tandem-editor 0.14.0 → 0.14.2

package/dist/server/index.js

@@ -40,7 +40,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // src/shared/constants.ts
-var DEFAULT_WS_PORT, DEFAULT_MCP_PORT, TANDEM_REPO_URL, TANDEM_ISSUES_NEW_URL, SUPPORTED_EXTENSIONS, MAX_FILE_SIZE, SESSION_MAX_AGE, TANDEM_MODE_DEFAULT, SELECTION_DWELL_DEFAULT_MS, SELECTION_DWELL_MIN_MS, SELECTION_DWELL_MAX_MS, CHARS_PER_PAGE, LARGE_FILE_PAGE_THRESHOLD, VERY_LARGE_FILE_PAGE_THRESHOLD, CTRL_ROOM, Y_MAP_ANNOTATIONS, Y_MAP_AWARENESS, Y_MAP_USER_AWARENESS, Y_MAP_MODE, Y_MAP_DWELL_MS, Y_MAP_CHAT, Y_MAP_DOCUMENT_META, Y_MAP_ANNOTATION_REPLIES, Y_MAP_SAVED_AT_VERSION, Y_MAP_AUTHORSHIP, Y_MAP_SELECTION, Y_MAP_ACTIVITY, Y_MAP_CLAUDE, Y_MAP_OPEN_DOCUMENTS, Y_MAP_ACTIVE_DOCUMENT_ID, Y_MAP_ACTIVE_DOCUMENT_EPOCH, Y_MAP_READ_ONLY, Y_MAP_STORE_READ_ONLY, Y_MAP_EXTERNAL_CONFLICT, NOTIFICATION_BUFFER_SIZE, ACTIVITY_INFO_TTL_MS, TUTORIAL_ANNOTATION_PREFIX, CHANNEL_EVENT_BUFFER_SIZE, CHANNEL_EVENT_BUFFER_AGE_MS, CHANNEL_SSE_KEEPALIVE_MS, TOKEN_FILE_NAME, DEFAULT_BIND_HOST, TANDEM_ALLOW_UNAUTHENTICATED_LAN_ENV, TANDEM_DISABLE_FIRST_RUN_WIZARD_ENV, TAURI_HOSTNAME;
+var DEFAULT_WS_PORT, DEFAULT_MCP_PORT, TANDEM_REPO_URL, TANDEM_ISSUES_NEW_URL, SUPPORTED_EXTENSIONS, MAX_FILE_SIZE, SESSION_MAX_AGE, TANDEM_MODE_DEFAULT, SELECTION_DWELL_DEFAULT_MS, SELECTION_DWELL_MIN_MS, SELECTION_DWELL_MAX_MS, CHARS_PER_PAGE, LARGE_FILE_PAGE_THRESHOLD, VERY_LARGE_FILE_PAGE_THRESHOLD, CTRL_ROOM, Y_MAP_ANNOTATIONS, Y_MAP_AWARENESS, Y_MAP_USER_AWARENESS, Y_MAP_MODE, Y_MAP_DWELL_MS, Y_MAP_CHAT, Y_MAP_DOCUMENT_META, Y_MAP_ANNOTATION_REPLIES, Y_MAP_SAVED_AT_VERSION, Y_MAP_AUTHORSHIP, Y_MAP_SELECTION, Y_MAP_ACTIVITY, Y_MAP_CLAUDE, Y_MAP_OPEN_DOCUMENTS, Y_MAP_ACTIVE_DOCUMENT_ID, Y_MAP_ACTIVE_DOCUMENT_EPOCH, Y_MAP_READ_ONLY, Y_MAP_STORE_READ_ONLY, Y_MAP_EXTERNAL_CONFLICT, NOTIFICATION_BUFFER_SIZE, ACTIVITY_INFO_TTL_MS, TUTORIAL_ANNOTATION_PREFIX, CHANNEL_EVENT_BUFFER_SIZE, CHANNEL_EVENT_BUFFER_AGE_MS, CHANNEL_SSE_KEEPALIVE_MS, TOKEN_FILE_NAME, DEFAULT_BIND_HOST, TANDEM_ALLOW_UNAUTHENTICATED_LAN_ENV, TANDEM_DISABLE_FIRST_RUN_WIZARD_ENV, TAURI_HOSTNAME, TAURI_LINUX_ORIGIN;
 var init_constants = __esm({
   "src/shared/constants.ts"() {
     "use strict";
@@ -89,6 +89,7 @@ var init_constants = __esm({
     TANDEM_ALLOW_UNAUTHENTICATED_LAN_ENV = "TANDEM_ALLOW_UNAUTHENTICATED_LAN";
     TANDEM_DISABLE_FIRST_RUN_WIZARD_ENV = "TANDEM_DISABLE_FIRST_RUN_WIZARD";
     TAURI_HOSTNAME = "tauri.localhost";
+    TAURI_LINUX_ORIGIN = "tauri://localhost";
   }
 });
 
@@ -1135,14 +1136,14 @@ var callAll, id, isOneOf;
 var init_function = __esm({
   "node_modules/lib0/function.js"() {
     "use strict";
-    callAll = (fs19, args2, i = 0) => {
+    callAll = (fs20, args2, i = 0) => {
       try {
-        for (; i < fs19.length; i++) {
-          fs19[i](...args2);
+        for (; i < fs20.length; i++) {
+          fs20[i](...args2);
         }
       } finally {
-        if (i < fs19.length) {
-          callAll(fs19, args2, i + 1);
+        if (i < fs20.length) {
+          callAll(fs20, args2, i + 1);
         }
       }
     };
@@ -3167,15 +3168,15 @@ var init_yjs = __esm({
           sortAndMergeDeleteSet(ds);
           transaction.afterState = getStateVector(transaction.doc.store);
           doc.emit("beforeObserverCalls", [transaction, doc]);
-          const fs19 = [];
+          const fs20 = [];
           transaction.changed.forEach(
-            (subs, itemtype) => fs19.push(() => {
+            (subs, itemtype) => fs20.push(() => {
               if (itemtype._item === null || !itemtype._item.deleted) {
                 itemtype._callObserver(transaction, subs);
               }
             })
           );
-          fs19.push(() => {
+          fs20.push(() => {
             transaction.changedParentTypes.forEach((events2, type3) => {
               if (type3._dEH.l.length > 0 && (type3._item === null || !type3._item.deleted)) {
                 events2 = events2.filter(
@@ -3186,19 +3187,19 @@ var init_yjs = __esm({
                   event._path = null;
                 });
                 events2.sort((event1, event2) => event1.path.length - event2.path.length);
-                fs19.push(() => {
+                fs20.push(() => {
                   callEventHandlerListeners(type3._dEH, events2, transaction);
                 });
               }
             });
-            fs19.push(() => doc.emit("afterTransaction", [transaction, doc]));
-            fs19.push(() => {
+            fs20.push(() => doc.emit("afterTransaction", [transaction, doc]));
+            fs20.push(() => {
               if (transaction._needFormattingCleanup) {
                 cleanupYTextAfterTransaction(transaction);
               }
             });
           });
-          callAll(fs19, []);
+          callAll(fs20, []);
         } finally {
           if (doc.gc) {
             tryGcDeleteSet(ds, store, doc.gcFilter);
@@ -3739,10 +3740,10 @@ var init_yjs = __esm({
       }
     };
     getPathTo = (parent, child) => {
-      const path30 = [];
+      const path31 = [];
       while (child._item !== null && child !== parent) {
         if (child._item.parentSub !== null) {
-          path30.unshift(child._item.parentSub);
+          path31.unshift(child._item.parentSub);
         } else {
           let i = 0;
           let c = (
@@ -3755,12 +3756,12 @@ var init_yjs = __esm({
             }
             c = c.right;
           }
-          path30.unshift(i);
+          path31.unshift(i);
         }
         child = /** @type {AbstractType<any>} */
         child._item.parent;
       }
-      return path30;
+      return path31;
     };
     warnPrematureAccess = () => {
       warn("Invalid access: Add Yjs type to a document before reading data.");
@@ -8528,7 +8529,7 @@ function transformGfmAutolinkLiterals(tree) {
     { ignore: ["link", "linkReference"] }
   );
 }
-function findUrl(_3, protocol, domain2, path30, match) {
+function findUrl(_3, protocol, domain2, path31, match) {
   let prefix = "";
   if (!previous(match)) {
     return false;
@@ -8541,7 +8542,7 @@ function findUrl(_3, protocol, domain2, path30, match) {
   if (!isCorrectDomain(domain2)) {
     return false;
   }
-  const parts = splitUrl(domain2 + path30);
+  const parts = splitUrl(domain2 + path31);
   if (!parts[0]) return false;
   const result2 = {
     type: "link",
@@ -20347,8 +20348,8 @@ function assertNonEmpty(part, name2) {
     throw new Error("`" + name2 + "` cannot be empty");
   }
 }
-function assertPath(path30, name2) {
-  if (!path30) {
+function assertPath(path31, name2) {
+  if (!path31) {
     throw new Error("Setting `" + name2 + "` requires `path` to be set too");
   }
 }
@@ -20534,13 +20535,13 @@ var init_lib21 = __esm({
        * @returns {undefined}
        *   Nothing.
        */
-      set path(path30) {
-        if (isUrl(path30)) {
-          path30 = fileURLToPath(path30);
+      set path(path31) {
+        if (isUrl(path31)) {
+          path31 = fileURLToPath(path31);
         }
-        assertNonEmpty(path30, "path");
-        if (this.path !== path30) {
-          this.history.push(path30);
+        assertNonEmpty(path31, "path");
+        if (this.path !== path31) {
+          this.history.push(path31);
         }
       }
       /**
@@ -23310,8 +23311,8 @@ var init_tap = __esm({
 });
 
 // node_modules/underscore/modules/toPath.js
-function toPath(path30) {
-  return isArray_default(path30) ? path30 : [path30];
+function toPath(path31) {
+  return isArray_default(path31) ? path31 : [path31];
 }
 var init_toPath = __esm({
   "node_modules/underscore/modules/toPath.js"() {
@@ -23323,8 +23324,8 @@ var init_toPath = __esm({
 });
 
 // node_modules/underscore/modules/_toPath.js
-function toPath2(path30) {
-  return _.toPath(path30);
+function toPath2(path31) {
+  return _.toPath(path31);
 }
 var init_toPath2 = __esm({
   "node_modules/underscore/modules/_toPath.js"() {
@@ -23335,11 +23336,11 @@ var init_toPath2 = __esm({
 });
 
 // node_modules/underscore/modules/_deepGet.js
-function deepGet(obj2, path30) {
-  var length3 = path30.length;
+function deepGet(obj2, path31) {
+  var length3 = path31.length;
   for (var i = 0; i < length3; i++) {
     if (obj2 == null) return void 0;
-    obj2 = obj2[path30[i]];
+    obj2 = obj2[path31[i]];
   }
   return length3 ? obj2 : void 0;
 }
@@ -23350,8 +23351,8 @@ var init_deepGet = __esm({
 });
 
 // node_modules/underscore/modules/get.js
-function get(object4, path30, defaultValue) {
-  var value = deepGet(object4, toPath2(path30));
+function get(object4, path31, defaultValue) {
+  var value = deepGet(object4, toPath2(path31));
   return isUndefined(value) ? defaultValue : value;
 }
 var init_get = __esm({
@@ -23364,11 +23365,11 @@ var init_get = __esm({
 });
 
 // node_modules/underscore/modules/has.js
-function has2(obj2, path30) {
-  path30 = toPath2(path30);
-  var length3 = path30.length;
+function has2(obj2, path31) {
+  path31 = toPath2(path31);
+  var length3 = path31.length;
   for (var i = 0; i < length3; i++) {
-    var key = path30[i];
+    var key = path31[i];
     if (!has(obj2, key)) return false;
     obj2 = obj2[key];
   }
@@ -23408,10 +23409,10 @@ var init_matcher = __esm({
 });
 
 // node_modules/underscore/modules/property.js
-function property(path30) {
-  path30 = toPath2(path30);
+function property(path31) {
+  path31 = toPath2(path31);
   return function(obj2) {
-    return deepGet(obj2, path30);
+    return deepGet(obj2, path31);
   };
 }
 var init_property = __esm({
@@ -23527,8 +23528,8 @@ var init_noop = __esm({
 // node_modules/underscore/modules/propertyOf.js
 function propertyOf(obj2) {
   if (obj2 == null) return noop;
-  return function(path30) {
-    return get(obj2, path30);
+  return function(path31) {
+    return get(obj2, path31);
   };
 }
 var init_propertyOf = __esm({
@@ -23733,14 +23734,14 @@ var init_template = __esm({
 });
 
