poe-code 4.0.11 → 4.0.13

package/dist/index.js

@@ -2307,7 +2307,7 @@ function browserCommand(url, platform) {
   return { command: "xdg-open", args: [url] };
 }
 function launchBrowser(command, args, spawnProcess) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     const child = spawnProcess(command, args, { detached: true, stdio: "ignore" });
     child.once("error", reject);
     child.once("close", (code, signal) => {
@@ -2317,7 +2317,7 @@ function launchBrowser(command, args, spawnProcess) {
         return;
       }
       child.unref();
-      resolve14();
+      resolve16();
     });
   });
 }
@@ -10386,18 +10386,18 @@ function createDetailJobs(emit) {
   };
 }
 function waitUnlessAborted(ms, signal) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve16) => {
     if (signal.aborted) {
-      resolve14();
+      resolve16();
       return;
     }
     const onAbort = () => {
       clearTimeout(timer);
-      resolve14();
+      resolve16();
     };
     const timer = setTimeout(() => {
       signal.removeEventListener("abort", onAbort);
-      resolve14();
+      resolve16();
     }, ms);
     signal.addEventListener("abort", onAbort, { once: true });
   });
@@ -12865,8 +12865,8 @@ var init_runtime = __esm({
       stopped = false;
       settle;
       run() {
-        return new Promise((resolve14, reject) => {
-          this.settle = { resolve: resolve14, reject };
+        return new Promise((resolve16, reject) => {
+          this.settle = { resolve: resolve16, reject };
           try {
             this.startTerminal();
             if (this.config.initialRows !== void 0 && this.config.initialRows.length > 0) {
@@ -13074,7 +13074,7 @@ var init_runtime = __esm({
         }
       }
       confirm(prompt) {
-        return new Promise((resolve14) => {
+        return new Promise((resolve16) => {
           const action = {
             id: "__confirm__",
             label: prompt,
@@ -13087,7 +13087,7 @@ var init_runtime = __esm({
               kind: "confirm",
               action,
               rows: row === void 0 ? [] : [row],
-              resolver: resolve14
+              resolver: resolve16
             },
             dirty: REGION_MODAL
           };
@@ -13378,9 +13378,9 @@ var init_core = __esm({
         if (this.input.isTTY !== true) {
           return this.promptNonTty();
         }
-        return new Promise((resolve14) => {
-          const onSubmit = (value) => resolve14(value);
-          const onCancel = () => resolve14(CANCEL);
+        return new Promise((resolve16) => {
+          const onSubmit = (value) => resolve16(value);
+          const onCancel = () => resolve16(CANCEL);
           this.once("submit", onSubmit);
           this.once("cancel", onCancel);
           this.abortListener = () => {
@@ -13412,7 +13412,7 @@ var init_core = __esm({
         return Promise.reject(new Error(nonTtyPromptMessage()));
       }
       readNonTtyLine() {
-        return new Promise((resolve14) => {
+        return new Promise((resolve16) => {
           const rl = readline2.createInterface({ input: this.input, terminal: false });
           let settled = false;
           const settle = (value) => {
@@ -13421,7 +13421,7 @@ var init_core = __esm({
             }
             settled = true;
             rl.close();
-            resolve14(value);
+            resolve16(value);
           };
           rl.once("line", settle);
           rl.once("close", () => settle(rl.line));
@@ -16493,7 +16493,7 @@ function compileGraph(schema, options = {}) {
     const alternate = dialect === "draft7" ? "draft2020-12" : "draft7";
     return map.get(mapKey2(dialect, uri)) ?? map.get(mapKey2(alternate, uri));
   }
-  function resolve14(node, reference) {
+  function resolve16(node, reference) {
     const absolute = resolveUri(reference, node.baseUri);
     const direct = findByDialect(locations, node.dialect, absolute) ?? findByDialect(resources, node.dialect, absolute) ?? findByDialect(anchors, node.dialect, absolute);
     if (direct !== void 0) {
@@ -16541,7 +16541,7 @@ function compileGraph(schema, options = {}) {
       if (!reachableDocuments.has(pending.node.documentId)) {
         continue;
       }
-      const target = resolve14(pending.node, pending.reference);
+      const target = resolve16(pending.node, pending.reference);
       if (!reachableDocuments.has(target.documentId)) {
         reachableDocuments.add(target.documentId);
         discoveredDocument = true;
@@ -16554,7 +16554,7 @@ function compileGraph(schema, options = {}) {
     resources,
     anchors,
     dynamicAnchors,
-    resolve: resolve14,
+    resolve: resolve16,
     dynamicAnchor(scope, name) {
       return dynamicAnchors.get(mapKey2(scope.dialect, `${scope.resourceUri}#${name}`));
     }
@@ -19448,8 +19448,8 @@ async function applyChmod(mutation, context, options) {
   }
   try {
     await assertRegularWriteTarget(context, targetPath);
-    const stat35 = await context.fs.stat(targetPath);
-    const currentMode = typeof stat35.mode === "number" ? stat35.mode & 511 : null;
+    const stat36 = await context.fs.stat(targetPath);
+    const currentMode = typeof stat36.mode === "number" ? stat36.mode & 511 : null;
     if (currentMode === mutation.mode) {
       return {
         outcome: { changed: false, effect: "none", detail: "noop" },
@@ -21683,8 +21683,8 @@ function createJobRegistry(homeDir, fs31 = defaultStateFs) {
       }
       const filePath = path13.join(jobsDir, entry);
       await assertSafeJobPath(filePath);
-      const stat35 = await fs31.stat(filePath);
-      if (!stat35.isFile()) {
+      const stat36 = await fs31.stat(filePath);
+      if (!stat36.isFile()) {
         continue;
       }
       const job = parseJobEntry(
@@ -23422,8 +23422,8 @@ function createDockerRunner(options) {
       let exitCodeOverride = null;
       let resolveResult = null;
       let abortEscalationTimers = [];
-      const result = new Promise((resolve14) => {
-        resolveResult = resolve14;
+      const result = new Promise((resolve16) => {
+        resolveResult = resolve16;
       });
       const clearAbortEscalation = () => {
         for (const timer of abortEscalationTimers) {
@@ -23612,8 +23612,8 @@ function createHostRunner(options = {}) {
       };
       let settled = false;
       let resolveResult = null;
-      const result = new Promise((resolve14) => {
-        resolveResult = resolve14;
+      const result = new Promise((resolve16) => {
+        resolveResult = resolve16;
       });
       const cleanupAbort = bindAbortSignal2(spec10.signal, () => {
         try {
@@ -24772,7 +24772,7 @@ function createContainerJob(containerId, runner, engine, context, detachedJobCon
         if (opts?.follow !== true || await this.status() !== "running") {
           return;
         }
-        await new Promise((resolve14) => setTimeout(resolve14, 250));
+        await new Promise((resolve16) => setTimeout(resolve16, 250));
       }
     },
     async wait() {
@@ -24785,7 +24785,7 @@ function createContainerJob(containerId, runner, engine, context, detachedJobCon
           if (detached.kind === "unreachable") {
             return { exitCode: 1 };
           }
-          await new Promise((resolve14) => setTimeout(resolve14, 25));
+          await new Promise((resolve16) => setTimeout(resolve16, 25));
         }
       }
       const handle = runner.exec({
@@ -28399,8 +28399,8 @@ function createTokenBucket(rate) {
         tokens -= 1;
         return;
       }
-      await new Promise((resolve14) => {
-        setTimeout(resolve14, Math.ceil((1 - tokens) * intervalMs));
+      await new Promise((resolve16) => {
+        setTimeout(resolve16, Math.ceil((1 - tokens) * intervalMs));
       });
     }
   };
@@ -28829,8 +28829,8 @@ async function readPlanPaths(fs31, directoryPath) {
       continue;
     }
     const absolutePath = path27.join(directoryPath, fileName);
-    const stat35 = await fs31.stat(absolutePath);
-    if (stat35.isFile()) {
+    const stat36 = await fs31.stat(absolutePath);
+    if (stat36.isFile()) {
       const existingPath = pathsById.get(id);
       if (existingPath !== void 0) {
         throw new Error(`Duplicate active plan identifier "${id}": ${existingPath} and ${absolutePath}`);
@@ -29723,7 +29723,7 @@ async function assertManagedJobDirectory(lstat35) {
   }
 }
 function sleep(ms, signal) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     let timer = null;
     const abort = () => {
       if (timer !== null) {
@@ -29737,7 +29737,7 @@ function sleep(ms, signal) {
     }
     timer = setTimeout(() => {
       signal?.removeEventListener("abort", abort);
-      resolve14();
+      resolve16();
     }, ms);
     signal?.addEventListener("abort", abort, { once: true });
   });
@@ -29951,7 +29951,7 @@ function captureRunStreams(handle, execution, onActivity) {
   let stderr = "";
   const listeners = [];
   const drainPromises = [];
-  const bind = (stream, onChunk, countsAsActivity) => {
+  const bind2 = (stream, onChunk, countsAsActivity) => {
     if (!stream) return;
     stream.setEncoding("utf8");
     let settled = false;
@@ -29963,7 +29963,7 @@ function captureRunStreams(handle, execution, onActivity) {
       }
       onChunk(chunk.toString());
     };
-    const drainPromise = new Promise((resolve14) => {
+    const drainPromise = new Promise((resolve16) => {
       settleDrain = () => {
         if (settled) {
           return;
@@ -29972,7 +29972,7 @@ function captureRunStreams(handle, execution, onActivity) {
         stream.off("end", settleDrain);
         stream.off("close", settleDrain);
         stream.off("error", settleDrain);
-        resolve14();
+        resolve16();
       };
     });
     stream.on("data", listener);
@@ -29985,11 +29985,11 @@ function captureRunStreams(handle, execution, onActivity) {
       settleDrain();
     });
   };
-  bind(handle.stdout, (chunk) => {
+  bind2(handle.stdout, (chunk) => {
     stdout += chunk;
     execution?.onStdout?.(chunk);
   }, true);
-  bind(handle.stderr, (chunk) => {
+  bind2(handle.stderr, (chunk) => {
     stderr += chunk;
     execution?.onStderr?.(chunk);
   }, execution?.activityTimeoutSource !== "stdout");
@@ -30011,8 +30011,8 @@ function createAbortSync(signal, handle, activityTimeoutMs, opts = {}) {
   let forceKillTimer;
   let terminationError;
   let notifyTermination;
-  const terminationPromise = new Promise((resolve14) => {
-    notifyTermination = resolve14;
+  const terminationPromise = new Promise((resolve16) => {
+    notifyTermination = resolve16;
   });
   const exitWaitController = new AbortController();
   const terminate = (error3) => {
@@ -30113,16 +30113,16 @@ async function writeExecutionInput(handle, input) {
   if (stdin === null) {
     return;
   }
-  await new Promise((resolve14, reject) => {
+  await new Promise((resolve16, reject) => {
     stdin.on("error", (error3) => {
       if (hasOwnErrorCode4(error3, "EPIPE")) {
-        resolve14();
+        resolve16();
         return;
       }
       reject(error3);
     });
     stdin.setDefaultEncoding("utf8");
-    stdin.end(input, resolve14);
+    stdin.end(input, resolve16);
   });
 }
 function isPromiseLike2(value) {
@@ -30492,12 +30492,12 @@ function runHost(spawnProcess, spec10) {
       stdio
     })
   );
-  const result = new Promise((resolve14) => {
+  const result = new Promise((resolve16) => {
     child.once("close", (code) => {
-      resolve14({ exitCode: code ?? 1 });
+      resolve16({ exitCode: code ?? 1 });
     });
     child.once("error", () => {
-      resolve14({ exitCode: 1 });
+      resolve16({ exitCode: 1 });
     });
   });
   const kill = (signal) => {
@@ -30665,9 +30665,9 @@ async function startNativeOtelCapture(agentId, content = false) {
   const server = createServer((request, response) => {
     void receive(request, response, records);
   });
-  await new Promise((resolve14, reject) => {
+  await new Promise((resolve16, reject) => {
     server.once("error", reject);
-    server.listen(0, "127.0.0.1", () => resolve14());
+    server.listen(0, "127.0.0.1", () => resolve16());
   });
   const address = server.address();
   if (!address || typeof address === "string") {
@@ -30695,7 +30695,7 @@ async function startNativeOtelCapture(agentId, content = false) {
     args: definition.args?.(endpoint, content) ?? [],
     correlationId,
     async drain() {
-      await new Promise((resolve14) => server.close(() => resolve14()));
+      await new Promise((resolve16) => server.close(() => resolve16()));
       return records;
     }
   };
@@ -30753,10 +30753,10 @@ import { spawn as spawn3 } from "node:child_process";
 import { constants } from "node:os";
 import { setTimeout as delay } from "node:timers/promises";
 function runCommand(command, args, inputOptions) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve16) => {
     const options = normalizeCommandRunnerOptions(inputOptions);
     if (options?.signal?.aborted === true) {
-      resolve14({
+      resolve16({
         stdout: "",
         stderr: "Command aborted before start.",
         exitCode: 130,
@@ -30810,7 +30810,7 @@ function runCommand(command, args, inputOptions) {
       }
       settled = true;
       cleanup();
-      resolve14(result);
+      resolve16(result);
     };
     const terminate = (reason) => {
       if (settled || timedOut || aborted) {
@@ -31991,10 +31991,10 @@ function createWaitEvent(attempt, delayMs) {
 }
 function sleep2(delayMs, signal) {
   throwIfAborted4(signal);
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     const timeout = setTimeout(() => {
       signal?.removeEventListener("abort", onAbort);
-      resolve14();
+      resolve16();
     }, delayMs);
     const onAbort = () => {
       clearTimeout(timeout);
@@ -32028,8 +32028,8 @@ function createEventQueue() {
     if (closed) {
       return Promise.resolve({ value: void 0, done: true });
     }
-    return new Promise((resolve14, reject) => {
-      waiters.push({ resolve: resolve14, reject });
+    return new Promise((resolve16, reject) => {
+      waiters.push({ resolve: resolve16, reject });
     });
   };
   return {
@@ -34990,8 +34990,8 @@ function createLineQueue() {
               if (closed) {
                 return Promise.resolve({ done: true, value: void 0 });
               }
-              return new Promise((resolve14) => {
-                waiters.push({ resolve: resolve14 });
+              return new Promise((resolve16) => {
+                waiters.push({ resolve: resolve16 });
               });
             }
           };
@@ -35123,8 +35123,8 @@ function spawnStreaming(input) {
   const adapter = getAdapter(spawnConfig.adapter);
   let resolveEventStreamDone;
   let rejectEventStreamDone;
-  const eventStreamDone = new Promise((resolve14, reject) => {
-    resolveEventStreamDone = resolve14;
+  const eventStreamDone = new Promise((resolve16, reject) => {
+    resolveEventStreamDone = resolve16;
     rejectEventStreamDone = reject;
   });
   const eventQueue = [];
@@ -35194,8 +35194,8 @@ function spawnStreaming(input) {
           if (eventsDone) {
             return Promise.resolve({ done: true, value: void 0 });
           }
-          return new Promise((resolve14, reject) => {
-            waiters.push({ resolve: resolve14, reject });
+          return new Promise((resolve16, reject) => {
+            waiters.push({ resolve: resolve16, reject });
           });
         }
       };
@@ -35217,8 +35217,8 @@ function spawnStreaming(input) {
   })();
   const hasMiddlewares = options.middlewares !== void 0 && options.middlewares.length > 0;
   let resolveMiddlewaresApplied;
-  const middlewaresApplied = hasMiddlewares ? new Promise((resolve14) => {
-    resolveMiddlewaresApplied = resolve14;
+  const middlewaresApplied = hasMiddlewares ? new Promise((resolve16) => {
+    resolveMiddlewaresApplied = resolve16;
   }) : void 0;
   const done = (async () => {
     let restoreMcpFile;
@@ -36490,10 +36490,10 @@ var init_jsonrpc_message_layer = __esm({
         if (params !== void 0) {
           request.params = params;
         }
-        return new Promise((resolve14, reject) => {
+        return new Promise((resolve16, reject) => {
           this.pending.set(id, {
             method,
-            resolve: resolve14,
+            resolve: resolve16,
             reject
           });
           try {
@@ -36643,8 +36643,8 @@ var init_acp_transport = __esm({
           spawn: spawn11 = spawnChildProcess3
         } = options;
         this.command = command;
-        this.closed = new Promise((resolve14) => {
-          this.resolveClosed = resolve14;
+        this.closed = new Promise((resolve16) => {
+          this.resolveClosed = resolve16;
         });
         this.child = spawn11(command, [...args], {
           cwd,
@@ -37216,8 +37216,8 @@ function createAsyncQueue() {
       if (closed) {
         return { done: true, value: void 0 };
       }
-      return new Promise((resolve14, reject) => {
-        waiters.push({ resolve: resolve14, reject });
+      return new Promise((resolve16, reject) => {
+        waiters.push({ resolve: resolve16, reject });
       });
     },
     async return() {
@@ -38253,8 +38253,8 @@ function spawnAcp(input) {
           if (eventsDone) {
             return Promise.resolve({ done: true, value: void 0 });
           }
-          return new Promise((resolve14) => {
-            waiters.push(resolve14);
+          return new Promise((resolve16) => {
+            waiters.push(resolve16);
           });
         }
       };
@@ -38263,8 +38263,8 @@ function spawnAcp(input) {
   ctx.eventStream = events;
   const hasMiddlewares = options.middlewares !== void 0 && options.middlewares.length > 0;
   let resolveMiddlewaresApplied;
-  const middlewaresApplied = hasMiddlewares ? new Promise((resolve14) => {
-    resolveMiddlewaresApplied = resolve14;
+  const middlewaresApplied = hasMiddlewares ? new Promise((resolve16) => {
