sakuraai 0.0.13 → 0.0.15

package/dist/index.js

@@ -4,9 +4,9 @@ var __getOwnPropNames = Object.getOwnPropertyNames;
 var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
 };
-var __export = (target, all2) => {
+var __export = (target2, all2) => {
   for (var name in all2)
-    __defProp(target, name, { get: all2[name], enumerable: true });
+    __defProp(target2, name, { get: all2[name], enumerable: true });
 };
 
 // src/config.ts
@@ -103,8 +103,8 @@ var init_config = __esm({
 function apiBase() {
   return (loadAuth().serverUrl || DEFAULT_API_URL).replace(/\/+$/, "");
 }
-async function postJson(base, path18, body, token) {
-  const res = await fetch(`${base}${path18}`, {
+async function postJson(base, path22, body, token) {
+  const res = await fetch(`${base}${path22}`, {
     method: "POST",
     headers: {
       "Content-Type": "application/json",
@@ -114,7 +114,7 @@ async function postJson(base, path18, body, token) {
   });
   if (!res.ok) {
     const text = await res.text().catch(() => "");
-    throw new Error(`${path18} \u2192 ${res.status} ${res.statusText}${text ? `: ${text}` : ""}`);
+    throw new Error(`${path22} \u2192 ${res.status} ${res.statusText}${text ? `: ${text}` : ""}`);
   }
   return await res.json();
 }
@@ -390,9 +390,9 @@ function capDiff(file, lines2) {
     ...truncated ? { truncated } : {}
   };
 }
-function toolPart(id, rawName, input) {
+function toolPart(id, rawName, input2) {
   const name = canonicalTool(rawName);
-  const inp = typeof input === "string" ? safeJson(input) ?? { command: input } : input ?? {};
+  const inp = typeof input2 === "string" ? safeJson(input2) ?? { command: input2 } : input2 ?? {};
   const file = str(inp.file_path) ?? str(inp.filePath) ?? str(inp.path) ?? str(inp.file);
   let title;
   let diff;
@@ -430,8 +430,8 @@ function toolPart(id, rawName, input) {
       title = str(inp.description) ?? str(inp.prompt)?.slice(0, 80) ?? "Sub-agent";
       break;
     case "Todos": {
-      const list3 = Array.isArray(inp.todos) ? inp.todos : Array.isArray(inp.plan) ? inp.plan : [];
-      todos = list3.map((t) => ({ content: String(t.content ?? t.step ?? ""), status: String(t.status ?? "pending") }));
+      const list4 = Array.isArray(inp.todos) ? inp.todos : Array.isArray(inp.plan) ? inp.plan : [];
+      todos = list4.map((t) => ({ content: String(t.content ?? t.step ?? ""), status: String(t.status ?? "pending") }));
       const done = todos.filter((t) => t.status === "completed").length;
       title = `${done}/${todos.length} done`;
       break;
@@ -533,8 +533,8 @@ function statusFromAge(ageSecs) {
 function hostname() {
   return os4.hostname();
 }
-function stripLeadingTags(input) {
-  let rest = input.trimStart();
+function stripLeadingTags(input2) {
+  let rest = input2.trimStart();
   while (rest.startsWith("<")) {
     const close = rest.indexOf(">");
     if (close === -1) break;
@@ -607,6 +607,18 @@ function sessionTitle(file) {
   }
   return "Untitled";
 }
+function headCwd(file) {
+  try {
+    const fd = fs3.openSync(file, "r");
+    const buf = Buffer.alloc(64 * 1024);
+    const n = fs3.readSync(fd, buf, 0, buf.length, 0);
+    fs3.closeSync(fd);
+    const m = /"cwd":("(?:[^"\\]|\\.)*")/.exec(buf.toString("utf8", 0, n));
+    return m ? JSON.parse(m[1]) : void 0;
+  } catch {
+    return void 0;
+  }
+}
 function listSessions() {
   const host = hostname();
   const now = nowSecs();
@@ -643,7 +655,8 @@ function listSessions() {
         status: statusFromAge(age),
         updatedAt: formatAge(age),
         machine: host,
-        mtime
+        mtime,
+        cwd: headCwd(p)
       });
     }
   }
@@ -768,10 +781,15 @@ function sessionCwd(sessionId) {
   }
   return void 0;
 }
-function send(sessionId, message, onData, images, model) {
+function prepareNew(sessionId, cwd) {
+  pendingNew.set(sessionId, cwd);
+}
+function send(sessionId, message, onData, images, model, run5 = {}) {
   return new Promise((resolve) => {
     const bin = process.env.CLAUDE_BIN || "claude";
-    const cwd = sessionCwd(sessionId);
+    const newCwd = pendingNew.get(sessionId);
+    pendingNew.delete(sessionId);
+    const cwd = newCwd ?? sessionCwd(sessionId);
     let prompt = message;
     if (images?.length) {
       const refs = images.map((p) => `[Image: ${p}]`).join("\n");
@@ -780,14 +798,20 @@ function send(sessionId, message, onData, images, model) {
 ${refs}` : refs;
     }
     const modelArgs = model ? ["--model", model] : [];
+    const runArgs = [
+      ...run5.effort ? ["--effort", run5.effort] : [],
+      ...run5.mode ? ["--permission-mode", run5.mode] : [],
+      ...run5.fast ? ["--settings", JSON.stringify({ fastMode: true })] : []
+    ];
     const child2 = spawn2(
       bin,
       [
-        "--resume",
+        newCwd ? "--session-id" : "--resume",
         sessionId,
         "-p",
         prompt,
         ...modelArgs,
+        ...runArgs,
         "--output-format",
         "stream-json",
         "--include-partial-messages",
@@ -837,13 +861,15 @@ function textDelta(ev) {
   }
   return null;
 }
-var PROJECTS_DIR;
+var PROJECTS_DIR, pendingNew, pendingCwd;
 var init_claude = __esm({
   "src/runtime/claude.ts"() {
     "use strict";
     init_parts();
     init_util();
     PROJECTS_DIR = path3.join(HOME, ".claude", "projects");
+    pendingNew = /* @__PURE__ */ new Map();
+    pendingCwd = (sessionId) => pendingNew.get(sessionId);
   }
 });
 
@@ -893,6 +919,31 @@ function listSessions2() {
   }
   return out;
 }
+async function threadCwds() {
+  const out = /* @__PURE__ */ new Map();
+  let dbs = [];
+  try {
+    dbs = fs4.readdirSync(CODEX_DIR).filter((f) => /^state_\d+\.sqlite$/.test(f));
+  } catch {
+    return out;
+  }
+  const latest = dbs.sort((a, b) => Number(a.match(/\d+/)[0]) - Number(b.match(/\d+/)[0])).pop();
+  if (!latest) return out;
+  try {
+    const mod = await import("better-sqlite3");
+    const Ctor = mod.default ?? mod;
+    const db = new Ctor(path4.join(CODEX_DIR, latest), { readonly: true, fileMustExist: true });
+    try {
+      for (const r of db.prepare("SELECT id, cwd FROM threads WHERE cwd IS NOT NULL").all()) {
+        out.set(r.id, r.cwd);
+      }
+    } finally {
+      db.close();
+    }
+  } catch {
+  }
+  return out;
+}
 function findFile2(sessionId) {
   const walk2 = (dir) => {
     let entries;
@@ -919,16 +970,16 @@ function outputText(out) {
   if (!Array.isArray(out)) return "";
   return out.map((b) => typeof b?.text === "string" ? b.text : "").join("\n");
 }
-function execInput(name, input) {
-  if (typeof input !== "string") return { name, input };
-  const m = input.match(/exec_command\(\{\s*cmd\s*:\s*("(?:[^"\\]|\\.)*")/);
+function execInput(name, input2) {
+  if (typeof input2 !== "string") return { name, input: input2 };
+  const m = input2.match(/exec_command\(\{\s*cmd\s*:\s*("(?:[^"\\]|\\.)*")/);
   if (m) {
     try {
       return { name: "Bash", input: { command: JSON.parse(m[1]) } };
     } catch {
     }
   }
-  return { name, input };
+  return { name, input: input2 };
 }
 function readMessages2(file) {
   let content;
@@ -978,8 +1029,8 @@ function readMessages2(file) {
     const kind = payload?.type;
     if (kind === "function_call" || kind === "custom_tool_call" || kind === "local_shell_call") {
       const raw = kind === "function_call" ? payload.arguments : kind === "custom_tool_call" ? payload.input : payload.action;
-      const { name, input } = execInput(String(payload.name ?? "shell"), raw);
-      const part = toolPart(String(payload.call_id ?? ts), name, input);
+      const { name, input: input2 } = execInput(String(payload.name ?? "shell"), raw);
+      const part = toolPart(String(payload.call_id ?? ts), name, input2);
       tools.set(part.id, part);
       const msg2 = ensureAssistant(ts);
       msg2.parts.push(part);
@@ -1231,7 +1282,7 @@ async function listSessions3() {
   const now = nowSecs();
   try {
     const rows = db.prepare(
-      "SELECT id, title, time_updated FROM session WHERE time_archived IS NULL ORDER BY time_updated DESC"
+      "SELECT id, title, time_updated, directory FROM session WHERE time_archived IS NULL ORDER BY time_updated DESC"
     ).all();
     return rows.map((r) => {
       const mtime = Math.floor(r.time_updated / 1e3);
@@ -1243,7 +1294,8 @@ async function listSessions3() {
         status: statusFromAge(age),
         updatedAt: formatAge(age),
         machine: host,
-        mtime
+        mtime,
+        cwd: r.directory || void 0
       };
     });
   } finally {
@@ -1365,7 +1417,7 @@ async function listSessions4() {
   const now = nowSecs();
   try {
     const rows = db.prepare(
-      "SELECT id, title, time_updated FROM session WHERE time_archived IS NULL ORDER BY time_updated DESC"
+      "SELECT id, title, time_updated, directory FROM session WHERE time_archived IS NULL ORDER BY time_updated DESC"
     ).all();
     return rows.map((r) => {
       const mtime = Math.floor(r.time_updated / 1e3);
@@ -1377,7 +1429,8 @@ async function listSessions4() {
         status: statusFromAge(age),
         updatedAt: formatAge(age),
         machine: host,
-        mtime
+        mtime,
+        cwd: r.directory || void 0
       };
     });
   } finally {
@@ -1573,8 +1626,8 @@ function allSessionFiles() {
 function resolveTitle(id, events) {
   try {
     const cacheFile = path7.join(PROJ_CACHE_DIR, `${id}.json`);
-    const cache = JSON.parse(fs8.readFileSync(cacheFile, "utf8"));
-    const t = cache?.rows?.title?.val;
+    const cache2 = JSON.parse(fs8.readFileSync(cacheFile, "utf8"));
+    const t = cache2?.rows?.title?.val;
     if (typeof t === "string" && t.trim()) return t.trim();
   } catch {
   }
@@ -1606,7 +1659,8 @@ async function listSessions5() {
       status: statusFromAge(age),
       updatedAt: formatAge(age),
       machine: host,
-      mtime
+      mtime,
+      cwd: typeof header.cwd === "string" ? header.cwd : void 0
     };
   });
 }
@@ -1778,6 +1832,10 @@ async function list(opts = {}) {
   if (!opts.agent || opts.agent === "deepseek")
     sessions.push(...await listSessions5());
   sessions.sort((a, b) => b.mtime - a.mtime);
+  if (sessions.some((s) => s.agent === "codex")) {
+    const cwds = await threadCwds();
+    for (const s of sessions) if (s.agent === "codex" && !s.cwd) s.cwd = cwds.get(s.id);
+  }
   const overrides = all();
   sessions = sessions.map((s) => {
     const o = overrides[s.id];
@@ -1835,9 +1893,9 @@ async function history(sessionId, opts = {}, agent) {
   if (opts.reverse) msgs = [...msgs].reverse();
   return msgs;
 }
-async function chat(sessionId, prompt, agent, onData, images, model) {
+async function chat(sessionId, prompt, agent, onData, images, model, run5) {
   const a = agent ?? await detectAgent(sessionId);
-  if (a === "claude") return send(sessionId, prompt, onData, images, model);
+  if (a === "claude") return send(sessionId, prompt, onData, images, model, run5);
   if (a === "codex") return send2(sessionId, prompt, onData, images, model);
   if (a === "opencode") return send3(sessionId, prompt, onData, images, model);
   if (a === "zcode") return send4(sessionId, prompt, onData, images, model);
@@ -2093,15 +2151,15 @@ function resolveAgentConfig(idOrName) {
   }
   return matches[0] ?? null;
 }
-function createAgentConfig(input) {
+function createAgentConfig(input2) {
   const now = Date.now();
   const config = {
     id: randomUUID2(),
-    name: input.name,
-    agentType: input.agentType,
-    description: input.description,
-    env: input.env ?? {},
-    prompt: input.prompt,
+    name: input2.name,
+    agentType: input2.agentType,
+    description: input2.description,
+    env: input2.env ?? {},
+    prompt: input2.prompt,
     createdAt: now,
     updatedAt: now
   };
@@ -2110,34 +2168,34 @@ function createAgentConfig(input) {
   });
   return config;
 }
-function updateAgentConfig(idOrName, input) {
-  const target = resolveAgentConfig(idOrName);
-  if (!target) throw new Error(`No agent-config matching "${idOrName}".`);
+function updateAgentConfig(idOrName, input2) {
+  const target2 = resolveAgentConfig(idOrName);
+  if (!target2) throw new Error(`No agent-config matching "${idOrName}".`);
   updateConfig((cfg) => {
-    const a = cfg.agentConfigs.find((c) => c.id === target.id);
-    if (input.name !== void 0) a.name = input.name;
-    if (input.description !== void 0)
-      a.description = input.description || void 0;
-    if (input.env) a.env = { ...a.env, ...input.env };
-    if (input.unsetEnv) for (const k of input.unsetEnv) delete a.env[k];
-    if (input.prompt !== void 0) a.prompt = input.prompt || void 0;
+    const a = cfg.agentConfigs.find((c) => c.id === target2.id);
+    if (input2.name !== void 0) a.name = input2.name;
+    if (input2.description !== void 0)
+      a.description = input2.description || void 0;
+    if (input2.env) a.env = { ...a.env, ...input2.env };
+    if (input2.unsetEnv) for (const k of input2.unsetEnv) delete a.env[k];
+    if (input2.prompt !== void 0) a.prompt = input2.prompt || void 0;
     a.updatedAt = Date.now();
   });
-  return resolveAgentConfig(target.id);
+  return resolveAgentConfig(target2.id);
 }
 function deleteAgentConfig(idOrName) {
-  const target = resolveAgentConfig(idOrName);
-  if (!target) return false;
+  const target2 = resolveAgentConfig(idOrName);
+  if (!target2) return false;
   updateConfig((cfg) => {
-    cfg.agentConfigs = cfg.agentConfigs.filter((c) => c.id !== target.id);
+    cfg.agentConfigs = cfg.agentConfigs.filter((c) => c.id !== target2.id);
   });
   return true;
 }
 function refreshCapabilities(idOrName) {
-  const target = resolveAgentConfig(idOrName);
-  if (!target) throw new Error(`No agent-config matching "${idOrName}".`);
+  const target2 = resolveAgentConfig(idOrName);
+  if (!target2) throw new Error(`No agent-config matching "${idOrName}".`);
   const cli = detectCli();
-  const cliAvailable = cli.includes(target.agentType);
+  const cliAvailable = cli.includes(target2.agentType);
   const MODELS = {
     claude: ["default", "opus", "haiku", "opus-1m"],
     codex: ["default", "gpt-5-codex"],
@@ -2145,7 +2203,7 @@ function refreshCapabilities(idOrName) {
     zcode: ["default"],
     deepseek: ["default"]
   };
-  const MODES = {
+  const MODES2 = {
     claude: ["default", "accept_edits", "plan", "dont_ask", "full_access"],
     codex: ["default"],
     opencode: ["default"],
@@ -2153,10 +2211,10 @@ function refreshCapabilities(idOrName) {
     deepseek: ["default"]
   };
   return {
-    agentType: target.agentType,
+    agentType: target2.agentType,
     cliAvailable,
-    models: MODELS[target.agentType] ?? ["default"],
-    modes: MODES[target.agentType] ?? ["default"]
+    models: MODELS[target2.agentType] ?? ["default"],
+    modes: MODES2[target2.agentType] ?? ["default"]
   };
 }
 var init_registry = __esm({
@@ -2166,25 +2224,228 @@ var init_registry = __esm({
   }
 });
 
