orkestrator 2.26.3-beta → 2.28.0-beta

package/dist/client.js

@@ -131,22 +131,22 @@ __export(exports_standalone_service, {
   writeServiceConfig: () => writeServiceConfig
 });
 import { execFile } from "child_process";
-import { existsSync as existsSync3, readFileSync as readFileSync3, readlinkSync } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync3, readlinkSync } from "fs";
 import { copyFile, mkdir, readFile, rename, rm, symlink, writeFile } from "fs/promises";
-import path12 from "path";
+import path13 from "path";
 import { promisify } from "util";
 function standaloneLayout(dataDir) {
-  const root = path12.join(dataDir, STANDALONE_DIRECTORY);
+  const root = path13.join(dataDir, STANDALONE_DIRECTORY);
   return {
     root,
-    releases: path12.join(root, "releases"),
-    current: path12.join(root, "current"),
-    previous: path12.join(root, "previous"),
-    serviceFile: path12.join(root, "service.json"),
-    stateFile: path12.join(root, "launcher-state.json"),
-    restartMarker: path12.join(root, "restart-requested"),
-    launcher: path12.join(root, "launcher.js"),
-    logs: path12.join(root, "logs")
+    releases: path13.join(root, "releases"),
+    current: path13.join(root, "current"),
+    previous: path13.join(root, "previous"),
+    serviceFile: path13.join(root, "service.json"),
+    stateFile: path13.join(root, "launcher-state.json"),
+    restartMarker: path13.join(root, "restart-requested"),
+    launcher: path13.join(root, "launcher.js"),
+    logs: path13.join(root, "logs")
   };
 }
 function readJson(file) {
@@ -192,28 +192,28 @@ async function writeAtomically(file, contents) {
 }
 function linkedVersion(link) {
   try {
-    return path12.basename(readlinkSync(link));
+    return path13.basename(readlinkSync(link));
   } catch {
     return null;
   }
 }
 function releaseDirectory(layout, version) {
-  return path12.join(layout.releases, version);
+  return path13.join(layout.releases, version);
 }
 function releasePackageRoot(releaseDir) {
-  return path12.join(releaseDir, "node_modules", STANDALONE_PACKAGE);
+  return path13.join(releaseDir, "node_modules", STANDALONE_PACKAGE);
 }
 function releaseEntry(releaseDir) {
-  return path12.join(releasePackageRoot(releaseDir), "bin", "orkestrator.js");
+  return path13.join(releasePackageRoot(releaseDir), "bin", "orkestrator.js");
 }
 function releaseLauncher(releaseDir) {
-  return path12.join(releasePackageRoot(releaseDir), "bin", "orkestrator-launcher.js");
+  return path13.join(releasePackageRoot(releaseDir), "bin", "orkestrator-launcher.js");
 }
 function readReleaseManifest(releaseDir) {
-  const manifest = readJson(path12.join(releasePackageRoot(releaseDir), "package.json"));
+  const manifest = readJson(path13.join(releasePackageRoot(releaseDir), "package.json"));
   if (!manifest || typeof manifest.version !== "string")
     return null;
-  if (!existsSync3(releaseEntry(releaseDir)))
+  if (!existsSync4(releaseEntry(releaseDir)))
     return null;
   return {
     version: manifest.version,
@@ -226,11 +226,11 @@ async function installRelease(layout, version, options2) {
     return target;
   const run = options2.run ?? runFile;
   await mkdir(layout.releases, { recursive: true });
-  const staging = path12.join(layout.releases, `.staging-${version}-${process.pid}`);
+  const staging = path13.join(layout.releases, `.staging-${version}-${process.pid}`);
   await rm(staging, { recursive: true, force: true });
   await mkdir(staging, { recursive: true });
   try {
-    await writeFile(path12.join(staging, "package.json"), `${JSON.stringify({
+    await writeFile(path13.join(staging, "package.json"), `${JSON.stringify({
       name: "orkestrator-release",
       private: true,
       dependencies: { [STANDALONE_PACKAGE]: version }
@@ -4356,11 +4356,11 @@ function pinnedToolchainArtifacts(platform = process.platform, architecture = pr
 var PINNED_TOOLCHAIN_VERSIONS, PINNED_SUPPORT_TOOL_VERSIONS, PINNED_TOOL_VERSIONS, GITHUB_RELEASE_HOSTS, NPM_REGISTRY_HOSTS, GROK_DOWNLOAD_HOSTS, CODEX_RELEASE_BASE, PI_RELEASE_BASE, GH_RELEASE_BASE, OPENCODE_RELEASE_BASE, CODEX_CODE_MODE_HOST_FILE_NAME = "codex-code-mode-host", PINNED_TOOLCHAIN_ARTIFACTS;
 var init_manifest = __esm(() => {
   PINNED_TOOLCHAIN_VERSIONS = {
-    claude: "2.1.296",
-    codex: "0.162.1",
-    grok: "1.0.52",
-    opencode: "1.19.0",
-    pi: "1.2.0"
+    claude: "2.1.309",
+    codex: "0.164.0",
+    grok: "1.0.67",
+    opencode: "1.19.4",
+    pi: "1.4.0"
   };
   PINNED_SUPPORT_TOOL_VERSIONS = {
     gh: "2.102.0"
@@ -4390,23 +4390,23 @@ var init_manifest = __esm(() => {
         format: "tar.gz",
         url: `${CODEX_RELEASE_BASE}/codex-aarch64-apple-darwin.tar.gz`,
         entryPath: "codex-aarch64-apple-darwin",
-        size: 98104184,
-        sha256: "b293a0fcdd871900a44c0a4f40a1aa401b31e02854f790ebdb8bd5d1177fd1fe",
+        size: 101767166,
+        sha256: "aa8299c169d80111aac05543ad2621c9bdbedb9bc252c905fe3f5a5baf9a4142",
         allowedHosts: GITHUB_RELEASE_HOSTS
       },
       companions: [
         codexCodeModeHost("aarch64-apple-darwin", {
-          size: 23826262,
-          sha256: "1f464a2894adbc916e431b6bf19bef2cb485cf7e13e636d42578c581962b3727"
+          size: 24347400,
+          sha256: "7bc3ca697567bc884a76233999c46cb22b023b09f2d4d4ab3518f1354c64e415"
         }, {
-          size: 65374704,
-          sha256: "0960435a104cf926e18bb938b8f6f8fcdf7e27be0c8d88e1911bc22a1de7d3e6"
+          size: 68543072,
+          sha256: "416721e33af8822041dc650793512b3e58d43e0be4f3a5c6187eb4dfaad3148a"
         })
       ],
       executable: {
         fileName: "codex",
-        size: 246642624,
-        sha256: "74c6a6d263f40d65f99c27a815275f5b4ed0bcc2baecc396b4cf3255498bdfc0"
+        size: 260293200,
+        sha256: "d8990e3ee7acfbc26f91265b12a1a83f0fee40d0e0f8f1f40a37d4ec21f499cf"
       }
     },
     {
@@ -4418,23 +4418,23 @@ var init_manifest = __esm(() => {
         format: "tar.gz",
         url: `${CODEX_RELEASE_BASE}/codex-x86_64-apple-darwin.tar.gz`,
         entryPath: "codex-x86_64-apple-darwin",
-        size: 107055460,
-        sha256: "d68e39d8f62639f33f7d00656554cb9c3ef7809e664a3827e62ab3ace3c21b21",
+        size: 110491441,
+        sha256: "de6bbc013c56337f6ddd3f26dfbfd62aad5924cb68cd5ef6430538922bfa0e75",
         allowedHosts: GITHUB_RELEASE_HOSTS
       },
       companions: [
         codexCodeModeHost("x86_64-apple-darwin", {
-          size: 25706483,
-          sha256: "cd52af8a6884b18239aaf36d0c99bc990e7dcf75b0917155474ffde88a111d37"
+          size: 26213130,
+          sha256: "50f93d5413647488940aa23db9b1c822ee86f2c45fa37af34993e992c9848211"
         }, {
-          size: 69411680,
-          sha256: "a625f5f978d6e39f3d0dca669e55ac8a411dd805684f0652405d8b22b717adbc"
+          size: 72251296,
+          sha256: "067f9c14f67b02bdb984d4fc4740da14cd397da7ee60b4506eb378921afe3e7d"
         })
       ],
       executable: {
         fileName: "codex",
-        size: 266130208,
-        sha256: "f86b8cfd3de94dc70763d251da3ff292e94f4a53ad41b81faab3619a7bcb626c"
+        size: 279923568,
+        sha256: "d7e19691e0c1945612475ee8ab32e59ead55472e976b5cea1682d827d34dbba1"
       }
     },
     {
@@ -4446,23 +4446,23 @@ var init_manifest = __esm(() => {
         format: "tar.gz",
         url: `${CODEX_RELEASE_BASE}/codex-aarch64-unknown-linux-musl.tar.gz`,
         entryPath: "codex-aarch64-unknown-linux-musl",
-        size: 103595962,
-        sha256: "bf3ca2719f1143b1440fbd85c149379e696c782c50ad7991f8bfcec60b2600c1",
+        size: 106977873,
+        sha256: "29a507a2a3fd8f6cd94b96b762d281d299d15d7902dee6132d314b78cf9108eb",
         allowedHosts: GITHUB_RELEASE_HOSTS
       },
       companions: [
         codexCodeModeHost("aarch64-unknown-linux-musl", {
-          size: 26003900,
-          sha256: "1395ce9367f8acd280674dff083edf25bf221d908b8351d5bd4f3fdde9181e9a"
+          size: 26642339,
+          sha256: "0e0bdde24d5b31b05519693635baa9c4f2dc4fe7eee31c67b92155f190dd32d2"
         }, {
-          size: 66855936,
-          sha256: "f6477b0357a8cc2291d628962876ecb1a2beb872f71a1e2734363c81ff21700d"
+          size: 70117728,
+          sha256: "7d28b996b825b13ea058af67655b619a26a125d61d4fb2985694a9c4e77d2e21"
         })
       ],
       executable: {