+    resolveMiddlewaresApplied = resolve16;
   }) : void 0;
   const done = (async () => {
     try {
@@ -40610,8 +40610,8 @@ var init_acp_core = __esm({
         if (this.#closed) {
           return { done: true, value: void 0 };
         }
-        return new Promise((resolve14) => {
-          this.#resolvers.push(resolve14);
+        return new Promise((resolve16) => {
+          this.#resolvers.push(resolve16);
         });
       }
       async return() {
@@ -41382,13 +41382,13 @@ async function deriveEncryptionKey(getMachineIdentity, salt) {
   if (cached2) {
     return cached2;
   }
-  const keyPromise = new Promise((resolve14, reject) => {
+  const keyPromise = new Promise((resolve16, reject) => {
     scrypt(secret, salt, ENCRYPTION_KEY_BYTES, (error3, derivedKey) => {
       if (error3) {
         reject(error3);
         return;
       }
-      resolve14(Buffer.from(derivedKey));
+      resolve16(Buffer.from(derivedKey));
     });
   });
   derivedKeyCache.set(cacheKey, keyPromise);
@@ -41599,7 +41599,7 @@ var init_encrypted_file_store = __esm({
 // packages/auth-store/src/keychain-store.ts
 import { spawn as spawn5 } from "node:child_process";
 function runSecurityCommand(command, args, options) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve16) => {
     const child = spawn5(command, args, {
       stdio: [options?.stdin === void 0 ? "ignore" : "pipe", "pipe", "pipe"]
     });
@@ -41634,7 +41634,7 @@ function runSecurityCommand(command, args, options) {
       const message2 = error3 instanceof Error ? error3.message : String(error3 ?? "Unknown error");
       appendStdinError();
       appendStderr(message2);
-      resolve14({
+      resolve16({
         stdout,
         stderr,
         exitCode: 127
@@ -41642,7 +41642,7 @@ function runSecurityCommand(command, args, options) {
     });
     child.on("close", (code) => {
       appendStdinError();
-      resolve14({
+      resolve16({
         stdout,
         stderr,
         exitCode: code ?? 1
@@ -43444,9 +43444,9 @@ function spawnShellCommand(command, cwd, options) {
     timedOut = true;
     terminate();
   }, options.timeoutMs);
-  const completion = new Promise((resolve14) => {
+  const completion = new Promise((resolve16) => {
     const resolveOutcome = (outcome) => {
-      resolve14({
+      resolve16({
         ...outcome,
         ...outcome.error === void 0 && notificationError ? { error: notificationError } : {}
       });
@@ -44377,8 +44377,8 @@ async function readOptionalTrustedFile(filePath, trustedDirectory, fs31) {
   if (!await exists(filePath, fs31)) {
     return void 0;
   }
-  const stat35 = await fs31.lstat(filePath);
-  if (stat35.isSymbolicLink()) {
+  const stat36 = await fs31.lstat(filePath);
+  if (stat36.isSymbolicLink()) {
     throw new Error(`AGENTS.md file escapes its trusted directory: ${filePath}`);
   }
   const [canonicalPath, canonicalDirectory] = await Promise.all([
@@ -45684,8 +45684,8 @@ function createInMemoryAcpTransport(options) {
   let closed = false;
   let sessionCounter = 0;
   let resolveClosed;
-  const closedPromise = new Promise((resolve14) => {
-    resolveClosed = resolve14;
+  const closedPromise = new Promise((resolve16) => {
+    resolveClosed = resolve16;
   });
   const closeTransport = (reason) => {
     if (closed) {
@@ -46326,7 +46326,7 @@ async function createLoopbackAuthorizationSession(options = {}) {
   };
 }
 async function startServer(server) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     const handleError = (error3) => {
       server.off("error", handleError);
       reject(error3);
@@ -46335,13 +46335,13 @@ async function startServer(server) {
     server.listen(0, "127.0.0.1", () => {
       server.off("error", handleError);
       const address = server.address();
-      resolve14(address.port);
+      resolve16(address.port);
     });
   });
 }
 function waitForAuthorizationCode(server, authorizationUrl, options, callbackPath) {
   const expectedAuthorization = readExpectedAuthorizationCallback(authorizationUrl);
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     let settled = false;
     const settle = (fn) => {
       if (!settled) {
@@ -46386,7 +46386,7 @@ function waitForAuthorizationCode(server, authorizationUrl, options, callbackPat
         );
         res.writeHead(200, { "Content-Type": "text/html" });
         res.end(buildSuccessPage(options.landingPage));
-        settle(() => resolve14(code));
+        settle(() => resolve16(code));
       } catch (error3) {
         res.writeHead(400);
         res.end(error3 instanceof Error ? error3.message : "Invalid OAuth callback");
@@ -46410,7 +46410,7 @@ function waitForAuthorizationCode(server, authorizationUrl, options, callbackPat
             callbackParameters,
             expectedAuthorization
           );
-          settle(() => resolve14(code));
+          settle(() => resolve16(code));
         } catch (error3) {
           settle(() => reject(error3 instanceof Error ? error3 : new Error(String(error3))));
         }
@@ -48518,14 +48518,14 @@ var init_internal = __esm({
         child.stderr.once("end", () => {
           this.appendStderrOutput(stderrDecoder.decode());
         });
-        this.closed = new Promise((resolve14) => {
+        this.closed = new Promise((resolve16) => {
           let settled = false;
           const resolveClosed = (event) => {
             if (settled) {
               return;
             }
             settled = true;
-            resolve14(event);
+            resolve16(event);
           };
           child.once("exit", (code, signal) => {
             const closedEvent = {
@@ -48614,8 +48614,8 @@ var init_internal = __esm({
         });
         this.readable = this.readStream;
         this.writable = this.writeStream;
-        this.closed = new Promise((resolve14) => {
-          this.resolveClosed = resolve14;
+        this.closed = new Promise((resolve16) => {
+          this.resolveClosed = resolve16;
         });
         this.readStream.once("error", (error3) => {
           this.dispose(error3 instanceof Error ? error3 : new Error(String(error3)));
@@ -49118,13 +49118,13 @@ var init_internal = __esm({
         if (params !== void 0) {
           message2.params = params;
         }
-        return new Promise((resolve14, reject) => {
+        return new Promise((resolve16, reject) => {
           const timeout = setTimeout(() => {
             this.pendingRequests.delete(id);
             options.onTimeout?.(id);
             reject(new Error(`JSON-RPC request "${method}" timed out after ${timeoutMs}ms`));
           }, timeoutMs);
-          this.pendingRequests.set(id, { resolve: resolve14, reject, timeout });
+          this.pendingRequests.set(id, { resolve: resolve16, reject, timeout });
           try {
             this.output.write(serializeJsonRpcMessage2(message2));
           } catch (error3) {
@@ -49210,9 +49210,9 @@ var init_internal = __esm({
         try {
           return await Promise.race([
             this.inputClosedReason,
-            new Promise((resolve14) => {
+            new Promise((resolve16) => {
               setTimeout(() => {
-                resolve14(streamClosedError);
+                resolve16(streamClosedError);
               }, 50);
             })
           ]);
@@ -50270,8 +50270,8 @@ var init_agent = __esm({
         if (this.#pending.has(intent.intentId)) {
           throw new Error(`Duplicate pending tool intent: ${intent.intentId}`);
         }
-        return await new Promise((resolve14, reject) => {
-          this.#pending.set(intent.intentId, { resolve: resolve14, reject });
+        return await new Promise((resolve16, reject) => {
+          this.#pending.set(intent.intentId, { resolve: resolve16, reject });
         });
       }
       async fork(request) {
@@ -53448,16 +53448,16 @@ function createDefaultFs2() {
     writeFile: fsPromises13.writeFile,
     readdir: fsPromises13.readdir,
     stat: async (filePath) => {
-      const stat35 = await fsPromises13.stat(filePath);
+      const stat36 = await fsPromises13.stat(filePath);
       return {
-        isFile: () => stat35.isFile(),
-        isDirectory: () => stat35.isDirectory(),
-        mtimeMs: stat35.mtimeMs
+        isFile: () => stat36.isFile(),
+        isDirectory: () => stat36.isDirectory(),
+        mtimeMs: stat36.mtimeMs
       };
     },
     lstat: async (filePath) => {
-      const stat35 = await fsPromises13.lstat(filePath);
-      return { isSymbolicLink: () => stat35.isSymbolicLink() };
+      const stat36 = await fsPromises13.lstat(filePath);
+      return { isSymbolicLink: () => stat36.isSymbolicLink() };
     },
     mkdir: async (filePath, options) => {
       await fsPromises13.mkdir(filePath, options);
@@ -54239,8 +54239,8 @@ var init_complete = __esm({
       params: completeParams,
       scope: ["cli", "mcp", "sdk"],
       handler: async ({ params, fs: fs31 }) => {
-        const stat35 = await lstatDocument(params.path, fs31);
-        if (stat35.isSymbolicLink()) {
+        const stat36 = await lstatDocument(params.path, fs31);
+        if (stat36.isSymbolicLink()) {
           throw new UserError2(`Refusing to complete superintendent document through symbolic link: ${params.path}`);
         }
         const content = await readDocument5(params.path, fs31);
@@ -55069,8 +55069,8 @@ function createClient(opts) {
       try {
         await Promise.race([
           flushAll,
-          new Promise((resolve14) => {
-            timeout = setTimeout(resolve14, timeoutMs);
+          new Promise((resolve16) => {
+            timeout = setTimeout(resolve16, timeoutMs);
           })
         ]);
       } catch (err) {
@@ -57282,8 +57282,8 @@ async function waitForResume(session) {
   if (session.stopRequested || !session.paused) {
     return;
   }
-  await new Promise((resolve14) => {
-    session.resumeWaiters.push(resolve14);
+  await new Promise((resolve16) => {
+    session.resumeWaiters.push(resolve16);
   });
 }
 function stripStopReason(result) {
@@ -57309,16 +57309,16 @@ function createDefaultFs3() {
     writeFile: fsPromises14.writeFile,
     readdir: fsPromises14.readdir,
     stat: async (filePath) => {
-      const stat35 = await fsPromises14.stat(filePath);
+      const stat36 = await fsPromises14.stat(filePath);
       return {
-        isFile: () => stat35.isFile(),
-        isDirectory: () => stat35.isDirectory(),
-        mtimeMs: stat35.mtimeMs
+        isFile: () => stat36.isFile(),
+        isDirectory: () => stat36.isDirectory(),
+        mtimeMs: stat36.mtimeMs
       };
     },
     lstat: async (filePath) => {
-      const stat35 = await fsPromises14.lstat(filePath);
-      return { isSymbolicLink: () => stat35.isSymbolicLink() };
+      const stat36 = await fsPromises14.lstat(filePath);
+      return { isSymbolicLink: () => stat36.isSymbolicLink() };
     },
     mkdir: async (filePath, mkdirOptions) => {
       await fsPromises14.mkdir(filePath, mkdirOptions);
@@ -57494,12 +57494,12 @@ var init_run = __esm({
       unlink: (filePath) => fsPromises14.unlink(filePath),
       rename: (oldPath, newPath) => fsPromises14.rename(oldPath, newPath),
       stat: async (filePath) => {
-        const stat35 = await fsPromises14.stat(filePath);
-        return { mode: stat35.mode };
+        const stat36 = await fsPromises14.stat(filePath);
+        return { mode: stat36.mode };
       },
       lstat: async (filePath) => {
-        const stat35 = await fsPromises14.lstat(filePath);
-        return { isSymbolicLink: () => stat35.isSymbolicLink() };
+        const stat36 = await fsPromises14.lstat(filePath);
+        return { isSymbolicLink: () => stat36.isSymbolicLink() };
       },
       readdir: (filePath) => fsPromises14.readdir(filePath)
     };
@@ -59832,7 +59832,7 @@ async function withFileLock2(lockPath, lockTimeoutMs, operation) {
       if (Date.now() - startedAt >= lockTimeoutMs) {
         throw new Error(`Timed out waiting for code review lock: ${lockPath}`);
       }
-      await new Promise((resolve14) => setTimeout(resolve14, 5));
+      await new Promise((resolve16) => setTimeout(resolve16, 5));
     }
   }
   try {
@@ -63126,7 +63126,7 @@ function createServer2(options) {
       });
     },
     async connect(transport) {
-      return new Promise((resolve14) => {
+      return new Promise((resolve16) => {
         const listener = (notification) => {
           transport.writable.write(`${JSON.stringify(notification)}
 `);
@@ -63151,12 +63151,12 @@ function createServer2(options) {
         rl.on("close", async () => {
           await Promise.all([...pendingMessages]);
           session.close();
-          resolve14();
+          resolve16();
         });
       });
     },
     async connectSDK(transport) {
-      return new Promise((resolve14, reject) => {
+      return new Promise((resolve16, reject) => {
         const listener = (notification) => transport.send(notification);
         const session = server.createMessageSession(listener);
         transport.onmessage = async (message2) => {
@@ -63219,7 +63219,7 @@ function createServer2(options) {
         };
         transport.onclose = () => {
           session.close();
-          resolve14();
+          resolve16();
         };
         void transport.start().catch((error3) => {
           session.close();
@@ -69083,11 +69083,11 @@ function createServiceRegistry() {
     return adapter;
   };
   const list = () => Array.from(canonicalAdapters.values());
-  const invoke = async (serviceName, operation, runner) => {
+  const invoke2 = async (serviceName, operation, runner) => {
     const adapter = require3(serviceName);
     return await runner(adapter);
   };
-  return { register, discover, get, require: require3, list, invoke };
+  return { register, discover, get, require: require3, list, invoke: invoke2 };
 }
 var init_service_registry = __esm({
   "src/cli/service-registry.ts"() {
@@ -69292,7 +69292,7 @@ async function createLoopbackAuthorizationSession2(options = {}) {
   };
 }
 async function startServer2(server) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     const handleError = (error3) => {
       reject(error3);
     };
@@ -69300,13 +69300,13 @@ async function startServer2(server) {
     server.listen(0, "127.0.0.1", () => {
       server.off("error", handleError);
       const address = server.address();
-      resolve14(address.port);
+      resolve16(address.port);
     });
   });
 }
 function waitForAuthorizationCode2(server, authorizationUrl, options, callbackPath) {
   const expectedAuthorization = readExpectedAuthorizationCallback2(authorizationUrl);
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     let settled = false;
     const settle = (fn) => {
       if (!settled) {
@@ -69355,7 +69355,7 @@ function waitForAuthorizationCode2(server, authorizationUrl, options, callbackPa
         );
         res.writeHead(200, { "Content-Type": "text/html" });
         res.end(buildSuccessPage2(options.landingPage));
-        settle(() => resolve14(code));
+        settle(() => resolve16(code));
       } catch (error4) {
         res.writeHead(400);
         res.end(error4 instanceof Error ? error4.message : "Invalid OAuth callback");
@@ -69374,7 +69374,7 @@ function waitForAuthorizationCode2(server, authorizationUrl, options, callbackPa
             callbackParameters,
             expectedAuthorization
           );
-          settle(() => resolve14(code));
+          settle(() => resolve16(code));
         } catch (error3) {
           settle(() => reject(error3 instanceof Error ? error3 : new Error(String(error3))));
         }
@@ -71095,8 +71095,8 @@ function spawn9(service, promptOrOptions, maybeOptions) {
   })();
   let resolveEvents;
   let eventsResolved = false;
-  const eventsPromise = new Promise((resolve14) => {
-    resolveEvents = resolve14;
+  const eventsPromise = new Promise((resolve16) => {
+    resolveEvents = resolve16;
   });
   const resolveEventsOnce = (value) => {
     if (eventsResolved) return;
@@ -71459,10 +71459,10 @@ function calculateRetryBackoffMs(baseBackoffMs, completedAttempt) {
 }
 function sleep3(delayMs, signal) {
   throwIfAborted5(signal);
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     const timeout = setTimeout(() => {
       signal?.removeEventListener("abort", onAbort);
-      resolve14();
+      resolve16();
     }, delayMs);
     const onAbort = () => {
       clearTimeout(timeout);
@@ -71496,8 +71496,8 @@ function createEventQueue2() {
     if (closed) {
       return Promise.resolve({ value: void 0, done: true });
     }
-    return new Promise((resolve14, reject) => {
-      waiters.push({ resolve: resolve14, reject });
+    return new Promise((resolve16, reject) => {
+      waiters.push({ resolve: resolve16, reject });
     });
   };
   return {
@@ -72304,11 +72304,11 @@ function createDefaultFs4() {
     readFile: fsPromises15.readFile,
     readdir: fsPromises15.readdir,
     stat: async (filePath) => {
-      const stat35 = await fsPromises15.stat(filePath);
+      const stat36 = await fsPromises15.stat(filePath);
       return {
-        isFile: () => stat35.isFile(),
-        isDirectory: () => stat35.isDirectory(),
-        mtimeMs: stat35.mtimeMs
+        isFile: () => stat36.isFile(),
+        isDirectory: () => stat36.isDirectory(),
+        mtimeMs: stat36.mtimeMs
       };
     }
   };
@@ -72331,13 +72331,13 @@ function countCompletedTasks(planPath, content) {
 }
 async function ensurePlanExists(fs31, cwd, planPath) {
   const absolutePath = path81.isAbsolute(planPath) ? planPath : path81.resolve(cwd, planPath);
-  const stat35 = await fs31.stat(absolutePath).catch((error3) => {
+  const stat36 = await fs31.stat(absolutePath).catch((error3) => {
     if (isNotFound3(error3)) {
       return void 0;
     }
     throw error3;
   });
-  if (stat35 === void 0 || !stat35.isFile()) {
+  if (stat36 === void 0 || !stat36.isFile()) {
     throw new UserError(
       `Plan not found at "${planPath}".
