,7 +67661,7 @@ async function runBackground(task, config, opts) {
       job.summary = result.summary;
       job.durationMs = result.durationMs;
       job.error = result.error;
-      writeFileSync25(join69(dir, `${id}.json`), JSON.stringify(job, null, 2));
+      writeFileSync26(join70(dir, `${id}.json`), JSON.stringify(job, null, 2));
     } catch {
     }
   });
@@ -67421,13 +67677,13 @@ async function runBackground(task, config, opts) {
 }
 function statusCommand(jobId, repoPath) {
   const dir = jobsDir2(repoPath);
-  const file = join69(dir, `${jobId}.json`);
-  if (!existsSync52(file)) {
+  const file = join70(dir, `${jobId}.json`);
+  if (!existsSync53(file)) {
     console.error(`Job not found: ${jobId}`);
     console.log(`Available jobs: oa jobs`);
     process.exit(1);
   }
-  const job = JSON.parse(readFileSync41(file, "utf-8"));
+  const job = JSON.parse(readFileSync42(file, "utf-8"));
   const runtime = job.completedAt ? `${((new Date(job.completedAt).getTime() - new Date(job.startedAt).getTime()) / 1e3).toFixed(0)}s` : `${((Date.now() - new Date(job.startedAt).getTime()) / 1e3).toFixed(0)}s`;
   const icon = job.status === "completed" ? "\u2713" : job.status === "failed" ? "\u2717" : "\u25CF";
   console.log(`${icon} ${job.id} [${job.status}] ${runtime}`);
@@ -67442,7 +67698,7 @@ function statusCommand(jobId, repoPath) {
 }
 function jobsCommand(repoPath) {
   const dir = jobsDir2(repoPath);
-  const files = readdirSync21(dir).filter((f) => f.endsWith(".json")).sort();
+  const files = readdirSync22(dir).filter((f) => f.endsWith(".json")).sort();
   if (files.length === 0) {
     console.log("No jobs found.");
     return;
@@ -67450,7 +67706,7 @@ function jobsCommand(repoPath) {
   console.log("Jobs:");
   for (const file of files) {
     try {
-      const job = JSON.parse(readFileSync41(join69(dir, file), "utf-8"));
+      const job = JSON.parse(readFileSync42(join70(dir, file), "utf-8"));
       const icon = job.status === "completed" ? "\u2713" : job.status === "failed" ? "\u2717" : "\u25CF";
       const runtime = job.completedAt ? `${((new Date(job.completedAt).getTime() - new Date(job.startedAt).getTime()) / 1e3).toFixed(0)}s` : `${((Date.now() - new Date(job.startedAt).getTime()) / 1e3).toFixed(0)}s`;
       console.log(`  ${icon} ${job.id} [${job.status}] ${runtime} \u2014 ${job.task.slice(0, 60)}`);
@@ -67469,8 +67725,8 @@ var init_run = __esm({
 import { glob } from "glob";
 import ignore from "ignore";
 import { readFile as readFile23, stat as stat4 } from "node:fs/promises";
-import { createHash as createHash5 } from "node:crypto";
-import { join as join70, relative as relative4, extname as extname12, basename as basename17 } from "node:path";
+import { createHash as createHash6 } from "node:crypto";
+import { join as join71, relative as relative4, extname as extname12, basename as basename17 } from "node:path";
 var DEFAULT_EXCLUDE, LANGUAGE_MAP, CodebaseIndexer;
 var init_codebase_indexer = __esm({
   "packages/indexer/dist/codebase-indexer.js"() {
@@ -67514,7 +67770,7 @@ var init_codebase_indexer = __esm({
         const ig = ignore.default();
         if (this.config.respectGitignore) {
           try {
-            const gitignoreContent = await readFile23(join70(this.config.rootDir, ".gitignore"), "utf-8");
+            const gitignoreContent = await readFile23(join71(this.config.rootDir, ".gitignore"), "utf-8");
             ig.add(gitignoreContent);
           } catch {
           }
@@ -67529,13 +67785,13 @@ var init_codebase_indexer = __esm({
         for (const relativePath of files) {
           if (ig.ignores(relativePath))
             continue;
-          const fullPath = join70(this.config.rootDir, relativePath);
+          const fullPath = join71(this.config.rootDir, relativePath);
           try {
             const fileStat = await stat4(fullPath);
             if (fileStat.size > this.config.maxFileSize)
               continue;
             const content = await readFile23(fullPath);
-            const hash = createHash5("sha256").update(content).digest("hex");
+            const hash = createHash6("sha256").update(content).digest("hex");
             const ext = extname12(relativePath);
             indexed.push({
               path: fullPath,
@@ -67575,7 +67831,7 @@ var init_codebase_indexer = __esm({
               if (!child) {
                 child = {
                   name: part,
-                  path: join70(current.path, part),