         fileName: "codex",
-        size: 254866040,
-        sha256: "071cbe8d821cf1b02b6d8ba6c8b7991b228fcb8519dcb68a37d31222bb8cabe5"
+        size: 268045528,
+        sha256: "8813c8d8a4cea2eeba271b72ab22f49628b184b24ab18dbef06b4ce41e9a8d39"
       }
     },
     {
@@ -4474,23 +4474,23 @@ var init_manifest = __esm(() => {
         format: "tar.gz",
         url: `${CODEX_RELEASE_BASE}/codex-x86_64-unknown-linux-musl.tar.gz`,
         entryPath: "codex-x86_64-unknown-linux-musl",
-        size: 111350218,
-        sha256: "86f268d81b898f3e144c5ecff2ad2fda2c5802e042d6195b72538fe0fa125057",
+        size: 114979035,
+        sha256: "90dd0b03b28afcb7fa733a4f73b413db2916a47347efd43fb669cc1c774ee8e4",
         allowedHosts: GITHUB_RELEASE_HOSTS
       },
       companions: [
         codexCodeModeHost("x86_64-unknown-linux-musl", {
-          size: 27500770,
-          sha256: "458239ea45c1fc508d89695f180ab352f2834709a8a46929a4466f4f04399ada"
+          size: 28137475,
+          sha256: "feade7026436baa4e82e898050c7ef82a8adbd98163dc504771275b5ef224f2f"
         }, {
-          size: 74036112,
-          sha256: "ec71830690a7c0024916ee0c99fbdc635bc6e747ff665ea4f03a8389bbcb6b30"
+          size: 76997904,
+          sha256: "8ee4f472e92ac226a189e98998633b2d07f989f208515750764db660369f2926"
         })
       ],
       executable: {
         fileName: "codex",
-        size: 294415048,
-        sha256: "628e35487d888a28f0427fc37501da529dd3d81fcbad7a2c3421c1e8670d92e1"
+        size: 308139304,
+        sha256: "b93f6811d3f653f0fb83be4050d857fb9abbb111dfa2ce160563327daff7f306"
       }
     },
     {
@@ -4502,14 +4502,14 @@ var init_manifest = __esm(() => {
         format: "zip",
         url: `${OPENCODE_RELEASE_BASE}/opencode-darwin-arm64.zip`,
         entryPath: "opencode",
-        size: 45555805,
-        sha256: "0d5f511948d6fbfedf9bb16753c0ac42613dcc8de75d9deb7e8d0cf584c8fba6",
+        size: 64291659,
+        sha256: "c400a2f8c8ab7e99478a7f4dd1a466b57bf33888e520d85c55780a5464c4b689",
         allowedHosts: GITHUB_RELEASE_HOSTS
       },
       executable: {
         fileName: "opencode",
-        size: 144372192,
-        sha256: "476151a6c8b56e084d223d71a9312479e3b95547f8d8649b3489577059f9c5b4",
+        size: 180803872,
+        sha256: "417af53923f3d529759ab85ce3e8dd09116f742efcd332de591d2da6ebae696b",
         repairInvalidMacSignature: true
       }
     },
@@ -4522,14 +4522,14 @@ var init_manifest = __esm(() => {
         format: "zip",
         url: `${OPENCODE_RELEASE_BASE}/opencode-darwin-x64.zip`,
         entryPath: "opencode",
-        size: 49185262,
-        sha256: "515380b03f3410f2178c8c1c7ba6d1e9556a3bdee2a01d114e7b1681952131a0",
+        size: 69113309,
+        sha256: "123ebd72609c4f8dbae0485cdac39b9aedfeb6576b2eef64f2e73152b1de82f4",
         allowedHosts: GITHUB_RELEASE_HOSTS
       },
       executable: {
         fileName: "opencode",
-        size: 151304016,
-        sha256: "87875bda5a6156c4cff482e3799b10e65dd3cebb890d3de33adacbbeae5ef042",
+        size: 194103008,
+        sha256: "6d6a980039553a6b4efe2221fdbd5e8945abf3c2365d97fcab097713a327228f",
         repairInvalidMacSignature: true
       }
     },
@@ -4542,14 +4542,14 @@ var init_manifest = __esm(() => {
         format: "tar.gz",
         url: `${OPENCODE_RELEASE_BASE}/opencode-linux-arm64.tar.gz`,
         entryPath: "opencode",
-        size: 60493623,
-        sha256: "e9841d43d3e1a8f36ed2691592d3b8b4fb097e606c8b559a277a1b845840e26b",
+        size: 78526339,
+        sha256: "8568230ccd847dc93e95b9f6894379077d3e014a16b48040743573e77c23e85f",
         allowedHosts: GITHUB_RELEASE_HOSTS
       },
       executable: {
         fileName: "opencode",
-        size: 185247888,
-        sha256: "1e392db1d558a9eebaef618d4da3927f8b61fbcbd9a19513ed77f911142415df"
+        size: 211340280,
+        sha256: "eba0da50d9cc22f2dd062c32e0e7e58d7ece301aa50aabdad1e9dba4ffbf25b4"
       }
     },
     {
@@ -4561,14 +4561,14 @@ var init_manifest = __esm(() => {
         format: "tar.gz",
         url: `${OPENCODE_RELEASE_BASE}/opencode-linux-x64.tar.gz`,
         entryPath: "opencode",
-        size: 60685698,
-        sha256: "7bb9e61ad6feacf2e89c10a6a2c1840e3de4220bb50ba1fc7110f31806076aec",
+        size: 79667571,
+        sha256: "849bd6b3d959a1d2ef200ed1634a51c79a45ca236aa26665d75debd694805cce",
         allowedHosts: GITHUB_RELEASE_HOSTS
       },
       executable: {
         fileName: "opencode",
-        size: 185747584,
-        sha256: "135ac3f86c43f2a22328a3554fec5f0bc57d71576077902661bc38dac34871fd"
+        size: 214522032,
+        sha256: "538fcb1b6408c8d4608822acee19f7ff5b3a3eb3383c0633c4f06170857312a7"
       }
     },
     {
@@ -4580,14 +4580,14 @@ var init_manifest = __esm(() => {
         format: "tar.gz",
         url: claudeArchiveUrl("darwin-arm64"),
         entryPath: "package/claude",
-        size: 105100333,
-        sha256: "50fbf594d6526c9aae7d66b8b45a08d89ae6b863e2bc9777bfb277d6521a7458",
+        size: 122689402,
+        sha256: "0e8ce1ddb8566129661bb7698db69db89d904e23b464afc6e85d5bd8879b9a51",
         allowedHosts: NPM_REGISTRY_HOSTS
       },
       executable: {
         fileName: "claude",
-        size: 240664432,
-        sha256: "c9b5341637becbd423ddffc5b254afb645682a3868cb708bbc6cc0e7bb419937"
+        size: 275923296,
+        sha256: "5eadc0009cdcdbc0d06e58110d7b2baf88ced6088b1c33a60a21217fe410619c"
       }
     },
     {
@@ -4599,14 +4599,14 @@ var init_manifest = __esm(() => {
         format: "tar.gz",
         url: claudeArchiveUrl("darwin-x64"),
         entryPath: "package/claude",
-        size: 109248203,
-        sha256: "ec29d962f0f7c70cf8c44606ee7fbb3cd7936a33f4dc13d3c2e3664c5f0b3fc4",
+        size: 127778018,
+        sha256: "58f2fcea83ddc59839353a55dafc2a8cd084b8acb9bf7131ff7db48a28604c33",
         allowedHosts: NPM_REGISTRY_HOSTS
       },
       executable: {
         fileName: "claude",
-        size: 249194752,
-        sha256: "a6bf4f30be241053a923f3820ad23c5991d2f5ac2935b3a8dd64da218d9cc603"
+        size: 287157296,
+        sha256: "200e0d775ae55c040db3bb8db8de3e22efcddbd7e0abff5ab50dd10f6853425d"
       }
     },
     {
@@ -4618,14 +4618,14 @@ var init_manifest = __esm(() => {
         format: "tar.gz",
         url: claudeArchiveUrl("linux-arm64"),
         entryPath: "package/claude",
-        size: 115122331,
-        sha256: "56abbe1cfc85e5b37afeef5ae8b4856ddc32bbe443b82689a3b5f99992045cd1",
+        size: 133084470,
+        sha256: "3108f1bf04723cd654cf98269eb861827a15d9256db13ebf88a09d3b497926b2",
         allowedHosts: NPM_REGISTRY_HOSTS
       },
       executable: {
         fileName: "claude",
-        size: 256434168,
-        sha256: "f1f6e96e0d8342b9dbf41d7e88255397a6a52ce3d8736ad6a4c6b59c9b62fefa"
+        size: 293331128,
+        sha256: "9796dd26899337f687739a0b39a7353b639f062a3436a7b941fcf19a1b757a9b"
       }
     },
     {
@@ -4637,14 +4637,14 @@ var init_manifest = __esm(() => {
         format: "tar.gz",
         url: claudeArchiveUrl("linux-x64"),
         entryPath: "package/claude",
-        size: 114864541,
-        sha256: "eef5a2e2b09a5e7d2ce784d1b3ba335ae7fc6c7f6256c802a0ebf2c21e4fd0e1",
+        size: 132508222,
+        sha256: "e960c4437f6f99648437784db43e04ad5f12711aecd710864f96876f94c2fc1a",
         allowedHosts: NPM_REGISTRY_HOSTS
       },
       executable: {
         fileName: "claude",
-        size: 257068216,
-        sha256: "24972e3bc859fab2b46ed4c1e51f7d6130f06d3bd550811a114640de3370d0de"
+        size: 293469552,
+        sha256: "4d704a8aecbe038affa3000f498ae17c1b4f753add8facb8764120affc99b658"
       }
     },
     {
@@ -4656,14 +4656,14 @@ var init_manifest = __esm(() => {
         format: "raw",
         url: `https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-${PINNED_TOOLCHAIN_VERSIONS.grok}-macos-aarch64`,
         entryPath: "",
-        size: 172237072,
-        sha256: "c2caa9895dd763297a75e8fb6077e175d9c5304c53903e52cff8891a1384bbb9",
+        size: 177770992,
+        sha256: "036a47ce2987adae04de827f7803bf0cc460bf169b640db168f18ec7acb734db",
         allowedHosts: GROK_DOWNLOAD_HOSTS
       },
       executable: {
         fileName: "grok",
-        size: 172237072,
-        sha256: "c2caa9895dd763297a75e8fb6077e175d9c5304c53903e52cff8891a1384bbb9"