 Pass --plan <path> to an existing plan file, or run "poe-code pipeline show-plan-path" to see where plans are discovered.`
@@ -72853,16 +72853,16 @@ function createDefaultFs5() {
     writeFile: fsPromises16.writeFile,
     readdir: fsPromises16.readdir,
     stat: async (filePath) => {
-      const stat35 = await fsPromises16.stat(filePath);
+      const stat36 = await fsPromises16.stat(filePath);
       return {
-        isFile: () => stat35.isFile(),
-        isDirectory: () => stat35.isDirectory(),
-        mtimeMs: stat35.mtimeMs
+        isFile: () => stat36.isFile(),
+        isDirectory: () => stat36.isDirectory(),
+        mtimeMs: stat36.mtimeMs
       };
     },
     lstat: async (filePath) => {
-      const stat35 = await fsPromises16.lstat(filePath);
-      return { isSymbolicLink: () => stat35.isSymbolicLink() };
+      const stat36 = await fsPromises16.lstat(filePath);
+      return { isSymbolicLink: () => stat36.isSymbolicLink() };
     },
     mkdir: async (filePath, options) => {
       await fsPromises16.mkdir(filePath, options);
@@ -74027,16 +74027,16 @@ function createDefaultFs7() {
     writeFile: (filePath, content, options) => fsPromises18.writeFile(filePath, content, options ?? { encoding: "utf8" }),
     readdir: fsPromises18.readdir,
     stat: async (filePath) => {
-      const stat35 = await fsPromises18.stat(filePath);
+      const stat36 = await fsPromises18.stat(filePath);
       return {
-        isFile: () => stat35.isFile(),
-        isDirectory: () => stat35.isDirectory(),
-        mtimeMs: stat35.mtimeMs
+        isFile: () => stat36.isFile(),
+        isDirectory: () => stat36.isDirectory(),
+        mtimeMs: stat36.mtimeMs
       };
     },
     lstat: async (filePath) => {
-      const stat35 = await fsPromises18.lstat(filePath);
-      return { isSymbolicLink: () => stat35.isSymbolicLink() };
+      const stat36 = await fsPromises18.lstat(filePath);
+      return { isSymbolicLink: () => stat36.isSymbolicLink() };
     },
     mkdir: async (filePath, options) => {
       await fsPromises18.mkdir(filePath, options);
@@ -74777,15 +74777,15 @@ function createDefaultFs8() {
     readFile: fsPromises19.readFile,
     readdir: fsPromises19.readdir,
     lstat: async (filePath) => {
-      const stat35 = await fsPromises19.lstat(filePath);
-      return { isSymbolicLink: () => stat35.isSymbolicLink() };
+      const stat36 = await fsPromises19.lstat(filePath);
+      return { isSymbolicLink: () => stat36.isSymbolicLink() };
     },
     stat: async (filePath) => {
-      const stat35 = await fsPromises19.stat(filePath);
+      const stat36 = await fsPromises19.stat(filePath);
       return {
-        isFile: () => stat35.isFile(),
-        isDirectory: () => stat35.isDirectory(),
-        mtimeMs: stat35.mtimeMs
+        isFile: () => stat36.isFile(),
+        isDirectory: () => stat36.isDirectory(),
+        mtimeMs: stat36.mtimeMs
       };
     }
   };
@@ -75088,15 +75088,15 @@ function createDefaultFs9() {
     readdir: fsPromises20.readdir,
     open: (filePath, flags) => fsPromises20.open(filePath, flags),
     lstat: async (filePath) => {
-      const stat35 = await fsPromises20.lstat(filePath);
-      return { isSymbolicLink: () => stat35.isSymbolicLink() };
+      const stat36 = await fsPromises20.lstat(filePath);
+      return { isSymbolicLink: () => stat36.isSymbolicLink() };
     },
     stat: async (filePath) => {
-      const stat35 = await fsPromises20.stat(filePath);
+      const stat36 = await fsPromises20.stat(filePath);
       return {
-        isFile: () => stat35.isFile(),
-        isDirectory: () => stat35.isDirectory(),
-        mtimeMs: stat35.mtimeMs
+        isFile: () => stat36.isFile(),
+        isDirectory: () => stat36.isDirectory(),
+        mtimeMs: stat36.mtimeMs
       };
     },
     unlink: async (filePath) => {
@@ -75622,16 +75622,16 @@ function createDefaultFs10() {
     readdir: fsPromises21.readdir,
     realpath: fsPromises21.realpath,
     stat: async (filePath) => {
-      const stat35 = await fsPromises21.stat(filePath);
+      const stat36 = await fsPromises21.stat(filePath);
       return {
-        isFile: () => stat35.isFile(),
-        isDirectory: () => stat35.isDirectory(),
-        mtimeMs: stat35.mtimeMs
+        isFile: () => stat36.isFile(),
+        isDirectory: () => stat36.isDirectory(),
+        mtimeMs: stat36.mtimeMs
       };
     },
     lstat: async (filePath) => {
-      const stat35 = await fsPromises21.lstat(filePath);
-      return { isSymbolicLink: () => stat35.isSymbolicLink() };
+      const stat36 = await fsPromises21.lstat(filePath);
+      return { isSymbolicLink: () => stat36.isSymbolicLink() };
     },
     mkdir: async (directoryPath, mkdirOptions) => {
       await fsPromises21.mkdir(directoryPath, mkdirOptions);
@@ -75782,16 +75782,16 @@ async function discoverPlanDirectoryEntries(options) {
     if (canonicalPath !== path89.resolve(absolutePath)) {
       throw new Error(`Plan file must not be a symbolic link: ${path89.join(options.displayDir, name)}`);
     }
-    const stat35 = await options.fs.stat(absolutePath).catch((error3) => {
+    const stat36 = await options.fs.stat(absolutePath).catch((error3) => {
       if (isNotFound4(error3)) {
         return void 0;
       }
       throw error3;
     });
-    if (stat35 === void 0) {
+    if (stat36 === void 0) {
       continue;
     }
-    if (!stat35.isFile()) {
+    if (!stat36.isFile()) {
       continue;
     }
     const displayPath = path89.join(options.displayDir, name);
@@ -75817,7 +75817,7 @@ async function discoverPlanDirectoryEntries(options) {
       format: metadata.format,
       title: metadata.title,
       detail: metadata.detail,
-      updatedAt: stat35.mtimeMs,
+      updatedAt: stat36.mtimeMs,
       ...savedForLater === void 0 ? {} : { savedForLater }
     });
   }
@@ -76237,13 +76237,13 @@ async function loadMarkdownUnlessAborted(signal, load3) {
   if (signal.aborted) {
     return void 0;
   }
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     const abort = () => {
-      resolve14(void 0);
+      resolve16(void 0);
     };
     signal.addEventListener("abort", abort, { once: true });
     load3().then((markdown) => {
-      resolve14(signal.aborted ? void 0 : markdown);
+      resolve16(signal.aborted ? void 0 : markdown);
     }, reject).finally(() => {
       signal.removeEventListener("abort", abort);
     });
@@ -77948,15 +77948,15 @@ async function discoverMarkdownFiles(fs31, absoluteDirectory, parentRelativePath
   for (const entry of [...entries].sort((left, right) => left.localeCompare(right))) {
     const absolutePath = path94.join(absoluteDirectory, entry);
     const relativePath = parentRelativePath.length > 0 ? path94.join(parentRelativePath, entry) : entry;
-    const stat35 = await fs31.stat(absolutePath);
-    if (stat35.isDirectory()) {
+    const stat36 = await fs31.stat(absolutePath);
+    if (stat36.isDirectory()) {
       if (entry === "archive") {
         continue;
       }
       markdownFiles.push(...await discoverMarkdownFiles(fs31, absolutePath, relativePath));
       continue;
     }
-    if (!stat35.isFile() || !entry.toLowerCase().endsWith(".md")) {
+    if (!stat36.isFile() || !entry.toLowerCase().endsWith(".md")) {
       continue;
     }
     markdownFiles.push({
@@ -79188,11 +79188,11 @@ async function assertPathAncestorsHaveNoSymbolicLinks(targetPath) {
   let currentPath = root;
   for (const segment of segments.slice(0, -1)) {
     currentPath = path98.join(currentPath, segment);
-    const stat35 = await lstatIfExists(currentPath);
-    if (stat35 === void 0) {
+    const stat36 = await lstatIfExists(currentPath);
+    if (stat36 === void 0) {
       return;
     }
-    if (stat35.isSymbolicLink()) {
+    if (stat36.isSymbolicLink()) {
       throw new Error(`workspace path must not contain symbolic links: ${targetPath}`);
     }
   }
@@ -80696,8 +80696,8 @@ async function withBudget(promise, ms) {
   try {
     return await Promise.race([
       promise,
-      new Promise((resolve14) => {
-        timer = setTimeout(() => resolve14(void 0), ms);
+      new Promise((resolve16) => {
+        timer = setTimeout(() => resolve16(void 0), ms);
       })
     ]);
   } finally {
@@ -80915,8 +80915,8 @@ async function removeDirectory2(fs31, directoryPath) {
   }
   for (const entry of entries) {
     const entryPath = path105.join(directoryPath, entry);
-    const stat35 = await fs31.stat(entryPath);
-    if (stat35.isFile()) {
+    const stat36 = await fs31.stat(entryPath);
+    if (stat36.isFile()) {
       await fs31.rm(entryPath, { force: true });
       continue;
     }
@@ -81004,8 +81004,8 @@ function createStateStore(stateDir, fs31 = nodeFs7) {
       }
       const entryPath = path105.join(stateDir, entry);
       try {
-        const stat35 = await fs31.stat(entryPath);
-        if (stat35.isFile()) {
+        const stat36 = await fs31.stat(entryPath);
+        if (stat36.isFile()) {
           continue;
         }
       } catch (error3) {
@@ -81298,7 +81298,7 @@ function waitForLogPattern(pattern, options) {
     return Promise.reject(new Error("A subscribable log source is required for log-pattern readiness checks."));
   }
   const logSource = options.onLog;
-  return new Promise((resolve14) => {
+  return new Promise((resolve16) => {
     let finished = false;
     const timeout = setTimeout(() => {
       finish(false);
@@ -81320,7 +81320,7 @@ function waitForLogPattern(pattern, options) {
       clearTimeout(timeout);
       options.signal?.removeEventListener("abort", onAbort);
       unsubscribe();
-      resolve14(result);
+      resolve16(result);
     }
   });
 }
@@ -81332,7 +81332,7 @@ function waitForTcp(check, options) {
   const timeoutMs = options.timeoutMs ?? check.timeoutMs ?? 3e4;
   assertValidTimeout(timeoutMs, "TCP readiness timeout");
   const deadline = Date.now() + timeoutMs;
-  return new Promise((resolve14) => {
+  return new Promise((resolve16) => {
     let finished = false;
     let activeSocket;
     let retryTimer;
@@ -81399,7 +81399,7 @@ function waitForTcp(check, options) {
       activeSocket?.destroy();
       activeSocket = void 0;
       signal?.removeEventListener("abort", onAbort);
-      resolve14(result);
+      resolve16(result);
     }
   });
 }
@@ -81758,8 +81758,8 @@ async function hasSurvivedSettleWindow(activeHandle, settleMs) {
     return true;
   }
   let timer;
-  const survived = new Promise((resolve14) => {
-    timer = setTimeout(() => resolve14(true), settleMs);
+  const survived = new Promise((resolve16) => {
+    timer = setTimeout(() => resolve16(true), settleMs);
   });
   try {
     return await Promise.race([activeHandle.result.then(() => false, () => false), survived]);
@@ -81792,8 +81792,8 @@ function assertValidRestartConfig(spec10) {
   }
 }
 function delay2(durationMs) {
-  return new Promise((resolve14) => {
-    setTimeout(resolve14, durationMs);
+  return new Promise((resolve16) => {
+    setTimeout(resolve16, durationMs);
   });
 }
 async function terminateHandle(activeHandle) {
@@ -81805,7 +81805,7 @@ async function terminateHandle(activeHandle) {
   }
 }
 function waitForExit2(activeHandle, timeoutMs) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve16) => {
     let finished = false;
     const timeout = setTimeout(() => {
       finish(false);
@@ -81819,7 +81819,7 @@ function waitForExit2(activeHandle, timeoutMs) {
       }
       finished = true;
       clearTimeout(timeout);
-      resolve14(result);
+      resolve16(result);
     }
   });
 }
@@ -81847,7 +81847,7 @@ function pipeOutput(stream, output, write2, logSource) {
   if (stream === null) {
     return Promise.resolve();
   }
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     let remainder = "";
     let writes = Promise.resolve();
     stream.setEncoding("utf8");
@@ -81879,7 +81879,7 @@ function pipeOutput(stream, output, write2, logSource) {
         });
       }
       void writes.then(() => {
-        resolve14();
+        resolve16();
       }, reject);
     });
     stream.once("error", reject);
@@ -81920,9 +81920,9 @@ function resolveWorkspaceHomeDir(stateDir) {
   return os14.homedir();
 }
 function execWorkspaceCommand(command, args, cwd, signal) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve16) => {
     if (signal?.aborted) {
-      resolve14({
+      resolve16({
         stdout: "",
         stderr: "Workspace command aborted.",
         exitCode: 130
@@ -81960,7 +81960,7 @@ function execWorkspaceCommand(command, args, cwd, signal) {
       }
       settled = true;
       cleanup();
-      resolve14(result);
+      resolve16(result);
     };
     const terminate = (reason) => {
       if (settled || timedOut || aborted) {
@@ -82271,9 +82271,9 @@ function createFollowLogCursor() {
 }
 async function readInitialFollowLogWindow(fs31, baseDir, id, stream, lines, cursor2) {
   assertValidLogLineCount(lines);
-  const stat35 = await statFollowedLog(fs31, baseDir, id, stream);
-  resetFollowCursor(cursor2, stat35?.fileId ?? null);
-  if (stat35 === null) {
+  const stat36 = await statFollowedLog(fs31, baseDir, id, stream);
+  resetFollowCursor(cursor2, stat36?.fileId ?? null);
+  if (stat36 === null) {
     return [];
   }
   const bytes = await readFollowedLogBytes(
@@ -82294,13 +82294,13 @@ function assertValidLogLineCount(lines) {
   }
 }
 async function primeFollowCursor(fs31, baseDir, id, stream, cursor2) {
-  const stat35 = await statFollowedLog(fs31, baseDir, id, stream);
-  resetFollowCursor(cursor2, stat35?.fileId ?? null);
-  if (stat35 === null) {