-// src/runtime/fsops.ts
+// src/runtime/projects.ts
 import fs11 from "fs";
 import path10 from "path";
+import { createHash, randomUUID as randomUUID3 } from "crypto";
+import { execFile } from "child_process";
+import { promisify } from "util";
+async function git(cwd, args) {
+  try {
+    const { stdout } = await run("git", args, {
+      cwd,
+      timeout: 5e3,
+      maxBuffer: 4 * 1024 * 1024,
+      env: { ...process.env, GIT_OPTIONAL_LOCKS: "0" }
+      // never take locks behind the user's back
+    });
+    return stdout;
+  } catch {
+    return null;
+  }
+}
+async function projectRoot(cwd) {
+  if (rootCache.has(cwd)) return rootCache.get(cwd);
+  let root = null;
+  if (fs11.existsSync(cwd)) {
+    const out = await git(cwd, ["rev-parse", "--path-format=absolute", "--git-common-dir", "--show-toplevel"]);
+    if (out) {
+      const [common, top] = out.trim().split("\n");
+      root = common && path10.basename(common) === ".git" ? path10.dirname(common) : top || cwd;
+    } else {
+      root = cwd;
+    }
+  }
+  rootCache.set(cwd, root);
+  return root;
+}
+function isScratch(p) {
+  if (p === HOME || p === "/") return true;
+  if (/^\/(private\/)?(tmp|var\/folders)(\/|$)/.test(p)) return true;
+  const rel = path10.relative(HOME, p);
+  if (rel.startsWith("..")) return false;
+  return rel.split(path10.sep).some((seg) => seg.startsWith(".")) || /(^|\/)default-workspace$/.test(rel);
+}
+function githubSlug(url) {
+  const m = /github\.com[:/]([^/]+\/[^/]+?)(\.git)?$/.exec(url.trim());
+  return m ? m[1] : url.trim();
+}
+async function gitSummary(dir) {
+  const status2 = await git(dir, ["status", "--porcelain=v1", "-b"]);
+  if (status2 == null) return null;
+  const lines2 = status2.split("\n").filter(Boolean);
+  const head = lines2[0]?.startsWith("## ") ? lines2.shift().slice(3) : "";
+  let branch = head.split("...")[0].split(" ")[0];
+  if (head.startsWith("No commits yet on ")) branch = head.slice("No commits yet on ".length);
+  if (head.startsWith("HEAD")) branch = null;
+  const ahead = Number(/ahead (\d+)/.exec(head)?.[1] ?? 0);
+  const behind = Number(/behind (\d+)/.exec(head)?.[1] ?? 0);
+  const origin = (await git(dir, ["remote", "get-url", "origin"]))?.trim();
+  return { branch, ahead, behind, changed: lines2.length, remote: origin ? githubSlug(origin) : null };
+}
+async function list2() {
+  const cfg = loadConfig();
+  const hidden = new Set(cfg.hiddenProjects ?? []);
+  const all2 = await list({});
+  const groups = /* @__PURE__ */ new Map();
+  for (const s of all2) {
+    if (!s.cwd) continue;
+    const root = await projectRoot(s.cwd);
+    if (!root || hidden.has(root) || isScratch(root)) continue;
+    (groups.get(root) ?? groups.set(root, []).get(root)).push(s);
+  }
+  const registered = new Map(cfg.projects.map((p) => [p.path, p]));
+  const paths = /* @__PURE__ */ new Set([...registered.keys(), ...groups.keys()]);
+  const now = nowSecs();
+  const out = await Promise.all(
+    [...paths].map(async (p) => {
+      const ss = groups.get(p) ?? [];
+      const last = ss.length ? Math.max(...ss.map((s) => s.mtime)) : null;
+      return {
+        id: projectId(p),
+        name: registered.get(p)?.name ?? path10.basename(p),
+        path: p,
+        registered: registered.has(p),
+        sessions: ss.length,
+        agents: [...new Set(ss.map((s) => s.agent))],
+        lastActive: last,
+        updatedAt: last != null ? formatAge(Math.max(0, now - last)) : null,
+        git: fs11.existsSync(p) ? await gitSummary(p) : null
+      };
+    })
+  );
+  return out.sort((a, b) => (b.lastActive ?? 0) - (a.lastActive ?? 0) || a.name.localeCompare(b.name));
+}
+async function find(id) {
+  return (await list2()).find((p) => p.id === id) ?? null;
+}
+async function detail(id) {
+  const p = await find(id);
+  if (!p) return null;
+  const all2 = await list({});
+  const sessionList = [];
+  for (const s of all2) if (s.cwd && await projectRoot(s.cwd) === p.path) sessionList.push(s);
+  if (!p.git) return { ...p, changes: [], commits: [], branches: [], sessionList };
+  const [status2, numstat, log2, refs] = await Promise.all([
+    git(p.path, ["status", "--porcelain=v1"]),
+    git(p.path, ["diff", "--numstat", "HEAD"]),
+    git(p.path, ["log", "-n", "15", "--pretty=format:%h%x1f%s%x1f%an%x1f%ct"]),
+    git(p.path, ["for-each-ref", "--sort=-committerdate", "--count=20", "--format=%(refname:short)", "refs/heads"])
+  ]);
+  const counts = /* @__PURE__ */ new Map();
+  for (const line of (numstat ?? "").split("\n")) {
+    const [a, d, file] = line.split("	");
+    if (file) counts.set(file.replace(/^.*\{.* => (.*)\}.*$/, "$1"), [Number(a) || 0, Number(d) || 0]);
+  }
+  const changes = [];
+  for (const line of (status2 ?? "").split("\n")) {
+    if (line.length < 4) continue;
+    const code = line[0] !== " " ? line[0] : line[1];
+    const file = line.slice(3).split(" -> ").pop().replace(/^"|"$/g, "");
+    const [additions, deletions] = counts.get(file) ?? [0, 0];
+    changes.push({ path: file, status: STATUS[code] ?? "modified", additions, deletions });
+  }
+  const commits = (log2 ?? "").split("\n").filter(Boolean).map((l) => {
+    const [hash, subject, author, ct] = l.split("");
+    return { hash, subject: subject ?? "", author: author ?? "", time: Number(ct) || 0 };
+  });
+  const branches = (refs ?? "").split("\n").filter(Boolean);
+  return { ...p, changes, commits, branches, sessionList };
+}
+function add(dir) {
+  const abs = path10.resolve(dir.replace(/^~(?=$|\/)/, HOME));
+  addProject(abs);
+  updateConfig((c) => {
+    c.hiddenProjects = (c.hiddenProjects ?? []).filter((h) => h !== abs);
+  });
+  return projectId(abs);
+}
+async function remove(id) {
+  const p = await find(id);
+  if (!p) return false;
+  deleteProject(p.path);
+  updateConfig((c) => {
+    c.hiddenProjects = [.../* @__PURE__ */ new Set([...c.hiddenProjects ?? [], p.path])];
+  });
+  return true;
+}
+function browse(dir) {
+  const abs = path10.resolve((dir || HOME).replace(/^~(?=$|\/)/, HOME));
+  if (path10.relative(HOME, abs).startsWith("..")) throw new Error("Only folders inside your home folder can be added.");
+  const entries = [];
+  for (const d of fs11.readdirSync(abs, { withFileTypes: true })) {
+    if (!d.isDirectory() || d.name.startsWith(".") || d.name === "node_modules") continue;
+    const p = path10.join(abs, d.name);
+    entries.push({ name: d.name, path: p, isGit: fs11.existsSync(path10.join(p, ".git")) });
+  }
+  entries.sort((a, b) => Number(b.isGit) - Number(a.isGit) || a.name.localeCompare(b.name));
+  return { path: abs, parent: abs === HOME ? null : path10.dirname(abs), entries: entries.slice(0, 400) };
+}
+async function prepareSession(id, agent, worktree) {
+  const p = await find(id);
+  if (!p) throw new Error("project not found");
+  if (agent !== "claude") throw new Error("Starting chats from a project currently supports Claude Code.");
+  const sessionId = randomUUID3();
+  let cwd = p.path;
+  let branch;
+  if (worktree) {
+    if (!p.git) throw new Error("Worktrees need a git repository.");
+    const short = sessionId.slice(0, 8);
+    branch = `sakura/${short}`;
+    cwd = path10.join(WORKTREES_DIR, `${p.name}-${short}`);
+    fs11.mkdirSync(WORKTREES_DIR, { recursive: true });
+    if (await git(p.path, ["worktree", "add", "-b", branch, cwd]) == null) {
+      throw new Error("Could not create a git worktree for this chat.");
+    }
+  }
+  prepareNew(sessionId, cwd);
+  return { sessionId, cwd, branch };
+}
+async function chatContext(sessionId, agent) {
+  const s = (await list({})).find((x) => x.id === sessionId && x.agent === agent);
+  const cwd = s?.cwd ?? pendingCwd(sessionId) ?? null;
+  const machine = loadConfig().machineName || hostname();
+  if (!cwd || !fs11.existsSync(cwd)) return { cwd, project: null, git: null, machine };
+  const root = await projectRoot(cwd);
+  const project = root && !isScratch(root) ? { id: projectId(root), name: path10.basename(root), path: root } : null;
+  return { cwd, project, git: await gitSummary(cwd), machine };
+}
+var run, WORKTREES_DIR, projectId, rootCache, STATUS;
+var init_projects = __esm({
+  "src/runtime/projects.ts"() {
+    "use strict";
+    init_config();
+    init_registry();
+    init_sessions();
+    init_claude();
+    init_util();
+    run = promisify(execFile);
+    WORKTREES_DIR = path10.join(HOME, ".sakura", "worktrees");
+    projectId = (p) => createHash("sha1").update(p).digest("hex").slice(0, 12);
+    rootCache = /* @__PURE__ */ new Map();
+    STATUS = { M: "modified", A: "added", D: "deleted", R: "renamed", "?": "untracked" };
+  }
+});
+
+// src/runtime/fsops.ts
+import fs12 from "fs";
+import path11 from "path";
 import os6 from "os";
 function expand(p) {
   if (!p || p === "~") return HOME2;
-  if (p.startsWith("~/")) return path10.join(HOME2, p.slice(2));
-  return path10.resolve(p);
+  if (p.startsWith("~/")) return path11.join(HOME2, p.slice(2));
+  return path11.resolve(p);
 }
-function list2(dir) {
+function list3(dir) {
   const abs = expand(dir);
-  const dirents = fs11.readdirSync(abs, { withFileTypes: true });
+  const dirents = fs12.readdirSync(abs, { withFileTypes: true });
   const entries = [];
   for (const d of dirents) {
-    const p = path10.join(abs, d.name);
+    const p = path11.join(abs, d.name);
     let size = 0;
     let mtime = 0;
     try {
-      const st = fs11.statSync(p);
+      const st = fs12.statSync(p);
       size = st.size;
       mtime = Math.floor(st.mtimeMs / 1e3);
     } catch {
@@ -2197,7 +2458,7 @@ function list2(dir) {
     if (a.type !== "dir" && b.type === "dir") return 1;
     return a.name.localeCompare(b.name);
   });
-  const parent = abs === "/" ? null : path10.dirname(abs);
+  const parent = abs === "/" ? null : path11.dirname(abs);
   return { path: abs, parent, entries };
 }
 function looksBinary(buf) {
@@ -2207,12 +2468,12 @@ function looksBinary(buf) {
 }
 function read2(file) {
   const abs = expand(file);
-  const st = fs11.statSync(abs);
-  const fd = fs11.openSync(abs, "r");
+  const st = fs12.statSync(abs);
+  const fd = fs12.openSync(abs, "r");
   try {
     const len = Math.min(st.size, READ_CAP);
     const buf = Buffer.alloc(len);
-    fs11.readSync(fd, buf, 0, len, 0);
+    fs12.readSync(fd, buf, 0, len, 0);
     const binary = looksBinary(buf);
     return {
       path: abs,
@@ -2222,18 +2483,18 @@ function read2(file) {
       content: binary ? "" : buf.toString("utf8")
     };
   } finally {
-    fs11.closeSync(fd);
+    fs12.closeSync(fd);
   }
 }
 function write3(file, content) {
   const abs = expand(file);
-  fs11.mkdirSync(path10.dirname(abs), { recursive: true });
-  fs11.writeFileSync(abs, content, "utf8");
+  fs12.mkdirSync(path11.dirname(abs), { recursive: true });
+  fs12.writeFileSync(abs, content, "utf8");
   return { path: abs, bytes: Buffer.byteLength(content, "utf8") };
 }
 function mkdir(dir) {
   const abs = expand(dir);
-  fs11.mkdirSync(abs, { recursive: true });
+  fs12.mkdirSync(abs, { recursive: true });
   return { path: abs };
 }
 var HOME2, READ_CAP;
@@ -2246,11 +2507,11 @@ var init_fsops = __esm({
 });
 