 // node_modules/underscore/modules/result.js
-function result(obj2, path30, fallback) {
-  path30 = toPath2(path30);
-  var length3 = path30.length;
+function result(obj2, path31, fallback) {
+  path31 = toPath2(path31);
+  var length3 = path31.length;
   if (!length3) {
     return isFunction_default(fallback) ? fallback.call(obj2) : fallback;
   }
   for (var i = 0; i < length3; i++) {
-    var prop = obj2 == null ? void 0 : obj2[path30[i]];
+    var prop = obj2 == null ? void 0 : obj2[path31[i]];
     if (prop === void 0) {
       prop = fallback;
       i = length3;
@@ -24464,14 +24465,14 @@ var init_invoke = __esm({
     init_map2();
     init_deepGet();
     init_toPath2();
-    invoke_default = restArguments(function(obj2, path30, args2) {
+    invoke_default = restArguments(function(obj2, path31, args2) {
       var contextPath, func;
-      if (isFunction_default(path30)) {
-        func = path30;
+      if (isFunction_default(path31)) {
+        func = path31;
       } else {
-        path30 = toPath2(path30);
-        contextPath = path30.slice(0, -1);
-        path30 = path30[path30.length - 1];
+        path31 = toPath2(path31);
+        contextPath = path31.slice(0, -1);
+        path31 = path31[path31.length - 1];
       }
       return map4(obj2, function(context2) {
         var method = func;
@@ -24480,7 +24481,7 @@ var init_invoke = __esm({
             context2 = deepGet(context2, contextPath);
           }
           if (context2 == null) return void 0;
-          method = context2[path30];
+          method = context2[path31];
         }
         return method == null ? method : method.apply(context2, args2);
       });
@@ -33998,8 +33999,8 @@ var require_utils = __commonJS({
       var result2 = transform2[inputType][outputType](input);
       return result2;
     };
-    exports3.resolve = function(path30) {
-      var parts = path30.split("/");
+    exports3.resolve = function(path31) {
+      var parts = path31.split("/");
       var result2 = [];
       for (var index2 = 0; index2 < parts.length; index2++) {
         var part = parts[index2];
@@ -39852,18 +39853,18 @@ var require_object = __commonJS({
       var object4 = new ZipObject(name2, zipObjectContent, o);
       this.files[name2] = object4;
     };
-    var parentFolder = function(path30) {
-      if (path30.slice(-1) === "/") {
-        path30 = path30.substring(0, path30.length - 1);
+    var parentFolder = function(path31) {
+      if (path31.slice(-1) === "/") {
+        path31 = path31.substring(0, path31.length - 1);
       }
-      var lastSlash = path30.lastIndexOf("/");
-      return lastSlash > 0 ? path30.substring(0, lastSlash) : "";
+      var lastSlash = path31.lastIndexOf("/");
+      return lastSlash > 0 ? path31.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path30) {
-      if (path30.slice(-1) !== "/") {
-        path30 += "/";
+    var forceTrailingSlash = function(path31) {
+      if (path31.slice(-1) !== "/") {
+        path31 += "/";
       }
-      return path30;
+      return path31;
     };
     var folderAdd = function(name2, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -40902,27 +40903,27 @@ var require_zipfile = __commonJS({
         };
       });
     }
-    function splitPath2(path30) {
-      var lastIndex = path30.lastIndexOf("/");
+    function splitPath2(path31) {
+      var lastIndex = path31.lastIndexOf("/");
       if (lastIndex === -1) {
-        return { dirname: "", basename: path30 };
+        return { dirname: "", basename: path31 };
       } else {
         return {
-          dirname: path30.substring(0, lastIndex),
-          basename: path30.substring(lastIndex + 1)
+          dirname: path31.substring(0, lastIndex),
+          basename: path31.substring(lastIndex + 1)
         };
       }
     }
     function joinPath() {
-      var nonEmptyPaths = Array.prototype.filter.call(arguments, function(path30) {
-        return path30;
+      var nonEmptyPaths = Array.prototype.filter.call(arguments, function(path31) {
+        return path31;
       });
       var relevantPaths = [];
-      nonEmptyPaths.forEach(function(path30) {
-        if (/^\//.test(path30)) {
-          relevantPaths = [path30];
+      nonEmptyPaths.forEach(function(path31) {
+        if (/^\//.test(path31)) {
+          relevantPaths = [path31];
         } else {
-          relevantPaths.push(path30);
+          relevantPaths.push(path31);
         }
       });
       return relevantPaths.join("/");
@@ -48347,9 +48348,9 @@ var require_office_xml_reader = __commonJS({
         return collapseAlternateContent(document4)[0];
       });
     }
-    function readXmlFromZipFile(docxFile, path30) {
-      if (docxFile.exists(path30)) {
-        return docxFile.read(path30, "utf-8").then(stripUtf8Bom).then(read);
+    function readXmlFromZipFile(docxFile, path31) {
+      if (docxFile.exists(path31)) {
+        return docxFile.read(path31, "utf-8").then(stripUtf8Bom).then(read);
       } else {
         return promises.resolve(null);
       }
@@ -50116,10 +50117,10 @@ var require_body_reader = __commonJS({
         }
       }
       function findEmbeddedImageFile(relationshipId) {
-        var path30 = uris.uriToZipEntryName("word", relationships.findTargetByRelationshipId(relationshipId));
+        var path31 = uris.uriToZipEntryName("word", relationships.findTargetByRelationshipId(relationshipId));
         return {
-          path: path30,
-          read: docxFile.read.bind(docxFile, path30)
+          path: path31,
+          read: docxFile.read.bind(docxFile, path31)
         };
       }
       function readImage(imageFile, altText) {
@@ -50359,12 +50360,12 @@ var require_content_types_reader = __commonJS({
     }
     function contentTypes(overrides, extensionDefaults) {
       return {
-        findContentType: function(path30) {
-          var overrideContentType = overrides[path30];
+        findContentType: function(path31) {
+          var overrideContentType = overrides[path31];
           if (overrideContentType) {
             return overrideContentType;
           } else {
-            var pathParts = path30.split(".");
+            var pathParts = path31.split(".");
             var extension3 = pathParts[pathParts.length - 1];
             if (extensionDefaults.hasOwnProperty(extension3)) {
               return extensionDefaults[extension3];
@@ -50611,12 +50612,12 @@ var require_comments_reader = __commonJS({
 var require_path_is_absolute = __commonJS({
   "node_modules/path-is-absolute/index.js"(exports3, module3) {
     "use strict";
-    function posix2(path30) {
-      return path30.charAt(0) === "/";
+    function posix2(path31) {
+      return path31.charAt(0) === "/";
     }
-    function win32(path30) {
+    function win32(path31) {
       var splitDeviceRe = /^([a-zA-Z]:|[\\\/]{2}[^\\\/]+[\\\/]+[^\\\/]+)?([\\\/])?([\s\S]*?)$/;
-      var result2 = splitDeviceRe.exec(path30);
+      var result2 = splitDeviceRe.exec(path31);
       var device = result2[1] || "";
       var isUnc = Boolean(device && device.charAt(1) !== ":");
       return Boolean(result2[2] || isUnc);
@@ -50631,7 +50632,7 @@ var require_path_is_absolute = __commonJS({
 var require_files = __commonJS({
   "node_modules/mammoth/lib/docx/files.js"(exports3) {
     "use strict";
-    var fs19 = __require("fs");
+    var fs20 = __require("fs");
     var url = __require("url");
     var os5 = __require("os");
     var dirname6 = __require("path").dirname;
@@ -50651,19 +50652,19 @@ var require_files = __commonJS({
       }
       var base = options.relativeToFile ? dirname6(options.relativeToFile) : null;
       function read(uri2, encoding) {
-        return resolveUri(uri2).then(function(path30) {
-          return readFile4(path30, encoding).caught(function(error5) {
+        return resolveUri(uri2).then(function(path31) {
+          return readFile4(path31, encoding).caught(function(error5) {
             var message = "could not open external image: '" + uri2 + "' (document directory: '" + base + "')\n" + error5.message;
             return promises.reject(new Error(message));
           });
         });
       }
       function resolveUri(uri2) {
-        var path30 = uriToPath(uri2);
-        if (isAbsolutePath(path30)) {
-          return promises.resolve(path30);
+        var path31 = uriToPath(uri2);
+        if (isAbsolutePath(path31)) {
+          return promises.resolve(path31);
         } else if (base) {
-          return promises.resolve(resolvePath(base, path30));
+          return promises.resolve(resolvePath(base, path31));
         } else {
           return promises.reject(new Error("could not find external image '" + uri2 + "', path of input document is unknown"));
         }
@@ -50672,18 +50673,18 @@ var require_files = __commonJS({
         read
       };
     }
-    var readFile4 = promises.promisify(fs19.readFile.bind(fs19));
+    var readFile4 = promises.promisify(fs20.readFile.bind(fs20));
     function uriToPath(uriString, platform3) {
       if (!platform3) {
         platform3 = os5.platform();
       }
       var uri2 = url.parse(uriString);
       if (isLocalFileUri(uri2) || isRelativeUri(uri2)) {
-        var path30 = decodeURIComponent(uri2.path);
-        if (platform3 === "win32" && /^\/[a-z]:/i.test(path30)) {
-          return path30.slice(1);
+        var path31 = decodeURIComponent(uri2.path);
+        if (platform3 === "win32" && /^\/[a-z]:/i.test(path31)) {
+          return path31.slice(1);
         } else {
-          return path30;
+          return path31;
         }
       } else {
         throw new Error("Could not convert URI to path: " + uriString);
@@ -50884,18 +50885,18 @@ var require_docx_reader = __commonJS({
       readElement: contentTypesReader.readContentTypesFromXml,
       defaultValue: contentTypesReader.defaultContentTypes
     });
-    function readNumberingFromZipFile(zipFile, path30, styles) {
+    function readNumberingFromZipFile(zipFile, path31, styles) {
       return xmlFileReader({
-        filename: path30,
+        filename: path31,
         readElement: function(element) {
           return numberingXml.readNumberingXml(element, { styles });
         },
         defaultValue: numberingXml.defaultNumbering
       })(zipFile);
     }
-    function readStylesFromZipFile(zipFile, path30) {
+    function readStylesFromZipFile(zipFile, path31) {
       return xmlFileReader({
-        filename: path30,
+        filename: path31,
         readElement: stylesReader.readStylesXml,
         defaultValue: stylesReader.defaultStyles
       })(zipFile);
@@ -50927,10 +50928,10 @@ var require_style_map = __commonJS({
       });
     }
     function updateRelationships(docxFile) {
-      var path30 = "word/_rels/document.xml.rels";
+      var path31 = "word/_rels/document.xml.rels";
       var relationshipsUri = "http://schemas.openxmlformats.org/package/2006/relationships";
       var relationshipElementName = "{" + relationshipsUri + "}Relationship";
-      return docxFile.read(path30, "utf8").then(xml2.readString).then(function(relationshipsContainer) {
+      return docxFile.read(path31, "utf8").then(xml2.readString).then(function(relationshipsContainer) {
         var relationships = relationshipsContainer.children;
         addOrUpdateElement(relationships, relationshipElementName, "Id", {
           "Id": "rMammothStyleMap",
@@ -50938,21 +50939,21 @@ var require_style_map = __commonJS({
           "Target": styleMapAbsolutePath
         });
         var namespaces = { "": relationshipsUri };
-        return docxFile.write(path30, xml2.writeString(relationshipsContainer, namespaces));
+        return docxFile.write(path31, xml2.writeString(relationshipsContainer, namespaces));
       });
     }
     function updateContentTypes(docxFile) {
-      var path30 = "[Content_Types].xml";
+      var path31 = "[Content_Types].xml";
       var contentTypesUri = "http://schemas.openxmlformats.org/package/2006/content-types";
       var overrideName = "{" + contentTypesUri + "}Override";
-      return docxFile.read(path30, "utf8").then(xml2.readString).then(function(typesElement) {
+      return docxFile.read(path31, "utf8").then(xml2.readString).then(function(typesElement) {
         var children = typesElement.children;
         addOrUpdateElement(children, overrideName, "PartName", {
           "PartName": styleMapAbsolutePath,
           "ContentType": "text/prs.mammoth.style-map"
         });
         var namespaces = { "": contentTypesUri };
-        return docxFile.write(path30, xml2.writeString(typesElement, namespaces));
+        return docxFile.write(path31, xml2.writeString(typesElement, namespaces));
       });
     }
     function addOrUpdateElement(elements, name2, identifyingAttribute, attributes) {
@@ -51649,9 +51650,9 @@ var require_document_to_html = __commonJS({
         };
         var paths = [];
         if (run2.highlight !== null) {
-          var path30 = findHtmlPath({ type: "highlight", color: run2.highlight });
-          if (path30) {
-            paths.push(path30);
+          var path31 = findHtmlPath({ type: "highlight", color: run2.highlight });
+          if (path31) {
+            paths.push(path31);
           }
         }
         if (run2.isSmallCaps) {
@@ -51686,15 +51687,15 @@ var require_document_to_html = __commonJS({
           messages.push(unrecognisedStyleWarning("run", run2));
         }
         paths.push(stylePath);
-        paths.forEach(function(path31) {
-          nodes = path31.wrap.bind(path31, nodes);
+        paths.forEach(function(path32) {
+          nodes = path32.wrap.bind(path32, nodes);
         });
         return nodes();
       }
       function findHtmlPathForRunProperty(elementType, defaultTagName) {
-        var path30 = findHtmlPath({ type: elementType });
-        if (path30) {
-          return path30;
+        var path31 = findHtmlPath({ type: elementType });
+        if (path31) {
+          return path31;
         } else if (defaultTagName) {
           return htmlPaths.element(defaultTagName, {}, { fresh: false });
         } else {
@@ -53414,11 +53415,11 @@ var require_options_reader = __commonJS({
 var require_unzip = __commonJS({
   "node_modules/mammoth/lib/unzip.js"(exports3) {
     "use strict";
-    var fs19 = __require("fs");
+    var fs20 = __require("fs");
     var promises = require_promises();
     var zipfile = require_zipfile();
     exports3.openZip = openZip;
-    var readFile4 = promises.promisify(fs19.readFile);
+    var readFile4 = promises.promisify(fs20.readFile);
     function openZip(options) {
       if (options.path) {
         return readFile4(options.path).then(zipfile.openArrayBuffer);
@@ -57355,8 +57356,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params2) => {
-      const { data, path: path30, errorMaps, issueData } = params2;
-      const fullPath = [...path30, ...issueData.path || []];
+      const { data, path: path31, errorMaps, issueData } = params2;
+      const fullPath = [...path31, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -57667,11 +57668,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path30, key) {
+      constructor(parent, value, path31, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path30;
+        this._path = path31;
         this._key = key;
       }
       get path() {
@@ -72556,8 +72557,8 @@ function requireHash() {
   })(hash$1);
   return hash$1;
 }
-function commonjsRequire(path30) {
-  throw new Error('Could not dynamically require "' + path30 + '". Please configure the dynamicRequireTargets or/and ignoreDynamicRequires option of @rollup/plugin-commonjs appropriately for this require call to work.');
+function commonjsRequire(path31) {
+  throw new Error('Could not dynamically require "' + path31 + '". Please configure the dynamicRequireTargets or/and ignoreDynamicRequires option of @rollup/plugin-commonjs appropriately for this require call to work.');
 }
 function requireJszip_min() {
   if (hasRequiredJszip_min) return jszip_min.exports;
@@ -84014,6 +84015,38 @@ var init_platform = __esm({
   }
 });
 