+  const stat36 = await statFollowedLog(fs31, baseDir, id, stream);
+  resetFollowCursor(cursor2, stat36?.fileId ?? null);
+  if (stat36 === null) {
     return;
   }
-  if (stat35.size !== null) {
-    cursor2.offset = stat35.size;
+  if (stat36.size !== null) {
+    cursor2.offset = stat36.size;
     return;
   }
   const bytes = await readFollowedLogBytes(
@@ -82308,21 +82308,21 @@ async function primeFollowCursor(fs31, baseDir, id, stream, cursor2) {
     resolveCurrentLogPath(baseDir, id, stream),
     0
   );
-  resetFollowCursor(cursor2, stat35.fileId);
+  resetFollowCursor(cursor2, stat36.fileId);
   cursor2.offset = bytes.byteLength;
 }
 async function readFollowedLogDelta(fs31, baseDir, id, stream, cursor2) {
-  const stat35 = await statFollowedLog(fs31, baseDir, id, stream);
-  if (stat35 === null) {
+  const stat36 = await statFollowedLog(fs31, baseDir, id, stream);
+  if (stat36 === null) {
     resetFollowCursor(cursor2, null);
     return [];
   }
-  if (cursor2.fileId !== null && stat35.fileId !== null && cursor2.fileId !== stat35.fileId || stat35.size !== null && stat35.size < cursor2.offset) {
-    resetFollowCursor(cursor2, stat35.fileId);
+  if (cursor2.fileId !== null && stat36.fileId !== null && cursor2.fileId !== stat36.fileId || stat36.size !== null && stat36.size < cursor2.offset) {
+    resetFollowCursor(cursor2, stat36.fileId);
   } else if (cursor2.fileId === null) {
-    cursor2.fileId = stat35.fileId;
+    cursor2.fileId = stat36.fileId;
   }
-  if (stat35.size !== null && stat35.size === cursor2.offset) {
+  if (stat36.size !== null && stat36.size === cursor2.offset) {
     return [];
   }
   const bytes = await readFollowedLogBytes(
@@ -82342,10 +82342,10 @@ async function statFollowedLog(fs31, baseDir, id, stream) {
   const logPath = resolveCurrentLogPath(baseDir, id, stream);
   await assertPathNotSymbolicLink(fs31, logPath);
   try {
-    const stat35 = await fs31.stat(logPath);
+    const stat36 = await fs31.stat(logPath);
     return {
-      fileId: getFileId(stat35),
-      size: typeof stat35.size === "number" ? stat35.size : null
+      fileId: getFileId(stat36),
+      size: typeof stat36.size === "number" ? stat36.size : null
     };
   } catch (error3) {
     if (isNotFoundError9(error3)) {
@@ -82385,8 +82385,8 @@ function resetFollowCursor(cursor2, fileId3) {
 function normalizeLogLine2(line) {
   return line.endsWith("\r") ? line.slice(0, -1) : line;
 }
-function getFileId(stat35) {
-  return typeof stat35.dev === "number" && typeof stat35.ino === "number" ? `${stat35.dev}:${stat35.ino}` : null;
+function getFileId(stat36) {
+  return typeof stat36.dev === "number" && typeof stat36.ino === "number" ? `${stat36.dev}:${stat36.ino}` : null;
 }
 async function removeManagedProcess(options) {
   const fs31 = options.fs ?? defaultFs3();
@@ -82600,8 +82600,8 @@ async function listIds(fs31, baseDir) {
       const entryPath = path108.join(baseDir, entry);
       try {
         await assertPathNotSymbolicLink(fs31, entryPath);
-        const stat35 = await fs31.stat(entryPath);
-        if (!stat35.isFile()) {
+        const stat36 = await fs31.stat(entryPath);
+        if (!stat36.isFile()) {
           ids.push(entry);
         }
       } catch (error3) {
@@ -82834,8 +82834,8 @@ function defaultFs3() {
 async function readDefaultFileBytes(filePath, start) {
   const handle = await nodeFs10.open(filePath, "r");
   try {
-    const stat35 = await handle.stat();
-    const length = Math.max(0, stat35.size - start);
+    const stat36 = await handle.stat();
+    const length = Math.max(0, stat36.size - start);
     if (length === 0) {
       return new Uint8Array();
     }
@@ -82864,8 +82864,8 @@ function isProcessRunning2(pid, isPidRunningOverride) {
   }
 }
 function sleep4(durationMs) {
-  return new Promise((resolve14) => {
-    setTimeout(resolve14, durationMs);
+  return new Promise((resolve16) => {
+    setTimeout(resolve16, durationMs);
   });
 }
 var DEFAULT_POLL_INTERVAL_MS, DEFAULT_STARTUP_TIMEOUT_MS, DEFAULT_STOP_TIMEOUT_MS, TEMP_WRITE_MAX_ATTEMPTS;
@@ -82974,16 +82974,16 @@ function createDefaultFs11() {
     },
     readdir: fsPromises23.readdir,
     stat: async (filePath) => {
-      const stat35 = await fsPromises23.stat(filePath);
+      const stat36 = await fsPromises23.stat(filePath);
       return {
-        isFile: () => stat35.isFile(),
-        isDirectory: () => stat35.isDirectory(),
-        mtimeMs: stat35.mtimeMs
+        isFile: () => stat36.isFile(),
+        isDirectory: () => stat36.isDirectory(),
+        mtimeMs: stat36.mtimeMs
       };
     },
     lstat: async (filePath) => {
-      const stat35 = await fsPromises23.lstat(filePath);
-      return { isSymbolicLink: () => stat35.isSymbolicLink() };
+      const stat36 = await fsPromises23.lstat(filePath);
+      return { isSymbolicLink: () => stat36.isSymbolicLink() };
     },
     mkdir: async (filePath, options) => {
       await fsPromises23.mkdir(filePath, options);
@@ -84515,8 +84515,8 @@ var init_pi4 = __esm({
         const references = [];
         for (const directory of directories) {
           for (const filePath of await listJsonlFiles2(options.fs, directory)) {
-            const stat35 = await options.fs.stat(filePath);
-            const updatedAt = stat35.mtime;
+            const stat36 = await options.fs.stat(filePath);
+            const updatedAt = stat36.mtime;
             if (options.since && updatedAt && updatedAt < options.since) {
               continue;
             }
@@ -88252,8 +88252,8 @@ async function listEvals(source, fs31 = nodeFs17) {
     const name = typeof entry === "string" ? entry : entry.name;
     const entryPath = join9(source.rootDir, name);
     if (typeof entry === "string") {
-      const stat35 = await fs31.stat(entryPath);
-      if (!stat35.isDirectory()) {
+      const stat36 = await fs31.stat(entryPath);
+      if (!stat36.isDirectory()) {
         continue;
       }
     } else if (!entry.isDirectory()) {
@@ -88336,8 +88336,8 @@ async function loadEval(source, id, fs31 = nodeFs17) {
 }
 async function isFile2(path186, fs31) {
   try {
-    const stat35 = await fs31.stat(path186);
-    return typeof stat35.isFile === "function" ? stat35.isFile() : !stat35.isDirectory();
+    const stat36 = await fs31.stat(path186);
+    return typeof stat36.isFile === "function" ? stat36.isFile() : !stat36.isDirectory();
   } catch (error3) {
     if (isMissingPath4(error3)) {
       return false;
@@ -88433,16 +88433,16 @@ async function openSource(dir, fs31 = nodeFs18) {
   if (!isAbsolute6(dir)) {
     throw new UserError2(`Eval source path must be absolute, received "${dir}".`);
   }
-  let stat35;
+  let stat36;
   try {
-    stat35 = await fs31.stat(dir);
+    stat36 = await fs31.stat(dir);
   } catch (error3) {
     if (isMissingPath5(error3)) {
       throw new UserError2(`Eval source "${dir}" does not exist or is not a directory.`);
     }
     throw error3;
   }
-  if (!stat35.isDirectory()) {
+  if (!stat36.isDirectory()) {
     throw new UserError2(`Eval source "${dir}" is not a directory.`);
   }
   const source = { rootDir: dir };
@@ -88838,9 +88838,9 @@ function waitForRunHandle(handle, timeoutMs) {
       () => true,
       () => true
     ),
-    new Promise((resolve14) => {
+    new Promise((resolve16) => {
       timeout = setTimeout(() => {
-        resolve14(false);
+        resolve16(false);
       }, timeoutMs);
     })
   ]).finally(() => {
@@ -88949,7 +88949,7 @@ async function waitForVitest(handle, timeoutMs, signal) {
     await terminateRunHandle(handle);
     throw abortReason(signal);
   }
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     let settled = false;
     let cancelling = false;
     let timeout = null;
@@ -88997,7 +88997,7 @@ async function waitForVitest(handle, timeoutMs, signal) {
         if (cancelling) {
           return;
         }
-        finish(() => resolve14({ exitCode: result.exitCode }));
+        finish(() => resolve16({ exitCode: result.exitCode }));
       },
       (error3) => {
         if (cancelling) {
@@ -89069,8 +89069,8 @@ function drainStream(stream) {
     return Promise.resolve();
   }
   stream.resume();
-  return new Promise((resolve14, reject) => {
-    stream.once("end", resolve14);
+  return new Promise((resolve16, reject) => {
+    stream.once("end", resolve16);
     stream.once("error", reject);
   });
 }
@@ -89263,9 +89263,9 @@ function assertValidTimeout3(timeoutMs) {
 }
 async function waitForResult(handle, timeoutMs) {
   let timeout = null;
-  const timeoutPromise = new Promise((resolve14) => {
+  const timeoutPromise = new Promise((resolve16) => {
     timeout = setTimeout(() => {
-      resolve14({ exitCode: 1, timedOut: true });
+      resolve16({ exitCode: 1, timedOut: true });
     }, timeoutMs);
   });
   const result = await Promise.race([
@@ -89289,11 +89289,11 @@ function captureStream(stream) {
   }
   let output = "";
   stream.setEncoding("utf8");
-  const finished = new Promise((resolve14, reject) => {
+  const finished = new Promise((resolve16, reject) => {
     stream.on("data", (chunk) => {
       output += chunk;
     });
-    stream.once("end", resolve14);
+    stream.once("end", resolve16);
     stream.once("error", reject);
   });
   return {
@@ -89872,8 +89872,8 @@ async function readTextIfPresent(filePath, fs31) {
 }
 async function isDirectory3(dirPath, fs31) {
   try {
-    const stat35 = await fs31.stat(dirPath);
-    return stat35.isDirectory();
+    const stat36 = await fs31.stat(dirPath);
+    return stat36.isDirectory();
   } catch (error3) {
     if (isMissingPath8(error3)) {
       return false;
@@ -90738,10 +90738,10 @@ async function collectFiles(rootDir, currentDir2, files) {
     if (!entry.isFile()) {
       continue;
     }
-    const stat35 = await fs13.stat(absolutePath);
+    const stat36 = await fs13.stat(absolutePath);
     files.push({
       path: path133.relative(rootDir, absolutePath),
-      bytes: stat35.size
+      bytes: stat36.size
     });
   }
 }
@@ -90787,13 +90787,13 @@ function createJudgeStreamingSpawn() {
 async function* emptyEvents() {
 }
 function createDeferred() {
-  let resolve14;
+  let resolve16;
   let reject;
   const promise = new Promise((resolvePromise, rejectPromise) => {
-    resolve14 = resolvePromise;
+    resolve16 = resolvePromise;
     reject = rejectPromise;
   });
-  return { promise, resolve: resolve14, reject };
+  return { promise, resolve: resolve16, reject };
 }
 function resolveJudgeMode(agent3) {
   const config2 = getSpawnConfig(agent3);
@@ -91034,8 +91034,8 @@ async function assertRunArtifactPath(sourceRootDir, targetPath) {
   for (const segment of relativePath.split(path134.sep).filter(Boolean)) {
     current = path134.join(current, segment);
     try {
-      const stat35 = await lstat30(current);
-      if (stat35.isSymbolicLink()) {
+      const stat36 = await lstat30(current);
+      if (stat36.isSymbolicLink()) {
         throw new Error(`Run artifact path must not traverse a symbolic link: ${current}`);
       }
     } catch (error3) {
@@ -91138,9 +91138,9 @@ function createOracleEnv(oracleDir) {
 }
 async function waitForResult2(handle, timeoutMs) {
   let timeout = null;
-  const timeoutPromise = new Promise((resolve14) => {
+  const timeoutPromise = new Promise((resolve16) => {
     timeout = setTimeout(() => {
-      resolve14({ exitCode: 1, timedOut: true });
+      resolve16({ exitCode: 1, timedOut: true });
     }, timeoutMs);
   });
   const result = await Promise.race([
@@ -91164,11 +91164,11 @@ function captureStream2(stream) {
   }
   let output = "";
   stream.setEncoding("utf8");
-  const finished = new Promise((resolve14, reject) => {
+  const finished = new Promise((resolve16, reject) => {
     stream.on("data", (chunk) => {
       output += chunk;
     });
-    stream.once("end", resolve14);
+    stream.once("end", resolve16);
     stream.once("error", reject);
   });
   return {
@@ -92658,16 +92658,16 @@ async function resolveDefaultEvalIds(sourceDir, fs31) {
   return evalIds.length === 1 ? [evalIds[0]] : evalIds;
 }
 async function assertSourceDirectory(sourceDir, fs31) {
-  let stat35;
+  let stat36;
   try {
-    stat35 = await fs31.stat(sourceDir);
+    stat36 = await fs31.stat(sourceDir);
   } catch (error3) {
     if (isMissingPath13(error3)) {
       throw new UserError2(`Eval source "${sourceDir}" does not exist or is not a directory.`);
     }
     throw error3;
   }
-  if (!stat35.isDirectory()) {
+  if (!stat36.isDirectory()) {
     throw new UserError2(`Eval source "${sourceDir}" is not a directory.`);
   }
 }
@@ -94006,8 +94006,8 @@ function createEventQueue3() {
           if (completed) {
             return Promise.resolve({ done: true, value: void 0 });
           }
-          return new Promise((resolve14) => {
-            waiters.push(resolve14);
+          return new Promise((resolve16) => {
+            waiters.push(resolve16);
           });
         }
       };
@@ -94317,8 +94317,8 @@ function createInMemoryAcpTransport2(options) {
   const requestHandlers = /* @__PURE__ */ new Map();
   let closed = false;
   let resolveClosed;
-  const closedPromise = new Promise((resolve14) => {
-    resolveClosed = resolve14;
+  const closedPromise = new Promise((resolve16) => {
+    resolveClosed = resolve16;
   });
   const sessionMcpServers = options.mcpServers ? toAgentSessionMcpServers(options.mcpServers) : void 0;
   const closeTransport = (reason) => {
@@ -100516,13 +100516,13 @@ async function loadMarkdownUnlessAborted2(signal, load3) {
   if (signal.aborted) {
     return void 0;
   }