 // src/tailscale.ts
-import fs12 from "fs";
+import fs13 from "fs";
 import { spawn as spawn8 } from "child_process";
 function tsBin() {
   const macPath = "/Applications/Tailscale.app/Contents/MacOS/Tailscale";
-  if (fs12.existsSync(macPath)) return macPath;
+  if (fs13.existsSync(macPath)) return macPath;
   return process.env.TAILSCALE_BIN || "tailscale";
 }
 function runTs(args, timeoutMs = 6e4) {
@@ -2364,104 +2625,6 @@ var init_tailscale = __esm({
   }
 });
 
-// src/runtime/models.ts
-import fs13 from "fs";
-import path11 from "path";
-import { execFileSync } from "child_process";
-function codexModels() {
-  const out = [{ id: "", label: "Default" }];
-  const seen = /* @__PURE__ */ new Set();
-  let configured;
-  try {
-    const cfg = fs13.readFileSync(path11.join(HOME, ".codex", "config.toml"), "utf8");
-    configured = /^\s*model\s*=\s*"([^"]+)"/m.exec(cfg)?.[1];
-    for (const m of cfg.matchAll(/model\s*=\s*"([^"]+)"/g)) {
-      const id = m[1];
-      if (id && !seen.has(id)) {
-        seen.add(id);
-        out.push({ id, label: id === configured ? `${id} (config)` : id });
-      }
-    }
-  } catch {
-  }
-  for (const id of CODEX_CURATED) {
-    if (!seen.has(id)) {
-      seen.add(id);
-      out.push({ id, label: id });
-    }
-  }
-  return out;
-}
-function opencodeModels() {
-  const out = [{ id: "", label: "Default" }];
-  const allowed = /* @__PURE__ */ new Set(["opencode"]);
-  try {
-    const auth = JSON.parse(
-      fs13.readFileSync(path11.join(HOME, ".local", "share", "opencode", "auth.json"), "utf8")
-    );
-    for (const k of Object.keys(auth)) allowed.add(k);
-  } catch {
-  }
-  try {
-    const raw = execFileSync(opencodeBin(), ["models"], { encoding: "utf8", timeout: 15e3 });
-    for (const line of raw.split("\n").map((l) => l.trim()).filter(Boolean)) {
-      const slash = line.indexOf("/");
-      if (slash < 0) continue;
-      const provider = line.slice(0, slash);
-      const model = line.slice(slash + 1);
-      if (!allowed.has(provider)) continue;
-      out.push({
-        id: line,
-        // opencode wants the full provider/model string
-        label: model,
-        group: OC_PROVIDER_LABELS[provider] ?? provider,
-        free: provider === "opencode" || /free/i.test(model)
-      });
-    }
-  } catch {
-  }
-  return out;
-}
-function listModels(agent) {
-  if (agent === "codex") return codexModels();
-  if (agent === "opencode") return opencodeModels();
-  if (agent === "zcode") return zcodeModels();
-  if (agent === "deepseek") return deepseekModels();
-  return CLAUDE_MODELS;
-}
-function zcodeModels() {
-  const configured = configuredModel()?.split("/").pop();
-  return [{ id: "", label: configured ? `Default (${configured})` : "Default" }];
-}
-function deepseekModels() {
-  return [{ id: "", label: "Default" }];
-}
-var CLAUDE_MODELS, CODEX_CURATED, OC_PROVIDER_LABELS;
-var init_models = __esm({
-  "src/runtime/models.ts"() {
-    "use strict";
-    init_util();
-    init_opencode();
-    init_zcode();
-    CLAUDE_MODELS = [
-      { id: "", label: "Default" },
-      { id: "opus", label: "Opus" },
-      { id: "sonnet", label: "Sonnet" },
-      { id: "haiku", label: "Haiku" },
-      { id: "opus[1m]", label: "Opus (1M context)" }
-    ];
-    CODEX_CURATED = ["gpt-5.5-codex", "gpt-5.5", "gpt-5-codex", "gpt-5"];
-    OC_PROVIDER_LABELS = {
-      opencode: "OpenCode Zen",
-      "opencode-go": "OpenCode Go",
-      openrouter: "OpenRouter",
-      zai: "Z.AI",
-      "zai-coding-plan": "Z.AI Coding",
-      "zhipuai-coding-plan": "Zhipu Coding"
-    };
-  }
-});
-
 // src/runtime/usage.ts
 import fs14 from "fs";
 import path12 from "path";
@@ -2474,7 +2637,7 @@ function claudeCost(model, u) {
 function hourKey(ms) {
   return new Date(Math.floor(ms / 36e5) * 36e5).toISOString().slice(0, 13);
 }
-function add(b, ms, agent, model, tokens, cost) {
+function add2(b, ms, agent, model, tokens, cost) {
   if (!Number.isFinite(ms) || tokens <= 0) return;
   const k = `${hourKey(ms)}|${agent}|${model || "unknown"}`;
   const cur = b[k] ??= { tokens: 0, cost: 0, unpriced: 0 };
@@ -2518,7 +2681,7 @@ async function scanClaude(file) {
     seen.add(id);
     const u = m.usage;
     const tokens = (u.input_tokens ?? 0) + (u.output_tokens ?? 0) + (u.cache_read_input_tokens ?? 0) + (u.cache_creation_input_tokens ?? 0);
-    add(b, Date.parse(e.timestamp), "claude", String(m.model ?? "claude"), tokens, claudeCost(String(m.model ?? ""), u));
+    add2(b, Date.parse(e.timestamp), "claude", String(m.model ?? "claude"), tokens, claudeCost(String(m.model ?? ""), u));
   }
   return { buckets: b };
 }
@@ -2565,7 +2728,7 @@ async function scanCodex(file) {
     if (typeof total !== "number") continue;
     const delta = total >= prevTotal ? total - prevTotal : total;
     prevTotal = total;
-    add(b, ms, "codex", model, delta, null);
+    add2(b, ms, "codex", model, delta, null);
   }
   return { buckets: b, extra };
 }
@@ -2593,7 +2756,7 @@ async function scanSqlite(agent, dbPath) {
         const t = v.tokens ?? {};
         const tokens = (t.input ?? 0) + (t.output ?? 0) + (t.reasoning ?? 0) + (t.cache?.read ?? 0) + (t.cache?.write ?? 0);
         const model = String(md.modelID ?? md.model?.modelID ?? agent);
-        add(b, r.t, agent, model, tokens, typeof v.cost === "number" ? v.cost : null);
+        add2(b, r.t, agent, model, tokens, typeof v.cost === "number" ? v.cost : null);
       } catch {
       }
     }
@@ -2621,7 +2784,7 @@ function saveCache(files) {
 async function scanAll() {
   if (inflight) return inflight;
   inflight = (async () => {
-    const cache = loadCache();
+    const cache2 = loadCache();
     const next = {};
     const jobs = [
       ...walk(path12.join(HOME, ".claude", "projects")).map((f) => [f, scanClaude]),
@@ -2634,7 +2797,7 @@ async function scanAll() {
       } catch {
         continue;
       }
-      const hit = cache[file];
+      const hit = cache2[file];
       if (hit && hit.mtimeMs === st.mtimeMs && hit.size === st.size) {
         next[file] = hit;
       } else {
@@ -2887,6 +3050,334 @@ var init_usage = __esm({
   }
 });
 
+// src/runtime/limits.ts
+import fs15 from "fs";
+import path13 from "path";
+import { execFile as execFile2 } from "child_process";
+import { promisify as promisify2 } from "util";
+async function claudeToken() {
+  let raw = null;
+  if (process.platform === "darwin") {
+    try {
+      raw = (await run2("security", ["find-generic-password", "-s", "Claude Code-credentials", "-w"], { timeout: 3e3 })).stdout;
+    } catch {
+    }
+  }
+  if (!raw) {
+    try {
+      raw = fs15.readFileSync(path13.join(HOME, ".claude", ".credentials.json"), "utf8");
+    } catch {
+      return null;
+    }
+  }
+  try {
+    return JSON.parse(raw).claudeAiOauth?.accessToken ?? null;
+  } catch {
+    return null;
+  }
+}
+async function claude() {
+  if (cache && Date.now() - cache.at < 6e4) return cache.windows;
+  const token = await claudeToken();
+  if (!token) return [];
+  const res = await fetch("https://api.anthropic.com/api/oauth/usage", {
+    headers: { Authorization: `Bearer ${token}`, "anthropic-beta": "oauth-2025-04-20" },
+    signal: AbortSignal.timeout(8e3)
+  });
+  if (!res.ok) return cache?.windows ?? [];
+  const body = await res.json();
+  const windows = CLAUDE_WINDOWS.flatMap(([key, label]) => {
+    const w = body?.[key];
+    return w && typeof w.utilization === "number" ? [{ label, usedPercent: w.utilization, resetsAt: w.resets_at ?? null }] : [];
+  });
+  cache = { at: Date.now(), windows };
+  return windows;
+}
+async function codex() {
+  const r = await report("24h");
+  return r.limits.find((l) => l.agent === "codex")?.windows ?? [];
+}
+async function planLimits(agent) {
+  try {
+    if (agent === "claude") return await claude();
+    if (agent === "codex") return await codex();
+  } catch {
+  }
+  return [];
+}
+var run2, CLAUDE_WINDOWS, cache;
+var init_limits = __esm({
+  "src/runtime/limits.ts"() {
+    "use strict";
+    init_util();
+    init_usage();
+    run2 = promisify2(execFile2);
+    CLAUDE_WINDOWS = [
+      ["seven_day", "Weekly"],
+      ["five_hour", "5 hours"],
+      ["seven_day_opus", "Weekly \xB7 Opus"],
+      ["seven_day_sonnet", "Weekly \xB7 Sonnet"]
+    ];
+    cache = null;
+  }
+});
+
+// src/runtime/models.ts
+import fs16 from "fs";
+import path14 from "path";
+import { execFileSync } from "child_process";
+function configuredClaudeModel() {
+  try {
+    const m = JSON.parse(fs16.readFileSync(path14.join(HOME, ".claude", "settings.json"), "utf8")).model;
+    return typeof m === "string" && m ? m : void 0;
+  } catch {
+    return void 0;
+  }
+}
+async function claudeModels() {
+  if (claudeCache && Date.now() - claudeCache.at < 10 * 6e4) return claudeCache.models;
+  const token = await claudeToken();
+  if (!token) return CLAUDE_ALIASES;
+  try {
+    const res = await fetch("https://api.anthropic.com/v1/models?limit=100", {
+      headers: { Authorization: `Bearer ${token}`, "anthropic-beta": "oauth-2025-04-20", "anthropic-version": "2023-06-01" },
+      signal: AbortSignal.timeout(8e3)
+    });
+    if (!res.ok) return claudeCache?.models ?? CLAUDE_ALIASES;
+    const list4 = (await res.json())?.data ?? [];
+    const seen = /* @__PURE__ */ new Set();
+    const models = list4.map((m) => {
+      const family = /claude-([a-z]+)/.exec(m.id)?.[1] ?? "";
+      const desc = FAMILY_DESC[family]?.[seen.has(family) ? 1 : 0];
+      seen.add(family);
+      return { id: m.id, label: shortName(m.display_name ?? m.id), desc };
+    });
+    const configured = configuredClaudeModel();
+    const def = list4.find((m) => m.id === configured) ?? list4.find((m) => m.id.includes("opus"));
+    const defLabel = def ? shortName(def.display_name ?? def.id) : configured;
+    const rank = (m) => {
+      const i = Object.values(FAMILY_DESC).findIndex(([latest]) => latest === m.desc);
+      return i < 0 ? 99 : i;
+    };
+    models.sort((a, b) => rank(a) - rank(b));
+    const out = [{ id: "", label: "Default", desc: defLabel }, ...models];
+    claudeCache = { at: Date.now(), models: out };
+    return out;
+  } catch {
+    return claudeCache?.models ?? CLAUDE_ALIASES;
+  }
+}
+function codexModels() {
+  const out = [{ id: "", label: "Default" }];
+  const seen = /* @__PURE__ */ new Set();
+  let configured;
+  try {
+    const cfg = fs16.readFileSync(path14.join(HOME, ".codex", "config.toml"), "utf8");
+    configured = /^\s*model\s*=\s*"([^"]+)"/m.exec(cfg)?.[1];
+    for (const m of cfg.matchAll(/model\s*=\s*"([^"]+)"/g)) {
+      const id = m[1];
+      if (id && !seen.has(id)) {
+        seen.add(id);
+        out.push({ id, label: id === configured ? `${id} (config)` : id });
+      }
+    }
+  } catch {
+  }
+  for (const id of CODEX_CURATED) {
+    if (!seen.has(id)) {
+      seen.add(id);
+      out.push({ id, label: id });
+    }
+  }
+  return out;
+}
+function opencodeModels() {
+  const out = [{ id: "", label: "Default" }];
+  const allowed = /* @__PURE__ */ new Set(["opencode"]);
+  try {
+    const auth = JSON.parse(
+      fs16.readFileSync(path14.join(HOME, ".local", "share", "opencode", "auth.json"), "utf8")
+    );
+    for (const k of Object.keys(auth)) allowed.add(k);
+  } catch {
+  }
+  try {
+    const raw = execFileSync(opencodeBin(), ["models"], { encoding: "utf8", timeout: 15e3 });
+    for (const line of raw.split("\n").map((l) => l.trim()).filter(Boolean)) {
+      const slash = line.indexOf("/");
+      if (slash < 0) continue;
+      const provider = line.slice(0, slash);
+      const model = line.slice(slash + 1);
+      if (!allowed.has(provider)) continue;
+      out.push({
+        id: line,
+        // opencode wants the full provider/model string
+        label: model,
+        group: OC_PROVIDER_LABELS[provider] ?? provider,
+        free: provider === "opencode" || /free/i.test(model)
+      });
+    }
+  } catch {
+  }
+  return out;
+}
+async function listModels(agent) {
+  if (agent === "codex") return codexModels();
+  if (agent === "opencode") return opencodeModels();
+  if (agent === "zcode") return zcodeModels();
+  if (agent === "deepseek") return deepseekModels();
+  return claudeModels();
+}
+function zcodeModels() {
+  const configured = configuredModel()?.split("/").pop();
+  return [{ id: "", label: configured ? `Default (${configured})` : "Default" }];
+}
+function deepseekModels() {
+  return [{ id: "", label: "Default" }];
+}
+var CLAUDE_ALIASES, FAMILY_DESC, claudeCache, shortName, CODEX_CURATED, OC_PROVIDER_LABELS;
+var init_models = __esm({
+  "src/runtime/models.ts"() {
+    "use strict";
+    init_util();
+    init_opencode();
+    init_zcode();
+    init_limits();
+    CLAUDE_ALIASES = [
+      { id: "", label: "Default" },
+      { id: "opus", label: "Opus" },
+      { id: "sonnet", label: "Sonnet" },
+      { id: "haiku", label: "Haiku" },
+      { id: "opus[1m]", label: "Opus (1M context)" }
+    ];
+    FAMILY_DESC = {
+      opus: ["For complex work and everyday tasks", "Best for everyday, complex tasks"],
+      sonnet: ["Most efficient for simpler tasks", "Efficient for routine tasks"],
+      fable: ["For your toughest challenges", "Most capable for your hardest and longest-running tasks"],
+      haiku: ["Fastest for quick answers", "Fast and light"]
+    };
+    claudeCache = null;
+    shortName = (display) => display.replace(/^Claude\s+/i, "");
+    CODEX_CURATED = ["gpt-5.5-codex", "gpt-5.5", "gpt-5-codex", "gpt-5"];
+    OC_PROVIDER_LABELS = {
+      opencode: "OpenCode Zen",
+      "opencode-go": "OpenCode Go",
+      openrouter: "OpenRouter",
+      zai: "Z.AI",
+      "zai-coding-plan": "Z.AI Coding",
+      "zhipuai-coding-plan": "Zhipu Coding"
+    };
+  }
+});
+
+// src/runtime/mentions.ts
+import fs17 from "fs";
+import path15 from "path";
+function frontmatter(file) {
+  let text;
+  try {
+    text = fs17.readFileSync(file, "utf8").slice(0, 4e3);
+  } catch {
+    return {};
+  }
+  const m = /^---\r?\n([\s\S]*?)\r?\n---/.exec(text);
+  const out = {};
+  if (m) {
+    for (const line of m[1].split(/\r?\n/)) {
+      const kv = /^([A-Za-z_-]+):\s*(.*)$/.exec(line);
+      if (kv) out[kv[1]] = kv[2].replace(/^["']|["']$/g, "").trim();
+    }
+  }
+  if (!out.description) {
+    const body = m ? text.slice(m[0].length) : text;
+    const first = body.split("\n").map((l) => l.replace(/^#+\s*/, "").trim()).find(Boolean);
+    if (first) out.description = first.slice(0, 140);
+  }
+  return out;
+}
+function skillsIn(dir, source, prefix = "") {
+  let names;
+  try {
+    names = fs17.readdirSync(path15.join(dir, "skills"));
+  } catch {
+    return [];
+  }
+  return names.flatMap((n) => {
+    const file = path15.join(dir, "skills", n, "SKILL.md");
+    if (!fs17.existsSync(file)) return [];
+    const fm = frontmatter(file);
+    return [{ name: `${prefix}${fm.name || n}`, description: fm.description ?? "", source }];
+  });
+}
+function commandsIn(dir, source, prefix = "") {
+  const root = path15.join(dir, "commands");
+  const out = [];
+  const walk2 = (d, ns) => {
+    let entries;
+    try {
+      entries = fs17.readdirSync(d, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const e of entries) {
+      if (e.isDirectory()) walk2(path15.join(d, e.name), [...ns, e.name]);
+      else if (e.name.endsWith(".md")) {
+        const fm = frontmatter(path15.join(d, e.name));
+        const name = [...ns, e.name.slice(0, -3)].join(":");
+        out.push({ name: `${prefix}${name}`, description: fm.description ?? "", source });
+      }
+    }
+  };
+  walk2(root, []);
+  return out;
+}
+function plugins() {
+  try {
+    const file = path15.join(HOME, ".claude", "plugins", "installed_plugins.json");
+    const all2 = JSON.parse(fs17.readFileSync(file, "utf8")).plugins ?? {};
+    return Object.entries(all2).flatMap(([key, installs]) => {
+      const dir = installs?.[0]?.installPath;
+      return dir && fs17.existsSync(dir) ? [{ name: key.split("@")[0], dir }] : [];
+    });
+  } catch {
+    return [];
+  }
+}
+function mentions(cwd) {
+  const user = path15.join(HOME, ".claude");
+  const project = cwd ? path15.join(cwd, ".claude") : null;
+  const plug = plugins();
+  const skills = [
+    ...project ? skillsIn(project, "project") : [],
+    ...skillsIn(user, "user"),
+    ...plug.flatMap((p) => skillsIn(p.dir, "plugin", `${p.name}:`))
+  ];
+  const commands = [
+    ...project ? commandsIn(project, "project") : [],
+    ...commandsIn(user, "user"),
+    ...plug.flatMap((p) => commandsIn(p.dir, "plugin", `${p.name}:`))
+  ];
+  const seen = new Set(commands.map((c) => c.name));
+  return {
+    skills: skills.sort(byName),
+    commands: [...commands.sort(byName), ...BUILTIN.filter((b) => !seen.has(b.name))]
+  };
+}
+var BUILTIN, byName;
+var init_mentions = __esm({
+  "src/runtime/mentions.ts"() {
+    "use strict";
+    init_util();
+    BUILTIN = [
+      { name: "compact", description: "Summarize the conversation to free up context", source: "user" },
+      { name: "review", description: "Review a pull request", source: "user" },
+      { name: "security-review", description: "Security review of the pending changes", source: "user" },
+      { name: "init", description: "Write a CLAUDE.md for this project", source: "user" }
+    ];
+    byName = (a, b) => a.name.localeCompare(b.name);
+  }
+});
+
 // src/daemon/hub.ts
 function sessionKey(agent, sessionId) {
   return `${agent}:${sessionId}`;
@@ -2928,7 +3419,7 @@ var init_hub = __esm({
 function turnState(agent, sessionId) {
   return turns.get(sessionKey(agent, sessionId)) ?? null;
 }
-async function runTurn(sessionId, agent, prompt, images, model) {
+async function runTurn(sessionId, agent, prompt, images, model, run5) {
   const key = sessionKey(agent, sessionId);
   const turn = { status: "running", startedAt: Date.now() };
   turns.set(key, turn);
@@ -2971,9 +3462,9 @@ async function runTurn(sessionId, agent, prompt, images, model) {
   const pushFresh = (msgs) => {
     const fresh = msgs.filter((m) => m.role === "assistant" && !baseIds.has(m.id));
     for (const m of fresh) {
-      const json = JSON.stringify(m);
-      if (sentMsgs.get(m.id) === json) continue;
-      sentMsgs.set(m.id, json);
+      const json2 = JSON.stringify(m);
+      if (sentMsgs.get(m.id) === json2) continue;
+      sentMsgs.set(m.id, json2);
       emit({ type: "message", sessionId, agent, data: m });
     }
     persistedText = fresh.flatMap((m) => m.parts ?? [{ type: "text", text: m.content }]).map((p) => p.type === "text" ? p.text : "").join("");
@@ -2990,7 +3481,7 @@ async function runTurn(sessionId, agent, prompt, images, model) {
       polling = false;
     }
   }, POLL_MS);
-  const result = await chat(sessionId, prompt, agent, onData, images, model);
+  const result = await chat(sessionId, prompt, agent, onData, images, model, run5);
   clearInterval(timer);
   turn.status = result.ok ? "done" : "error";
   turn.finishedAt = Date.now();
@@ -3023,8 +3514,8 @@ var init_stream = __esm({
 });
 