+                  path: join71(current.path, part),
                   type: "directory",
                   children: []
                 };
@@ -67658,13 +67914,13 @@ __export(index_repo_exports, {
   indexRepoCommand: () => indexRepoCommand
 });
 import { resolve as resolve34 } from "node:path";
-import { existsSync as existsSync53, statSync as statSync16 } from "node:fs";
+import { existsSync as existsSync54, statSync as statSync16 } from "node:fs";
 import { cwd as cwd2 } from "node:process";
 async function indexRepoCommand(opts, _config) {
   const repoRoot = resolve34(opts.repoPath ?? cwd2());
   printHeader("Index Repository");
   printInfo(`Indexing: ${repoRoot}`);
-  if (!existsSync53(repoRoot)) {
+  if (!existsSync54(repoRoot)) {
     printError(`Path does not exist: ${repoRoot}`);
     process.exit(1);
   }
@@ -67916,8 +68172,8 @@ var config_exports = {};
 __export(config_exports, {
   configCommand: () => configCommand
 });
-import { join as join71, resolve as resolve35 } from "node:path";
-import { homedir as homedir18 } from "node:os";
+import { join as join72, resolve as resolve35 } from "node:path";
+import { homedir as homedir19 } from "node:os";
 import { cwd as cwd3 } from "node:process";
 function redactIfSensitive(key, value) {
   if (SENSITIVE_KEYS.has(key) && typeof value === "string" && value.length > 0) {
@@ -67999,7 +68255,7 @@ function handleShow(opts, config) {
     }
   }
   printSection("Config File");
-  printInfo(`~/.open-agents/config.json (${join71(homedir18(), ".open-agents", "config.json")})`);
+  printInfo(`~/.open-agents/config.json (${join72(homedir19(), ".open-agents", "config.json")})`);
   printSection("Priority Chain");
   printInfo("  1. CLI flags (--model, --backend-url, etc.)");
   printInfo("  2. Project .oa/settings.json (--local)");
@@ -68038,7 +68294,7 @@ function handleSet(opts, _config) {
       const coerced = coerceForSettings(key, value);
       saveProjectSettings(repoRoot, { [key]: coerced });
       printSuccess(`Project override set: ${key} = ${redactIfSensitive(key, value)}`);
-      printInfo(`Saved to ${join71(repoRoot, ".oa", "settings.json")}`);
+      printInfo(`Saved to ${join72(repoRoot, ".oa", "settings.json")}`);
       printInfo("This override applies only when running in this workspace.");
     } catch (err) {
       printError(`Failed to save: ${err instanceof Error ? err.message : String(err)}`);
@@ -68181,8 +68437,8 @@ __export(eval_exports, {
   evalCommand: () => evalCommand
 });
 import { tmpdir as tmpdir10 } from "node:os";
-import { mkdirSync as mkdirSync27, writeFileSync as writeFileSync26 } from "node:fs";
-import { join as join72 } from "node:path";
+import { mkdirSync as mkdirSync28, writeFileSync as writeFileSync27 } from "node:fs";
+import { join as join73 } from "node:path";
 async function evalCommand(opts, config) {
   const suiteName = opts.suite ?? "basic";
   const suite = SUITES[suiteName];
@@ -68307,9 +68563,9 @@ async function evalCommand(opts, config) {
   process.exit(failed > 0 ? 1 : 0);
 }
 function createTempEvalRepo() {
-  const dir = join72(tmpdir10(), `open-agents-eval-${Date.now()}`);
-  mkdirSync27(dir, { recursive: true });
-  writeFileSync26(join72(dir, "package.json"), JSON.stringify({ name: "eval-repo", version: "0.0.0" }, null, 2) + "\n", "utf8");
+  const dir = join73(tmpdir10(), `open-agents-eval-${Date.now()}`);
+  mkdirSync28(dir, { recursive: true });
+  writeFileSync27(join73(dir, "package.json"), JSON.stringify({ name: "eval-repo", version: "0.0.0" }, null, 2) + "\n", "utf8");
   return dir;
 }
 var BASIC_SUITE, FULL_SUITE, SUITES;
@@ -68369,7 +68625,7 @@ init_updater();
 import { parseArgs as nodeParseArgs2 } from "node:util";
 import { createRequire as createRequire4 } from "node:module";
 import { fileURLToPath as fileURLToPath14 } from "node:url";
-import { dirname as dirname22, join as join73 } from "node:path";
+import { dirname as dirname22, join as join74 } from "node:path";
 
 // packages/cli/dist/cli.js
 import { createInterface } from "node:readline";
@@ -68476,7 +68732,7 @@ init_output();
 function getVersion5() {
   try {
     const require2 = createRequire4(import.meta.url);
-    const pkgPath = join73(dirname22(fileURLToPath14(import.meta.url)), "..", "package.json");
+    const pkgPath = join74(dirname22(fileURLToPath14(import.meta.url)), "..", "package.json");
     const pkg = require2(pkgPath);
     return pkg.version;
   } catch {