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     const abort = () => {
-      resolve14(void 0);
+      resolve16(void 0);
     };
     signal.addEventListener("abort", abort, { once: true });
     load3().then((markdown) => {
-      resolve14(signal.aborted ? void 0 : markdown);
+      resolve16(signal.aborted ? void 0 : markdown);
     }, reject).finally(() => {
       signal.removeEventListener("abort", abort);
     });
@@ -100623,8 +100623,8 @@ async function resolveApiKeyViaOAuth(options = {}, dependencies = {}) {
         log.warn("Could not open browser automatically.");
         failIfUnavailable();
       }),
-      readLine: () => new Promise((resolve14) => {
-        rl.once("line", (line) => resolve14(line));
+      readLine: () => new Promise((resolve16) => {
+        rl.once("line", (line) => resolve16(line));
       })
     });
     const authorization = await client.authorize();
@@ -100639,14 +100639,14 @@ async function resolveApiKeyViaOAuth(options = {}, dependencies = {}) {
   }
 }
 function openInBrowser(url) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     const platform = process.platform;
     const command = platform === "darwin" ? `open "${url}"` : platform === "win32" ? `start "" "${url}"` : `xdg-open "${url}"`;
     exec(command, (error3) => {
       if (error3) {
         reject(error3);
       } else {
-        resolve14();
+        resolve16();
       }
     });
   });
@@ -107714,8 +107714,8 @@ async function countTokensYielding(text5) {
   return total2;
 }
 function yieldToEventLoop() {
-  return new Promise((resolve14) => {
-    setImmediate(resolve14);
+  return new Promise((resolve16) => {
+    setImmediate(resolve16);
   });
 }
 var MATCHERS, TURNS_PER_YIELD, ESTIMATOR_SAMPLE_TARGET_CHARS, ESTIMATOR_SAMPLE_CHARS_PER_TURN, ESTIMATOR_DEFAULT_CHARS_PER_TOKEN, COUNT_CHUNK_CHARS;
@@ -108030,7 +108030,7 @@ function scheduleExactBreakdown(trace, filePath, identity, cacheDir, options) {
     return;
   }
   const task = (async () => {
-    await new Promise((resolve14) => setTimeout(resolve14, EXACT_BREAKDOWN_START_DELAY_MS));
+    await new Promise((resolve16) => setTimeout(resolve16, EXACT_BREAKDOWN_START_DELAY_MS));
     const breakdown = await computeContextBreakdown(trace);
     await writeCachedBreakdown(options.fs, cacheDir, filePath, identity, breakdown);
     options.onExactBreakdown?.(breakdown);
@@ -108175,14 +108175,14 @@ function detectTraceFile(firstLine) {
   return void 0;
 }
 async function loadTraceFromFile(path186, options) {
-  const stat35 = await options.fs.stat(path186).catch(() => void 0);
-  if (stat35 === void 0) {
+  const stat36 = await options.fs.stat(path186).catch(() => void 0);
+  if (stat36 === void 0) {
     throw new UserError(
       `Trace file not found: ${path186}
 Pass a path to an existing trace file, or run "poe-code traces" to list the traces found.`
     );
   }
-  if (stat35.isDirectory()) {
+  if (stat36.isDirectory()) {
     throw new UserError(
       `Trace path is a directory: ${path186}
 Pass a path to a trace file, or run "poe-code traces" to list the traces found.`
@@ -108363,8 +108363,8 @@ async function renderTraceDetail(view, subagents = [], options = {}) {
   return lines.join("\n");
 }
 function yieldToEventLoop2() {
-  return new Promise((resolve14) => {
-    setImmediate(resolve14);
+  return new Promise((resolve16) => {
+    setImmediate(resolve16);
   });
 }
 function renderBreakdownItems(items, minimumTokenWidth, theme) {
@@ -110078,13 +110078,13 @@ async function loadUnlessAborted(signal, load3) {
   if (signal.aborted) {
     return void 0;
   }
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     const abort = () => {
-      resolve14(void 0);
+      resolve16(void 0);
     };
     signal.addEventListener("abort", abort, { once: true });
     load3().then((value) => {
-      resolve14(signal.aborted ? void 0 : value);
+      resolve16(signal.aborted ? void 0 : value);
     }, reject).finally(() => {
       signal.removeEventListener("abort", abort);
     });
@@ -112460,8 +112460,8 @@ async function assertNoSymlinkSegments(root, relPath) {
   for (const segment of normalizedRelPath.split("/")) {
     currentPath = path160.join(currentPath, segment);
     try {
-      const stat35 = await fs15.lstat(currentPath);
-      if (stat35.isSymbolicLink()) {
+      const stat36 = await fs15.lstat(currentPath);
+      if (stat36.isSymbolicLink()) {
         throw new MemoryPathError(`Memory path "${relPath}" cannot traverse a symbolic link.`);
       }
     } catch (error3) {
@@ -112479,8 +112479,8 @@ async function assertMemoryRootIsNotSymlink(root) {
   for (const segment of absoluteRoot.slice(pathRoot.length).split(path160.sep).filter(Boolean)) {
     currentPath = path160.join(currentPath, segment);
     try {
-      const stat35 = await fs15.lstat(currentPath);
-      if (stat35.isSymbolicLink()) {
+      const stat36 = await fs15.lstat(currentPath);
+      if (stat36.isSymbolicLink()) {
         if (await isAllowedMacSystemAlias(currentPath)) {
           continue;
         }
@@ -112819,7 +112819,7 @@ async function readPage(root, relPath) {
   const normalizedRelPath = assertMarkdownRelPath(relPath);
   await assertNoSymlinkSegments(root, normalizedRelPath);
   const absPath = path163.join(root, normalizedRelPath);
-  const [content, stat35] = await Promise.all([fs17.readFile(absPath, "utf8"), fs17.stat(absPath)]);
+  const [content, stat36] = await Promise.all([fs17.readFile(absPath, "utf8"), fs17.stat(absPath)]);
   try {
     const parsed = parseFrontmatter4(content);
     return {
@@ -112827,7 +112827,7 @@ async function readPage(root, relPath) {
       frontmatter: parsed.frontmatter,
       body: parsed.body,
       bytes: Buffer.byteLength(content),
-      mtimeMs: stat35.mtimeMs
+      mtimeMs: stat36.mtimeMs
     };
   } catch (error3) {
     const message2 = error3 instanceof Error ? error3.message : String(error3);
@@ -112837,7 +112837,7 @@ async function readPage(root, relPath) {
       frontmatter: {},
       body: content,
       bytes: Buffer.byteLength(content),
-      mtimeMs: stat35.mtimeMs
+      mtimeMs: stat36.mtimeMs
     };
   }
 }
@@ -112969,9 +112969,9 @@ async function statusOf(root) {
   let lastWriteAtMs = Number.NEGATIVE_INFINITY;
   for (const relPath of markdownRelPaths) {
     await assertNoSymlinkSegments(root, relPath);
-    const stat35 = await fs19.stat(path165.join(root, relPath));
-    totalBytes += stat35.size;
-    lastWriteAtMs = Math.max(lastWriteAtMs, stat35.mtimeMs);
+    const stat36 = await fs19.stat(path165.join(root, relPath));
+    totalBytes += stat36.size;
+    lastWriteAtMs = Math.max(lastWriteAtMs, stat36.mtimeMs);
   }
   return {
     pageCount: pageRelPaths.length,
@@ -114160,7 +114160,7 @@ function inferRepoRoot(root) {
   return path172.resolve(root, "..", "..");
 }
 async function runWithTimeout(promise, timeoutMs, onTimeout) {
-  return await new Promise((resolve14, reject) => {
+  return await new Promise((resolve16, reject) => {
     const timer = setTimeout(() => {
       onTimeout();
       reject(new Error(`ingest timed out after ${timeoutMs}ms`));
@@ -114168,7 +114168,7 @@ async function runWithTimeout(promise, timeoutMs, onTimeout) {
     promise.then(
       (value) => {
         clearTimeout(timer);
-        resolve14(value);
+        resolve16(value);
       },
       (error3) => {
         clearTimeout(timer);
@@ -116644,8 +116644,8 @@ function isStrictlyNewer(left, right) {
   return Number.isFinite(leftStart) && Number.isFinite(rightStart) && leftStart > rightStart;
 }
 function sleep5(ms) {
-  return new Promise((resolve14) => {
-    setTimeout(() => resolve14("timeout"), ms);
+  return new Promise((resolve16) => {
+    setTimeout(() => resolve16("timeout"), ms);
   });
 }
 function pendingForever() {
@@ -135655,8 +135655,8 @@ function indexHeapContainers(snapshot2) {
   }
   const heapIds = /* @__PURE__ */ new WeakMap();
   let nextId = 1;
-  for (const [value, stat35] of stats2.entries()) {
-    if (stat35.count > 1 || stat35.cyclic) {
+  for (const [value, stat36] of stats2.entries()) {
+    if (stat36.count > 1 || stat36.cyclic) {
       heapIds.set(value, nextId);
       nextId += 1;
     }
@@ -135670,24 +135670,24 @@ function collectContainerStats(value, stats2, ancestors) {
   if (!Array.isArray(value) && !isPlainObject9(value)) {
     return;
   }
-  let stat35 = stats2.get(value);
-  if (stat35 === void 0) {
-    stat35 = {
+  let stat36 = stats2.get(value);
+  if (stat36 === void 0) {
+    stat36 = {
       count: 0,
       cyclic: false,
       expanded: false
     };
-    stats2.set(value, stat35);
+    stats2.set(value, stat36);
   }
-  stat35.count += 1;
+  stat36.count += 1;
   if (ancestors.has(value)) {
-    stat35.cyclic = true;
+    stat36.cyclic = true;
     return;
   }
-  if (stat35.expanded) {
+  if (stat36.expanded) {
     return;
   }
-  stat35.expanded = true;
+  stat36.expanded = true;
   ancestors.add(value);
   const entries = Array.isArray(value) ? getArrayDataItems(value) : getEnumerableDataValues(value);
   for (const entry of entries) {
@@ -136909,6 +136909,7 @@ function wrapCancelableValue(value, signal, seen) {
     return wrapped2;
   }
   if (isSandboxPromise(value)) {
+    observeSandboxPromise(value);
     const wrapped2 = createSandboxPromise(wrapCancelablePromise(value.promise, signal, seen), {
       ...value.hostCall === void 0 ? {} : { hostCall: value.hostCall },
       ...value.hostCallJournal === void 0 ? {} : { hostCallJournal: value.hostCallJournal },
@@ -136942,7 +136943,7 @@ function wrapCancelablePromise(promise, signal, seen) {
   if (signal.aborted) {
     return Promise.reject(readAbortReason(signal));
   }
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     let listenerActive = true;
     let settled = false;
     const onAbort = () => {
@@ -136969,7 +136970,7 @@ function wrapCancelablePromise(promise, signal, seen) {
     signal.addEventListener("abort", onAbort, { once: true });
     Promise.resolve(promise).then(
       (value) => {
-        settle(() => resolve14(wrapCancelableValue(value, signal, seen)));
+        settle(() => resolve16(wrapCancelableValue(value, signal, seen)));
       },
       (reason) => {
         settle(() => reject(wrapCancelableUnknown(reason, signal, seen)));
@@ -137012,6 +137013,7 @@ var init_cancel2 = __esm({
   "packages/safejs/src/interp/cancel.ts"() {
     "use strict";
     init_values();
+    init_promise_tracker();
     init_shape();
   }
 });
@@ -137501,6 +137503,12 @@ function budgetSandboxValue(value, budget) {
 function resolveSandboxValue(value, options = {}) {
   return Promise.resolve().then(() => resolveSandboxValueNow(value, options, /* @__PURE__ */ new WeakSet()));
 }
+function consumeSettledHostCall(value) {
+  if (value.hostCall?.lifecycle !== "settled") {
+    return;
+  }
+  value.hostCallJournal?.consume(value.hostCall);
+}
 function resolveSandboxValueNow(value, options, seenThenables) {
   if (isPromiseLike4(value)) {
     return Promise.resolve(value).then(
@@ -137512,11 +137520,11 @@ function resolveSandboxValueNow(value, options, seenThenables) {
     observeSandboxPromise(value);
     return value.promise.then(
       (resolved) => {
-        value.hostCallJournal?.consume(value.hostCall);
+        consumeSettledHostCall(value);
         return resolveSandboxValueNow(resolved, options, seenThenables);
       },
       (reason) => {
-        value.hostCallJournal?.consume(value.hostCall);
+        consumeSettledHostCall(value);
         return Promise.reject(budgetIfNeeded(reason, options.budget));
       }
     );
@@ -137538,14 +137546,14 @@ function resolveThenable(value, then, options, seenThenables) {
     });
   }
   seenThenables.add(value);
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     let settlement;
     let completed = false;
     const complete = () => {
       if (completed || settlement === void 0) return;
       completed = true;
       if (settlement.state === "fulfilled") {
-        resolve14(resolveSandboxValueNow(settlement.value, options, seenThenables));
+        resolve16(resolveSandboxValueNow(settlement.value, options, seenThenables));
       } else {
         reject(budgetIfNeeded(settlement.value, options.budget));
       }
@@ -137965,7 +137973,7 @@ function getSandboxIterator(value) {
   return syncIterator(Reflect.apply(iteratorMethod, value, []));
 }
 function generatorIterator(generator) {
-  const invoke = async (method, value) => {
+  const invoke2 = async (method, value) => {
     const leaveRunning = enterRunningState(generator);
     generator.state = "running";
     try {
@@ -137981,13 +137989,13 @@ function generatorIterator(generator) {
   };
   return {
     generator: true,
-    next: (value) => invoke("next", value),
-    return: (value) => invoke("return", value),
-    throw: (error3) => invoke("throw", error3)
+    next: (value) => invoke2("next", value),
+    return: (value) => invoke2("return", value),
+    throw: (error3) => invoke2("throw", error3)
   };
 }
 function syncIterator(iterator) {
-  const invoke = async (method, value) => {
+  const invoke2 = async (method, value) => {
     const leaveRunning = enterRunningState(iterator);
     try {
       return await iterator[method](value);
@@ -137996,9 +138004,9 @@ function syncIterator(iterator) {
     }
   };
   return {
-    next: (value) => invoke("next", value),
-    ...typeof iterator.return === "function" ? { return: (value) => invoke("return", value) } : {},
-    ...typeof iterator.throw === "function" ? { throw: (error3) => invoke("throw", error3) } : {}
+    next: (value) => invoke2("next", value),