 // src/runtime/presence.ts
-import fs15 from "fs";
-import path13 from "path";
+import fs18 from "fs";
+import path16 from "path";
 import { execFileSync as execFileSync2 } from "child_process";
 function alive(pid) {
   try {
@@ -3035,16 +3526,16 @@ function alive(pid) {
   }
 }
 function claudePresence(sessionId) {
-  const dir = path13.join(HOME, ".claude", "sessions");
+  const dir = path16.join(HOME, ".claude", "sessions");
   let files = [];
   try {
-    files = fs15.readdirSync(dir).filter((f) => f.endsWith(".json"));
+    files = fs18.readdirSync(dir).filter((f) => f.endsWith(".json"));
   } catch {
     return { open: false };
   }
   for (const f of files) {
     try {
-      const rec = JSON.parse(fs15.readFileSync(path13.join(dir, f), "utf8"));
+      const rec = JSON.parse(fs18.readFileSync(path16.join(dir, f), "utf8"));
       if (rec?.sessionId !== sessionId || typeof rec.pid !== "number") continue;
       if (rec.kind && rec.kind !== "interactive") continue;
       if (!alive(rec.pid)) continue;
@@ -3148,11 +3639,11 @@ function openTerminal(ws, opts) {
   } catch {
   }
 }
-function writeTerminal(ws, input) {
+function writeTerminal(ws, input2) {
   const t = terminals.get(ws);
   if (!t) return;
   try {
-    t.child.stdin.write(input);
+    t.child.stdin.write(input2);
   } catch {
   }
 }
@@ -3178,25 +3669,390 @@ var init_terminal = __esm({
   }
 });
 