+        size: 177770992,
+        sha256: "036a47ce2987adae04de827f7803bf0cc460bf169b640db168f18ec7acb734db"
       }
     },
     {
@@ -4675,14 +4675,14 @@ var init_manifest = __esm(() => {
         format: "raw",
         url: `https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-${PINNED_TOOLCHAIN_VERSIONS.grok}-macos-x86_64`,
         entryPath: "",
-        size: 185857856,
-        sha256: "b3f1fa34d88b96cbf471005ef777028abfe7288fe61ff9876629f0bbc2cfe8a5",
+        size: 192143296,
+        sha256: "24a951871bfb7b3f6036fc1e1cd2442c664e2b2eeba58de9e8f47de4c633a03e",
         allowedHosts: GROK_DOWNLOAD_HOSTS
       },
       executable: {
         fileName: "grok",
-        size: 185857856,
-        sha256: "b3f1fa34d88b96cbf471005ef777028abfe7288fe61ff9876629f0bbc2cfe8a5"
+        size: 192143296,
+        sha256: "24a951871bfb7b3f6036fc1e1cd2442c664e2b2eeba58de9e8f47de4c633a03e"
       }
     },
     {
@@ -4694,14 +4694,14 @@ var init_manifest = __esm(() => {
         format: "raw",
         url: `https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-${PINNED_TOOLCHAIN_VERSIONS.grok}-linux-aarch64`,
         entryPath: "",
-        size: 160670952,
-        sha256: "fc32410b6883c15a39b9f33ec04a6bfb7d070b383e5dbad7efbc48c787e5050d",
+        size: 165548280,
+        sha256: "089a0acc2c1b570efcd791c5cd0f8aa074f6e8ab82c00ab78af0b934acdb6386",
         allowedHosts: GROK_DOWNLOAD_HOSTS
       },
       executable: {
         fileName: "grok",
-        size: 160670952,
-        sha256: "fc32410b6883c15a39b9f33ec04a6bfb7d070b383e5dbad7efbc48c787e5050d"
+        size: 165548280,
+        sha256: "089a0acc2c1b570efcd791c5cd0f8aa074f6e8ab82c00ab78af0b934acdb6386"
       }
     },
     {
@@ -4713,14 +4713,14 @@ var init_manifest = __esm(() => {
         format: "raw",
         url: `https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-${PINNED_TOOLCHAIN_VERSIONS.grok}-linux-x86_64`,
         entryPath: "",
-        size: 188326752,
-        sha256: "1668414b047e1050a96d25fe17dfc3efe63190fbf66d8cc1c3de8633caf50d11",
+        size: 194169184,
+        sha256: "ce33b1a29e37901f56fe59916cda7a1149e6fd377118f918e90d89f9abb52a51",
         allowedHosts: GROK_DOWNLOAD_HOSTS
       },
       executable: {
         fileName: "grok",
-        size: 188326752,
-        sha256: "1668414b047e1050a96d25fe17dfc3efe63190fbf66d8cc1c3de8633caf50d11"
+        size: 194169184,
+        sha256: "ce33b1a29e37901f56fe59916cda7a1149e6fd377118f918e90d89f9abb52a51"
       }
     },
     {
@@ -4734,18 +4734,18 @@ var init_manifest = __esm(() => {
         entryPath: "pi/pi",
         bundleRoot: "pi/",
         bundleIntegrity: {
-          fileCount: 207,
-          totalSize: 7297466,
-          sha256: "9f27ebda8fb3cac167a4d3b1aaaf8e2fbe78c79e5382cd3c3043e3903f3ffff3"
+          fileCount: 210,
+          totalSize: 7362755,
+          sha256: "8390783a7e1486f056a1dc473d43683336f1b81626ab00b51fabf98e195916ae"
         },
-        size: 31065256,
-        sha256: "abddf7688b4b6781d9113f63cd578e3c01dcdb87e71f66e7ec1c9ec6c76178d1",
+        size: 31098931,
+        sha256: "79d9979d76a2a5adb7c28e27e9b44629928ccd0dc9fbb6ae7217860bd5e8be5d",
         allowedHosts: GITHUB_RELEASE_HOSTS
       },
       executable: {
         fileName: "pi",
-        size: 77052002,
-        sha256: "87ced65c028d12e99c34a8c294a89660f5e0ef4d45f1ff0650e1e81447173870",
+        size: 77151074,
+        sha256: "b4d93b78e542ca8d1792242cf6c1a875ef4e6fb644141fb4cf67ec7c81ef9b14",
         repairInvalidMacSignature: true
       }
     },
@@ -4760,18 +4760,18 @@ var init_manifest = __esm(() => {
         entryPath: "pi/pi",
         bundleRoot: "pi/",
         bundleIntegrity: {
-          fileCount: 207,
-          totalSize: 7268226,
-          sha256: "4a6879830478526c035f601b01e4c95163ad0e9941a70df64bdc8efe9842af2f"
+          fileCount: 210,
+          totalSize: 7333515,
+          sha256: "c4af61868d7cc22df475c17b35433d3a4ecc553a4183b869602a120d80673f7f"
         },
-        size: 33524998,
-        sha256: "e079ff016ae78279cfbd6c1b4fffe072162f4a7bb879ad61b04e2e43bcc53455",
+        size: 33558360,
+        sha256: "1bdefc9e1074c1de458ea9f2e43e6013ce49cd05326009b3de144037036585e2",
         allowedHosts: GITHUB_RELEASE_HOSTS
       },
       executable: {
         fileName: "pi",
-        size: 82673744,
-        sha256: "35f548e0dceb711dd1c7057a8fe2a7076869670d69e974fadf6ec65a944ca577",
+        size: 82772048,
+        sha256: "b8e0bd3c24cd8f91a6cf37aa7cecbc3a931702cbffd0f709b26d5a79daeaa48a",
         repairInvalidMacSignature: true
       }
     },
@@ -4786,18 +4786,18 @@ var init_manifest = __esm(() => {
         entryPath: "pi/pi",
         bundleRoot: "pi/",
         bundleIntegrity: {
-          fileCount: 207,
-          totalSize: 7312682,
-          sha256: "4f2b444d120d9270b695d9a8d435ab3e0f2be28d299e0b55d3e4e935c45b0a83"
+          fileCount: 210,
+          totalSize: 7377971,
+          sha256: "8180603c37f66e67aacb554e3a0063ff2c99f8f53592386b9aec9a7465eb9347"
         },
-        size: 42704946,
-        sha256: "d8597ee3a2050592d38e67f6b609ab55139deed7e820020d910d84f17bb7abd6",
+        size: 42745801,
+        sha256: "fa5829c7ef83ffeaebba015715c8306220f89b2aa8a00154efbba98dd5440156",
         allowedHosts: GITHUB_RELEASE_HOSTS
       },
       executable: {
         fileName: "pi",
-        size: 107194512,
-        sha256: "8f9ba126d73ffa86df7b3c8454ab66d93c394c65dd4f6bafe250f3787515ee57"
+        size: 107260048,
+        sha256: "26507c6bbf0beef1c5ef109dea333ddb73c058f9f75fed1de13f4186d73e919e"
       }
     },
     {
@@ -4811,18 +4811,18 @@ var init_manifest = __esm(() => {
         entryPath: "pi/pi",
         bundleRoot: "pi/",
         bundleIntegrity: {
-          fileCount: 207,
-          totalSize: 7263450,
-          sha256: "f2f74e110b984a2220507c84d3ebca3bb016a05b0e14f47f5607dcf28d71de5e"
+          fileCount: 210,
+          totalSize: 7328739,
+          sha256: "1c96ce5e0a7a4d61b3015cb62cfdd09d04e25289c056b33787659c3d41dcc9a8"
         },
-        size: 42611136,
-        sha256: "00fc36cffdebceea5a48230da62cf3fb463178f8fe185766652f96002a246847",
+        size: 42645744,
+        sha256: "f2e4e4329603223d03260cdb8bd5033dbdc1f73ba58ab8939db2e56546e115d2",
         allowedHosts: GITHUB_RELEASE_HOSTS
       },
       executable: {
         fileName: "pi",
-        size: 107141248,
-        sha256: "0da162bafd73665b3c0d3bb7ba87f873b6c79dcd4887a4eb001cc4c81c3282b8"
+        size: 107231360,
+        sha256: "0d7611d0b86d38ec8f65dda8e8bee9c5e907c7bae381e9cfff9161b21e8087d0"
       }
     },
     ghArtifact("darwin", "arm64", {
@@ -4876,26 +4876,26 @@ import {
   symlink as symlink2,
   utimes
 } from "fs/promises";
-import path14 from "path";
+import path15 from "path";
 import { pipeline } from "stream/promises";
 import { createGunzip } from "zlib";
 function delay(milliseconds) {
   return new Promise((resolve) => setTimeout(resolve, milliseconds));
 }
 function artifactDirectory(rootDir, artifact) {
-  return path14.join(rootDir, artifact.name, artifact.version, `${artifact.platform}-${artifact.architecture}`);
+  return path15.join(rootDir, artifact.name, artifact.version, `${artifact.platform}-${artifact.architecture}`);
 }
 function artifactExecutablePath(rootDir, artifact) {
-  return path14.join(artifactDirectory(rootDir, artifact), artifact.executable.fileName);
+  return path15.join(artifactDirectory(rootDir, artifact), artifact.executable.fileName);
 }
 function upstreamExecutablePath(rootDir, artifact) {
-  return path14.join(artifactDirectory(rootDir, artifact), `.upstream-${artifact.executable.fileName}`);
+  return path15.join(artifactDirectory(rootDir, artifact), `.upstream-${artifact.executable.fileName}`);
 }
 function artifactCompanions(artifact) {
   return artifact.companions ?? [];
 }
 function companionPath(rootDir, artifact, companion) {
-  return path14.join(artifactDirectory(rootDir, artifact), companion.fileName);
+  return path15.join(artifactDirectory(rootDir, artifact), companion.fileName);
 }
 function artifactArchiveBytes(artifact) {
   return artifactCompanions(artifact).reduce((total, companion) => total + companion.archive.size, artifact.archive.size);
@@ -4919,7 +4919,7 @@ function assertValidArtifactMetadata(artifact) {
