superbee 0.3.0-pre.2 → 0.3.0-pre.3

package/dist/superbee.mjs

@@ -44,7 +44,7 @@ var __toESM = (mod, isNodeMode, target2) => (target2 = mod != null ? __create(__
 var define_SUPERBEE_BUILD_IDENTITY_default;
 var init_define_SUPERBEE_BUILD_IDENTITY = __esm({
   "<define:__SUPERBEE_BUILD_IDENTITY__>"() {
-    define_SUPERBEE_BUILD_IDENTITY_default = { schema: "superbee.build-identity.v1", package: { name: "superbee", version: "0.3.0-pre.2" }, source: { commit: "2a374e115dd765ad94d1199be34da9b16ba9334c", dirty: false }, artifact: { channel: "npm-package" }, compatibility_contracts: { skill: 1, hook: 1, mcp: 1 } };
+    define_SUPERBEE_BUILD_IDENTITY_default = { schema: "superbee.build-identity.v1", package: { name: "superbee", version: "0.3.0-pre.3" }, source: { commit: "7c930597dd46f7b3283158882e19db48420fe1c5", dirty: false }, artifact: { channel: "npm-package" }, compatibility_contracts: { skill: 1, hook: 1, mcp: 1 } };
   }
 });
 
@@ -84,9 +84,9 @@ var require_common = __commonJS({
       }
       return target2;
     }
-    function repeat2(string8, count2) {
+    function repeat2(string8, count3) {
       var result3 = "", cycle;
-      for (cycle = 0; cycle < count2; cycle += 1) {
+      for (cycle = 0; cycle < count3; cycle += 1) {
         result3 += string8;
       }
       return result3;
@@ -1533,11 +1533,11 @@ var require_loader = __commonJS({
       }
       return false;
     }
-    function writeFoldedLines(state, count2) {
-      if (count2 === 1) {
+    function writeFoldedLines(state, count3) {
+      if (count3 === 1) {
         state.result += " ";
-      } else if (count2 > 1) {
-        state.result += common.repeat("\n", count2 - 1);
+      } else if (count3 > 1) {
+        state.result += common.repeat("\n", count3 - 1);
       }
     }
     function readPlainScalar(state, nodeIndent, withinFlowCollection) {
@@ -3482,11 +3482,11 @@ function scan(frontmatter, existing) {
   window2(frontmatter.usage_window, "usage_window", existing?.usage_window);
   for (const key of ["verified", "sources"]) {
     authoredOkfRows(frontmatter[key], existing?.[key], key === "verified").forEach(({ entry, index: index2 }) => {
-      const path43 = key === "verified" && !Array.isArray(frontmatter.verified) ? key : `${key}[${index2}]`;
-      if (key === "verified") slot(entry, "at", `${path43}.at`);
+      const path44 = key === "verified" && !Array.isArray(frontmatter.verified) ? key : `${key}[${index2}]`;
+      if (key === "verified") slot(entry, "at", `${path44}.at`);
       else {
-        slot(entry, "last_modified", `${path43}.last_modified`);
-        if (isOkfRecord(entry)) window2(entry.usage_window, `${path43}.usage_window`);
+        slot(entry, "last_modified", `${path44}.last_modified`);
+        if (isOkfRecord(entry)) window2(entry.usage_window, `${path44}.usage_window`);
       }
     });
   }
@@ -3513,29 +3513,29 @@ var init_okf_timestamps = __esm({
 });
 
 // ../core/src/okf-standard-fields.ts
-function fail(path43, expected) {
-  throw new InvalidInputError(`OKF v0.2 ${path43} must be ${expected}`);
+function fail(path44, expected) {
+  throw new InvalidInputError(`OKF v0.2 ${path44} must be ${expected}`);
 }
 function assertAuthoredOkfStandardFields(frontmatter, existing, options = {}) {
-  const field = (owner, key, path43, valid, expected, previous3, required2 = false) => {
+  const field = (owner, key, path44, valid, expected, previous3, required2 = false) => {
     if (!Object.hasOwn(owner, key)) {
-      if (required2 && !(previous3 && !Object.hasOwn(previous3, key))) fail(path43, expected);
+      if (required2 && !(previous3 && !Object.hasOwn(previous3, key))) fail(path44, expected);
       return;
     }
     if (previous3 && Object.hasOwn(previous3, key) && okfValuesEqual(owner[key], previous3[key])) return;
-    if (!valid(owner[key])) fail(path43, expected);
+    if (!valid(owner[key])) fail(path44, expected);
   };
-  const strings = (value, path43) => {
-    if (!Array.isArray(value)) fail(path43, "a list of strings");
+  const strings = (value, path44) => {
+    if (!Array.isArray(value)) fail(path44, "a list of strings");
     Array.from(value).forEach((entry, index2) => {
-      if (!string(entry)) fail(`${path43}[${index2}]`, "a string");
+      if (!string(entry)) fail(`${path44}[${index2}]`, "a string");
     });
   };
-  const mapping = (owner, key, path43, previous3) => {
+  const mapping = (owner, key, path44, previous3) => {
     if (!Object.hasOwn(owner, key)) return void 0;
     if (!isOkfRecord(owner[key])) {
       if (previous3 && Object.hasOwn(previous3, key) && okfValuesEqual(owner[key], previous3[key])) return void 0;
-      fail(path43, "a mapping when present");
+      fail(path44, "a mapping when present");
     }
     return owner[key];
   };
@@ -3547,9 +3547,9 @@ function assertAuthoredOkfStandardFields(frontmatter, existing, options = {}) {
       fail(key, allowBare ? "a list of events or one event mapping" : "a list");
     }
     for (const { entry, index: index2 } of authoredOkfRows(value, previous3?.[key], allowBare)) {
-      const path43 = allowBare && !Array.isArray(value) ? key : `${key}[${index2}]`;
-      if (!isOkfRecord(entry)) fail(path43, "a mapping");
-      validate(entry, path43);
+      const path44 = allowBare && !Array.isArray(value) ? key : `${key}[${index2}]`;
+      if (!isOkfRecord(entry)) fail(path44, "a mapping");
+      validate(entry, path44);
     }
   };
   field(frontmatter, "type", "type", nonempty, "a nonempty string", void 0, true);
@@ -3564,24 +3564,24 @@ function assertAuthoredOkfStandardFields(frontmatter, existing, options = {}) {
     field(generated, "by", "generated.by", isOkfActor, "human:<id>, process:<id>, or <producer>/<version>", previous3, false);
     if (required2 && !Object.hasOwn(generated, "by")) fail("generated.by", "present when generated is authored");
   }
-  list4("verified", existing, (entry, path43) => {
-    field(entry, "by", `${path43}.by`, isOkfActor, "human:<id>, process:<id>, or <producer>/<version>", void 0, true);
-    field(entry, "at", `${path43}.at`, string, "an ISO-8601 datetime with an explicit UTC offset", void 0, true);
+  list4("verified", existing, (entry, path44) => {
+    field(entry, "by", `${path44}.by`, isOkfActor, "human:<id>, process:<id>, or <producer>/<version>", void 0, true);
+    field(entry, "at", `${path44}.at`, string, "an ISO-8601 datetime with an explicit UTC offset", void 0, true);
   }, true);
-  list4("sources", existing, (entry, path43) => {
-    field(entry, "resource", `${path43}.resource`, nonempty, "a nonempty string", void 0, true);
-    for (const key of ["id", "title"]) field(entry, key, `${path43}.${key}`, string, "a string");
-    field(entry, "author", `${path43}.author`, nonempty, "a nonempty string");
-    field(entry, "usage_count", `${path43}.usage_count`, count, "a finite nonnegative integer");
-    mapping(entry, "usage_window", `${path43}.usage_window`);
+  list4("sources", existing, (entry, path44) => {
+    field(entry, "resource", `${path44}.resource`, nonempty, "a nonempty string", void 0, true);
+    for (const key of ["id", "title"]) field(entry, key, `${path44}.${key}`, string, "a string");
+    field(entry, "author", `${path44}.author`, nonempty, "a nonempty string");
+    field(entry, "usage_count", `${path44}.usage_count`, count, "a finite nonnegative integer");
+    mapping(entry, "usage_window", `${path44}.usage_window`);
   });
   if (frontmatter.type === "Attested Computation") {
     const previous3 = existing?.type === frontmatter.type ? existing : void 0;
     field(frontmatter, "runtime", "runtime", nonempty, "a nonempty string", previous3, true);
     field(frontmatter, "computation", "computation", string, "a string", previous3);
-    list4("parameters", previous3, (entry, path43) => {
-      for (const key of ["name", "type"]) field(entry, key, `${path43}.${key}`, string, "a string", void 0, true);
-      field(entry, "required", `${path43}.required`, (value) => typeof value === "boolean", "a boolean");
+    list4("parameters", previous3, (entry, path44) => {
+      for (const key of ["name", "type"]) field(entry, key, `${path44}.${key}`, string, "a string", void 0, true);
+      field(entry, "required", `${path44}.required`, (value) => typeof value === "boolean", "a boolean");
     });
     for (const key of ["executor", "attester"]) {
       const entry = mapping(frontmatter, key, key, previous3);
@@ -4522,14 +4522,14 @@ async function ensurePrivateLockRoot(root, policy) {
   } catch (err) {
     if (err.code !== "EEXIST") throw err;
   }
-  const stat8 = await fs.lstat(root);
+  const stat9 = await fs.lstat(root);
   const uid = process.getuid?.();
   if (!isPrivateFilesystemMutationLockRoot({
-    directory: stat8.isDirectory(),
-    symbolicLink: stat8.isSymbolicLink(),
-    ownerUid: stat8.uid,
+    directory: stat9.isDirectory(),
+    symbolicLink: stat9.isSymbolicLink(),
+    ownerUid: stat9.uid,
     expectedUid: uid,
-    mode: stat8.mode,
+    mode: stat9.mode,
     enforcePrivateMode: policy.enforcePrivateMode
   })) {
     throw new FilesystemMutationLockError(
@@ -7044,26 +7044,26 @@ function applyReplacer(root, replacer) {
   if (replacedRoot === void 0) return transformChildren(root, replacer, []);
   return transformChildren(normalizeValue(replacedRoot), replacer, []);
 }
-function transformChildren(value, replacer, path43) {
-  if (isJsonObject(value)) return transformObject(value, replacer, path43);
-  if (isJsonArray(value)) return transformArray(value, replacer, path43);
+function transformChildren(value, replacer, path44) {
+  if (isJsonObject(value)) return transformObject(value, replacer, path44);
+  if (isJsonArray(value)) return transformArray(value, replacer, path44);
   return value;
 }
-function transformObject(obj, replacer, path43) {
+function transformObject(obj, replacer, path44) {
   const result3 = {};
   for (const [key, value] of Object.entries(obj)) {
-    const childPath = [...path43, key];
+    const childPath = [...path44, key];
     const replacedValue = replacer(key, value, childPath);
     if (replacedValue === void 0) continue;
     setOwnProperty(result3, key, transformChildren(normalizeValue(replacedValue), replacer, childPath));
   }
   return result3;
 }
-function transformArray(arr, replacer, path43) {
+function transformArray(arr, replacer, path44) {
   const result3 = [];
   for (let i = 0; i < arr.length; i++) {
     const value = arr[i];
-    const childPath = [...path43, i];
+    const childPath = [...path44, i];
     const replacedValue = replacer(String(i), value, childPath);
     if (replacedValue === void 0) continue;
     const normalizedValue = normalizeValue(replacedValue);
@@ -7108,11 +7108,11 @@ var init_dist = __esm({
 