-// src/daemon/server.ts
-import http from "http";
-import fs16 from "fs";
+// src/daemon/sim.ts
+import fs19 from "fs";
 import os8 from "os";
+import path17 from "path";
+import { execFile as execFile3, spawn as spawn10 } from "child_process";
+import { promisify as promisify3 } from "util";
+import { randomBytes as randomBytes2 } from "crypto";
+async function devices() {
+  const { stdout } = await run3("xcrun", ["simctl", "list", "devices", "available", "-j"], { timeout: 1e4 });
+  const out = [];
+  for (const [runtime, list4] of Object.entries(JSON.parse(stdout).devices ?? {})) {
+    const m = /SimRuntime\.(\w+)-([\d-]+)$/.exec(runtime);
+    if (!m || m[1] !== "iOS") continue;
+    const os12 = `${m[1]} ${m[2].replace(/-/g, ".")}`;
+    for (const d of list4) out.push({ udid: d.udid, name: d.name, os: os12, booted: d.state === "Booted" });
+  }
+  return out.sort((a, b) => Number(b.booted) - Number(a.booted) || b.os.localeCompare(a.os, void 0, { numeric: true }));
+}
+async function boot(udid) {
+  await run3("xcrun", ["simctl", "boot", udid], { timeout: 6e4 }).catch((e) => {
+    if (!/current state: Booted/.test(String(e?.stderr))) throw e;
+  });
+  spawn10("open", ["-g", "-a", "Simulator"], { stdio: "ignore", detached: true }).unref();
+}
+async function axe(args) {
+  const bin = axePath();
+  if (!bin) throw new Error("Touch needs AXe on your Mac: brew install cameroncooke/axe/axe");
+  await run3(bin, args, { timeout: 15e3 });
+}
+async function frame(udid, maxSide = 1e3) {
+  fs19.mkdirSync(TMP, { recursive: true });
+  const file = path17.join(TMP, `${randomBytes2(6).toString("hex")}.jpg`);
+  try {
+    await run3("xcrun", ["simctl", "io", udid, "screenshot", "--type=jpeg", file], { timeout: 1e4 });
+    if (maxSide > 0) await run3("sips", ["-Z", String(maxSide), "-s", "formatOptions", "60", file], { timeout: 1e4 });
+    return fs19.readFileSync(file);
+  } finally {
+    fs19.rmSync(file, { force: true });
+  }
+}
+function jpegSize(buf) {
+  let i = 2;
+  while (i + 9 < buf.length) {
+    if (buf[i] !== 255) return null;
+    const marker = buf[i + 1];
+    const len = buf.readUInt16BE(i + 2);
+    if (marker >= 192 && marker <= 195) return { h: buf.readUInt16BE(i + 5), w: buf.readUInt16BE(i + 7) };
+    i += 2 + len;
+  }
+  return null;
+}
+async function points(udid) {
+  const known = pointSize.get(udid);
+  if (known) return known;
+  const name = (await devices()).find((d) => d.udid === udid)?.name ?? "";
+  const scale = /iPad|SE|iPhone (11|XR)\b/.test(name) ? 2 : 3;
+  const px = jpegSize(await frame(udid, 0)) ?? { w: 1206, h: 2622 };
+  const size = { w: Math.round(px.w / scale), h: Math.round(px.h / scale) };
+  pointSize.set(udid, size);
+  return size;
+}
+function stream(req, res, udid) {
+  const boundary = "sakuraframe";
+  res.writeHead(200, {
+    "Content-Type": `multipart/x-mixed-replace; boundary=${boundary}`,
+    "Cache-Control": "no-store",
+    Connection: "close"
+  });
+  let open3 = true;
+  req.on("close", () => open3 = false);
+  (async () => {
+    while (open3) {
+      const started = Date.now();
+      try {
+        const jpg = await frame(udid);
+        if (!open3) break;
+        res.write(`--${boundary}\r
+Content-Type: image/jpeg\r
+Content-Length: ${jpg.length}\r
+\r
+`);
+        res.write(jpg);
+        res.write("\r\n");
+      } catch {
+        await new Promise((r) => setTimeout(r, 1e3));
+      }
+      const wait = 120 - (Date.now() - started);
+      if (wait > 0) await new Promise((r) => setTimeout(r, wait));
+    }
+    res.end();
+  })();
+}
+async function input(udid, ev) {
+  const at = async (x, y) => {
+    const p = await points(udid);
+    return [String(Math.round(x * p.w)), String(Math.round(y * p.h))];
+  };
+  switch (ev.type) {
+    case "tap": {
+      const [x, y] = await at(ev.x, ev.y);
+      return axe(["tap", "-x", x, "-y", y, "--udid", udid]);
+    }
+    case "swipe": {
+      const [x1, y1] = await at(ev.x1, ev.y1);
+      const [x2, y2] = await at(ev.x2, ev.y2);
+      const args = ["swipe", "--start-x", x1, "--start-y", y1, "--end-x", x2, "--end-y", y2, "--udid", udid];
+      if (ev.duration) args.push("--duration", String(Math.min(2, Math.max(0.1, ev.duration))));
+      return axe(args);
+    }
+    case "button":
+      return axe(["button", ev.name, "--udid", udid]);
+    case "text":
+      if (canTouch()) return axe(["type", ev.text, "--udid", udid]);
+      await new Promise((resolve, reject) => {
+        const p = spawn10("xcrun", ["simctl", "pbcopy", udid]);
+        p.on("error", reject);
+        p.on("exit", (c) => c === 0 ? resolve() : reject(new Error("pbcopy failed")));
+        p.stdin.end(ev.text);
+      });
+      return;
+    case "openurl":
+      await run3("xcrun", ["simctl", "openurl", udid, ev.url], { timeout: 15e3 });
+      return;
+    case "appearance":
+      await run3("xcrun", ["simctl", "ui", udid, "appearance", ev.mode], { timeout: 15e3 });
+      return;
+    case "shake":
+      await run3("xcrun", ["simctl", "spawn", udid, "notifyutil", "-p", "com.apple.UIKit.SimulatorShake"], { timeout: 15e3 });
+      return;
+  }
+}
+function json(res, status2, body) {
+  res.writeHead(status2, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+  res.end(JSON.stringify(body));
+}
+async function readJson2(req) {
+  const chunks = [];
+  for await (const c of req) chunks.push(c);
+  try {
+    return JSON.parse(Buffer.concat(chunks).toString() || "{}");
+  } catch {
+    return {};
+  }
+}
+function viewer(udid, framed) {
+  const q = encodeURIComponent(udid);
+  return `<!doctype html>
+<meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no">
+<style>
+  html,body{margin:0;height:100%;background:#141517;overflow:hidden;touch-action:none;-webkit-user-select:none;user-select:none}
+  #wrap{position:absolute;inset:0;display:flex;align-items:center;justify-content:center;padding:var(--pad)}
+  #dev{position:relative;height:100%;aspect-ratio:var(--ar,0.46);max-width:100%;border-radius:var(--r);background:#000;box-shadow:var(--frame)}
+  #screen{width:100%;height:100%;object-fit:contain;border-radius:var(--ir);display:block;-webkit-touch-callout:none}
+  body.framed{--pad:14px 22px;--r:52px;--ir:40px;--frame:0 0 0 10px #1d1e21,0 0 0 11px #3a3b40}
+  body:not(.framed){--pad:0;--r:0;--ir:0;--frame:none}
+  #dot{position:absolute;width:34px;height:34px;margin:-17px 0 0 -17px;border-radius:50%;background:rgba(255,255,255,.35);pointer-events:none;opacity:0;transition:opacity .25s}
+</style>
+<body class="${framed ? "framed" : ""}">
+<div id="wrap"><div id="dev"><img id="screen" src="/__preview/sim/stream?udid=${q}"><div id="dot"></div></div></div>
+<script>
+  const img = document.getElementById('screen'), dot = document.getElementById('dot'), dev = document.getElementById('dev');
+  img.addEventListener('load', () => { if (img.naturalWidth) dev.style.setProperty('--ar', img.naturalWidth / img.naturalHeight); }, { once: false });
+  const post = (ev) => fetch('/__preview/sim/input?udid=${q}', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(ev) })
+    .then(r => r.json()).then(r => { if (!r.ok && window.ReactNativeWebView) window.ReactNativeWebView.postMessage(JSON.stringify({ error: r.error })); });
+  const norm = (e) => { const b = img.getBoundingClientRect(); return [(e.clientX - b.left) / b.width, (e.clientY - b.top) / b.height]; };
+  let start = null;
+  img.addEventListener('pointerdown', (e) => { start = { p: norm(e), t: Date.now() }; dot.style.left = e.clientX - dev.getBoundingClientRect().left + 'px'; dot.style.top = e.clientY - dev.getBoundingClientRect().top + 'px'; dot.style.opacity = 1; });
+  img.addEventListener('pointerup', (e) => {
+    dot.style.opacity = 0;
+    if (!start) return;
+    const [x2, y2] = norm(e), [x1, y1] = start.p, dt = (Date.now() - start.t) / 1000;
+    start = null;
+    const inside = (v) => Math.min(1, Math.max(0, v));
+    if (Math.hypot((x2 - x1) * img.width, (y2 - y1) * img.height) < 10) post({ type: 'tap', x: inside(x1), y: inside(y1) });
+    else post({ type: 'swipe', x1: inside(x1), y1: inside(y1), x2: inside(x2), y2: inside(y2), duration: dt });
+  });
+  window.sakuraFrame = (on) => document.body.classList.toggle('framed', on);
+</script>`;
+}
+async function handle(req, res, route, url) {
+  const udid = url.searchParams.get("udid") ?? "";
+  try {
+    if (route === "/devices") return json(res, 200, { ok: true, devices: await devices(), touch: canTouch() });
+    if (!/^[0-9A-F-]{36}$/i.test(udid)) return json(res, 400, { ok: false, error: "udid required" });
+    if (route === "/view") {
+      res.writeHead(200, { "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-store" });
+      res.end(viewer(udid, url.searchParams.get("frame") !== "0"));
+      return;
+    }
+    if (route === "/stream") return stream(req, res, udid);
+    if (route === "/screenshot") {
+      const jpg = await frame(udid, 0);
+      res.writeHead(200, { "Content-Type": "image/jpeg", "Content-Length": jpg.length, "Cache-Control": "no-store" });
+      res.end(jpg);
+      return;
+    }
+    if (route === "/boot" && req.method === "POST") {
+      await boot(udid);
+      return json(res, 200, { ok: true });
+    }
+    if (route === "/input" && req.method === "POST") {
+      await input(udid, await readJson2(req));
+      return json(res, 200, { ok: true });
+    }
+    json(res, 404, { ok: false, error: "not found" });
+  } catch (e) {
+    json(res, 500, { ok: false, error: String(e?.stderr || e?.message || e).trim().split("\n").pop() });
+  }
+}
+var run3, TMP, axePath, canTouch, pointSize;
+var init_sim = __esm({
+  "src/daemon/sim.ts"() {
+    "use strict";
+    run3 = promisify3(execFile3);
+    TMP = path17.join(os8.tmpdir(), "sakura-sim");
+    axePath = /* @__PURE__ */ (() => {
+      let cached;
+      return () => {
+        if (cached !== void 0) return cached;
+        const dirs = [...(process.env.PATH ?? "").split(":"), "/opt/homebrew/bin", "/usr/local/bin"];
+        cached = dirs.map((d) => path17.join(d, "axe")).find((p) => fs19.existsSync(p)) ?? null;
+        return cached;
+      };
+    })();
+    canTouch = () => axePath() != null;
+    pointSize = /* @__PURE__ */ new Map();
+  }
+});
+
+// src/daemon/preview.ts
+import http from "http";
+import net from "net";
+import { randomBytes as randomBytes3 } from "crypto";
+import { execFile as execFile4 } from "child_process";
+import { promisify as promisify4 } from "util";
+function cookies(req) {
+  const out = {};
+  for (const part of String(req.headers.cookie ?? "").split(";")) {
+    const i = part.indexOf("=");
+    if (i > 0) out[part.slice(0, i).trim()] = decodeURIComponent(part.slice(i + 1).trim());
+  }
+  return out;
+}
+function target(req, daemonPort) {
+  if (req.headers.authorization) return null;
+  const url = new URL(req.url ?? "/", "http://x");
+  const token = getToken();
+  if (token && url.searchParams.get("token") === token) return null;
+  if (!authed(req)) return null;
+  const port2 = Number(cookies(req)[PORT_COOKIE]);
+  return Number.isInteger(port2) && port2 > 0 && port2 < 65536 && port2 !== daemonPort ? port2 : null;
+}
+function forwardHeaders(req, port2) {
+  const h = { ...req.headers, host: `localhost:${port2}` };
+  const rest = String(req.headers.cookie ?? "").split(";").filter((c) => !/^\s*sakura_p[kp]=/.test(c)).join(";").trim();
+  if (rest) h.cookie = rest;
+  else delete h.cookie;
+  if (h.origin) h.origin = `http://localhost:${port2}`;
+  if (typeof h.referer === "string") h.referer = h.referer.replace(/^https?:\/\/[^/]+/, `http://localhost:${port2}`);
+  return h;
+}
+function page(res, status2, title, detail2) {
+  res.writeHead(status2, { "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-store" });
+  res.end(`<!doctype html><meta name="viewport" content="width=device-width,initial-scale=1">
+<body style="margin:0;height:100vh;display:flex;align-items:center;justify-content:center;background:#141517;color:#e6e6e6;font:15px -apple-system,system-ui;text-align:center">
+<div style="padding:24px"><div style="font-weight:600;margin-bottom:6px">${title}</div><div style="color:#8b8b8b">${detail2}</div></div>`);
+}
+function proxy(req, res, port2) {
+  const up2 = http.request(
+    { host: "localhost", port: port2, method: req.method, path: req.url, headers: forwardHeaders(req, port2), autoSelectFamily: true },
+    (r) => {
+      const headers = { ...r.headers };
+      if (typeof headers.location === "string") {
+        headers.location = headers.location.replace(new RegExp(`^https?://(localhost|127\\.0\\.0\\.1|\\[::1\\]):${port2}`), "");
+      }
+      res.writeHead(r.statusCode ?? 502, headers);
+      r.pipe(res);
+    }
+  );
+  up2.on("error", () => {
+    if (!res.headersSent) {
+      page(res, 502, `Nothing is running on localhost:${port2}`, "Start your dev server on the Mac, then reload.");
+    } else res.destroy();
+  });
+  req.pipe(up2);
+}
+function proxyUpgrade(req, socket, head, port2) {
+  const up2 = net.connect({ host: "localhost", port: port2, autoSelectFamily: true });
+  up2.on("connect", () => {
+    const h = forwardHeaders(req, port2);
+    const lines2 = [`${req.method} ${req.url} HTTP/1.1`];
+    for (const [k, v] of Object.entries(h)) {
+      for (const val of Array.isArray(v) ? v : [v]) if (val != null) lines2.push(`${k}: ${val}`);
+    }
+    up2.write(lines2.join("\r\n") + "\r\n\r\n");
+    if (head.length) up2.write(head);
+    socket.pipe(up2).pipe(socket);
+  });
+  const close = () => {
+    socket.destroy();
+    up2.destroy();
+  };
+  up2.on("error", close);
+  socket.on("error", close);
+}
+async function control(req, res, url) {
+  const route = url.pathname.slice("/__preview".length);
+  if (route === "/open") {
+    const token = getToken();
+    if (!token || url.searchParams.get("token") !== token) return page(res, 401, "Not signed in", "Reopen the preview from the Sakura app.");
+    const port2 = Number(url.searchParams.get("port"));
+    const next = url.searchParams.get("path") || "/";
+    const set = [`${KEY_COOKIE}=${KEY}; Path=/; HttpOnly; SameSite=Lax`];
+    if (Number.isInteger(port2) && port2 > 0) set.push(`${PORT_COOKIE}=${port2}; Path=/; SameSite=Lax`);
+    res.writeHead(302, { "Set-Cookie": set, Location: next.startsWith("/") ? next : "/", "Cache-Control": "no-store" });
+    res.end();
+    return;
+  }
+  if (!authed(req)) return page(res, 401, "Not signed in", "Reopen the preview from the Sakura app.");
+  if (route.startsWith("/sim/")) return handle(req, res, route.slice("/sim".length), url);
+  page(res, 404, "Not found", url.pathname);
+}
+async function ports(daemonPort) {
+  let out = "";
+  try {
+    ({ stdout: out } = await run4("lsof", ["-nP", "-iTCP", "-sTCP:LISTEN", "-Fcn"], { timeout: 4e3 }));
+  } catch (e) {
+    out = e?.stdout ?? "";
+  }
+  const seen = /* @__PURE__ */ new Map();
+  let proc = "";
+  for (const line of out.split("\n")) {
+    if (line.startsWith("c")) proc = line.slice(1);
+    else if (line.startsWith("n")) {
+      const m = /^(.*):(\d+)$/.exec(line.slice(1));
+      if (!m) continue;
+      const port2 = Number(m[2]);
+      if (port2 === daemonPort || port2 >= 49152 || seen.has(port2) || SYSTEM.has(proc)) continue;
+      seen.set(port2, proc);
+    }
+  }
+  return [...seen].map(([port2, process2]) => ({ port: port2, process: process2 })).sort((a, b) => a.port - b.port);
+}
+var run4, KEY, KEY_COOKIE, PORT_COOKIE, authed, SYSTEM;
+var init_preview = __esm({
+  "src/daemon/preview.ts"() {
+    "use strict";
+    init_auth();
+    init_sim();
+    run4 = promisify4(execFile4);
+    KEY = randomBytes3(24).toString("hex");
+    KEY_COOKIE = "sakura_pk";
+    PORT_COOKIE = "sakura_pp";
+    authed = (req) => cookies(req)[KEY_COOKIE] === KEY;
+    SYSTEM = /* @__PURE__ */ new Set(["ControlCenter", "rapportd", "sharingd", "launchd", "mDNSResponder"]);
+  }
+});
+
+// src/daemon/server.ts
+import http2 from "http";
+import fs20 from "fs";
+import os9 from "os";
 import zlib2 from "zlib";
-import path14 from "path";
-import { URL } from "url";
+import path18 from "path";
+import { URL as URL2 } from "url";
 import { execFileSync as execFileSync3 } from "child_process";
 import { WebSocketServer } from "ws";
-function add2(method, path18, handler) {
+function add3(method, path22, handler) {
   const keys = [];
   const pattern = new RegExp(
-    "^" + path18.replace(/:[^/]+/g, (m) => {
+    "^" + path22.replace(/:[^/]+/g, (m) => {
       keys.push(m.slice(1));
       return "([^/]+)";
     }) + "/?$"
   );
   routes.push({ method, pattern, keys, handler });
 }
+function runOptions(body) {
+  return {
+    effort: EFFORTS.has(body?.effort) ? body.effort : void 0,
+    mode: MODES.has(body?.mode) ? body.mode : void 0,
+    fast: body?.fast === true || void 0
+  };
+}
 function ok(data = null) {
   return { ok: true, data, stdout: "", stderr: "", code: "ok" };
 }
@@ -3213,8 +4069,8 @@ function sniffExt(buf) {
   return null;
 }
 function saveImages(sessionId, images) {
-  const dir = path14.join(os8.tmpdir(), "sakura-uploads", sessionId.slice(0, 24));
-  fs16.mkdirSync(dir, { recursive: true });
+  const dir = path18.join(os9.tmpdir(), "sakura-uploads", sessionId.slice(0, 24));
+  fs20.mkdirSync(dir, { recursive: true });
   const paths = [];
   images.forEach((img, i) => {
     const raw = String(img?.data ?? "");
@@ -3225,15 +4081,15 @@ function saveImages(sessionId, images) {
     }
     const bytes = Buffer.from(m[2], "base64");
     const ext = sniffExt(bytes) ?? EXT_BY_MIME[m[1]] ?? "png";
-    const base = img.name ? path14.parse(img.name).name.replace(/[^\w.\-]/g, "_") : "";
+    const base = img.name ? path18.parse(img.name).name.replace(/[^\w.\-]/g, "_") : "";
     const stem = `${base || "image"}-${Date.now()}-${i + 1}`;
-    let file = path14.join(dir, `${stem}.${ext}`);
-    fs16.writeFileSync(file, bytes);
+    let file = path18.join(dir, `${stem}.${ext}`);
+    fs20.writeFileSync(file, bytes);
     if (ext === "heic") {
-      const jpg = path14.join(dir, `${stem}.jpg`);
+      const jpg = path18.join(dir, `${stem}.jpg`);
       try {
         execFileSync3("sips", ["-s", "format", "jpeg", file, "--out", jpg], { stdio: "ignore" });
-        fs16.rmSync(file, { force: true });
+        fs20.rmSync(file, { force: true });
         file = jpg;
       } catch {
         log.info(`saveImages: HEIC\u2192JPEG conversion failed for ${file}; sending HEIC as-is`);
@@ -3302,13 +4158,16 @@ function send6(res, status2, payload) {
   res.end(body);
 }
 function createServer(port2) {
-  const server = http.createServer(async (req, res) => {
+  const server = http2.createServer(async (req, res) => {
     const method = req.method ?? "GET";
-    const url = new URL(req.url ?? "/", `http://localhost:${port2}`);
-    if (method === "OPTIONS") return send6(res, 204, {});
+    const url = new URL2(req.url ?? "/", `http://localhost:${port2}`);
     if (method === "GET" && url.pathname === "/ping") {
       return send6(res, 200, { pong: true, pid: process.pid });
     }
+    if (url.pathname.startsWith("/__preview/")) return control(req, res, url);
+    const previewPort = target(req, port2);
+    if (previewPort) return proxy(req, res, previewPort);
+    if (method === "OPTIONS") return send6(res, 204, {});
     const expected = getToken();
     const auth = req.headers["authorization"];
     const presented = typeof auth === "string" && auth.startsWith("Bearer ") ? auth.slice(7) : void 0;
@@ -3334,13 +4193,15 @@ function createServer(port2) {
   const wss = new WebSocketServer({ noServer: true });
   const pty = new WebSocketServer({ noServer: true });
   const authedToken = (req) => {
-    const u = new URL(req.url ?? "/", `http://localhost:${port2}`);
+    const u = new URL2(req.url ?? "/", `http://localhost:${port2}`);
     return u.searchParams.get("token");
   };
   server.on("upgrade", (req, socket, head) => {
-    const u = new URL(req.url ?? "/", `http://localhost:${port2}`);
-    const target = u.pathname === "/ws" ? wss : u.pathname === "/pty" ? pty : null;
-    if (!target) {
+    const previewPort = target(req, port2);
+    if (previewPort) return proxyUpgrade(req, socket, head, previewPort);
+    const u = new URL2(req.url ?? "/", `http://localhost:${port2}`);
+    const target2 = u.pathname === "/ws" ? wss : u.pathname === "/pty" ? pty : null;
+    if (!target2) {
       socket.destroy();
       return;
     }
@@ -3350,7 +4211,7 @@ function createServer(port2) {
       socket.destroy();
       return;
     }
-    target.handleUpgrade(req, socket, head, (ws) => target.emit("connection", ws, req));
+    target2.handleUpgrade(req, socket, head, (ws) => target2.emit("connection", ws, req));
   });
   wss.on("connection", (ws) => {
     ws.on("message", (raw) => {
@@ -3369,7 +4230,7 @@ function createServer(port2) {
     ws.on("error", () => hub.remove(ws));
   });
   pty.on("connection", (ws, req) => {
-    const u = new URL(req.url ?? "/", `http://localhost:${port2}`);
+    const u = new URL2(req.url ?? "/", `http://localhost:${port2}`);
     openTerminal(ws, { cwd: u.searchParams.get("cwd") ?? void 0 });
     ws.on("message", (raw) => {
       try {
@@ -3388,7 +4249,7 @@ function createServer(port2) {
 function setVersion(v) {
   VERSION2 = v;
 }
-var routes, EXT_BY_MIME, UPLOADS_DIR, VERSION2;
+var routes, EFFORTS, MODES, EXT_BY_MIME, UPLOADS_DIR, VERSION2;
 var init_server = __esm({
   "src/daemon/server.ts"() {
     "use strict";
@@ -3398,11 +4259,14 @@ var init_server = __esm({
     init_sessions();
     init_push();
     init_registry();
+    init_projects();
     init_fsops();
     init_tailscale();
     init_registry();
     init_models();
+    init_mentions();
     init_usage();
+    init_limits();
     init_claude();
     init_opencode();
     init_zcode();
@@ -3410,7 +4274,11 @@ var init_server = __esm({
     init_stream();
     init_presence();
     init_terminal();
+    init_preview();
+    init_sim();
     routes = [];
+    EFFORTS = /* @__PURE__ */ new Set(["low", "medium", "high", "xhigh", "max"]);
+    MODES = /* @__PURE__ */ new Set(["acceptEdits", "auto", "bypassPermissions", "manual", "dontAsk", "plan"]);
     EXT_BY_MIME = {
       "image/png": "png",
       "image/jpeg": "jpg",
@@ -3419,35 +4287,35 @@ var init_server = __esm({
       "image/webp": "webp",
       "image/heic": "heic"
     };
-    add2(
+    add3(
       "GET",
       "/blobs/claude/:session/:uuid/:idx",
       ({ res, params }) => sendBytes(res, imageBlock(params.session, params.uuid, Number(params.idx)))
     );
-    add2("GET", "/blobs/:agent/:session/:part", async ({ res, params }) => {
+    add3("GET", "/blobs/:agent/:session/:part", async ({ res, params }) => {
       const reader = params.agent === "opencode" ? image : params.agent === "zcode" ? image2 : null;
       sendBytes(res, reader ? await reader(params.session, params.part) : null);
     });
-    UPLOADS_DIR = path14.join(os8.tmpdir(), "sakura-uploads");
-    add2("GET", "/uploads/:dir/:file", ({ res, params }) => {
-      const file = path14.resolve(UPLOADS_DIR, params.dir, params.file);
-      const ext = path14.extname(file).slice(1).toLowerCase();
+    UPLOADS_DIR = path18.join(os9.tmpdir(), "sakura-uploads");
+    add3("GET", "/uploads/:dir/:file", ({ res, params }) => {
+      const file = path18.resolve(UPLOADS_DIR, params.dir, params.file);
+      const ext = path18.extname(file).slice(1).toLowerCase();
       const mime = Object.entries(EXT_BY_MIME).find(([, e]) => e === ext)?.[0];
-      const ok2 = file.startsWith(UPLOADS_DIR + path14.sep) && mime && fs16.existsSync(file);
-      sendBytes(res, ok2 ? { mediaType: mime, data: fs16.readFileSync(file) } : null);
+      const ok2 = file.startsWith(UPLOADS_DIR + path18.sep) && mime && fs20.existsSync(file);
+      sendBytes(res, ok2 ? { mediaType: mime, data: fs20.readFileSync(file) } : null);
     });
-    add2("GET", "/sessions", async ({ url }) => {
+    add3("GET", "/sessions", async ({ url }) => {
       const archived = url.searchParams.get("archived") === "true";
       const all2 = url.searchParams.get("all") === "true";
-      const list3 = await list({ archived, all: all2 });
-      return { sessions: list3 };
+      const list4 = await list({ archived, all: all2 });
+      return { sessions: list4 };
     });
-    add2("GET", "/sessions/:id/messages", async ({ params, url }) => {
+    add3("GET", "/sessions/:id/messages", async ({ params, url }) => {
       const agent = url.searchParams.get("agent") || void 0;
       const messages7 = await messages6(params.id, agent);
       return { messages: messages7 };
     });
-    add2("POST", "/sessions/:id/send", async ({ params, body }) => {
+    add3("POST", "/sessions/:id/send", async ({ params, body }) => {
       const agent = body?.agent || await detectAgent(params.id);
       if (!agent) return { ok: false, error: "unknown agent for session" };
       const message = String(body?.message ?? "");
@@ -3456,36 +4324,37 @@ var init_server = __esm({
       const imagePaths = incoming.length ? saveImages(params.id, incoming) : [];
       if (imagePaths.length) log.info(`send: attached ${imagePaths.length} image(s) to ${agent} prompt`);
       const model = body?.model ? String(body.model) : void 0;
-      const r = await runTurn(params.id, agent, message, imagePaths, model);
+      const run5 = runOptions(body);
+      const r = await runTurn(params.id, agent, message, imagePaths, model, run5);
       return { ok: r.ok, error: r.error };
     });
-    add2("GET", "/sessions/:id/status", async ({ params, url }) => {
+    add3("GET", "/sessions/:id/status", async ({ params, url }) => {
       const agent = url.searchParams.get("agent") || await detectAgent(params.id);
       if (!agent) return { ok: false, error: "unknown agent for session" };
       const turn = turnState(agent, params.id);
       const elsewhere = turn?.status === "running" ? { open: false } : presence(agent, params.id);
       return { ok: true, agent, turn, openOnMac: elsewhere };
     });
-    add2("POST", "/sessions/:id/rename", ({ params, body }) => {
+    add3("POST", "/sessions/:id/rename", ({ params, body }) => {
       const title = String(body?.title ?? "").trim();
       if (!title) return { ok: false, error: "title is required" };
       rename(params.id, title);
       return { ok: true };
     });
-    add2("POST", "/sessions/:id/archive", ({ params }) => {
+    add3("POST", "/sessions/:id/archive", ({ params }) => {
       setArchived2(params.id, true);
       return { ok: true };
     });
-    add2("POST", "/sessions/:id/restore", ({ params }) => {
+    add3("POST", "/sessions/:id/restore", ({ params }) => {
       setArchived2(params.id, false);
       return { ok: true };
     });
-    add2(
+    add3(
       "GET",
       "/sakura/health",
       () => ok({ installed: true, daemon: true, version: VERSION2 })
     );
-    add2("GET", "/sakura/status", async ({ port: port2 }) => {
+    add3("GET", "/sakura/status", async ({ port: port2 }) => {
       const machine = thisMachine();
       const ts = await discoverBaseUrl(port2).catch(() => null);
       return ok({
@@ -3495,14 +4364,14 @@ var init_server = __esm({
         tailnetBaseUrl: ts
       });
     });
-    add2("POST", "/sakura/daemon/:action", ({ params }) => {
+    add3("POST", "/sakura/daemon/:action", ({ params }) => {
       switch (params.action) {
         case "status":
           return ok({ running: true, pid: process.pid, machine: thisMachine() });
         case "logs": {
           let logs2 = "";
           try {
-            const lines2 = fs16.readFileSync(LOG_PATH, "utf8").split("\n");
+            const lines2 = fs20.readFileSync(LOG_PATH, "utf8").split("\n");
             logs2 = lines2.slice(-200).join("\n");
           } catch {
           }
@@ -3520,8 +4389,8 @@ var init_server = __esm({
           return fail("nonzero", `unknown daemon action: ${params.action}`);
       }
     });
-    add2("GET", "/sakura/workspaces", () => ok(listWorkspaces()));
-    add2(
+    add3("GET", "/sakura/workspaces", () => ok(listWorkspaces()));
+    add3(
       "GET",
       "/sakura/github",
       () => (
@@ -3529,19 +4398,82 @@ var init_server = __esm({
         ok([])
       )
     );
-    add2(
+    add3(
       "GET",
       "/sakura/machines",
       ({ url }) => ok(listMachines(url.searchParams.get("onlineOnly") === "true"))
     );
-    add2("GET", "/sakura/projects", () => ok(listProjects()));
-    add2("GET", "/sakura/usage", async ({ url }) => {
+    add3("GET", "/sakura/projects", async () => ok(await list2()));
+    add3("POST", "/sakura/projects", async ({ body }) => {
+      const dir = String(body?.path ?? "").trim();
+      if (!dir) return fail("bad_request", "path required");
+      try {
+        const id = add(dir);
+        return ok(await find(id));
+      } catch (e) {
+        return fail("bad_request", e.message);
+      }
+    });
+    add3("GET", "/sakura/projects/:id", async ({ params }) => {
+      const d = await detail(params.id);
+      return d ? ok(d) : fail("not_found", "project not found");
+    });
+    add3(
+      "POST",
+      "/sakura/projects/:id/remove",
+      async ({ params }) => await remove(params.id) ? ok({ removed: true }) : fail("not_found", "project not found")
+    );
+    add3("POST", "/sakura/projects/:id/sessions", async ({ params, body }) => {
+      const prompt = String(body?.prompt ?? "").trim();
+      if (!prompt) return fail("bad_request", "prompt required");
+      const agent = body?.agent || "claude";
+      const model = body?.model ? String(body.model) : void 0;
+      const run5 = runOptions(body);
+      try {
+        const s = await prepareSession(params.id, agent, !!body?.worktree);
+        void runTurn(s.sessionId, agent, prompt, void 0, model, run5).catch(
+          (e) => log.warn(`project session ${s.sessionId} failed: ${e.message}`)
+        );
+        return ok({ ...s, agent });
+      } catch (e) {
+        return fail("bad_request", e.message);
+      }
+    });
+    add3("GET", "/sakura/chat-context", async ({ url }) => {
+      const id = url.searchParams.get("sessionId");
+      const agent = url.searchParams.get("agent");
+      if (!id || !agent) return fail("bad_request", "sessionId and agent required");
+      return ok(await chatContext(id, agent));
+    });
+    add3("GET", "/sakura/preview/ports", async ({ port: port2 }) => ok(await ports(port2)));
+    add3("GET", "/sakura/sim/devices", async () => ok({ devices: await devices(), touch: canTouch() }));
+    add3("POST", "/sakura/sim/:udid/boot", async ({ params }) => {
+      await boot(params.udid);
+      return ok();
+    });
+    add3("POST", "/sakura/sim/:udid/input", async ({ params, body }) => {
+      await input(params.udid, body);
+      return ok();
+    });
+    add3("GET", "/sakura/sim/:udid/screenshot", async ({ params }) => {
+      const jpg = await frame(params.udid, 1600);
+      return ok({ dataUrl: `data:image/jpeg;base64,${jpg.toString("base64")}` });
+    });
+    add3("GET", "/sakura/fs/browse", ({ url }) => {
+      try {
+        return ok(browse(url.searchParams.get("path") ?? void 0));
+      } catch (e) {
+        return fail("bad_request", e.message);
+      }
+    });
+    add3("GET", "/sakura/limits", async ({ url }) => ok(await planLimits(url.searchParams.get("agent") ?? "claude")));
+    add3("GET", "/sakura/usage", async ({ url }) => {
       const r = url.searchParams.get("range");
       const range = r === "24h" || r === "7d" || r === "30d" ? r : "all";
       return ok(await report(range));
     });
-    add2("GET", "/sakura/usage/plans", () => ok({ catalog: planCatalog(), configured: loadConfig().plans ?? [] }));
-    add2("POST", "/sakura/usage/plan", ({ body }) => {
+    add3("GET", "/sakura/usage/plans", () => ok({ catalog: planCatalog(), configured: loadConfig().plans ?? [] }));
+    add3("POST", "/sakura/usage/plan", ({ body }) => {
       const agent = String(body?.agent ?? "");
       const since = String(body?.since ?? "");
       if (!agent || !/^\d{4}-\d{2}$/.test(since)) return fail("bad_request", "agent and since (YYYY-MM) are required");
@@ -3549,11 +4481,13 @@ var init_server = __esm({
       if (plan && !planCatalog()[agent]?.[plan]) return fail("bad_request", `unknown plan ${plan} for ${agent}`);
       return ok(setPlan(agent, plan, since));
     });
-    add2("GET", "/sakura/models", ({ url }) => {
+    add3("GET", "/sakura/models", async ({ url }) => {
       const agent = url.searchParams.get("agent") || "claude";
-      return ok(listModels(agent));
+      return ok(await listModels(agent));
     });
-    add2("POST", "/sakura/push-token", ({ body }) => {
+    add3("GET", "/sakura/machine", () => ok({ name: loadConfig().machineName || os9.hostname() }));
+    add3("GET", "/sakura/mentions", ({ url }) => ok(mentions(url.searchParams.get("cwd") ?? void 0)));
+    add3("POST", "/sakura/push-token", ({ body }) => {
       let b = body;
       if (typeof b === "string") {
         try {
@@ -3561,56 +4495,58 @@ var init_server = __esm({
         } catch {
         }
       }
+      if (b?.error) log.warn(`push registration failed on ${b.platform ?? "device"}: ${b.error}`);
       const token = String(b?.token ?? "");
       if (!token) return fail("bad_request", "token required");
       addPushToken(token);
       return ok({ registered: true });
     });
-    add2("POST", "/sakura/push-test", async () => {
+    add3("POST", "/sakura/push-test", async () => {
       await sendPush("\u{1F338} Sakura says hi", "Push is locked in. Your agents will ping you here.", { kind: "test" });
       return ok({ sent: true });
     });
-    add2("GET", "/sakura/sessions", async ({ url }) => {
+    add3("GET", "/sakura/sessions", async ({ url }) => {
       const limit = Number(url.searchParams.get("limit")) || void 0;
       const agent = url.searchParams.get("agent") || void 0;
       return ok(await list({ limit, agent }));
     });
-    add2("POST", "/sakura/sessions", async ({ body }) => {
+    add3("POST", "/sakura/sessions", async ({ body }) => {
       const r = await create(String(body?.prompt ?? ""), {
         agent: body?.agent,
         cwd: body?.cwd
       });
       return r.ok ? ok({ output: r.output }) : fail("nonzero", r.error ?? "create failed");
     });
-    add2("GET", "/sakura/sessions/:id", async ({ params }) => {
+    add3("GET", "/sakura/sessions/:id", async ({ params }) => {
       const s = await show(params.id);
       return s ? ok(s) : fail("nonzero", "session not found");
     });
-    add2("GET", "/sakura/sessions/:id/history", async ({ params, url }) => {
+    add3("GET", "/sakura/sessions/:id/history", async ({ params, url }) => {
       const all2 = url.searchParams.get("all") === "true";
       const limit = Number(url.searchParams.get("limit")) || void 0;
       const reverse = url.searchParams.get("reverse") === "true";
       return ok(await history(params.id, { all: all2, limit, reverse }));
     });
-    add2("POST", "/sakura/sessions/:id/chat", async ({ params, body }) => {
+    add3("POST", "/sakura/sessions/:id/chat", async ({ params, body }) => {
       const agent = body?.agent || await detectAgent(params.id);
       if (!agent) return fail("nonzero", "unknown agent for session");
       const model = body?.model ? String(body.model) : void 0;
-      const r = await runTurn(params.id, agent, String(body?.prompt ?? ""), void 0, model);
+      const run5 = runOptions(body);
+      const r = await runTurn(params.id, agent, String(body?.prompt ?? ""), void 0, model, run5);
       return r.ok ? ok({ ok: true }) : fail("nonzero", r.error ?? "chat failed");
     });
-    add2(
+    add3(
       "POST",
       "/sakura/sessions/:id/cancel",
       () => fail("nonzero", "cancel is not supported for local file-backed sessions")
     );
-    add2("POST", "/sakura/sessions/:id/rename", ({ params, body }) => {
+    add3("POST", "/sakura/sessions/:id/rename", ({ params, body }) => {
       const title = String(body?.title ?? "").trim();
       if (!title) return fail("nonzero", "title is required");
       rename(params.id, title);
       return ok({ id: params.id, title });
     });
-    add2("POST", "/sakura/sessions/:id/:action", ({ params }) => {
+    add3("POST", "/sakura/sessions/:id/:action", ({ params }) => {
       switch (params.action) {
         case "archive":
           setArchived2(params.id, true);
@@ -3625,8 +4561,8 @@ var init_server = __esm({
           );
       }
     });
-    add2("GET", "/sakura/agent-configs", () => ok(listAgentConfigs()));
-    add2("POST", "/sakura/agent-configs", ({ body }) => {
+    add3("GET", "/sakura/agent-configs", () => ok(listAgentConfigs()));
+    add3("POST", "/sakura/agent-configs", ({ body }) => {
       try {
         return ok(
           createAgentConfig({
@@ -3641,7 +4577,7 @@ var init_server = __esm({
         return fail("nonzero", e.message);
       }
     });
-    add2("PUT", "/sakura/agent-configs", ({ body }) => {
+    add3("PUT", "/sakura/agent-configs", ({ body }) => {
       try {
         return ok(
           updateAgentConfig(body.id_or_name ?? body.idOrName, {
@@ -3656,30 +4592,30 @@ var init_server = __esm({
         return fail("nonzero", e.message);
       }
     });
-    add2("GET", "/sakura/agent-configs/:id", ({ params }) => {
+    add3("GET", "/sakura/agent-configs/:id", ({ params }) => {
       const a = resolveAgentConfig(params.id);
       return a ? ok(a) : fail("nonzero", "agent-config not found");
     });
-    add2(
+    add3(
       "DELETE",
       "/sakura/agent-configs/:id",
       ({ params }) => deleteAgentConfig(params.id) ? ok({ deleted: true }) : fail("nonzero", "agent-config not found")
     );
-    add2("POST", "/sakura/agent-configs/:id/refresh", ({ params }) => {
+    add3("POST", "/sakura/agent-configs/:id/refresh", ({ params }) => {
       try {
         return ok(refreshCapabilities(params.id));
       } catch (e) {
         return fail("nonzero", e.message);
       }
     });
-    add2("GET", "/sakura/fs/list", ({ url }) => {
+    add3("GET", "/sakura/fs/list", ({ url }) => {
       try {
-        return ok(list2(url.searchParams.get("path") ?? void 0));
+        return ok(list3(url.searchParams.get("path") ?? void 0));
       } catch (e) {
         return fail("nonzero", e.message);
       }
     });
-    add2("GET", "/sakura/fs/read", ({ url }) => {
+    add3("GET", "/sakura/fs/read", ({ url }) => {
       const p = url.searchParams.get("path");
       if (!p) return fail("nonzero", "path required");
       try {
@@ -3688,7 +4624,7 @@ var init_server = __esm({
         return fail("nonzero", e.message);
       }
     });
-    add2("POST", "/sakura/fs/write", ({ body }) => {
+    add3("POST", "/sakura/fs/write", ({ body }) => {
       if (!body?.path) return fail("nonzero", "path required");
       try {
         return ok(write3(body.path, String(body.content ?? "")));
@@ -3696,7 +4632,7 @@ var init_server = __esm({
         return fail("nonzero", e.message);
       }
     });
-    add2("POST", "/sakura/fs/mkdir", ({ body }) => {
+    add3("POST", "/sakura/fs/mkdir", ({ body }) => {
       if (!body?.path) return fail("nonzero", "path required");
       try {
         return ok(mkdir(body.path));
@@ -3704,35 +4640,36 @@ var init_server = __esm({
         return fail("nonzero", e.message);
       }
     });
-    add2("GET", "/tailscale/health", () => installed());
-    add2("GET", "/tailscale/status", ({ port: port2 }) => status(port2));
-    add2("POST", "/tailscale/up", () => up());
-    add2("POST", "/tailscale/down", () => down());
-    add2("POST", "/tailscale/serve", ({ port: port2 }) => serve(port2));
-    add2("POST", "/tailscale/serve-off", () => serveOff());
+    add3("GET", "/tailscale/health", () => installed());
+    add3("GET", "/tailscale/status", ({ port: port2 }) => status(port2));
+    add3("POST", "/tailscale/up", () => up());
+    add3("POST", "/tailscale/down", () => down());
+    add3("POST", "/tailscale/serve", ({ port: port2 }) => serve(port2));
+    add3("POST", "/tailscale/serve-off", () => serveOff());
     VERSION2 = "0.0.0";
   }
 });
 