+// src/server/annotations/lockfile.ts
+function lockfilePayload() {
+  return JSON.stringify({ pid: process.pid, startedAtMs: Date.now(), app: LOCK_APP_ID });
+}
+function parseLockfile(raw) {
+  const trimmed = raw.trim();
+  if (trimmed.startsWith("{")) {
+    try {
+      const parsed = JSON.parse(trimmed);
+      const pid2 = parsed.pid;
+      if (typeof pid2 !== "number" || !Number.isInteger(pid2) || pid2 <= 0) return null;
+      return {
+        pid: pid2,
+        startedAtMs: typeof parsed.startedAtMs === "number" ? parsed.startedAtMs : void 0,
+        app: typeof parsed.app === "string" ? parsed.app : void 0
+      };
+    } catch {
+      return null;
+    }
+  }
+  const pid = Number.parseInt(trimmed, 10);
+  if (!Number.isFinite(pid) || pid <= 0) return null;
+  return { pid };
+}
+var LOCK_APP_ID;
+var init_lockfile = __esm({
+  "src/server/annotations/lockfile.ts"() {
+    "use strict";
+    LOCK_APP_ID = "tandem";
+  }
+});
+
 // src/server/annotations/process-identity.ts
 import { execFile } from "child_process";
 import fs2 from "fs/promises";
@@ -84110,29 +84143,6 @@ async function ensureDirReady() {
   await fs3.mkdir(getAnnotationsDir(), { recursive: true });
   annotationsDirReady = true;
 }
-function lockfilePayload() {
-  return JSON.stringify({ pid: process.pid, startedAtMs: Date.now(), app: LOCK_APP_ID });
-}
-function parseLockfile(raw) {
-  const trimmed = raw.trim();
-  if (trimmed.startsWith("{")) {
-    try {
-      const parsed = JSON.parse(trimmed);
-      const pid2 = parsed.pid;
-      if (typeof pid2 !== "number" || !Number.isInteger(pid2) || pid2 <= 0) return null;
-      return {
-        pid: pid2,
-        startedAtMs: typeof parsed.startedAtMs === "number" ? parsed.startedAtMs : void 0,
-        app: typeof parsed.app === "string" ? parsed.app : void 0
-      };
-    } catch {
-      return null;
-    }
-  }
-  const pid = Number.parseInt(trimmed, 10);
-  if (!Number.isFinite(pid) || pid <= 0) return null;
-  return { pid };
-}
 function isPidAlive(pid) {
   try {
     process.kill(pid, 0);
@@ -84488,13 +84498,14 @@ async function closeStore(docHash2) {
     }
   }
 }
-var DEBOUNCE_MS, NOTIFY_THROTTLE_MS, DISABLE_AFTER_FAILURES, LOCK_FILE, annotationsDirReady, readOnly, pending, failureState, LOCK_APP_ID, reclaimInFlight;
+var DEBOUNCE_MS, NOTIFY_THROTTLE_MS, DISABLE_AFTER_FAILURES, LOCK_FILE, annotationsDirReady, readOnly, pending, failureState, reclaimInFlight;
 var init_store = __esm({
   "src/server/annotations/store.ts"() {
     "use strict";
     init_file_io();
     init_notifications();
     init_platform();
+    init_lockfile();
     init_process_identity();
     init_schema();
     DEBOUNCE_MS = 100;
@@ -84505,7 +84516,6 @@ var init_store = __esm({
     readOnly = false;
     pending = /* @__PURE__ */ new Map();
     failureState = /* @__PURE__ */ new Map();
-    LOCK_APP_ID = "tandem";
     reclaimInFlight = null;
   }
 });
@@ -91037,6 +91047,7 @@ function assertAllowedOrigin(origin) {
     console.error("[Hocuspocus] Rejected connection: missing Origin header");
     throw new Error("Connection rejected: missing origin header");
   }
+  if (origin === TAURI_LINUX_ORIGIN) return;
   let url;
   try {
     url = new URL(origin);
@@ -91805,30 +91816,30 @@ async function getCurrentUserSid() {
   cachedCurrentUserSid = match[1];
   return cachedCurrentUserSid;
 }
-async function setRestrictiveAcl(path30) {
+async function setRestrictiveAcl(path31) {
   if (process.platform !== "win32") return;
   const sid = await getCurrentUserSid();
   try {
-    await execFileAsync2(systemBin("icacls.exe"), [path30, "/inheritance:r", "/grant:r", `*${sid}:F`]);
+    await execFileAsync2(systemBin("icacls.exe"), [path31, "/inheritance:r", "/grant:r", `*${sid}:F`]);
   } catch (err) {
-    throw new Error(`setRestrictiveAcl: icacls failed on ${path30}: ${err.message}`, {
+    throw new Error(`setRestrictiveAcl: icacls failed on ${path31}: ${err.message}`, {
       cause: err
     });
   }
-  await assertNoBroadAce(path30);
+  await assertNoBroadAce(path31);
 }
-async function assertNoBroadAce(path30) {
+async function assertNoBroadAce(path31) {
   if (process.platform !== "win32") return;
   const script = "Import-Module Microsoft.PowerShell.Security; (Get-Acl -LiteralPath $env:TANDEM_ACL_PATH).Sddl";
   const { stdout } = await runPowerShell(script, {
     ...process.env,
-    TANDEM_ACL_PATH: path30
+    TANDEM_ACL_PATH: path31
   });
   const sddl = stdout.trim();
   for (const fragment of BROAD_SDDL_FRAGMENTS) {
     if (sddl.includes(fragment)) {
       throw new Error(
-        `assertNoBroadAce: ${path30} has a broad-principal ACE (SDDL fragment ${fragment}). SDDL:
+        `assertNoBroadAce: ${path31} has a broad-principal ACE (SDDL fragment ${fragment}). SDDL:
 ${sddl}`
       );
     }
@@ -92641,15 +92652,15 @@ async function atomicWrite2(content3, dest) {
     }
   }
 }
-async function unlinkOrLeak(path30, originalErr) {
+async function unlinkOrLeak(path31, originalErr) {
   try {
-    await unlink(path30);
+    await unlink(path31);
   } catch (cleanupErr) {
     if (originalErr instanceof Error && originalErr.cause === void 0) {
       originalErr.cause = cleanupErr;
     }
     console.error(
-      `  Warning: could not remove ${path30} after a previous failure: ${cleanupErr.message}`
+      `  Warning: could not remove ${path31} after a previous failure: ${cleanupErr.message}`
     );
   }
 }
@@ -92833,8 +92844,8 @@ async function refreshSkillIfStale(opts = {}) {
   let onDiskVersion = -1;
   let readErr;
   try {
-    const fs19 = await import("fs/promises");
-    const current = await fs19.readFile(skillPath, "utf8");
+    const fs20 = await import("fs/promises");
+    const current = await fs20.readFile(skillPath, "utf8");
     onDiskVersion = readSkillVersion(current);
   } catch (err) {
     if (err.code !== "ENOENT") readErr = err;
@@ -92912,9 +92923,9 @@ var init_apply = __esm({
     MCP_URL = `http://127.0.0.1:${DEFAULT_MCP_PORT}`;
     MAX_CONFIG_BYTES = 5 * 1024 * 1024;
     PathRejectedError = class extends Error {
-      constructor(path30, reason, message) {
+      constructor(path31, reason, message) {
         super(message);
-        this.path = path30;
+        this.path = path31;
         this.reason = reason;
       }
       name = "PathRejectedError";
@@ -112150,11 +112161,11 @@ var require_mime_types = __commonJS({
       }
       return exts[0];
     }
-    function lookup(path30) {
-      if (!path30 || typeof path30 !== "string") {
+    function lookup(path31) {
+      if (!path31 || typeof path31 !== "string") {
         return false;
       }
-      var extension4 = extname("x." + path30).toLowerCase().slice(1);
+      var extension4 = extname("x." + path31).toLowerCase().slice(1);
       if (!extension4) {
         return false;
       }
@@ -115652,13 +115663,13 @@ var require_view = __commonJS({
   "node_modules/express/lib/view.js"(exports3, module3) {
     "use strict";
     var debug4 = require_src()("express:view");
-    var path30 = __require("path");
-    var fs19 = __require("fs");
-    var dirname6 = path30.dirname;
-    var basename3 = path30.basename;
-    var extname = path30.extname;
-    var join12 = path30.join;
-    var resolve5 = path30.resolve;
+    var path31 = __require("path");
+    var fs20 = __require("fs");
+    var dirname6 = path31.dirname;
+    var basename3 = path31.basename;
+    var extname = path31.extname;
+    var join12 = path31.join;
+    var resolve5 = path31.resolve;
     module3.exports = View;
     function View(name2, options) {
       var opts = options || {};
@@ -115687,17 +115698,17 @@ var require_view = __commonJS({
       this.path = this.lookup(fileName);
     }
     View.prototype.lookup = function lookup(name2) {
-      var path31;
+      var path32;
       var roots = [].concat(this.root);
       debug4('lookup "%s"', name2);
-      for (var i = 0; i < roots.length && !path31; i++) {
+      for (var i = 0; i < roots.length && !path32; i++) {
         var root3 = roots[i];
         var loc = resolve5(root3, name2);
         var dir = dirname6(loc);
         var file = basename3(loc);
-        path31 = this.resolve(dir, file);
+        path32 = this.resolve(dir, file);
       }
-      return path31;
+      return path32;
     };
     View.prototype.render = function render2(options, callback) {
       var sync = true;
@@ -115719,21 +115730,21 @@ var require_view = __commonJS({
     };
     View.prototype.resolve = function resolve6(dir, file) {
       var ext = this.ext;
-      var path31 = join12(dir, file);
-      var stat2 = tryStat(path31);
+      var path32 = join12(dir, file);
+      var stat2 = tryStat(path32);
       if (stat2 && stat2.isFile()) {
-        return path31;
+        return path32;
       }
-      path31 = join12(dir, basename3(file, ext), "index" + ext);
-      stat2 = tryStat(path31);
+      path32 = join12(dir, basename3(file, ext), "index" + ext);
+      stat2 = tryStat(path32);
       if (stat2 && stat2.isFile()) {
-        return path31;
+        return path32;
       }
     };
-    function tryStat(path31) {
-      debug4('stat "%s"', path31);
+    function tryStat(path32) {
+      debug4('stat "%s"', path32);
       try {
-        return fs19.statSync(path31);
+        return fs20.statSync(path32);
       } catch (e) {
         return void 0;
       }
@@ -115746,14 +115757,14 @@ var require_etag = __commonJS({
   "node_modules/etag/index.js"(exports3, module3) {
     "use strict";
     module3.exports = etag;
-    var crypto8 = __require("crypto");
+    var crypto9 = __require("crypto");
     var Stats = __require("fs").Stats;
     var toString3 = Object.prototype.toString;
     function entitytag(entity) {
       if (entity.length === 0) {
         return '"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk"';
       }
-      var hash2 = crypto8.createHash("sha1").update(entity, "utf8").digest("base64").substring(0, 27);
+      var hash2 = crypto9.createHash("sha1").update(entity, "utf8").digest("base64").substring(0, 27);
       var len = typeof entity === "string" ? Buffer.byteLength(entity, "utf8") : entity.length;
       return '"' + len.toString(16) + "-" + hash2 + '"';
     }
@@ -116923,15 +116934,15 @@ var require_dist2 = __commonJS({
           if (token.type === endType)
             break;
           if (token.type === "char" || token.type === "escape") {
-            let path30 = token.value;
+            let path31 = token.value;
             let cur = tokens[pos];
             while (cur.type === "char" || cur.type === "escape") {
-              path30 += cur.value;
+              path31 += cur.value;
               cur = tokens[++pos];
             }
             output.push({
               type: "text",
-              value: encodePath(path30)
+              value: encodePath(path31)
             });
             continue;
           }
@@ -116955,16 +116966,16 @@ var require_dist2 = __commonJS({
       }
       return new TokenData(consumeUntil("end"), str);
     }
-    function compile(path30, options = {}) {
+    function compile(path31, options = {}) {
       const { encode = encodeURIComponent, delimiter: delimiter2 = DEFAULT_DELIMITER } = options;
-      const data = typeof path30 === "object" ? path30 : parse5(path30, options);
+      const data = typeof path31 === "object" ? path31 : parse5(path31, options);
       const fn = tokensToFunction(data.tokens, delimiter2, encode);
-      return function path31(params2 = {}) {
-        const [path32, ...missing] = fn(params2);
+      return function path32(params2 = {}) {
+        const [path33, ...missing] = fn(params2);
         if (missing.length) {
           throw new TypeError(`Missing parameters: ${missing.join(", ")}`);
         }
-        return path32;
+        return path33;
       };
     }
     function tokensToFunction(tokens, delimiter2, encode) {
@@ -117020,9 +117031,9 @@ var require_dist2 = __commonJS({
         return [encodeValue(value)];
       };
     }
-    function match(path30, options = {}) {
+    function match(path31, options = {}) {
       const { decode: decode2 = decodeURIComponent, delimiter: delimiter2 = DEFAULT_DELIMITER } = options;
-      const { regexp, keys: keys4 } = pathToRegexp(path30, options);
+      const { regexp, keys: keys4 } = pathToRegexp(path31, options);
       const decoders = keys4.map((key) => {
         if (decode2 === false)
           return NOOP_VALUE;
@@ -117034,7 +117045,7 @@ var require_dist2 = __commonJS({
         const m = regexp.exec(input);
         if (!m)
           return false;
-        const path31 = m[0];
+        const path32 = m[0];
         const params2 = /* @__PURE__ */ Object.create(null);
         for (let i = 1; i < m.length; i++) {
           if (m[i] === void 0)
@@ -117043,21 +117054,21 @@ var require_dist2 = __commonJS({
           const decoder = decoders[i - 1];
           params2[key.name] = decoder(m[i]);
         }
-        return { path: path31, params: params2 };
+        return { path: path32, params: params2 };
       };
     }
-    function pathToRegexp(path30, options = {}) {
+    function pathToRegexp(path31, options = {}) {
       const { delimiter: delimiter2 = DEFAULT_DELIMITER, end = true, sensitive = false, trailing = true } = options;
       const root3 = new SourceNode("^");
-      const paths = [path30];
+      const paths = [path31];
       let combinations = 0;
       while (paths.length) {
-        const path31 = paths.shift();
-        if (Array.isArray(path31)) {
-          paths.push(...path31);
+        const path32 = paths.shift();
+        if (Array.isArray(path32)) {
+          paths.push(...path32);
           continue;
         }
-        const data = typeof path31 === "object" ? path31 : parse5(path31, options);
+        const data = typeof path32 === "object" ? path32 : parse5(path32, options);
         flatten4(data.tokens, 0, [], (tokens) => {
           if (combinations++ >= 256) {
             throw new PathError("Too many path combinations", data.originalPath);
@@ -117231,18 +117242,18 @@ var require_layer = __commonJS({
     var TRAILING_SLASH_REGEXP = /\/+$/;
     var MATCHING_GROUP_REGEXP = /\((?:\?<(.*?)>)?(?!\?)/g;
     module3.exports = Layer;
-    function Layer(path30, options, fn) {
+    function Layer(path31, options, fn) {
       if (!(this instanceof Layer)) {
-        return new Layer(path30, options, fn);
+        return new Layer(path31, options, fn);
       }
-      debug4("new %o", path30);
+      debug4("new %o", path31);
       const opts = options || {};
       this.handle = fn;
       this.keys = [];
       this.name = fn.name || "<anonymous>";
       this.params = void 0;
       this.path = void 0;
-      this.slash = path30 === "/" && opts.end === false;
+      this.slash = path31 === "/" && opts.end === false;
       function matcher2(_path) {
         if (_path instanceof RegExp) {
           const keys4 = [];
@@ -117281,7 +117292,7 @@ var require_layer = __commonJS({
           decode: decodeParam
         });
       }
-      this.matchers = Array.isArray(path30) ? path30.map(matcher2) : [matcher2(path30)];
+      this.matchers = Array.isArray(path31) ? path31.map(matcher2) : [matcher2(path31)];
     }
     Layer.prototype.handleError = function handleError(error5, req, res, next) {
       const fn = this.handle;
@@ -117321,9 +117332,9 @@ var require_layer = __commonJS({
         next(err);
       }
     };
-    Layer.prototype.match = function match(path30) {
+    Layer.prototype.match = function match(path31) {
       let match2;
-      if (path30 != null) {
+      if (path31 != null) {
         if (this.slash) {
           this.params = {};
           this.path = "";
@@ -117331,7 +117342,7 @@ var require_layer = __commonJS({
         }
         let i = 0;
         while (!match2 && i < this.matchers.length) {
-          match2 = this.matchers[i](path30);
+          match2 = this.matchers[i](path31);
           i++;
         }
       }
@@ -117359,13 +117370,13 @@ var require_layer = __commonJS({
         throw err;
       }
     }
-    function loosen(path30) {
-      if (path30 instanceof RegExp || path30 === "/") {
-        return path30;
+    function loosen(path31) {
+      if (path31 instanceof RegExp || path31 === "/") {
+        return path31;
       }
-      return Array.isArray(path30) ? path30.map(function(p) {
+      return Array.isArray(path31) ? path31.map(function(p) {
         return loosen(p);
-      }) : String(path30).replace(TRAILING_SLASH_REGEXP, "");
+      }) : String(path31).replace(TRAILING_SLASH_REGEXP, "");
     }
   }
 });
@@ -117381,9 +117392,9 @@ var require_route = __commonJS({
     var flatten4 = Array.prototype.flat;
     var methods = METHODS.map((method) => method.toLowerCase());
     module3.exports = Route;
-    function Route(path30) {
-      debug4("new %o", path30);
-      this.path = path30;
+    function Route(path31) {
+      debug4("new %o", path31);
+      this.path = path31;
       this.stack = [];
       this.methods = /* @__PURE__ */ Object.create(null);
     }
@@ -117591,8 +117602,8 @@ var require_router = __commonJS({
         if (++sync > 100) {
           return setImmediate(next, err);
         }
-        const path30 = getPathname(req);
-        if (path30 == null) {
+        const path31 = getPathname(req);
+        if (path31 == null) {
           return done(layerError);
         }
         let layer;
@@ -117600,7 +117611,7 @@ var require_router = __commonJS({
         let route;
         while (match !== true && idx < stack.length) {
           layer = stack[idx++];
-          match = matchLayer(layer, path30);
+          match = matchLayer(layer, path31);
           route = layer.route;
           if (typeof match !== "boolean") {
             layerError = layerError || match;
@@ -117638,18 +117649,18 @@ var require_router = __commonJS({
           } else if (route) {
             layer.handleRequest(req, res, next);
           } else {
-            trimPrefix(layer, layerError, layerPath, path30);
+            trimPrefix(layer, layerError, layerPath, path31);
           }
           sync = 0;
         });
       }
-      function trimPrefix(layer, layerError, layerPath, path30) {
+      function trimPrefix(layer, layerError, layerPath, path31) {
         if (layerPath.length !== 0) {
-          if (layerPath !== path30.substring(0, layerPath.length)) {
+          if (layerPath !== path31.substring(0, layerPath.length)) {
             next(layerError);
             return;
           }
-          const c = path30[layerPath.length];
+          const c = path31[layerPath.length];
           if (c && c !== "/") {
             next(layerError);
             return;
@@ -117673,7 +117684,7 @@ var require_router = __commonJS({
     };
     Router.prototype.use = function use(handler) {
       let offset = 0;
-      let path30 = "/";
+      let path31 = "/";
       if (typeof handler !== "function") {
         let arg = handler;
         while (Array.isArray(arg) && arg.length !== 0) {
@@ -117681,7 +117692,7 @@ var require_router = __commonJS({
         }
         if (typeof arg !== "function") {
           offset = 1;
-          path30 = handler;
+          path31 = handler;
         }
       }
       const callbacks = flatten4.call(slice2.call(arguments, offset), Infinity);
@@ -117693,8 +117704,8 @@ var require_router = __commonJS({
         if (typeof fn !== "function") {
           throw new TypeError("argument handler must be a function");
         }
-        debug4("use %o %s", path30, fn.name || "<anonymous>");
-        const layer = new Layer(path30, {
+        debug4("use %o %s", path31, fn.name || "<anonymous>");
+        const layer = new Layer(path31, {
           sensitive: this.caseSensitive,
           strict: false,
           end: false
@@ -117704,9 +117715,9 @@ var require_router = __commonJS({
       }
       return this;
     };
-    Router.prototype.route = function route(path30) {
-      const route2 = new Route(path30);
-      const layer = new Layer(path30, {
+    Router.prototype.route = function route(path31) {
+      const route2 = new Route(path31);
+      const layer = new Layer(path31, {
         sensitive: this.caseSensitive,
         strict: this.strict,
         end: true
@@ -117719,8 +117730,8 @@ var require_router = __commonJS({
       return route2;
     };
     methods.concat("all").forEach(function(method) {
-      Router.prototype[method] = function(path30) {
-        const route = this.route(path30);
+      Router.prototype[method] = function(path31) {
+        const route = this.route(path31);
         route[method].apply(route, slice2.call(arguments, 1));
         return this;
       };
@@ -117749,9 +117760,9 @@ var require_router = __commonJS({
       const fqdnIndex = url.substring(0, pathLength).indexOf("://");
       return fqdnIndex !== -1 ? url.substring(0, url.indexOf("/", 3 + fqdnIndex)) : void 0;
     }
-    function matchLayer(layer, path30) {
+    function matchLayer(layer, path31) {
       try {
-        return layer.match(path30);
+        return layer.match(path31);
       } catch (err) {
         return err;
       }
@@ -117979,7 +117990,7 @@ var require_application = __commonJS({
     };
     app.use = function use(fn) {
       var offset = 0;
-      var path30 = "/";
+      var path31 = "/";
       if (typeof fn !== "function") {
         var arg = fn;
         while (Array.isArray(arg) && arg.length !== 0) {
@@ -117987,7 +117998,7 @@ var require_application = __commonJS({
         }
         if (typeof arg !== "function") {
           offset = 1;
-          path30 = fn;
+          path31 = fn;
         }
       }
       var fns = flatten4.call(slice2.call(arguments, offset), Infinity);
@@ -117997,12 +118008,12 @@ var require_application = __commonJS({
       var router = this.router;
       fns.forEach(function(fn2) {
         if (!fn2 || !fn2.handle || !fn2.set) {
-          return router.use(path30, fn2);
+          return router.use(path31, fn2);
         }
-        debug4(".use app under %s", path30);
-        fn2.mountpath = path30;
+        debug4(".use app under %s", path31);
+        fn2.mountpath = path31;
         fn2.parent = this;
-        router.use(path30, function mounted_app(req, res, next) {
+        router.use(path31, function mounted_app(req, res, next) {
           var orig = req.app;
           fn2.handle(req, res, function(err) {
             Object.setPrototypeOf(req, orig.request);
@@ -118014,8 +118025,8 @@ var require_application = __commonJS({
       }, this);
       return this;
     };
-    app.route = function route(path30) {
-      return this.router.route(path30);
+    app.route = function route(path31) {
+      return this.router.route(path31);
     };
     app.engine = function engine(ext, fn) {
       if (typeof fn !== "function") {
@@ -118058,7 +118069,7 @@ var require_application = __commonJS({
       }
       return this;
     };
-    app.path = function path30() {
+    app.path = function path31() {
       return this.parent ? this.parent.path() + this.mountpath : "";
     };
     app.enabled = function enabled(setting) {
@@ -118074,17 +118085,17 @@ var require_application = __commonJS({
       return this.set(setting, false);
     };
     methods.forEach(function(method) {
-      app[method] = function(path30) {
+      app[method] = function(path31) {
         if (method === "get" && arguments.length === 1) {
-          return this.set(path30);
+          return this.set(path31);
         }
-        var route = this.route(path30);
+        var route = this.route(path31);
         route[method].apply(route, slice2.call(arguments, 1));
         return this;
       };
     });
-    app.all = function all3(path30) {
-      var route = this.route(path30);
+    app.all = function all3(path31) {
+      var route = this.route(path31);
       var args2 = slice2.call(arguments, 1);
       for (var i = 0; i < methods.length; i++) {
         route[methods[i]].apply(route, args2);
@@ -118994,7 +119005,7 @@ var require_request = __commonJS({
       var subdomains2 = !isIP4(hostname3) ? hostname3.split(".").reverse() : [hostname3];
       return subdomains2.slice(offset);
     });
-    defineGetter(req, "path", function path30() {
+    defineGetter(req, "path", function path31() {
       return parse5(this).pathname;
     });
     defineGetter(req, "host", function host() {
@@ -119211,17 +119222,17 @@ var require_content_disposition = __commonJS({
 var require_cookie_signature = __commonJS({
   "node_modules/cookie-signature/index.js"(exports3) {
     "use strict";
-    var crypto8 = __require("crypto");
+    var crypto9 = __require("crypto");
     exports3.sign = function(val, secret) {
       if ("string" != typeof val) throw new TypeError("Cookie value must be provided as a string.");
       if (null == secret) throw new TypeError("Secret key must be provided.");
-      return val + "." + crypto8.createHmac("sha256", secret).update(val).digest("base64").replace(/\=+$/, "");
+      return val + "." + crypto9.createHmac("sha256", secret).update(val).digest("base64").replace(/\=+$/, "");
     };
     exports3.unsign = function(input, secret) {
       if ("string" != typeof input) throw new TypeError("Signed cookie string must be provided.");
       if (null == secret) throw new TypeError("Secret key must be provided.");
       var tentativeValue = input.slice(0, input.lastIndexOf(".")), expectedInput = exports3.sign(tentativeValue, secret), expectedBuffer = Buffer.from(expectedInput), inputBuffer = Buffer.from(input);
-      return expectedBuffer.length === inputBuffer.length && crypto8.timingSafeEqual(expectedBuffer, inputBuffer) ? tentativeValue : false;
+      return expectedBuffer.length === inputBuffer.length && crypto9.timingSafeEqual(expectedBuffer, inputBuffer) ? tentativeValue : false;
     };
   }
 });
@@ -119402,32 +119413,32 @@ var require_send = __commonJS({
     var escapeHtml = require_escape_html();
     var etag = require_etag();
     var fresh = require_fresh();
-    var fs19 = __require("fs");
+    var fs20 = __require("fs");
     var mime = require_mime_types();
     var ms = require_ms();
     var onFinished = require_on_finished();
     var parseRange = require_range_parser();
-    var path30 = __require("path");
+    var path31 = __require("path");
     var statuses = require_statuses();
     var Stream = __require("stream");
     var util4 = __require("util");
-    var extname = path30.extname;
-    var join12 = path30.join;
-    var normalize5 = path30.normalize;
-    var resolve5 = path30.resolve;
-    var sep4 = path30.sep;
+    var extname = path31.extname;
+    var join12 = path31.join;
+    var normalize5 = path31.normalize;
+    var resolve5 = path31.resolve;
+    var sep4 = path31.sep;
     var BYTES_RANGE_REGEXP = /^ *bytes=/;
     var MAX_MAXAGE = 60 * 60 * 24 * 365 * 1e3;
     var UP_PATH_REGEXP = /(?:^|[\\/])\.\.(?:[\\/]|$)/;
     module3.exports = send;
-    function send(req, path31, options) {
-      return new SendStream(req, path31, options);
+    function send(req, path32, options) {
+      return new SendStream(req, path32, options);
     }
-    function SendStream(req, path31, options) {
+    function SendStream(req, path32, options) {
       Stream.call(this);
       var opts = options || {};
       this.options = opts;
-      this.path = path31;
+      this.path = path32;
       this.req = req;
       this._acceptRanges = opts.acceptRanges !== void 0 ? Boolean(opts.acceptRanges) : true;
       this._cacheControl = opts.cacheControl !== void 0 ? Boolean(opts.cacheControl) : true;
@@ -119541,10 +119552,10 @@ var require_send = __commonJS({
       var lastModified = this.res.getHeader("Last-Modified");
       return parseHttpDate(lastModified) <= parseHttpDate(ifRange);
     };
-    SendStream.prototype.redirect = function redirect(path31) {
+    SendStream.prototype.redirect = function redirect(path32) {
       var res = this.res;
       if (hasListeners(this, "directory")) {
-        this.emit("directory", res, path31);
+        this.emit("directory", res, path32);
         return;
       }
       if (this.hasTrailingSlash()) {
@@ -119564,38 +119575,38 @@ var require_send = __commonJS({
     SendStream.prototype.pipe = function pipe2(res) {
       var root3 = this._root;
       this.res = res;
-      var path31 = decode2(this.path);
-      if (path31 === -1) {
+      var path32 = decode2(this.path);
+      if (path32 === -1) {
         this.error(400);
         return res;
       }
-      if (~path31.indexOf("\0")) {
+      if (~path32.indexOf("\0")) {
         this.error(400);
         return res;
       }
       var parts;
       if (root3 !== null) {
-        if (path31) {
-          path31 = normalize5("." + sep4 + path31);
+        if (path32) {
+          path32 = normalize5("." + sep4 + path32);
         }
-        if (UP_PATH_REGEXP.test(path31)) {
-          debug4('malicious path "%s"', path31);
+        if (UP_PATH_REGEXP.test(path32)) {
+          debug4('malicious path "%s"', path32);
           this.error(403);
           return res;
         }
-        parts = path31.split(sep4);
-        path31 = normalize5(join12(root3, path31));
+        parts = path32.split(sep4);
+        path32 = normalize5(join12(root3, path32));
       } else {
-        if (UP_PATH_REGEXP.test(path31)) {
-          debug4('malicious path "%s"', path31);
+        if (UP_PATH_REGEXP.test(path32)) {
+          debug4('malicious path "%s"', path32);
           this.error(403);
           return res;
         }
-        parts = normalize5(path31).split(sep4);
-        path31 = resolve5(path31);
+        parts = normalize5(path32).split(sep4);
+        path32 = resolve5(path32);
       }
       if (containsDotFile(parts)) {
-        debug4('%s dotfile "%s"', this._dotfiles, path31);
+        debug4('%s dotfile "%s"', this._dotfiles, path32);
         switch (this._dotfiles) {
           case "allow":
             break;
@@ -119609,13 +119620,13 @@ var require_send = __commonJS({
         }
       }
       if (this._index.length && this.hasTrailingSlash()) {
-        this.sendIndex(path31);
+        this.sendIndex(path32);
         return res;
       }
-      this.sendFile(path31);
+      this.sendFile(path32);
       return res;
     };
-    SendStream.prototype.send = function send2(path31, stat2) {
+    SendStream.prototype.send = function send2(path32, stat2) {
       var len = stat2.size;
       var options = this.options;
       var opts = {};
@@ -119627,9 +119638,9 @@ var require_send = __commonJS({
         this.headersAlreadySent();
         return;
       }
-      debug4('pipe "%s"', path31);
-      this.setHeader(path31, stat2);
-      this.type(path31);
+      debug4('pipe "%s"', path32);
+      this.setHeader(path32, stat2);
+      this.type(path32);
       if (this.isConditionalGET()) {
         if (this.isPreconditionFailure()) {
           this.error(412);
@@ -119678,30 +119689,30 @@ var require_send = __commonJS({
         res.end();
         return;
       }
-      this.stream(path31, opts);
+      this.stream(path32, opts);
     };
-    SendStream.prototype.sendFile = function sendFile(path31) {
+    SendStream.prototype.sendFile = function sendFile(path32) {
       var i = 0;
       var self2 = this;
-      debug4('stat "%s"', path31);
-      fs19.stat(path31, function onstat(err, stat2) {
-        var pathEndsWithSep = path31[path31.length - 1] === sep4;
-        if (err && err.code === "ENOENT" && !extname(path31) && !pathEndsWithSep) {
+      debug4('stat "%s"', path32);
+      fs20.stat(path32, function onstat(err, stat2) {
+        var pathEndsWithSep = path32[path32.length - 1] === sep4;
+        if (err && err.code === "ENOENT" && !extname(path32) && !pathEndsWithSep) {
           return next(err);
         }
         if (err) return self2.onStatError(err);
-        if (stat2.isDirectory()) return self2.redirect(path31);
+        if (stat2.isDirectory()) return self2.redirect(path32);
         if (pathEndsWithSep) return self2.error(404);
-        self2.emit("file", path31, stat2);
-        self2.send(path31, stat2);
+        self2.emit("file", path32, stat2);
+        self2.send(path32, stat2);
       });
       function next(err) {
         if (self2._extensions.length <= i) {
           return err ? self2.onStatError(err) : self2.error(404);
         }
-        var p = path31 + "." + self2._extensions[i++];
+        var p = path32 + "." + self2._extensions[i++];
         debug4('stat "%s"', p);
-        fs19.stat(p, function(err2, stat2) {
+        fs20.stat(p, function(err2, stat2) {
           if (err2) return next(err2);
           if (stat2.isDirectory()) return next();
           self2.emit("file", p, stat2);
@@ -119709,7 +119720,7 @@ var require_send = __commonJS({
         });
       }
     };
-    SendStream.prototype.sendIndex = function sendIndex(path31) {
+    SendStream.prototype.sendIndex = function sendIndex(path32) {
       var i = -1;
       var self2 = this;
       function next(err) {
@@ -119717,9 +119728,9 @@ var require_send = __commonJS({
           if (err) return self2.onStatError(err);
           return self2.error(404);
         }
-        var p = join12(path31, self2._index[i]);
+        var p = join12(path32, self2._index[i]);
         debug4('stat "%s"', p);
-        fs19.stat(p, function(err2, stat2) {
+        fs20.stat(p, function(err2, stat2) {
           if (err2) return next(err2);
           if (stat2.isDirectory()) return next();
           self2.emit("file", p, stat2);
@@ -119728,10 +119739,10 @@ var require_send = __commonJS({
       }
       next();
     };
-    SendStream.prototype.stream = function stream(path31, options) {
+    SendStream.prototype.stream = function stream(path32, options) {
       var self2 = this;
       var res = this.res;
-      var stream2 = fs19.createReadStream(path31, options);
+      var stream2 = fs20.createReadStream(path32, options);
       this.emit("stream", stream2);
       stream2.pipe(res);
       function cleanup() {
@@ -119746,17 +119757,17 @@ var require_send = __commonJS({
         self2.emit("end");
       });
     };
-    SendStream.prototype.type = function type3(path31) {
+    SendStream.prototype.type = function type3(path32) {
       var res = this.res;
       if (res.getHeader("Content-Type")) return;
-      var ext = extname(path31);
+      var ext = extname(path32);
       var type4 = mime.contentType(ext) || "application/octet-stream";
       debug4("content-type %s", type4);
       res.setHeader("Content-Type", type4);
     };
-    SendStream.prototype.setHeader = function setHeader(path31, stat2) {
+    SendStream.prototype.setHeader = function setHeader(path32, stat2) {
       var res = this.res;
-      this.emit("headers", res, path31, stat2);
+      this.emit("headers", res, path32, stat2);
       if (this._acceptRanges && !res.getHeader("Accept-Ranges")) {
         debug4("accept ranges");
         res.setHeader("Accept-Ranges", "bytes");
@@ -119814,9 +119825,9 @@ var require_send = __commonJS({
       }
       return err instanceof Error ? createError(status, err, { expose: false }) : createError(status, err);
     }
-    function decode2(path31) {
+    function decode2(path32) {
       try {
-        return decodeURIComponent(path31);
+        return decodeURIComponent(path32);
       } catch (err) {
         return -1;
       }
@@ -119960,7 +119971,7 @@ var require_response = __commonJS({
     var http5 = __require("http");
     var onFinished = require_on_finished();
     var mime = require_mime_types();
-    var path30 = __require("path");
+    var path31 = __require("path");
     var pathIsAbsolute = __require("path").isAbsolute;
     var statuses = require_statuses();
     var sign2 = require_cookie_signature().sign;
@@ -119969,8 +119980,8 @@ var require_response = __commonJS({
     var setCharset = require_utils4().setCharset;
     var cookie = require_cookie();
     var send = require_send();
-    var extname = path30.extname;
-    var resolve5 = path30.resolve;
+    var extname = path31.extname;
+    var resolve5 = path31.resolve;
     var vary = require_vary();
     var { Buffer: Buffer2 } = __require("buffer");
     var res = Object.create(http5.ServerResponse.prototype);
@@ -120116,26 +120127,26 @@ var require_response = __commonJS({
       this.type("txt");
       return this.send(body);
     };
-    res.sendFile = function sendFile(path31, options, callback) {
+    res.sendFile = function sendFile(path32, options, callback) {
       var done = callback;
       var req = this.req;
       var res2 = this;
       var next = req.next;
       var opts = options || {};
-      if (!path31) {
+      if (!path32) {
         throw new TypeError("path argument is required to res.sendFile");
       }
-      if (typeof path31 !== "string") {
+      if (typeof path32 !== "string") {
         throw new TypeError("path must be a string to res.sendFile");
       }
       if (typeof options === "function") {
         done = options;
         opts = {};
       }
-      if (!opts.root && !pathIsAbsolute(path31)) {
+      if (!opts.root && !pathIsAbsolute(path32)) {
         throw new TypeError("path must be absolute or specify root to res.sendFile");
       }
-      var pathname = encodeURI(path31);
+      var pathname = encodeURI(path32);
       opts.etag = this.app.enabled("etag");
       var file = send(req, pathname, opts);
       sendfile(res2, file, opts, function(err) {
@@ -120146,7 +120157,7 @@ var require_response = __commonJS({
         }
       });
     };
-    res.download = function download(path31, filename, options, callback) {
+    res.download = function download(path32, filename, options, callback) {
       var done = callback;
       var name2 = filename;
       var opts = options || null;
@@ -120163,7 +120174,7 @@ var require_response = __commonJS({
         opts = filename;
       }
       var headers = {
-        "Content-Disposition": contentDisposition(name2 || path31)
+        "Content-Disposition": contentDisposition(name2 || path32)
       };
       if (opts && opts.headers) {
         var keys4 = Object.keys(opts.headers);
@@ -120176,7 +120187,7 @@ var require_response = __commonJS({
       }
       opts = Object.create(opts);
       opts.headers = headers;
-      var fullPath = !opts.root ? resolve5(path31) : path31;
+      var fullPath = !opts.root ? resolve5(path32) : path32;
       return this.sendFile(fullPath, opts, done);
     };
     res.contentType = res.type = function contentType(type3) {
@@ -120459,11 +120470,11 @@ var require_serve_static = __commonJS({
         }
         var forwardError = !fallthrough;
         var originalUrl = parseUrl2.original(req);
-        var path30 = parseUrl2(req).pathname;
-        if (path30 === "/" && originalUrl.pathname.substr(-1) !== "/") {
-          path30 = "";
+        var path31 = parseUrl2(req).pathname;
+        if (path31 === "/" && originalUrl.pathname.substr(-1) !== "/") {
+          path31 = "";
         }
-        var stream = send(req, path30, opts);
+        var stream = send(req, path31, opts);
         stream.on("directory", onDirectory);
         if (setHeaders) {
           stream.on("headers", setHeaders);
@@ -123766,8 +123777,8 @@ var require_utils5 = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path30) {
-      let input = path30;
+    function removeDotSegments(path31) {
+      let input = path31;
       const output = [];
       let nextSlash = -1;
       let len = 0;
@@ -124019,8 +124030,8 @@ var require_schemes = __commonJS({
         wsComponent.secure = void 0;
       }
       if (wsComponent.resourceName) {
-        const [path30, query] = wsComponent.resourceName.split("?");
-        wsComponent.path = path30 && path30 !== "/" ? path30 : void 0;
+        const [path31, query] = wsComponent.resourceName.split("?");
+        wsComponent.path = path31 && path31 !== "/" ? path31 : void 0;
         wsComponent.query = query;
         wsComponent.resourceName = void 0;
       }
@@ -127413,12 +127424,12 @@ var require_dist3 = __commonJS({
         throw new Error(`Unknown format "${name2}"`);
       return f;
     };
-    function addFormats(ajv, list4, fs19, exportName) {
+    function addFormats(ajv, list4, fs20, exportName) {
       var _a3;
       var _b2;
       (_a3 = (_b2 = ajv.opts.code).formats) !== null && _a3 !== void 0 ? _a3 : _b2.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`;
       for (const f of list4)
-        ajv.addFormat(f, fs19[f]);
+        ajv.addFormat(f, fs20[f]);
     }
     module3.exports = exports3 = formatsPlugin;
     Object.defineProperty(exports3, "__esModule", { value: true });
@@ -128524,8 +128535,8 @@ function checkAnnotationStore(r) {
   }
   try {
     const raw = readFileSync3(lockPath, "utf-8").trim();
-    const pid = Number.parseInt(raw, 10);
-    if (!Number.isFinite(pid)) {
+    const lock = parseLockfile(raw);
+    if (lock === null) {
       r.warn(
         `Annotation store lock at ${lockPath} has unparseable content: "${raw}"`,
         "Restart Tandem or delete the lock file if no server is running.",
@@ -128533,6 +128544,7 @@ function checkAnnotationStore(r) {
       );
       return;
     }
+    const { pid } = lock;
     if (isPidLive(pid)) {
       r.pass(`Annotation store lock held by live PID ${pid}`, void 0, {
         lockHeld: true,
@@ -128589,6 +128601,7 @@ var Recorder;
 var init_doctor = __esm({
   "src/cli/doctor.ts"() {
     "use strict";
+    init_lockfile();
     init_constants();
     Recorder = class {
       failures = 0;
@@ -129308,7 +129321,7 @@ function escapeRegExp3(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function isLocalhostOrigin(origin) {
-  return LOCALHOST_ORIGIN_RE.test(origin ?? "");
+  return origin === TAURI_LINUX_ORIGIN || LOCALHOST_ORIGIN_RE.test(origin ?? "");
 }
 function createApiMiddleware(extraHosts = []) {
   return function apiMiddlewareFn(req, res, next) {
@@ -130850,7 +130863,7 @@ var init_launcher = __esm({
 });
 