 // ../../node_modules/axi-sdk-js/dist/output.js
 import { homedir as homedir4 } from "node:os";
-function collapseHomeDirectory2(path43, homeDir = homedir4()) {
-  if (!path43.startsWith(homeDir)) {
-    return path43;
+function collapseHomeDirectory2(path44, homeDir = homedir4()) {
+  if (!path44.startsWith(homeDir)) {
+    return path44;
   }
-  return `~${path43.slice(homeDir.length)}`;
+  return `~${path44.slice(homeDir.length)}`;
 }
 function homeHeaderOutput(options) {
   return {
@@ -7243,36 +7243,36 @@ function readNearestPackageJson(startPath, fs14 = nodeFs) {
 }
 function detectInstallMethod(options) {
   const env = options.env ?? process.env;
-  const path43 = options.entry.replaceAll("\\", "/");
-  if (path43.includes("/_npx/") || /\/dlx-[^/]+\//.test(path43) || path43.includes("/pnpm/dlx/") || path43.includes("/bun/install/cache/")) {
+  const path44 = options.entry.replaceAll("\\", "/");
+  if (path44.includes("/_npx/") || /\/dlx-[^/]+\//.test(path44) || path44.includes("/pnpm/dlx/") || path44.includes("/bun/install/cache/")) {
     return { kind: "npx" };
   }
-  const homebrewFormula = homebrewFormulaFromPath(path43, env);
+  const homebrewFormula = homebrewFormulaFromPath(path44, env);
   if (homebrewFormula) {
     return { kind: "homebrew", formula: homebrewFormula };
   }
   const pnpmHome = normalizePathRoot(env.PNPM_HOME);
-  if (isPathInsideRoot(path43, pnpmHome) || isKnownPnpmGlobalStore(path43, env)) {
+  if (isPathInsideRoot(path44, pnpmHome) || isKnownPnpmGlobalStore(path44, env)) {
     return { kind: "pnpm-global" };
   }
-  if (isKnownNpmGlobalInstall(path43, env)) {
+  if (isKnownNpmGlobalInstall(path44, env)) {
     return { kind: "npm-global" };
   }
   return { kind: "unknown" };
 }
-function normalizePathRoot(path43) {
-  const normalized = path43?.replaceAll("\\", "/").replace(/\/+$/, "");
+function normalizePathRoot(path44) {
+  const normalized = path44?.replaceAll("\\", "/").replace(/\/+$/, "");
   return normalized && normalized.length > 0 ? normalized : void 0;
 }
-function isPathInsideRoot(path43, root) {
-  return root !== void 0 && (path43 === root || path43.startsWith(`${root}/`));
+function isPathInsideRoot(path44, root) {
+  return root !== void 0 && (path44 === root || path44.startsWith(`${root}/`));
 }
-function homebrewFormulaFromPath(path43, env) {
+function homebrewFormulaFromPath(path44, env) {
   for (const root of homebrewCellarRoots(env)) {
-    if (!isPathInsideRoot(path43, root)) {
+    if (!isPathInsideRoot(path44, root)) {
       continue;
     }
-    const relative2 = path43.slice(root.length).replace(/^\/+/, "");
+    const relative2 = path44.slice(root.length).replace(/^\/+/, "");
     const formula = relative2.split("/")[0];
     if (formula) {
       return formula;
@@ -7300,12 +7300,12 @@ function homebrewCellarRoots(env) {
   }
   return [...new Set(roots)];
 }
-function isKnownPnpmGlobalStore(path43, env) {
+function isKnownPnpmGlobalStore(path44, env) {
   return pnpmGlobalStoreRoots(env).some((root) => {
-    if (!isPathInsideRoot(path43, root)) {
+    if (!isPathInsideRoot(path44, root)) {
       return false;
     }
-    const relative2 = path43.slice(root.length).replace(/^\/+/, "");
+    const relative2 = path44.slice(root.length).replace(/^\/+/, "");
     return /^\d+\/\.pnpm\//.test(relative2);
   });
 }
@@ -7323,8 +7323,8 @@ function pnpmGlobalStoreRoots(env) {
   }
   return [...new Set(roots)];
 }
-function isKnownNpmGlobalInstall(path43, env) {
-  return npmGlobalNodeModulesRoots(env).some((root) => isPathInsideRoot(path43, root)) || isKnownVersionManagerNpmGlobal(path43, env);
+function isKnownNpmGlobalInstall(path44, env) {
+  return npmGlobalNodeModulesRoots(env).some((root) => isPathInsideRoot(path44, root)) || isKnownVersionManagerNpmGlobal(path44, env);
 }
 function npmGlobalNodeModulesRoots(env) {
   const roots = [
@@ -7350,8 +7350,8 @@ function npmGlobalNodeModulesRoots(env) {
   }
   return [...new Set(roots)];
 }
-function isKnownVersionManagerNpmGlobal(path43, env) {
-  return versionManagerNodeRoots(env).some((root) => isPathInsideRoot(path43, root) && path43.includes("/lib/node_modules/"));
+function isKnownVersionManagerNpmGlobal(path44, env) {
+  return versionManagerNodeRoots(env).some((root) => isPathInsideRoot(path44, root) && path44.includes("/lib/node_modules/"));
 }
 function versionManagerNodeRoots(env) {
   const roots = [];
@@ -7535,18 +7535,18 @@ async function defaultRunInstall(plan, stdout, context) {
 function binNameFromArgv(invokedAs) {
   return basename(invokedAs ?? "tool") || "tool";
 }
-function resolveEntry(invokedAs, realpath7) {
+function resolveEntry(invokedAs, realpath10) {
   if (!invokedAs) {
     return void 0;
   }
   try {
-    return realpath7(invokedAs);
+    return realpath10(invokedAs);
   } catch {
     return invokedAs;
   }
 }
-function resolveInstalledVersion(invokedAs, realpath7, fs14) {
-  const installedEntry = resolveEntry(invokedAs, realpath7);
+function resolveInstalledVersion(invokedAs, realpath10, fs14) {
+  const installedEntry = resolveEntry(invokedAs, realpath10);
   return installedEntry ? readNearestPackageJson(installedEntry, fs14).version : void 0;
 }
 function homebrewUpgradeOutput(options) {
@@ -7585,8 +7585,8 @@ async function runUpdate(options) {
   const binName = binNameFromArgv(invokedAs);
   const mode = parseUpdateArgs(options.args, binName);
   const platform = options.platform ?? process.platform;
-  const realpath7 = options.realpath ?? ((path43) => realpathSync5(path43));
-  const entry = resolveEntry(invokedAs, realpath7);
+  const realpath10 = options.realpath ?? ((path44) => realpathSync5(path44));
+  const entry = resolveEntry(invokedAs, realpath10);
   const fs14 = options.fs ?? nodeFs;
   const fromPackageJson = entry ? readNearestPackageJson(entry, fs14) : {};
   const packageName = options.packageName ?? fromPackageJson.packageName;
@@ -7650,7 +7650,7 @@ async function runUpdate(options) {
       packageName,
       current,
       latest,
-      installedVersion: resolveInstalledVersion(invokedAs, realpath7, fs14),
+      installedVersion: resolveInstalledVersion(invokedAs, realpath10, fs14),
       command: plan.command
     });
   }
@@ -7670,7 +7670,7 @@ var init_update = __esm({
     REGISTRY_FETCH_TIMEOUT_MS = 2e4;
     nodeFs = {
       existsSync,
-      readFileSync: (path43, encoding) => readFileSync3(path43, encoding)
+      readFileSync: (path44, encoding) => readFileSync3(path44, encoding)
     };
     RegistryNotFoundError = class extends Error {
     };
@@ -8336,42 +8336,42 @@ var init_journaled_backend = __esm({
 // ../core/src/remote-document-codec.ts
 function captureRemoteFrontmatter(frontmatter) {
   const ancestors = /* @__PURE__ */ new Set();
-  const refuse = (path43, reason) => {
-    throw new RemoteDocumentValueError(path43, reason);
+  const refuse = (path44, reason) => {
+    throw new RemoteDocumentValueError(path44, reason);
   };
-  const visit2 = (value, path43, depth2) => {
-    if (depth2 > 512) return refuse(path43, "metadata nesting exceeds the supported depth");
+  const visit2 = (value, path44, depth2) => {
+    if (depth2 > 512) return refuse(path44, "metadata nesting exceeds the supported depth");
     if (value === null || typeof value === "string" || typeof value === "boolean") return value;
     if (typeof value === "number") {
-      if (!Number.isFinite(value) || Object.is(value, -0)) return refuse(path43, "number would change during JSON encoding");
+      if (!Number.isFinite(value) || Object.is(value, -0)) return refuse(path44, "number would change during JSON encoding");
       return value;
     }
-    if (typeof value !== "object") return refuse(path43, `${typeof value} is not a JSON value`);
-    if (ancestors.has(value)) return refuse(path43, "cyclic metadata cannot be represented in JSON");
+    if (typeof value !== "object") return refuse(path44, `${typeof value} is not a JSON value`);
+    if (ancestors.has(value)) return refuse(path44, "cyclic metadata cannot be represented in JSON");
     const prototype = Object.getPrototypeOf(value);
     const descriptors = Object.getOwnPropertyDescriptors(value);
     const hook2 = descriptors.toJSON;
     if (hook2 && (!("value" in hook2) || typeof hook2.value === "function")) {
-      return refuse(`${path43}["toJSON"]`, "custom serialization hooks are not supported");
+      return refuse(`${path44}["toJSON"]`, "custom serialization hooks are not supported");
     }
     for (const key of Reflect.ownKeys(descriptors)) {
       const descriptor = Object.getOwnPropertyDescriptor(value, key);
-      if (typeof key === "symbol" && descriptor.enumerable) return refuse(path43, "enumerable symbol keys would be omitted");
+      if (typeof key === "symbol" && descriptor.enumerable) return refuse(path44, "enumerable symbol keys would be omitted");
     }
     if (prototype === Date.prototype) {
-      if (Object.values(descriptors).some((descriptor) => descriptor.enumerable)) return refuse(path43, "Date properties would be omitted");
+      if (Object.values(descriptors).some((descriptor) => descriptor.enumerable)) return refuse(path44, "Date properties would be omitted");
       let instant;
       try {
         instant = Date.prototype.getTime.call(value);
       } catch {
-        return refuse(path43, "object has no Date value");
+        return refuse(path44, "object has no Date value");
       }
-      if (!Number.isFinite(instant)) return refuse(path43, "invalid Date would become null");
+      if (!Number.isFinite(instant)) return refuse(path44, "invalid Date would become null");
       return Date.prototype.toISOString.call(value);
     }
     const array2 = Array.isArray(value);
     if (array2 ? prototype !== Array.prototype && prototype !== null : prototype !== Object.prototype && prototype !== null) {
-      return refuse(path43, "only plain records, arrays, and valid Dates are supported");
+      return refuse(path44, "only plain records, arrays, and valid Dates are supported");
     }
     ancestors.add(value);
     try {
@@ -8381,14 +8381,14 @@ function captureRemoteFrontmatter(frontmatter) {
         Object.setPrototypeOf(result4, null);
         for (const key of Object.keys(descriptors)) {
           if (descriptors[key].enumerable && !(String(Number(key)) === key && Number.isInteger(Number(key)) && Number(key) >= 0 && Number(key) < length)) {
-            return refuse(`${path43}[${JSON.stringify(key)}]`, "extra array properties would be omitted");
+            return refuse(`${path44}[${JSON.stringify(key)}]`, "extra array properties would be omitted");
           }
         }
         for (let index2 = 0; index2 < length; index2++) {
           const descriptor = descriptors[String(index2)];
-          if (!descriptor) return refuse(`${path43}[${index2}]`, "array holes would become null");
-          if (!("value" in descriptor)) return refuse(`${path43}[${index2}]`, "accessors are not supported");
-          result4[index2] = visit2(descriptor.value, `${path43}[${index2}]`, depth2 + 1);
+          if (!descriptor) return refuse(`${path44}[${index2}]`, "array holes would become null");
+          if (!("value" in descriptor)) return refuse(`${path44}[${index2}]`, "accessors are not supported");
+          result4[index2] = visit2(descriptor.value, `${path44}[${index2}]`, depth2 + 1);
         }
         return result4;
       }
@@ -8396,7 +8396,7 @@ function captureRemoteFrontmatter(frontmatter) {
       for (const key of Object.keys(descriptors)) {
         const descriptor = descriptors[key];
         if (!descriptor.enumerable) continue;
-        const field = `${path43}[${JSON.stringify(key)}]`;
+        const field = `${path44}[${JSON.stringify(key)}]`;
         if (!("value" in descriptor)) return refuse(field, "accessors are not supported");
         result3[key] = visit2(descriptor.value, field, depth2 + 1);
       }
@@ -8420,10 +8420,10 @@ var init_remote_document_codec = __esm({
     init_errors();
     RemoteDocumentValueError = class extends InvalidInputError {
       path;
-      constructor(path43, reason) {
-        super(`Remote document ${path43}: ${reason}. Supply JSON-compatible metadata explicitly.`);
+      constructor(path44, reason) {
+        super(`Remote document ${path44}: ${reason}. Supply JSON-compatible metadata explicitly.`);
         this.name = "RemoteDocumentValueError";
-        this.path = path43;
+        this.path = path44;
       }
     };
   }
@@ -8852,13 +8852,13 @@ var init_remote_backend = __esm({
       url(bundleRelativePath) {
         return `${this.baseUrl}/v0/bundles/${encodeURIComponent(this.bundle)}${bundleRelativePath}`;
       }
-      async send(path43, init2 = {}, scope = "bundle") {
+      async send(path44, init2 = {}, scope = "bundle") {
         if (this.authToken) {
           const headers = new Headers(init2.headers);
           headers.set("Authorization", `Bearer ${this.authToken}`);
           init2 = { ...init2, headers };
         }
-        const url2 = scope === "bundle" ? this.url(path43) : `${this.baseUrl}${path43}`;
+        const url2 = scope === "bundle" ? this.url(path44) : `${this.baseUrl}${path44}`;
         for (let attempt = 0; ; attempt++) {
           try {
             const res = await this.fetchImpl(new Request(url2, init2));
@@ -9443,13 +9443,13 @@ function describeShape(value) {
   if (typeof value === "object") return "an object";
   return typeof value;
 }
-function toStringArrayLenient(value, path43, docId, warnings) {
+function toStringArrayLenient(value, path44, docId, warnings) {
   if (!Array.isArray(value)) {
     if (value !== void 0) {
       warnings.push({
         code: "KIND_CONVENTION_BAD_SHAPE",
-        message: `kind convention '${docId}' has a non-list '${path43}' (${describeShape(value)}; expected a list of strings); ignoring it.`,
-        field: path43,
+        message: `kind convention '${docId}' has a non-list '${path44}' (${describeShape(value)}; expected a list of strings); ignoring it.`,
+        field: path44,
         severity: "warning"
       });
     }
@@ -9462,8 +9462,8 @@ function toStringArrayLenient(value, path43, docId, warnings) {
     } else {
       warnings.push({
         code: "KIND_CONVENTION_BAD_MEMBER",
-        message: `kind convention '${docId}' has a non-scalar member (${describeShape(v2)}) in '${path43}'; skipping it.`,
-        field: path43,
+        message: `kind convention '${docId}' has a non-scalar member (${describeShape(v2)}) in '${path44}'; skipping it.`,
+        field: path44,
         severity: "warning"
       });
     }
@@ -9842,7 +9842,7 @@ function parseConventionDoc(doc2, options = {}) {
       });
     }
   }
-  const path43 = typeof fm.path === "string" && fm.path.trim() !== "" ? fm.path.trim() : void 0;
+  const path44 = typeof fm.path === "string" && fm.path.trim() !== "" ? fm.path.trim() : void 0;
   const freshnessHorizon = typeof fm.freshness_horizon === "string" && fm.freshness_horizon.trim() !== "" ? fm.freshness_horizon.trim() : void 0;
   const browseCollapsed = fm.browse_collapsed === true ? true : void 0;
   let order;
@@ -9865,7 +9865,7 @@ function parseConventionDoc(doc2, options = {}) {
     fields: { required: required2, optional: optional2, values, valueDescriptions, terminal, descriptions: descriptions2 }
   };
   if (description !== void 0) kind2.description = description;
-  if (path43 !== void 0) kind2.path = path43;
+  if (path44 !== void 0) kind2.path = path44;
   if (links !== void 0) kind2.links = links;
   if (linkDescriptions !== void 0) kind2.linkDescriptions = linkDescriptions;
   if (expectsInbound !== void 0) kind2.expectsInbound = expectsInbound;
@@ -10500,8 +10500,8 @@ function withCanonicalComparableTimestamp(frontmatter, okfVersion) {
   if (typeof timestamp2 !== "string") return frontmatter;
   const instant = parseTimestamp(timestamp2, okfVersion);
   if (instant === null) return frontmatter;
-  const canonical = new Date(instant).toISOString();
-  return canonical === timestamp2 ? frontmatter : { ...frontmatter, timestamp: canonical };
+  const canonical2 = new Date(instant).toISOString();
+  return canonical2 === timestamp2 ? frontmatter : { ...frontmatter, timestamp: canonical2 };
 }
 function isNoopMutation(existing, candidate, compareTimestamp, okfVersion, ignoreAutomaticActor = false, kindRequiresActor = false) {
   if (normalizeDocumentBodyForStorage(candidate.body) !== normalizeDocumentBodyForStorage(existing.body)) {
@@ -10882,11 +10882,11 @@ function applyQuerySelectionFilters(rows, params, kinds2 = []) {
       return !kind2 || !isTerminal(kind2, row2.frontmatter);
     });
   }
-  const count2 = out.length;
+  const count3 = out.length;
   if (typeof params.limit === "number" && params.limit > 0) {
     out = out.slice(0, params.limit);
   }
-  return { rows: out, count: count2 };
+  return { rows: out, count: count3 };
 }
 var init_query_selection = __esm({
   "../core/src/query-selection.ts"() {
@@ -11711,9 +11711,9 @@ function bundleDirNameForProject(top) {
   const byName = /* @__PURE__ */ new Map();
   for (const match of matches) byName.set(match.name, [...byName.get(match.name) ?? [], match]);
   if (byName.size > 1) {
-    const canonical = byName.get(BUNDLE_DIR) ?? [];
+    const canonical2 = byName.get(BUNDLE_DIR) ?? [];
     const legacy = byName.get(LEGACY_BUNDLE_DIR) ?? [];
-    const sharedPhysical = canonical.find(
+    const sharedPhysical = canonical2.find(
       (candidate) => legacy.some((other) => other.realPath === candidate.realPath)
     )?.realPath;
     if (sharedPhysical) {
@@ -12537,9 +12537,9 @@ function assertBundleBytesMatchCommit(top, bundlePath, commit) {
       });
     }
     try {
-      const stat8 = lstatSync(absolute);
+      const stat9 = lstatSync(absolute);
       const actual = mode === "120000" ? readlinkSync(absolute, { encoding: "buffer" }) : readFileSync4(absolute);
-      if (mode === "120000" && !stat8.isSymbolicLink() || mode !== "120000" && !stat8.isFile()) {
+      if (mode === "120000" && !stat9.isSymbolicLink() || mode !== "120000" && !stat9.isFile()) {
         mismatches.push(relPath);
       } else if (!Buffer.from(actual).equals(stored.stdout)) {
         mismatches.push(relPath);
@@ -14069,8 +14069,8 @@ function normalizeServer(raw) {
   if (url2.protocol !== "http:" && url2.protocol !== "https:") {
     throw new Error(`server URL must use http or https: ${raw}`);
   }
-  const path43 = url2.pathname.replace(/\/+$/, "");
-  return { base: url2.origin + path43, resource: url2.origin };
+  const path44 = url2.pathname.replace(/\/+$/, "");
+  return { base: url2.origin + path44, resource: url2.origin };
 }
 var init_config = __esm({
   "../cli/src/config.ts"() {
@@ -15260,10 +15260,37 @@ async function resolveProjectBinding(startDir = process.cwd()) {
     dir = parent;
   }
 }
-function wrapTransportErrors(remote) {
+async function isHostedSuperbee(origin) {
+  try {
+    const response = await globalThis.fetch(`${origin}${HOSTED_PROBE_PATH}`, {
+      headers: { accept: "application/json" },
+      redirect: "manual",
+      signal: AbortSignal.timeout(HOSTED_PROBE_TIMEOUT_MS)
+    });
+    if (!response.ok) return false;
+    const body = await response.json();
+    return typeof body.resource === "string";
+  } catch {
+    return false;
+  }
+}
+function hostedRemoteRefusal(remote, origin) {
+  return new CliError(
+    "USAGE",
+    `${remote} is a hosted Superbee URL, not a wire-protocol server: --remote reaches only 'superbee serve'; use 'superbee checkout' for a hosted bundle`,
+    {
+      details: { reason: "hosted_url", remote, host: origin },
+      help: `${cliInvocation()} checkout <bundle-id> --host ${commandToken(origin)}`
+    }
+  );
+}
+function wrapTransportErrors(remote, origin) {
+  let hosted;
   return captureRuntimeCallback(async (request2) => {
+    if (hosted) throw hostedRemoteRefusal(remote, origin);
+    let response;
     try {
-      return await globalThis.fetch(request2);
+      response = await globalThis.fetch(request2);
     } catch (err) {
       throw new CliError(
         "RUNTIME",
@@ -15271,6 +15298,11 @@ function wrapTransportErrors(remote) {
         { help: `${cliInvocation()} serve --dir <path>` }
       );
     }
+    if (hosted === void 0) {
+      hosted = HOSTED_PROBE_STATUSES.has(response.status) ? await isHostedSuperbee(origin) : false;
+      if (hosted) throw hostedRemoteRefusal(remote, origin);
+    }
+    return response;
   });
 }
 function resolveApiKeyEnv(env = process.env) {
@@ -15298,7 +15330,7 @@ async function openRemoteBundle(remoteFlag) {
   const backend = new RemoteBackend({
     baseUrl: base,
     bundle: "default",
-    fetchImpl: wrapTransportErrors(base),
+    fetchImpl: wrapTransportErrors(base, origin),
     authToken
   });
   return { root: base, backend };
@@ -16172,14 +16204,14 @@ async function captureDirectoryIdentity(target2) {
   if (!samePhysicalPath3(canonicalRoot, target2.canonicalRoot)) {
     throw bindingPathConflict(target2, "the selected target changed while its lexical path was validated");
   }
-  let stat8;
+  let stat9;
   try {
-    stat8 = await fs3.stat(canonicalRoot);
+    stat9 = await fs3.stat(canonicalRoot);
   } catch {
     throw bindingPathConflict(target2, "the selected target is unavailable");
   }
-  if (!stat8.isDirectory()) throw bindingPathConflict(target2, "the selected target is not a directory");
-  return { canonicalRoot, dev: stat8.dev, ino: stat8.ino };
+  if (!stat9.isDirectory()) throw bindingPathConflict(target2, "the selected target is not a directory");
+  return { canonicalRoot, dev: stat9.dev, ino: stat9.ino };
 }
 async function hasOwnGitWorktreeSignature(root) {
   try {
@@ -16208,13 +16240,13 @@ async function assertResolvedLocalRouteIdentity(route) {
   if (!samePhysicalPath3(canonicalRoot, route.identity.canonicalRoot)) {
     throw bindingPathConflict(route.target, "the selected target changed after classification");
   }
-  let stat8;
+  let stat9;
   try {
-    stat8 = await fs3.stat(canonicalRoot);
+    stat9 = await fs3.stat(canonicalRoot);
   } catch {
     throw bindingPathConflict(route.target, "the selected target is unavailable");
   }
-  if (stat8.dev !== route.identity.dev || stat8.ino !== route.identity.ino) {
+  if (stat9.dev !== route.identity.dev || stat9.ino !== route.identity.ino) {
     throw bindingPathConflict(route.target, "the selected target identity changed after classification");
   }
 }
@@ -16268,7 +16300,7 @@ async function openBundle(dirFlag, remoteFlag) {
   await assertResolvedLocalRouteIdentity(route);
   return route.bundle;
 }
-var CONVENTIONAL_BUNDLE_DIR_NAME, LEGACY_CONVENTIONAL_BUNDLE_DIR_NAME, SUPERBEE_PROJECT_BINDING_FILE_NAME, PROJECT_BINDING_FILE_NAME, PROJECT_BINDING_FILE_NAMES, API_KEY_ENV_VAR, SUPERBEE_API_KEY_ENV_VAR, REMOTE_ENV_VAR, createOnlyFs;
+var CONVENTIONAL_BUNDLE_DIR_NAME, LEGACY_CONVENTIONAL_BUNDLE_DIR_NAME, SUPERBEE_PROJECT_BINDING_FILE_NAME, PROJECT_BINDING_FILE_NAME, PROJECT_BINDING_FILE_NAMES, HOSTED_PROBE_STATUSES, HOSTED_PROBE_PATH, HOSTED_PROBE_TIMEOUT_MS, API_KEY_ENV_VAR, SUPERBEE_API_KEY_ENV_VAR, REMOTE_ENV_VAR, createOnlyFs;
 var init_bundle2 = __esm({
   "../cli/src/bundle.ts"() {
     "use strict";
@@ -16296,6 +16328,9 @@ var init_bundle2 = __esm({
       SUPERBEE_PROJECT_BINDING_FILE_NAME,
       PROJECT_BINDING_FILE_NAME
     ];
+    HOSTED_PROBE_STATUSES = /* @__PURE__ */ new Set([401, 403, 404, 405]);
+    HOSTED_PROBE_PATH = "/.well-known/oauth-protected-resource/mcp";
+    HOSTED_PROBE_TIMEOUT_MS = 3e3;
     API_KEY_ENV_VAR = LEGACY_API_KEY_ENV;
     SUPERBEE_API_KEY_ENV_VAR = SUPERBEE_API_KEY_ENV;
     REMOTE_ENV_VAR = "AGENTSTATE_LITE_REMOTE";
@@ -16311,17 +16346,17 @@ var init_bundle2 = __esm({
 });
 
 // ../cli/src/command-spec.ts
-function exactPositionalArity(count2) {
-  if (!Number.isSafeInteger(count2) || count2 < 0) {
-    throw new TypeError(`exact positional count must be a non-negative safe integer; received ${count2}`);
+function exactPositionalArity(count3) {
+  if (!Number.isSafeInteger(count3) || count3 < 0) {
+    throw new TypeError(`exact positional count must be a non-negative safe integer; received ${count3}`);
   }
-  return Object.freeze({ kind: "exact", count: count2 });
+  return Object.freeze({ kind: "exact", count: count3 });
 }
 function pathFlags(...flags) {
   return Object.freeze(flags.map((entry) => Object.freeze({ ...entry })));
 }
-function firstWord(path43) {
-  return path43.split(" ", 1)[0];
+function firstWord(path44) {
+  return path44.split(" ", 1)[0];
 }
 function surfaceOf(surface, arity) {
   const positionals = surface?.positionals ?? NO_PATH_POSITIONALS;
@@ -16332,14 +16367,14 @@ function surfaceOf(surface, arity) {
   }
   return { pathFlags: surface?.flags ?? NO_PATHS, pathPositionals: positionals };
 }
-function publicLeaf(id, path43, arity, commandOrder, surface) {
+function publicLeaf(id, path44, arity, commandOrder, surface) {
   if (commandOrder !== void 0 && (!Number.isSafeInteger(commandOrder) || commandOrder < 0)) {
     throw new TypeError(`command order must be a non-negative safe integer; received ${commandOrder}`);
   }
   const mutable = {
     id,
-    path: path43,
-    command: firstWord(path43),
+    path: path44,
+    command: firstWord(path44),
     arity,
     canonical: void 0,
     exposure: "public",
@@ -16352,31 +16387,31 @@ function publicLeaf(id, path43, arity, commandOrder, surface) {
   OWNED_CLI_LEAVES.add(mutable);
   return Object.freeze(mutable);
 }
-function publicAlias(id, path43, canonical, commandOrder) {
-  if (canonical.exposure !== "public") throw new TypeError("a public alias must target a public leaf");
+function publicAlias(id, path44, canonical2, commandOrder) {
+  if (canonical2.exposure !== "public") throw new TypeError("a public alias must target a public leaf");
   const mutable = {
     id,
-    path: path43,
-    command: firstWord(path43),
-    arity: canonical.arity,
-    canonical: canonical.canonical,
+    path: path44,
+    command: firstWord(path44),
+    arity: canonical2.arity,
+    canonical: canonical2.canonical,
     exposure: "public",
     ...commandOrder === void 0 ? {} : { commandOrder },
     // An alias is the same executable surface under a second spelling: its path metadata is the
     // canonical leaf's, never a second declaration that could drift.
-    pathFlags: canonical.pathFlags,
-    pathPositionals: canonical.pathPositionals,
-    ...canonical.dynamicFieldFlags ? { dynamicFieldFlags: true } : {},
+    pathFlags: canonical2.pathFlags,
+    pathPositionals: canonical2.pathPositionals,
+    ...canonical2.dynamicFieldFlags ? { dynamicFieldFlags: true } : {},
     [CLI_LEAF_BRAND]: true
   };
   OWNED_CLI_LEAVES.add(mutable);
   return Object.freeze(mutable);
 }
-function hiddenLeaf(id, path43, arity, surface) {
+function hiddenLeaf(id, path44, arity, surface) {
   const mutable = {
     id,
-    path: path43,
-    command: firstWord(path43),
+    path: path44,
+    command: firstWord(path44),
     arity,
     canonical: void 0,
     exposure: "hidden",
@@ -16739,7 +16774,7 @@ var init_command_spec = __esm({
             id: "sync",
             leaves: [publicLeaf("sync", "sync", zero, 22, DIR_SYNC_SURFACE)],
             usage: "sync [--establish [--yes] | --pull-only | --show-incoming <id> [--out <file> | --body-out <file>] | --inspect --doc <id> [--out <file>] | --resolve keep|take|revise --doc <id> | --restore-deletes | --accept-deletes <token> | --take-host-deletions <token>] [--dir <path>] [--limit <n>]",
-            summary: "In a hosted checkout (made by `checkout`): send each edited file as one whole document under your own access and refresh documents changed on the host, with one row per document (committed, conflict, held, refused, unknown, paused; non-zero exit until all are committed). A change to one document and a host change to another both land; a document changed on both sides is never merged but comes back as a conflict, resolved with --inspect --doc <id> then --resolve keep|take|revise --doc <id> (a resolution is recorded, then sent by the next plain sync). A held mass delete is accepted only by the person, typing the count in their own terminal (--accept-deletes); --restore-deletes puts the files back; --take-host-deletions takes a mass deletion the pull refused. Otherwise: share the board branch with a remote \u2014 commits, pulls, and pushes (git tier; --pull-only skips commit+push). The remote repository must already exist: Superbee does not create it. After confirming the repository exists and origin/board does not, --establish is the separate explicit act that creates/pushes the board branch; it needs repository-specific push capability and branch-create policy clearance. If origin/board exists, plain `sync` joins it. Works both from a project's conventional bundle worktree and from a standalone clone whose tracked OKF root is attached to the shared board branch. A bundle folder already committed on the code branch is the same flag's hard case: preview first, --yes executes, and the folder's removal from the code branch rides a prepared side-branch commit you push and open as a PR. A bundle committed with code and NO board branch anywhere is the IN-TREE mode (read-side): full sync refuses (sharing rides your normal commit/push), --pull-only fetches the branch's tracking upstream and reports incoming board docs ('git pull' delivers them), and --establish converts to a dedicated board branch. A doc changed on both sides converges: teammate's version kept, yours exported; --show-incoming <id> (exclusive with --pull-only) prints the incoming version as of the last fetch. Board-reading commands (list/doc read/status/home/link show) auto-run the ff-only pull when board state is >~5m stale \u2014 silent, bounded (~2s), never a push; SUPERBEE_NO_AUTOPULL=<any value, even 0> disables it"
+            summary: "Share the board branch with a remote \u2014 commits, pulls, and pushes (git tier; --pull-only skips commit+push). The remote repository must already exist: Superbee does not create it. After confirming the repository exists and origin/board does not, --establish is the separate explicit act that creates/pushes the board branch; it needs repository-specific push capability and branch-create policy clearance. If origin/board exists, plain `sync` joins it. Works both from a project's conventional bundle worktree and from a standalone clone whose tracked OKF root is attached to the shared board branch. A bundle folder already committed on the code branch is the same flag's hard case: preview first, --yes executes, and the folder's removal from the code branch rides a prepared side-branch commit you push and open as a PR. A bundle committed with code and NO board branch anywhere is the IN-TREE mode (read-side): full sync refuses (sharing rides your normal commit/push), --pull-only fetches the branch's tracking upstream and reports incoming board docs ('git pull' delivers them), and --establish converts to a dedicated board branch. A doc changed on both sides converges: teammate's version kept, yours exported; --show-incoming <id> (exclusive with --pull-only) prints the incoming version as of the last fetch. Board-reading commands (list/doc read/status/home/link show) auto-run the ff-only pull when board state is >~5m stale \u2014 silent, bounded (~2s), never a push; SUPERBEE_NO_AUTOPULL=<any value, even 0> disables it. Hosted checkout (a folder made by `checkout`): sync instead sends each edited file as one whole document under your own access and refreshes documents changed on the host, with one row per document (committed, conflict, held, refused, unknown, paused; non-zero exit until all are committed). A change to one document and a host change to another both land; a document changed on both sides is never merged but comes back as a conflict, resolved with --inspect --doc <id> then --resolve keep|take|revise --doc <id> (a resolution is recorded, then sent by the next plain sync). A held mass delete is accepted only by the person, typing the count in their own terminal (--accept-deletes); --restore-deletes puts the files back; --take-host-deletions takes a mass deletion the pull refused."
           }
         ]
       },
@@ -16823,7 +16858,7 @@ var init_command_spec = __esm({
             id: "checkout",
             leaves: [publicLeaf("checkout", "checkout", one, 32, DIR_SURFACE)],
             usage: "checkout (<bundle-id> [--host <url>] [--dir <folder>] [--workspace <id>] | --release <folder>) [--json]",
-            summary: "Mirror a hosted bundle into a new local folder (a read copy for now): signs in if needed (AUTH_REQUIRED carries the link), the host defaults to your last sign-in, the binding stays in private state, and every command then runs on the folder; commands sync cannot send are refused there with 'do this in the app'; --release forgets a checkout and keeps its files"
+            summary: "Mirror a hosted bundle into a new local folder you edit and then sync (sync sends your edits and brings in the host's): signs in if needed (AUTH_REQUIRED carries the link), the host defaults to your last sign-in, the binding stays in private state, and every command then runs on the folder; commands sync cannot send are refused there with 'do this in the app'; --release forgets a checkout and keeps its files"
           }
         ]
       }
@@ -16842,23 +16877,23 @@ function boundedToken(token) {
 }
 function assertLeafArity(leaf, positionals) {
   assertCliLeaf(leaf);
-  const path43 = leaf.canonical.path;
-  const count2 = leaf.arity.count;
-  const max = leaf.arity.max ?? count2;
-  const expected = max !== count2 ? `${count2} to ${max} positionals` : count2 === 0 ? "no positional arguments" : `exactly ${count2} positional${count2 === 1 ? "" : "s"}`;
+  const path44 = leaf.canonical.path;
+  const count3 = leaf.arity.count;
+  const max = leaf.arity.max ?? count3;
+  const expected = max !== count3 ? `${count3} to ${max} positionals` : count3 === 0 ? "no positional arguments" : `exactly ${count3} positional${count3 === 1 ? "" : "s"}`;
   const actual = positionals.length;
-  if (actual >= count2 && actual <= max) return;
+  if (actual >= count3 && actual <= max) return;
   const firstUnexpected = boundedToken(positionals[max]);
   const surplus = Math.max(0, actual - max);
-  throw new CliError("USAGE", `${path43} expected ${expected}; received ${actual}`, {
+  throw new CliError("USAGE", `${path44} expected ${expected}; received ${actual}`, {
     details: {
-      command: path43,
+      command: path44,
       expected,
       actual,
       ...surplus === 0 ? {} : { surplus },
       ...firstUnexpected === void 0 ? {} : { first_unexpected: firstUnexpected }
     },
-    help: `${cliInvocation()} ${commandWords(path43)} --help`
+    help: `${cliInvocation()} ${commandWords(path44)} --help`
   });
 }
 var init_positional_arity = __esm({
@@ -18305,8 +18340,8 @@ function filesRecipeSource() {
       if (!real) {
         return { ok: false, error: { code: "RECIPE_NOT_FOUND", message: `no recipe folder at '${ref}'` } };
       }
-      const stat8 = await fs4.stat(real).catch(() => null);
-      if (!stat8 || !stat8.isDirectory()) {
+      const stat9 = await fs4.stat(real).catch(() => null);
+      if (!stat9 || !stat9.isDirectory()) {
         return { ok: false, error: { code: "RECIPE_UNSAFE_PATH", message: `'${ref}' is not a directory` } };
       }
       let files;
@@ -20415,8 +20450,8 @@ function resolveHostedTarget(host) {
   if (url2.username || url2.password || url2.search || url2.hash) {
     throw new CliError("USAGE", "--host must be a plain URL without credentials, query or fragment");
   }
-  const path43 = trimTrailingSlashes2(url2.pathname);
-  const resourcePath = path43 === "" ? DEFAULT_RESOURCE_PATH : path43;
+  const path44 = trimTrailingSlashes2(url2.pathname);
+  const resourcePath = path44 === "" ? DEFAULT_RESOURCE_PATH : path44;
   return {
     origin: url2.origin,
     audience: `${url2.origin}${resourcePath}`,
@@ -20460,10 +20495,10 @@ function endpoint(meta3, key) {
 function issuerMetadataUrls(issuer) {
   const url2 = new URL(issuer);
   const trimmed = trimTrailingSlashes2(issuer);
-  const path43 = trimTrailingSlashes2(url2.pathname);
+  const path44 = trimTrailingSlashes2(url2.pathname);
   return [
     `${trimmed}/.well-known/openid-configuration`,
-    `${url2.origin}/.well-known/oauth-authorization-server${path43}`
+    `${url2.origin}/.well-known/oauth-authorization-server${path44}`
   ];
 }
 function sameIssuer(a, b) {
@@ -22260,9 +22295,9 @@ var init_indexeddb_backend = __esm({
       async writeReserved(dir, name, content3, options = {}) {
         assertSafeReservedDir(dir);
         assertSafeReservedFilename(name);
-        const path43 = reservedKey2(dir, name);
-        return this.#compareAndSwap(RESERVED, path43, path43, options.expectedVersion, () => ({
-          record: { path: path43, content: content3, version: versionOfBytes(content3) }
+        const path44 = reservedKey2(dir, name);
+        return this.#compareAndSwap(RESERVED, path44, path44, options.expectedVersion, () => ({
+          record: { path: path44, content: content3, version: versionOfBytes(content3) }
         }));
       }
       // ── intent journal and meta ────────────────────────────────────────────────────────────
@@ -22947,8 +22982,8 @@ function createFetchCarrier(options) {
   const deadlineMs = options.deadlineMs ?? 15e3;
   const bindingHeader = options.bindingHeader ?? "X-Superbee-Checkout";
   const base = new URL(options.baseUrl);
-  async function send(path43, input, signal, extra, deadline) {
-    if (!path43.startsWith("/")) throw new TypeError(`hosted route '${path43}' must be absolute`);
+  async function send(path44, input, signal, extra, deadline) {
+    if (!path44.startsWith("/")) throw new TypeError(`hosted route '${path44}' must be absolute`);
     let credentials;
     try {
       credentials = await options.credentials(signal);
@@ -22957,7 +22992,7 @@ function createFetchCarrier(options) {
     }
     if (signal.aborted) throw new HostedCarrierError("denied");
     try {
-      return await fetcher(new URL(path43, base), {
+      return await fetcher(new URL(path44, base), {
         method: "POST",
         redirect: "error",
         headers: { ...credentials, ...extra, "Content-Type": "application/json", Accept: "application/json" },
@@ -22969,7 +23004,7 @@ function createFetchCarrier(options) {
     }
   }
   return {
-    async json(path43, input, signal, request2) {
+    async json(path44, input, signal, request2) {
       if (request2.writeRequest !== void 0 && !WRITE_REQUEST.test(request2.writeRequest)) throw new HostedCarrierError("denied");
       if (request2.binding !== void 0 && !BINDING.test(request2.binding)) throw new HostedCarrierError("denied");
       if (request2.recreate !== void 0 && !BINDING.test(request2.recreate)) throw new HostedCarrierError("denied");
@@ -22978,7 +23013,7 @@ function createFetchCarrier(options) {
       if (request2.binding !== void 0) extra[bindingHeader] = request2.binding;
       if (request2.recreate !== void 0) extra[RECREATE_HEADER] = request2.recreate;
       const deadline = AbortSignal.timeout(deadlineMs);
-      const response = await send(path43, input, signal, extra, deadline);
+      const response = await send(path44, input, signal, extra, deadline);
       let body;
       try {
         body = await readBounded(response, request2.maximum);
@@ -22988,12 +23023,12 @@ function createFetchCarrier(options) {
       }
       return { status: response.status, headers: response.headers, body };
     },
-    async stream(path43, input, signal) {
+    async stream(path44, input, signal) {
       const idle = new AbortController();
       const firstByte = setTimeout(() => idle.abort(), deadlineMs);
       let response;
       try {
-        response = await send(path43, input, signal, {}, idle.signal);
+        response = await send(path44, input, signal, {}, idle.signal);
       } finally {
         clearTimeout(firstByte);
       }
@@ -24787,8 +24822,8 @@ async function pushBodyIntent(backend, mode, requestId2, options) {
         patch = { ...patch, state: "acknowledged", acknowledgedVersion: proposal.receipt.version };
         meta3.push({ key, value: { ...evidence, receipt: proposal.receipt } });
         if (proposal.shared.action === "replace-shared-under-CAS") {
-          const canonical = bodyDocument(proposal.shared.content, intent.target, mode);
-          meta3.push(baseRow(intent.target, { version: proposal.shared.version, content: stringifyDoc(canonical.frontmatter, canonical.body ?? "") }));
+          const canonical2 = bodyDocument(proposal.shared.content, intent.target, mode);
+          meta3.push(baseRow(intent.target, { version: proposal.shared.version, content: stringifyDoc(canonical2.frontmatter, canonical2.body ?? "") }));
         }
         if (proposal.action === "replace-local-under-CAS") document4 = bodyDocument(proposal.receipt.content, intent.target, mode);
         break;
@@ -25508,8 +25543,8 @@ var init_file_journaled_backend = __esm({
         if (!(compactAfter >= 0)) throw new TypeError("compactAfterBytes must be a non-negative number");
         let created = false;
         try {
-          const stat8 = await fs6.stat(directory);
-          if (!stat8.isDirectory()) throw new Error(`'${directory}' is not a directory`);
+          const stat9 = await fs6.stat(directory);
+          if (!stat9.isDirectory()) throw new Error(`'${directory}' is not a directory`);
         } catch (error51) {
           if (error51.code !== "ENOENT" || options.readOnly) throw error51;
           await fs6.mkdir(directory, { recursive: true, mode: 448 });
@@ -26122,14 +26157,14 @@ var init_filesystem_push_role = __esm({
 });
 