 // src/daemon/tsnet.ts
-import fs17 from "fs";
-import path15 from "path";
+import crypto from "crypto";
+import fs21 from "fs";
+import path19 from "path";
 import { fileURLToPath } from "url";
-import { spawn as spawn10 } from "child_process";
+import { spawn as spawn11 } from "child_process";
 function resolveBinary() {
   const envBin = process.env.SAKURA_TSNET_BIN;
-  if (envBin && fs17.existsSync(envBin)) return envBin;
-  const here = path15.dirname(fileURLToPath(import.meta.url));
+  if (envBin && fs21.existsSync(envBin)) return envBin;
+  const here = path19.dirname(fileURLToPath(import.meta.url));
   const name = process.platform === "win32" ? "sakura-tsnet.exe" : "sakura-tsnet";
   const candidates = [
-    path15.join(here, "..", "bin", name),
+    path19.join(here, "..", "bin", name),
     // package/bin (postinstall download / build-sidecar.sh)
-    path15.join(here, "bin", name),
-    path15.join(process.cwd(), "bin", name),
-    path15.join(SAKURA_DIR, name)
+    path19.join(here, "bin", name),
+    path19.join(process.cwd(), "bin", name),
+    path19.join(SAKURA_DIR, name)
     // user-dropped
   ];
-  return candidates.find((p) => fs17.existsSync(p)) ?? null;
+  return candidates.find((p) => fs21.existsSync(p)) ?? null;
 }
 function startTsnet(port2) {
   const cfg = loadConfig();
@@ -3747,20 +4684,35 @@ function startTsnet(port2) {
     return;
   }
   stopping = false;
+  resetStateIfKeyChanged(ts.authKey);
   spawnSidecar(bin, ts.controlUrl, ts.authKey, ts.hostname || cfg.machineName, port2);
 }
+function resetStateIfKeyChanged(authKey) {
+  const hash = crypto.createHash("sha256").update(authKey).digest("hex");
+  let prev = null;
+  try {
+    prev = fs21.readFileSync(KEY_MARK, "utf8").trim();
+  } catch {
+  }
+  if (prev && prev !== hash) {
+    log.info("tailnet key changed \u2014 re-registering this Mac on the new key");
+    fs21.rmSync(STATE_DIR, { recursive: true, force: true });
+  }
+  fs21.mkdirSync(STATE_DIR, { recursive: true });
+  fs21.writeFileSync(KEY_MARK, hash);
+}
 function spawnSidecar(bin, controlUrl, authKey, hostname2, port2) {
   const env = {
     ...process.env,
     SAKURA_TS_CONTROL_URL: controlUrl,
     SAKURA_TS_AUTH_KEY: authKey,
     SAKURA_TS_HOSTNAME: hostname2,
-    SAKURA_TS_STATE_DIR: path15.join(SAKURA_DIR, "tsnet-state"),
+    SAKURA_TS_STATE_DIR: STATE_DIR,
     SAKURA_TS_STATE_FILE: TSNET_PATH,
     SAKURA_TS_PORT: String(port2)
   };
-  log.info(`starting embedded Tailscale sidecar (${path15.basename(bin)})`);
-  const c = spawn10(bin, [], { stdio: ["ignore", "pipe", "pipe"], env });
+  log.info(`starting embedded Tailscale sidecar (${path19.basename(bin)})`);
+  const c = spawn11(bin, [], { stdio: ["ignore", "pipe", "pipe"], env });
   child = c;
   const pipe = (buf) => buf.toString().split("\n").filter(Boolean).forEach((line) => log.info(`[tsnet] ${line}`));
   c.stdout?.on("data", pipe);
@@ -3788,11 +4740,11 @@ function stopTsnet() {
     child = null;
   }
   try {
-    fs17.rmSync(TSNET_PATH, { force: true });
+    fs21.rmSync(TSNET_PATH, { force: true });
   } catch {
   }
 }
-var child, stopping, restartTimer;
+var child, stopping, restartTimer, STATE_DIR, KEY_MARK;
 var init_tsnet = __esm({
   "src/daemon/tsnet.ts"() {
     "use strict";
@@ -3801,12 +4753,14 @@ var init_tsnet = __esm({
     child = null;
     stopping = false;
     restartTimer = null;
+    STATE_DIR = path19.join(SAKURA_DIR, "tsnet-state");
+    KEY_MARK = path19.join(STATE_DIR, "joined-with");
   }
 });
 