 // src/shared/launcher/contract.ts
-var LAUNCHER_ERROR_INVALID_BODY, LAUNCHER_ERROR_INVALID_NONCE, LAUNCHER_ERROR_PATH_REJECTED, LAUNCHER_ERROR_IN_PROGRESS, LAUNCHER_ERROR_NOT_AVAILABLE, LAUNCHER_ERROR_NO_INTEGRATION, LAUNCHER_CWD_MAX_LENGTH;
+var LAUNCHER_ERROR_INVALID_BODY, LAUNCHER_ERROR_INVALID_NONCE, LAUNCHER_ERROR_PATH_REJECTED, LAUNCHER_ERROR_IN_PROGRESS, LAUNCHER_ERROR_NOT_AVAILABLE, LAUNCHER_ERROR_NO_INTEGRATION, LAUNCHER_ERROR_REAPER_NOT_FOUND, REAPER_NOT_FOUND_MARKER, LAUNCHER_CWD_MAX_LENGTH;
 var init_contract2 = __esm({
   "src/shared/launcher/contract.ts"() {
     "use strict";
@@ -130860,6 +130873,8 @@ var init_contract2 = __esm({
     LAUNCHER_ERROR_IN_PROGRESS = "LAUNCHER_IN_PROGRESS";
     LAUNCHER_ERROR_NOT_AVAILABLE = "LAUNCHER_NOT_AVAILABLE";
     LAUNCHER_ERROR_NO_INTEGRATION = "NO_CLAUDE_INTEGRATION";
+    LAUNCHER_ERROR_REAPER_NOT_FOUND = "REAPER_NOT_FOUND";
+    REAPER_NOT_FOUND_MARKER = "tandem-reaper binary not found";
     LAUNCHER_CWD_MAX_LENGTH = 1024;
   }
 });
@@ -130873,9 +130888,9 @@ __export(supervisor_exports, {
 });
 import { spawn as spawn2 } from "child_process";
 import { randomUUID as randomUUID9 } from "crypto";
-import fs17 from "fs";
+import fs18 from "fs";
 import os2 from "os";
-import path25 from "path";
+import path26 from "path";
 function createSupervisor(opts) {
   let child = null;
   let currentCwd;
@@ -130905,11 +130920,11 @@ function createSupervisor(opts) {
     return found ?? null;
   }
   function sessionFilePath() {
-    return path25.join(opts.integrationsBase, SESSION_FILE_NAME);
+    return path26.join(opts.integrationsBase, SESSION_FILE_NAME);
   }
   function readSavedSession() {
     try {
-      const raw = fs17.readFileSync(sessionFilePath(), "utf8");
+      const raw = fs18.readFileSync(sessionFilePath(), "utf8");
       const parsed = JSON.parse(raw);
       if (typeof parsed.sessionId !== "string") return void 0;
       if (!UUID_V4_PATTERN.test(parsed.sessionId)) {
@@ -130923,7 +130938,7 @@ function createSupervisor(opts) {
   }
   function writeSavedSession(sessionId) {
     try {
-      fs17.writeFileSync(sessionFilePath(), JSON.stringify({ sessionId }, null, 2), {
+      fs18.writeFileSync(sessionFilePath(), JSON.stringify({ sessionId }, null, 2), {
         encoding: "utf8",
         mode: 384
       });
@@ -130933,7 +130948,7 @@ function createSupervisor(opts) {
   }
   function clearSavedSession() {
     try {
-      fs17.unlinkSync(sessionFilePath());
+      fs18.unlinkSync(sessionFilePath());
     } catch {
     }
   }
@@ -130950,18 +130965,18 @@ function createSupervisor(opts) {
   }
   function reaperPath() {
     const exeName = process.platform === "win32" ? "tandem-reaper.exe" : "tandem-reaper";
-    if (process.env.NODE_ENV !== "production" && process.env.TANDEM_TAURI_SIDECAR !== "1" && process.env.TANDEM_REAPER_PATH && fs17.existsSync(process.env.TANDEM_REAPER_PATH)) {
+    if (process.env.NODE_ENV !== "production" && process.env.TANDEM_TAURI_SIDECAR !== "1" && process.env.TANDEM_REAPER_PATH && fs18.existsSync(process.env.TANDEM_REAPER_PATH)) {
       return process.env.TANDEM_REAPER_PATH;
     }
-    const adjacent = path25.join(path25.dirname(process.execPath), exeName);
-    if (fs17.existsSync(adjacent)) return adjacent;
+    const adjacent = path26.join(path26.dirname(process.execPath), exeName);
+    if (fs18.existsSync(adjacent)) return adjacent;
     if (process.env.TANDEM_TAURI_SIDECAR) {
-      const tauriBin = path25.join(path25.dirname(process.execPath), "binaries", exeName);
-      if (fs17.existsSync(tauriBin)) return tauriBin;
+      const tauriBin = path26.join(path26.dirname(process.execPath), "binaries", exeName);
+      if (fs18.existsSync(tauriBin)) return tauriBin;
     }
-    const devPath = path25.resolve(process.cwd(), "reaper", "target", "release", exeName);
-    if (fs17.existsSync(devPath) && process.env.NODE_ENV !== "production") return devPath;
-    throw new Error(`tandem-reaper binary not found (checked ${adjacent})`);
+    const devPath = path26.resolve(process.cwd(), "reaper", "target", "release", exeName);
+    if (fs18.existsSync(devPath) && process.env.NODE_ENV !== "production") return devPath;
+    throw new Error(`${REAPER_NOT_FOUND_MARKER} (checked ${adjacent})`);
   }
   function claudeCommand() {
     return process.env.TANDEM_CLAUDE_CMD || "claude";
@@ -131041,6 +131056,33 @@ function createSupervisor(opts) {
       if (stopRequested) return;
       scheduleRestart();
     });
+    const spawned = child;
+    await new Promise((resolve5, reject2) => {
+      const cleanup = () => {
+        spawned.off("spawn", onSpawn);
+        spawned.off("error", onEarlyError);
+        spawned.off("exit", onEarlyExit);
+      };
+      const onSpawn = () => {
+        cleanup();
+        resolve5();
+      };
+      const onEarlyError = (err) => {
+        cleanup();
+        if (err.code === "ENOENT" || err.code === "EACCES" || err.code === "EISDIR") {
+          reject2(new Error(`${REAPER_NOT_FOUND_MARKER} (spawn ${err.code}: ${err.message})`));
+        } else {
+          reject2(err);
+        }
+      };
+      const onEarlyExit = (code3, signal) => {
+        cleanup();
+        reject2(new Error(`reaper exited before spawn (code=${code3} signal=${signal})`));
+      };
+      spawned.once("spawn", onSpawn);
+      spawned.once("error", onEarlyError);
+      spawned.once("exit", onEarlyExit);
+    });
   }
   function scheduleRestart() {
     if (restartTimer) clearTimeout(restartTimer);
@@ -131164,14 +131206,14 @@ function createSupervisor(opts) {
   return { start, relaunch, stop, startFresh, status };
 }
 function resolveSafeCwd(candidate) {
-  if (typeof candidate !== "string" || !path25.isAbsolute(candidate)) return null;
+  if (typeof candidate !== "string" || !path26.isAbsolute(candidate)) return null;
   if (process.platform === "win32") {
     if (candidate.startsWith("\\\\?\\") || candidate.startsWith("\\\\.\\")) return null;
     if (candidate.startsWith("\\\\")) return null;
   }
   try {
-    const real = fs17.realpathSync(candidate);
-    const stat2 = fs17.statSync(real);
+    const real = fs18.realpathSync(candidate);
+    const stat2 = fs18.statSync(real);
     if (!stat2.isDirectory()) return null;
     return real;
   } catch {
@@ -131183,19 +131225,20 @@ function resolveRouteCwd(candidate, opts = {}) {
   if (safe2 === null) return null;
   let homeReal;
   try {
-    homeReal = fs17.realpathSync(opts.homeOverride ?? os2.homedir());
+    homeReal = fs18.realpathSync(opts.homeOverride ?? os2.homedir());
   } catch {
     return null;
   }
-  const rel = path25.relative(homeReal, safe2);
+  const rel = path26.relative(homeReal, safe2);
   if (rel === "") return safe2;
-  if (rel.startsWith("..") || path25.isAbsolute(rel)) return null;
+  if (rel.startsWith("..") || path26.isAbsolute(rel)) return null;
   return safe2;
 }
 var SESSION_FILE_NAME, RESUME_GRACE_MS, RESTART_BACKOFFS_MS, CIRCUIT_BREAKER_MAX_ATTEMPTS, CIRCUIT_BREAKER_WINDOW_MS, UUID_V4_PATTERN;
 var init_supervisor = __esm({
   "src/server/launcher/supervisor.ts"() {
     "use strict";
+    init_contract2();
     init_storage2();
     SESSION_FILE_NAME = "launcher-session.json";
     RESUME_GRACE_MS = 5e3;
@@ -131495,9 +131538,23 @@ function makeWorkingDirHandler(deps) {
 function sendUnexpected(res, err, label) {
   console.error(`[Launcher routes] ${label}:`, err);
   if (res.headersSent) return;
-  res.status(500).json({ error: "INTERNAL_ERROR", code: "INTERNAL_ERROR", message: label });
+  const detail = err instanceof Error ? err.message : String(err);
+  if (detail.includes(REAPER_NOT_FOUND_MARKER)) {
+    res.status(500).json({
+      error: "INTERNAL_ERROR",
+      code: LAUNCHER_ERROR_REAPER_NOT_FOUND,
+      message: "Claude launcher binary missing \u2014 reinstall Tandem to restore it."
+    });
+    return;
+  }
+  const truncated = detail.length > MAX_ERROR_DETAIL ? `${detail.slice(0, MAX_ERROR_DETAIL)}\u2026` : detail;
+  res.status(500).json({
+    error: "INTERNAL_ERROR",
+    code: "INTERNAL_ERROR",
+    message: truncated || label
+  });
 }
-var gate, inflight;
+var gate, inflight, MAX_ERROR_DETAIL;
 var init_api_routes3 = __esm({
   "src/server/launcher/api-routes.ts"() {
     "use strict";
@@ -131512,6 +131569,7 @@ var init_api_routes3 = __esm({
       startFresh: false,
       workingDirectory: false
     };
+    MAX_ERROR_DETAIL = 300;
   }
 });
 