+    ...typeof iterator.return === "function" ? { return: (value) => invoke2("return", value) } : {},
+    ...typeof iterator.throw === "function" ? { throw: (error3) => invoke2("throw", error3) } : {}
   };
 }
 var init_iteration = __esm({
@@ -139128,13 +139136,13 @@ function createGeneratorChannel(body) {
   };
 }
 function deferred() {
-  let resolve14;
+  let resolve16;
   let reject;
   const promise = new Promise((innerResolve, innerReject) => {
-    resolve14 = innerResolve;
+    resolve16 = innerResolve;
     reject = innerReject;
   });
-  return { promise, reject, resolve: resolve14 };
+  return { promise, reject, resolve: resolve16 };
 }
 var init_generator = __esm({
   "packages/safejs/src/interp/generator.ts"() {
@@ -139746,6 +139754,10 @@ var init_async = __esm({
 });
 
 // packages/safejs/src/interp/host-bridge.ts
+function declareHostOperation(operation, policy) {
+  hostOperationPolicies.set(operation, policy);
+  return operation;
+}
 function readHostOperationPolicy(operation) {
   return hostOperationPolicies.get(operation);
 }
@@ -139810,14 +139822,14 @@ function wrapCallerInjectedFunction(name, value, options, state) {
     ...properties ? { properties } : {}
   });
 }
-function invokeHostCallback(invoke, options) {
+function invokeHostCallback(invoke2, options) {
   const lifecycle = options.lifecycle;
   if (lifecycle === void 0) {
-    return invoke();
+    return invoke2();
   }
   lifecycle.hostCallbackDepth += 1;
   try {
-    const result = invoke();
+    const result = invoke2();
     if (isPromiseLike5(result)) {
       return Promise.resolve(result).finally(() => {
         lifecycle.hostCallbackDepth -= 1;
@@ -139830,7 +139842,7 @@ function invokeHostCallback(invoke, options) {
     throw error3;
   }
 }
-function executeHostCall(record, restored, invoke, stackFrames, options, span) {
+function executeHostCall(record, restored, invoke2, stackFrames, options, span) {
   const hostCalls = options.hostCalls;
   if (restored && record.policy === "read-side-effect" && record.lifecycle === "consumed" && record.outcome !== void 0) {
     return createReplayedHostCallResult(record.outcome);
@@ -139851,7 +139863,7 @@ function executeHostCall(record, restored, invoke, stackFrames, options, span) {
   hostCalls.start(record);
   let result;
   try {
-    result = invoke();
+    result = invoke2();
   } catch (error3) {
     const reason = createHostErrorValue(error3, stackFrames, options.budget, span);
     hostCalls.settle(record, { status: "rejected", reason });
@@ -139932,9 +139944,30 @@ function createHostErrorValue(reason, stackFrames, budget, span) {
   }) : createSubsetErrorValue("Error", describeThrownReason(reason), stackFrames, budget, {
     chargeBudget: false
   });
+  if (reason instanceof Error) {
+    copyHostErrorMetadata(error3, reason, budget);
+  }
   attachErrorSpan(error3, span);
   return error3;
 }
+function copyHostErrorMetadata(error3, reason, budget) {
+  const resumeChecks = budget.suspendChecks();
+  try {
+    for (const [key2, expectedType] of Object.entries(hostErrorMetadata)) {
+      const descriptor = Object.getOwnPropertyDescriptor(reason, key2);
+      if (descriptor === void 0 || "get" in descriptor || "set" in descriptor) {
+        continue;
+      }
+      const value = descriptor.value;
+      if (typeof value !== expectedType) {
+        continue;
+      }
+      error3[key2] = typeof value === "string" ? budget.allocateString(value) : value;
+    }
+  } finally {
+    resumeChecks();
+  }
+}
 function wrapSandboxClosureForHost(closure, stackFrames, budget) {
   return async (...args) => {
     const leaveRunning = enterRunningState(closure);
@@ -139997,7 +140030,7 @@ function wrapHostPromiseWithSignal(promise, signal) {
   if (signal.aborted) {
     return Promise.reject(readAbortReason2(signal));
   }
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     let settled = false;
     const cleanup = () => {
       signal.removeEventListener("abort", onAbort);
@@ -140016,7 +140049,7 @@ function wrapHostPromiseWithSignal(promise, signal) {
     signal.addEventListener("abort", onAbort, { once: true });
     promise.then(
       (value) => {
-        settle(() => resolve14(value));
+        settle(() => resolve16(value));
       },
       (reason) => {
         settle(() => reject(reason));
@@ -140165,7 +140198,7 @@ function copyHostValueToSandbox(value, stackFrames, options, state, path186) {
           `Unsupported sandbox value at ${joinPath2(path186, key2)}: accessor property`
         );
       }
-      Object.defineProperty(copy, key2, {
+      Object.defineProperty(copy, budget.allocateString(key2), {
         enumerable: true,
         configurable: true,
         writable: true,
@@ -140282,7 +140315,7 @@ function describeValue2(value) {
   }
   return typeof value;
 }
-var AsyncFunction, hostOperationPolicies;
+var AsyncFunction, hostErrorMetadata, hostOperationPolicies;
 var init_host_bridge = __esm({
   "packages/safejs/src/interp/host-bridge.ts"() {
     "use strict";
@@ -140295,6 +140328,13 @@ var init_host_bridge = __esm({
     init_values();
     init_running_state();
     AsyncFunction = (async () => void 0).constructor;
+    hostErrorMetadata = {
+      code: "string",
+      dest: "string",
+      errno: "number",
+      path: "string",
+      syscall: "string"
+    };
     hostOperationPolicies = /* @__PURE__ */ new WeakMap();
   }
 });
@@ -143559,9 +143599,9 @@ async function evaluateMemberExpression(node, context) {
   };
 }
 function enqueueMicrotask(context, task) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     context.microtasks.push(() => {
-      task().then(resolve14, reject);
+      task().then(resolve16, reject);
     });
   });
 }
@@ -144800,8 +144840,8 @@ function createDumpController(lifecycle) {
       }
       let resolveSnapshot = () => void 0;
       let rejectSnapshot = () => void 0;
-      const promise = new Promise((resolve14, reject) => {
-        resolveSnapshot = resolve14;
+      const promise = new Promise((resolve16, reject) => {
+        resolveSnapshot = resolve16;
         rejectSnapshot = reject;
       });
       pendingRequest = {
@@ -144973,7 +145013,7 @@ async function delay3(ms) {
   if (ms === 0) {
     return;
   }
-  await new Promise((resolve14) => setTimeout(resolve14, ms));
+  await new Promise((resolve16) => setTimeout(resolve16, ms));
 }
 function hasErrorCode5(error3, code) {
   return hasOwnErrorCode29(error3, code);
@@ -145364,9 +145404,7 @@ async function throwIfReturnedPromiseRejected(result) {
   await Promise.resolve();
   await Promise.resolve();
   if (rejected) {
-    if (result.returnValue.hostCall !== void 0) {
-      result.returnValue.hostCallJournal?.consume(result.returnValue.hostCall);
-    }
+    consumeSettledHostCall(result.returnValue);
     throw new UnhandledRejectionError(rejectionReason, result.returnValue.span);
   }
 }
@@ -146280,10 +146318,10 @@ function calculateBackoffMs2(baseBackoffMs, completedAttempt) {
 }
 function sleep6(delayMs, signal) {
   throwIfAborted7(signal);
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     const timeout = setTimeout(() => {
       signal?.removeEventListener("abort", onAbort);
-      resolve14();
+      resolve16();
     }, delayMs);
     const onAbort = () => {
       clearTimeout(timeout);
@@ -146624,10 +146662,578 @@ var init_fail = __esm({
   }
 });
 
+// packages/safejs/src/modules/canonical-path.ts
+import { basename as basename8, dirname as dirname12, isAbsolute as isAbsolute9, relative as relative7, resolve as resolve12, sep as sep6 } from "node:path";
+async function resolveCanonicalPath({ realpath: realpath20, readlink: readlink5 }, path186) {
+  const missingSegments = [];
+  let current = path186;
+  let follows = 0;
+  while (true) {
+    try {
+      const canonicalCurrent = await realpath20(current);
+      return resolve12(canonicalCurrent, ...missingSegments.reverse());
+    } catch (error3) {
+      if (!MISSING_PATH_CODES.includes(getOwnErrorCode2(error3) ?? "")) {
+        throw error3;
+      }
+      const target = await readSymlinkTarget2(readlink5, current);
+      if (target !== void 0) {
+        if (++follows > MAX_SYMLINK_FOLLOWS) {
+          throw createLoopError(path186);
+        }
+        current = isAbsolute9(target) ? resolve12(target) : resolve12(dirname12(current), target);
+        continue;
+      }
+      const parent = dirname12(current);
+      if (parent === current) {
+        return resolve12(path186);
+      }
+      missingSegments.push(basename8(current));
+      current = parent;
+    }
+  }
+}
+async function readSymlinkTarget2(readlink5, path186) {
+  try {
+    return await readlink5(path186);
+  } catch (error3) {
+    if (NOT_A_SYMLINK_CODES.includes(getOwnErrorCode2(error3) ?? "")) {
+      return void 0;
+    }
+    throw error3;
+  }
+}
+function createLoopError(path186) {
+  const error3 = new Error(
+    `ELOOP: too many symbolic links encountered, realpath '${path186}'`
+  );
+  error3.code = "ELOOP";
+  return error3;
+}
+async function containsPath(stat36, canonicalRoot, canonicalPath) {
+  if (containsCanonicalSpelling(canonicalRoot, canonicalPath)) {
+    return true;
+  }
+  return descendsFromRoot(stat36, canonicalRoot, canonicalPath);
+}
+async function isSamePath(stat36, canonicalLeft, canonicalRight) {
+  if (canonicalLeft === canonicalRight) {
+    return true;
+  }
+  const [left, right] = await Promise.all([
+    readIdentity(stat36, canonicalLeft),
+    readIdentity(stat36, canonicalRight)
+  ]);
+  return left !== void 0 && right !== void 0 && left.dev === right.dev && left.ino === right.ino;
+}
+function containsCanonicalSpelling(canonicalRoot, canonicalPath) {
+  const relativePath = relative7(canonicalRoot, canonicalPath);
+  return !(relativePath === ".." || relativePath.startsWith(`..${sep6}`) || isAbsolute9(relativePath));
+}
+async function descendsFromRoot(stat36, canonicalRoot, canonicalPath) {
+  const root = await readIdentity(stat36, canonicalRoot);
+  if (root === void 0) {
+    return false;
+  }
+  let current = canonicalPath;
+  while (true) {
+    const identity = await readIdentity(stat36, current);
+    if (identity !== void 0 && identity.dev === root.dev && identity.ino === root.ino) {
+      return true;
+    }
+    const parent = dirname12(current);
+    if (parent === current) {
+      return false;
+    }
+    current = parent;
+  }
+}
+async function readIdentity(stat36, path186) {
+  try {
+    const { dev, ino } = await stat36(path186);
+    return { dev, ino };
+  } catch (error3) {
+    if (MISSING_PATH_CODES.includes(getOwnErrorCode2(error3) ?? "")) {
+      return void 0;
+    }
+    throw error3;
+  }
+}
+var MISSING_PATH_CODES, NOT_A_SYMLINK_CODES, MAX_SYMLINK_FOLLOWS;
+var init_canonical_path = __esm({
+  "packages/safejs/src/modules/canonical-path.ts"() {
+    "use strict";
+    init_error_codes22();
+    MISSING_PATH_CODES = ["ENOENT", "ENOTDIR"];
+    NOT_A_SYMLINK_CODES = [...MISSING_PATH_CODES, "EINVAL"];
+    MAX_SYMLINK_FOLLOWS = 32;
+  }
+});
+
+// packages/safejs/src/modules/fs.ts
+import { constants as nodeFsConstants } from "node:fs";
+import * as nodeFsPromises from "node:fs/promises";
+import { dirname as dirname13, isAbsolute as isAbsolute10, resolve as resolve13 } from "node:path";
+import { getSystemErrorMap, inspect } from "node:util";
+function makeFsModule(options = {}) {
+  assertSupportedPlatform();
+  const implementation = options.fs ?? nodeFsPromises;
+  const fs31 = options.root === void 0 ? implementation : makeRootedFs(implementation, options.root);
+  return {
+    access: bind(fs31, "access", "re-issue"),
+    appendFile: bind(fs31, "appendFile", "read-side-effect"),
+    chmod: bind(fs31, "chmod", "read-side-effect"),
+    copyFile: bind(fs31, "copyFile", "read-side-effect"),
+    cp: bind(fs31, "cp", "read-side-effect"),
+    link: bind(fs31, "link", "read-side-effect"),
+    lstat: bindStat(fs31, "lstat"),
+    mkdir: bind(fs31, "mkdir", "read-side-effect"),
+    // Creates a directory, so it cannot be re-issued on resume like the other
+    // string-result operations, but its name still crosses as a Buffer for a buffer
+    // encoding and so goes through the same guard.
+    mkdtemp: bindStringResult(fs31, "mkdtemp", "read-side-effect"),
+    readFile: bindStringResult(fs31, "readFile"),
+    readdir: bindReaddir(fs31),
+    readlink: bindStringResult(fs31, "readlink"),
+    realpath: bindStringResult(fs31, "realpath"),
+    rename: bind(fs31, "rename", "read-side-effect"),
+    rm: bind(fs31, "rm", "read-side-effect"),
+    rmdir: bind(fs31, "rmdir", "read-side-effect"),
+    stat: bindStat(fs31, "stat"),
+    symlink: bind(fs31, "symlink", "read-side-effect"),
+    truncate: bind(fs31, "truncate", "read-side-effect"),
+    utimes: bind(fs31, "utimes", "read-side-effect"),
+    writeFile: bind(fs31, "writeFile", "read-side-effect"),
+    constants: {
+      F_OK: nodeFsConstants.F_OK,
+      R_OK: nodeFsConstants.R_OK,
+      W_OK: nodeFsConstants.W_OK,
+      X_OK: nodeFsConstants.X_OK,
+      COPYFILE_EXCL: nodeFsConstants.COPYFILE_EXCL
+    }
+  };
+}
+function assertSupportedPlatform() {
+  if (process.platform !== "win32") {
+    return;
+  }
+  throw new Error(
+    "SafeJS's fs module does not support win32: node's fs answers a different code there (EPERM or UNKNOWN where darwin and linux answer EISDIR or ENOTEMPTY), a path carries a drive letter that root confinement has no rule for, and a symlink needs a privilege a script cannot hold. Run on darwin or linux, or build a host module for the surface you need."