 // src/daemon/manager.ts
-import fs18 from "fs";
-import { spawn as spawn11 } from "child_process";
+import fs22 from "fs";
+import { spawn as spawn12 } from "child_process";
 async function ensureTailnetProvisioned() {
   const serverToken = getServerToken();
   if (!serverToken) return;
@@ -3828,7 +4782,7 @@ async function ensureTailnetProvisioned() {
 }
 function readDaemonInfo() {
   try {
-    return JSON.parse(fs18.readFileSync(DAEMON_PATH, "utf8"));
+    return JSON.parse(fs22.readFileSync(DAEMON_PATH, "utf8"));
   } catch {
     return null;
   }
@@ -3845,8 +4799,8 @@ function running() {
   const info2 = readDaemonInfo();
   if (info2 && pidAlive(info2.pid)) return info2;
   if (info2) {
-    fs18.rmSync(DAEMON_PATH, { force: true });
-    fs18.rmSync(PID_PATH, { force: true });
+    fs22.rmSync(DAEMON_PATH, { force: true });
+    fs22.rmSync(PID_PATH, { force: true });
   }
   return null;
 }
@@ -3869,8 +4823,8 @@ async function runServer(version) {
     url: `http://${host}:${port2}`,
     startedAt: Date.now()
   };
-  fs18.writeFileSync(DAEMON_PATH, JSON.stringify(info2, null, 2));
-  fs18.writeFileSync(PID_PATH, String(process.pid));
+  fs22.writeFileSync(DAEMON_PATH, JSON.stringify(info2, null, 2));
+  fs22.writeFileSync(PID_PATH, String(process.pid));
   await ensureTailnetProvisioned();
   startTsnet(port2);
   const tailnet = await discoverBaseUrl(port2).catch(() => null);
@@ -3881,8 +4835,8 @@ async function runServer(version) {
     log.info("shutting down");
     stopTsnet();
     server.close();
-    fs18.rmSync(DAEMON_PATH, { force: true });
-    fs18.rmSync(PID_PATH, { force: true });
+    fs22.rmSync(DAEMON_PATH, { force: true });
+    fs22.rmSync(PID_PATH, { force: true });
     process.exit(0);
   };
   process.on("SIGINT", shutdown);
@@ -3893,9 +4847,9 @@ function start() {
   if (existing) return existing;
   ensureSakuraDirs();
   const entry = process.argv[1] ?? "";
-  const out = fs18.openSync(LOG_PATH, "a");
-  const err = fs18.openSync(LOG_PATH, "a");
-  const child2 = spawn11(process.execPath, [entry, "__run-daemon"], {
+  const out = fs22.openSync(LOG_PATH, "a");
+  const err = fs22.openSync(LOG_PATH, "a");
+  const child2 = spawn12(process.execPath, [entry, "__run-daemon"], {
     detached: true,
     stdio: ["ignore", out, err],
     env: process.env
@@ -3916,8 +4870,8 @@ function stop() {
     process.kill(info2.pid, "SIGTERM");
   } catch {
   }
-  fs18.rmSync(DAEMON_PATH, { force: true });
-  fs18.rmSync(PID_PATH, { force: true });
+  fs22.rmSync(DAEMON_PATH, { force: true });
+  fs22.rmSync(PID_PATH, { force: true });
   return true;
 }
 function restart() {
@@ -3927,7 +4881,7 @@ function restart() {
 }
 function logs(lines2 = 50) {
   try {
-    const all2 = fs18.readFileSync(LOG_PATH, "utf8").split("\n");
+    const all2 = fs22.readFileSync(LOG_PATH, "utf8").split("\n");
     return all2.slice(-lines2).join("\n");
   } catch {
     return "";
@@ -3947,7 +4901,7 @@ var init_manager = __esm({
 });
 