@@ -131741,8 +131799,8 @@ function getFramesFromEvent(event) {
   }
   return void 0;
 }
-function normalizeStackTracePath(path30) {
-  let filename = path30?.startsWith("file://") ? path30.slice(7) : path30;
+function normalizeStackTracePath(path31) {
+  let filename = path31?.startsWith("file://") ? path31.slice(7) : path31;
   if (filename?.match(/\/[A-Z]:/)) {
     filename = filename.slice(1);
   }
@@ -132237,10 +132295,10 @@ function getCrypto() {
 function getRandomByte() {
   return safeMathRandom() * 16;
 }
-function uuid4(crypto8 = getCrypto()) {
+function uuid4(crypto9 = getCrypto()) {
   try {
-    if (crypto8?.randomUUID) {
-      return withRandomSafeContext(() => crypto8.randomUUID()).replace(/-/g, "");
+    if (crypto9?.randomUUID) {
+      return withRandomSafeContext(() => crypto9.randomUUID()).replace(/-/g, "");
     }
   } catch {
   }
@@ -133739,8 +133797,8 @@ function isValidProtocol(protocol) {
   return protocol === "http" || protocol === "https";
 }
 function dsnToString(dsn, withPassword = false) {
-  const { host, path: path30, pass, port, projectId, protocol, publicKey } = dsn;
-  return `${protocol}://${publicKey}${withPassword && pass ? `:${pass}` : ""}@${host}${port ? `:${port}` : ""}/${path30 ? `${path30}/` : path30}${projectId}`;
+  const { host, path: path31, pass, port, projectId, protocol, publicKey } = dsn;
+  return `${protocol}://${publicKey}${withPassword && pass ? `:${pass}` : ""}@${host}${port ? `:${port}` : ""}/${path31 ? `${path31}/` : path31}${projectId}`;
 }
 function dsnFromString(str) {
   const match = DSN_REGEX.exec(str);
@@ -133751,11 +133809,11 @@ function dsnFromString(str) {
     return void 0;
   }
   const [protocol, publicKey, pass = "", host = "", port = "", lastPath = ""] = match.slice(1);
-  let path30 = "";
+  let path31 = "";
   let projectId = lastPath;
   const split = projectId.split("/");
   if (split.length > 1) {
-    path30 = split.slice(0, -1).join("/");
+    path31 = split.slice(0, -1).join("/");
     projectId = split.pop();
   }
   if (projectId) {
@@ -133764,7 +133822,7 @@ function dsnFromString(str) {
       projectId = projectMatch[0];
     }
   }
-  return dsnFromComponents({ host, pass, path: path30, projectId, port, protocol, publicKey });
+  return dsnFromComponents({ host, pass, path: path31, projectId, port, protocol, publicKey });
 }
 function dsnFromComponents(components) {
   return {
@@ -135876,9 +135934,9 @@ function stripUrlQueryAndFragment(urlPath) {
   return urlPath.split(/[?#]/, 1)[0];
 }
 function getSanitizedUrlString(url) {
-  const { protocol, host, path: path30 } = url;
+  const { protocol, host, path: path31 } = url;
   const filteredHost = host?.replace(/^.*@/, "[filtered]:[filtered]@").replace(/(:80)$/, "").replace(/(:443)$/, "") || "";
-  return `${protocol ? `${protocol}://` : ""}${filteredHost}${path30}`;
+  return `${protocol ? `${protocol}://` : ""}${filteredHost}${path31}`;
 }
 function stripDataUrlContent(url, includeDataPrefix = true) {
   if (url.startsWith("data:")) {
@@ -140284,12 +140342,12 @@ function resolve4(...args2) {
   let resolvedPath = "";
   let resolvedAbsolute = false;
   for (let i = args2.length - 1; i >= -1 && !resolvedAbsolute; i--) {
-    const path30 = i >= 0 ? args2[i] : "/";
-    if (!path30) {
+    const path31 = i >= 0 ? args2[i] : "/";
+    if (!path31) {
       continue;
     }
-    resolvedPath = `${path30}/${resolvedPath}`;
-    resolvedAbsolute = path30.charAt(0) === "/";
+    resolvedPath = `${path31}/${resolvedPath}`;
+    resolvedAbsolute = path31.charAt(0) === "/";
   }
   resolvedPath = normalizeArray(
     resolvedPath.split("/").filter((p) => !!p),
@@ -140335,8 +140393,8 @@ function relative(from3, to) {
   outputParts = outputParts.concat(toParts.slice(samePartsLength));
   return outputParts.join("/");
 }
-function dirname4(path30) {
-  const result2 = splitPath(path30);
+function dirname4(path31) {
+  const result2 = splitPath(path31);
   const root3 = result2[0] || "";
   let dir = result2[1];
   if (!root3 && !dir) {
@@ -140347,8 +140405,8 @@ function dirname4(path30) {
   }
   return root3 + dir;
 }
-function basename2(path30, ext) {
-  let f = splitPath(path30)[2] || "";
+function basename2(path31, ext) {
+  let f = splitPath(path31)[2] || "";
   if (ext && f.slice(ext.length * -1) === ext) {
     f = f.slice(0, f.length - ext.length);
   }
@@ -140850,8 +140908,8 @@ function flattenIssue(issue2) {
     unionErrors: "unionErrors" in issue2 ? JSON.stringify(issue2.unionErrors) : void 0
   };
 }
-function flattenIssuePath(path30) {
-  return path30.map((p) => {
+function flattenIssuePath(path31) {
+  return path31.map((p) => {
     if (typeof p === "number") {
       return "<array>";
     } else {
@@ -145506,12 +145564,12 @@ function captureIfError(nextResult) {
 }
 function trpcMiddleware(options = {}) {
   return async function(opts) {
-    const { path: path30, type: type3, next, rawInput, getRawInput } = opts;
+    const { path: path31, type: type3, next, rawInput, getRawInput } = opts;
     const client = getClient();
     const clientOptions = client?.getOptions();
     const dataCollection = client?.getDataCollectionOptions();
     const trpcContext = {
-      procedure_path: path30,
+      procedure_path: path31,
       procedure_type: type3
     };
     setNormalizationDepthOverrideHint(
@@ -145536,7 +145594,7 @@ function trpcMiddleware(options = {}) {
       scope.setContext("trpc", trpcContext);
       return startSpanManual(
         {
-          name: `trpc/${path30}`,
+          name: `trpc/${path31}`,
           op: "rpc.server",
           attributes: {
             [SEMANTIC_ATTRIBUTE_SENTRY_SOURCE]: "route",
@@ -146806,7 +146864,7 @@ function getActualMatchedRoute(req, constructedRoute) {
   if (layersStore.length === 0) {
     return void 0;
   }
-  if (layersStore.every((path30) => path30 === "/")) {
+  if (layersStore.every((path31) => path31 === "/")) {
     return req.originalUrl === "/" ? "/" : void 0;
   }
   if (constructedRoute === "*") {
@@ -146822,11 +146880,11 @@ function getActualMatchedRoute(req, constructedRoute) {
 function getConstructedRoute(req) {
   const layersStore = getStoredLayers(req);
   let constructedRoute = "";
-  for (const path30 of layersStore) {
-    if (path30 === "/" || path30 === "/*") {
+  for (const path31 of layersStore) {
+    if (path31 === "/" || path31 === "/*") {
       continue;
     }
-    constructedRoute += !constructedRoute || constructedRoute.endsWith("/") ? path30 : `/${path30}`;
+    constructedRoute += !constructedRoute || constructedRoute.endsWith("/") ? path31 : `/${path31}`;
   }
   return constructedRoute.replace(/\/{2,}/g, "/");
 }
@@ -146875,15 +146933,15 @@ var init_utils11 = __esm({
         };
       }
     };
-    getRouterPath = (path30, layer) => {
+    getRouterPath = (path31, layer) => {
       const stackLayer = Array.isArray(layer.handle?.stack) ? layer.handle?.stack?.[0] : void 0;
       if (stackLayer?.route?.path) {
-        return `${path30}${stackLayer.route.path}`;
+        return `${path31}${stackLayer.route.path}`;
       }
       if (stackLayer && Array.isArray(stackLayer?.handle?.stack)) {
-        return getRouterPath(path30, stackLayer);
+        return getRouterPath(path31, stackLayer);
       }
-      return path30;
+      return path31;
     };
     isLayerIgnored = (name2, type3, config4) => {
       if (Array.isArray(config4?.ignoreLayersType) && config4?.ignoreLayersType?.includes(type3)) {
@@ -147480,8 +147538,8 @@ function getRequestUrlObject(requestOptions) {
   const hostHeader = requestOptions.headers?.host && String(requestOptions.headers?.host);
   const hostname3 = hostHeader || requestOptions.hostname || requestOptions.host || "";
   const port = !requestOptions.port || requestOptions.port === 80 || requestOptions.port === 443 || /^(.*):(\d+)$/.test(hostname3) ? "" : `:${requestOptions.port}`;
-  const path30 = requestOptions.path ? requestOptions.path : "/";
-  return new URL(path30, `${protocol}//${hostname3}${port}`);
+  const path31 = requestOptions.path ? requestOptions.path : "/";
+  return new URL(path31, `${protocol}//${hostname3}${port}`);
 }
 function getRequestUrlFromClientRequest(request3) {
   return String(getRequestUrl(getRequestOptions(request3)));
@@ -148248,11 +148306,11 @@ function shouldIgnoreSpansForIncomingRequest(request3, {
   return false;
 }
 function isStaticAssetRequest(urlPath) {
-  const path30 = stripUrlQueryAndFragment(urlPath);
-  if (path30.match(/\.(ico|png|jpg|jpeg|gif|svg|css|js|woff|woff2|ttf|eot|webp|avif)$/)) {
+  const path31 = stripUrlQueryAndFragment(urlPath);
+  if (path31.match(/\.(ico|png|jpg|jpeg|gif|svg|css|js|woff|woff2|ttf|eot|webp|avif)$/)) {
     return true;
   }
-  if (path30.match(/^\/(robots\.txt|sitemap\.xml|manifest\.json|browserconfig\.xml)$/)) {
+  if (path31.match(/^\/(robots\.txt|sitemap\.xml|manifest\.json|browserconfig\.xml)$/)) {
     return true;
   }
   return false;
@@ -150729,19 +150787,19 @@ var require_module_details_from_path = __commonJS({
           basedir += segments[i] + sep4;
         }
       }
-      var path30 = "";
+      var path31 = "";
       var lastSegmentIndex = segments.length - 1;
       for (var i2 = index2 + offset; i2 <= lastSegmentIndex; i2++) {
         if (i2 === lastSegmentIndex) {
-          path30 += segments[i2];
+          path31 += segments[i2];
         } else {
-          path30 += segments[i2] + sep4;
+          path31 += segments[i2] + sep4;
         }
       }
       return {
         name: name2,
         basedir,
-        path: path30
+        path: path31
       };
     };
   }
@@ -150751,7 +150809,7 @@ var require_module_details_from_path = __commonJS({
 var require_require_in_the_middle = __commonJS({
   "node_modules/require-in-the-middle/index.js"(exports3, module3) {
     "use strict";
-    var path30 = __require("path");
+    var path31 = __require("path");
     var Module = __require("module");
     var debug4 = require_src()("require-in-the-middle");
     var moduleDetailsFromPath = require_module_details_from_path();
@@ -150896,7 +150954,7 @@ var require_require_in_the_middle = __commonJS({
           }
           moduleName = filename;
         } else if (hasWhitelist === true && modules.includes(filename)) {
-          const parsedPath = path30.parse(filename);
+          const parsedPath = path31.parse(filename);
           moduleName = parsedPath.name;
           basedir = parsedPath.dir;
         } else {
@@ -150934,7 +150992,7 @@ var require_require_in_the_middle = __commonJS({
             }
             if (res !== filename) {
               if (internals === true) {
-                moduleName = moduleName + path30.sep + path30.relative(basedir, filename);
+                moduleName = moduleName + path31.sep + path31.relative(basedir, filename);
                 debug4("preparing to process require of internal file: %s", moduleName);
               } else {
                 debug4("ignoring require of non-main module file: %s", res);
@@ -150970,8 +151028,8 @@ var require_require_in_the_middle = __commonJS({
       }
     };
     function resolveModuleName(stat2) {
-      const normalizedPath = path30.sep !== "/" ? stat2.path.split(path30.sep).join("/") : stat2.path;
-      return path30.posix.join(stat2.name, normalizedPath).replace(normalize5, "");
+      const normalizedPath = path31.sep !== "/" ? stat2.path.split(path31.sep).join("/") : stat2.path;
+      return path31.posix.join(stat2.name, normalizedPath).replace(normalize5, "");
     }
   }
 });
@@ -151048,9 +151106,9 @@ var init_ModuleNameTrie = __esm({
 });
 