     }
     const paths = new Set;
     for (const file of artifact.archive.bundleFiles) {
-      const normalized = path14.posix.normalize(file.path);
+      const normalized = path15.posix.normalize(file.path);
       if (normalized !== file.path || normalized.startsWith("../") || normalized.startsWith("/") || normalized.includes("\\") || paths.has(normalized) || !Number.isSafeInteger(file.size) || file.size < 1 || !/^[a-f0-9]{64}$/.test(file.sha256)) {
         throw new Error(`${artifact.name} manifest has an unsafe bundle file`);
       }
@@ -4945,7 +4945,7 @@ function assertValidArtifactMetadata(artifact) {
   }
   const activationNames = new Set([artifact.name, artifact.executable.fileName]);
   for (const alias of artifact.activationAliases ?? []) {
-    if (!alias || alias.startsWith(".") || alias.includes("/") || alias.includes("\\") || alias !== path14.basename(alias) || activationNames.has(alias)) {
+    if (!alias || alias.startsWith(".") || alias.includes("/") || alias.includes("\\") || alias !== path15.basename(alias) || activationNames.has(alias)) {
       throw new Error(`${artifact.name} manifest has an unsafe or duplicate activation alias`);
     }
     activationNames.add(alias);
@@ -4955,7 +4955,7 @@ function assertValidArtifactMetadata(artifact) {
     if (companion.archive.format !== "zip" && companion.archive.format !== "tar.gz") {
       throw new Error(`${artifact.name} companion has an unsupported archive format`);
     }
-    if (!companion.fileName || companion.fileName.startsWith(".") || companion.fileName.includes("/") || companion.fileName.includes("\\") || companion.fileName !== path14.basename(companion.fileName)) {
+    if (!companion.fileName || companion.fileName.startsWith(".") || companion.fileName.includes("/") || companion.fileName.includes("\\") || companion.fileName !== path15.basename(companion.fileName)) {
       throw new Error(`${artifact.name} companion has an unsafe file name`);
     }
     if (companionNames.has(companion.fileName)) {
@@ -5021,7 +5021,7 @@ async function isValidExecutable(rootDir, artifact) {
     if (!await isValidUpstreamExecutable(rootDir, artifact))
       return false;
     for (const bundled of artifact.archive.bundleFiles ?? []) {
-      if (!await isValidFile(path14.join(artifactDirectory(rootDir, artifact), ...bundled.path.split("/")), bundled)) {
+      if (!await isValidFile(path15.join(artifactDirectory(rootDir, artifact), ...bundled.path.split("/")), bundled)) {
         return false;
       }
     }
@@ -5038,7 +5038,7 @@ async function isValidExecutable(rootDir, artifact) {
     if ((file.mode & 511) !== 320)
       await chmod(executablePath, 320);
     for (const bundled of artifact.archive.bundleFiles ?? []) {
-      if (!await isValidFile(path14.join(artifactDirectory(rootDir, artifact), ...bundled.path.split("/")), bundled)) {
+      if (!await isValidFile(path15.join(artifactDirectory(rootDir, artifact), ...bundled.path.split("/")), bundled)) {
         return false;
       }
     }
@@ -5059,7 +5059,7 @@ async function bundleTreeEntries(directory, artifact) {
   const visit = async (currentDirectory, prefix = "") => {
     for (const entry of await readdir2(currentDirectory, { withFileTypes: true })) {
       const relativePath = prefix ? `${prefix}/${entry.name}` : entry.name;
-      const filePath = path14.join(currentDirectory, entry.name);
+      const filePath = path15.join(currentDirectory, entry.name);
       if (entry.isDirectory()) {
         await visit(filePath, relativePath);
       } else if (entry.isFile() && !entry.isSymbolicLink()) {
@@ -5174,7 +5174,7 @@ async function initializeInstallLock(lockPath, owner, openLockFile) {
   }
 }
 async function acquireInstallLock(rootDir, onProgress, timings, openLockFile, ownerProcessExists) {
-  const lockPath = path14.join(rootDir, INSTALL_LOCK);
+  const lockPath = path15.join(rootDir, INSTALL_LOCK);
   const startedAt = Date.now();
   let announcedWait = false;
   while (Date.now() - startedAt < timings.lockWaitTimeoutMs) {
@@ -5355,8 +5355,8 @@ async function extractTarGzipBundle(archivePath, destinationDirectory, label, ar
       stream.resume();
       return;
     }
-    const normalized = path14.posix.normalize(relative);
-    if (normalized.startsWith("../") || normalized.startsWith("/") || normalized.includes("\\") || path14.isAbsolute(normalized)) {
+    const normalized = path15.posix.normalize(relative);
+    if (normalized.startsWith("../") || normalized.startsWith("/") || normalized.includes("\\") || path15.isAbsolute(normalized)) {
       extract2.destroy(new Error(`Unsafe path in ${label} bundle`));
       stream.resume();
       return;
@@ -5368,7 +5368,7 @@ async function extractTarGzipBundle(archivePath, destinationDirectory, label, ar
       stream.resume();
       return;
     }
-    const destination = path14.join(destinationDirectory, ...normalized.split("/"));
+    const destination = path15.join(destinationDirectory, ...normalized.split("/"));
     if (header.type === "directory") {
       stream.once("end", next);
       stream.resume();
@@ -5386,7 +5386,7 @@ async function extractTarGzipBundle(archivePath, destinationDirectory, label, ar
     }
     if (header.name === archive.entryPath)
       foundExecutable = true;
-    mkdir3(path14.dirname(destination), { recursive: true, mode: 448 }).then(() => pipeline(stream, createWriteStream(destination, {
+    mkdir3(path15.dirname(destination), { recursive: true, mode: 448 }).then(() => pipeline(stream, createWriteStream(destination, {
       flags: "wx",
       mode: (header.mode ?? 0) & 73 ? 320 : 256
     }))).then(() => next(), (error) => extract2.destroy(error instanceof Error ? error : new Error(String(error))));
@@ -5548,7 +5548,7 @@ async function repairInvalidMacSignature(executablePath, artifact, timeoutMs, sp
   await runCodesign(["--sign", "-", "--force", executablePath], `${artifact.name} could not be ad-hoc signed after source verification`, timeoutMs, spawnProcess);
 }
 async function prepareRepairableExecutable(sourcePath, executablePath, artifact, skipExecutableProbeForTests, processTimeoutMs, spawnProcess) {
-  const temporaryPath = path14.join(path14.dirname(executablePath), `.repair-${artifact.executable.fileName}-${randomUUID4()}.tmp`);
+  const temporaryPath = path15.join(path15.dirname(executablePath), `.repair-${artifact.executable.fileName}-${randomUUID4()}.tmp`);
   try {
     await copyFile2(sourcePath, temporaryPath);
     await chmod(temporaryPath, 448);
@@ -5580,8 +5580,8 @@ async function refreshRepairableArtifact(rootDir, artifact, skipExecutableProbeF
 async function stageCompanions(stagingDirectory, artifact, companions, fetchImpl, onBytes, startBytes, allowInsecureDownloadsForTests, skipExecutableProbeForTests, timings, spawnProcess) {
   let downloadedBytes = startBytes;
   for (const companion of companions) {
-    const companionArchivePath = path14.join(stagingDirectory, `.archive-${companion.fileName}.${archiveExtension(companion.archive)}`);
-    const companionFilePath = path14.join(stagingDirectory, companion.fileName);
+    const companionArchivePath = path15.join(stagingDirectory, `.archive-${companion.fileName}.${archiveExtension(companion.archive)}`);
+    const companionFilePath = path15.join(stagingDirectory, companion.fileName);
     const precedingBytes = downloadedBytes;
     await downloadArchive(companion.fileName, companion.archive, companionArchivePath, fetchImpl, (received) => onBytes(precedingBytes + received), allowInsecureDownloadsForTests, timings.downloadTimeoutMs);
     downloadedBytes += companion.archive.size;
@@ -5606,28 +5606,28 @@ async function stageCompanions(stagingDirectory, artifact, companions, fetchImpl
   }
 }
 async function repairArtifactCompanions(rootDir, artifact, companions, fetchImpl, onBytes, onVerify, allowInsecureDownloadsForTests, skipExecutableProbeForTests, timings, spawnProcess) {
-  const stagingDirectory = await mkdtemp2(path14.join(rootDir, `.staging-${artifact.name}-`));
+  const stagingDirectory = await mkdtemp2(path15.join(rootDir, `.staging-${artifact.name}-`));
   try {
     await stageCompanions(stagingDirectory, artifact, companions, fetchImpl, onBytes, 0, allowInsecureDownloadsForTests, skipExecutableProbeForTests, timings, spawnProcess);