 // ../cli/src/board-runtime.ts
-function worktreeRootResolvesForOwner2(path43, owner) {
-  return worktreeRootResolvesForOwner(path43, owner, currentBoardHost());
+function worktreeRootResolvesForOwner2(path44, owner) {
+  return worktreeRootResolvesForOwner(path44, owner, currentBoardHost());
 }
-function isProvisioned2(path43) {
-  return isProvisioned(path43, currentBoardHost());
+function isProvisioned2(path44) {
+  return isProvisioned(path44, currentBoardHost());
 }
-function resolveProvisionedBoardPath2(path43) {
-  return resolveProvisionedBoardPath(path43, currentBoardHost());
+function resolveProvisionedBoardPath2(path44) {
+  return resolveProvisionedBoardPath(path44, currentBoardHost());
 }
 function existingDirRefusal2(...args) {
   return existingDirRefusal(
@@ -26222,26 +26257,26 @@ function renamePrivateConfigSync(source, destination, platform) {
     }
   }
 }
-function resolveWriteDestination(path43, followFinalSymlink) {
+function resolveWriteDestination(path44, followFinalSymlink) {
   let isLink = false;
   try {
-    isLink = lstatSync4(path43).isSymbolicLink();
+    isLink = lstatSync4(path44).isSymbolicLink();
   } catch (error51) {
-    if (missing(error51)) return path43;
+    if (missing(error51)) return path44;
     throw error51;
   }
-  if (!isLink) return path43;
+  if (!isLink) return path44;
   if (!followFinalSymlink) {
-    throw new Error(`symlink at ${path43} \u2014 refusing to replace a generated plugin through a link`);
+    throw new Error(`symlink at ${path44} \u2014 refusing to replace a generated plugin through a link`);
   }
   try {
-    return realpathSync11(path43);
+    return realpathSync11(path44);
   } catch {
-    throw new Error(`dangling symlink at ${path43} \u2014 refusing to write through it; fix or remove the link`);
+    throw new Error(`dangling symlink at ${path44} \u2014 refusing to write through it; fix or remove the link`);
   }
 }
-function capturePrivateConfigParent(path43) {
-  let current = dirname4(path43);
+function capturePrivateConfigParent(path44) {
+  let current = dirname4(path44);
   while (true) {
     try {
       return { path: current, destination: realpathSync11(current) };
@@ -26253,19 +26288,19 @@ function capturePrivateConfigParent(path43) {
     }
   }
 }
-function atomicWriteFileSync(path43, content3, options = {}) {
+function atomicWriteFileSync(path44, content3, options = {}) {
   const platform = options.platform ?? process.platform;
-  const destination = resolveWriteDestination(path43, options.followFinalSymlink ?? true);
+  const destination = resolveWriteDestination(path44, options.followFinalSymlink ?? true);
   if (options.expected) {
     if (options.expected.parent) {
-      const currentParent = capturePrivateConfigParent(path43);
+      const currentParent = capturePrivateConfigParent(path44);
       if (currentParent.path !== options.expected.parent.path || currentParent.destination !== options.expected.parent.destination) {
         throw new Error("private configuration parent changed after inspection");
       }
     }
     let currentDestination;
     try {
-      currentDestination = realpathSync11(path43);
+      currentDestination = realpathSync11(path44);
     } catch (error51) {
       if (!missing(error51)) throw error51;
       currentDestination = null;
@@ -26473,8 +26508,8 @@ function defaultRealpath(candidate) {
     return void 0;
   }
 }
-function npmPrefixInvocation(_platform = process.platform, _env = process.env, realpath7 = defaultRealpath, runtimePath = process.execPath) {
-  return currentHost().npmPrefixInvocation(runtimePath, realpath7);
+function npmPrefixInvocation(_platform = process.platform, _env = process.env, realpath10 = defaultRealpath, runtimePath = process.execPath) {
+  return currentHost().npmPrefixInvocation(runtimePath, realpath10);
 }
 function defaultNpmPrefixGlobal() {
   try {
@@ -27096,10 +27131,10 @@ function targetSets(bases, deps) {
   const env = deps.env ?? process.env;
   return [targetsForBase(cwd, platform), globalHookTargets(home2, env, platform)];
 }
-function readSettings(path43) {
-  if (!existsSync6(path43)) return {};
+function readSettings(path44) {
+  if (!existsSync6(path44)) return {};
   try {
-    return JSON.parse(readFileSync10(path43, "utf8"));
+    return JSON.parse(readFileSync10(path44, "utf8"));
   } catch {
     return {};
   }
@@ -27107,11 +27142,11 @@ function readSettings(path43) {
 function isPlainObject3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function readSettingsForInstall(path43) {
-  if (!existsSync6(path43)) return { ok: true, settings: {} };
+function readSettingsForInstall(path44) {
+  if (!existsSync6(path44)) return { ok: true, settings: {} };
   let raw;
   try {
-    raw = readFileSync10(path43, "utf8");
+    raw = readFileSync10(path44, "utf8");
   } catch (err) {
     return { ok: false, reason: `unreadable (${err instanceof Error ? err.message : String(err)})` };
   }
@@ -27162,8 +27197,8 @@ function readSettingsForInstall(path43) {
   }
   return { ok: true, settings: parsed };
 }
-function writeSettings(path43, settings) {
-  atomicWriteFileSync(path43, `${JSON.stringify(settings, null, 2)}
+function writeSettings(path44, settings) {
+  atomicWriteFileSync(path44, `${JSON.stringify(settings, null, 2)}
 `);
 }
 function buildOpenCodePluginTemplate(options) {
@@ -27317,10 +27352,10 @@ function generatedConstant(source, name) {
 function normalizedGeneratedSource(source) {
   return source.replaceAll("\r\n", "\n");
 }
-function readOpenCodeHookStatus(path43, expectedSource) {
+function readOpenCodeHookStatus(path44, expectedSource) {
   let entry;
   try {
-    entry = lstatSync6(path43);
+    entry = lstatSync6(path44);
   } catch {
     return { installed: false, compatibility: { state: "absent", reason: "plugin file is absent" } };
   }
@@ -27336,7 +27371,7 @@ function readOpenCodeHookStatus(path43, expectedSource) {
   if (!entry.isFile()) {
     return { installed: false, compatibility: { state: "unmanaged", reason: "plugin path is not a regular file" } };
   }
-  const read = readRegularFileTextNoFollowSync(path43);
+  const read = readRegularFileTextNoFollowSync(path44);
   if (read.state === "missing") {
     return { installed: false, compatibility: { state: "absent", reason: "plugin file is absent" } };
   }
@@ -27407,9 +27442,9 @@ function readOpenCodeHookStatus(path43, expectedSource) {
   };
 }
 function readOpenCodeTargetsStatus(targets, expectedSource) {
-  const canonical = readOpenCodeHookStatus(targets.opencodePlugin, expectedSource);
+  const canonical2 = readOpenCodeHookStatus(targets.opencodePlugin, expectedSource);
   const legacy = readOpenCodeHookStatus(targets.legacyOpencodePlugin);
-  const owned = [canonical, legacy].filter((status2) => status2.installed);
+  const owned = [canonical2, legacy].filter((status2) => status2.installed);
   if (owned.length > 1) {
     return {
       installed: true,
@@ -27421,7 +27456,7 @@ function readOpenCodeTargetsStatus(targets, expectedSource) {
     };
   }
   if (owned.length === 1) return owned[0];
-  if (canonical.compatibility.state === "unmanaged" || legacy.compatibility.state === "unmanaged") {
+  if (canonical2.compatibility.state === "unmanaged" || legacy.compatibility.state === "unmanaged") {
     return {
       installed: false,
       compatibility: {
@@ -27430,62 +27465,62 @@ function readOpenCodeTargetsStatus(targets, expectedSource) {
       }
     };
   }
-  return canonical;
+  return canonical2;
 }
-function openCodeClaimPath(path43) {
-  return `${path43}.claim-${process.pid}-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`;
+function openCodeClaimPath(path44) {
+  return `${path44}.claim-${process.pid}-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`;
 }
-function restoreOpenCodeClaim(claim, path43) {
+function restoreOpenCodeClaim(claim, path44) {
   try {
     const entry = lstatSync6(claim);
-    if (entry.isSymbolicLink()) symlinkSync(readlinkSync3(claim), path43);
-    else if (entry.isFile()) linkSync2(claim, path43);
+    if (entry.isSymbolicLink()) symlinkSync(readlinkSync3(claim), path44);
+    else if (entry.isFile()) linkSync2(claim, path44);
     else throw new Error("claimed entry is not a regular file or symlink");
   } catch (error51) {
     throw new Error(`OpenCode plugin changed during migration; recovery copy retained at ${collapseHomeDirectory(claim)}`, { cause: error51 });
   }
   rmSync3(claim, { force: true });
 }
-function claimOwnedOpenCodePlugin(path43) {
-  const inspected = readOpenCodeHookStatus(path43);
+function claimOwnedOpenCodePlugin(path44) {
+  const inspected = readOpenCodeHookStatus(path44);
   if (!inspected.installed) return void 0;
-  const claim = openCodeClaimPath(path43);
+  const claim = openCodeClaimPath(path44);
   try {
-    renameSync4(path43, claim);
+    renameSync4(path44, claim);
   } catch (error51) {
     throw new Error("OpenCode plugin changed after inspection; nothing was removed", { cause: error51 });
   }
   const claimed = readOpenCodeHookStatus(claim);
   if (!claimed.installed) {
-    restoreOpenCodeClaim(claim, path43);
+    restoreOpenCodeClaim(claim, path44);
     throw new Error("OpenCode plugin changed after inspection; the changed bytes were preserved");
   }
   return claim;
 }
-function removeOwnedOpenCodePlugin(path43) {
-  const claim = claimOwnedOpenCodePlugin(path43);
+function removeOwnedOpenCodePlugin(path44) {
+  const claim = claimOwnedOpenCodePlugin(path44);
   if (claim === void 0) return false;
   rmSync3(claim, { force: true });
   return true;
 }
-function installOpenCodePlugin(path43, next) {
-  const inspected = readOpenCodeHookStatus(path43, next);
+function installOpenCodePlugin(path44, next) {
+  const inspected = readOpenCodeHookStatus(path44, next);
   if (inspected.compatibility.state === "unmanaged") {
     throw new Error("refusing to overwrite unmanaged OpenCode plugin");
   }
   if (inspected.compatibility.state === "current") return false;
-  const claim = inspected.installed ? claimOwnedOpenCodePlugin(path43) : void 0;
+  const claim = inspected.installed ? claimOwnedOpenCodePlugin(path44) : void 0;
   try {
-    atomicWriteFileSync(path43, next, {
+    atomicWriteFileSync(path44, next, {
       followFinalSymlink: false,
       expected: {
         destination: null,
         content: null,
-        parent: capturePrivateConfigParent(path43)
+        parent: capturePrivateConfigParent(path44)
       }
     });
   } catch (error51) {
-    if (claim !== void 0) restoreOpenCodeClaim(claim, path43);
+    if (claim !== void 0) restoreOpenCodeClaim(claim, path44);
     throw error51;
   }
   if (claim !== void 0) rmSync3(claim, { force: true });
@@ -27525,10 +27560,10 @@ function inspectHookStatus(scope, deps = {}) {
   } catch {
     expectedLaunch = void 0;
   }
-  const inspectSettingsTarget = (path43) => {
-    const status2 = readHookCompatibilityStatus(readSettings(path43));
+  const inspectSettingsTarget = (path44) => {
+    const status2 = readHookCompatibilityStatus(readSettings(path44));
     const launchAvailability = inspectHookLaunchAvailability(status2.command);
-    const preflight = readSettingsForInstall(path43);
+    const preflight = readSettingsForInstall(path44);
     if (!preflight.ok) {
       return { ...status2, installSafe: false, launchAvailability };
     }
@@ -27778,12 +27813,12 @@ async function hook(argv2, deps = {}) {
   }
   let changed = false;
   const notes = [];
-  for (const path43 of [targets.claudeSettings, targets.codexHooks]) {
-    const settings = readSettings(path43);
+  for (const path44 of [targets.claudeSettings, targets.codexHooks]) {
+    const settings = readSettings(path44);
     const [withoutSessionStart, sessionStartChanged] = turnEndSync ? [settings, false] : computeHookUninstall(settings);
     const [updated, stopChanged] = computeTurnEndHookUninstall(withoutSessionStart);
     if (sessionStartChanged || stopChanged) {
-      writeSettings(path43, updated);
+      writeSettings(path44, updated);
       changed = true;
     }
   }
@@ -27804,12 +27839,12 @@ async function hook(argv2, deps = {}) {
     );
     return;
   }
-  for (const path43 of [targets.opencodePlugin, targets.legacyOpencodePlugin]) {
-    const openCodeStatus = readOpenCodeHookStatus(path43);
+  for (const path44 of [targets.opencodePlugin, targets.legacyOpencodePlugin]) {
+    const openCodeStatus = readOpenCodeHookStatus(path44);
     if (openCodeStatus.installed) {
-      changed = removeOwnedOpenCodePlugin(path43) || changed;
+      changed = removeOwnedOpenCodePlugin(path44) || changed;
     } else if (openCodeStatus.compatibility.state === "unmanaged") {
-      notes.push(`preserved unmanaged OpenCode plugin: ${collapseHomeDirectory(path43)}`);
+      notes.push(`preserved unmanaged OpenCode plugin: ${collapseHomeDirectory(path44)}`);
     }
   }
   stdout(
@@ -36267,9 +36302,9 @@ var init_splice_buffer = __esm({
        *   Any removed items.
        */
       splice(start, deleteCount, items) {
-        const count2 = deleteCount || 0;
+        const count3 = deleteCount || 0;
         this.setCursor(Math.trunc(start));
-        const removed = this.right.splice(this.right.length - count2, Number.POSITIVE_INFINITY);
+        const removed = this.right.splice(this.right.length - count3, Number.POSITIVE_INFINITY);
         if (items) chunkedPush(this.left, items);
         return removed.reverse();
       }
@@ -41500,13 +41535,13 @@ function ccount(value, character) {
   if (typeof character !== "string") {
     throw new TypeError("Expected character");
   }
-  let count2 = 0;
+  let count3 = 0;
   let index2 = source.indexOf(character);
   while (index2 !== -1) {
-    count2++;
+    count3++;
     index2 = source.indexOf(character, index2 + character.length);
   }
-  return count2;
+  return count3;
 }
 var init_ccount = __esm({
   "../../node_modules/ccount/index.js"() {
@@ -41930,7 +41965,7 @@ function transformGfmAutolinkLiterals(tree) {
     { ignore: ["link", "linkReference"] }
   );
 }
-function findUrl(_2, protocol, domain3, path43, match) {
+function findUrl(_2, protocol, domain3, path44, match) {
   let prefix = "";
   if (!previous2(match)) {
     return false;
@@ -41943,7 +41978,7 @@ function findUrl(_2, protocol, domain3, path43, match) {
   if (!isCorrectDomain(domain3)) {
     return false;
   }
-  const parts = splitUrl(domain3 + path43);
+  const parts = splitUrl(domain3 + path44);
   if (!parts[0]) return false;
   const result3 = {
     type: "link",
@@ -42558,9 +42593,9 @@ var require_react_production = __commonJS({
     }
     function mapChildren(children, func, context) {
       if (null == children) return children;
-      var result3 = [], count2 = 0;
+      var result3 = [], count3 = 0;
       mapIntoArray(children, result3, "", "", function(child) {
-        return func.call(context, child, count2++);
+        return func.call(context, child, count3++);
       });
       return result3;
     }
@@ -43141,9 +43176,9 @@ var require_react_development = __commonJS({
       }
       function mapChildren(children, func, context) {
         if (null == children) return children;
-        var result3 = [], count2 = 0;
+        var result3 = [], count3 = 0;
         mapIntoArray(children, result3, "", "", function(child) {
-          return func.call(context, child, count2++);
+          return func.call(context, child, count3++);
         });
         return result3;
       }
@@ -71376,8 +71411,8 @@ function versionHeaders(version3) {
 function isCanonicalBundleId(value) {
   return BUNDLE_ID_RE.test(value);
 }
-function literalSpecificity(path43) {
-  return path43.split("/").filter((segment) => segment !== "" && !segment.startsWith("{")).length;
+function literalSpecificity(path44) {
+  return path44.split("/").filter((segment) => segment !== "" && !segment.startsWith("{")).length;
 }
 function matchTemplate(template, pathname) {
   const templateSegments = template.split("/");
@@ -71741,7 +71776,7 @@ function buildRouter(options) {
     const limit = Number.isFinite(parsedLimit) && parsedLimit > 0 ? parsedLimit : DEFAULT_LIST_LIMIT;
     const cursor = searchParams.get("cursor") ?? void 0;
     const heads = await queryHeads(backend, { prefix, type, tags });
-    const count2 = heads.length;
+    const count3 = heads.length;
     let page = heads;
     if (cursor) {
       const idx = page.findIndex((r2) => r2.id === cursor);
@@ -71758,7 +71793,7 @@ function buildRouter(options) {
       }
       return { id, version: version3, ...captureRemoteFrontmatter(projected) };
     });
-    return jsonResponse(200, { count: count2, docs, next_cursor: nextCursor });
+    return jsonResponse(200, { count: count3, docs, next_cursor: nextCursor });
   }
   async function listHeads(backend) {
     const ids = await backend.list();
@@ -71916,7 +71951,7 @@ function buildRouter(options) {
     const limit = Number.isFinite(parsedLimit) && parsedLimit > 0 ? parsedLimit : DEFAULT_LIST_LIMIT;
     const cursor = searchParams.get("cursor") ?? void 0;
     const keys = await backend.listBlobs(prefix);
-    const count2 = keys.length;
+    const count3 = keys.length;
     let page = keys;
     if (cursor) {
       const idx = page.findIndex((k2) => k2 === cursor);
@@ -71924,7 +71959,7 @@ function buildRouter(options) {
     }
     const limited = page.slice(0, limit);
     const nextCursor = page.length > limit ? limited[limited.length - 1] ?? null : null;
-    return jsonResponse(200, { count: count2, keys: limited, next_cursor: nextCursor });
+    return jsonResponse(200, { count: count3, keys: limited, next_cursor: nextCursor });
   }
   function handleCapabilities() {
     const caps = options.capabilities;
@@ -75452,19 +75487,142 @@ var init_assets2 = __esm({
   }
 });
 