 // node_modules/@opentelemetry/instrumentation/build/esm/platform/node/RequireInTheMiddleSingleton.js
-import * as path26 from "path";
+import * as path27 from "path";
 function normalizePathSeparators(moduleNameOrPath) {
-  return path26.sep !== ModuleNameSeparator ? moduleNameOrPath.split(path26.sep).join(ModuleNameSeparator) : moduleNameOrPath;
+  return path27.sep !== ModuleNameSeparator ? moduleNameOrPath.split(path27.sep).join(ModuleNameSeparator) : moduleNameOrPath;
 }
 var import_require_in_the_middle, isMocha, RequireInTheMiddleSingleton;
 var init_RequireInTheMiddleSingleton = __esm({
@@ -151179,7 +151237,7 @@ var require_register = __commonJS({
 var require_import_in_the_middle = __commonJS({
   "node_modules/import-in-the-middle/index.js"(exports3, module3) {
     "use strict";
-    var path30 = __require("path");
+    var path31 = __require("path");
     var moduleDetailsFromPath = require_module_details_from_path();
     var { fileURLToPath: fileURLToPath6 } = __require("url");
     var { MessageChannel: MessageChannel2 } = __require("worker_threads");
@@ -151298,7 +151356,7 @@ var require_import_in_the_middle = __commonJS({
               } else if (baseDir.endsWith(specifiers.get(loadUrl)) || isTurbopackSpecifier(specifiers.get(loadUrl), baseDir)) {
                 callHookFn(hookFn, namespace, name2, baseDir);
               } else if (internals) {
-                const internalPath = name2 + path30.sep + path30.relative(baseDir, filePath);
+                const internalPath = name2 + path31.sep + path31.relative(baseDir, filePath);
                 callHookFn(hookFn, namespace, internalPath, baseDir);
               }
             } else if (matchArg === specifier) {
@@ -151348,7 +151406,7 @@ var init_utils13 = __esm({
 });
 