     onVerify();
     const destinationDirectory = artifactDirectory(rootDir, artifact);
     for (const companion of companions) {
-      await rename2(path14.join(stagingDirectory, companion.fileName), path14.join(destinationDirectory, companion.fileName));
+      await rename2(path15.join(stagingDirectory, companion.fileName), path15.join(destinationDirectory, companion.fileName));
     }
   } finally {
     await rm3(stagingDirectory, { recursive: true, force: true });
   }
 }
 async function installArtifact(rootDir, artifact, fetchImpl, onBytes, onVerify, allowInsecureDownloadsForTests, skipExecutableProbeForTests, timings, spawnProcess) {
-  const stagingDirectory = await mkdtemp2(path14.join(rootDir, `.staging-${artifact.name}-`));
-  const archivePath = path14.join(stagingDirectory, `archive.${archiveExtension(artifact.archive)}`);
-  const executablePath = path14.join(stagingDirectory, artifact.executable.fileName);
-  const extractedPath = artifact.executable.repairInvalidMacSignature ? path14.join(stagingDirectory, `.upstream-${artifact.executable.fileName}`) : executablePath;
+  const stagingDirectory = await mkdtemp2(path15.join(rootDir, `.staging-${artifact.name}-`));
+  const archivePath = path15.join(stagingDirectory, `archive.${archiveExtension(artifact.archive)}`);
+  const executablePath = path15.join(stagingDirectory, artifact.executable.fileName);
+  const extractedPath = artifact.executable.repairInvalidMacSignature ? path15.join(stagingDirectory, `.upstream-${artifact.executable.fileName}`) : executablePath;
   try {
     await downloadArchive(artifact.name, artifact.archive, archivePath, fetchImpl, onBytes, allowInsecureDownloadsForTests, timings.downloadTimeoutMs);
     if (artifact.archive.bundleRoot) {
       await extractTarGzipBundle(archivePath, stagingDirectory, artifact.name, artifact.archive);
-      const bundledExecutable = path14.join(stagingDirectory, ...artifact.archive.entryPath.slice(artifact.archive.bundleRoot.length).split("/"));
+      const bundledExecutable = path15.join(stagingDirectory, ...artifact.archive.entryPath.slice(artifact.archive.bundleRoot.length).split("/"));
       if (bundledExecutable !== extractedPath) {
         await rename2(bundledExecutable, extractedPath);
       }
@@ -5678,7 +5678,7 @@ async function installArtifact(rootDir, artifact, fetchImpl, onBytes, onVerify,
     await stageCompanions(stagingDirectory, artifact, artifactCompanions(artifact), fetchImpl, onBytes, artifact.archive.size, allowInsecureDownloadsForTests, skipExecutableProbeForTests, timings, spawnProcess);
     onVerify();
     const destinationDirectory = artifactDirectory(rootDir, artifact);
-    await mkdir3(path14.dirname(destinationDirectory), { recursive: true, mode: 448 });
+    await mkdir3(path15.dirname(destinationDirectory), { recursive: true, mode: 448 });
     await rm3(destinationDirectory, { recursive: true, force: true });
     await rename2(stagingDirectory, destinationDirectory);
     await chmod(destinationDirectory, 448);
@@ -5690,16 +5690,16 @@ async function installArtifact(rootDir, artifact, fetchImpl, onBytes, onVerify,
 }
 async function cleanStagingDirectories(rootDir) {
   const entries = await readdir2(rootDir, { withFileTypes: true });
-  await Promise.all(entries.filter((entry) => entry.isDirectory() && entry.name.startsWith(".staging-")).map((entry) => rm3(path14.join(rootDir, entry.name), { recursive: true, force: true })));
+  await Promise.all(entries.filter((entry) => entry.isDirectory() && entry.name.startsWith(".staging-")).map((entry) => rm3(path15.join(rootDir, entry.name), { recursive: true, force: true })));
 }
 async function touchArtifactDirectory(rootDir, artifact) {
   const now = new Date;
-  await utimes(path14.dirname(artifactDirectory(rootDir, artifact)), now, now).catch(() => {
+  await utimes(path15.dirname(artifactDirectory(rootDir, artifact)), now, now).catch(() => {
     return;
   });
 }
 function versionLeaseDirectory(rootDir, name, version) {
-  return path14.join(rootDir, LEASE_DIRECTORY, name, version);
+  return path15.join(rootDir, LEASE_DIRECTORY, name, version);
 }
 async function acquireVersionLease(rootDir, artifact, openLeaseFile) {
   const leaseKey = `${rootDir}\x00${artifact.name}\x00${artifact.version}`;
@@ -5714,7 +5714,7 @@ async function acquireVersionLease(rootDir, artifact, openLeaseFile) {
   };
   const directory = versionLeaseDirectory(rootDir, artifact.name, artifact.version);
   await mkdir3(directory, { recursive: true, mode: 448 });
-  const leasePath = path14.join(directory, `${owner.pid}-${owner.token}.json`);
+  const leasePath = path15.join(directory, `${owner.pid}-${owner.token}.json`);
   const handle = await openLeaseFile(leasePath, "wx", 384);
   try {
     await handle.writeFile(JSON.stringify(owner), "utf8");
@@ -5735,7 +5735,7 @@ async function versionHasLiveLease(rootDir, name, version, ownerProcessExists) {
   const entries = await readdir2(directory, { withFileTypes: true }).catch(() => []);
   let live = false;
   await Promise.all(entries.filter((entry) => entry.isFile()).map(async (entry) => {
-    const leasePath = path14.join(directory, entry.name);
+    const leasePath = path15.join(directory, entry.name);
     try {
       const parsed = JSON.parse(await readFile2(leasePath, "utf8"));
       if (typeof parsed.token === "string" && typeof parsed.pid === "number" && typeof parsed.createdAt === "string" && ownerProcessExists(parsed.pid)) {
@@ -5758,11 +5758,11 @@ async function pruneSupersededVersions(rootDir, artifacts, retainSupersededMs, o
   }
   const staleBefore = Date.now() - retainSupersededMs;
   await Promise.all(Array.from(keepByName, async ([name, keep]) => {
-    const toolDir = path14.join(rootDir, name);
+    const toolDir = path15.join(rootDir, name);
     try {
       const entries = await readdir2(toolDir, { withFileTypes: true });
       await Promise.all(entries.filter((entry) => entry.isDirectory() && !keep.has(entry.name)).map(async (entry) => {
-        const versionDir = path14.join(toolDir, entry.name);
+        const versionDir = path15.join(toolDir, entry.name);
         try {
           if ((await stat2(versionDir)).mtimeMs > staleBefore)
             return;
@@ -5803,8 +5803,8 @@ function activationSetId(artifacts) {
   return createHash4("sha256").update(JSON.stringify(identity)).digest("hex");
 }
 async function activateExecutables(rootDir, artifacts) {
-  const binRoot = path14.join(rootDir, "bin");
-  const binDir = path14.join(binRoot, activationSetId(artifacts));
+  const binRoot = path15.join(rootDir, "bin");
+  const binDir = path15.join(binRoot, activationSetId(artifacts));
   await mkdir3(binRoot, { recursive: true, mode: 448 });
   const binRootEntry = await lstat(binRoot);
   if (!binRootEntry.isDirectory() || binRootEntry.isSymbolicLink()) {
@@ -5819,8 +5819,8 @@ async function activateExecutables(rootDir, artifacts) {
   await chmod(binDir, 448);
   const executables = {};
   const activate = async (linkName, target) => {
-    const activePath = path14.join(binDir, linkName);
-    const temporaryLink = path14.join(binDir, `.${linkName}-${randomUUID4()}.tmp`);
+    const activePath = path15.join(binDir, linkName);
+    const temporaryLink = path15.join(binDir, `.${linkName}-${randomUUID4()}.tmp`);
     const existingTarget = await readlink(activePath).catch(() => null);
     if (existingTarget !== target) {
       await symlink2(target, temporaryLink, "file");
@@ -5868,7 +5868,7 @@ async function ensurePinnedToolchains(options2) {
   const timings = { ...DEFAULT_TIMINGS, ...options2.timingsForTests };
   const spawnProcess = options2.spawnForTests ?? spawn;
   const ownerProcessExists = options2.processExistsForTests ?? ((pid) => processExists(pid, options2.processKillForTests));
-  const rootDir = path14.join(options2.dataDir, TOOLCHAIN_DIRECTORY);
+  const rootDir = path15.join(options2.dataDir, TOOLCHAIN_DIRECTORY);
   const totalTools = artifacts.length;
   const toolFractions = new Map(artifacts.map((artifact) => [artifact.name, 0]));
   const progress = (value) => {
@@ -6033,7 +6033,7 @@ var init_agent_platforms = __esm(() => {
 
 // ../toolchain/src/platform-selection.ts
 import { promises as fs7 } from "fs";
-import path15 from "path";
+import path16 from "path";