-// ../cli/src/catalog.ts
-import { randomUUID as randomUUID4 } from "node:crypto";
-import { open as open2, readFile as readFile3, stat as stat3, unlink as unlink5 } from "node:fs/promises";
+// ../cli/src/bundle-home.ts
+import { realpath as realpath3, stat as stat3 } from "node:fs/promises";
 import { homedir as homedir13 } from "node:os";
 import path34 from "node:path";
+function gitText(dir, args) {
+  try {
+    const result3 = runGit(dir, args);
+    const text4 = result3.stdout.trim();
+    return result3.status === 0 && text4.length > 0 ? text4 : null;
+  } catch {
+    return null;
+  }
+}
+async function canonical(dir) {
+  try {
+    return await realpath3(dir);
+  } catch {
+    return null;
+  }
+}
+async function gitBoardAt(canonicalRoot) {
+  const topText = gitText(canonicalRoot, ["rev-parse", "--show-toplevel"]);
+  if (topText === null) return null;
+  const top = await canonical(topText);
+  if (top === null) return null;
+  if (top === canonicalRoot) {
+    const branch2 = gitText(top, ["symbolic-ref", "-q", "--short", "HEAD"]);
+    if (branch2 !== BOARD_BRANCH) return null;
+    const upstream2 = gitText(top, ["for-each-ref", "--format=%(upstream:short)", `refs/heads/${branch2}`]) ?? (gitText(top, ["rev-parse", "--verify", "--quiet", `refs/remotes/${BOARD_REF}`]) === null ? null : BOARD_REF);
+    return { channel: "branch", branch: branch2, upstream: upstream2, shared: upstream2 !== null, top, prefix: "" };
+  }
+  let committed;
+  try {
+    committed = committedBundleAtHead(top);
+  } catch {
+    return null;
+  }
+  if (!committed || path34.join(top, committed.bundleDir) !== canonicalRoot) return null;
+  if (hasWorktreeSignature(canonicalRoot)) return null;
+  const resolved = resolveInTreeUpstream(top);
+  const upstream = resolved.state === "ok" ? resolved.config.ref : null;
+  const branch = resolved.state === "ok" ? resolved.config.branch : gitText(top, ["symbolic-ref", "-q", "--short", "HEAD"]);
+  return { channel: "in-tree", branch, upstream, shared: upstream !== null, top, prefix: committed.bundleDir };
+}
+async function bundleHomeAt(canonicalRoot, options = {}) {
+  const binding = await bindingForPath(options.home ?? homedir13(), canonicalRoot).catch(() => null);
+  if (binding) return { home: "hosted", binding };
+  const board = await gitBoardAt(canonicalRoot).catch(() => null);
+  if (board) return { home: "git", board };
+  return { home: "local" };
+}
+function homeDetail(facts) {
+  if (facts.home === "hosted") {
+    const { binding } = facts;
+    return { hosted: { host: binding.origin, bundle_id: binding.bundle_id, workspace: binding.workspace, principal: binding.principal_id } };
+  }
+  if (facts.home === "git") {
+    const { board } = facts;
+    return { board: { channel: board.channel, branch: board.branch, upstream: board.upstream, shared: board.shared } };
+  }
+  return {};
+}
+function count2(dir, args) {
+  const text4 = gitText(dir, args);
+  if (text4 === null) return null;
+  const n = Number.parseInt(text4, 10);
+  return Number.isFinite(n) ? n : null;
+}
+async function lastFetch(top) {
+  const own5 = gitText(top, ["rev-parse", "--path-format=absolute", "--git-path", "FETCH_HEAD"]);
+  const common = gitText(top, ["rev-parse", "--path-format=absolute", "--git-common-dir"]);
+  let newest = null;
+  for (const file2 of [own5, common === null ? null : path34.join(common, "FETCH_HEAD")]) {
+    if (file2 === null) continue;
+    try {
+      const { mtime } = await stat3(file2);
+      if (newest === null || mtime > newest) newest = mtime;
+    } catch {
+    }
+  }
+  return newest === null ? null : newest.toISOString();
+}
+async function gitBoardSyncBlock(board) {
+  const block = {
+    channel: board.channel,
+    branch: board.branch,
+    upstream: board.upstream
+  };
+  let ahead = null;
+  let behind = null;
+  const prefix = board.prefix;
+  if (board.upstream !== null) {
+    if (board.channel === "branch") {
+      ahead = count2(board.top, ["rev-list", "--count", `${board.upstream}..HEAD`]);
+      behind = count2(board.top, ["rev-list", "--count", `HEAD..${board.upstream}`]);
+    } else if (prefix !== "" && inTreeUpstreamSha(board.top, board.upstream) !== null) {
+      ahead = inTreeUnpushedCount(board.top, board.upstream, prefix);
+      behind = inTreeBehindCount(board.top, board.upstream, prefix);
+    }
+  }
+  let uncommitted;
+  try {
+    uncommitted = prefix === "" ? countUncommitted(board.top) : countUncommitted(board.top, prefix);
+  } catch {
+    uncommitted = null;
+  }
+  block.state = board.upstream === null ? "not_shared" : (ahead ?? 0) > 0 && (behind ?? 0) > 0 ? "diverged" : (ahead ?? 0) > 0 || (uncommitted ?? 0) > 0 ? "unsent_changes" : (behind ?? 0) > 0 ? "behind" : "clean";
+  block.ahead = ahead;
+  block.behind = behind;
+  block.uncommitted = uncommitted;
+  block.last_fetch = await lastFetch(board.top);
+  return block;
+}
+var init_bundle_home = __esm({
+  "../cli/src/bundle-home.ts"() {
+    "use strict";
+    init_define_SUPERBEE_BUILD_IDENTITY();
+    init_define_SUPERBEE_UPDATE_POLICY();
+    init_src2();
+    init_binding();
+  }
+});
+
+// ../cli/src/catalog.ts
+import { randomUUID as randomUUID4 } from "node:crypto";
+import { open as open2, readFile as readFile3, stat as stat4, unlink as unlink5 } from "node:fs/promises";
+import { homedir as homedir14 } from "node:os";
+import path35 from "node:path";
 function catalogDir(home2) {
   return credentialsDir(home2);
 }
-function catalogPath(home2 = homedir13()) {
-  return path34.join(catalogDir(home2), CATALOG_FILE_NAME);
+function catalogPath(home2 = homedir14()) {
+  return path35.join(catalogDir(home2), CATALOG_FILE_NAME);
 }
-function catalogLockPath(home2 = homedir13()) {
-  return path34.join(catalogDir(home2), CATALOG_LOCK_FILE_NAME);
+function catalogLockPath(home2 = homedir14()) {
+  return path35.join(catalogDir(home2), CATALOG_LOCK_FILE_NAME);
 }
 function isObject2(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
@@ -75504,7 +75662,7 @@ function validateEntry(value, file2, index2) {
   if (value.locator.kind !== "local-path") {
     throw invalidCatalog(file2, `entries[${index2}].locator.kind must be "local-path"`);
   }
-  if (typeof value.locator.path !== "string" || !path34.isAbsolute(value.locator.path) || path34.normalize(value.locator.path) !== value.locator.path) {
+  if (typeof value.locator.path !== "string" || !path35.isAbsolute(value.locator.path) || path35.normalize(value.locator.path) !== value.locator.path) {
     throw invalidCatalog(file2, `entries[${index2}].locator.path must be a normalized absolute path`);
   }
   return {
@@ -75548,11 +75706,11 @@ function parseCatalog(raw, file2) {
   }
   return { schema_version: CATALOG_SCHEMA_VERSION, entries };
 }
-async function loadCatalog(home2 = homedir13(), signal) {
+async function loadCatalog(home2 = homedir14(), signal) {
   const file2 = catalogPath(home2);
   let raw;
   try {
-    if (!(await stat3(file2)).isFile()) {
+    if (!(await stat4(file2)).isFile()) {
       throw new CliError("RUNTIME", `workspace catalog ${file2} is not a regular file`);
     }
     raw = await readUserStateFile(home2, file2, 4 * 1024 * 1024, signal);
@@ -75585,7 +75743,7 @@ function readLockMetadata(raw) {
   }
 }
 async function acquireCatalogLock(options) {
-  const home2 = options.home ?? homedir13();
+  const home2 = options.home ?? homedir14();
   const dir = catalogDir(home2);
   const lockPath = catalogLockPath(home2);
   const now = options.now ?? Date.now;
@@ -75627,7 +75785,7 @@ async function acquireCatalogLock(options) {
     let malformedAgeMs = null;
     try {
       owner = readLockMetadata(await readFile3(lockPath, "utf8"));
-      if (!owner) malformedAgeMs = now() - (await stat3(lockPath)).mtimeMs;
+      if (!owner) malformedAgeMs = now() - (await stat4(lockPath)).mtimeMs;
     } catch (err) {
       if (err.code === "ENOENT") continue;
     }
@@ -75653,7 +75811,7 @@ async function acquireCatalogLock(options) {
   }
 }
 async function mutateCatalog(decide, options) {
-  const home2 = options.home ?? homedir13();
+  const home2 = options.home ?? homedir14();
   const release2 = await acquireCatalogLock({ ...options, home: home2 });
   try {
     const current = await loadCatalog(home2);
@@ -75681,7 +75839,7 @@ function generatedId(options, existing) {
 }
 async function addCatalogEntry(label, canonicalPath, options = {}) {
   assertCatalogLabel(label);
-  if (!path34.isAbsolute(canonicalPath)) throw new CliError("USAGE", "workspace catalog paths must be absolute");
+  if (!path35.isAbsolute(canonicalPath)) throw new CliError("USAGE", "workspace catalog paths must be absolute");
   const result3 = await mutateCatalog(async (current) => {
     const target2 = await resolveLocalBundleTarget(canonicalPath);
     if (!samePhysicalPath3(target2.canonicalRoot, canonicalPath)) {
@@ -75727,10 +75885,17 @@ async function entryAvailable(entry) {
     return false;
   }
 }
-async function listCatalogEntries(home2 = homedir13()) {
+async function entryView(entry, available, home2) {
+  if (!available) return { ...entry, available, home: "local" };
+  const facts = await bundleHomeAt(entry.locator.path, { home: home2 });
+  if (facts.home !== "hosted") return { ...entry, available, home: facts.home };
+  const { binding } = facts;
+  return { ...entry, available, home: "hosted", hosted: { host: binding.origin, bundle_id: binding.bundle_id, checked_out_at: binding.created_at } };
+}
+async function listCatalogEntries(home2 = homedir14()) {
   const catalog2 = await loadCatalog(home2);
   return Promise.all(
-    [...catalog2.entries].sort((a, b) => a.label.localeCompare(b.label)).map(async (entry) => ({ ...entry, available: await entryAvailable(entry) }))
+    [...catalog2.entries].sort((a, b) => a.label.localeCompare(b.label)).map(async (entry) => entryView(entry, await entryAvailable(entry), home2))
   );
 }
 function classifySelector(selector2) {
@@ -75743,7 +75908,7 @@ function classifySelector(selector2) {
   assertCatalogLabel(selector2);
   return "label";
 }
-async function resolveCatalogEntry(selector2, home2 = homedir13()) {
+async function resolveCatalogEntry(selector2, home2 = homedir14()) {
   const catalog2 = await loadCatalog(home2);
   const kind2 = classifySelector(selector2);
   const entry = catalog2.entries.find((item) => item[kind2] === selector2);
@@ -75758,7 +75923,7 @@ async function resolveCatalogEntry(selector2, home2 = homedir13()) {
       help: `restore the bundle at ${entry.locator.path}, then retry`
     });
   }
-  return { ...entry, available: true };
+  return entryView(entry, true, home2);
 }
 var CATALOG_FILE_NAME, CATALOG_LOCK_FILE_NAME, CATALOG_SCHEMA_VERSION, LOCK_MODE, DEFAULT_LOCK_WAIT_MS, DEFAULT_LOCK_POLL_MS, STALE_LOCK_MIN_AGE_MS, LABEL_PATTERN, ID_PATTERN;
 var init_catalog2 = __esm({
@@ -75768,6 +75933,7 @@ var init_catalog2 = __esm({
     init_define_SUPERBEE_UPDATE_POLICY();
     init_runtime_context();
     init_bundle2();
+    init_bundle_home();
     init_credentials();
     init_errors4();
     init_invocation();
@@ -75786,7 +75952,7 @@ var init_catalog2 = __esm({
 });
 
 // ../cli/src/ui/sharing.ts
-import path35 from "node:path";
+import path36 from "node:path";
 import { realpathSync as realpathSync13, statSync as statSync8 } from "node:fs";
 function realOr(p2) {
   try {
@@ -75802,8 +75968,8 @@ function samePhysicalPath4(left, right) {
     if (a2.dev === b2.dev && a2.ino === b2.ino) return true;
   } catch {
   }
-  const a = path35.resolve(realOr(left));
-  const b = path35.resolve(realOr(right));
+  const a = path36.resolve(realOr(left));
+  const b = path36.resolve(realOr(right));
   return currentHost().sameResolvedPath(a, b);
 }
 function humanizeRemote(url2) {
@@ -75836,13 +76002,13 @@ function classifySharing(bundleRoot, now = () => /* @__PURE__ */ new Date()) {
   const asOf = now().toISOString();
   try {
     const root = realOr(bundleRoot);
-    const repo = probeRepoTopLevel(path35.dirname(root));
+    const repo = probeRepoTopLevel(path36.dirname(root));
     if (repo.kind === "not_repo") return { kind: "private", as_of: asOf };
     if (repo.kind === "unavailable") return { kind: "unavailable", reason: repo.reason, as_of: asOf };
     const top = repo.top;
     const committed = committedBundleAtHead(top);
     const bundleDir = committed?.bundleDir ?? bundleDirNameForProject(top);
-    if (!samePhysicalPath4(path35.join(top, bundleDir), root)) return { kind: "unscoped", as_of: asOf };
+    if (!samePhysicalPath4(path36.join(top, bundleDir), root)) return { kind: "unscoped", as_of: asOf };
     const evidence = localEvidence(top, committed !== null);
     const branchMode = hasWorktreeSignature(root) && worktreeRootResolvesForOwner2(root, top) || !evidence.tracked && localBranchExists(top, BOARD_BRANCH);
     if (branchMode) {
@@ -75928,7 +76094,7 @@ var init_sharing = __esm({
 
 // ../cli/src/ui/view-authorizations.ts
 import { createHash as createHash11 } from "node:crypto";
-import { homedir as homedir14 } from "node:os";
+import { homedir as homedir15 } from "node:os";
 import { join as join12 } from "node:path";
 function stableRecord(bundle, subject) {
   return {
@@ -75975,9 +76141,9 @@ function assertMigratableViewAuthorization(name, raw) {
   if (!hasExactKeys3(subject, ["registryId", "contentVersion", "contentType", "capability", "execution", "policyVersion"]) || typeof subject.registryId !== "string" || subject.registryId.length === 0 || typeof subject.contentVersion !== "string" || subject.contentVersion.length === 0 || subject.contentType !== "text/html; charset=utf-8" || !["none", "bundle-read", "bundle-propose"].includes(String(subject.capability)) || subject.execution !== "active" || subject.policyVersion !== "active-view-v1") {
     throw new Error("legacy View authorization has an unsupported subject");
   }
-  const canonical = JSON.stringify(value);
-  if (raw !== `${canonical}
-` || name !== `${createHash11("sha256").update(canonical).digest("hex")}.json`) {
+  const canonical2 = JSON.stringify(value);
+  if (raw !== `${canonical2}
+` || name !== `${createHash11("sha256").update(canonical2).digest("hex")}.json`) {
     throw new Error("legacy View authorization does not match its immutable identity");
   }
 }
@@ -76007,7 +76173,7 @@ var init_view_authorizations = __esm({
         if (subject.sourceKind !== "registered") return false;
         const expected = serialized(this.bundleIdentity, subject);
         try {
-          const selectedHome = this.home ?? homedir14();
+          const selectedHome = this.home ?? homedir15();
           const raw = await readUserStateFile(
             selectedHome,
             join12(credentialsDir(selectedHome), STORE_DIR, fileName(this.bundleIdentity, subject)),
@@ -76024,7 +76190,7 @@ var init_view_authorizations = __esm({
           throw new Error("transient View approvals are process-local and cannot be persisted");
         }
         await writeUserStateFileAtomic0600(
-          this.home ?? homedir14(),
+          this.home ?? homedir15(),
           join12(credentialsDir(this.home), STORE_DIR),
           fileName(this.bundleIdentity, subject),
           `${serialized(this.bundleIdentity, subject)}
@@ -76072,18 +76238,18 @@ var init_server2 = __esm({
 
 // ../cli/src/ui/url-file.ts
 import { unlink as unlink6 } from "node:fs/promises";
-import { homedir as homedir15 } from "node:os";
+import { homedir as homedir16 } from "node:os";
 import { join as join13 } from "node:path";
-function uiUrlFilePath(home2 = homedir15()) {
+function uiUrlFilePath(home2 = homedir16()) {
   return join13(credentialsDir(home2), UI_URL_FILE_NAME);
 }
-async function writeUiUrlFile(url2, home2 = homedir15()) {
+async function writeUiUrlFile(url2, home2 = homedir16()) {
   try {
     await writeUserStateFileAtomic0600(home2, credentialsDir(home2), UI_URL_FILE_NAME, url2 + "\n");
   } catch {
   }
 }
-async function clearUiUrlFile(url2, home2 = homedir15()) {
+async function clearUiUrlFile(url2, home2 = homedir16()) {
   try {
     const current = (await readUserStateFile(home2, uiUrlFilePath(home2), 16 * 1024)).trim();
     if (current === url2.trim()) await unlink6(uiUrlFilePath(home2));
@@ -76104,15 +76270,15 @@ var init_url_file = __esm({
 