 // node_modules/@opentelemetry/instrumentation/build/esm/platform/node/instrumentation.js
-import * as path27 from "path";
+import * as path28 from "path";
 import { types as utilTypes } from "util";
 import { readFileSync as readFileSync4 } from "fs";
 function isSupported(supportedVersions9, version3, includePrerelease) {
@@ -151461,7 +151519,7 @@ var init_instrumentation2 = __esm({
       }
       _extractPackageVersion(baseDir) {
         try {
-          const json = readFileSync4(path27.join(baseDir, "package.json"), {
+          const json = readFileSync4(path28.join(baseDir, "package.json"), {
             encoding: "utf8"
           });
           const version3 = JSON.parse(json).version;
@@ -151503,7 +151561,7 @@ var init_instrumentation2 = __esm({
           return exports3;
         }
         const files2 = module3.files ?? [];
-        const normalizedName = path27.normalize(name2);
+        const normalizedName = path28.normalize(name2);
         const supportedFileInstrumentations = files2.filter((f) => f.name === normalizedName && isSupported(f.supportedVersions, version3, module3.includePrerelease));
         return supportedFileInstrumentations.reduce((patchedExports, file) => {
           file.moduleExports = patchedExports;
@@ -151549,8 +151607,8 @@ var init_instrumentation2 = __esm({
         this._warnOnPreloadedModules();
         for (const module3 of this._modules) {
           const hookFn = (exports3, name2, baseDir) => {
-            if (!baseDir && path27.isAbsolute(name2)) {
-              const parsedPath = path27.parse(name2);
+            if (!baseDir && path28.isAbsolute(name2)) {
+              const parsedPath = path28.parse(name2);
               name2 = parsedPath.name;
               baseDir = parsedPath.dir;
             }
@@ -151559,7 +151617,7 @@ var init_instrumentation2 = __esm({
           const onRequire = (exports3, name2, baseDir) => {
             return this._onRequire(module3, exports3, name2, baseDir);
           };
-          const hook = path27.isAbsolute(module3.name) ? new import_require_in_the_middle2.Hook([module3.name], { internals: true }, onRequire) : this._requireInTheMiddleSingleton.register(module3.name, onRequire);
+          const hook = path28.isAbsolute(module3.name) ? new import_require_in_the_middle2.Hook([module3.name], { internals: true }, onRequire) : this._requireInTheMiddleSingleton.register(module3.name, onRequire);
           this._hooks.push(hook);
           const esmHook = new import_import_in_the_middle.Hook([module3.name], { internals: true }, hookFn);
           this._hooks.push(esmHook);
@@ -152782,11 +152840,11 @@ function isKnownPrefetchRequest2(req) {
   return req.headers["next-router-prefetch"] === "1";
 }
 function isStaticAssetRequest2(urlPath) {
-  const path30 = stripUrlQueryAndFragment(urlPath);
-  if (path30.match(/\.(ico|png|jpg|jpeg|gif|svg|css|js|woff|woff2|ttf|eot|webp|avif)$/)) {
+  const path31 = stripUrlQueryAndFragment(urlPath);
+  if (path31.match(/\.(ico|png|jpg|jpeg|gif|svg|css|js|woff|woff2|ttf|eot|webp|avif)$/)) {
     return true;
   }
-  if (path30.match(/^\/(robots\.txt|sitemap\.xml|manifest\.json|browserconfig\.xml)$/)) {
+  if (path31.match(/^\/(robots\.txt|sitemap\.xml|manifest\.json|browserconfig\.xml)$/)) {
     return true;
   }
   return false;
@@ -153326,19 +153384,19 @@ function getBreadcrumbData(request3) {
     return {};
   }
 }
-function getAbsoluteUrl2(origin, path30 = "/") {
+function getAbsoluteUrl2(origin, path31 = "/") {
   try {
-    const url = new URL(path30, origin);
+    const url = new URL(path31, origin);
     return url.toString();
   } catch {
     const url = `${origin}`;
-    if (url.endsWith("/") && path30.startsWith("/")) {
-      return `${url}${path30.slice(1)}`;
+    if (url.endsWith("/") && path31.startsWith("/")) {
+      return `${url}${path31.slice(1)}`;
     }
-    if (!url.endsWith("/") && !path30.startsWith("/")) {
-      return `${url}/${path30}`;
+    if (!url.endsWith("/") && !path31.startsWith("/")) {
+      return `${url}/${path31}`;
     }
-    return `${url}${path30}`;
+    return `${url}${path31}`;
   }
 }
 var SENTRY_TRACE_HEADER, SENTRY_BAGGAGE_HEADER, W3C_TRACEPARENT_HEADER;
@@ -156905,12 +156963,12 @@ function emplace(map5, key, contents) {
   }
   return value;
 }
-function shouldSkipContextLinesForFile(path30) {
-  if (path30.startsWith("node:")) return true;
-  if (path30.endsWith(".min.js")) return true;
-  if (path30.endsWith(".min.cjs")) return true;
-  if (path30.endsWith(".min.mjs")) return true;
-  if (path30.startsWith("data:")) return true;
+function shouldSkipContextLinesForFile(path31) {
+  if (path31.startsWith("node:")) return true;
+  if (path31.endsWith(".min.js")) return true;
+  if (path31.endsWith(".min.cjs")) return true;
+  if (path31.endsWith(".min.mjs")) return true;
+  if (path31.startsWith("data:")) return true;
   return false;
 }
 function shouldSkipContextLinesForFrame(frame) {
@@ -156958,9 +157016,9 @@ function makeLineReaderRanges(lines, linecontext) {
   }
   return out;
 }
-function getContextLinesFromFile(path30, ranges, output) {
+function getContextLinesFromFile(path31, ranges, output) {
   return new Promise((resolve5, _reject) => {
-    const stream = createReadStream(path30);
+    const stream = createReadStream(path31);
     const lineReaded = createInterface({
       input: stream
     });
@@ -156978,8 +157036,8 @@ function getContextLinesFromFile(path30, ranges, output) {
     let rangeStart = range3[0];
     let rangeEnd = range3[1];
     function onStreamError(e) {
-      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path30, 1);
-      DEBUG_BUILD2 && debug.error(`Failed to read file: ${path30}. Error: ${e}`);
+      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path31, 1);
+      DEBUG_BUILD2 && debug.error(`Failed to read file: ${path31}. Error: ${e}`);
       lineReaded.close();
       lineReaded.removeAllListeners();
       destroyStreamAndResolve();
@@ -157670,8 +157728,8 @@ function collectRequireModules() {
   const paths = getRequireCachePaths();
   const infos = {};
   const seen = /* @__PURE__ */ new Set();
-  paths.forEach((path30) => {
-    let dir = path30;
+  paths.forEach((path31) => {
+    let dir = path31;
     const updir = () => {
       const orig = dir;
       dir = dirname5(orig);
@@ -158618,8 +158676,8 @@ var init_spotlight2 = __esm({
 
 // node_modules/@sentry/node-core/build/esm/utils/module.js
 import { posix, sep as sep3 } from "path";
-function normalizeWindowsPath(path30) {
-  return path30.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path31) {
+  return path31.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 function createGetModuleFromFilename(basePath = process.argv[1] ? dirname4(process.argv[1]) : process.cwd(), isWindows = sep3 === "\\") {
   const normalizedBase = isWindows ? normalizeWindowsPath(basePath) : basePath;
@@ -160421,15 +160479,15 @@ var init_undici = __esm({
 });
 
 // node_modules/@sentry/node/build/esm/integrations/node-fetch/index.js
-function getAbsoluteUrl3(origin, path30 = "/") {
+function getAbsoluteUrl3(origin, path31 = "/") {
   const url = `${origin}`;
-  if (url.endsWith("/") && path30.startsWith("/")) {
-    return `${url}${path30.slice(1)}`;
+  if (url.endsWith("/") && path31.startsWith("/")) {
+    return `${url}${path31.slice(1)}`;
   }
-  if (!url.endsWith("/") && !path30.startsWith("/")) {
-    return `${url}/${path30}`;
+  if (!url.endsWith("/") && !path31.startsWith("/")) {
+    return `${url}/${path31}`;
   }
-  return `${url}${path30}`;
+  return `${url}${path31}`;
 }
 function _shouldInstrumentSpans(options, clientOptions = {}) {
   return typeof options.spans === "boolean" ? options.spans : !clientOptions.skipOpenTelemetrySetup && hasSpansEnabled(clientOptions);
@@ -160651,18 +160709,18 @@ function splitTwoLevels(functionName) {
     return [functionName];
   }
 }
-function indexFs(fs19, member) {
+function indexFs(fs20, member) {
   if (!member) throw new Error(JSON.stringify({ member }));
   const splitResult = splitTwoLevels(member);
   const [functionName1, functionName2] = splitResult;
   if (functionName2) {
     return {
-      objectToPatch: fs19[functionName1],
+      objectToPatch: fs20[functionName1],
       functionNameToPatch: functionName2
     };
   } else {
     return {
-      objectToPatch: fs19,
+      objectToPatch: fs20,
       functionNameToPatch: functionName1
     };
   }
@@ -160698,16 +160756,16 @@ var init_instrumentation3 = __esm({
           new InstrumentationNodeModuleDefinition(
             "fs",
             ["*"],
-            (fs19) => {
+            (fs20) => {
               for (const fName of SYNC_FUNCTIONS) {
-                const { objectToPatch, functionNameToPatch } = indexFs(fs19, fName);
+                const { objectToPatch, functionNameToPatch } = indexFs(fs20, fName);
                 if (isWrapped(objectToPatch[functionNameToPatch])) {
                   this._unwrap(objectToPatch, functionNameToPatch);
                 }
                 this._wrap(objectToPatch, functionNameToPatch, this._patchSyncFunction.bind(this, fName));
               }
               for (const fName of CALLBACK_FUNCTIONS) {
-                const { objectToPatch, functionNameToPatch } = indexFs(fs19, fName);
+                const { objectToPatch, functionNameToPatch } = indexFs(fs20, fName);
                 if (isWrapped(objectToPatch[functionNameToPatch])) {
                   this._unwrap(objectToPatch, functionNameToPatch);
                 }
@@ -160722,30 +160780,30 @@ var init_instrumentation3 = __esm({
                 this._wrap(objectToPatch, functionNameToPatch, this._patchCallbackFunction.bind(this, fName));
               }
               for (const fName of PROMISE_FUNCTIONS) {
-                if (isWrapped(fs19.promises[fName])) {
-                  this._unwrap(fs19.promises, fName);
+                if (isWrapped(fs20.promises[fName])) {
+                  this._unwrap(fs20.promises, fName);
                 }
-                this._wrap(fs19.promises, fName, this._patchPromiseFunction.bind(this, fName));
+                this._wrap(fs20.promises, fName, this._patchPromiseFunction.bind(this, fName));
               }
-              return fs19;
+              return fs20;
             },
-            (fs19) => {
-              if (fs19 === void 0) return;
+            (fs20) => {
+              if (fs20 === void 0) return;
               for (const fName of SYNC_FUNCTIONS) {
-                const { objectToPatch, functionNameToPatch } = indexFs(fs19, fName);
+                const { objectToPatch, functionNameToPatch } = indexFs(fs20, fName);
                 if (isWrapped(objectToPatch[functionNameToPatch])) {
                   this._unwrap(objectToPatch, functionNameToPatch);
                 }
               }
               for (const fName of CALLBACK_FUNCTIONS) {
-                const { objectToPatch, functionNameToPatch } = indexFs(fs19, fName);
+                const { objectToPatch, functionNameToPatch } = indexFs(fs20, fName);
                 if (isWrapped(objectToPatch[functionNameToPatch])) {
                   this._unwrap(objectToPatch, functionNameToPatch);
                 }
               }
               for (const fName of PROMISE_FUNCTIONS) {
-                if (isWrapped(fs19.promises[fName])) {
-                  this._unwrap(fs19.promises, fName);
+                if (isWrapped(fs20.promises[fName])) {
+                  this._unwrap(fs20.promises, fName);
                 }
               }
             }
@@ -160903,8 +160961,8 @@ var init_instrumentation3 = __esm({
           }
         };
         const functionWithOriginalProperties = patchedFunctionWithOriginalProperties(patchedFunction, original);
-        const promisified = function(path30) {
-          return new Promise((resolve5) => functionWithOriginalProperties(path30, resolve5));
+        const promisified = function(path31) {
+          return new Promise((resolve5) => functionWithOriginalProperties(path31, resolve5));
         };
         Object.defineProperty(promisified, "name", { value: functionName });
         Object.defineProperty(functionWithOriginalProperties, promisify5.custom, {
@@ -162172,23 +162230,23 @@ function addSpanSource(span, loc, allowValues, start, end) {
   const source = getSourceFromLocation(loc, allowValues, start, end);
   span.setAttribute(AttributeNames2.SOURCE, source);
 }
-function createFieldIfNotExists(tracer, getConfig3, contextValue, info3, path30) {
-  let field = getField(contextValue, path30);
+function createFieldIfNotExists(tracer, getConfig3, contextValue, info3, path31) {
+  let field = getField(contextValue, path31);
   if (field) {
     return { field, spanAdded: false };
   }
   const config4 = getConfig3();
-  const parentSpan = config4.flatResolveSpans ? getRootSpan2(contextValue) : getParentFieldSpan(contextValue, path30);
+  const parentSpan = config4.flatResolveSpans ? getRootSpan2(contextValue) : getParentFieldSpan(contextValue, path31);
   field = {
-    span: createResolverSpan(tracer, getConfig3, contextValue, info3, path30, parentSpan)
+    span: createResolverSpan(tracer, getConfig3, contextValue, info3, path31, parentSpan)
   };
-  addField(contextValue, path30, field);
+  addField(contextValue, path31, field);
   return { field, spanAdded: true };
 }
-function createResolverSpan(tracer, getConfig3, contextValue, info3, path30, parentSpan) {
+function createResolverSpan(tracer, getConfig3, contextValue, info3, path31, parentSpan) {
   const attributes = {
     [AttributeNames2.FIELD_NAME]: info3.fieldName,
-    [AttributeNames2.FIELD_PATH]: path30.join("."),
+    [AttributeNames2.FIELD_PATH]: path31.join("."),
     [AttributeNames2.FIELD_TYPE]: info3.returnType.toString(),
     [AttributeNames2.PARENT_NAME]: info3.parentType.name
   };
@@ -162222,15 +162280,15 @@ function getOperation(document4, operationName) {
     return document4.definitions.find((definition3) => OPERATION_VALUES.indexOf(definition3?.operation) !== -1);
   }
 }
-function addField(contextValue, path30, field) {
-  return contextValue[OTEL_GRAPHQL_DATA_SYMBOL].fields[path30.join(".")] = field;
+function addField(contextValue, path31, field) {
+  return contextValue[OTEL_GRAPHQL_DATA_SYMBOL].fields[path31.join(".")] = field;
 }
-function getField(contextValue, path30) {
-  return contextValue[OTEL_GRAPHQL_DATA_SYMBOL].fields[path30.join(".")];
+function getField(contextValue, path31) {
+  return contextValue[OTEL_GRAPHQL_DATA_SYMBOL].fields[path31.join(".")];
 }
-function getParentFieldSpan(contextValue, path30) {
-  for (let i = path30.length - 1; i > 0; i--) {
-    const field = getField(contextValue, path30.slice(0, i));
+function getParentFieldSpan(contextValue, path31) {
+  for (let i = path31.length - 1; i > 0; i--) {
+    const field = getField(contextValue, path31.slice(0, i));
     if (field) {
       return field.span;
     }
@@ -162240,9 +162298,9 @@ function getParentFieldSpan(contextValue, path30) {
 function getRootSpan2(contextValue) {
   return contextValue[OTEL_GRAPHQL_DATA_SYMBOL].span;
 }
-function pathToArray(mergeItems, path30) {
+function pathToArray(mergeItems, path31) {
   const flattened = [];
-  let curr = path30;
+  let curr = path31;
   while (curr) {
     let key = curr.key;
     if (mergeItems && typeof key === "number") {
@@ -162370,14 +162428,14 @@ function wrapFieldResolver(tracer, getConfig3, fieldResolver, isDefaultResolver
     if (!contextValue[OTEL_GRAPHQL_DATA_SYMBOL]) {
       return fieldResolver.call(this, source, args2, contextValue, info3);
     }
-    const path30 = pathToArray(config4.mergeItems, info3 && info3.path);
-    const depth = path30.filter((item) => typeof item === "string").length;
+    const path31 = pathToArray(config4.mergeItems, info3 && info3.path);
+    const depth = path31.filter((item) => typeof item === "string").length;
     let span;
     let shouldEndSpan = false;
     if (config4.depth >= 0 && config4.depth < depth) {
-      span = getParentFieldSpan(contextValue, path30);
+      span = getParentFieldSpan(contextValue, path31);
     } else {
-      const { field, spanAdded } = createFieldIfNotExists(tracer, getConfig3, contextValue, info3, path30);
+      const { field, spanAdded } = createFieldIfNotExists(tracer, getConfig3, contextValue, info3, path31);
       span = field.span;
       shouldEndSpan = spanAdded;
     }
@@ -167528,10 +167586,10 @@ var init_postgresjs2 = __esm({
           },
           (exports3) => exports3
         );
-        ["src", "cf/src", "cjs/src"].forEach((path30) => {
+        ["src", "cf/src", "cjs/src"].forEach((path31) => {
           module3.files.push(
             new InstrumentationNodeModuleFile(
-              `postgres/${path30}/query.js`,
+              `postgres/${path31}/query.js`,
               SUPPORTED_VERSIONS3,
               this._patchQueryPrototype.bind(this),
               this._unpatchQueryPrototype.bind(this)
@@ -168628,13 +168686,13 @@ var init_instrumentation15 = __esm({
         return function(original) {
           return function wrappedHandler(...args2) {
             if (typeof args2[0] === "string") {
-              const path30 = args2[0];
+              const path31 = args2[0];
               if (args2.length === 1) {
-                return original.apply(this, [path30]);
+                return original.apply(this, [path31]);
               }
               const handlers2 = args2.slice(1);
               return original.apply(this, [
-                path30,
+                path31,
                 ...handlers2.map((handler) => instrumentation._wrapHandler(handler))
               ]);
             }
@@ -168668,13 +168726,13 @@ var init_instrumentation15 = __esm({
         return function(original) {
           return function wrappedHandler(...args2) {
             if (typeof args2[0] === "string") {
-              const path30 = args2[0];
+              const path31 = args2[0];
               if (args2.length === 1) {
-                return original.apply(this, [path30]);
+                return original.apply(this, [path31]);
               }
               const handlers2 = args2.slice(1);
               return original.apply(this, [
-                path30,
+                path31,
                 ...handlers2.map((handler) => instrumentation._wrapHandler(handler))
               ]);
             }
@@ -168694,8 +168752,8 @@ var init_instrumentation15 = __esm({
           if (!instrumentation.isEnabled()) {
             return handler.apply(this, [c, next]);
           }
-          const path30 = c.req.path;
-          const span = instrumentation.tracer.startSpan(path30);
+          const path31 = c.req.path;
+          const span = instrumentation.tracer.startSpan(path31);
           return context.with(trace2.setSpan(context.active(), span), () => {
             return instrumentation._safeExecute(
               () => {
@@ -168705,7 +168763,7 @@ var init_instrumentation15 = __esm({
                     const type3 = instrumentation._determineHandlerType(result22);
                     span.setAttributes({
                       [AttributeNames6.HONO_TYPE]: type3,
-                      [AttributeNames6.HONO_NAME]: type3 === HonoTypes.REQUEST_HANDLER ? path30 : handler.name || "anonymous"
+                      [AttributeNames6.HONO_NAME]: type3 === HonoTypes.REQUEST_HANDLER ? path31 : handler.name || "anonymous"
                     });
                     instrumentation.getConfig().responseHook?.(span);
                     return result22;
@@ -168714,7 +168772,7 @@ var init_instrumentation15 = __esm({
                   const type3 = instrumentation._determineHandlerType(result2);
                   span.setAttributes({
                     [AttributeNames6.HONO_TYPE]: type3,
-                    [AttributeNames6.HONO_NAME]: type3 === HonoTypes.REQUEST_HANDLER ? path30 : handler.name || "anonymous"
+                    [AttributeNames6.HONO_NAME]: type3 === HonoTypes.REQUEST_HANDLER ? path31 : handler.name || "anonymous"
                   });
                   instrumentation.getConfig().responseHook?.(span);
                   return result2;
@@ -168998,11 +169056,11 @@ var init_instrumentation16 = __esm({
         const router = dispatchLayer.router;
         const routesStack = router?.stack ?? [];
         for (const pathLayer of routesStack) {
-          const path30 = pathLayer.path;
+          const path31 = pathLayer.path;
           const pathStack = pathLayer.stack;
           for (let j = 0; j < pathStack.length; j++) {
             const routedMiddleware = pathStack[j];
-            pathStack[j] = this._patchLayer(routedMiddleware, true, path30);
+            pathStack[j] = this._patchLayer(routedMiddleware, true, path31);
           }
         }
         return dispatchLayer;
@@ -173041,7 +173099,7 @@ init_doc_hash();
 init_store();
 init_token_store();
 import { isIP as isIP3 } from "net";
-import path29 from "path";
+import path30 from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
 