 async function readJsonFile(filePath) {
   try {
     return JSON.parse(await fs7.readFile(filePath, "utf8"));
@@ -6042,7 +6042,7 @@ async function readJsonFile(filePath) {
   }
 }
 async function loadAgentPlatformSelection(dataDir) {
-  const config = await readJsonFile(path15.join(dataDir, AGENT_CONFIG_FILE));
+  const config = await readJsonFile(path16.join(dataDir, AGENT_CONFIG_FILE));
   if (config && typeof config === "object" && !Array.isArray(config)) {
     const global2 = config.global;
     if (global2 && typeof global2 === "object" && !Array.isArray(global2)) {
@@ -6058,7 +6058,7 @@ async function loadAgentPlatformSelection(dataDir) {
       needsFirstRunChoice: false
     };
   }
-  const sidecar = await readJsonFile(path15.join(dataDir, AGENT_PLATFORM_SELECTION_FILE));
+  const sidecar = await readJsonFile(path16.join(dataDir, AGENT_PLATFORM_SELECTION_FILE));
   if (sidecar && typeof sidecar === "object" && !Array.isArray(sidecar)) {
     const enabled = normalizeAgentPlatforms(sidecar.enabled, []);
     if (enabled.length > 0)
@@ -6074,7 +6074,7 @@ var init_platform_selection = __esm(() => {
 // ../toolchain/src/install.ts
 import { randomUUID as randomUUID5 } from "crypto";
 import { lstat as lstat2, mkdir as mkdir4, readdir as readdir3, readlink as readlink2, rename as rename3, rm as rm4, symlink as symlink3 } from "fs/promises";
-import path16 from "path";
+import path17 from "path";
 async function resolveToolchainSelection(options2) {
   const known = Object.keys(PINNED_TOOL_VERSIONS);
   const withSupportTools = (chosen) => known.filter((name) => chosen.has(name) || isSupportToolName(name));
@@ -6133,16 +6133,16 @@ async function installPinnedToolchains(options2) {
   };
 }
 async function toolsInCurrent(rootDir) {
-  const entries = await readdir3(path16.join(rootDir, "bin", CURRENT_TOOLCHAIN_LINK)).catch(() => []);
+  const entries = await readdir3(path17.join(rootDir, "bin", CURRENT_TOOLCHAIN_LINK)).catch(() => []);
   return Object.keys(PINNED_TOOL_VERSIONS).filter((tool) => entries.includes(tool));
 }
 async function pointCurrentAt(rootDir, binDir) {
-  const binRoot = path16.join(rootDir, "bin");
-  if (path16.dirname(binDir) !== binRoot) {
+  const binRoot = path17.join(rootDir, "bin");
+  if (path17.dirname(binDir) !== binRoot) {
     throw new Error(`Activation directory ${binDir} is not directly inside ${binRoot}`);
   }
-  const link = path16.join(binRoot, CURRENT_TOOLCHAIN_LINK);
-  const target = path16.basename(binDir);
+  const link = path17.join(binRoot, CURRENT_TOOLCHAIN_LINK);
+  const target = path17.basename(binDir);
   await mkdir4(binRoot, { recursive: true, mode: 448 });
   const existing = await lstat2(link).catch(() => null);
   if (existing && !existing.isSymbolicLink()) {
@@ -6150,7 +6150,7 @@ async function pointCurrentAt(rootDir, binDir) {
   }
   if (existing && await readlink2(link) === target)
     return link;
-  const temporary = path16.join(binRoot, `.${CURRENT_TOOLCHAIN_LINK}-${randomUUID5()}.tmp`);
+  const temporary = path17.join(binRoot, `.${CURRENT_TOOLCHAIN_LINK}-${randomUUID5()}.tmp`);
   await symlink3(target, temporary, "dir");
   try {
     await rename3(temporary, link);
@@ -7444,7 +7444,7 @@ import path4 from "path";
 // ../../apps/backend/package.json
 var package_default = {
   name: "@orkestrator/backend",
-  version: "2.26.3-beta",
+  version: "2.28.0-beta",
   private: true,
   type: "module",
   exports: {
@@ -7464,7 +7464,7 @@ var package_default = {
   dependencies: {
     "@modelcontextprotocol/node": "2.1.1",
     "@modelcontextprotocol/server": "2.3.1",
-    "@opencode-ai/sdk": "1.19.0",
+    "@opencode-ai/sdk": "1.19.4",
     "@orkestrator/protocol": "workspace:*",
     "@orkestrator/toolchain": "workspace:*",
     "@xterm/addon-serialize": "0.14.0",
@@ -7508,6 +7508,7 @@ var DEFAULT_ALLOWED_DOMAINS = Object.freeze([
 var AGENT_NETWORK_DOMAINS_BY_PLATFORM = Object.freeze({
   codex: Object.freeze(["chatgpt.com", "auth.openai.com"]),
   cursor: Object.freeze([
+    "api.cursor.com",
     "api2.cursor.sh",
     "api3.cursor.sh",
     "api4.cursor.sh",
@@ -8257,6 +8258,10 @@ function defaultSleep(ms, signal) {
 function signalName(signal) {
   return signal?.reason === "SIGTERM" ? "SIGTERM" : "SIGINT";
 }
+function throwIfInterrupted(signal) {
+  if (signal?.aborted)
+    throw new CliError("observation-interrupted", "Interrupted");
+}
 async function observe(check, options2) {
   if (options2.timeoutMs > PUBLIC_API_LIMITS.waitMaxMs) {
     throw new CliError("invalid-input", "--timeout may be at most 24h");
@@ -10859,18 +10864,185 @@ var hostCommands = [
 
 // src/client/commands/service.ts
 import { spawnSync } from "child_process";
-import { existsSync as existsSync4 } from "fs";
+import { existsSync as existsSync5 } from "fs";
 import { mkdir as mkdir2, rm as rm2, writeFile as writeFile2 } from "fs/promises";
-import path13 from "path";
+import path14 from "path";
+
+// src/client/service-connection.ts
+import path11 from "path";
+async function currentDescriptorGeneration(dataDir) {
+  try {
+    return (await readDescriptor(path11.join(dataDir, BACKEND_INSTANCE_DESCRIPTOR_FILE))).generation;
+  } catch {
+    return null;
+  }
+}
+async function awaitServiceConnection(dataDir, previousGeneration, options2) {
+  const file = path11.join(dataDir, BACKEND_INSTANCE_DESCRIPTOR_FILE);
+  try {
+    const descriptor = await observe(async () => {
+      try {
+        const value = await readDescriptor(file);
+        const fresh = value.generation !== previousGeneration && path11.resolve(value.dataDir) === path11.resolve(dataDir) && processIsAlive(value.pid);
+        return fresh ? { done: true, value } : { done: false };
+      } catch {
+        return { done: false };
+      }
+    }, options2);
+    const connection = {
+      browserUrl: descriptor.browserUrl ?? (isLoopbackHost(new URL(descriptor.url).hostname) || descriptor.endpoints?.some((endpoint) => endpoint.url === descriptor.url) ? null : descriptor.url),
+      authFile: descriptor.authFile,
+      token: null
+    };
+    try {
+      connection.token = await readTokenFile(descriptor.authFile, true);
+    } catch (error) {
+      if (!(error instanceof CliError))
+        throw error;
+      connection.credentialError = error.message;
+    }
+    throwIfInterrupted(options2.signal);
+    return connection;
+  } catch (error) {
+    if (error instanceof ObservationStopped) {
+      if (error.reason === "deadline")
+        return null;
+      throw new CliError("observation-interrupted", "Stopped waiting for the backend to start");
+    }
+    throw error;
+  }
+}
+
+// src/client/service-setup.ts
+import { existsSync as existsSync3 } from "fs";
+import os5 from "os";
+var HOSTED_WEB_ORIGINS = "https://orkestrator.dev,https://www.orkestrator.dev";
+var SSH_LOOPBACK_PORT = "34125";
+var MACOS_TAILSCALE_APP_CLI = "/Applications/Tailscale.app/Contents/MacOS/Tailscale";
+var systemSetupProbe = {
+  hasTailscaleAddress: () => Object.values(os5.networkInterfaces()).some((entries) => (entries ?? []).some((entry) => entry.family === "IPv4" && isTailscaleIPv4(entry.address))),
+  findTailscaleCli: () => {
+    if (process.platform === "darwin" && existsSync3(MACOS_TAILSCALE_APP_CLI)) {
+      return MACOS_TAILSCALE_APP_CLI;
+    }
+    return typeof Bun === "undefined" ? null : Bun.which("tailscale");
+  }
+};
+function isTailscaleIPv4(address) {
+  const [first, second] = address.split(".").map(Number);
+  return first === 100 && second !== undefined && second >= 64 && second <= 127;
+}
+function cancelled() {
+  return new CliError("invalid-input", "Setup cancelled; nothing was installed");
+}
+async function ask(io, prompt) {
+  const answer = await io.question(prompt);
+  if (answer === null)
+    throw cancelled();
+  return answer.trim();
+}
+async function choose(io, title, choices) {
+  io.stderr(`${title}
+`);
+  choices.forEach((choice, index) => io.stderr(`  ${index + 1}) ${choice.label}
+`));
+  for (;; ) {
+    const answer = await ask(io, `Choose 1-${choices.length} [1]: `);
+    if (answer === "")
+      return choices[0].value;
+    const picked = choices[Number(answer) - 1];
+    if (/^\d+$/.test(answer) && picked)
+      return picked.value;
+    io.stderr(`Enter a number from 1 to ${choices.length}.