 // ../cli/src/ui/managed-authority.ts
 import { createHash as createHash12, randomBytes as randomBytes5, randomUUID as randomUUID5 } from "node:crypto";
-import { readdir as readdir2, realpath as realpath3, stat as stat4, unlink as unlink7 } from "node:fs/promises";
-import { homedir as homedir16 } from "node:os";
-import path36 from "node:path";
+import { readdir as readdir2, realpath as realpath4, stat as stat5, unlink as unlink7 } from "node:fs/promises";
+import { homedir as homedir17 } from "node:os";
+import path37 from "node:path";
 async function captureManagedUiLaunchIdentity(authority) {
-  const canonicalRoot = await realpath3(authority.launch_root);
+  const canonicalRoot = await realpath4(authority.launch_root);
   if (canonicalRoot !== authority.bundle_root) {
     throw new CliError("CONFLICT", "managed UI launch route changed after controller selection");
   }
-  const metadata = await stat4(canonicalRoot, { bigint: true });
+  const metadata = await stat5(canonicalRoot, { bigint: true });
   if (!metadata.isDirectory()) throw new CliError("CONFLICT", "managed UI launch route is no longer a directory");
   return { canonical_root: canonicalRoot, dev: metadata.dev.toString(), ino: metadata.ino.toString() };
 }
@@ -76134,8 +76300,8 @@ function managedUiAuthority(bundleRoot, actor, launchRoot = bundleRoot) {
 function validateAuthority(value) {
   if (!object(value) || !exactKeys3(value, ["key", "mode", "bundle_root", "launch_root", "actor", "protocol"])) return null;
   if (!boundedString2(value.key, 64) || !/^[0-9a-f]{64}$/u.test(value.key)) return null;
-  if (value.mode !== "dir" || !boundedString2(value.bundle_root) || !path36.isAbsolute(value.bundle_root)) return null;
-  if (!boundedString2(value.launch_root) || !path36.isAbsolute(value.launch_root)) return null;
+  if (value.mode !== "dir" || !boundedString2(value.bundle_root) || !path37.isAbsolute(value.bundle_root)) return null;
+  if (!boundedString2(value.launch_root) || !path37.isAbsolute(value.launch_root)) return null;
   if (!(value.actor === null || boundedString2(value.actor, 1024))) return null;
   if (typeof value.protocol !== "number" || !Number.isSafeInteger(value.protocol) || value.protocol < 1) return null;
   const expected = managedUiAuthority(value.bundle_root, value.actor ?? void 0, value.launch_root);
@@ -76171,8 +76337,8 @@ function parseManagedUiRecord(raw) {
   }
   return value;
 }
-function managedUiRecordPath(authority, home2 = homedir16()) {
-  return path36.join(userStateDir(home2), `${RECORD_PREFIX}${authority.key}${RECORD_SUFFIX}`);
+function managedUiRecordPath(authority, home2 = homedir17()) {
+  return path37.join(userStateDir(home2), `${RECORD_PREFIX}${authority.key}${RECORD_SUFFIX}`);
 }
 function recordName(authority) {
   return `${RECORD_PREFIX}${authority.key}${RECORD_SUFFIX}`;
@@ -76459,7 +76625,7 @@ async function recoverOrReuse(current, desiredAuthority, requestedPort, now, fet
   return record5;
 }
 async function startOrReuseManagedUi(authority, documentId2, requestedPort, options = {}) {
-  const home2 = options.home ?? homedir16();
+  const home2 = options.home ?? homedir17();
   const now = options.now ?? Date.now;
   const fetchImpl = options.fetch ?? fetch;
   const spawnWorker = options.spawnWorker ?? defaultSpawnWorker;
@@ -76506,13 +76672,13 @@ async function startOrReuseManagedUi(authority, documentId2, requestedPort, opti
   });
 }
 async function listManagedUiStatus(bundleRoot, options = {}) {
-  const home2 = options.home ?? homedir16();
+  const home2 = options.home ?? homedir17();
   const fetchImpl = options.fetch ?? fetch;
   const root = await ensureUserStateRoot(home2);
   const names = await readdir2(root);
   const statuses = [];
   for (const name of names.filter((entry) => entry.startsWith(RECORD_PREFIX) && entry.endsWith(RECORD_SUFFIX)).sort()) {
-    const raw = await readUserStateFile(home2, path36.join(root, name), RECORD_MAX_BYTES);
+    const raw = await readUserStateFile(home2, path37.join(root, name), RECORD_MAX_BYTES);
     const record5 = parseManagedUiRecord(raw);
     if (record5.authority.bundle_root !== bundleRoot) continue;
     const result3 = await probeRecord(record5, fetchImpl);
@@ -76525,7 +76691,7 @@ async function listManagedUiStatus(bundleRoot, options = {}) {
   return statuses;
 }
 async function stopManagedUi(authority, options = {}) {
-  const home2 = options.home ?? homedir16();
+  const home2 = options.home ?? homedir17();
   const fetchImpl = options.fetch ?? fetch;
   const sleep = options.sleep ?? ((ms) => new Promise((resolve2) => setTimeout(resolve2, ms)));
   const withLock = options.withLock ?? ((target2, fn) => withCliFilesystemMutationLock(target2, fn, { waitMs: LIFECYCLE_LOCK_WAIT_MS }));
@@ -77331,7 +77497,7 @@ Options:
 // ../cli/src/commands/pull.ts
 import { parseArgs as parseArgs13 } from "node:util";
 import { promises as fs13 } from "node:fs";
-import path37 from "node:path";
+import path38 from "node:path";
 function isDocRouteKey2(key) {
   return key.toLowerCase().endsWith(".md");
 }
@@ -77422,7 +77588,7 @@ async function pull2(argv2, deps = {}) {
       help: `${cliInvocation()} pull --doc-key ${commandToken(key)} --out <path>`
     });
   }
-  if (out !== "-") assertPathOutsidePrivateState(path37.resolve(out));
+  if (out !== "-") assertPathOutsidePrivateState(path38.resolve(out));
   const bundle = await openBundle(values.dir, await resolveRemoteFlag(values.remote, values.dir));
   const mode = resolveMode(values);
   const streamMode = out === "-";
@@ -78703,15 +78869,15 @@ function distinctValues(instances, key) {
   return [...seen];
 }
 function inferKindCandidate(type, instances, stats = collectInstanceStats(instances)) {
-  const count2 = stats.count;
+  const count3 = stats.count;
   const required2 = [];
   const optional2 = [];
   const values = {};
   for (const [key, present] of Object.entries(stats.keyPresence)) {
     if (EXCLUDED_FIELDS.has(key)) continue;
-    if (present === count2 && count2 > 0) {
+    if (present === count3 && count3 > 0) {
       required2.push(key);
-      if (count2 >= ENUM_MIN_INSTANCES && everyValueScalarString(instances, key)) {
+      if (count3 >= ENUM_MIN_INSTANCES && everyValueScalarString(instances, key)) {
         const distinct = distinctValues(instances, key);
         if (distinct.length >= ENUM_MIN_DISTINCT && distinct.length <= ENUM_MAX_DISTINCT) {
           values[key] = distinct.sort((a, b) => a.localeCompare(b));
@@ -78721,7 +78887,7 @@ function inferKindCandidate(type, instances, stats = collectInstanceStats(instan
       optional2.push(key);
     }
   }
-  const sections = Object.entries(stats.headingPresence).filter(([, present]) => present === count2 && count2 > 0).map(([heading]) => heading);
+  const sections = Object.entries(stats.headingPresence).filter(([, present]) => present === count3 && count3 > 0).map(([heading]) => heading);
   const prefixes = /* @__PURE__ */ new Set();
   let allPrefixed = instances.length > 0;
   for (const doc2 of instances) {
@@ -78732,13 +78898,13 @@ function inferKindCandidate(type, instances, stats = collectInstanceStats(instan
     }
     prefixes.add(doc2.id.slice(0, slash));
   }
-  const path43 = allPrefixed && prefixes.size === 1 ? `${[...prefixes][0]}/` : void 0;
+  const path44 = allPrefixed && prefixes.size === 1 ? `${[...prefixes][0]}/` : void 0;
   return {
     id: `conventions/${conventionSlugForType(type)}`,
     title: type,
     governs: type,
-    description: `Drafted by 'kind draft' from ${count2} existing instance${count2 === 1 ? "" : "s"}.`,
-    ...path43 === void 0 ? {} : { path: path43 },
+    description: `Drafted by 'kind draft' from ${count3} existing instance${count3 === 1 ? "" : "s"}.`,
+    ...path44 === void 0 ? {} : { path: path44 },
     fields: { required: required2, optional: optional2, values, terminal: {}, descriptions: {} },
     ...sections.length > 0 ? { sections } : {}
   };
@@ -79524,8 +79690,8 @@ function candidateDocFor(kind2, body) {
   if (kind2.sections !== void 0 && kind2.sections.length > 0) frontmatter.sections = kind2.sections;
   return { id: kind2.id, frontmatter, body };
 }
-function inferredBody(type, count2) {
-  return `Drafted from ${count2} existing '${type}' instance${count2 === 1 ? "" : "s"} by \`superbee kind draft\`. It ratifies the shape those instances already share; evolve it with \`superbee kind field ${commandQuoted(type)} add <name>\`.
+function inferredBody(type, count3) {
+  return `Drafted from ${count3} existing '${type}' instance${count3 === 1 ? "" : "s"} by \`superbee kind draft\`. It ratifies the shape those instances already share; evolve it with \`superbee kind field ${commandQuoted(type)} add <name>\`.
 `;
 }
 async function prepareDraftPlan(bundle, type) {
@@ -81170,7 +81336,8 @@ var init_status = __esm({
 
 // ../cli/src/commands/status.ts
 import { parseArgs as parseArgs23 } from "node:util";
-import { homedir as homedir17 } from "node:os";
+import { homedir as homedir18 } from "node:os";
+import { realpath as realpath5 } from "node:fs/promises";
 function cap2(rows, limit) {
   const bounded2 = limit > 0 ? rows.slice(0, limit) : rows;
   return { shown: bounded2.length, total: rows.length, rows: bounded2 };
@@ -81252,7 +81419,7 @@ async function status(argv2, deps = {}) {
     limit = Number(raw);
   }
   const remote = await resolveRemoteFlag(values.remote, values.dir);
-  const home2 = deps.home ?? homedir17();
+  const home2 = deps.home ?? homedir18();
   const hosted = remote ? null : await hostedCheckoutAt(values.dir, home2).catch(() => null);
   if (!remote && !hosted) await (deps.autoPull ?? maybeAutoPull2)(values.dir);
   const hostedReport = hosted ? await (await Promise.resolve().then(() => (init_status(), status_exports))).hostedStatus(hosted, home2, (deps.now ?? (() => /* @__PURE__ */ new Date()))()) : null;
@@ -81559,12 +81726,28 @@ async function status(argv2, deps = {}) {
     out.legacy_naming = legacy;
   }
   if (hostedReport) {
-    const record5 = { sync: hostedReport.sync, ...out };
+    const record5 = { home: "hosted", sync: hostedReport.sync, ...out };
     if (hostedReport.help.length > 0) record5.help = hostedReport.help;
     stdout(render(record5, resolveMode(values)));
     return;
   }
-  stdout(render(out, resolveMode(values)));
+  if (remote) {
+    stdout(render(out, resolveMode(values)));
+    return;
+  }
+  const facts = await bundleHomeAt(await realpath5(bundle.root), { home: home2 });
+  if (facts.home === "git") {
+    const block = await gitBoardSyncBlock(facts.board);
+    const record5 = { home: "git", sync: block, ...out };
+    if (block.state !== "clean") {
+      record5.help = [
+        values.dir === void 0 ? `${cliInvocation()} sync` : commandFragment`${cliInvocation()} sync --dir ${commandToken(values.dir)}`
+      ];
+    }
+    stdout(render(record5, resolveMode(values)));
+    return;
+  }
+  stdout(render({ home: "local", sync: "none (local only)", ...out }, resolveMode(values)));
 }
 var STATUS_USAGE, DEFAULT_LIMIT3, FRONTMATTER_VIOLATION_CODES;
 var init_status2 = __esm({
@@ -81586,6 +81769,8 @@ var init_status2 = __esm({
     init_legacy_page();
     init_invocation();
     init_bundle_name();
+    init_bundle_home();
+    init_command_text();
     STATUS_USAGE = `superbee status \u2014 read-only whole-bundle health report (bundle lint)
 
 Usage:
@@ -81703,8 +81888,20 @@ Category semantics (one line each):
                       prefixes \u2014 those LOCATIONS remain recognized; relocation is a separate
                       open decision. Omitted when the bundle carries none of the above.
 
-In a hosted checkout (a folder made by 'checkout'), a 'sync' block leads the report, read from
-local state only (no request to the host, and no automatic pull):
+The report leads with the bundle's 'home' (local, git or hosted) and a 'sync' block for it, read
+from local state only: no request, no fetch, and no automatic pull for a hosted checkout. A local
+bundle reports 'sync: none (local only)'.
+
+For a Git board, the 'sync' block reads local Git (what the last fetch saw, never a new fetch):
+  channel            branch (the provisioned 'board' worktree) | in-tree (committed with the code)
+  branch, upstream   The checked-out branch and its tracking ref (null when there is none)
+  state              clean | unsent_changes | behind | diverged | not_shared (no upstream yet)
+  ahead              Board commits not yet pushed (null without an upstream)
+  behind             Upstream board commits not yet pulled, as of the last fetch
+  uncommitted        Changed files not yet committed to the board
+  last_fetch         When this clone last fetched (null when it never has)
+
+In a hosted checkout (a folder made by 'checkout'), the 'sync' block reads:
   state              clean | unsent_changes | needs_decision (a conflict or a held item) | busy
                       (another command, such as a running sync, holds the checkout)
   unsent             Documents with a change the next sync would send (edited, new or deleted
@@ -82264,8 +82461,8 @@ var init_parseUtil = __esm({
     init_errors5();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path43, errorMaps, issueData } = params;
-      const fullPath = [...path43, ...issueData.path || []];
+      const { data, path: path44, errorMaps, issueData } = params;
+      const fullPath = [...path44, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -82551,11 +82748,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path43, key) {
+      constructor(parent, value, path44, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path43;
+        this._path = path44;
         this._key = key;
       }
       get path() {
@@ -86061,10 +86258,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path43) {
-  if (!path43)
+function getElementAtPath(obj, path44) {
+  if (!path44)
     return obj;
-  return path43.reduce((acc, key) => acc?.[key], obj);
+  return path44.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -86392,11 +86589,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path43, issues) {
+function prefixIssues(path44, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path43);
+    iss.path.unshift(path44);
     return iss;
   });
 }
@@ -86615,16 +86812,16 @@ function flattenError(error51, mapper = (issue2) => issue2.message) {
 }
 function formatError(error51, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path43 = []) => {
+  const processError = (error52, path44 = []) => {
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path43, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path44, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path43, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path44, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path43, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path44, ...issue2.path]);
       } else {
-        const fullpath = [...path43, ...issue2.path];
+        const fullpath = [...path44, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -86651,17 +86848,17 @@ function formatError(error51, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error51, mapper = (issue2) => issue2.message) {
   const result3 = { errors: [] };
-  const processError = (error52, path43 = []) => {
+  const processError = (error52, path44 = []) => {
     var _a3, _b;
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path43, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path44, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path43, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path44, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path43, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path44, ...issue2.path]);
       } else {
-        const fullpath = [...path43, ...issue2.path];
+        const fullpath = [...path44, ...issue2.path];
         if (fullpath.length === 0) {
           result3.errors.push(mapper(issue2));
           continue;
@@ -86693,8 +86890,8 @@ function treeifyError(error51, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path43 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path43) {
+  const path44 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path44) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -89965,8 +90162,8 @@ var init_az = __esm({
 });
 
 // ../../node_modules/zod/v4/locales/be.js
-function getBelarusianPlural(count2, one3, few, many) {
-  const absCount = Math.abs(count2);
+function getBelarusianPlural(count3, one3, few, many) {
+  const absCount = Math.abs(count3);
   const lastDigit = absCount % 10;
   const lastTwoDigits = absCount % 100;
   if (lastTwoDigits >= 11 && lastTwoDigits <= 19) {
@@ -92180,8 +92377,8 @@ var init_hu = __esm({
 });
 
 // ../../node_modules/zod/v4/locales/hy.js
-function getArmenianPlural(count2, one3, many) {
-  return Math.abs(count2) === 1 ? one3 : many;
+function getArmenianPlural(count3, one3, many) {
+  return Math.abs(count3) === 1 ? one3 : many;
 }
 function withDefiniteArticle(word) {
   if (!word)
@@ -94460,8 +94657,8 @@ var init_ro = __esm({
 });
 
 // ../../node_modules/zod/v4/locales/ru.js
-function getRussianPlural(count2, one3, few, many) {
-  const absCount = Math.abs(count2);
+function getRussianPlural(count3, one3, few, many) {
+  const absCount = Math.abs(count3);
   const lastDigit = absCount % 10;
   const lastTwoDigits = absCount % 100;
   if (lastTwoDigits >= 11 && lastTwoDigits <= 19) {
@@ -100536,13 +100733,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path43 = ref.slice(1).split("/").filter(Boolean);
-  if (path43.length === 0) {
+  const path44 = ref.slice(1).split("/").filter(Boolean);
+  if (path44.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path43[0] === defsKey) {
-    const key = path43[1];
+  if (path44[0] === defsKey) {
+    const key = path44[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -108094,20 +108291,20 @@ var require_resolve = __commonJS({
       return false;
     }
     function countKeys(schema) {
-      let count2 = 0;
+      let count3 = 0;
       for (const key in schema) {
         if (key === "$ref")
           return Infinity;
-        count2++;
+        count3++;
         if (SIMPLE_INLINED.has(key))
           continue;
         if (typeof schema[key] == "object") {
-          (0, util_1.eachItem)(schema[key], (sch) => count2 += countKeys(sch));
+          (0, util_1.eachItem)(schema[key], (sch) => count3 += countKeys(sch));
         }
-        if (count2 === Infinity)
+        if (count3 === Infinity)
           return Infinity;
       }
-      return count2;
+      return count3;
     }
     function getFullPath(resolver2, id = "", normalize2) {
       if (normalize2 !== false)
@@ -109146,8 +109343,8 @@ var require_utils = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path43) {
-      let input = path43;
+    function removeDotSegments(path44) {
+      let input = path44;
       const output = [];
       let nextSlash = -1;
       let len = 0;
@@ -109558,8 +109755,8 @@ var require_schemes = __commonJS({
       }
       if (wsComponent.resourceName) {
         const queryIndex = wsComponent.resourceName.indexOf("?");
-        const path43 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
-        wsComponent.path = path43 && path43 !== "/" ? path43 : void 0;
+        const path44 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
+        wsComponent.path = path44 && path44 !== "/" ? path44 : void 0;
         wsComponent.query = queryIndex === -1 ? void 0 : wsComponent.resourceName.slice(queryIndex + 1);
         wsComponent.resourceName = void 0;
       }
@@ -111649,8 +111846,8 @@ var require_contains = __commonJS({
         cxt.result(valid, () => cxt.reset());
         function validateItemsWithCount() {
           const schValid = gen.name("_valid");
-          const count2 = gen.let("count", 0);
-          validateItems(schValid, () => gen.if(schValid, () => checkLimits(count2)));
+          const count3 = gen.let("count", 0);
+          validateItems(schValid, () => gen.if(schValid, () => checkLimits(count3)));
         }
         function validateItems(_valid, block) {
           gen.forRange("i", 0, len, (i) => {
@@ -111663,16 +111860,16 @@ var require_contains = __commonJS({
             block();
           });
         }
-        function checkLimits(count2) {
-          gen.code((0, codegen_1._)`${count2}++`);
+        function checkLimits(count3) {
+          gen.code((0, codegen_1._)`${count3}++`);
           if (max === void 0) {
-            gen.if((0, codegen_1._)`${count2} >= ${min}`, () => gen.assign(valid, true).break());
+            gen.if((0, codegen_1._)`${count3} >= ${min}`, () => gen.assign(valid, true).break());
           } else {
-            gen.if((0, codegen_1._)`${count2} > ${max}`, () => gen.assign(valid, false).break());
+            gen.if((0, codegen_1._)`${count3} > ${max}`, () => gen.assign(valid, false).break());
             if (min === 1)
               gen.assign(valid, true);
             else
-              gen.if((0, codegen_1._)`${count2} >= ${min}`, () => gen.assign(valid, true));
+              gen.if((0, codegen_1._)`${count3} >= ${min}`, () => gen.assign(valid, true));
           }
         }
       }
@@ -116257,7 +116454,167 @@ Use \`superbee mcp status --host <id>\` to verify it and restart the host after
   }
 });
 
+// ../cli/src/hosted/refusals.ts
+import { homedir as homedir19 } from "node:os";
+import { realpath as realpath6 } from "node:fs/promises";
+import path39 from "node:path";
+function docKey(args) {
+  let value;
+  for (let index2 = 0; index2 < args.length; index2 += 1) {
+    const token = args[index2];
+    if (token === "--") break;
+    if (token === "--doc-key") value = args[index2 + 1];
+    else if (token.startsWith("--doc-key=")) value = token.slice("--doc-key=".length);
+  }
+  return value;
+}
+function matchRow(command, args) {
+  const sub = args.find((token) => !token.startsWith("-"));
+  return HOSTED_CHECKOUT_REFUSALS.find((row2) => {
+    if (row2.words[0] !== command) return false;
+    if (row2.when && !row2.when(args)) return false;
+    if (row2.words.length === 1) return true;
+    return row2.words[1] === "*" ? sub !== void 0 : row2.words[1] === sub;
+  });
+}
+function scan2(args) {
+  let dir;
+  for (let index2 = 0; index2 < args.length; index2 += 1) {
+    const token = args[index2];
+    if (token === "--") break;
+    if (token === "--help" || token === "-h" || token === "--remote" || token.startsWith("--remote=")) return { dir, skip: true };
+    if (token === "--dir") dir = args[index2 + 1];
+    else if (token.startsWith("--dir=")) dir = token.slice("--dir=".length);
+  }
+  return { dir, skip: false };
+}
+async function checkoutFor(command, dir, home2, cwd) {
+  let root;
+  try {
+    if (command === "init") root = await realpath6(path39.resolve(cwd, dir ?? "."));
+    else root = (await resolveLocalBundleTarget(dir, cwd)).canonicalRoot;
+  } catch {
+    return null;
+  }
+  return bindingForPath(home2, root);
+}
+function hostedCheckoutRefusal(row2, words, binding) {
+  const details = { reason: row2.reason, command: words, bundle_id: binding.bundle_id, host: binding.origin, checkout: binding.path };
+  if (row2.reason === "checkout_target") {
+    return new CliError("FORBIDDEN", `'${words}' refused: ${row2.why} (bundle ${binding.bundle_id} on ${binding.origin})`, {
+      details,
+      help: "choose another folder for a local bundle"
+    });
+  }
+  return new CliError("FORBIDDEN", `'${words}' cannot sync from a hosted checkout (${row2.why}): do this in the Superbee app`, {
+    details: { ...details, do_this_in: "app" },
+    help: `do this in the Superbee app for bundle ${binding.bundle_id} on ${binding.origin}`
+  });
+}
+async function assertAllowedInHostedCheckout(command, args, context = {}) {
+  const row2 = matchRow(command, args);
+  if (!row2) return;
+  const { dir, skip } = scan2(args);
+  if (skip) return;
+  const binding = await checkoutFor(command, dir, context.home ?? homedir19(), context.cwd ?? process.cwd());
+  if (!binding) return;
+  const sub = row2.words.length > 1 ? args.find((token) => !token.startsWith("-")) : void 0;
+  throw hostedCheckoutRefusal(row2, sub ? `${command} ${sub}` : command, binding);
+}
+function hostedMcpWriteRefusal(binding, operation) {
+  return hostedCheckoutRefusal(
+    { words: ["mcp"], reason: "not_syncable", why: "the local MCP app writes Views, blobs and documents the app owns for a checkout" },
+    `mcp ${operation}`,
+    binding
+  );
+}
+var MCP_REGISTRATION, HOSTED_CHECKOUT_REFUSALS;
+var init_refusals = __esm({
+  "../cli/src/hosted/refusals.ts"() {
+    "use strict";
+    init_define_SUPERBEE_BUILD_IDENTITY();
+    init_define_SUPERBEE_UPDATE_POLICY();
+    init_bundle2();
+    init_errors4();
+    init_binding();
+    MCP_REGISTRATION = /* @__PURE__ */ new Set(["install", "status", "uninstall"]);
+    HOSTED_CHECKOUT_REFUSALS = Object.freeze([
+      { words: ["doc", "verify"], reason: "not_syncable", why: "verification is a managed field the host records" },
+      { words: ["kind", "*"], reason: "not_syncable", why: "Kind conventions are edited in the app" },
+      { words: ["recipe", "add"], reason: "not_syncable", why: "recipes change Kind and View conventions, which are edited in the app" },
+      { words: ["recipe", "evolve"], reason: "not_syncable", why: "recipes change Kind and View conventions, which are edited in the app" },
+      { words: ["artifact", "*"], reason: "not_syncable", why: "artifacts carry blobs, which do not sync" },
+      {
+        words: ["promote"],
+        reason: "not_syncable",
+        why: "a key that is not a .md document is stored as a blob, and blobs do not sync",
+        when: (args) => !(docKey(args) ?? "").toLowerCase().endsWith(".md")
+      },
+      {
+        words: ["delete"],
+        reason: "not_syncable",
+        why: "a key that is not a .md document is a blob, and blobs do not sync (delete a document with doc delete)",
+        when: (args) => {
+          const key = docKey(args);
+          return key !== void 0 && !key.toLowerCase().endsWith(".md");
+        }
+      },
+      {
+        words: ["index", "generate"],
+        reason: "not_syncable",
+        why: "index.md files are reserved navigation the host keeps; generated ones would be held by sync",
+        // --check only reports whether the indexes are current; it writes nothing.
+        when: (args) => !args.some((token) => token === "--check" || token.startsWith("--check="))
+      },
+      { words: ["serve"], reason: "not_syncable", why: "the served bundle accepts writes and deletes that do not sync" },
+      { words: ["ui"], reason: "not_syncable", why: "the local app writes Views and conventions, which do not sync" },
+      {
+        words: ["mcp"],
+        reason: "not_syncable",
+        why: "the local MCP app writes Views and conventions, which do not sync",
+        when: (args) => !MCP_REGISTRATION.has(args.find((token) => !token.startsWith("-")) ?? "")
+      },
+      { words: ["init"], reason: "checkout_target", why: "the folder is a hosted checkout, not a local bundle" }
+    ].map((row2) => Object.freeze({ ...row2, words: Object.freeze([...row2.words]) })));
+  }
+});
+
+// ../cli/src/hosted/read-only-bundle.ts
+function readOnlyHostedBundle(bundle, binding) {
+  const backend = bundle.backend ?? configuredBundle(bundle.root).backend;
+  const guarded2 = new Proxy(backend, {
+    get(target2, property, receiver) {
+      if (typeof property === "string" && Object.hasOwn(WRITES, property)) {
+        return async () => {
+          throw hostedMcpWriteRefusal(binding, WRITES[property]);
+        };
+      }
+      const value = Reflect.get(target2, property, receiver);
+      return typeof value === "function" ? value.bind(target2) : value;
+    }
+  });
+  return Object.freeze({ ...bundle, backend: guarded2 });
+}
+var WRITES;
+var init_read_only_bundle = __esm({
+  "../cli/src/hosted/read-only-bundle.ts"() {
+    "use strict";
+    init_define_SUPERBEE_BUILD_IDENTITY();
+    init_define_SUPERBEE_UPDATE_POLICY();
+    init_filesystem_runtime();
+    init_refusals();
+    WRITES = Object.freeze({
+      write: "document write",
+      delete: "document delete",
+      writeReserved: "index write",
+      writeBlob: "blob write",
+      deleteBlob: "blob delete"
+    });
+  }
+});
+
 // ../cli/src/mcp-workspace-resolver.ts
+import { homedir as homedir20 } from "node:os";
 function createCatalogMcpWorkspaceResolver(options = {}) {
   const listEntries = options.listEntries ?? listCatalogEntries;
   const resolveEntry2 = options.resolveEntry ?? resolveCatalogEntry;
@@ -116307,9 +116664,11 @@ function createCatalogMcpWorkspaceResolver(options = {}) {
       if (!samePhysicalPath3(bundle.root, entry.locator.path) || !samePhysicalPath3(target2.canonicalRoot, entry.locator.path)) {
         throw new Error("workspace catalog target changed during selection");
       }
-      const bundleName = (await deriveName(bundle)).name;
+      const binding = await bindingForPath(options.home ?? homedir20(), target2.canonicalRoot);
+      const served = binding ? readOnlyHostedBundle(bundle, binding) : bundle;
+      const bundleName = (await deriveName(served)).name;
       return createMcpBundleContext({
-        bundle,
+        bundle: served,
         bundleName,
         ...options.actor !== void 0 ? { actor: options.actor } : {},
         viewAuthorization: new LocalViewAuthorizationStore(bundle.root, options.home)
@@ -116328,6 +116687,8 @@ var init_mcp_workspace_resolver = __esm({
     init_bundle_name();
     init_catalog2();
     init_view_authorizations();
+    init_binding();
+    init_read_only_bundle();
   }
 });
 