+  );
+}
+function bind(fs31, name, policy) {
+  return declare(
+    name,
+    policy,
+    (...args) => invoke(fs31, name, args)
+  );
+}
+function bindStringResult(fs31, name, policy = "re-issue") {
+  return declare(name, policy, async (...args) => {
+    assertNoBufferResult(name, args[1]);
+    return await invoke(fs31, name, args);
+  });
+}
+function bindReaddir(fs31) {
+  return declare("readdir", "re-issue", async (...args) => {
+    assertNoBufferResult("readdir", args[1]);
+    const entries = await invoke(fs31, "readdir", args);
+    return entries.map((entry) => typeof entry === "string" ? entry : toSandboxDirent(entry));
+  });
+}
+function bindStat(fs31, name) {
+  return declare(name, "re-issue", async (...args) => {
+    assertNoBigIntResult(name, args[1]);
+    return toSandboxStats(await invoke(fs31, name, args));
+  });
+}
+function declare(name, policy, operation) {
+  const validated = async (...args) => {
+    FS_PATH_ARGUMENTS[name].forEach(
+      (argument, index) => assertSupportedPath(name, argument, args[index])
+    );
+    assertSupportedOptions(name, args);
+    return await operation(...args);
+  };
+  Object.defineProperty(validated, "name", { value: name });
+  declareHostOperation(validated, policy);
+  return validated;
+}
+function invoke(fs31, name, args) {
+  return Reflect.apply(fs31[name], fs31, args);
+}
+function makeRootedFs(fs31, root) {
+  if (root.trim().length === 0) {
+    throw new Error("fs module root must be a non-empty string.");
+  }
+  const rooted = {};
+  for (const name of Object.keys(FS_SYSCALLS)) {
+    rooted[name] = async (...args) => {
+      assertRootCanConfineOptions(name, args);
+      return invoke(fs31, name, await resolvePathArguments(fs31, root, name, args));
+    };
+  }
+  return rooted;
+}
+function assertRootCanConfineOptions(name, args) {
+  if (name !== "cp") {
+    return;
+  }
+  const options = args[FS_OPTION_SURFACE.cp.argument];
+  if (isObjectLike2(options) && options.dereference === true) {
+    throw createUnsupportedOptionError("cp", "dereference", ROOT_REFUSED_DEREFERENCE_REASON);
+  }
+}
+async function resolvePathArguments(fs31, root, name, args) {
+  const canonicalRoot = await resolveCanonicalPath(readCanonicalPathFs(fs31), resolve13(root));
+  const resolved = [...args];
+  if (name === "symlink") {
+    const linkPath = readPath(canonicalRoot, args[1]);
+    resolved[1] = linkPath;
+    await assertInsideRoot2(fs31, canonicalRoot, name, [
+      readPath(dirname13(linkPath), args[0]),
+      linkPath
+    ]);
+    return resolved;
+  }
+  const paths = FS_PATH_ARGUMENTS[name].map((_, index) => {
+    const path186 = readPath(canonicalRoot, args[index]);
+    resolved[index] = path186;
+    return path186;
+  });
+  await assertInsideRoot2(fs31, canonicalRoot, name, paths);
+  return resolved;
+}
+async function assertInsideRoot2(fs31, canonicalRoot, name, paths) {
+  for (const path186 of paths) {
+    if (await escapesRoot(fs31, canonicalRoot, path186)) {
+      throw createAccessDeniedError(name, paths[0], paths[1]);
+    }
+  }
+}
+async function escapesRoot(fs31, canonicalRoot, path186) {
+  const canonicalPath = await resolveCanonicalPath(readCanonicalPathFs(fs31), path186);
+  return !await containsPath(readStat(fs31), canonicalRoot, canonicalPath);
+}
+function readCanonicalPathFs(fs31) {
+  return {
+    realpath: async (path186) => await invoke(fs31, "realpath", [path186]),
+    readlink: async (path186) => await invoke(fs31, "readlink", [path186])
+  };
+}
+function readStat(fs31) {
+  return async (path186) => await invoke(fs31, "stat", [path186]);
+}
+function assertSupportedPath(name, argument, value) {
+  if (typeof value === "string") {
+    if (value.includes(NULL_BYTE)) {
+      throw createNullByteError(argument, value);
+    }
+    return;
+  }
+  const form = readUnsupportedPathForm(value);
+  throw form === void 0 ? createInvalidPathTypeError(argument, value) : createUnsupportedPathError(name, argument, form);
+}
+function readUnsupportedPathForm(value) {
+  if (value instanceof Uint8Array) {
+    return "a Buffer or Uint8Array";
+  }
+  return value instanceof URL ? "a URL" : void 0;
+}
+function createNullByteError(argument, value) {
+  const error3 = new TypeError(
+    `The argument '${argument}' must be a string, Uint8Array, or URL without null bytes. Received ${inspect(value)}`
+  );
+  error3.code = INVALID_ARGUMENT_CODE;
+  return error3;
+}
+function createInvalidPathTypeError(argument, value) {
+  const error3 = new TypeError(
+    `The "${argument}" argument must be of type string or an instance of Buffer or URL. Received ${describeReceivedValue(value)}`
+  );
+  error3.code = INVALID_ARGUMENT_TYPE_CODE;
+  return error3;
+}
+function createUnsupportedPathError(name, argument, form) {
+  return new TypeError(
+    `fs.${name} cannot accept ${form} as the '${argument}' argument inside SafeJS; pass the path as a string.`
+  );
+}
+function describeReceivedValue(value) {
+  if (value === null || value === void 0) {
+    return String(value);
+  }
+  if (typeof value === "function") {
+    return `function ${value.name}`;
+  }
+  if (typeof value === "object") {
+    const constructorName = value.constructor?.name;
+    return constructorName === void 0 ? inspect(value, { depth: -1 }) : `an instance of ${constructorName}`;
+  }
+  return `type ${typeof value} (${inspect(value)})`;
+}
+function readPath(base, value) {
+  const path186 = value;
+  return isAbsolute10(path186) ? resolve13(path186) : resolve13(base, path186);
+}
+function createAccessDeniedError(name, path186, dest) {
+  const syscall = FS_SYSCALLS[name];
+  const target = dest === void 0 ? `'${path186}'` : `'${path186}' -> '${dest}'`;
+  const error3 = new Error(
+    `${ACCESS_DENIED_CODE}: ${ACCESS_DENIED_MESSAGE}, ${syscall} ${target}`
+  );
+  error3.code = ACCESS_DENIED_CODE;
+  error3.errno = ACCESS_DENIED_ERRNO;
+  error3.syscall = syscall;
+  error3.path = path186;
+  if (dest !== void 0) {
+    error3.dest = dest;
+  }
+  return error3;
+}
+function readSystemError(code) {
+  for (const [errno, [name, message2]] of getSystemErrorMap()) {
+    if (name === code) {
+      return [errno, message2];
+    }
+  }
+  throw new Error(`node does not define the ${code} system error.`);
+}
+function assertSupportedOptions(name, args) {
+  const surface = FS_OPTION_SURFACE[name];
+  if (surface === void 0 || !isObjectLike2(args[surface.argument])) {
+    return;
+  }
+  const options = args[surface.argument];
+  for (const option of surface.refused) {
+    if (option in options) {
+      throw createUnsupportedOptionError(name, option, REFUSED_OPTION_REASONS[option]);
+    }
+  }
+  for (const option in options) {
+    if (!surface.honoured.includes(option)) {
+      throw createUnsupportedOptionError(name, option, UNKNOWN_OPTION_REASON);
+    }
+  }
+}
+function assertNoBufferResult(operation, options) {
+  if (readsBuffer(options, BUFFER_BY_DEFAULT[operation])) {
+    throw createUnsupportedCapabilityError(
+      operation,
+      "return a Buffer",
+      'pass a string encoding such as "utf8"'
+    );
+  }
+}
+function assertNoBigIntResult(operation, options) {
+  if (isObjectLike2(options) && options.bigint === true) {
+    throw createUnsupportedCapabilityError(
+      operation,
+      "return BigInt fields",
+      "omit bigint and read the *Ms timestamps instead"
+    );
+  }
+}
+function createUnsupportedOptionError(operation, option, reason) {
+  return createUnsupportedCapabilityError(operation, `honour the '${option}' option`, reason);
+}
+function createUnsupportedCapabilityError(operation, capability, remedy) {
+  return new TypeError(`fs.${operation} cannot ${capability} inside SafeJS; ${remedy}.`);
+}
+function readsBuffer(options, bufferByDefault) {
+  if (typeof options === "string") {
+    return options === BUFFER_ENCODING;
+  }
+  if (options === void 0 || options === null) {
+    return bufferByDefault;
+  }
+  if (!isObjectLike2(options)) {
+    return false;
+  }
+  const { encoding } = options;
+  if (encoding === BUFFER_ENCODING) {
+    return true;
+  }
+  return (encoding === void 0 || encoding === null) && bufferByDefault;
+}
+function toSandboxStats(stats2) {
+  const numbers = {};
+  for (const field of STAT_NUMBER_FIELDS) {
+    numbers[field] = stats2[field];
+  }
+  return { ...numbers, ...toFileTypePredicates(stats2) };
+}
+function toSandboxDirent(dirent) {
+  return {
+    name: dirent.name,
+    parentPath: dirent.parentPath,
+    ...toFileTypePredicates(dirent)
+  };
+}
+function toFileTypePredicates(source) {
+  const predicates = {};
+  for (const predicate of FILE_TYPE_PREDICATES) {
+    const result = source[predicate]();
+    predicates[predicate] = () => result;
+  }
+  return predicates;
+}
+function isObjectLike2(value) {
+  return typeof value === "object" && value !== null || typeof value === "function";
+}
+var BUFFER_BY_DEFAULT, REFUSED_OPTION_REASONS, UNKNOWN_OPTION_REASON, ROOT_REFUSED_DEREFERENCE_REASON, FS_OPTION_SURFACE, STAT_NUMBER_FIELDS, FILE_TYPE_PREDICATES, BUFFER_ENCODING, FS_SYSCALLS, FS_PATH_ARGUMENTS, ACCESS_DENIED_CODE, INVALID_ARGUMENT_CODE, INVALID_ARGUMENT_TYPE_CODE, NULL_BYTE, ACCESS_DENIED_ERRNO, ACCESS_DENIED_MESSAGE;
+var init_fs2 = __esm({
+  "packages/safejs/src/modules/fs.ts"() {
+    "use strict";
+    init_host_bridge();
+    init_canonical_path();
+    BUFFER_BY_DEFAULT = {
+      readFile: true,
+      readdir: false,
+      readlink: false,
+      realpath: false,
+      mkdtemp: false
+    };
+    REFUSED_OPTION_REASONS = {
+      signal: "the sandbox has no AbortController, and cancelling a run is the host's to request rather than the script's",
+      // @types/node declares this on fs/promises stat and lstat and types
+      // `throwIfNoEntry: false` as answering `Stats | undefined`, but the typings are
+      // ahead of node: only the synchronous API reads the option. Forwarding it would
+      // leave a script holding the ENOENT rejection the typings told it to expect
+      // undefined for, so it is refused rather than dropped.
+      throwIfNoEntry: "only node's synchronous stat reads it and fs/promises rejects a missing path whatever it says, so catch the ENOENT rejection instead",
+      // cp's filter is a callback the host would invoke, which a sandbox closure can cross the
+      // bridge to serve. It is refused for what happens around the call rather than during it:
+      // the digest that identifies a host call across a snapshot is built by stringifying the
+      // arguments, and a function does not survive that, so cp(filter: keep) and
+      // cp(filter: drop) are one call to the resume machinery.
+      filter: "a closure is dropped from the digest that identifies a host call across a snapshot, so a resumed run could reconcile against a copy that took a different set of files, and under a root it would read the rewritten host paths rather than the ones the script wrote \u2014 walk the tree with readdir and copy the entries you want instead"
+    };
+    UNKNOWN_OPTION_REASON = "node declares no such option for it, and an unrecognised option is refused rather than silently ignored";
+    ROOT_REFUSED_DEREFERENCE_REASON = "a root canonicalizes cp's src and dest but never the paths nested inside the tree, so node would copy an escaping link's target inside root where the script could read it \u2014 copy without dereference and a nested link stays a link the root still refuses to read through";
+    FS_OPTION_SURFACE = {
+      appendFile: {
+        argument: 2,
+        honoured: ["encoding", "mode", "flag", "flush"],
+        // node's appendFile forwards to writeFile, so it honours a signal even though
+        // @types/node does not declare one for it.
+        refused: ["signal"]
+      },
+      // node reads cp's bag from a parameter it names opts rather than options, and validates
+      // every key it knows — while still ignoring one it does not, which is what the unknown
+      // refusal covers. mode is copyFile's flag set rather than a permission.
+      cp: {
+        argument: 2,
+        honoured: [
+          "dereference",
+          "errorOnExist",
+          "force",
+          "mode",
+          "preserveTimestamps",
+          "recursive",
+          "verbatimSymlinks"
+        ],
+        refused: ["filter"]
+      },
+      lstat: { argument: 1, honoured: ["bigint"], refused: ["throwIfNoEntry"] },
+      mkdir: { argument: 1, honoured: ["recursive", "mode"], refused: [] },
+      mkdtemp: { argument: 1, honoured: ["encoding"], refused: [] },
+      readFile: { argument: 1, honoured: ["encoding", "flag"], refused: ["signal"] },
+      readdir: { argument: 1, honoured: ["encoding", "withFileTypes", "recursive"], refused: [] },
+      readlink: { argument: 1, honoured: ["encoding"], refused: [] },
+      realpath: { argument: 1, honoured: ["encoding"], refused: [] },
+      rm: { argument: 1, honoured: ["force", "recursive", "maxRetries", "retryDelay"], refused: [] },
+      rmdir: { argument: 1, honoured: ["recursive", "maxRetries", "retryDelay"], refused: [] },
+      stat: { argument: 1, honoured: ["bigint"], refused: ["throwIfNoEntry"] },
+      writeFile: { argument: 2, honoured: ["encoding", "mode", "flag", "flush"], refused: ["signal"] }
+    };
+    STAT_NUMBER_FIELDS = [
+      "dev",
+      "mode",
+      "nlink",
+      "uid",
+      "gid",
+      "rdev",
+      "blksize",
+      "ino",
+      "size",
+      "blocks",
+      "atimeMs",
+      "mtimeMs",
+      "ctimeMs",
+      "birthtimeMs"
+    ];
+    FILE_TYPE_PREDICATES = [
+      "isFile",
+      "isDirectory",
+      "isSymbolicLink",
+      "isBlockDevice",
+      "isCharacterDevice",
+      "isFIFO",
+      "isSocket"
+    ];
+    BUFFER_ENCODING = "buffer";
+    FS_SYSCALLS = {
+      access: "access",
+      appendFile: "open",
+      chmod: "chmod",
+      copyFile: "copyfile",
+      // node's cp is its own JavaScript layer rather than a syscall wrapper, so it blames the
+      // fs function by name: its ERR_FS_CP_* errors carry syscall 'cp'.
+      cp: "cp",
+      link: "link",
+      lstat: "lstat",
+      mkdir: "mkdir",
+      mkdtemp: "mkdtemp",
+      readFile: "open",
+      readdir: "scandir",
+      readlink: "readlink",
+      realpath: "realpath",
+      rename: "rename",
+      rm: "lstat",
+      rmdir: "rmdir",
+      stat: "stat",
+      symlink: "symlink",
+      truncate: "open",
+      utimes: "utime",
+      writeFile: "open"
+    };
+    FS_PATH_ARGUMENTS = {
+      access: ["path"],
+      appendFile: ["path"],
+      chmod: ["path"],
+      copyFile: ["src", "dest"],
+      // node blames these by the same names it uses for copyFile's two paths.