 // src/server/bind-check.ts
@@ -173452,10 +173510,10 @@ function assignProp(target, prop, value) {
     configurable: true
   });
 }
-function getElementAtPath(obj2, path30) {
-  if (!path30)
+function getElementAtPath(obj2, path31) {
+  if (!path31)
     return obj2;
-  return path30.reduce((acc, key) => acc?.[key], obj2);
+  return path31.reduce((acc, key) => acc?.[key], obj2);
 }
 function promiseAllObject(promisesObj) {
   const keys4 = Object.keys(promisesObj);
@@ -173775,11 +173833,11 @@ function aborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path30, issues) {
+function prefixIssues(path31, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path30);
+    iss.path.unshift(path31);
     return iss;
   });
 }
@@ -184721,6 +184779,192 @@ init_storage2();
 import { randomUUID as randomUUID10 } from "crypto";
 import { createRequire as createRequire2 } from "module";
 
+// src/server/license/webhook.ts
+import crypto8 from "crypto";
+import fs17 from "fs";
+import path25 from "path";
+
+// src/server/license/grandfather-list.ts
+var GRANDFATHER_EMAILS = /* @__PURE__ */ new Set([
+  "bryan@tandem.chat"
+  // Add actual beta-user emails here before v1.0 grandfathering runs.
+  // Do not add @example.com placeholders — they will match real webhook events.
+]);
+function isGrandfathered(email2) {
+  if (!email2) return false;
+  return GRANDFATHER_EMAILS.has(email2.toLowerCase().trim());
+}
+
+// src/server/license/verifier.ts
+function canonicalObject(obj2) {
+  if (typeof obj2 !== "object" || obj2 === null) {
+    return obj2;
+  }
+  if (Array.isArray(obj2)) {
+    return obj2.map(canonicalObject);
+  }
+  const sortedKeys = Object.keys(obj2).sort();
+  const sortedObj = {};
+  for (const key of sortedKeys) {
+    sortedObj[key] = canonicalObject(obj2[key]);
+  }
+  return sortedObj;
+}
+function canonicalize(obj2) {
+  return JSON.stringify(canonicalObject(obj2));
+}
+
+// src/server/license/webhook.ts
+function getPrivateKey() {
+  if (process.env.TANDEM_PRIVATE_KEY) {
+    return process.env.TANDEM_PRIVATE_KEY;
+  }
+  const localPrivKeyPath = path25.join(process.cwd(), "keys", "tandem-private-key.pem");
+  if (fs17.existsSync(localPrivKeyPath)) {
+    return fs17.readFileSync(localPrivKeyPath, "utf8");
+  }
+  return null;
+}
+var MAX_WEBHOOK_AGE_S = 300;
+function verifyPolarSignature(payload, signatureHeader, secret) {
+  if (!signatureHeader) return false;
+  const parts = signatureHeader.split(",");
+  const tPart = parts.find((p) => p.startsWith("t="));
+  const v1Part = parts.find((p) => p.startsWith("v1="));
+  if (!tPart || !v1Part) return false;
+  const timestamp = tPart.split("=")[1];
+  const signature = v1Part.split("=")[1];
+  if (Math.abs(Date.now() / 1e3 - parseInt(timestamp, 10)) > MAX_WEBHOOK_AGE_S) return false;
+  const signedPayload = `${timestamp}.${payload}`;
+  const expectedSignature = crypto8.createHmac("sha256", secret).update(signedPayload).digest("hex");
+  try {
+    return crypto8.timingSafeEqual(
+      Buffer.from(signature, "hex"),
+      Buffer.from(expectedSignature, "hex")
+    );
+  } catch {
+    return false;
+  }
+}
+function verifyPaddleSignature(payload, signatureHeader, secret) {
+  if (!signatureHeader) return false;
+  const parts = signatureHeader.split(";");
+  const tsPart = parts.find((p) => p.startsWith("ts="));
+  const h1Part = parts.find((p) => p.startsWith("h1="));
+  if (!tsPart || !h1Part) return false;
+  const timestamp = tsPart.split("=")[1];
+  const signature = h1Part.split("=")[1];
+  if (Math.abs(Date.now() / 1e3 - parseInt(timestamp, 10)) > MAX_WEBHOOK_AGE_S) return false;
+  const signedPayload = `${timestamp}:${payload}`;
+  const expectedSignature = crypto8.createHmac("sha256", secret).update(signedPayload).digest("hex");
+  try {
+    return crypto8.timingSafeEqual(
+      Buffer.from(signature, "hex"),
+      Buffer.from(expectedSignature, "hex")
+    );
+  } catch {
+    return false;
+  }
+}
+async function handleLicenseWebhook(req, res) {
+  const isDev = process.env.NODE_ENV === "development";
+  try {
+    const rawBody = Buffer.isBuffer(req.body) ? req.body.toString("utf8") : "";
+    const polarSecret = process.env.POLAR_WEBHOOK_SECRET;
+    const paddleSecret = process.env.PADDLE_WEBHOOK_SECRET;
+    let isVerified = false;
+    let customerName = "";
+    let customerEmail = "";
+    let isTestPurchase = false;
+    const polarSig = req.headers["webhook-signature"] || req.headers["stripe-signature"];
+    const paddleSig = req.headers["paddle-signature"];
+    if (polarSig && polarSecret) {
+      isVerified = verifyPolarSignature(rawBody, polarSig, polarSecret);
+    } else if (paddleSig && paddleSecret) {
+      isVerified = verifyPaddleSignature(rawBody, paddleSig, paddleSecret);
+    } else if (isDev) {
+      isVerified = true;
+    }
+    if (!isVerified) {
+      res.status(401).json({ error: "Invalid webhook signature" });
+      return;
+    }
+    let payload;
+    try {
+      payload = rawBody ? JSON.parse(rawBody) : null;
+    } catch {
+      res.status(400).json({ error: "Invalid JSON body" });
+      return;
+    }
+    if (!payload || !payload.event) {
+      res.status(400).json({ error: "Invalid payload: missing event type" });
+      return;
+    }
+    if (payload.event === "order.created" || payload.event === "subscription.created") {
+      const order2 = payload.data;
+      customerName = order2?.customer?.name || order2?.user?.name || "Valued Customer";
+      customerEmail = order2?.customer?.email || order2?.user?.email;
+      isTestPurchase = order2?.is_test || false;
+    } else if (payload.event === "transaction.completed") {
+      const transaction = payload.data;
+      customerName = transaction?.customer?.name || "Valued Customer";
+      customerEmail = transaction?.customer?.email;
+      isTestPurchase = transaction?.billing_details?.is_test || false;
+    } else if (isDev) {
+      customerName = payload.name || "Test User";
+      customerEmail = payload.email;
+      isTestPurchase = true;
+    } else {
+      res.status(200).json({ status: "ignored", event: payload.event });
+      return;
+    }
+    if (!customerEmail) {
+      res.status(400).json({ error: "Customer email missing from webhook payload" });
+      return;
+    }
+    const privateKey = getPrivateKey();
+    if (!privateKey) {
+      console.error("Webhook Error: Private key not configured for signing licenses.");
+      res.status(500).json({ error: "Licensing server configuration error: missing private key" });
+      return;
+    }
+    const type3 = isGrandfathered(customerEmail) ? "grandfathered" : "personal";
+    const id2 = crypto8.randomUUID();
+    const createdAt = (/* @__PURE__ */ new Date()).toISOString();
+    const expires = /* @__PURE__ */ new Date();
+    expires.setFullYear(expires.getFullYear() + 1);
+    const expiresAt = type3 === "grandfathered" ? null : expires.toISOString();
+    const metadata = {
+      id: id2,
+      name: customerName,
+      email: customerEmail,
+      type: type3,
+      createdAt,
+      expiresAt,
+      version: "1.0"
+    };
+    const dataStr = canonicalize(metadata);
+    const signature = crypto8.sign(null, Buffer.from(dataStr), privateKey);
+    const signedLicense = {
+      metadata,
+      signature: signature.toString("hex")
+    };
+    const base64License = Buffer.from(JSON.stringify(signedLicense)).toString("base64");
+    console.error(`[license] generated for ${customerEmail} (ID: ${id2})`);
+    if (process.env.RESEND_API_KEY) {
+      console.error(`[license] dispatching to ${customerEmail}`);
+    }
+    res.status(200).json({
+      status: "success",
+      license: base64License,
+      test: isTestPurchase
+    });
+  } catch (err) {
+    console.error("Webhook processing error:", err);
+    res.status(500).json({ error: `Webhook internal error: ${err.message}` });
+  }
+}
+
 // src/server/models/api-routes.ts
 init_contract();
 init_api_routes2();
@@ -185308,7 +185552,7 @@ function registerNavigationTools(server) {
 
 // src/server/mcp/server.ts
 var esmRequire2 = createRequire2(import.meta.url);
-var APP_VERSION = true ? "0.14.0" : _readVersionFromDisk();
+var APP_VERSION = true ? "0.14.2" : _readVersionFromDisk();
 var MCP_SDK_VERSION = true ? "1.27.1" : "0.0.0-unknown";
 var __dirname3 = dirname3(fileURLToPath4(import.meta.url));
 var CLIENT_DIST = join7(__dirname3, "../client");
@@ -185436,6 +185680,11 @@ async function startMcpServerHttp(port, host = DEFAULT_BIND_HOST, token, resolve
     await currentTransport.handleRequest(req, res, req.body);
     currentTransport = null;
   });
+  app.post(
+    "/webhooks/license",
+    express2.raw({ type: "application/json" }),
+    handleLicenseWebhook
+  );
   app.use("/mcp", authMiddleware);
   app.use("/api", authMiddleware);
   app.get(
@@ -185639,12 +185888,12 @@ async function maybeOpenStartupFile(envPath) {
 }
 
 // src/server/version-check.ts
-import fs18 from "fs/promises";
-import path28 from "path";
+import fs19 from "fs/promises";
+import path29 from "path";
 async function checkVersionChange(currentVersion, versionFilePath) {
   let storedVersion = null;
   try {
-    storedVersion = (await fs18.readFile(versionFilePath, "utf-8")).trim();
+    storedVersion = (await fs19.readFile(versionFilePath, "utf-8")).trim();
   } catch (err) {
     if (err.code !== "ENOENT") {
       console.error("[Tandem] Failed to read last-seen-version:", err);
@@ -185652,8 +185901,8 @@ async function checkVersionChange(currentVersion, versionFilePath) {
   }
   const result2 = storedVersion === null ? "first-install" : storedVersion === currentVersion ? "current" : "upgraded";
   if (result2 !== "current") {
-    await fs18.mkdir(path28.dirname(versionFilePath), { recursive: true });
-    await fs18.writeFile(versionFilePath, currentVersion, "utf-8");
+    await fs19.mkdir(path29.dirname(versionFilePath), { recursive: true });
+    await fs19.writeFile(versionFilePath, currentVersion, "utf-8");
   }
   return result2;
 }
@@ -185945,11 +186194,11 @@ async function main2() {
     } catch (err) {
       console.error(`[Tandem] ${err instanceof Error ? err.message : err} \u2014 proceeding anyway`);
     }
-    const projectRoot = path29.resolve(path29.dirname(fileURLToPath5(import.meta.url)), "../..");
+    const projectRoot = path30.resolve(path30.dirname(fileURLToPath5(import.meta.url)), "../..");
     try {
       const versionStatus = await checkVersionChange(APP_VERSION, LAST_SEEN_VERSION_FILE);
       if (versionStatus === "upgraded") {
-        await openFileByPath(path29.join(projectRoot, "CHANGELOG.md"), { readOnly: true });
+        await openFileByPath(path30.join(projectRoot, "CHANGELOG.md"), { readOnly: true });
         console.error(`[Tandem] Opened CHANGELOG.md (upgraded to v${APP_VERSION})`);
       }
     } catch (err) {
@@ -185962,7 +186211,7 @@ async function main2() {
         console.error("[Tandem] Falling back to welcome.md after TANDEM_OPEN_FILE failure");
       }
       const sampleBase = process.env.TANDEM_DATA_DIR || projectRoot;
-      const samplePath = path29.join(sampleBase, "sample/welcome.md");
+      const samplePath = path30.join(sampleBase, "sample/welcome.md");
       try {
         await openFileByPath(samplePath);
       } catch (err) {