@@ -116335,10 +116696,10 @@ var init_mcp_workspace_resolver = __esm({
 function createScanner(text4, ignoreTrivia = false) {
   const len = text4.length;
   let pos = 0, value = "", tokenOffset = 0, token = 16, lineNumber = 0, lineStartOffset = 0, tokenLineStartOffset = 0, prevTokenLineStartOffset = 0, scanError = 0;
-  function scanHexDigits(count2, exact) {
+  function scanHexDigits(count3, exact) {
     let digits = 0;
     let value2 = 0;
-    while (digits < count2 || !exact) {
+    while (digits < count3 || !exact) {
       let ch = text4.charCodeAt(pos);
       if (ch >= 48 && ch <= 57) {
         value2 = value2 * 16 + ch - 48;
@@ -116352,7 +116713,7 @@ function createScanner(text4, ignoreTrivia = false) {
       pos++;
       digits++;
     }
-    if (digits < count2) {
+    if (digits < count3) {
       value2 = -1;
     }
     return value2;
@@ -116991,9 +117352,9 @@ function format(documentText, range, options) {
   }
   return editOperations;
 }
-function repeat(s, count2) {
+function repeat(s, count3) {
   let result3 = "";
-  for (let i = 0; i < count2; i++) {
+  for (let i = 0; i < count3; i++) {
     result3 += s;
   }
   return result3;
@@ -117101,12 +117462,12 @@ function parseTree(text4, errors = [], options = ParseOptions.DEFAULT) {
   }
   return result3;
 }
-function findNodeAtLocation(root, path43) {
+function findNodeAtLocation(root, path44) {
   if (!root) {
     return void 0;
   }
   let node2 = root;
-  for (let segment of path43) {
+  for (let segment of path44) {
     if (typeof segment === "string") {
       if (node2.type !== "object" || !Array.isArray(node2.children)) {
         return void 0;
@@ -117496,14 +117857,14 @@ var init_parser = __esm({
 
 // ../../node_modules/jsonc-parser/lib/esm/impl/edit.js
 function setProperty(text4, originalPath, value, options) {
-  const path43 = originalPath.slice();
+  const path44 = originalPath.slice();
   const errors = [];
   const root = parseTree(text4, errors);
   let parent = void 0;
   let lastSegment = void 0;
-  while (path43.length > 0) {
-    lastSegment = path43.pop();
-    parent = findNodeAtLocation(root, path43);
+  while (path44.length > 0) {
+    lastSegment = path44.pop();
+    parent = findNodeAtLocation(root, path44);
     if (parent === void 0 && value !== void 0) {
       if (typeof lastSegment === "string") {
         value = { [lastSegment]: value };
@@ -117648,8 +118009,8 @@ var init_edit = __esm({
 });
 
 // ../../node_modules/jsonc-parser/lib/esm/main.js
-function modify(text4, path43, value, options) {
-  return setProperty(text4, path43, value, options);
+function modify(text4, path44, value, options) {
+  return setProperty(text4, path44, value, options);
 }
 function applyEdits(text4, edits) {
   let sortedEdits = edits.slice(0).sort((a, b) => {
@@ -117751,7 +118112,7 @@ var init_host_command = __esm({
 
 // ../cli/src/mcp-install-targets.ts
 import { readFileSync as readFileSync12 } from "node:fs";
-import { homedir as homedir18 } from "node:os";
+import { homedir as homedir21 } from "node:os";
 function resolveMcpInstallTarget(value) {
   return TARGET_BY_NAME.get(value.trim().toLowerCase());
 }
@@ -117967,12 +118328,12 @@ function selectMcpRegistration(entries) {
   return entries.find((entry) => entry.name === CURRENT_MCP_REGISTRATION) ?? LEGACY_MCP_REGISTRATIONS.map((name) => entries.find((entry) => entry.name === name)).find(Boolean);
 }
 function environment(deps) {
-  return deps.environment ?? { home: homedir18(), env: process.env, platform: process.platform };
+  return deps.environment ?? { home: homedir21(), env: process.env, platform: process.platform };
 }
 function inspectMcpHost(target2, deps = {}) {
   const input = environment(deps);
-  const path43 = resolveMcpTargetConfigPath(target2.id, input);
-  if (!path43) {
+  const path44 = resolveMcpTargetConfigPath(target2.id, input);
+  if (!path44) {
     return {
       host: target2.id,
       label: target2.label,
@@ -117983,7 +118344,7 @@ function inspectMcpHost(target2, deps = {}) {
     };
   }
   const authority = deps.authority?.() ?? resolvePersistentInstallAuthority({ env: input.env, platform: input.platform });
-  let reportedPath = path43;
+  let reportedPath = path44;
   try {
     let entries;
     if (target2.id === "codex") {
@@ -117991,7 +118352,7 @@ function inspectMcpHost(target2, deps = {}) {
       entries = inspectCodexMcp(command, input, deps);
     } else {
       const read = deps.readFile ?? ((candidate) => readFileSync12(candidate, "utf8"));
-      const candidates = target2.id === "opencode" ? openCodeConfigCandidates(input) : [path43];
+      const candidates = target2.id === "opencode" ? openCodeConfigCandidates(input) : [path44];
       const sources = [];
       for (const candidate of candidates) {
         try {
@@ -118123,7 +118484,7 @@ var init_mcp_install_targets = __esm({
 // ../cli/src/mcp-registration.ts
 import { execFileSync as execFileSync3 } from "node:child_process";
 import { readFileSync as readFileSync13, realpathSync as realpathSync14 } from "node:fs";
-import { homedir as homedir19 } from "node:os";
+import { homedir as homedir22 } from "node:os";
 function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -118131,12 +118492,12 @@ function own4(value, key) {
   return Object.prototype.hasOwnProperty.call(value, key) ? value[key] : void 0;
 }
 function defaultEnvironment() {
-  return { home: homedir19(), env: process.env, platform: process.platform };
+  return { home: homedir22(), env: process.env, platform: process.platform };
 }
 function isMissing(error51) {
   return isRecord9(error51) && own4(error51, "code") === "ENOENT";
 }
-function resolvedPath(path43, deps) {
+function resolvedPath(path44, deps) {
   const resolve2 = deps.realpath ?? ((candidate) => {
     try {
       return realpathSync14(candidate);
@@ -118145,11 +118506,11 @@ function resolvedPath(path43, deps) {
       throw error51;
     }
   });
-  return resolve2(path43);
+  return resolve2(path44);
 }
-function readOptional(path43, read) {
+function readOptional(path44, read) {
   try {
-    return read(path43);
+    return read(path44);
   } catch (error51) {
     if (isMissing(error51)) return void 0;
     throw error51;
@@ -118199,8 +118560,8 @@ function selectedSources(sources) {
 }
 function inspectTarget(target2, deps, codexCommand) {
   const input = deps.environment ?? defaultEnvironment();
-  const path43 = resolveMcpTargetConfigPath(target2.id, input);
-  if (!path43) {
+  const path44 = resolveMcpTargetConfigPath(target2.id, input);
+  if (!path44) {
     throw new McpRegistrationError(`no supported ${target2.label} local-config path on ${input.platform}`, {
       host: target2.id
     }, [target2.docs_url], "usage");
@@ -118212,7 +118573,7 @@ function inspectTarget(target2, deps, codexCommand) {
     }
     try {
       const entries = inspectCodexMcp(codexCommand, input, deps);
-      return { entries, selected: selectMcpRegistration(entries), config: collapseHomeDirectory(path43) };
+      return { entries, selected: selectMcpRegistration(entries), config: collapseHomeDirectory(path44) };
     } catch (error51) {
       const state = error51 instanceof HostCommandError && error51.state === "absent" ? "cli_absent" : "unreadable";
       throw new McpRegistrationError(
@@ -118224,17 +118585,17 @@ function inspectTarget(target2, deps, codexCommand) {
     }
   }
   if (target2.id !== "opencode") {
-    const text4 = readOptional(path43, read);
+    const text4 = readOptional(path44, read);
     const entries = text4 === void 0 ? [] : parseClaudeMcpEntries(text4, target2.id);
     return {
       entries,
       selected: selectMcpRegistration(entries),
-      config: collapseHomeDirectory(path43),
-      sourcePath: path43,
+      config: collapseHomeDirectory(path44),
+      sourcePath: path44,
       sourceText: text4 ?? "{}\n",
       sourceExists: text4 !== void 0,
-      sourceDestination: text4 === void 0 ? null : resolvedPath(path43, deps) ?? null,
-      sourceParent: capturePrivateConfigParent(path43)
+      sourceDestination: text4 === void 0 ? null : resolvedPath(path44, deps) ?? null,
+      sourceParent: capturePrivateConfigParent(path44)
     };
   }
   if (input.env.OPENCODE_CONFIG_CONTENT?.trim()) {
@@ -118277,7 +118638,7 @@ function inspectTarget(target2, deps, codexCommand) {
           configs: standard2.map((candidate) => collapseHomeDirectory(candidate.path))
         });
       }
-      source = standard2[0] ?? { path: path43, text: "{}\n", entries: [], destination: null, exists: false };
+      source = standard2[0] ?? { path: path44, text: "{}\n", entries: [], destination: null, exists: false };
     }
   }
   const root = parseMcpConfigRoot(source.text);
@@ -118334,8 +118695,8 @@ function inspectForMutation(target2, deps, codexCommand) {
     }, [target2.docs_url], "runtime");
   }
 }
-function editJsonc(text4, path43, value) {
-  const edits = modify(text4, [...path43], value, {
+function editJsonc(text4, path44, value) {
+  const edits = modify(text4, [...path44], value, {
     formattingOptions: { insertSpaces: true, tabSize: 2, eol: "\n" }
   });
   const next = applyEdits(text4, edits);
@@ -118421,7 +118782,7 @@ function applyTarget(target2, operation, desired, before, deps, codexCommand) {
   if (!before.sourcePath || before.sourceText === void 0) {
     throw new McpRegistrationError(`no writable ${target2.label} configuration source was resolved`);
   }
-  let path43;
+  let path44;
   let value;
   if (target2.id === "claude-desktop") {
     const root = parseMcpConfigRoot(before.sourceText);
@@ -118429,14 +118790,14 @@ function applyTarget(target2, operation, desired, before, deps, codexCommand) {
     if (servers !== void 0 && !isRecord9(servers)) {
       throw new McpRegistrationError("Claude Desktop mcpServers is not an object");
     }
-    path43 = ["mcpServers", CURRENT_MCP_REGISTRATION];
+    path44 = ["mcpServers", CURRENT_MCP_REGISTRATION];
     value = operation === "install" ? { command: desired.command, args: desired.args } : void 0;
   } else {
-    path43 = before.openCodePath ?? ["mcp", CURRENT_MCP_REGISTRATION];
-    const v2 = path43[1] === "servers";
+    path44 = before.openCodePath ?? ["mcp", CURRENT_MCP_REGISTRATION];
+    const v2 = path44[1] === "servers";
     value = operation === "install" ? v2 ? { type: "local", command: [desired.command, ...desired.args], disabled: false } : { type: "local", command: [desired.command, ...desired.args], enabled: true } : void 0;
   }
-  const next = editJsonc(before.sourceText, path43, value);
+  const next = editJsonc(before.sourceText, path44, value);
   const write = deps.writeFile ?? ((candidate, content3) => atomicWriteFileSync(candidate, content3, {
     expected: {
       destination: before.sourceDestination ?? null,
@@ -118905,7 +119266,7 @@ __export(sync_exports2, {
   withUpstreamHelp: () => withUpstreamHelp,
   writeAwarenessCache: () => writeAwarenessCache
 });
-import { homedir as homedir20 } from "node:os";
+import { homedir as homedir23 } from "node:os";
 function requestsHelp(argv2) {
   for (const token of argv2) {
     if (token === "--") return false;
@@ -118916,10 +119277,12 @@ function requestsHelp(argv2) {
 async function sync2(argv2, deps = {}) {
   if (requestsHelp(argv2)) {
     (deps.stdout ?? ((text4) => void process.stdout.write(text4)))(renderUsage(`${SYNC_USAGE}
+Hosted checkouts (the target decides; there is no flag):
+
 ${HOSTED_SYNC_USAGE}`));
     return;
   }
-  const home2 = deps.auth?.home ?? homedir20();
+  const home2 = deps.auth?.home ?? homedir23();
   const binding = await hostedCheckoutFor(argv2, home2, deps.cwd ?? process.cwd());
   if (binding) {
     await hostedSync(argv2, binding, deps);
@@ -119230,7 +119593,7 @@ var init_skill_compatibility = __esm({
 // ../cli/src/commands/skill.ts
 import { createHash as createHash15 } from "node:crypto";
 import { existsSync as existsSync9, lstatSync as lstatSync8, readFileSync as readFileSync14, readdirSync as readdirSync3, realpathSync as realpathSync15, renameSync as renameSync6, rmSync as rmSync5, rmdirSync as rmdirSync3 } from "node:fs";
-import { homedir as homedir21 } from "node:os";
+import { homedir as homedir24 } from "node:os";
 import { dirname as dirname5, join as join14 } from "node:path";
 import { parseArgs as parseArgs26 } from "node:util";
 function listFilesRelative(dir, prefix = "") {
@@ -119296,7 +119659,7 @@ function skillTargetsForName(dirName, scope, deps = {}) {
       opencode: paths.join(cwd, ".claude", "skills", dirName)
     };
   }
-  const home2 = deps.home ?? homedir21();
+  const home2 = deps.home ?? homedir24();
   const env = deps.env ?? process.env;
   return {
     claude: paths.join(resolveHostConfigRoot(HOST_CONFIG_ROOTS.claude, home2, env, platform), "skills", dirName),
@@ -119644,12 +120007,12 @@ function inspectInstallPath(dir, assets, installCommand) {
   }
 }
 function inspectHostInstall(canonicalDir, legacyDir, assets, installCommand) {
-  const canonical = inspectInstallPath(canonicalDir, assets, installCommand);
+  const canonical2 = inspectInstallPath(canonicalDir, assets, installCommand);
   const legacy = inspectInstallPath(legacyDir, assets, installCommand);
-  if (!canonical.ok) return canonical;
+  if (!canonical2.ok) return canonical2;
   if (!legacy.ok) return legacy;
-  if (!canonical.preflight.ok) return canonical.preflight;
-  const canonicalOwned = canonical.status.state === "installed" || canonical.status.state === "stale";
+  if (!canonical2.preflight.ok) return canonical2.preflight;
+  const canonicalOwned = canonical2.status.state === "installed" || canonical2.status.state === "stale";
   const legacyOwned = legacy.status.state === "installed" || legacy.status.state === "stale";
   if (legacyOwned && !legacy.preflight.ok) return legacy.preflight;
   if (canonicalOwned && legacyOwned) {
@@ -119660,7 +120023,7 @@ function inspectHostInstall(canonicalDir, legacyDir, assets, installCommand) {
   }
   return {
     ok: true,
-    canonical: { ...canonical, preflight: canonical.preflight },
+    canonical: { ...canonical2, preflight: canonical2.preflight },
     legacy,
     canonicalOwned,
     legacyOwned
@@ -119669,15 +120032,15 @@ function inspectHostInstall(canonicalDir, legacyDir, assets, installCommand) {
 function installForHost(canonicalDir, legacyDir, assets, installCommand) {
   const inspected = inspectHostInstall(canonicalDir, legacyDir, assets, installCommand);
   if (!inspected.ok) return inspected;
-  const { canonical, legacy, canonicalOwned, legacyOwned } = inspected;
+  const { canonical: canonical2, legacy, canonicalOwned, legacyOwned } = inspected;
   if (!canonicalOwned && legacyOwned) {
-    sweepManagedDebris(canonicalDir, canonical.preflight.ownedForSweep);
+    sweepManagedDebris(canonicalDir, canonical2.preflight.ownedForSweep);
     removeEmptyDirectories(canonicalDir, true);
     renameSync6(legacyDir, canonicalDir);
     const result4 = installIntoDir(canonicalDir, assets);
     return result4.ok ? { ok: true, changed: true, migrated: true, legacyState: legacy.status.state } : result4;
   }
-  const result3 = installIntoDir(canonicalDir, assets, canonical.preflight);
+  const result3 = installIntoDir(canonicalDir, assets, canonical2.preflight);
   return result3.ok ? { ok: true, changed: result3.changed, migrated: false, legacyState: legacy.status.state } : result3;
 }
 function statusOutput(dir, status2) {
@@ -120463,7 +120826,7 @@ import {
   unlinkSync as unlinkSync3,
   writeFileSync as writeFileSync5
 } from "node:fs";
-import { homedir as homedir22 } from "node:os";
+import { homedir as homedir25 } from "node:os";
 import { isAbsolute as isAbsolute3, join as join15 } from "node:path";
 function asRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
@@ -120665,9 +121028,9 @@ function readPrivateFile(home2, filePath, maxBytes) {
     const bytes = Buffer.allocUnsafe(maxBytes + 1);
     let offset = 0;
     while (offset < bytes.byteLength) {
-      const count2 = readSync(descriptor, bytes, offset, bytes.byteLength - offset, null);
-      if (count2 === 0) break;
-      offset += count2;
+      const count3 = readSync(descriptor, bytes, offset, bytes.byteLength - offset, null);
+      if (count3 === 0) break;
+      offset += count3;
     }
     if (offset > maxBytes) return { state: "unsafe" };
     const after = lstatSync9(filePath);
@@ -120994,7 +121357,7 @@ function transitionMatchingActiveToCooldown(home2, token, now) {
 }
 function runPassiveUpdateOrientation(deps = {}) {
   if (currentDistribution()?.updatesEnabled === false) return void 0;
-  const home2 = deps.home ?? homedir22();
+  const home2 = deps.home ?? homedir25();
   const runningVersion = deps.runningVersion ?? staticBuildIdentity().package.version;
   const now = deps.now ?? (() => /* @__PURE__ */ new Date());
   const initial = inspectUpdateCache({ home: home2, runningVersion, now: now() });
@@ -121049,7 +121412,7 @@ function runPassiveUpdateOrientation(deps = {}) {
 async function runUpdateRefreshWorker(token, deps = {}) {
   if (currentDistribution()?.updatesEnabled === false) return;
   if (!isUpdateLeaseToken(token)) return;
-  const home2 = deps.home ?? homedir22();
+  const home2 = deps.home ?? homedir25();
   const runningVersion = deps.runningVersion ?? staticBuildIdentity().package.version;
   const now = deps.now ?? (() => /* @__PURE__ */ new Date());
   if (!parseStrictSemver(runningVersion) || !activeLeaseAuthority(home2, token, now())) return;
@@ -121126,7 +121489,8 @@ var init_update_orientation = __esm({
 