+      cp: ["src", "dest"],
+      link: ["existingPath", "newPath"],
+      lstat: ["path"],
+      mkdir: ["path"],
+      mkdtemp: ["prefix"],
+      readFile: ["path"],
+      readdir: ["path"],
+      readlink: ["oldPath"],
+      realpath: ["path"],
+      rename: ["oldPath", "newPath"],
+      rm: ["path"],
+      rmdir: ["path"],
+      stat: ["path"],
+      symlink: ["target", "path"],
+      truncate: ["path"],
+      utimes: ["path"],
+      writeFile: ["path"]
+    };
+    ACCESS_DENIED_CODE = "EACCES";
+    INVALID_ARGUMENT_CODE = "ERR_INVALID_ARG_VALUE";
+    INVALID_ARGUMENT_TYPE_CODE = "ERR_INVALID_ARG_TYPE";
+    NULL_BYTE = "\0";
+    [ACCESS_DENIED_ERRNO, ACCESS_DENIED_MESSAGE] = readSystemError(ACCESS_DENIED_CODE);
+  }
+});
+
 // packages/safejs/src/modules/git.ts
 import { execFile as execFile3 } from "node:child_process";
-import { mkdir as mkdir38, realpath as realpath19, rm as rm16 } from "node:fs/promises";
-import { basename as basename8, dirname as dirname12, isAbsolute as isAbsolute9, relative as relative7, resolve as resolve12, sep as sep6 } from "node:path";
+import { mkdir as mkdir38, readlink as readlink4, realpath as realpath19, rm as rm16, stat as stat35 } from "node:fs/promises";
+import { dirname as dirname14, isAbsolute as isAbsolute11, resolve as resolve14 } from "node:path";
 function makeGitModule(cwd) {
   const normalizedCwd = readNonEmptyString6(cwd, "Git module cwd");
   return {
@@ -146712,7 +147318,7 @@ function makeGitModule(cwd) {
       if (await gitRefExists(normalizedCwd, `refs/heads/${normalizedBranch}`)) {
         throw new Error(`Git worktree branch '${normalizedBranch}' already exists.`);
       }
-      await mkdir38(dirname12(worktreePath), { recursive: true });
+      await mkdir38(dirname14(worktreePath), { recursive: true });
       try {
         await runGit(normalizedCwd, [
           "worktree",
@@ -146737,7 +147343,7 @@ function makeGitModule(cwd) {
       const repoRoot = await getRepoRoot(normalizedCwd);
       const worktreePath = await resolveWorktreePath(repoRoot, path186, "Git worktree path");
       const worktrees = await listWorktrees2(normalizedCwd);
-      if (!worktrees.some((worktree) => resolve12(worktree.path) === worktreePath)) {
+      if (!worktrees.some((worktree) => resolve14(worktree.path) === worktreePath)) {
         return;
       }
       await runGit(normalizedCwd, ["worktree", "remove", "--force", worktreePath]);
@@ -146792,7 +147398,7 @@ function createSavepointRef() {
   return `${SAVEPOINT_REF_PREFIX}${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
 }
 function createDefaultWorktreePath(repoRoot, branch) {
-  return resolve12(repoRoot, ".poe-code", "worktrees", createSafeBranchDirectoryName(branch));
+  return resolve14(repoRoot, ".poe-code", "worktrees", createSafeBranchDirectoryName(branch));
 }
 function createSafeBranchDirectoryName(branch) {
   return encodeURIComponent(branch);
@@ -146846,39 +147452,19 @@ function parseBranchRef(ref) {
   return ref.startsWith(branchPrefix) ? ref.slice(branchPrefix.length) : ref;
 }
 async function resolveWorktreePath(repoRoot, path186, label) {
-  const resolvedRoot = resolve12(repoRoot);
-  const resolvedPath = isAbsolute9(path186) ? resolve12(path186) : resolve12(resolvedRoot, path186);
+  const resolvedRoot = resolve14(repoRoot);
+  const resolvedPath = isAbsolute11(path186) ? resolve14(path186) : resolve14(resolvedRoot, path186);
   const canonicalRoot = await realpath19(resolvedRoot);
-  const canonicalPath = await resolveCanonicalPath(resolvedPath);
-  const relativePath = relative7(canonicalRoot, canonicalPath);
-  if (relativePath.length === 0 || relativePath === ".." || relativePath.startsWith(`..${sep6}`) || isAbsolute9(relativePath)) {
+  const canonicalPath = await resolveCanonicalPath({ realpath: realpath19, readlink: readlink4 }, resolvedPath);
+  const [inside, isRootItself] = await Promise.all([
+    containsPath(stat35, canonicalRoot, canonicalPath),
+    isSamePath(stat35, canonicalPath, canonicalRoot)
+  ]);
+  if (!inside || isRootItself) {
     throw new Error(`${label} must be inside the git repository.`);
   }
   return canonicalPath;
 }
-async function resolveCanonicalPath(path186) {
-  const missingSegments = [];
-  let current = path186;
-  while (true) {
-    try {
-      const canonicalCurrent = await realpath19(current);
-      return resolve12(canonicalCurrent, ...missingSegments.reverse());
-    } catch (error3) {
-      if (!isNotFoundError11(error3)) {
-        throw error3;
-      }
-      const parent = dirname12(current);
-      if (parent === current) {
-        return resolve12(path186);
-      }
-      missingSegments.push(basename8(current));
-      current = parent;
-    }
-  }
-}
-function isNotFoundError11(error3) {
-  return hasOwnErrorCode29(error3, "ENOENT");
-}
 function isBranchAlreadyExistsError(error3, branch) {
   return error3 instanceof Error && error3.message.includes(branch) && error3.message.includes("already exists");
 }
@@ -146887,7 +147473,7 @@ async function runGitAndTrim(cwd, args) {
   return stdout.trim();
 }
 async function runGit(cwd, args) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve16, reject) => {
     execFile3(
       "git",
       args,
@@ -146905,7 +147491,7 @@ async function runGit(cwd, args) {
           );
           return;
         }
-        resolve14({
+        resolve16({
           stdout,
           stderr
         });
@@ -146972,7 +147558,7 @@ var GIT_EXEC_MAX_BUFFER, SAVEPOINT_REF_PREFIX;
 var init_git2 = __esm({
   "packages/safejs/src/modules/git.ts"() {
     "use strict";
-    init_error_codes22();
+    init_canonical_path();
     GIT_EXEC_MAX_BUFFER = 10 * 1024 * 1024;
     SAVEPOINT_REF_PREFIX = "refs/poe-code/checkpoints/";
   }
@@ -147248,7 +147834,7 @@ function makeTimeModule(options = {}) {
   const signal = options.signal;
   async function sleep7(ms) {
     assertSleepDelay(ms);
-    return await new Promise((resolve14, reject) => {
+    return await new Promise((resolve16, reject) => {
       if (signal?.aborted === true) {
         reject(createSleepAbortError());
         return;
@@ -147266,7 +147852,7 @@ function makeTimeModule(options = {}) {
           return;
         }
         cleanup();
-        resolve14();
+        resolve16();
       }
       function rejectSleep() {
         cleanup();
@@ -147343,6 +147929,7 @@ var init_src49 = __esm({
     init_agent3();
     init_env();
     init_fail();
+    init_fs2();
     init_git2();
     init_harness2();
     init_log2();
@@ -147486,14 +148073,14 @@ var init_emit_schemas = __esm({
 
 // packages/agent-harness/src/loader/pair.ts
 import nodeFs22 from "node:fs/promises";
-import { basename as pathBasename, dirname as dirname13, extname as extname2, join as join15 } from "node:path";
+import { basename as pathBasename, dirname as dirname15, extname as extname2, join as join15 } from "node:path";
 async function resolvePair(inputPath, fs31 = nodeFs22) {
   const extension = extname2(inputPath);
   if (extension !== ".md" && extension !== ".ajs") {
     throw new InvalidPairExtensionError(inputPath, extension);
   }
   const pairBasename = pathBasename(inputPath, extension);
-  const pairDir = dirname13(inputPath);
+  const pairDir = dirname15(inputPath);
   const pair = {
     ajsPath: join15(pairDir, `${pairBasename}.ajs`),
     mdPath: join15(pairDir, `${pairBasename}.md`),
@@ -147507,16 +148094,16 @@ async function resolvePair(inputPath, fs31 = nodeFs22) {
     { side: "md", path: pair.mdPath }
   ];
   for (const check of checks) {
-    let stat35;
+    let stat36;
     try {
-      stat35 = await fs31.stat(check.path);
+      stat36 = await fs31.stat(check.path);
     } catch (error3) {
       if (hasOwnErrorCode28(error3, "ENOENT")) {
         throw new MissingPairError(check.side, check.path);
       }
       throw error3;
     }
-    if (!stat35.isFile()) {
+    if (!stat36.isFile()) {
       throw new MissingPairError(check.side, check.path);
     }
   }
@@ -147579,8 +148166,8 @@ async function discoverHarnesses(rootDir, fs31 = nodeFs23) {
       continue;
     }
     if (typeof entry === "string") {
-      const stat35 = await fs31.stat(join16(rootDir, entry));
-      if (!stat35.isDirectory?.()) {
+      const stat36 = await fs31.stat(join16(rootDir, entry));
+      if (!stat36.isDirectory?.()) {
         continue;
       }
     }
@@ -147637,7 +148224,7 @@ var init_validate4 = __esm({
 import { createHash as createHash13, randomUUID as randomUUID51 } from "node:crypto";
 import { lstat as lstat34, mkdir as mkdir39, readFile as readFile55, rename as rename28, unlink as unlink25, writeFile as writeFile29 } from "node:fs/promises";
 import os24 from "node:os";
-import { dirname as dirname14, join as join17, parse as parse15, resolve as resolve13, sep as sep7 } from "node:path";
+import { dirname as dirname16, join as join17, parse as parse15, resolve as resolve15, sep as sep7 } from "node:path";
 async function runHarnessPair2(mdPath, options) {
   const pair = await resolvePair(mdPath);
   {
@@ -147653,7 +148240,7 @@ async function runHarnessPair2(mdPath, options) {
       kind: readString10(validated.kind),
       version: readNumber6(validated.version),
       filename: pair.mdPath,
-      dirname: dirname14(pair.mdPath),
+      dirname: dirname16(pair.mdPath),
       body
     };
     const snapshotPath = resolveSnapshotPath(pair.mdPath, options.snapshotPath);
@@ -147992,7 +148579,7 @@ async function writeHostCallRecords(storePath, records) {
   } catch {
     return;
   }
-  await mkdir39(dirname14(storePath), { recursive: true });
+  await mkdir39(dirname16(storePath), { recursive: true });
   await writeTextFileAtomically2(storePath, serialized);
 }
 async function writeTextFileAtomically2(filePath, content) {
@@ -148050,7 +148637,7 @@ function listModuleExports(moduleExports) {
   return exportNames.filter((exportName) => exportName.length > 0).sort((left, right) => left.localeCompare(right));
 }
 function resolveSnapshotPath(mdPath, snapshotPath) {
-  const documentKey = createHash13("sha256").update(resolve13(mdPath)).digest("hex").slice(0, 12);
+  const documentKey = createHash13("sha256").update(resolve15(mdPath)).digest("hex").slice(0, 12);
   return snapshotPath ?? join17(
     resolveRunLogDir({
       planPath: mdPath,
@@ -148061,7 +148648,7 @@ function resolveSnapshotPath(mdPath, snapshotPath) {
   );
 }
 async function assertDefaultSnapshotPathIsRegular(snapshotPath) {
-  const absolutePath = resolve13(snapshotPath);
+  const absolutePath = resolve15(snapshotPath);
   const rootPath = parse15(absolutePath).root;
   let currentPath = rootPath;
   for (const segment of absolutePath.slice(rootPath.length).split(sep7).filter(Boolean)) {
@@ -148240,7 +148827,10 @@ import { Argument } from "commander";
 function registerHarnessCommand(program, container) {
   const harness = program.command("harness").description("Run and manage agent harness pairs.");
   addWorktreeOptions(
-    harness.command("run").description("Run a harness pair.").argument("[md-paths...]", "Paths to harness .md files to run sequentially").option("--dir <path>", "Directory to search for harness pairs when no md-path is given.").option("--fix", "Apply supported lint fixes to the harness .ajs file before running.").option("--snapshot-path <path>", "File to write/read harness snapshots.").option("--resume", "Resume from the snapshot file when it exists.").option("--agent <name>", "Override the agent id from the harness frontmatter agent block.").option("--model <name>", "Override the model from the harness frontmatter agent block.").option(
+    harness.command("run").description("Run a harness pair.").argument("[md-paths...]", "Paths to harness .md files to run sequentially").option("--dir <path>", "Directory to search for harness pairs when no md-path is given.").option("--fix", "Apply supported lint fixes to the harness .ajs file before running.").option("--fs", "Give the harness a real filesystem module, confined to --fs-root.").option(
+      "--fs-root <path>",
+      "Directory --fs confines the harness to (default: the harness directory)."
+    ).option("--snapshot-path <path>", "File to write/read harness snapshots.").option("--resume", "Resume from the snapshot file when it exists.").option("--agent <name>", "Override the agent id from the harness frontmatter agent block.").option("--model <name>", "Override the model from the harness frontmatter agent block.").option(
       "--mode <mode>",
       "Override the mode from the harness frontmatter agent block (read|edit|auto|yolo)."
     ).option("-y, --yes", "Accept defaults without prompting.")
@@ -148260,12 +148850,18 @@ function registerHarnessCommand(program, container) {
 async function executeHarnessRun(program, container, mdPath, options) {
   const flags = resolveHarnessFlags(program, options.yes);
   const resources = createExecutionResources(container, flags, "harness:run");
+  const fsOptions = resolveHarnessFsOptions(container, options);
   const selectedPath = mdPath ? path182.resolve(container.env.cwd, mdPath) : (await resolveDiscoveredHarness(container, options.dir, flags.assumeYes)).mdPath;
   if (flags.dryRun) {
     await resolvePair(selectedPath, container.fs);
     resources.logger.dryRun(
       `Dry run: would run ${formatDisplayPath3(container, selectedPath)} without executing its script or applying fixes.`
     );
+    if (fsOptions !== void 0) {
+      resources.logger.dryRun(
+        `Dry run: would enable the fs module rooted at ${formatDisplayPath3(container, resolveFsRoot(fsOptions, path182.dirname(selectedPath)))}.`
+      );
+    }
     return;
   }
   const snapshotPath = resolveRunSnapshotPath(container, selectedPath, options.snapshotPath);
@@ -148298,10 +148894,20 @@ async function executeHarnessRun(program, container, mdPath, options) {
             snapshotPath,
             worktreeCwd
           );
+          const runFsOptions = fsOptions?.root === void 0 ? fsOptions : {
+            root: mapSourcePathIntoWorktree3(container.env.cwd, fsOptions.root, worktreeCwd)
+          };
           return await runHarnessPair2(runSelectedPath, {
-            modulesFor: (frontmatter, meta) => createHarnessModules(container, resources.logger, frontmatter, meta, (error3) => {
-              reportedSpawnFailures.add(error3);
-            }),
+            modulesFor: (frontmatter, meta) => createHarnessModules(
+              container,
+              resources.logger,
+              frontmatter,
+              meta,
+              (error3) => {
+                reportedSpawnFailures.add(error3);
+              },
+              runFsOptions
+            ),
             onDiagnostics: (diagnostics) => {
               lintDiagnostics.push(...diagnostics);
             },
@@ -148767,11 +149373,11 @@ async function discoverProjectThenUserHarnesses(container, dir) {
       ...await discoverPairsDirectlyIn(container, root)
     ];
     for (const pair of pairs) {
-      const stat35 = await container.fs.stat(pair.mdPath);
+      const stat36 = await container.fs.stat(pair.mdPath);
       discovered.push({
         ...pair,
         dir: path182.dirname(pair.mdPath),
-        mdMtimeMs: stat35.mtimeMs
+        mdMtimeMs: stat36.mtimeMs
       });
     }
   }
@@ -148809,7 +149415,29 @@ async function assertFilesDoNotExist(container, filePaths) {
     }
   }
 }
-function createHarnessModules(container, logger2, frontmatter, meta, onSpawnFailure) {
+function resolveHarnessFsOptions(container, options) {
+  if (options.fs !== true) {
+    if (options.fsRoot === void 0) {
+      return void 0;
+    }
+    throw new ValidationError(
+      "--fs-root requires --fs. Pass --fs to give the harness a filesystem confined to that root, or drop --fs-root."
+    );
+  }
+  if (options.fsRoot === void 0) {
+    return {};
+  }
+  if (options.fsRoot.trim().length === 0) {
+    throw new ValidationError(
+      "--fs-root needs a directory path. Pass --fs-root <path> to confine the harness to that directory, or drop --fs-root to confine it to the harness directory."
+    );
+  }
+  return { root: path182.resolve(container.env.cwd, options.fsRoot) };
+}
+function resolveFsRoot(fsOptions, harnessDir) {
+  return fsOptions.root ?? harnessDir;
+}
+function createHarnessModules(container, logger2, frontmatter, meta, onSpawnFailure, fsOptions) {
   const harnessMeta = {
     kind: meta.kind,
     version: meta.version,
@@ -148863,6 +149491,7 @@ function createHarnessModules(container, logger2, frontmatter, meta, onSpawnFail
   return {
     agent: toModuleExports(agent3),
     fail: toModuleExports(/* @__PURE__ */ new Map([["default", fail3]])),
+    ...fsOptions === void 0 ? {} : { fs: toModuleExports(makeFsModule({ root: resolveFsRoot(fsOptions, meta.dirname) })) },
     git: toModuleExports(git2),
     harness: toModuleExports(harness),
     log: toModuleExports(log2),
@@ -150712,7 +151341,7 @@ var init_package2 = __esm({
   "package.json"() {
     package_default2 = {
       name: "poe-code",
-      version: "4.0.11",
+      version: "4.0.13",
       description: "CLI tool to configure Poe API for developer workflows.",
       license: "MIT",
       type: "module",
@@ -150802,6 +151431,7 @@ var init_package2 = __esm({
         "smoke:toolcraft-standalone": "node scripts/verify-toolcraft-standalone.mjs",
         "smoke:toolcraft-sdk-types": "node scripts/verify-toolcraft-published-sdk-types.mjs",
         "sync-skills": "tsx scripts/sync-skills.ts",
+        "record:fs-conformance": "tsx scripts/record-fs-conformance.ts",
         "sync:json-schema-test-suite": "node scripts/sync-json-schema-test-suite.mjs",
         "sync:uri-template-test": "node scripts/sync-uri-template-test.mjs",
         postinstall: "node scripts/postinstall-sync-skills.mjs"