+`);
+  }
+}
+async function confirm(io, prompt, fallback) {
+  for (;; ) {
+    const answer = (await ask(io, `${prompt} ${fallback ? "[Y/n]" : "[y/N]"} `)).toLowerCase();
+    if (answer === "")
+      return fallback;
+    if (answer === "y" || answer === "yes")
+      return true;
+    if (answer === "n" || answer === "no")
+      return false;
+    io.stderr(`Answer y or n.
+`);
+  }
+}
+function quote(arg) {
+  return /^[\w@%+=:,./-]+$/.test(arg) ? arg : `'${arg.replaceAll("'", `'\\''`)}'`;
+}
+async function askServeArguments(io, options2) {
+  const source = io;
+  io = {
+    ...source,
+    question: async (prompt) => {
+      throwIfInterrupted(options2.signal);
+      const answer = await source.question(prompt, options2.signal);
+      throwIfInterrupted(options2.signal);
+      return answer;
+    }
+  };
+  throwIfInterrupted(options2.signal);
+  const probe = options2.probe ?? systemSetupProbe;
+  io.stderr(`Set up the Orkestrator backend service.
+
+`);
+  const access = await choose(io, "How will you connect to this machine?", [
+    {
+      value: "serve",
+      label: "Tailscale with HTTPS (Tailscale Serve): the desktop app, the CLI and orkestrator.dev"
+    },
+    { value: "tailnet", label: "Tailscale address over HTTP: the desktop app and the CLI" },
+    { value: "ssh", label: "SSH only: the desktop app through an SSH tunnel, no Tailscale" }
+  ]);
+  const args = [];
+  if (access === "ssh")
+    args.push("--host", "127.0.0.1", "--allow-non-tailscale-bind");
+  if (access !== "ssh" && !probe.hasTailscaleAddress()) {
+    io.stderr(`
+This machine has no Tailscale address yet. Connect Tailscale before the service starts, or it will not serve.
+`);
+  }
+  if (access === "serve") {
+    args.push("--tailscale-serve");
+    if (!probe.findTailscaleCli()) {
+      io.stderr(`
+The Tailscale CLI was not found, and Tailscale Serve needs it.
+`);
+      const cli = await ask(io, "Path to the tailscale executable (empty to keep `tailscale`): ");
+      if (cli !== "")
+        args.push("--tailscale-bin", cli);
+    }
+    if (await confirm(io, `
+Allow the hosted web client at orkestrator.dev?`, true)) {
+      args.push("--allowed-origins", HOSTED_WEB_ORIGINS);
+    }
+  }
+  const ssh = access === "ssh" || await confirm(io, `
+Also accept desktop connections over SSH (loopback port ${SSH_LOOPBACK_PORT})?`, false);
+  if (ssh)
+    args.push("--loopback-client-port", SSH_LOOPBACK_PORT);
+  const command = [...options2.installCommand, "--", ...args].map(quote).join(" ");
+  io.stderr(`
+Equivalent command, for scripts:
+  ${command}
+
+`);
+  if (!await confirm(io, "Install with these settings?", true))
+    throw cancelled();
+  return args;
+}
 
 // src/client/service-units.ts
 import { createHash as createHash3 } from "crypto";
-import os5 from "os";
-import path11 from "path";
+import os6 from "os";
+import path12 from "path";
 function suffix(dataDir, defaultDataDir) {
-  if (path11.resolve(dataDir) === path11.resolve(defaultDataDir))
+  if (path12.resolve(dataDir) === path12.resolve(defaultDataDir))
     return "";
-  return `-${createHash3("sha256").update(path11.resolve(dataDir)).digest("hex").slice(0, 8)}`;
+  return `-${createHash3("sha256").update(path12.resolve(dataDir)).digest("hex").slice(0, 8)}`;
 }
 function xml(text) {
   return text.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;");
@@ -10879,7 +11051,7 @@ function systemdWord(text) {
   return `"${text.replaceAll("\\", "\\\\").replaceAll('"', "\\\"").replaceAll("%", "%%")}"`;
 }
 function serviceUnit(options2) {
-  const home = options2.home ?? os5.homedir();
+  const home = options2.home ?? os6.homedir();
   const tag = suffix(options2.dataDir, options2.defaultDataDir);
   const pathValue = options2.env.PATH ?? "/usr/local/bin:/usr/bin:/bin";
   if (options2.platform === "darwin") {
@@ -10889,7 +11061,7 @@ function serviceUnit(options2) {
     return {
       manager: "launchd",
       name,
-      file: path11.join(home, "Library", "LaunchAgents", `${name}.plist`),
+      file: path12.join(home, "Library", "LaunchAgents", `${name}.plist`),
       contents: `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
@@ -10923,11 +11095,11 @@ ${args}
     };
   }
   const name = `orkestrator-backend${tag}.service`;
-  const configHome = options2.env.XDG_CONFIG_HOME ?? path11.join(home, ".config");
+  const configHome = options2.env.XDG_CONFIG_HOME ?? path12.join(home, ".config");
   return {
     manager: "systemd",
     name,
-    file: path11.join(configHome, "systemd", "user", name),
+    file: path12.join(configHome, "systemd", "user", name),
     contents: `[Unit]
 Description=Orkestrator backend (${options2.dataDir})
 After=network-online.target
@@ -10980,9 +11152,26 @@ var DATA_DIR_OPTION = {
   valueName: "DIR",
   description: "Backend data directory. Defaults to ORKESTRATOR_DATA_DIR, then the platform default."
 };
+var DEFAULT_READY_WAIT_MS = 3 * 60 * 1000;
 var RESERVED_SERVE_FLAGS = new Set(["--data-dir", "--standalone-updater", "--desktop-updater"]);
 function dataDirectory(context, parsed) {
-  return path13.resolve(stringOption(parsed.options, "data-dir") ?? context.io.env.ORKESTRATOR_DATA_DIR ?? defaultDataDir(process.platform, context.io.env));
+  return path14.resolve(stringOption(parsed.options, "data-dir") ?? context.io.env.ORKESTRATOR_DATA_DIR ?? defaultDataDir(process.platform, context.io.env));
+}
+function installCommandLine(parsed) {
+  const line = ["bunx", "orkestrator", "service", "install"];
+  for (const name of ["data-dir", "release", "timeout"]) {
+    const value = parsed.options[name];
+    if (typeof value === "string")
+      line.push(`--${name}`, value);
+    else if (typeof value === "number")
+      line.push(`--${name}`, `${Math.ceil(value / 1000)}s`);
+  }
+  for (const name of ["skip-start", "dry-run"]) {
+    if (parsed.options[name] === true)
+      line.push(`--${name}`);
+  }
+  line.push("--yes");
+  return line;
 }
 function unitFor(context, dataDir, bun) {
   if (process.platform !== "darwin" && process.platform !== "linux") {
@@ -10999,7 +11188,7 @@ function unitFor(context, dataDir, bun) {
         defaultDataDir: defaultDataDir(process.platform, context.io.env),
         bun,
         launcher: layout.launcher,
-        logFile: path13.join(layout.logs, "service.log"),
+        logFile: path14.join(layout.logs, "service.log"),
         env: context.io.env
       })
     };
@@ -11025,8 +11214,13 @@ var serviceCommands = [
       "previous release when a new one fails to start twice.",
       "",
       "Arguments after `--` are passed to `orkestrator serve` (for example `--tailscale-serve`).",
+      "With none, in a terminal, it asks how clients will connect (Tailscale Serve, the",
+      "tailnet address or SSH) and prints the equivalent command; --yes skips the questions.",
       "The Bun running this command is the Bun the service uses; reinstall to change it.",
-      "On Linux, run `loginctl enable-linger $USER` so the service runs without a login."
+      "On Linux, run `loginctl enable-linger $USER` so the service runs without a login.",
+      "",
+      "Once the service is running, the address it serves and its gateway token are printed.",
+      "The token is shown only in this terminal: never in --output json or the service log."
     ].join(`
 `),
     positionals: [],
@@ -11047,11 +11241,23 @@ var serviceCommands = [
         name: "dry-run",
         kind: "boolean",
         description: "Show what would be written without installing anything."
+      },
+      {
+        name: "yes",
+        kind: "boolean",
+        description: "Install with the arguments after `--` (or none) without asking."
+      },
+      {
+        name: "timeout",
+        kind: "duration",
+        valueName: "DURATION",
+        description: "How long to wait for the service to start before printing its address and token. Default 3m; 0 skips the wait."