 // ../cli/src/commands/home.ts
 import { parseArgs as parseArgs27 } from "node:util";
-import path38 from "node:path";
+import path40 from "node:path";
+import { realpath as realpath7 } from "node:fs/promises";
 function parseHomeArgs(argv2) {
   return parseArgs27({ args: argv2, options: HOME_OPTIONS, allowPositionals: true });
 }
@@ -121180,7 +121544,7 @@ async function defaultSummarizeBundle(dir, route) {
     if (route) await assertResolvedLocalRouteIdentity(route);
   } catch (err) {
     if (err instanceof CliError && err.code === "NOT_FOUND") return null;
-    const root = collapseHomeDirectory(path38.resolve(dir ?? process.cwd()));
+    const root = collapseHomeDirectory(path40.resolve(dir ?? process.cwd()));
     if (err instanceof CliError && err.code === "CONFLICT") {
       return { root, conflict: true, message: err.message };
     }
@@ -121190,18 +121554,19 @@ async function defaultSummarizeBundle(dir, route) {
     const docs = await queryHeads2(bundle);
     const { name, source } = await deriveBundleDisplayName(bundle);
     const okfVersion = await readBundleOkfVersion2(bundle);
-    return { name, nameSource: source, ...summarizeDocs(docs, collapseHomeDirectory(bundle.root), { okfVersion }) };
+    const bundleHome = (await bundleHomeAt(await realpath7(bundle.root).catch(() => bundle.root))).home;
+    return { name, nameSource: source, ...summarizeDocs(docs, collapseHomeDirectory(bundle.root), { okfVersion }), home: bundleHome };
   } catch {
     return { root: collapseHomeDirectory(bundle.root), unreadable: true };
   }
 }
 async function discoverSummarizeBundle(startDir) {
   try {
-    const root = await findBundleRoot(path38.resolve(startDir));
+    const root = await findBundleRoot(path40.resolve(startDir));
     return root ? defaultSummarizeBundle(root) : null;
   } catch (err) {
     if (err instanceof CliError && err.code === "NOT_FOUND") return null;
-    const root = collapseHomeDirectory(path38.resolve(startDir));
+    const root = collapseHomeDirectory(path40.resolve(startDir));
     if (err instanceof CliError && err.code === "CONFLICT") {
       return { root, conflict: true, message: err.message };
     }
@@ -121306,7 +121671,7 @@ async function defaultLoadBoardStatus(dir, route) {
     if (!top) return null;
     const committed = committedBundleAtHead(top);
     const bundleDir = committed?.bundleDir ?? bundleDirNameForProject(top);
-    const conventionalBoardPath = path38.join(top, bundleDir);
+    const conventionalBoardPath = path40.join(top, bundleDir);
     const provisionedBoardPath = resolveProvisionedBoardPath2(top);
     if (!provisionedBoardPath) {
       const remoteRefExists = runGit(top, ["rev-parse", "--verify", "--quiet", `refs/remotes/${BOARD_REF}`]).status === 0;
@@ -121416,6 +121781,7 @@ function buildHomeView(deps, summary, remote, binding, bindingError, board, hook
     view2.bundle = bundleBlock;
   } else if (summary) {
     const bundleBlock = {};
+    if (summary.home) bundleBlock.home = summary.home;
     if (summary.name) {
       bundleBlock.name = summary.name;
       if (summary.nameSource === "conventional-parent") {
@@ -121455,7 +121821,7 @@ function buildHomeView(deps, summary, remote, binding, bindingError, board, hook
       const recovery = binding.recovery ?? bindingInitRecovery(binding.target, deps.invocation());
       view2.getting_started = `project binding ${binding.file} -> ${binding.target} did not resolve to a bundle \u2014 recipes stay withheld until the binding resolves; recover with: ${recovery}`;
     } else {
-      const createTarget = path38.join(deps.targetDir ?? ".", CONVENTIONAL_BUNDLE_DIR_NAME);
+      const createTarget = path40.join(deps.targetDir ?? ".", CONVENTIONAL_BUNDLE_DIR_NAME);
       const target2 = commandFragment` --dir ${commandQuoted(createTarget)}`;
       view2.getting_started = `no OKF bundle found in this directory \u2014 run \`${deps.invocation()} init --create-only --recipe none${target2}\` to create a blank bundle, or \`${deps.invocation()} recipes\` to compare available workspace setups; create your chosen setup here with \`${deps.invocation()} init --create-only --recipe <name>${target2}\``;
     }
@@ -121675,6 +122041,7 @@ var init_home = __esm({
     init_actor();
     init_actor_guidance();
     init_offers();
+    init_bundle_home();
     init_src2();
     init_autopull2();
     init_errors4();
@@ -121700,6 +122067,9 @@ detached refresh at most once per 24-hour attempt window. Rendering never waits
 public npm request names only superbee; it sends no installed version, cwd, bundle, actor, or
 usage data beyond ordinary network metadata.
 
+The bundle block leads with 'home': local, git (a Git board) or hosted (a hosted checkout), read
+from local Git and private state only. 'bundle locate' and 'status' give the details.
+
 Home also checks managed Agent Skill bytes locally. A stale install that passes the installer's
 complete read-only preflight is reported with its exact scope-specific refresh command and restart
 requirement; current, absent, unmanaged, conflicting, or unreadable installs stay quiet.
@@ -121730,11 +122100,11 @@ ASLITE_NO_UPDATE_CHECK, NO_UPDATE_NOTIFIER, or CI.
 });
 
 // ../cli/src/commands/session-start.ts
-import { homedir as homedir23 } from "node:os";
+import { homedir as homedir26 } from "node:os";
 import { parseArgs as parseArgs28 } from "node:util";
-import path39 from "node:path";
+import path41 from "node:path";
 async function hostedSessionStartPull(binding, budgetMs, deps = {}) {
-  const home2 = deps.sync?.auth?.home ?? homedir23();
+  const home2 = deps.sync?.auth?.home ?? homedir26();
   const state = await sessionPullState(binding, budgetMs, home2, deps);
   const counts = typeof state === "object" ? state : {};
   const pulledAt = (await readFreshness(home2, binding.checkout_id).catch(() => null))?.pulled_at ?? null;
@@ -121766,7 +122136,7 @@ async function sessionStartPull(dir, budgetMs = SESSION_START_PULL_BUDGET_MS, no
   const deadline = now() + budgetMs;
   const remaining = () => Math.max(0, deadline - now());
   try {
-    assertSearchDirOutsidePrivateState(path39.resolve(dir ?? process.cwd()));
+    assertSearchDirOutsidePrivateState(path41.resolve(dir ?? process.cwd()));
     const route = dir === void 0 && await resolveProjectBinding(process.cwd()) ? await resolveLocalBundleRoute(void 0) : void 0;
     if (route?.kind === "bound-board" && route.readiness !== "ready") return void 0;
     const owner = route?.kind === "bound-board" ? route.owner : void 0;
@@ -121807,7 +122177,7 @@ async function sessionStartPull(dir, budgetMs = SESSION_START_PULL_BUDGET_MS, no
       const top = repoTopLevel(startDir);
       if (!top) return void 0;
       const bundleDir = committedBundleAtHead(top)?.bundleDir ?? bundleDirNameForProject(top);
-      const boardPath2 = path39.join(top, bundleDir);
+      const boardPath2 = path41.join(top, bundleDir);
       const key2 = resolveBundleKey(boardPath2);
       await defaultSyncStore.refreshMarker(key2);
       if (remaining() < MIN_USEFUL_BUDGET_MS) return { offline: true, boardPath: boardPath2 };
@@ -122023,7 +122393,7 @@ Options:
 
 // ../cli/src/commands/turn-end.ts
 import { createHash as createHash16 } from "node:crypto";
-import { homedir as homedir24 } from "node:os";
+import { homedir as homedir27 } from "node:os";
 import { parseArgs as parseArgs29 } from "node:util";
 async function readHookStdin() {
   if (process.stdin.isTTY) return null;
@@ -122093,7 +122463,7 @@ async function turnEnd(argv2, partial2 = {}) {
   if (!binding) return;
   const stdin = await (partial2.readStdin ?? readHookStdin)().catch(() => null);
   if (continuingForHook(stdin)) return;
-  const home2 = partial2.syncDeps?.auth?.home ?? homedir24();
+  const home2 = partial2.syncDeps?.auth?.home ?? homedir27();
   const deadline = Date.now() + (partial2.budgetMs ?? TURN_END_BUDGET_MS);
   const local = await (partial2.localState ?? ((b) => Promise.resolve().then(() => (init_sync(), sync_exports)).then((m2) => m2.hostedLocalState(b, home2))))(binding).catch(() => "changed");
   if (local === "busy") return;
@@ -122214,12 +122584,15 @@ async function bundleCommand(argv2, deps = {}) {
     });
   }
   const target2 = await resolveLocalBundleTarget(parsed.values.dir, cwd());
+  const home2 = await bundleHomeAt(target2.canonicalRoot, deps.home === void 0 ? {} : { home: deps.home });
   stdout(
     render(
       {
         schema_version: 1,
         locator: { kind: "local-path", path: target2.canonicalRoot },
-        selected_by: target2.selectedBy,
+        home: home2.home,
+        ...homeDetail(home2),
+        selected_by: home2.home === "hosted" && target2.selectedBy === "discovery" ? "hosted-checkout" : target2.selectedBy,
         ...target2.bindingFile ? { binding_file: target2.bindingFile } : {},
         available: true
       },
@@ -122237,6 +122610,7 @@ var init_bundle3 = __esm({
     init_args();
     init_command_spec();
     init_bundle2();
+    init_bundle_home();
     init_errors4();
     init_invocation();
     init_output2();
@@ -122256,20 +122630,29 @@ Options:
 Resolution preserves normal CLI precedence: explicit --dir, then the nearest project binding,
 then local discovery. A successful receipt contains a canonical absolute local path suitable for
 passing back to ordinary commands with --dir. This command never reads or selects an HTTP remote.
+
+The receipt names the bundle's home, which decides how its changes travel:
+  local                   Changes stay on this machine
+  git                     A Git board; 'board' names its channel, branch, upstream, and whether it is shared
+  hosted                  A hosted checkout; 'hosted' names the host, bundle id, workspace and principal.
+                          selected_by is 'hosted-checkout' when discovery found the checkout
+The home is read from local Git and private state only: no request, no fetch.
 `;
   }
 });
 
 // ../cli/src/commands/catalog.ts
 import { parseArgs as parseArgs31 } from "node:util";
-import { homedir as homedir25 } from "node:os";
+import { homedir as homedir28 } from "node:os";
 function entryReceipt(entry) {
   return {
     schema_version: 1,
     id: entry.id,
     label: entry.label,
     locator: entry.locator,
-    available: entry.available
+    available: entry.available,
+    home: entry.home,
+    ...entry.hosted ? { hosted: entry.hosted } : {}
   };
 }
 function usage(message) {
@@ -122295,7 +122678,7 @@ function requestsPathField(argv2) {
 async function catalogInner(argv2, deps) {
   const stdout = deps.stdout ?? ((s) => void process.stdout.write(s));
   const cwd = deps.cwd ?? (() => process.cwd());
-  const home2 = deps.home ?? homedir25;
+  const home2 = deps.home ?? homedir28;
   const parsed = parseSelectorOrUsage(
     () => parseArgs31({
       args: argv2,
@@ -122340,7 +122723,7 @@ async function catalogInner(argv2, deps) {
         {
           catalog: result3.changed ? "added" : "unchanged",
           changed: result3.changed,
-          ...entryReceipt({ ...result3.entry, available: true }),
+          ...entryReceipt(await resolveCatalogEntry(result3.entry.id, home2())),
           help: [`${cliInvocation()} catalog resolve ${commandToken(result3.entry.label)} --field path`]
         },
         resolveMode(parsed.values)
@@ -122418,7 +122801,7 @@ is explicit: the catalog never crawls for or silently enrolls workspaces.
 
 Commands:
   add       Register the resolved local bundle under a unique label (idempotent for the same pair)
-  list      List registered workspaces and their currently derived availability
+  list      List registered workspaces with their currently derived availability and home
   resolve   Revalidate and return exactly one registered workspace
 
 Options:
@@ -122427,6 +122810,11 @@ Options:
   --json         Emit compact JSON instead of TOON
   -h, --help     Show this help
 
+Each entry reports its home, derived from the folder now and never stored: local, git (a Git
+board) or hosted (a hosted checkout, with its host, bundle id and checked_out_at). The local MCP
+app serves a hosted entry read-only: its writes cannot sync, so they are refused with 'do this in
+the Superbee app'.
+
 The catalog only selects a target. Pass a resolved path explicitly to ordinary commands with
 --dir; there is no process-global active workspace and no implicit cross-bundle operation.
 `;
@@ -122452,7 +122840,7 @@ function cappedPaths(dirs) {
   return {
     shown: Math.min(paths.length, PATH_LIMIT),
     total: paths.length,
-    rows: paths.slice(0, PATH_LIMIT).map((path43) => ({ path: path43 }))
+    rows: paths.slice(0, PATH_LIMIT).map((path44) => ({ path: path44 }))
   };
 }
 function dirsWith(targets, disposition) {
@@ -123576,11 +123964,11 @@ var init_defaults = __esm({
 });
 
 // ../cli/src/commands/setup-hosted.ts
-import { homedir as homedir26 } from "node:os";
+import { homedir as homedir29 } from "node:os";
 import { parseArgs as parseArgs36 } from "node:util";
 async function setupHosted(argv2, partial2 = {}) {
   const stdout = partial2.stdout ?? ((text4) => void process.stdout.write(text4));
-  const auth = partial2.auth ?? defaultHostedAuthDeps(homedir26());
+  const auth = partial2.auth ?? defaultHostedAuthDeps(homedir29());
   const { values } = parseLeafOrUsage(
     () => parseArgs36({
       args: argv2,
@@ -123724,10 +124112,10 @@ import {
   mkdir as mkdir3,
   open as open3,
   readdir as readdir3,
-  stat as stat5,
+  stat as stat6,
   unlink as unlink8
 } from "node:fs/promises";
-import { homedir as homedir27 } from "node:os";
+import { homedir as homedir30 } from "node:os";
 import { dirname as dirname6, join as join17 } from "node:path";
 function errno3(error51) {
   return error51?.code;
@@ -123847,7 +124235,7 @@ async function preflightLegacy(input) {
 function blockedSource(error51) {
   return error51 instanceof UnsafeMigrationSource ? { reason: `legacy operational state at ${error51.display} ${error51.detail}`, command: error51.command } : { reason: "legacy operational state is not safe to migrate automatically", command: "superbee setup" };
 }
-async function inspectUserStateMigration(input = homedir27()) {
+async function inspectUserStateMigration(input = homedir30()) {
   if (staticBuildIdentity().package.name === LEGACY_BRIDGE_PACKAGE_NAME) {
     return { state: "ready", reason: "the separately published Aslite bridge retains its legacy state root", records: 0 };
   }
@@ -123860,16 +124248,16 @@ async function inspectUserStateMigration(input = homedir27()) {
       command: "superbee setup"
     };
   }
-  const canonical = await inspectCanonicalUserStateRootDetail(input);
-  if (canonical.state === "ready") {
-    return canonical.hardening === "loose" ? {
+  const canonical2 = await inspectCanonicalUserStateRootDetail(input);
+  if (canonical2.state === "ready") {
+    return canonical2.hardening === "loose" ? {
       state: "repairable",
       reason: "the canonical Superbee user-state root is recognized but its permissions are group- or world-accessible",
       records: 0,
       command: `${distributionBinName()} setup harden-state`
     } : { state: "ready", reason: "the canonical Superbee user-state root is ready", records: 0 };
   }
-  if (canonical.state === "conflict") {
+  if (canonical2.state === "conflict") {
     return {
       state: "blocked",
       reason: "the canonical Superbee user-state root is unrecognized",
@@ -123891,7 +124279,7 @@ async function ensureMigrationParent(input) {
   } catch (error51) {
     if (errno3(error51) !== "EEXIST") throw error51;
   }
-  if (!(await stat5(parent)).isDirectory()) throw new Error("canonical state parent is unsafe");
+  if (!(await stat6(parent)).isDirectory()) throw new Error("canonical state parent is unsafe");
 }
 function migrationTemporaryPath(root, relative2) {
   const digest2 = createHash17("sha256").update(relative2).digest("hex").slice(0, 24);
@@ -123947,10 +124335,10 @@ function journalBytes(records) {
 `;
 }
 async function removeStaleJournal(root, input) {
-  const path43 = join17(root, MIGRATION_JOURNAL_FILE_NAME);
-  const raw = await readPrivateStateFile(path43, MAX_CATALOG_BYTES, void 0, input).catch(() => null);
+  const path44 = join17(root, MIGRATION_JOURNAL_FILE_NAME);
+  const raw = await readPrivateStateFile(path44, MAX_CATALOG_BYTES, void 0, input).catch(() => null);
   if (raw === null || parseJournal(raw) === null) return;
-  await unlink8(path43).catch(() => {
+  await unlink8(path44).catch(() => {
   });
 }
 function parseJournal(raw) {
@@ -124026,7 +124414,7 @@ function receipt(status2, changed, records) {
     next: { command: "superbee setup" }
   };
 }
-async function migrateUserState(input = homedir27(), hooks = {}) {
+async function migrateUserState(input = homedir30(), hooks = {}) {
   if (staticBuildIdentity().package.name === LEGACY_BRIDGE_PACKAGE_NAME) {
     throw new CliError("NOT_IMPLEMENTED", "state migration is available only from the Superbee package", { help: "npm install -g superbee" });
   }
@@ -124034,9 +124422,9 @@ async function migrateUserState(input = homedir27(), hooks = {}) {
   if (policy.state === "blocked") {
     throw new CliError("CONFLICT", policy.reason ?? "the selected host private-state location is unavailable", { help: `${distributionBinName()} setup` });
   }
-  const canonical = await inspectCanonicalUserStateRoot(input);
+  const canonical2 = await inspectCanonicalUserStateRoot(input);
   const root = canonicalUserStateDir(input);
-  if (canonical === "ready") {
+  if (canonical2 === "ready") {
     const current = await preflightDurableRecords(root, input).catch(() => {
       throw new CliError("CONFLICT", "canonical Superbee user state contains an invalid durable record", { help: `${distributionBinName()} setup` });
     });
@@ -124048,8 +124436,8 @@ async function migrateUserState(input = homedir27(), hooks = {}) {
     const blocked = blockedSource(error51);
     throw new CliError("CONFLICT", blocked.reason, { help: blocked.command });
   });
-  if (records.length === 0 && canonical === "absent") return receipt("nothing_to_migrate", false, []);
-  if (canonical === "conflict") {
+  if (records.length === 0 && canonical2 === "absent") return receipt("nothing_to_migrate", false, []);
+  if (canonical2 === "conflict") {
     let raw;
     try {
       await assertPrivateDirectory(root, input);
@@ -124139,7 +124527,7 @@ var init_user_state_migration = __esm({
 });
 
 // ../cli/src/commands/setup.ts
-import { homedir as homedir28 } from "node:os";
+import { homedir as homedir31 } from "node:os";
 import { parseArgs as parseArgs37 } from "node:util";
 function setupHost(value) {
   return MCP_INSTALL_TARGETS.find((target2) => target2.id === value)?.id;
@@ -124341,7 +124729,7 @@ async function setup(argv2, injected = {}) {
   const deps = {
     stdout,
     cwd: injected.cwd ?? (() => process.cwd()),
-    home: injected.home ?? homedir28,
+    home: injected.home ?? homedir31,
     inspectDistribution: injected.inspectDistribution ?? (() => resolvePersistentInstallAuthority()),
     inspectSkill: injected.inspectSkill ?? ((selectedScope) => inspectSkillStatus(selectedScope)),
     inspectHook: injected.inspectHook ?? ((selectedScope) => inspectHookStatus(selectedScope)),
@@ -124606,13 +124994,13 @@ var init_loopback = __esm({
 });
 
 // ../cli/src/commands/hosted-auth.ts
-import { homedir as homedir29 } from "node:os";
+import { homedir as homedir32 } from "node:os";
 import { parseArgs as parseArgs38 } from "node:util";
 function commandDeps(deps) {
   return {
     stdout: deps.stdout ?? ((text4) => void process.stdout.write(text4)),
     stderr: deps.stderr ?? ((text4) => void process.stderr.write(text4)),
-    auth: deps.auth ?? defaultHostedAuthDeps(homedir29())
+    auth: deps.auth ?? defaultHostedAuthDeps(homedir32())
   };
 }
 function iso(ms) {
@@ -124943,117 +125331,15 @@ Options:
   }
 });
 