 // src/pairing.ts
-import os9 from "os";
+import os10 from "os";
 import qrcode from "qrcode-terminal";
 async function buildPairing() {
   const token = requireToken();
@@ -3977,10 +4931,10 @@ function renderQr(deepLink) {
   });
 }
 function localIp() {
-  const nets = os9.networkInterfaces();
+  const nets = os10.networkInterfaces();
   for (const name of Object.keys(nets)) {
-    for (const net of nets[name] ?? []) {
-      if (net.family === "IPv4" && !net.internal) return net.address;
+    for (const net2 of nets[name] ?? []) {
+      if (net2.family === "IPv4" && !net2.internal) return net2.address;
     }
   }
   return "127.0.0.1";
@@ -4049,7 +5003,7 @@ var init_pair = __esm({
 import { Command } from "commander";
 
 // src/version.ts
-var VERSION = "0.0.13";
+var VERSION = "0.0.15";
 
 // src/index.ts
 init_config();
@@ -4178,7 +5132,7 @@ function registerRuntime(program, version) {
 // src/commands/session.ts
 init_sessions();
 init_output();
-import fs19 from "fs";
+import fs23 from "fs";
 function resolveSessionId(arg) {
   const id = arg || process.env.SAKURA_SESSION_ID;
   if (!id) die("Provide a sessionId (positional or via SAKURA_SESSION_ID).");
@@ -4187,7 +5141,7 @@ function resolveSessionId(arg) {
 async function resolvePrompt(positional, opts) {
   if (positional) return positional;
   if (opts.prompt) return opts.prompt;
-  if (opts.promptFile) return fs19.readFileSync(opts.promptFile, "utf8");
+  if (opts.promptFile) return fs23.readFileSync(opts.promptFile, "utf8");
   if (!process.stdin.isTTY) {
     const chunks = [];
     for await (const c of process.stdin) chunks.push(c);
@@ -4203,15 +5157,15 @@ function registerSession(program) {
       if (opts.json) return printJson([]);
       return info("No archived sessions (archival is not tracked for local sessions).");
     }
-    const list3 = await list({
+    const list4 = await list({
       agent: opts.agent,
       limit: opts.limit ? Number(opts.limit) : void 0
     });
-    if (opts.json) return printJson(list3);
-    if (!list3.length) return info("No sessions found.");
+    if (opts.json) return printJson(list4);
+    if (!list4.length) return info("No sessions found.");
     printTable(
       ["ID", "Agent", "Status", "Updated", "Title"],
-      list3.map((x) => [x.id.slice(0, 12), x.agent, x.status, x.updatedAt, x.title])
+      list4.map((x) => [x.id.slice(0, 12), x.agent, x.status, x.updatedAt, x.title])
     );
   });
   s.command("show [sessionId]").description("Show session metadata").option("--json", "output as JSON").action(async (sessionId, opts) => {
@@ -4311,9 +5265,9 @@ function envToObj(pairs) {
 function registerRegistry(program) {
   const ws = program.command("workspace").description("Discover accessible workspaces");
   ws.command("list").description("List workspaces you can access").option("--json", "output as JSON").action((opts) => {
-    const list3 = listWorkspaces();
-    if (opts.json) return printJson(list3);
-    printTable(["ID", "Name", "Slug"], list3.map((w) => [w.id, w.name, w.slug]));
+    const list4 = listWorkspaces();
+    if (opts.json) return printJson(list4);
+    printTable(["ID", "Name", "Slug"], list4.map((w) => [w.id, w.name, w.slug]));
   });
   const gh = program.command("github").description("GitHub repositories linked to a workspace");
   gh.command("list").description("List GitHub repositories linked to a workspace").option("--workspace <idOrSlug>", "workspace").option("--json", "output as JSON").action((opts) => {
@@ -4332,31 +5286,31 @@ function registerRegistry(program) {
     }
   });
   proj.command("list").description("List registered local projects").option("--json", "output as JSON").action((opts) => {
-    const list3 = listProjects();
-    if (opts.json) return printJson(list3);
-    if (!list3.length) return info("No projects registered. Add one with `sakuraai project add`.");
-    printTable(["ID", "Name", "Path"], list3.map((p) => [p.id.slice(0, 8), p.name, p.path]));
+    const list4 = listProjects();
+    if (opts.json) return printJson(list4);
+    if (!list4.length) return info("No projects registered. Add one with `sakuraai project add`.");
+    printTable(["ID", "Name", "Path"], list4.map((p) => [p.id.slice(0, 8), p.name, p.path]));
   });
   proj.command("delete <idOrNameOrPath>").description("Delete a registered local project").action((sel) => {
     deleteProject(sel) ? success("Project removed.") : warn("No matching project.");
   });
   const m = program.command("machine").description("Inspect machines in a workspace");
   m.command("list").description("List machines in a workspace").option("--workspace <idOrSlug>", "workspace").option("--online-only", "only machines with a recent heartbeat").option("--include-acp-capabilities", "include capability cache in JSON").option("--json", "output as JSON").action((opts) => {
-    const list3 = listMachines(!!opts.onlineOnly);
-    if (opts.json) return printJson(list3);
+    const list4 = listMachines(!!opts.onlineOnly);
+    if (opts.json) return printJson(list4);
     printTable(
       ["ID", "Name", "Online", "CLI"],
-      list3.map((x) => [x.id.slice(0, 8), x.name, x.online ? "yes" : "no", x.cli.join(", ") || "\u2014"])
+      list4.map((x) => [x.id.slice(0, 8), x.name, x.online ? "yes" : "no", x.cli.join(", ") || "\u2014"])
     );
   });
   const ac = program.command("agent-config").description("Manage agent configs");
   ac.command("list").description("List configs in a workspace").option("--workspace <idOrSlug>", "workspace").option("--json", "output as JSON").action((opts) => {
-    const list3 = listAgentConfigs();
-    if (opts.json) return printJson(list3);
-    if (!list3.length) return info("No agent configs. Create one with `sakuraai agent-config create`.");
+    const list4 = listAgentConfigs();
+    if (opts.json) return printJson(list4);
+    if (!list4.length) return info("No agent configs. Create one with `sakuraai agent-config create`.");
     printTable(
       ["ID", "Name", "Type", "Description"],
-      list3.map((a) => [a.id.slice(0, 8), a.name, a.agentType, a.description ?? ""])
+      list4.map((a) => [a.id.slice(0, 8), a.name, a.agentType, a.description ?? ""])
     );
   });
   ac.command("show <idOrName>").description("Show one config").option("--json", "output as JSON").action((sel, opts) => {
@@ -4502,25 +5456,25 @@ init_pair();
 
 // src/commands/welcome.ts
 init_config();
-import fs20 from "fs";
-import path16 from "path";
+import fs24 from "fs";
+import path20 from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
-import { spawn as spawn12 } from "child_process";
-var WELCOMED_MARKER = path16.join(SAKURA_DIR, ".welcomed");
+import { spawn as spawn13 } from "child_process";
+var WELCOMED_MARKER = path20.join(SAKURA_DIR, ".welcomed");
 function resolveBinary2() {
   const envBin = process.env.SAKURA_ONBOARD_BIN;
-  if (envBin && fs20.existsSync(envBin)) return envBin;
-  const here = path16.dirname(fileURLToPath2(import.meta.url));
+  if (envBin && fs24.existsSync(envBin)) return envBin;
+  const here = path20.dirname(fileURLToPath2(import.meta.url));
   const name = process.platform === "win32" ? "sakura-onboard.exe" : "sakura-onboard";
   const candidates = [
-    path16.join(here, "..", "bin", name),
+    path20.join(here, "..", "bin", name),
     // package/bin (postinstall download)
-    path16.join(here, "bin", name),
-    path16.join(process.cwd(), "bin", name),
-    path16.join(SAKURA_DIR, name)
+    path20.join(here, "bin", name),
+    path20.join(process.cwd(), "bin", name),
+    path20.join(SAKURA_DIR, name)
     // user-dropped
   ];
-  return candidates.find((p) => fs20.existsSync(p)) ?? null;
+  return candidates.find((p) => fs24.existsSync(p)) ?? null;
 }
 function showWelcome() {
   return new Promise((resolve) => {
@@ -4529,7 +5483,7 @@ function showWelcome() {
       printFallback();
       return resolve();
     }
-    const child2 = spawn12(bin, [], { stdio: "inherit" });
+    const child2 = spawn13(bin, [], { stdio: "inherit" });
     child2.on("error", () => {
       printFallback();
       resolve();
@@ -4538,10 +5492,10 @@ function showWelcome() {
   });
 }
 async function maybeFirstRunWelcome() {
-  if (fs20.existsSync(WELCOMED_MARKER)) return;
+  if (fs24.existsSync(WELCOMED_MARKER)) return;
   if (!process.stdout.isTTY || !process.stdin.isTTY) return;
   try {
-    fs20.writeFileSync(WELCOMED_MARKER, (/* @__PURE__ */ new Date()).toISOString());
+    fs24.writeFileSync(WELCOMED_MARKER, (/* @__PURE__ */ new Date()).toISOString());
   } catch {
   }
   await showWelcome();
@@ -4579,9 +5533,9 @@ function registerWelcome(program) {
 }
 
 // src/commands/app.ts
-import fs21 from "fs";
-import os10 from "os";
-import path17 from "path";
+import fs25 from "fs";
+import os11 from "os";
+import path21 from "path";
 import { execFileSync as execFileSync4 } from "child_process";
 init_output();
 var APP_PATH = "/Applications/Sakura.app";
@@ -4592,13 +5546,13 @@ function dmgUrl() {
 async function download(url, dest) {
   const res = await fetch(url, { redirect: "follow" });
   if (!res.ok) throw new Error(`download failed: HTTP ${res.status} for ${url}`);
-  fs21.writeFileSync(dest, Buffer.from(await res.arrayBuffer()));
+  fs25.writeFileSync(dest, Buffer.from(await res.arrayBuffer()));
 }
 async function install() {
   if (process.platform !== "darwin") die("The Sakura menu bar app is macOS only.");
-  const tmp = fs21.mkdtempSync(path17.join(os10.tmpdir(), "sakura-app-"));
-  const dmg = path17.join(tmp, "Sakura.dmg");
-  const mount = path17.join(tmp, "mnt");
+  const tmp = fs25.mkdtempSync(path21.join(os11.tmpdir(), "sakura-app-"));
+  const dmg = path21.join(tmp, "Sakura.dmg");
+  const mount = path21.join(tmp, "mnt");
   info(`Downloading Sakura.app ${VERSION}\u2026`);
   try {
     await download(dmgUrl(), dmg);
@@ -4606,18 +5560,18 @@ async function install() {
     die(`${e.message}
 Build it yourself instead: ./mac/scripts/build-dmg.sh in the Sakura repo.`);
   }
-  fs21.mkdirSync(mount);
+  fs25.mkdirSync(mount);
   execFileSync4("hdiutil", ["attach", dmg, "-nobrowse", "-quiet", "-mountpoint", mount]);
   try {
     try {
       execFileSync4("osascript", ["-e", 'tell application id "mom.sakura.mac" to quit']);
     } catch {
     }
-    fs21.rmSync(APP_PATH, { recursive: true, force: true });
-    execFileSync4("ditto", [path17.join(mount, "Sakura.app"), APP_PATH]);
+    fs25.rmSync(APP_PATH, { recursive: true, force: true });
+    execFileSync4("ditto", [path21.join(mount, "Sakura.app"), APP_PATH]);
   } finally {
     execFileSync4("hdiutil", ["detach", mount, "-quiet"]);
-    fs21.rmSync(tmp, { recursive: true, force: true });
+    fs25.rmSync(tmp, { recursive: true, force: true });
   }
   execFileSync4("open", [APP_PATH]);
   success("Sakura is in your menu bar (look for the blossom).");
@@ -4626,7 +5580,7 @@ function registerApp(program) {
   const app = program.command("app").description("The optional Sakura menu bar app for macOS");
   app.command("install").description("Download Sakura.app into /Applications and open it").action(install);
   app.command("open").description("Open the Sakura menu bar app").action(() => {
-    if (!fs21.existsSync(APP_PATH)) die("Sakura.app is not installed. Run `sakuraai app install`.");
+    if (!fs25.existsSync(APP_PATH)) die("Sakura.app is not installed. Run `sakuraai app install`.");
     execFileSync4("open", [APP_PATH]);
   });
 }