       }
     ],
     acceptsRest: true,
     local: true,
     examples: [
+      "orkestrator service install",
       "orkestrator service install -- --tailscale-serve",
       "orkestrator service install --release 2.22.0 -- --host 100.64.0.1",
       "orkestrator service install --dry-run"
@@ -11066,6 +11272,15 @@ var serviceCommands = [
       if (reserved) {
         throw new CliError("invalid-input", `${reserved} is set by the service; leave it out`);
       }
+      const interactive = parsed.rest.length === 0 && parsed.options.yes !== true && context.global.output === "human" && context.io.stdinIsTty && context.io.question !== undefined;
+      const readyWaitMs = typeof parsed.options.timeout === "number" ? parsed.options.timeout : DEFAULT_READY_WAIT_MS;
+      if (readyWaitMs > PUBLIC_API_LIMITS.waitMaxMs) {
+        throw new CliError("invalid-input", "--timeout may be at most 24h");
+      }
+      const serveArgs = interactive ? await askServeArguments(context.io, {
+        installCommand: installCommandLine(parsed),
+        signal: context.signal
+      }) : parsed.rest;
       const bun = process.execPath;
       const bunVersion = typeof Bun === "undefined" ? "" : Bun.version;
       const { service, layout, unit } = await unitFor(context, dataDir, bun);
@@ -11074,7 +11289,7 @@ var serviceCommands = [
         version,
         bun,
         bunVersion,
-        args: parsed.rest,
+        args: serveArgs,
         unit: { manager: unit.manager, name: unit.name, file: unit.file },
         release: service.releaseDirectory(layout, version)
       };
@@ -11088,7 +11303,7 @@ var serviceCommands = [
               ["release", `${version} \u2192 ${summary.release}`],
               ["bun", `${bun} (${bunVersion})`],
               ["unit", `${unit.manager} ${unit.name} \u2192 ${unit.file}`],
-              ["serve arguments", parsed.rest.join(" ") || "(none)"]
+              ["serve arguments", serveArgs.join(" ") || "(none)"]
             ]),
             "",
             "Dry run: nothing was installed."
@@ -11097,6 +11312,7 @@ var serviceCommands = [
       }
       context.io.stderr(`Installing orkestrator@${version}\u2026
 `);
+      throwIfInterrupted(context.signal);
       let releaseDir;
       try {
         releaseDir = await service.installRelease(layout, version, { bun });
@@ -11110,28 +11326,59 @@ var serviceCommands = [
         dataDir,
         bun,
         bunVersion,
-        args: parsed.rest,
+        args: serveArgs,
         installedAt: new Date().toISOString()
       });
       await mkdir2(layout.logs, { recursive: true });
-      await mkdir2(path13.dirname(unit.file), { recursive: true });
+      await mkdir2(path14.dirname(unit.file), { recursive: true });
       await writeFile2(unit.file, unit.contents);
       const started = parsed.options["skip-start"] !== true;
+      const logFile = path14.join(layout.logs, "service.log");
+      let connection = null;
       if (started) {
+        const previousGeneration = await currentDescriptorGeneration(dataDir);
         const commands = serviceManagerCommands(unit);
         commands.load.forEach((argv, index) => runManager(argv, unit.manager === "launchd" && index === 0));
+        if (readyWaitMs > 0) {
+          context.io.stderr(`Waiting for the backend to start\u2026
+`);
+          connection = await awaitServiceConnection(dataDir, previousGeneration, {
+            timeoutMs: readyWaitMs,
+            signal: context.signal
+          });
+        }
       }
       return {
         action: "service.install",
-        result: { dryRun: false, started, ...summary },
+        result: {
+          dryRun: false,
+          started,
+          ready: connection !== null,
+          browserUrl: connection?.browserUrl ?? null,
+          authFile: connection?.authFile ?? null,
+          ...connection?.credentialError ? { credentialError: connection.credentialError } : {},
+          ...summary
+        },
         human: [
           ...keyValues([
             ["release", `${version} (${releaseDir})`],
             ["unit", `${unit.manager} ${unit.name}`],
-            ["logs", path13.join(layout.logs, "service.log")]
+            ["logs", logFile]
           ]),
           "",
           started ? "The service is running. Remote clients can update it from Settings \u2192 Machines or `orkestrator host update`." : `The unit is written but not loaded; load it with: ${serviceManagerCommands(unit).load.at(-1).join(" ")}`,
+          ...connection ? [
+            "",
+            ...keyValues([
+              ["address", connection.browserUrl ?? "(no browser listener; see the log)"],
+              ["auth file", connection.authFile],
+              ...context.io.stdoutIsTty && context.global.output === "human" && connection.token ? [["token", connection.token]] : []
+            ]),
+            ...connection.credentialError ? [`Credential file error: ${connection.credentialError}`] : context.io.stdoutIsTty && context.global.output === "human" ? ["Keep the token private: it grants full access to this backend."] : ["Read the gateway token locally from the private auth file."]
+          ] : started && readyWaitMs > 0 ? [
+            "",
+            `The backend has not reported ready yet. Follow ${logFile}; its address and token file are logged there.`
+          ] : [],
           ...unit.manager === "systemd" ? ["Run `loginctl enable-linger $USER` so it keeps running after you log out."] : []
         ]
       };
@@ -11154,7 +11401,7 @@ var serviceCommands = [
       const dataDir = dataDirectory(context, parsed);
       const { service, layout, unit } = await unitFor(context, dataDir, process.execPath);
       const config = service.readServiceConfig(layout);
-      if (existsSync4(unit.file)) {
+      if (existsSync5(unit.file)) {
         for (const argv of serviceManagerCommands(unit).unload)
           runManager(argv, true);
         await rm2(unit.file, { force: true });
@@ -11182,7 +11429,7 @@ var serviceCommands = [
       const { service, layout, unit } = await unitFor(context, dataDir, process.execPath);
       const config = service.readServiceConfig(layout);
       const state = service.readLauncherState(layout);
-      const installed = existsSync4(unit.file);
+      const installed = existsSync5(unit.file);
       const running = installed ? runManager(serviceManagerCommands(unit).status, true).ok : false;
       const result = {
         dataDir,
@@ -12375,9 +12622,9 @@ var sessionCommands = [
 ];
 
 // src/client/commands/toolchain.ts
-import path17 from "path";
+import path18 from "path";
 function dataDirectory2(context, parsed) {
-  return path17.resolve(stringOption(parsed.options, "data-dir") ?? context.io.env.ORKESTRATOR_DATA_DIR ?? defaultDataDir(process.platform, context.io.env));
+  return path18.resolve(stringOption(parsed.options, "data-dir") ?? context.io.env.ORKESTRATOR_DATA_DIR ?? defaultDataDir(process.platform, context.io.env));
 }
 function requestedTools(parsed) {
   const raw = parsed.options.tool;
@@ -12480,7 +12727,7 @@ var toolchainCommands = [
       const rows = installed.tools.map((tool) => ({
         tool,
         version: installed.versions[tool] ?? "",
-        executable: path17.join(installed.currentBinDir, path17.basename(installed.executables[tool]))
+        executable: path18.join(installed.currentBinDir, path18.basename(installed.executables[tool]))
       }));
       return {
         action: "toolchain.install",
@@ -12566,6 +12813,7 @@ function rootHelp(tree) {
   return [
     "Usage:",
     "  orkestrator [serve] [service options]     Run the backend service in the foreground",
+    "  orkestrator service install [options]     Install the backend as a background service",
     "  orkestrator <group> <command> [options]   Talk to an already-running backend",
     "  orkestrator --fix AGENT                   Get an agent's help reporting a problem",
     "",
@@ -12744,6 +12992,53 @@ function defaultHuman(result) {
 `);
 }
 
+// src/client/questions.ts
+import { createInterface } from "readline/promises";
+function terminalQuestions(input, output, onInterrupt) {
+  let reader;
+  let ended = false;
+  return {
+    async question(prompt, signal) {
+      throwIfInterrupted(signal);
+      if (ended)
+        return null;
+      if (!reader) {
+        reader = createInterface({ input, output });
+        reader.once("close", () => {
+          ended = true;
+        });
+        reader.on("SIGINT", onInterrupt);
+      }
+      const current = reader;
+      let onClose = () => {};
+      let onAbort = () => {};
+      try {
+        return await new Promise((resolve, reject) => {
+          onClose = () => resolve(null);
+          onAbort = () => {
+            reject(new CliError("observation-interrupted", "Interrupted"));
+            current.close();
+          };
+          current.once("close", onClose);
+          signal?.addEventListener("abort", onAbort, { once: true });
+          if (signal?.aborted) {
+            onAbort();
+            return;
+          }
+          current.question(prompt).then(resolve, reject);
+        });
+      } finally {
+        current.off("close", onClose);
+        signal?.removeEventListener("abort", onAbort);
+      }
+    },
+    close() {
+      ended = true;
+      reader?.close();
+    }
+  };
+}
+
 // src/client/main.ts
 var CLIENT_COMMANDS = [
   ...connectionCommands,
@@ -12864,6 +13159,7 @@ async function runClientProcess(argv, version) {
   };
   process.on("SIGINT", onSignal);
   process.on("SIGTERM", onSignal);
+  const questions = terminalQuestions(process.stdin, process.stderr, () => onSignal("SIGINT"));
   const io = {
     stdout: (text) => process.stdout.write(text),
     stdoutBytes: (bytes) => process.stdout.write(Buffer.from(bytes)),
@@ -12875,11 +13171,14 @@ async function runClientProcess(argv, version) {
     env: process.env,
     cwd: process.cwd(),
     now: () => Date.now(),
-    stdinIsTty: Boolean(process.stdin.isTTY)
+    stdinIsTty: Boolean(process.stdin.isTTY),
+    stdoutIsTty: Boolean(process.stdout.isTTY),
+    question: questions.question
   };
   try {
     return await runClient(argv, { io, version, signal: controller.signal });
   } finally {
+    questions.close();
     process.off("SIGINT", onSignal);
     process.off("SIGTERM", onSignal);
   }