-// ../cli/src/hosted/refusals.ts
-import { homedir as homedir30 } from "node:os";
-import { realpath as realpath4 } from "node:fs/promises";
-import path40 from "node:path";
-function docKey(args) {
-  let value;
-  for (let index2 = 0; index2 < args.length; index2 += 1) {
-    const token = args[index2];
-    if (token === "--") break;
-    if (token === "--doc-key") value = args[index2 + 1];
-    else if (token.startsWith("--doc-key=")) value = token.slice("--doc-key=".length);
-  }
-  return value;
-}
-function matchRow(command, args) {
-  const sub = args.find((token) => !token.startsWith("-"));
-  return HOSTED_CHECKOUT_REFUSALS.find((row2) => {
-    if (row2.words[0] !== command) return false;
-    if (row2.when && !row2.when(args)) return false;
-    if (row2.words.length === 1) return true;
-    return row2.words[1] === "*" ? sub !== void 0 : row2.words[1] === sub;
-  });
-}
-function scan2(args) {
-  let dir;
-  for (let index2 = 0; index2 < args.length; index2 += 1) {
-    const token = args[index2];
-    if (token === "--") break;
-    if (token === "--help" || token === "-h" || token === "--remote" || token.startsWith("--remote=")) return { dir, skip: true };
-    if (token === "--dir") dir = args[index2 + 1];
-    else if (token.startsWith("--dir=")) dir = token.slice("--dir=".length);
-  }
-  return { dir, skip: false };
-}
-async function checkoutFor(command, dir, home2, cwd) {
-  let root;
-  try {
-    if (command === "init") root = await realpath4(path40.resolve(cwd, dir ?? "."));
-    else root = (await resolveLocalBundleTarget(dir, cwd)).canonicalRoot;
-  } catch {
-    return null;
-  }
-  return bindingForPath(home2, root);
-}
-function hostedCheckoutRefusal(row2, words, binding) {
-  const details = { reason: row2.reason, command: words, bundle_id: binding.bundle_id, host: binding.origin, checkout: binding.path };
-  if (row2.reason === "checkout_target") {
-    return new CliError("FORBIDDEN", `'${words}' refused: ${row2.why} (bundle ${binding.bundle_id} on ${binding.origin})`, {
-      details,
-      help: "choose another folder for a local bundle"
-    });
-  }
-  return new CliError("FORBIDDEN", `'${words}' cannot sync from a hosted checkout (${row2.why}): do this in the Superbee app`, {
-    details: { ...details, do_this_in: "app" },
-    help: `do this in the Superbee app for bundle ${binding.bundle_id} on ${binding.origin}`
-  });
-}
-async function assertAllowedInHostedCheckout(command, args, context = {}) {
-  const row2 = matchRow(command, args);
-  if (!row2) return;
-  const { dir, skip } = scan2(args);
-  if (skip) return;
-  const binding = await checkoutFor(command, dir, context.home ?? homedir30(), context.cwd ?? process.cwd());
-  if (!binding) return;
-  const sub = row2.words.length > 1 ? args.find((token) => !token.startsWith("-")) : void 0;
-  throw hostedCheckoutRefusal(row2, sub ? `${command} ${sub}` : command, binding);
-}
-var MCP_REGISTRATION, HOSTED_CHECKOUT_REFUSALS;
-var init_refusals = __esm({
-  "../cli/src/hosted/refusals.ts"() {
-    "use strict";
-    init_define_SUPERBEE_BUILD_IDENTITY();
-    init_define_SUPERBEE_UPDATE_POLICY();
-    init_bundle2();
-    init_errors4();
-    init_binding();
-    MCP_REGISTRATION = /* @__PURE__ */ new Set(["install", "status", "uninstall"]);
-    HOSTED_CHECKOUT_REFUSALS = Object.freeze([
-      { words: ["doc", "verify"], reason: "not_syncable", why: "verification is a managed field the host records" },
-      { words: ["kind", "*"], reason: "not_syncable", why: "Kind conventions are edited in the app" },
-      { words: ["recipe", "add"], reason: "not_syncable", why: "recipes change Kind and View conventions, which are edited in the app" },
-      { words: ["recipe", "evolve"], reason: "not_syncable", why: "recipes change Kind and View conventions, which are edited in the app" },
-      { words: ["artifact", "*"], reason: "not_syncable", why: "artifacts carry blobs, which do not sync" },
-      {
-        words: ["promote"],
-        reason: "not_syncable",
-        why: "a key that is not a .md document is stored as a blob, and blobs do not sync",
-        when: (args) => !(docKey(args) ?? "").toLowerCase().endsWith(".md")
-      },
-      { words: ["serve"], reason: "not_syncable", why: "the served bundle accepts writes and deletes that do not sync" },
-      { words: ["ui"], reason: "not_syncable", why: "the local app writes Views and conventions, which do not sync" },
-      {
-        words: ["mcp"],
-        reason: "not_syncable",
-        why: "the local MCP app writes Views and conventions, which do not sync",
-        when: (args) => !MCP_REGISTRATION.has(args.find((token) => !token.startsWith("-")) ?? "")
-      },
-      { words: ["init"], reason: "checkout_target", why: "the folder is a hosted checkout, not a local bundle" }
-    ].map((row2) => Object.freeze({ ...row2, words: Object.freeze([...row2.words]) })));
-  }
-});
-
 // ../cli/src/commands/checkout.ts
-import { homedir as homedir31 } from "node:os";
-import { lstat as lstat6, mkdir as mkdir4, readFile as readFile5, readdir as readdir4, realpath as realpath5, rmdir as rmdir2, stat as stat6, unlink as unlink9 } from "node:fs/promises";
-import path41 from "node:path";
+import { homedir as homedir33 } from "node:os";
+import { lstat as lstat6, mkdir as mkdir4, readFile as readFile5, readdir as readdir4, realpath as realpath8, rmdir as rmdir2, stat as stat7, unlink as unlink9 } from "node:fs/promises";
+import path42 from "node:path";
 import { parseArgs as parseArgs39 } from "node:util";
 function checkoutDeps(partial2) {
   return {
     stdout: partial2.stdout ?? ((text4) => void process.stdout.write(text4)),
-    auth: partial2.auth ?? defaultHostedAuthDeps(homedir31()),
+    auth: partial2.auth ?? defaultHostedAuthDeps(homedir33()),
     cwd: partial2.cwd ?? process.cwd(),
     ...partial2.fetch ? { fetch: partial2.fetch } : {}
   };
@@ -125061,7 +125347,7 @@ function checkoutDeps(partial2) {
 async function entryKind(target2) {
   let info;
   try {
-    info = await stat6(target2);
+    info = await stat7(target2);
   } catch (error51) {
     if (error51.code === "ENOENT") return "absent";
     throw error51;
@@ -125086,7 +125372,7 @@ function nextSteps(folder) {
   return [`${cliInvocation()} list --dir ${commandToken(folder)}`, `${cliInvocation()} status --dir ${commandToken(folder)}`];
 }
 async function assertStandaloneFolder(folder) {
-  const parent = path41.dirname(folder);
+  const parent = path42.dirname(folder);
   const enclosing = await findBundleRoot(parent).catch(() => null);
   if (enclosing) {
     throw new CliError("FORBIDDEN", `refusing to check out inside the local bundle at ${enclosing}`, {
@@ -125118,9 +125404,9 @@ function capabilityRefusal(error51, bundleId, target2, listed, resume2) {
   if (error51 instanceof RemoteError && error51.code === "result_too_large") return tooLarge(bundleId, target2, null);
   return hostedFailure(error51, target2, resume2);
 }
-function tooLarge(bundleId, target2, count2) {
+function tooLarge(bundleId, target2, count3) {
   return new CliError("FORBIDDEN", `hosted bundle '${bundleId}' is too large to check out (over ${CHECKOUT_DOCUMENT_LIMIT} documents)`, {
-    details: { reason: "bundle_too_large", bundle_id: bundleId, host: target2.origin, limit: CHECKOUT_DOCUMENT_LIMIT, ...count2 === null ? {} : { documents: count2 } },
+    details: { reason: "bundle_too_large", bundle_id: bundleId, host: target2.origin, limit: CHECKOUT_DOCUMENT_LIMIT, ...count3 === null ? {} : { documents: count3 } },
     help: "use the Superbee app for this bundle; paged checkout is not available yet"
   });
 }
@@ -125140,7 +125426,7 @@ function lockFailure2(error51, folder) {
   return error51;
 }
 async function canonicalFolder(folder) {
-  const parent = path41.dirname(folder);
+  const parent = path42.dirname(folder);
   await mkdir4(parent, { recursive: true });
   let link3 = false;
   try {
@@ -125148,19 +125434,19 @@ async function canonicalFolder(folder) {
   } catch (error51) {
     if (error51.code !== "ENOENT") throw error51;
   }
-  if (!link3) return path41.join(await realpath5(parent), path41.basename(folder));
+  if (!link3) return path42.join(await realpath8(parent), path42.basename(folder));
   try {
-    return await realpath5(folder);
+    return await realpath8(folder);
   } catch {
     throw new CliError("USAGE", `the --dir folder ${folder} is a symbolic link to a folder that does not exist`, { help: "pass --dir <the real folder>" });
   }
 }
-async function assertReclaimable(home2, binding, canonical) {
-  const identity = await folderIdentity(canonical);
+async function assertReclaimable(home2, binding, canonical2) {
+  const identity = await folderIdentity(canonical2);
   if (identity && sameFolder(identity, binding.folder_identity)) {
-    throw new CliError("ALREADY_EXISTS", `${canonical} is the checkout of '${binding.bundle_id}' with every file removed; that is a pending change, not a stale checkout`, {
+    throw new CliError("ALREADY_EXISTS", `${canonical2} is the checkout of '${binding.bundle_id}' with every file removed; that is a pending change, not a stale checkout`, {
       details: { reason: "emptied_checkout", ...bindingView(binding) },
-      help: `restore the files, or forget the checkout first: ${cliInvocation()} checkout --release ${commandToken(canonical)}`
+      help: `restore the files, or forget the checkout first: ${cliInvocation()} checkout --release ${commandToken(canonical2)}`
     });
   }
   const store = await FileJournaledBackend.open({ directory: checkoutStoreDir(home2, binding.checkout_id) });
@@ -125171,9 +125457,9 @@ async function assertReclaimable(home2, binding, canonical) {
     await store.close();
   }
   if (unsent > 0) {
-    throw new CliError("CONFLICT", `the checkout of '${binding.bundle_id}' at ${canonical} holds ${unsent} change(s) sync has not sent`, {
+    throw new CliError("CONFLICT", `the checkout of '${binding.bundle_id}' at ${canonical2} holds ${unsent} change(s) sync has not sent`, {
       details: { reason: "unsent_changes", unsent, ...bindingView(binding) },
-      help: `to discard them and check out again: ${cliInvocation()} checkout --release ${commandToken(canonical)}`
+      help: `to discard them and check out again: ${cliInvocation()} checkout --release ${commandToken(canonical2)}`
     });
   }
 }
@@ -125184,7 +125470,7 @@ async function removePlaced(folder, placed, createdFolder) {
       if (digestOf(await readFile5(file2)) === digest2) await unlink9(file2);
     } catch {
     }
-    for (let dir = path41.dirname(file2); dir !== folder && dir.startsWith(`${folder}${path41.sep}`); dir = path41.dirname(dir)) dirs.add(dir);
+    for (let dir = path42.dirname(file2); dir !== folder && dir.startsWith(`${folder}${path42.sep}`); dir = path42.dirname(dir)) dirs.add(dir);
   }
   for (const dir of [...dirs].sort((a, b) => b.length - a.length)) await rmdir2(dir).catch(() => {
   });
@@ -125193,32 +125479,32 @@ async function removePlaced(folder, placed, createdFolder) {
   return await entryKind(folder) !== "dir";
 }
 async function release(folderArg, deps, mode) {
-  const folder = path41.resolve(deps.cwd, folderArg);
-  let canonical;
+  const folder = path42.resolve(deps.cwd, folderArg);
+  let canonical2;
   try {
-    canonical = (await lstat6(folder)).isSymbolicLink() ? await realpath5(folder) : path41.join(await realpath5(path41.dirname(folder)), path41.basename(folder));
+    canonical2 = (await lstat6(folder)).isSymbolicLink() ? await realpath8(folder) : path42.join(await realpath8(path42.dirname(folder)), path42.basename(folder));
   } catch {
     try {
-      canonical = path41.join(await realpath5(path41.dirname(folder)), path41.basename(folder));
+      canonical2 = path42.join(await realpath8(path42.dirname(folder)), path42.basename(folder));
     } catch {
-      canonical = folder;
+      canonical2 = folder;
     }
   }
-  const binding = await indexedBindingForPath(deps.auth.home, canonical);
+  const binding = await indexedBindingForPath(deps.auth.home, canonical2);
   if (!binding) {
-    deps.stdout(render({ released: false, folder: canonical, reason: "not a hosted checkout" }, mode));
+    deps.stdout(render({ released: false, folder: canonical2, reason: "not a hosted checkout" }, mode));
     return;
   }
-  await filesystemPushRoleLocks().request(checkoutLockName(canonical), { ifAvailable: true }, async (lock) => {
+  await filesystemPushRoleLocks().request(checkoutLockName(canonical2), { ifAvailable: true }, async (lock) => {
     if (!lock) {
-      throw new CliError("CONFLICT", `another command holds the checkout lock for ${canonical}`, {
-        details: { reason: "checkout_busy", folder: canonical },
+      throw new CliError("CONFLICT", `another command holds the checkout lock for ${canonical2}`, {
+        details: { reason: "checkout_busy", folder: canonical2 },
         help: "wait for it to finish, then retry the same command"
       });
     }
     await releaseCheckout(deps.auth.home, binding);
   }).catch((error51) => {
-    throw lockFailure2(error51, canonical);
+    throw lockFailure2(error51, canonical2);
   });
   deps.stdout(
     render(
@@ -125273,7 +125559,7 @@ async function checkout(argv2, partial2 = {}) {
   }
   const target2 = resolveHostedTarget(hostChoice);
   const prefix = syncRoutePrefix(target2);
-  const folder = path41.resolve(deps.cwd, values.dir ?? bundleId);
+  const folder = path42.resolve(deps.cwd, values.dir ?? bundleId);
   assertBundleOutsidePrivateState(folder, deps.auth.home);
   const resume2 = commandFragment`${cliInvocation()} checkout ${commandToken(bundleId)} --host ${commandToken(hostArgument(target2))} --dir ${commandToken(folder)}${values.workspace !== void 0 ? commandFragment` --workspace ${commandToken(values.workspace)}` : commandFragment``}${values.json ? commandFragment` --json` : commandFragment``}`;
   const found = await entryKind(folder);
@@ -125281,7 +125567,7 @@ async function checkout(argv2, partial2 = {}) {
     throw new CliError("ALREADY_EXISTS", `${folder} exists and is not a folder`, { help: "pass --dir <new folder>" });
   }
   if (found === "dir") {
-    const existing = await bindingForPath(deps.auth.home, await realpath5(folder));
+    const existing = await bindingForPath(deps.auth.home, await realpath8(folder));
     if (existing && sameBundle(existing, target2, bundleId)) {
       deps.stdout(render({ checkout: "unchanged", ...bindingView(existing), help: nextSteps(existing.path) }, mode));
       return;
@@ -125343,36 +125629,36 @@ async function checkout(argv2, partial2 = {}) {
   assertProjectable(ids, bundleId, target2);
   const remembered = identity.tenantIds.length > 1 ? await readDefaultWorkspace(deps.auth.home, target2.origin) : null;
   const workspace = values.workspace ?? (identity.tenantIds.length === 1 ? identity.tenantIds[0] : remembered !== null && identity.tenantIds.includes(remembered) ? remembered : null);
-  const canonical = await canonicalFolder(folder);
+  const canonical2 = await canonicalFolder(folder);
   let createdFolder = false;
   const placed = /* @__PURE__ */ new Map();
   let replaced = null;
-  const result3 = await filesystemPushRoleLocks().request(checkoutLockName(canonical), { ifAvailable: true }, async (lock) => {
+  const result3 = await filesystemPushRoleLocks().request(checkoutLockName(canonical2), { ifAvailable: true }, async (lock) => {
     if (!lock) {
-      throw new CliError("CONFLICT", `another command holds the checkout lock for ${canonical}`, {
-        details: { reason: "checkout_busy", folder: canonical },
+      throw new CliError("CONFLICT", `another command holds the checkout lock for ${canonical2}`, {
+        details: { reason: "checkout_busy", folder: canonical2 },
         help: "wait for it to finish, then retry the same command"
       });
     }
-    const kind2 = await entryKind(canonical);
+    const kind2 = await entryKind(canonical2);
     if (kind2 === "dir" || kind2 === "other") {
-      throw new CliError("ALREADY_EXISTS", `${canonical} is no longer empty`, { details: { reason: "not_empty", folder: canonical }, help: "pass --dir <new or empty folder>" });
+      throw new CliError("ALREADY_EXISTS", `${canonical2} is no longer empty`, { details: { reason: "not_empty", folder: canonical2 }, help: "pass --dir <new or empty folder>" });
     }
-    replaced = await indexedBindingForPath(deps.auth.home, canonical);
+    replaced = await indexedBindingForPath(deps.auth.home, canonical2);
     if (replaced) {
-      await assertReclaimable(deps.auth.home, replaced, canonical);
+      await assertReclaimable(deps.auth.home, replaced, canonical2);
       await releaseCheckout(deps.auth.home, replaced);
     }
     if (kind2 === "absent") {
-      await mkdir4(canonical);
+      await mkdir4(canonical2);
       createdFolder = true;
     }
-    const identityNow = await folderIdentity(canonical);
-    if (!identityNow) throw new CliError("RUNTIME", `${canonical} disappeared during checkout`, { help: "retry the same command" });
+    const identityNow = await folderIdentity(canonical2);
+    if (!identityNow) throw new CliError("RUNTIME", `${canonical2} disappeared during checkout`, { help: "retry the same command" });
     const binding = {
       schema: 1,
       checkout_id: newCheckoutId(),
-      path: canonical,
+      path: canonical2,
       origin: target2.origin,
       audience: target2.audience,
       routes: prefix,
@@ -125397,9 +125683,9 @@ async function checkout(argv2, partial2 = {}) {
       }
       const stored = await store.readHeads({ project: (head) => head.id });
       assertProjectable(stored, bundleId, target2);
-      const exported = await exportFresh(store, canonical, (file2, digest2) => placed.set(file2, digest2));
+      const exported = await exportFresh(store, canonical2, (file2, digest2) => placed.set(file2, digest2));
       if (exported.kept.length > 0) {
-        throw new CliError("CONFLICT", `files appeared in ${canonical} during checkout`, {
+        throw new CliError("CONFLICT", `files appeared in ${canonical2} during checkout`, {
           details: { reason: "folder_changed", kept: exported.kept.slice(0, 20), kept_total: exported.kept.length },
           help: "retry the same command once nothing else writes to the folder"
         });
@@ -125427,22 +125713,24 @@ async function checkout(argv2, partial2 = {}) {
       await store?.close();
     }
   }).catch(async (error51) => {
-    const clean = await removePlaced(canonical, placed, createdFolder);
-    const failure3 = lockFailure2(error51, canonical);
+    const clean = await removePlaced(canonical2, placed, createdFolder);
+    const failure3 = lockFailure2(error51, canonical2);
     if (!clean && failure3 instanceof CliError) {
       throw new CliError(failure3.code, failure3.message, {
-        details: { ...failure3.details ?? {}, partial_folder: canonical },
+        details: { ...failure3.details ?? {}, partial_folder: canonical2 },
         ...failure3.help ? { help: failure3.help } : {}
       });
     }
     throw failure3;
   });
   const replacedBinding = replaced;
+  const cataloged = await registerInCatalog(deps.auth.home, result3.binding);
   deps.stdout(
     render(
       {
         checkout: "created",
         ...bindingView(result3.binding),
+        catalog: cataloged,
         documents: result3.documents,
         root_index: result3.root,
         heads_digest: result3.digest,
@@ -125455,6 +125743,29 @@ async function checkout(argv2, partial2 = {}) {
     )
   );
 }
+function catalogLabels(bundleId) {
+  const base = bundleId.slice(0, 60).replace(/[._-]+$/, "");
+  return [base, ...Array.from({ length: 8 }, (_2, index2) => `${base}-${index2 + 2}`)].filter((label) => {
+    try {
+      assertCatalogLabel(label);
+      return true;
+    } catch {
+      return false;
+    }
+  });
+}
+async function registerInCatalog(home2, binding) {
+  const byHand = `${cliInvocation()} catalog add <label> --dir ${commandToken(binding.path)}`;
+  try {
+    const taken = new Set((await loadCatalog(home2)).entries.map((entry2) => entry2.label));
+    const label = catalogLabels(binding.bundle_id).find((candidate) => !taken.has(candidate));
+    if (label === void 0) return { registered: false, note: "every catalog label for this bundle id is taken", help: byHand };
+    const { entry } = await addCatalogEntry(label, binding.path, { home: home2 });
+    return { registered: true, label: entry.label, id: entry.id, home: "hosted" };
+  } catch (error51) {
+    return { registered: false, note: error51 instanceof Error ? error51.message : String(error51), help: byHand };
+  }
+}
 function assertProjectable(ids, bundleId, target2) {
   let collision;
   try {
@@ -125499,6 +125810,7 @@ var init_checkout = __esm({
     init_refusals();
     init_projection();
     init_sync_scan();
+    init_catalog2();
     CHECKOUT_DOCUMENT_LIMIT = 1e3;
     BUNDLE_ID = /^[a-z][a-z0-9]*(?:[._-][a-z0-9]+)*$/;
     BUNDLE_LIST_CAP = 100;
@@ -125517,12 +125829,17 @@ never in the folder. Re-running for the same folder and bundle is a no-op. A che
 was deleted, or replaced by a new empty folder, is replaced, unless it holds changes sync has not
 sent yet; a checkout emptied in place is refused, because removing every file is a pending edit.
 
+A new checkout is added to your workspace catalog under its bundle id (or the id with -2 to -9
+when that label is taken), so other sessions and the local MCP app can find it; 'catalog list'
+shows it with home: hosted. The local MCP app serves it read-only.
+
 --release <folder> forgets the checkout at that folder: its private binding and store are removed
 and the folder's files are left as they are. Releasing a folder that is not a checkout is a no-op.
 
 'superbee sync --dir <folder>' sends your edits and brings in the host's. Commands whose effect
-sync cannot send (doc delete, delete, doc verify, kind, recipe add/evolve, artifact, promote to a
-non-.md key, serve, ui, mcp) are refused in it with "do this in the app". Bundles over ${CHECKOUT_DOCUMENT_LIMIT} documents, bundles the host does not
+sync cannot send (doc verify, kind, recipe add/evolve, artifact, promote or delete of a non-.md
+key, index generate, serve, ui, mcp) are refused in it with "do this in the app". Deleting a
+document file, by hand or with doc delete or delete --doc-key <id>.md, syncs as a delete. Bundles over ${CHECKOUT_DOCUMENT_LIMIT} documents, bundles the host does not
 serve to a checkout (such as one with a Git source), and ids in two of your workspaces are refused.
 
 Options:
@@ -125542,7 +125859,7 @@ Examples:
     REFUSED_SUMMARY = Object.freeze(
       HOSTED_CHECKOUT_REFUSALS.filter((row2) => row2.reason !== "checkout_target").map((row2) => {
         const words = row2.words.join(" ");
-        return row2.words[0] === "promote" ? "promote (non-.md key)" : words;
+        return row2.words[0] === "promote" || row2.words[0] === "delete" ? `${words} (non-.md key)` : words;
       })
     );
   }
@@ -125784,9 +126101,9 @@ __export(managed_worker_exports, {
   runManagedUiWorker: () => runManagedUiWorker,
   runManagedUiWorkerInput: () => runManagedUiWorkerInput
 });
-import { stat as stat7, realpath as realpath6 } from "node:fs/promises";
+import { stat as stat8, realpath as realpath9 } from "node:fs/promises";
 import { randomUUID as randomUUID6 } from "node:crypto";
-import path42 from "node:path";
+import path43 from "node:path";
 function object4(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -125814,7 +126131,7 @@ function parseManagedUiWorkerInput(raw) {
   if (!object4(launchIdentity) || Object.keys(launchIdentity).sort().join(",") !== "canonical_root,dev,ino") {
     throw new Error("managed UI startup launch identity has an unsupported shape");
   }
-  if (typeof launchIdentity.canonical_root !== "string" || !path42.isAbsolute(launchIdentity.canonical_root)) {
+  if (typeof launchIdentity.canonical_root !== "string" || !path43.isAbsolute(launchIdentity.canonical_root)) {
     throw new Error("managed UI startup canonical root is invalid");
   }
   if (typeof launchIdentity.dev !== "string" || !DECIMAL_IDENTITY.test(launchIdentity.dev)) {
@@ -125829,10 +126146,10 @@ function parseManagedUiWorkerInput(raw) {
   if (authority.mode !== "dir" || authority.protocol !== MANAGED_UI_PROTOCOL) {
     throw new Error("managed UI startup authority protocol is invalid");
   }
-  if (typeof authority.bundle_root !== "string" || !path42.isAbsolute(authority.bundle_root)) {
+  if (typeof authority.bundle_root !== "string" || !path43.isAbsolute(authority.bundle_root)) {
     throw new Error("managed UI startup bundle root is invalid");
   }
-  if (typeof authority.launch_root !== "string" || !path42.isAbsolute(authority.launch_root)) {
+  if (typeof authority.launch_root !== "string" || !path43.isAbsolute(authority.launch_root)) {
     throw new Error("managed UI startup launch root is invalid");
   }
   if (!(authority.actor === null || typeof authority.actor === "string" && authority.actor.length > 0 && authority.actor.length <= 1024)) {
@@ -125868,8 +126185,8 @@ async function adoptionLifecycle(handle, deadlineTimer) {
   }
 }
 async function assertFrozenLaunchIdentity(input) {
-  const canonicalRoot = await realpath6(input.authority.launch_root);
-  const metadata = await stat7(canonicalRoot, { bigint: true });
+  const canonicalRoot = await realpath9(input.authority.launch_root);
+  const metadata = await stat8(canonicalRoot, { bigint: true });
   if (canonicalRoot !== input.authority.bundle_root || canonicalRoot !== input.launch_identity.canonical_root || !metadata.isDirectory() || metadata.dev.toString() !== input.launch_identity.dev || metadata.ino.toString() !== input.launch_identity.ino) throw new Error("managed UI launch route changed after controller selection");
 }
 async function runManagedUiWorkerInput(input, runtime = {}) {